last executing test programs:

1m17.677083369s ago: executing program 2 (id=7674):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r0, 0x29, 0xa, 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x200}, 0x4)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8)
r4 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value={0x0, 0x1}, 0x8)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
socket$inet(0x2, 0x2, 0xfffffffe)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x78, r5, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xff98}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xa}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xb}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg0\x00'}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7346}]}, 0x78}}, 0x40000)

1m17.62695558s ago: executing program 2 (id=7675):
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000440)=@in6={0xa, 0x0, 0x0, @dev, 0xffffffff}, 0x80, 0x0}, 0x20000804)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_int(r1, 0x6, 0x1, 0xfffffffffffffffd, &(0x7f0000000040))
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000000a0000a02e00000061b3b574bafaafd01051a33e7ae0c3ba30", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011000a0101010000000000000000000000007f000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c040000000000000a000a000a01010100000000000000000000000020010000000000000000000000000000ac141439000000000000000000000000fc0200000000000000000000000000003c0400000000000008000200"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180))
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000340)={0x0, @ethernet={0x6, @multicast}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @l2={0x1f, 0x756, @none, 0x5}, 0x6, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)='wg2\x00', 0xb, 0x7, 0x6})
r7 = accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x19)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r6, @ANYBLOB="200025bd7000fddbdf2504000000080004000400000008000300070000004000068008000300e000000114000400fe8000000000000000000000000000aa08000300ac141416080006000800000008000700", @ANYRES32=r8, @ANYBLOB="050002000200000028000180060005004e210000080006000800000014000400fe8000000000000000000000000000bb0800030008000000000200050000002800018014000400000000000000000000000000000000010600010002000000080003000a0101010800040007000000ac44ee2239014e70aef385e500c1ca5a5ae73020d817cbf67ea4602fb9ffb85cf202d13a6f17bce3b354c93f3521d646fd5afb0a58d92565b93d620c9ac3bf64a01a32509be99cc0018b7a68b726a03b3161d5256e9792738a680c59afbd7956bdbc17ea79b595be1d0394"], 0xcc}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001)

1m17.626087041s ago: executing program 2 (id=7676):
socket$kcm(0xa, 0x1, 0x106)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x207ffffe, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
listen(r1, 0x400004)
r2 = socket(0xa, 0x3, 0x3a)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x4, 0x2]}})
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, @remote, @empty, 0x7800, 0x80, 0xfffffffc, 0xdc67}})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', 0x0})
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000280), 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="7307000000000000072000000002060f060008000000000000000f000000000000000500000000000000c204000000f1010700000000000000c20400018001c2040000000800000082"], 0x48)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r7, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000040)=ANY=[@ANYBLOB="fbffff0700"/20], 0x14}, 0x1, 0x0, 0x0, 0x2004d805}, 0x8000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], 0x0, 0x4}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {0x1, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {}, {0xfffffffc}, {}, {}, {0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {0x7}, {}, {}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {0x0, 0xea3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, 0x0, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)

1m17.427155563s ago: executing program 2 (id=7677):
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="9f2c3eadadc71fb1ef1a73286f77b7e132eb3e5cb2eb0100180000000000002024000000241d0698"], &(0x7f0000000a80)=""/161, 0x3e, 0xa1, 0x9}, 0x28)
socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)
readv(r1, 0x0, 0x0)
write$tun(r1, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$NFT_MSG_GETGEN(r2, 0x0, 0x40)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, 0x0, 0x48080)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, 0x0, 0x0)
connect$inet(r3, &(0x7f00000009c0)={0x2, 0x6e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0)
r5 = openat$cgroup_ro(r0, &(0x7f0000000100)='memory.current\x00', 0x0, 0x0)
write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="61b02a3a0820726d00"], 0x9)
r6 = socket$inet6(0xa, 0x3, 0x5)
sendmmsg(r6, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100", @ANYRES64=r6], 0x108}}], 0x2, 0xc040)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0))

1m16.567672062s ago: executing program 2 (id=7687):
r0 = socket(0x10, 0x80002, 0x2000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
clock_gettime(0xa, 0x0)
listen(0xffffffffffffffff, 0x1)
r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001ec0)='ns/time\x00')
unshare(0x2c020400)
ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, 0x0)
recvmmsg(r0, &(0x7f0000003f40), 0x0, 0x100, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
r4 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r4, 0x107, 0xb, 0x0, &(0x7f0000000100)=0x1)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, r6, 0x200, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_int(r7, 0x29, 0x9, 0x0, &(0x7f0000000340))
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000134000000140a03000000000000000000020000000900010073797a3083a70fd4d9080000000008000340000000010900020073797a310000000014000000110001000000000000008d1a8ff9c890d87fff34f68a1e1680f8a4c054235b7e227eacfe1cd33a4dba790dffbec406548295e309d3ad8616d433070d65e1a1fd0d13992555b99cf67a5d5b282a27fd1545f23cf3226d705b121e85c8e9b3e30c71da6682eb4d606013c063cca8673e"], 0x98}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x8044)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000004c0)={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0x40000, 0x40, 0xcc81, 0x100, 0x1, 0x2})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x1c, r10, 0x100, 0x70bd2d, 0x0, {0x7}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}]}, 0x1c}}, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)

1m16.486197565s ago: executing program 2 (id=7688):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
listen(r0, 0x400004) (async)
r1 = socket(0xa, 0x3, 0x3a)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x4, 0x2]}}) (async)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, @remote, @empty, 0x7800, 0x80, 0xfffffffc, 0xdc67}}) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', 0x0})
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c) (async)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) (async)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="7307000000000000072000000002060f060008000000000000000f000000000000000500000000000000c204000000f1010700000000000000c20400018001c2040000000800000082"], 0x48) (async)
setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000300)=0x1000, 0x4) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r6, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000040)={0x14, 0x4, 0xa, 0x101, 0x70bd28, 0x25dfdbff, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x2004d805}, 0x8000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x90)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {0x0, 0xea3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) (async, rerun: 32)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={0x0})
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
socket$inet6_sctp(0xa, 0x1, 0x84)
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r9, &(0x7f0000000000), 0x10) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

1m16.390565917s ago: executing program 32 (id=7688):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
listen(r0, 0x400004) (async)
r1 = socket(0xa, 0x3, 0x3a)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x4, 0x2]}}) (async)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, @remote, @empty, 0x7800, 0x80, 0xfffffffc, 0xdc67}}) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', 0x0})
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c) (async)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) (async)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="7307000000000000072000000002060f060008000000000000000f000000000000000500000000000000c204000000f1010700000000000000c20400018001c2040000000800000082"], 0x48) (async)
setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000300)=0x1000, 0x4) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r6, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000040)={0x14, 0x4, 0xa, 0x101, 0x70bd28, 0x25dfdbff, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x2004d805}, 0x8000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x90)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {0x0, 0xea3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) (async, rerun: 32)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={0x0})
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
socket$inet6_sctp(0xa, 0x1, 0x84)
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r9, &(0x7f0000000000), 0x10) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

1.350145386s ago: executing program 3 (id=8222):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000040)=0x24, 0x5)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4)
socket$inet6_sctp(0xa, 0x5, 0x84)

1.341433999s ago: executing program 3 (id=8224):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}}], {0x14}}, 0xc8}}, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff8effb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)

1.248686665s ago: executing program 3 (id=8225):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000000)='inet_sock_set_state\x00', r0, 0x0, 0x3}, 0x18)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)={@fallback=r1, r1, 0x2f, 0x2000}, 0x20)
socket$pptp(0x18, 0x1, 0x2) (async)
r2 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x25}}}, 0x1e)
connect$pptp(r2, &(0x7f00000001c0)={0x18, 0x2, {0x7, @multicast2}}, 0x1e) (async)
connect$pptp(r2, &(0x7f00000001c0)={0x18, 0x2, {0x7, @multicast2}}, 0x1e)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x18) (async)
r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x8}, 0x18)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000500)="f4a275e01e404ef5f7398813c4f9cdc0e106623021548115658587e2e73b785d34285ea9080e183c432921de3a1f028a64a2e230ff3c5a566f4b7ddb7b2daa78e4a86ad420b24905b440e761fb76f47ce835f052bea66e79fb17a421eb0194cf67f782e49396b8fea00d53585e59af95e7f4ed7678023ab80afe857ef65acb4c27cb229d79f90662679bd95d508f8cb46225681b31483c3b7cfdb0334a4ba257ed2f98024a4df5a51e7278772f7c29400a6e27230202ec6afc6789d316cab5ef395f6f3e2de38e07f1164ad836b11b19e1f046c682fcfa8e746b4a271a8cc3f81f92c8d070", &(0x7f0000000640)=""/251, &(0x7f0000000080)="66d715d6f11c99b3b1335df965745d05f39fc5ac939f5f495b93ed469d768fadb78c91e46751c8a80e9393cd", &(0x7f00000000c0)="7a30abeda34400037b652bc854d3e899c00f0ab11bc95f2c750ea218086306c304385bf79637c971c501dcb08256f6ba198b653604ced8f7985e07c97723ed4c80ee02bf8c9d40f119dbf90c8aca81f90893465f3ca94294e791db2393714d", 0x4, r4}, 0x38)
sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000340)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000400)="41f4c40a2733afa3fb578e88b7bc5b33037fc9280ed098c25d4613197a0617275f3c3a0a24d79167c059d37142fcd6c37b1207f0ad71193e09bf752a1683120be2e2ec22e860a67098b3513b02b12ce0ba1a3c84a4ef81a0e0f694dfd629c141e3349298e68323c3aeb259aa7467b769a2ea57cb36ef916a1d2bb1e6523c518957e56f29147981eb6a2361f5414dd9a1e5f3f5", 0x93}], 0x1}, 0x4880)
setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2) (async)
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec", 0x4a}], 0x1, 0x0, 0x0, 0x7}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec", 0x4a}], 0x1, 0x0, 0x0, 0x7}, 0x0)
write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)
getsockopt$bt_hci(r5, 0x84, 0x1f, 0x0, &(0x7f0000001180))
sendmmsg(r3, &(0x7f00000007c0)=[{{&(0x7f0000000380)=@in={0x2, 0x4e24, @local}, 0x80, &(0x7f0000000140)=[{&(0x7f00000004c0)='&', 0x1}], 0x1}}], 0xf00, 0x2c000011)

1.134589154s ago: executing program 3 (id=8226):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x2f)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4028055}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x8, 0x1}, 0x48)
r3 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2e, 0x20000000, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x3, 0x7, 0x9, 0x4}}}}]}, 0x48}}, 0x0)
r6 = socket(0x11, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f00000000c0)=0x761, 0x4)
sendmmsg(r6, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015)
recvmmsg(r6, &(0x7f0000003000)=[{{0x0, 0x0, 0x0}, 0xfffff001}], 0x1, 0x12000, 0x0)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x162, 0x162, 0x9, [@datasec={0x4, 0xa, 0x0, 0xf, 0x2, [{0x1, 0x1, 0x4}, {0x1, 0x4, 0xe934}, {0x2, 0x6, 0x5}, {0x2, 0x9, 0x4}, {0x4, 0x7, 0x9}, {0x1, 0x7, 0x9}, {0x2, 0x10000, 0xfffffffa}, {0x4, 0x1, 0x6}, {0x2, 0x52f, 0x9}, {0x3, 0x5, 0x9}], "a7a8"}, @enum64={0x9, 0x5, 0x0, 0x13, 0x1, 0x2, [{0xc, 0xfff, 0xd24b}, {0x2, 0xfffffff9, 0xfffffffb}, {0x4, 0x9, 0x8}, {0xc, 0xc, 0x8}, {0x9, 0xfffffff8, 0x6}]}, @var={0x5, 0x0, 0x0, 0xe, 0x3}, @union={0xa, 0x3, 0x0, 0x5, 0x0, 0x215, [{0x4, 0x2, 0x1ff}, {0xa, 0x5, 0x7b}, {0x9, 0x4, 0x9}]}, @enum={0x6, 0x9, 0x0, 0x6, 0x4, [{0x6, 0x7}, {0x6, 0x2c000000}, {0xe, 0x3c7}, {0xa, 0x4}, {0xb, 0x4}, {0xe, 0x7}, {0x10, 0x9}, {0x4, 0x800}, {0xf, 0x4}]}]}, {0x0, [0x30, 0x2e, 0x5f, 0x5f, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000040)=""/35, 0x185, 0x23, 0x0, 0x9, 0x10000}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x7, 0x0, r2, 0x1, '\x00', r4, r7, 0x3, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f0000000380)={{r2}, &(0x7f0000000300), 0x0}, 0x20)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000200)=0x8)
ioctl$PPPIOCSFLAGS1(r8, 0x40047459, &(0x7f0000000100)=0x2000004)
pwritev(r8, &(0x7f00000002c0)=[{&(0x7f0000000300)="00214717a7070000000003060000000000000000aaa6721d5874f72cf86d73d32f46380feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x7, 0x1)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180)={0x20004, 0x7}, 0x8)
close(r0)

1.133200628s ago: executing program 1 (id=8227):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="401f5200060010"], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x1, 0x20000000}, 0x5}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x48000)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r3, 0x6, 0x5, &(0x7f0000000040)=0x24, 0x5)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000280), r6)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f00000000c0))
getsockname$packet(r6, &(0x7f00000004c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x34, r5, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008080}, 0x0)
setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4)
bind$netlink(r6, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbff, 0x1000000}, 0xc)

979.800937ms ago: executing program 1 (id=8228):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000027c00000400fc800c000180060006"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
sendmsg$rds(0xffffffffffffffff, 0x0, 0x0)
bind$rxrpc(0xffffffffffffffff, 0x0, 0x0)
r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000001740), &(0x7f0000001780)=0x1c)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f00000027c0)={0x8, 0x2, 0x2, 0x1, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}]}, 0x18)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x9)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000140)=0x7, 0x4)
socket(0x2c, 0x4, 0x0)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @local}, 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
mmap(&(0x7f000006e000/0x13000)=nil, 0x13000, 0x2000000, 0x4010, r1, 0xbf885000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff070007800c00018008000155e00000020800da40000003a60500030002000000000500010007000000"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
pwritev(r3, &(0x7f00000016c0)=[{&(0x7f0000000200)="b59596e4c2fafadcfaf8781cc8fef81c5ff76afa760f0bd40cb32c2799366798ee6ed4161b05b4157aa6d80ef94f4f02d207c7274bd232aa75c9f5860a", 0x3d}, {&(0x7f00000002c0)="77d00b20e644fa12c78b9e5c0e173e4aef84de69575d9a87fe1d61d8a9e7d927998cdd4a35338bc844bcae30eecb5fecdb97e9fbf03ff6f602ed8827b20c5d7fc8e489a960ae645cc52d2358f99f29a527b93022f7ed282f632de377e7abf29634da0ddcc59baaad6385df03ddd802eb992b33706c3b224f4ac827682fd65392a800db71ec02f50e623ca39906683784507657ddb5cb4840d9f71918fa02d5fb47f5de8f4365156eeba7e8c182e0d35589d5336b06a9821c1ac65370ae18e20e3982b900c2dacc5fc730bfaf6ecb478d29b7a27b99abab4a7117f141c3216f661a771f09f060aa0540c5e3811caa41", 0xef}, {&(0x7f0000000440)="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", 0xfd}, {&(0x7f0000000240)="1af5d423adbb5a83090910028de67aa99c65bbf8299f9f4753daa03f97c787635d3fb94edbfe9b", 0x27}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="32e3227377e16c783031467aa5443596eba804ace9e9a640056ec47fed165c4568fc20d05539d4b58c83852aa4a2f55eeb16580fd7acb637ce1580dd827b9dfa74b30d694ed0c92464ffaf3e7a32be796868012a06a7ae9329dad6fa4128926aa9b4f0acdc40d0060b542c734d17e4109b857b0d194f77e1a8812893854c47cdf3bfa0c5dbc4e7", 0x87}, {&(0x7f0000001600)="baf689abde5fcca7ff470c1bbbf7c540a54fb4877648a554e173646b4268fc2c6b30d78ec29c5bc8d345474a0be1213abfccbdd699cb4b57109a751c6e8d110ff5f082b6adfce677e544d34b2d3f5cad761bf0866d3a1b430a0ca3dbb825aa99cc6015310ecba856c16e53001aec057ce802ac25a181b8dba07a40aee381ce31f1032c09231f137b081ecee2ba1aab41ac492b", 0x93}], 0x7, 0x3, 0x81)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800100000000000000f8a18aa14000780080011400000008b05001500060000000500010006000000050005000a00000005000400020000000900020073797a300000000014000300686173683a69702c706f7274"], 0x60}, 0x1, 0x0, 0x0, 0x24048081}, 0x0)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
getsockopt$sock_buf(r6, 0x1, 0x1a, &(0x7f00000017c0)=""/4096, &(0x7f0000000100)=0x1000)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000003c0)=0xffffffffffffffff, 0x12)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r8, 0x0, 0x5}, 0x18)
poll(&(0x7f0000000300), 0x29, 0x200)
getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, 0x0, 0x0)

978.431949ms ago: executing program 3 (id=8229):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async)
setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000080)=0x2000000, 0x4)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="4b6a1bc33f6364cd8cfa6f0035e78321403825b1f336e4ba06f1dd123809ae8b32db03e4f1373a42a7a66637065c357825577583a5fde8a3427cc42f7d63c6cf", 0x20000) (async)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r3, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) (async)
connect$vsock_stream(r3, &(0x7f0000000280)={0x28, 0x0, 0x2711, @local}, 0x10) (async)
shutdown(r3, 0x1) (async)
write(r3, 0x0, 0x0) (async)
ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000080)=0xea0) (async)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}}], 0x1, 0x6404c880)
socket(0x10, 0x803, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r4 = socket$inet(0x2, 0x3, 0x33)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async)
getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
close(0xffffffffffffffff) (async)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r5, 0x0) (async)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async)
accept(r5, 0x0, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="d4d9dfdb6510fba808001b"], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x40080c4)

389.920421ms ago: executing program 0 (id=8231):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0xfffffffc) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xc1}], 0x1}, 0x0) (async)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@multicast1, @remote, <r1=>0x0}, &(0x7f00000000c0)=0xc) (async, rerun: 64)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={<r2=>r0, 0x1, 0x5, 0xffffffff80000001}) (rerun: 64)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@decl_tag={0x7, 0x0, 0x0, 0x11, 0x1, 0x3}, @volatile={0xe, 0x0, 0x0, 0x9, 0x200}, @typedef={0x3, 0x0, 0x0, 0x8, 0x5}, @func={0x3, 0x0, 0x0, 0xc, 0x5}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x0, 0x2e, 0x61]}}, &(0x7f0000000380)=""/218, 0x5d, 0xda, 0x1, 0xffffffff}, 0x28) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x9, 0x7, 0x9, 0x10180, 0x1, 0x2, '\x00', r1, r2, 0x2, 0x2, 0x3, 0xe, @void, @value, @value=r2}, 0x50) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x70, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2205}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_IKEY={0x8, 0x4, 0x9}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x5}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x7ff}]}}}]}, 0x70}, 0x1, 0xba01}, 0x0) (async)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r3, &(0x7f0000000240), 0x0}, 0x20) (async, rerun: 32)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x2, 0x4) (rerun: 32)

310.119189ms ago: executing program 0 (id=8232):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000080)={0x3, 'pimreg\x00', {0x8}, 0x5}) (async, rerun: 32)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) (async, rerun: 32)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x78a25000) (async)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000100)={<r1=>0x0, 0x8000, 0x20, 0xfffffffffffffffc, 0x8}, &(0x7f0000000140)=0x18)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={r1, 0x7}, 0x8)
r2 = socket(0x10, 0x800, 0x4)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={<r3=>r1, 0x1}, &(0x7f0000000200)=0xc)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000240)={r3, 0x9}, &(0x7f0000000280)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000002c0)={r3, 0xf}, 0x8) (async, rerun: 64)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x9, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa1a, 0x0, 0x0, 0x0, 0x11}, [@map_val={0x18, 0x6}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf9e2858}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x4, 0x4, 0x0, 0xe}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000440)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000480)=[{0x3, 0x8, 0x10, 0xb}], 0x10, 0x40}, 0x94) (rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000300)='f2fs_update_extent_tree_range\x00', r4, 0x0, 0x2}, 0x18)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r2) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000640)={'macvtap0\x00', <r6=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000680)={'team0\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xec, r5, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x81}, 0x800) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000018c0)={0xffffffffffffffff, 0x20, &(0x7f0000001880)={&(0x7f0000000840)=""/37, 0x25, <r8=>0x0, &(0x7f0000000880)=""/4096, 0x1000}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001900)=r8, 0x4) (async)
r9 = accept(r0, &(0x7f0000001940)=@ax25={{0x3, @bcast}, [@rose, @null, @bcast, @default, @bcast, @netrom, @default, @default]}, &(0x7f00000019c0)=0x80)
setsockopt$RXRPC_SECURITY_KEY(r9, 0x110, 0x1, &(0x7f0000001a00)='macvtap0\x00', 0x9) (async)
r10 = accept4(r9, 0x0, &(0x7f0000001a40), 0x81000)
setsockopt$MRT_DEL_VIF(r10, 0x0, 0xcb, &(0x7f0000001a80)={0x0, 0x9, 0x8, 0x754, @vifc_lcl_addr=@broadcast, @private=0xa010102}, 0x10) (async)
r11 = socket$netlink(0x10, 0x3, 0x4) (async)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001b00), r4)
sendmsg$TIPC_NL_MON_SET(r11, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x2c, r12, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf6cb}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000891}, 0x8084) (async)
getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f0000001c00)=""/37, &(0x7f0000001c40)=0x25) (async, rerun: 64)
ioctl$sock_kcm_SIOCKCMUNATTACH(r10, 0x89e1, &(0x7f0000001c80)={r11}) (rerun: 64)
ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000001cc0)={{0xff, 0xfffffff9}, {0x2, 0x5}, 0x3ff})
ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000001e00))

307.968038ms ago: executing program 0 (id=8233):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0)
socket$key(0xf, 0x3, 0x2)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x20008014)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x44}}, 0x4000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711043000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x1d}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0xf}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd2d8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x7, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94)
bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x7, @none, 0x6, 0x1}, 0xe)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000400)=[{0x20, 0x5, 0x0, 0xfffff03c}, {0x6, 0x1, 0x8}]}, 0x10)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x80002, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)

160.704383ms ago: executing program 0 (id=8234):
socketpair(0x15, 0xa, 0x5, &(0x7f0000001040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200020c0}, 0x48000)
r1 = socket(0xa, 0x5, 0x7fffffff)
r2 = socket(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r3=>0x0})
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0xc, r3, 0x3}, 0xc)
setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r5}, 0x18)
recvmmsg(r4, &(0x7f0000005c80), 0x400030f, 0x0, 0x0)
listen(r4, 0xd3)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@fallback=r6, 0x2, 0x1, 0x3, &(0x7f0000000480)=[0x0], 0x1, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], <r7=>0x0}, 0x40)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={r5, 0xe0, &(0x7f0000000f00)={0x0, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000780)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd2, &(0x7f0000000e00)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0xc1, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@map=0x1, r5, 0x7, 0x34, 0x0, @void, @void, @void, @value=r8, r7}, 0x20)
shutdown(r1, 0x1)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x44881}, 0xc4)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="040000003800010326bd700203dcdf2510000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004814)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180002000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r11 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x20000000000000}}, {{@in=@multicast1}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0xe8)
r12 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r12, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4)
sendto$inet6(r12, &(0x7f0000000800)="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"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c)
sendmsg$802154_raw(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000000400)={&(0x7f0000000300)="dcad37f62253e725418ad1ccb91690023f3532a76348ae4b7fe730e57f30dfeeb080c6efdfe339f67e19fdc2d55e506d19e6a222f217db61531e438774a438254163e52638c23f3a9a12aeb52a0e21a21f25f477ac290071adf2ce6d51c0f09282061c3adee16d0b1e7ff8193e3bf6c91b586bccdd7ca31c7c596f82d645844bf9ff78f7b079691cd06dad92ce", 0x8d}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00', r10}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r9)

160.281904ms ago: executing program 1 (id=8235):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x3}}]}}}]}, 0x78}}, 0x0)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0xffffffffffffffff, 0x8, 0x0, 0x1, @vifc_lcl_ifindex=r2, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x24}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4008800)
listen(r3, 0x0)
getsockopt$inet_mptcp_buf(r3, 0x11c, 0x4, &(0x7f00000001c0)=""/206, &(0x7f0000000040)=0xce)
r6 = socket$netlink(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff)
r8 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
sendmsg$GTP_CMD_GETPDP(r6, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r8}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040014}, 0x4000800)

60.228071ms ago: executing program 1 (id=8236):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x60, 0x2, 0x6, 0x305, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x8800)
unshare(0x22020600)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@ipv6_newrule={0x40, 0x20, 0x5bfddf52a8fa8e87, 0x70bd2d, 0x25dfdbfe, {0xa, 0x20, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x2}, [@FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x1}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x4008040)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={r3, 0x4}, 0x8)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r4, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_int(r5, 0x29, 0x4b, 0x0, &(0x7f0000000080))

58.187547ms ago: executing program 3 (id=8237):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x207ffffe, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
listen(r1, 0x400004)
r2 = socket(0xa, 0x3, 0x3a)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', 0x0})
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, @remote, @empty, 0x7800, 0x80, 0xfffffffc, 0xdc67}})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x10, 0xfffffff7}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', 0x0})
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="7307000000000000072000000002060f060008000000000000000f000000000000000500000000000000c204000000f1010700000000000000c20400018001c2040000000800000082"], 0x48)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r7, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000040)={0x14, 0x4, 0xa, 0x101, 0x70bd28, 0x25dfdbff, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x2004d805}, 0x8000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x90)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x4}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0xf}, {0x0, 0x2}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {0x0, 0xea3, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4ca}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={0x0})
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$can_bcm(0x1d, 0x2, 0x2)

57.245669ms ago: executing program 1 (id=8238):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x1}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0xfffffffc}]}}]}, 0x40}}, 0x0)
r4 = socket(0xa, 0x2400000001, 0x0)
r5 = accept(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r5)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000480)={<r6=>0x0, 0x3, 0x20}, &(0x7f00000004c0)=0xc)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000540)={0xff, 0x8000, 0x2, 0x10000, r6}, 0x10)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x1406, 0x8, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4090)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4)

1.130643ms ago: executing program 0 (id=8239):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000))
r1 = socket$netlink(0x10, 0x3, 0x5)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x90, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x80)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x400, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x8000)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0)
r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @multicast2}, &(0x7f0000000340)=0x10, 0x80800)
getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000440)={'nat\x00', 0x0, 0x3, 0x52, [0x4, 0x1, 0x2, 0xd, 0x6, 0x7], 0x2, &(0x7f0000000380)=[{}, {}], &(0x7f00000003c0)=""/82}, &(0x7f00000004c0)=0x78)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0xb)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r5)
sendmsg$DEVLINK_CMD_SB_GET(r5, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xf8, r6, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fffffff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3872}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x101}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x51}, 0x24000004)
connect$inet(r4, &(0x7f0000000700)={0x2, 0x4e22, @private=0xa010102}, 0x10)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000740)={0x1f, 0x2}, 0x6)
r7 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000780))
clock_gettime(0x0, &(0x7f0000001e80)={<r8=>0x0, <r9=>0x0})
recvmmsg(r7, &(0x7f0000001e00)=[{{&(0x7f00000007c0)=@nfc_llcp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000840)=""/199, 0xc7}, {&(0x7f0000000940)=""/20, 0x14}, {&(0x7f0000000980)=""/44, 0x2c}, {&(0x7f00000009c0)=""/88, 0x58}, {&(0x7f0000000a40)=""/10, 0xa}, {&(0x7f0000000a80)=""/27, 0x1b}, {&(0x7f0000000ac0)=""/122, 0x7a}], 0x7, &(0x7f0000000bc0)=""/249, 0xf9}, 0x8}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000cc0)=""/4096, 0x1000}], 0x1, &(0x7f0000001d00)=""/252, 0xfc}, 0x7}], 0x2, 0x40000040, &(0x7f0000001ec0)={r8, r9+60000000})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001f40)={'wlan1\x00', <r11=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001f80)={'wlan0\x00', <r12=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001fc0)={'wlan0\x00', <r13=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002000)={'wlan1\x00', <r14=>0x0})
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r10, &(0x7f0000002100)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x6c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x10001, 0x42}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xc}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x200, 0x25}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xe1, 0x69}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0xf}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r13}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc0}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000021c0)={{0xffffffffffffffff, <r15=>0xffffffffffffffff}, &(0x7f0000002140), &(0x7f0000002180)}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000003380)={'syztnl1\x00', &(0x7f0000003300)={'syztnl2\x00', <r16=>0x0, 0x8000, 0x8, 0x4, 0x2000000, {{0xd, 0x4, 0x0, 0x30, 0x34, 0x67, 0x0, 0x85, 0x29, 0x0, @local, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x66, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf9}]}, @rr={0x7, 0x13, 0x70, [@local, @remote, @empty, @rand_addr=0x64010100]}]}}}}})
r17 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000033c0), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000034c0)={0x7, 0x18, &(0x7f0000002200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x5c4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x29}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @generic={0x4, 0x7, 0x2, 0x200}, @tail_call={{0x18, 0x2, 0x1, 0x0, r15}}]}, &(0x7f00000022c0)='GPL\x00', 0x101, 0x1000, &(0x7f0000002300)=""/4096, 0x41100, 0x28, '\x00', r16, @fallback=0x20, r17, 0x8, &(0x7f0000003400)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000003440)={0x0, 0x8, 0x0, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000003480)=[{0x0, 0x3, 0xd, 0xc}], 0x10, 0x1}, 0x94)
r18 = accept4(r5, 0x0, &(0x7f0000003580), 0x180800)
setsockopt$bt_hci_HCI_FILTER(r18, 0x0, 0x2, &(0x7f00000035c0)={0x800, [0x0, 0xf5bd], 0x1}, 0x10)

791.937µs ago: executing program 1 (id=8240):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f00000003c0)=0x401, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r2, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0xfffffffffffffda6)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000000)=0x1, 0x4)
close(0x3)

0s ago: executing program 0 (id=8241):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
shutdown(r0, 0x0)
pipe(&(0x7f00000009c0)={<r1=>0xffffffffffffffff})
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a40)=@o_path={&(0x7f0000000a00)='./file0\x00', 0x0, 0x43ca10337ab2e290, r0}, 0x18)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@map=r1, 0xffffffffffffffff, 0xb, 0xd}, 0x20)
recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="070000000400000000070000000700002c"], 0x50)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x1)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r7=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_WINDOW={0x8, 0x5, 0x9}]}}}]}, 0x3c}}, 0xc000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10)
sendto$inet(r2, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x5e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800421a00500064000008019078ffffffffffffffff4c20a18000000000fffffff6000000090000004b000000fb7fffffff0000000501861000000002050ab47be846192a8c030000001000907800090002"], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r8 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r9 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10)

kernel console output (not intermixed with test programs):

arsing attributes in process `syz.2.5529'.
[  610.393838][T26210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5529'.
[  610.722705][T26218] openvswitch: netlink: IP tunnel dst address not specified
[  611.258124][T26231] netlink: 'syz.2.5537': attribute type 29 has an invalid length.
[  611.376864][T26244] sch_tbf: burst 19872 is lower than device lo mtu (30990) !
[  611.442035][T26246] netlink: 'syz.2.5541': attribute type 6 has an invalid length.
[  611.442038][T26247] netlink: 'syz.2.5541': attribute type 6 has an invalid length.
[  611.828506][T26277] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  611.838532][T26275] netlink: 'syz.0.5550': attribute type 1 has an invalid length.
[  612.001371][T26299] netlink: 'syz.2.5554': attribute type 10 has an invalid length.
[  612.011107][T26299] team0: Device ipvlan1 failed to register rx_handler
[  612.803283][T26320] netlink: 'syz.2.5562': attribute type 3 has an invalid length.
[  613.356175][T26367] lo speed is unknown, defaulting to 1000
[  613.362006][T26367] lo speed is unknown, defaulting to 1000
[  613.399323][T26375] vxcan1: entered allmulticast mode
[  613.405837][T26375] vxcan1: left allmulticast mode
[  613.600582][T26386] netlink: 'syz.0.5579': attribute type 10 has an invalid length.
[  613.904994][T26388] erspan0: left allmulticast mode
[  613.922010][T26388] bond9: left promiscuous mode
[  613.923568][T26388] bond9: left allmulticast mode
[  613.955788][T26393] __nla_validate_parse: 93 callbacks suppressed
[  613.955803][T26393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5581'.
[  614.031416][T26397] netlink: 'syz.2.5582': attribute type 3 has an invalid length.
[  614.069475][T26399] netlink: 'syz.2.5583': attribute type 1 has an invalid length.
[  614.209778][T26409] IPVS: Error connecting to the multicast addr
[  614.277825][T26414] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5586'.
[  614.329455][T26418] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.5587'.
[  614.508062][ T5909] syzkaller0: tun_net_xmit 76
[  614.510050][ T5909] syzkaller0: tun_net_xmit 48
[  614.513654][T26426] syzkaller0: create flow: hash 3073632820 index 1
[  614.534595][ T6070] syzkaller0: tun_net_xmit 76
[  614.936800][T26452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5597'.
[  614.940425][T26452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5597'.
[  615.060647][T26454] lo speed is unknown, defaulting to 1000
[  615.115891][T26454] lo speed is unknown, defaulting to 1000
[  615.311401][T26425] syzkaller0: delete flow: hash 3073632820 index 1
[  616.480745][T26482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5606'.
[  616.614154][T26484] validate_nla: 1 callbacks suppressed
[  616.614168][T26484] netlink: 'syz.0.5607': attribute type 83 has an invalid length.
[  617.164105][T26493] netlink: 280 bytes leftover after parsing attributes in process `syz.1.5610'.
[  617.318300][T26501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5612'.
[  617.321094][T26501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5612'.
[  618.043640][T26507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5614'.
[  618.370460][T26533] netlink: 'syz.1.5619': attribute type 12 has an invalid length.
[  618.453555][T26538] pim6reg: entered allmulticast mode
[  618.458086][T26537] pim6reg: left allmulticast mode
[  619.152695][T26548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5624'.
[  619.263076][T26553] lo speed is unknown, defaulting to 1000
[  619.267571][T26553] lo speed is unknown, defaulting to 1000
[  619.573136][T26562] lo speed is unknown, defaulting to 1000
[  619.585191][T26562] lo speed is unknown, defaulting to 1000
[  620.969350][T26606] vxcan1: entered allmulticast mode
[  620.971583][T26607] vxcan1: left allmulticast mode
[  620.973973][T26605] wg1: mtu less than device minimum
[  620.987116][T26605] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5639'.
[  621.111514][T26618] lo speed is unknown, defaulting to 1000
[  621.114214][T26617] lo speed is unknown, defaulting to 1000
[  621.117220][T26618] lo speed is unknown, defaulting to 1000
[  621.120484][T26617] lo speed is unknown, defaulting to 1000
[  621.327288][T26628] vxcan4: entered allmulticast mode
[  621.499352][T26640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5648'.
[  621.512830][T26643] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5651'.
[  621.532414][T26646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5652'.
[  621.537449][T26646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5652'.
[  621.552525][T26646] lo speed is unknown, defaulting to 1000
[  621.555765][T26646] lo speed is unknown, defaulting to 1000
[  621.700722][T26650] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5652'.
[  621.704727][T26650] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5652'.
[  621.708288][T26650] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5652'.
[  621.712033][T26650] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5652'.
[  621.881848][T26655] netlink: 'syz.1.5654': attribute type 2 has an invalid length.
[  621.881876][T26654] netlink: 'syz.1.5654': attribute type 2 has an invalid length.
[  622.195713][T26679] syzkaller1: entered promiscuous mode
[  622.197406][T26679] syzkaller1: entered allmulticast mode
[  622.637208][T26696] lo speed is unknown, defaulting to 1000
[  622.640138][T26696] lo speed is unknown, defaulting to 1000
[  622.688003][T26694] lo speed is unknown, defaulting to 1000
[  622.706146][T26694] lo speed is unknown, defaulting to 1000
[  623.074682][T26715] netlink: 'syz.1.5672': attribute type 6 has an invalid length.
[  623.143350][T26722] geneve4: entered promiscuous mode
[  623.150305][T17275] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  623.153258][T26717] lo speed is unknown, defaulting to 1000
[  623.153858][T17275] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  623.167161][T17275] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  623.170601][T17275] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  623.178605][T26717] lo speed is unknown, defaulting to 1000
[  623.252894][T26725] lo speed is unknown, defaulting to 1000
[  623.291851][T26725] lo speed is unknown, defaulting to 1000
[  623.725186][T26742] vlan0: left promiscuous mode
[  623.727863][T26742] mac80211_hwsim hwsim6 ;: left promiscuous mode
[  623.731443][T26742] pim6reg1: left promiscuous mode
[  623.733061][T26742] pim6reg1: left allmulticast mode
[  623.735774][T26742] nicvf0: left promiscuous mode
[  623.738179][T26742] ip6gre1: left allmulticast mode
[  623.953352][T26751] netlink: 'syz.1.5682': attribute type 5 has an invalid length.
[  625.313347][T26800] __nla_validate_parse: 121 callbacks suppressed
[  625.313366][T26800] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5696'.
[  625.319765][T26800] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5696'.
[  625.322515][T26800] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5696'.
[  625.326171][T26800] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5696'.
[  625.561684][T26804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  625.818510][T26806] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5697'.
[  625.821588][T26806] ksmbd: Unknown IPC event: 0, ignore.
[  626.005181][T26817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5700'.
[  626.222817][T26826] lo speed is unknown, defaulting to 1000
[  626.225626][T26826] lo speed is unknown, defaulting to 1000
[  626.417249][T26844] xfrm2: entered allmulticast mode
[  626.560899][T26851] lo speed is unknown, defaulting to 1000
[  626.563878][T26851] lo speed is unknown, defaulting to 1000
[  626.823193][T26856] lo speed is unknown, defaulting to 1000
[  626.826898][T26856] lo speed is unknown, defaulting to 1000
[  627.342713][T26885] netlink: 'syz.0.5718': attribute type 1 has an invalid length.
[  627.505078][T26891] geneve4: left promiscuous mode
[  627.510283][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  627.513203][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  627.516774][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  627.519593][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  627.556510][T26893] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  627.815562][T26907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5724'.
[  628.123700][T26932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5730'.
[  628.150163][T26932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5730'.
[  628.721291][T26957] vxcan1: entered allmulticast mode
[  628.723906][T26957] vxcan1: left allmulticast mode
[  629.151281][T26967] netlink: 240 bytes leftover after parsing attributes in process `syz.2.5738'.
[  629.243514][T26978] netlink: 'syz.1.5742': attribute type 6 has an invalid length.
[  629.248595][T26978] netlink: 'syz.1.5742': attribute type 6 has an invalid length.
[  629.497355][T26993] lo speed is unknown, defaulting to 1000
[  629.500417][T26993] lo speed is unknown, defaulting to 1000
[  629.563257][T26993] can: request_module (can-proto-0) failed.
[  629.833750][T27003] lo speed is unknown, defaulting to 1000
[  629.836572][T27003] lo speed is unknown, defaulting to 1000
[  629.856814][T27006] lo speed is unknown, defaulting to 1000
[  629.863663][T27006] lo speed is unknown, defaulting to 1000
[  630.179315][T27024] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  630.223482][T27024] syzkaller0: entered promiscuous mode
[  630.225855][T27024] syzkaller0: entered allmulticast mode
[  630.228786][T27024] tipc: Resetting bearer <eth:syzkaller0>
[  630.243632][T27023] tipc: Resetting bearer <eth:syzkaller0>
[  631.225579][ T5869] tipc: Node number set to 2216520862
[  631.444990][T27023] tipc: Disabling bearer <eth:syzkaller0>
[  631.449747][T27027] lo speed is unknown, defaulting to 1000
[  631.457290][T27027] lo speed is unknown, defaulting to 1000
[  632.070338][T27062] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  632.073833][T27062] syzkaller0: entered promiscuous mode
[  632.076428][T27062] syzkaller0: entered allmulticast mode
[  632.083778][T27062] tipc: Resetting bearer <eth:syzkaller0>
[  632.087909][T27062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  632.224636][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  632.232303][T27060] tipc: Resetting bearer <eth:syzkaller0>
[  632.243631][T27060] tipc: Disabling bearer <eth:syzkaller0>
[  632.384218][T27078] __nla_validate_parse: 10 callbacks suppressed
[  632.384239][T27078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5763'.
[  633.147681][T27095] netlink: 'syz.0.5767': attribute type 32 has an invalid length.
[  633.200939][T27097] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5768'.
[  633.260351][T27100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5769'.
[  633.264082][T27100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5769'.
[  633.271198][T27101] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5768'.
[  633.275561][T27101] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5768'.
[  633.284378][T27101] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5768'.
[  633.290906][T27101] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5768'.
[  633.523239][T27120] lo speed is unknown, defaulting to 1000
[  633.528252][T27120] lo speed is unknown, defaulting to 1000
[  634.075687][T27126] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5775'.
[  634.714163][T27163] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5783'.
[  635.457366][T27182] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  635.461366][T27182] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  635.662387][T27186] lo speed is unknown, defaulting to 1000
[  635.666787][T27186] lo speed is unknown, defaulting to 1000
[  636.197313][T27212] lo speed is unknown, defaulting to 1000
[  636.200827][T27212] lo speed is unknown, defaulting to 1000
[  637.409108][T27250] __nla_validate_parse: 14 callbacks suppressed
[  637.409131][T27250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5807'.
[  638.251823][T27283] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5817'.
[  638.388488][T27294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5821'.
[  638.395283][T27294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5821'.
[  638.565337][T27316] netlink: 'syz.1.5825': attribute type 11 has an invalid length.
[  638.638091][T27309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5824'.
[  638.792896][T27329] netlink: 'syz.1.5829': attribute type 29 has an invalid length.
[  638.796545][T27329] netlink: 'syz.1.5829': attribute type 29 has an invalid length.
[  638.799780][T27329] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5829'.
[  638.802849][T27329] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5829'.
[  638.807504][T27329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5829'.
[  639.501670][T27331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5830'.
[  639.505520][T27331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5830'.
[  639.573315][T27333] lo speed is unknown, defaulting to 1000
[  639.578867][T27333] lo speed is unknown, defaulting to 1000
[  639.786819][T27354] lo speed is unknown, defaulting to 1000
[  639.789722][T27354] lo speed is unknown, defaulting to 1000
[  639.821853][T27356] bridge: RTM_NEWNEIGH with invalid ether address
[  639.888701][T27360] lo speed is unknown, defaulting to 1000
[  639.891610][T27360] lo speed is unknown, defaulting to 1000
[  641.376848][T27401] lo speed is unknown, defaulting to 1000
[  641.379808][T27401] lo speed is unknown, defaulting to 1000
[  641.744677][T27435] lo speed is unknown, defaulting to 1000
[  641.749530][T27435] lo speed is unknown, defaulting to 1000
[  641.933135][T27448] vxcan1: entered allmulticast mode
[  641.940458][T27448] vxcan1: left allmulticast mode
[  642.475207][T27480] __nla_validate_parse: 17 callbacks suppressed
[  642.475221][T27480] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5874'.
[  643.221508][T27503] vxcan1: entered allmulticast mode
[  643.347306][T27514] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5881'.
[  643.351062][T27514] nbd: illegal input index 65508
[  644.561658][T27569] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  644.567985][T27565] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  644.860709][T27589] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5895'.
[  644.908526][T27594] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5897'.
[  644.912087][T27594] netlink: 560 bytes leftover after parsing attributes in process `syz.0.5897'.
[  645.014504][T27596] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5898'.
[  645.091586][T27606] netlink: 'syz.2.5901': attribute type 4 has an invalid length.
[  645.099123][T27606] netlink: 'syz.2.5901': attribute type 4 has an invalid length.
[  645.107126][T25688] lo speed is unknown, defaulting to 1000
[  645.109608][T25688] syz2: Port: 1 Link ACTIVE
[  645.203459][T27613] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5903'.
[  645.274254][T27617] netlink: 'syz.2.5905': attribute type 10 has an invalid length.
[  645.280200][T27617] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5905'.
[  645.283683][T27617] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  645.311993][T27619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5906'.
[  645.448467][T27628] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5909'.
[  645.776317][T27655] netlink: 'syz.1.5911': attribute type 12 has an invalid length.
[  646.217290][T27691] lo speed is unknown, defaulting to 1000
[  646.220481][T27691] lo speed is unknown, defaulting to 1000
[  646.981375][T27726] vxcan1: entered allmulticast mode
[  647.053545][T27738] vxcan1: left allmulticast mode
[  647.110398][T27742] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  647.118924][T27742] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  647.131604][T27744] netlink: 'syz.2.5939': attribute type 12 has an invalid length.
[  647.181538][T27744] dvmrp1: tun_chr_ioctl cmd 1074025677
[  647.183470][T27744] dvmrp1: linktype set to 773
[  647.221610][T27759] IPVS: set_ctl: invalid protocol: 0 172.30.0.2:20000
[  647.545634][T27790] lo speed is unknown, defaulting to 1000
[  647.548516][T27790] lo speed is unknown, defaulting to 1000
[  647.602753][T27791] lo speed is unknown, defaulting to 1000
[  647.605842][T27791] lo speed is unknown, defaulting to 1000
[  647.713540][T27799] __nla_validate_parse: 5 callbacks suppressed
[  647.713551][T27799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5954'.
[  647.722116][T27799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5954'.
[  647.882413][T27803] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  647.887629][T27803] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5955'.
[  648.292225][T27833] lo speed is unknown, defaulting to 1000
[  648.296506][T27833] lo speed is unknown, defaulting to 1000
[  648.391381][  T973] IPVS: starting estimator thread 0...
[  648.466529][T27841] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  648.502021][T27836] IPVS: using max 64 ests per chain, 153600 per kthread
[  648.686295][T27850] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  648.689645][T27850] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  648.707663][T27849] IPVS: set_ctl: invalid protocol: 32699 172.20.20.43:21
[  648.811198][T17275] IPVS: stop unused estimator thread 0...
[  648.876209][T27866] openvswitch: netlink: IP tunnel dst address not specified
[  649.796624][T27883] lo speed is unknown, defaulting to 1000
[  649.800723][T27883] lo speed is unknown, defaulting to 1000
[  649.976567][ T6070] lo speed is unknown, defaulting to 1000
[  649.983005][ T6070] syz2: Port: 1 Link DOWN
[  650.017371][T27901] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  650.020309][T27901] syzkaller0: entered promiscuous mode
[  650.022317][T27901] syzkaller0: entered allmulticast mode
[  650.046773][T27900] tipc: Resetting bearer <eth:syzkaller0>
[  650.060358][T27900] tipc: Disabling bearer <eth:syzkaller0>
[  650.177345][T27907] netlink: 'syz.1.5985': attribute type 10 has an invalid length.
[  650.181076][T27907] team0: Device ipvlan1 failed to register rx_handler
[  650.519292][T27909] lo speed is unknown, defaulting to 1000
[  650.522524][T27909] lo speed is unknown, defaulting to 1000
[  650.555154][T27911] veth0_to_bond: entered allmulticast mode
[  650.869980][T27922] xt_limit: Overflow, try lower: 271964/0
[  650.992146][T27933] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  651.007268][T27929] lo speed is unknown, defaulting to 1000
[  651.012264][T27929] lo speed is unknown, defaulting to 1000
[  651.043962][T27933] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5992'.
[  682.381075][T27977] lo speed is unknown, defaulting to 1000
[  682.384121][T27977] lo speed is unknown, defaulting to 1000
[  682.970194][T27986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6005'.
[  682.985363][T27986] ip6tnl4: entered promiscuous mode
[  683.111809][T27991] netlink: 236 bytes leftover after parsing attributes in process `syz.0.6007'.
[  683.121034][T27991] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6007'.
[  683.302819][T28001] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6010'.
[  683.539313][T28021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6016'.
[  684.069189][T28035] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6020'.
[  684.980878][T28055] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6025'.
[  686.533399][T28085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6035'.
[  686.678519][T28088] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  686.814978][T28094] netlink: 'syz.0.6038': attribute type 2 has an invalid length.
[  686.818101][T28095] netlink: 'syz.0.6038': attribute type 2 has an invalid length.
[  688.087197][T28132] lo speed is unknown, defaulting to 1000
[  688.090357][T28132] lo speed is unknown, defaulting to 1000
[  688.288917][T28141] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6049'.
[  689.229350][T28164] netlink: 'syz.0.6053': attribute type 6 has an invalid length.
[  689.243389][T28164] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  690.029807][T28181] lo speed is unknown, defaulting to 1000
[  690.032559][T28181] lo speed is unknown, defaulting to 1000
[  690.319735][T28196] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  690.912668][T28206] netlink: 'syz.0.6064': attribute type 10 has an invalid length.
[  691.122611][T28221] vxcan1: entered allmulticast mode
[  691.126027][T28221] vxcan1: left allmulticast mode
[  691.225919][T28228] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6070'.
[  691.229397][T28228] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6070'.
[  691.245917][T28228] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6070'.
[  691.249381][T28228] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6070'.
[  691.253014][T28228] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6070'.
[  691.256826][T28228] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6070'.
[  691.434034][T28239] lo speed is unknown, defaulting to 1000
[  691.440661][T28239] lo speed is unknown, defaulting to 1000
[  691.520395][T28252] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6076'.
[  691.523290][T28252] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6076'.
[  691.678795][T28258] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6073'.
[  691.843496][T28270] lo speed is unknown, defaulting to 1000
[  691.848333][T28270] lo speed is unknown, defaulting to 1000
[  692.812711][T28305] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20004
[  693.124426][T28327] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  693.127621][T28327] syzkaller0: entered promiscuous mode
[  693.129384][T28327] syzkaller0: entered allmulticast mode
[  693.145855][T28327] tipc: Resetting bearer <eth:syzkaller0>
[  693.149448][T28326] tipc: Resetting bearer <eth:syzkaller0>
[  693.160529][T28326] tipc: Disabling bearer <eth:syzkaller0>
[  693.292629][T28331] vlan0: entered promiscuous mode
[  693.436012][T28340] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  693.439792][T28340] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  693.524501][T28355] netlink: 'syz.2.6101': attribute type 10 has an invalid length.
[  693.535544][T28355] team0: Device ipvlan1 failed to register rx_handler
[  693.643720][T28367] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  693.647575][T28367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  693.754649][T28379] __nla_validate_parse: 5 callbacks suppressed
[  693.754660][T28379] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6108'.
[  693.759406][T28379] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6108'.
[  693.762229][T28379] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6108'.
[  693.765800][T28379] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6108'.
[  693.793614][T28381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6109'.
[  694.292367][T28387] lo speed is unknown, defaulting to 1000
[  694.297004][T28387] lo speed is unknown, defaulting to 1000
[  694.443423][T28390] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6110'.
[  694.446988][T28390] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6110'.
[  694.450026][T28390] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6110'.
[  694.452848][T28390] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6110'.
[  694.573269][T28380] delete_channel: no stack
[  694.664524][T28393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6111'.
[  694.703196][T28395] netlink: 'syz.0.6112': attribute type 3 has an invalid length.
[  695.044993][T28410] syzkaller1: entered promiscuous mode
[  695.048652][T28410] syzkaller1: entered allmulticast mode
[  695.143994][T28412] lo speed is unknown, defaulting to 1000
[  695.151798][T28412] lo speed is unknown, defaulting to 1000
[  697.790128][T28528] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  698.122450][T28540] veth0_to_bond: left allmulticast mode
[  698.220870][T28549] lo speed is unknown, defaulting to 1000
[  698.224728][T28549] lo speed is unknown, defaulting to 1000
[  698.569834][T28568] netlink: 'syz.2.6164': attribute type 4 has an invalid length.
[  698.716833][T28592] openvswitch: netlink: Port -1156311892 exceeds max allowable 65535
[  698.917248][T28601] lo speed is unknown, defaulting to 1000
[  698.921567][T28601] lo speed is unknown, defaulting to 1000
[  699.066605][T28604] __nla_validate_parse: 16 callbacks suppressed
[  699.066625][T28604] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6172'.
[  699.072933][T28604] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6172'.
[  699.076812][T28604] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6172'.
[  699.080435][T28604] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6172'.
[  699.543456][T28607] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  699.773402][T28611] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612)
[  699.779190][T28611] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  699.867314][T28613] lo speed is unknown, defaulting to 1000
[  699.870059][T28613] lo speed is unknown, defaulting to 1000
[  700.087038][T28625] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6179'.
[  700.157960][T28627] netlink: 'syz.2.6180': attribute type 7 has an invalid length.
[  700.160993][T28627] netlink: 'syz.2.6180': attribute type 8 has an invalid length.
[  700.163566][T28627] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6180'.
[  700.387570][T28640] ip6gre0: left allmulticast mode
[  700.494769][T28653] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6187'.
[  700.590659][T28658] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6189'.
[  700.593521][T28658] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6189'.
[  700.597484][T28658] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6189'.
[  701.442399][T28667] netlink: 'syz.0.6192': attribute type 5 has an invalid length.
[  701.447044][T28667] netlink: 'syz.0.6192': attribute type 5 has an invalid length.
[  701.621628][T28679] netlink: 'syz.0.6196': attribute type 1 has an invalid length.
[  702.112166][T28695] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  702.455006][T28708] netlink: 'syz.2.6204': attribute type 10 has an invalid length.
[  702.460737][T28708] team0: Device ipvlan1 failed to register rx_handler
[  703.068653][T28735] lo speed is unknown, defaulting to 1000
[  703.072160][T28735] lo speed is unknown, defaulting to 1000
[  703.317659][T28741] macvlan2: entered allmulticast mode
[  703.319378][T28741] veth1_vlan: entered allmulticast mode
[  703.322686][T28741] veth1_vlan: left allmulticast mode
[  703.393070][T28749] netlink: 'syz.2.6218': attribute type 1 has an invalid length.
[  703.396937][T28749] netlink: 'syz.2.6218': attribute type 1 has an invalid length.
[  703.399591][T28749] netlink: 'syz.2.6218': attribute type 2 has an invalid length.
[  703.523050][T28753] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  703.893289][T28770] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  703.998026][T28772] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  704.359113][T28776] __nla_validate_parse: 11 callbacks suppressed
[  704.359127][T28776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6226'.
[  704.367666][T28776] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  704.383734][T28776] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  704.815525][T28791] netlink: 216 bytes leftover after parsing attributes in process `syz.1.6231'.
[  705.062933][T28804] lo speed is unknown, defaulting to 1000
[  705.068928][T28804] lo speed is unknown, defaulting to 1000
[  705.084571][T28807] xt_time: invalid argument - start or stop time greater than 23:59:59
[  705.089787][T28807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6237'.
[  705.545087][T28832] lo speed is unknown, defaulting to 1000
[  705.547805][T28832] lo speed is unknown, defaulting to 1000
[  705.960054][T28851] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  705.963649][T28851] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  706.066448][T28853] lo speed is unknown, defaulting to 1000
[  706.070140][T28853] lo speed is unknown, defaulting to 1000
[  706.109317][T28857] vxcan1: left allmulticast mode
[  706.539473][T28896] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6260'.
[  706.544169][T28896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6260'.
[  706.548993][T28896] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  706.552080][T28896] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  706.560803][T28896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6260'.
[  706.565027][T28896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6260'.
[  706.638144][T28900] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6261'.
[  706.648515][T28902] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6262'.
[  706.713163][T28908] netlink: 'syz.0.6262': attribute type 10 has an invalid length.
[  706.990416][T28920] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  707.007237][T28920] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6267'.
[  707.108958][T28923] lo speed is unknown, defaulting to 1000
[  707.112709][T28923] lo speed is unknown, defaulting to 1000
[  707.333538][T28932] lo speed is unknown, defaulting to 1000
[  707.340503][T28932] lo speed is unknown, defaulting to 1000
[  707.801627][T28952] lo speed is unknown, defaulting to 1000
[  707.806885][T28952] lo speed is unknown, defaulting to 1000
[  708.356771][T28981] lo speed is unknown, defaulting to 1000
[  708.360097][T28981] lo speed is unknown, defaulting to 1000
[  708.947777][T29017] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  709.099936][T29028] Bluetooth: hci2: Opcode 0x0401 failed: -22
[  709.119898][T29025] lo speed is unknown, defaulting to 1000
[  709.123187][T29025] lo speed is unknown, defaulting to 1000
[  709.479508][T29050] lo speed is unknown, defaulting to 1000
[  709.483233][T29050] lo speed is unknown, defaulting to 1000
[  709.603153][T29054] __nla_validate_parse: 137 callbacks suppressed
[  709.603168][T29054] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6301'.
[  709.609885][T29054] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6301'.
[  709.613509][T29054] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6301'.
[  709.617225][T29054] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6301'.
[  709.861094][T29070] lo speed is unknown, defaulting to 1000
[  709.867482][T29070] lo speed is unknown, defaulting to 1000
[  709.928310][T29075] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  710.091603][T29087] lo speed is unknown, defaulting to 1000
[  710.095382][T29087] lo speed is unknown, defaulting to 1000
[  710.132724][T29089] netlink: 176 bytes leftover after parsing attributes in process `syz.0.6309'.
[  710.156646][T29085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6308'.
[  710.161602][T29085] siw: device registration error -23
[  710.250166][T29092] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6309'.
[  710.253336][T29092] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6309'.
[  710.256704][T29092] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6309'.
[  710.259585][T29092] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6309'.
[  711.155648][ T5244] Bluetooth: hci2: command tx timeout
[  711.277085][T29107] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  711.495354][T29136] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  711.499256][T29136] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  712.186583][T29147] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  712.533796][T29173] netlink: 'syz.1.6332': attribute type 10 has an invalid length.
[  712.540348][T29173] team0: Device ipvlan1 failed to register rx_handler
[  712.632372][T29178] sctp: [Deprecated]: syz.2.6335 (pid 29178) Use of int in maxseg socket option.
[  712.632372][T29178] Use struct sctp_assoc_value instead
[  712.725355][T29181] netlink: 'syz.2.6336': attribute type 10 has an invalid length.
[  712.729900][T29181] team0: Device ipvlan1 failed to register rx_handler
[  713.076968][T29187] lo speed is unknown, defaulting to 1000
[  713.079561][T29187] lo speed is unknown, defaulting to 1000
[  713.345899][T29193] vxcan1: entered allmulticast mode
[  713.348627][T29193] vxcan1: left allmulticast mode
[  713.500572][T29198] lo speed is unknown, defaulting to 1000
[  713.503235][T29198] lo speed is unknown, defaulting to 1000
[  714.613449][T29234] __nla_validate_parse: 9 callbacks suppressed
[  714.613469][T29234] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.6350'.
[  714.728317][T29239] lo speed is unknown, defaulting to 1000
[  714.732018][T29239] lo speed is unknown, defaulting to 1000
[  714.917924][T29249] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6352'.
[  714.921331][T29249] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6352'.
[  714.925665][T29249] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6352'.
[  714.929389][T29249] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6352'.
[  715.063921][T29251] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6355'.
[  715.343352][T29262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6359'.
[  715.346955][T29262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6359'.
[  715.483623][T29268] lo speed is unknown, defaulting to 1000
[  715.491229][T29268] lo speed is unknown, defaulting to 1000
[  715.778645][T29288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6364'.
[  715.800111][T29289] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  716.431942][T29302] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:0
[  716.437782][T29302] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6369'.
[  716.885159][T29334] vxcan1: entered allmulticast mode
[  716.888509][T29334] vxcan1: left allmulticast mode
[  717.018841][T29343] lo speed is unknown, defaulting to 1000
[  717.021980][T29343] lo speed is unknown, defaulting to 1000
[  717.062560][T29346] lo speed is unknown, defaulting to 1000
[  717.068072][T29346] lo speed is unknown, defaulting to 1000
[  717.152771][T29353] netlink: 'syz.0.6383': attribute type 1 has an invalid length.
[  717.459054][T29370] lo speed is unknown, defaulting to 1000
[  717.466520][T29370] lo speed is unknown, defaulting to 1000
[  717.766985][T29380] netlink: 'syz.0.6391': attribute type 4 has an invalid length.
[  718.291691][T29394] netlink: 'syz.1.6395': attribute type 1 has an invalid length.
[  718.295831][T29394] netlink: 'syz.1.6395': attribute type 2 has an invalid length.
[  718.300138][T29394] netlink: 'syz.1.6395': attribute type 1 has an invalid length.
[  718.354489][T29401] lo speed is unknown, defaulting to 1000
[  718.357296][T29401] lo speed is unknown, defaulting to 1000
[  719.129719][T29440] lo speed is unknown, defaulting to 1000
[  719.132300][T29440] lo speed is unknown, defaulting to 1000
[  719.677258][T29478] __nla_validate_parse: 12 callbacks suppressed
[  719.677272][T29478] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6417'.
[  719.682180][T29478] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6417'.
[  719.760549][T29480] lo speed is unknown, defaulting to 1000
[  719.763371][T29480] lo speed is unknown, defaulting to 1000
[  719.961633][T29495] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  719.967809][T29495] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  720.498537][T29507] netlink: 'syz.1.6426': attribute type 1 has an invalid length.
[  720.498559][T29508] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6426'.
[  720.504779][T29508] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6426'.
[  720.508638][T29508] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6426'.
[  721.246056][T29541] lo speed is unknown, defaulting to 1000
[  721.249178][T29541] lo speed is unknown, defaulting to 1000
[  722.013682][T29604] netlink: 'syz.2.6453': attribute type 11 has an invalid length.
[  722.017866][T29604] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6453'.
[  722.062867][T29606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6454'.
[  722.067269][T29606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6454'.
[  722.071315][T29606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6454'.
[  722.218470][T29618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6457'.
[  722.433034][T29636] lo speed is unknown, defaulting to 1000
[  722.468162][T29644] vxcan1: entered allmulticast mode
[  722.470128][T29644] vxcan1: left allmulticast mode
[  723.055692][T29691] netlink: 'syz.1.6475': attribute type 1 has an invalid length.
[  723.096601][T29693] vxcan1: entered allmulticast mode
[  723.100987][T29693] vxcan1: left allmulticast mode
[  723.822480][   T33] audit: type=1800 audit(1757691596.595:10): pid=29775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6495" name=CB dev="tmpfs" ino=10972 res=0 errno=0
[  723.878021][T29782] netlink: 'syz.1.6498': attribute type 10 has an invalid length.
[  723.881311][T29782] batman_adv: batadv0: Removing interface: dummy0
[  723.889746][T29782] team0: Device dummy0 failed to register rx_handler
[  724.281231][T29832] netlink: 'syz.0.6513': attribute type 1 has an invalid length.
[  724.303309][T29832] bond12: entered promiscuous mode
[  724.306326][T29832] bond12: entered allmulticast mode
[  724.313711][T29832] bridge13: entered promiscuous mode
[  724.320371][T29832] bridge13: entered allmulticast mode
[  724.325436][T29832] bond12: (slave bridge13): making interface the new active one
[  724.328304][T29832] bond12: (slave bridge13): Enslaving as an active interface with an up link
[  724.483186][T29852] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  724.488756][T29852] syzkaller0: entered promiscuous mode
[  724.492591][T29852] syzkaller0: entered allmulticast mode
[  724.513294][T29852] tipc: Resetting bearer <eth:syzkaller0>
[  724.519474][T29850] tipc: Resetting bearer <eth:syzkaller0>
[  724.532572][T29850] tipc: Disabling bearer <eth:syzkaller0>
[  725.253294][T29920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  725.319938][T29926] __nla_validate_parse: 9 callbacks suppressed
[  725.319950][T29926] netlink: 16170 bytes leftover after parsing attributes in process `syz.0.6538'.
[  725.527920][T29935] bond12: left promiscuous mode
[  725.529608][T29935] bond12: left allmulticast mode
[  725.533960][T29935] bridge13: left promiscuous mode
[  725.536677][T29935] bridge13: left allmulticast mode
[  725.706294][T29946] lo speed is unknown, defaulting to 1000
[  725.793387][T29956] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6547'.
[  725.868824][T29958] : renamed from veth0_to_bond
[  725.878154][T29960] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6549'.
[  725.880895][T29960] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6549'.
[  726.725460][T29976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6553'.
[  726.863789][T29980] lo speed is unknown, defaulting to 1000
[  726.888365][T29984] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6556'.
[  727.137153][T30004] lo speed is unknown, defaulting to 1000
[  727.166854][T30009] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6561'.
[  727.286934][T30018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6563'.
[  727.289972][T30018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6563'.
[  727.381359][T30021] lo speed is unknown, defaulting to 1000
[  727.791936][T30044] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  727.797200][T30044] syzkaller0: entered promiscuous mode
[  727.799409][T30044] syzkaller0: entered allmulticast mode
[  727.805100][T30044] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  727.831082][T30044] tipc: Resetting bearer <eth:syzkaller0>
[  727.838395][T30044] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6568'.
[  727.847970][T30043] tipc: Resetting bearer <eth:syzkaller0>
[  727.865571][T30043] tipc: Disabling bearer <eth:syzkaller0>
[  728.138501][T30067] lo speed is unknown, defaulting to 1000
[  729.128447][T30085] netlink: 'syz.2.6580': attribute type 1 has an invalid length.
[  729.249921][T30089] lo speed is unknown, defaulting to 1000
[  729.525685][T30103] lo speed is unknown, defaulting to 1000
[  729.842175][T30108] netlink: 'syz.0.6586': attribute type 10 has an invalid length.
[  730.237517][T30126] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  730.457126][T30136] syzkaller1: entered promiscuous mode
[  730.459079][T30136] syzkaller1: entered allmulticast mode
[  730.562292][T30147] lo speed is unknown, defaulting to 1000
[  730.667480][T30157] __nla_validate_parse: 24 callbacks suppressed
[  730.667496][T30157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6600'.
[  730.677744][T30157] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6600'.
[  730.680579][T30157] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6600'.
[  730.683561][T30157] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6600'.
[  730.687645][T30157] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6600'.
[  730.751394][T30159] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6601'.
[  730.862535][T30164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6602'.
[  730.866110][T30164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6602'.
[  731.026697][T30181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6607'.
[  731.046626][T30183] IPVS: Error connecting to the multicast addr
[  731.144948][T30196] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6611'.
[  731.332047][T30212] lo speed is unknown, defaulting to 1000
[  731.774611][T30245] lo speed is unknown, defaulting to 1000
[  732.058868][T30256] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  732.153677][T30267] lo speed is unknown, defaulting to 1000
[  732.188856][T30270] netlink: 'syz.0.6632': attribute type 1 has an invalid length.
[  732.192285][T30270] netlink: 'syz.0.6632': attribute type 2 has an invalid length.
[  732.382327][T30276] lo speed is unknown, defaulting to 1000
[  732.446734][T30284] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  732.578861][T30295] netlink: 'syz.0.6640': attribute type 11 has an invalid length.
[  732.723111][T30325] netlink: 'syz.0.6647': attribute type 1 has an invalid length.
[  732.733352][T30325] netlink: 'syz.0.6647': attribute type 3 has an invalid length.
[  732.871198][T30332] syzkaller0: entered promiscuous mode
[  732.872980][T30332] syzkaller0: entered allmulticast mode
[  734.106011][T30353] tc_dump_action: action bad kind
[  734.127403][T30358] netlink: 'syz.2.6655': attribute type 20 has an invalid length.
[  734.135145][ T5909] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  734.136415][T30358] netlink: 'syz.2.6655': attribute type 20 has an invalid length.
[  734.138030][ T5909] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  734.147965][ T5909] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  734.150823][T30355] lo speed is unknown, defaulting to 1000
[  734.150830][ T5909] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  734.209021][T30360] : entered promiscuous mode
[  735.806113][T30416] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  736.347752][T30453] lo speed is unknown, defaulting to 1000
[  736.696826][T30494] __nla_validate_parse: 41 callbacks suppressed
[  736.696841][T30494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6688'.
[  736.701808][T30494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6688'.
[  736.742546][T30498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6689'.
[  736.847245][T30513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6694'.
[  736.916074][T30520] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6694'.
[  737.182284][T30537] netlink: 'syz.0.6702': attribute type 10 has an invalid length.
[  737.276157][T30544] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6704'.
[  737.290142][T30544] lo speed is unknown, defaulting to 1000
[  737.895064][T30574] syzkaller1: entered promiscuous mode
[  737.896836][T30574] syzkaller1: entered allmulticast mode
[  737.900654][T30574] netlink: 'syz.2.6714': attribute type 7 has an invalid length.
[  737.909140][T30575] lo speed is unknown, defaulting to 1000
[  737.959362][T30579] netlink: 'syz.2.6714': attribute type 1 has an invalid length.
[  737.980339][T30579] bond10: (slave bridge13): making interface the new active one
[  737.983325][T30579] bond10: (slave bridge13): Enslaving as an active interface with an up link
[  738.871564][T30584] lo speed is unknown, defaulting to 1000
[  738.916916][T30588] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.6715'.
[  738.996302][T30594] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6717'.
[  739.015044][T30600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6718'.
[  739.329752][T30628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6728'.
[  739.672247][T30660] openvswitch: netlink: IPv4 tun info is not correct
[  739.849593][T30667] lo speed is unknown, defaulting to 1000
[  739.933975][T30672] netlink: 'syz.1.6739': attribute type 1 has an invalid length.
[  740.282108][T30678] 8021q: VLANs not supported on ip_vti0
[  740.858072][ T5909] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  740.860937][ T5909] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  740.863684][ T5909] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  740.871508][ T5909] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  741.191589][T30749] lo speed is unknown, defaulting to 1000
[  741.355081][T30762] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  741.359757][T30762] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  741.462924][T30767] lo speed is unknown, defaulting to 1000
[  741.603842][T30775] lo speed is unknown, defaulting to 1000
[  741.704685][T30775] __nla_validate_parse: 18 callbacks suppressed
[  741.704697][T30775] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6767'.
[  741.709526][T30775] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6767'.
[  741.712338][T30775] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6767'.
[  741.716232][T30775] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6767'.
[  742.413903][T30787] netlink: 'syz.1.6770': attribute type 10 has an invalid length.
[  742.417656][T30787] team0: Device ipvlan1 failed to register rx_handler
[  742.550328][T30796] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  742.553863][T30796] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  743.101999][T30815] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  743.105596][T30815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6778'.
[  743.108364][T30815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6778'.
[  743.143699][T30820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6779'.
[  743.147350][T30820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6779'.
[  743.462698][T30850] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6786'.
[  743.739927][T30873] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6794'.
[  744.466183][T30884] sctp: [Deprecated]: syz.1.6797 (pid 30884) Use of int in max_burst socket option.
[  744.466183][T30884] Use struct sctp_assoc_value instead
[  744.808123][T30900] sctp: [Deprecated]: syz.2.6802 (pid 30900) Use of int in maxseg socket option.
[  744.808123][T30900] Use struct sctp_assoc_value instead
[  745.382911][T30935] xt_time: invalid argument - start or stop time greater than 23:59:59
[  745.390924][T30935] tipc: Failed to remove unknown binding: 66,1,1/2216520862:2162679293/2162679295
[  745.466635][T30936] sctp: [Deprecated]: syz.1.6814 (pid 30936) Use of int in max_burst socket option deprecated.
[  745.466635][T30936] Use struct sctp_assoc_value instead
[  745.995831][T30972] netlink: zone id is out of range
[  745.998039][T30972] netlink: zone id is out of range
[  746.000264][T30972] netlink: zone id is out of range
[  746.002437][T30972] netlink: zone id is out of range
[  746.005327][T30972] netlink: zone id is out of range
[  746.007602][T30972] netlink: zone id is out of range
[  746.011590][T30972] netlink: zone id is out of range
[  746.013922][T30972] netlink: zone id is out of range
[  746.016336][T30972] netlink: zone id is out of range
[  746.018483][T30972] netlink: zone id is out of range
[  746.294579][T30990] nbd2: detected capacity change from 0 to 63
[  746.306489][   T56] block nbd2: Receive control failed (result -104)
[  746.570099][T31006] syz.2.6834: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  746.575772][T31006] CPU: 1 UID: 0 PID: 31006 Comm: syz.2.6834 Not tainted syzkaller #0 PREEMPT(full) 
[  746.575790][T31006] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  746.575799][T31006] Call Trace:
[  746.575804][T31006]  <TASK>
[  746.575811][T31006]  dump_stack_lvl+0x189/0x250
[  746.575835][T31006]  ? __pfx_dump_stack_lvl+0x10/0x10
[  746.575882][T31006]  ? __pfx__printk+0x10/0x10
[  746.575900][T31006]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  746.575918][T31006]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  746.575935][T31006]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  746.575954][T31006]  warn_alloc+0x214/0x310
[  746.575977][T31006]  ? stack_depot_save_flags+0x40/0x860
[  746.575995][T31006]  ? __pfx_warn_alloc+0x10/0x10
[  746.576014][T31006]  ? kasan_save_track+0x4f/0x80
[  746.576029][T31006]  ? xskq_create+0x56/0x170
[  746.576049][T31006]  ? xsk_init_queue+0xb0/0x110
[  746.576066][T31006]  ? xsk_setsockopt+0x4dc/0x8d0
[  746.576082][T31006]  ? do_sock_setsockopt+0x17c/0x1b0
[  746.576094][T31006]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  746.576106][T31006]  ? do_syscall_64+0xfa/0x3b0
[  746.576118][T31006]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  746.576147][T31006]  __vmalloc_node_range_noprof+0x125/0x12f0
[  746.576182][T31006]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  746.576196][T31006]  ? __kasan_kmalloc+0x93/0xb0
[  746.576208][T31006]  vmalloc_user_noprof+0xad/0xf0
[  746.576220][T31006]  ? xskq_create+0xbf/0x170
[  746.576232][T31006]  xskq_create+0xbf/0x170
[  746.576244][T31006]  xsk_init_queue+0xb0/0x110
[  746.576256][T31006]  xsk_setsockopt+0x4dc/0x8d0
[  746.576267][T31006]  ? __pfx_xsk_setsockopt+0x10/0x10
[  746.576278][T31006]  ? __pfx_aa_sk_perm+0x10/0x10
[  746.576291][T31006]  ? aa_sock_opt_perm+0xff/0x1b0
[  746.576300][T31006]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  746.576308][T31006]  ? __pfx_xsk_setsockopt+0x10/0x10
[  746.576319][T31006]  do_sock_setsockopt+0x17c/0x1b0
[  746.576329][T31006]  __x64_sys_setsockopt+0x13f/0x1b0
[  746.576340][T31006]  do_syscall_64+0xfa/0x3b0
[  746.576346][T31006]  ? lockdep_hardirqs_on+0x9c/0x150
[  746.576358][T31006]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  746.576365][T31006]  ? exc_page_fault+0x9f/0xf0
[  746.576377][T31006]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  746.576384][T31006] RIP: 0033:0x7ff42658eba9
[  746.576394][T31006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  746.576401][T31006] RSP: 002b:00007ff4273d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  746.576410][T31006] RAX: ffffffffffffffda RBX: 00007ff4267d5fa0 RCX: 00007ff42658eba9
[  746.576416][T31006] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  746.576421][T31006] RBP: 00007ff426611e19 R08: 0000000000000004 R09: 0000000000000000
[  746.576426][T31006] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  746.576431][T31006] R13: 00007ff4267d6038 R14: 00007ff4267d5fa0 R15: 00007ffe0a756588
[  746.576444][T31006]  </TASK>
[  746.576449][T31006] Mem-Info:
[  746.685159][T31006] active_anon:6422 inactive_anon:0 isolated_anon:0
[  746.685159][T31006]  active_file:1477 inactive_file:38482 isolated_file:0
[  746.685159][T31006]  unevictable:1768 dirty:105 writeback:0
[  746.685159][T31006]  slab_reclaimable:11263 slab_unreclaimable:79906
[  746.685159][T31006]  mapped:18198 shmem:2433 pagetables:923
[  746.685159][T31006]  sec_pagetables:0 bounce:0
[  746.685159][T31006]  kernel_misc_reclaimable:0
[  746.685159][T31006]  free:270321 free_pcp:16189 free_cma:0
[  746.699716][T31006] Node 0 active_anon:15052kB inactive_anon:0kB active_file:3344kB inactive_file:144672kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24016kB dirty:248kB writeback:0kB shmem:4852kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6088kB pagetables:1748kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  746.710656][T31006] Node 1 active_anon:10636kB inactive_anon:0kB active_file:2564kB inactive_file:9256kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:48776kB dirty:172kB writeback:0kB shmem:4880kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7792kB pagetables:2012kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  746.721323][T31006] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  746.731470][T31006] lowmem_reserve[]: 0 811 811 811 811
[  746.733416][T31006] Node 0 DMA32 free:271888kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15596kB inactive_anon:0kB active_file:3344kB inactive_file:144672kB unevictable:3536kB writepending:248kB present:1556484kB managed:830904kB mlocked:0kB bounce:0kB free_pcp:29064kB local_pcp:20644kB free_cma:0kB
[  746.745446][T31006] lowmem_reserve[]: 0 0 0 0 0
[  746.747259][T31006] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  746.756863][T31006] lowmem_reserve[]: 0 0 854 854 854
[  746.758799][T31006] Node 1 Normal free:335420kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10636kB inactive_anon:0kB active_file:2564kB inactive_file:9256kB unevictable:3536kB writepending:172kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:35192kB local_pcp:19992kB free_cma:0kB
[  746.769422][T31006] lowmem_reserve[]: 0 0 0 0 0
[  746.771754][T31006] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  746.777031][T31006] Node 0 DMA32: 1475*4kB (UME) 917*8kB (UME) 326*16kB (UME) 426*32kB (UME) 173*64kB (UME) 81*128kB (UME) 40*256kB (UM) 8*512kB (UM) 13*1024kB (UM) 9*2048kB (UM) 42*4096kB (UME) = 271636kB
[  746.783059][T31006] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  746.787971][T31006] Node 1 Normal: 1929*4kB (UME) 1209*8kB (UME) 610*16kB (UME) 374*32kB (UME) 255*64kB (UME) 145*128kB (UME) 57*256kB (UM) 16*512kB (UME) 13*1024kB (UME) 2*2048kB (ME) 54*4096kB (UM) = 335372kB
[  746.793690][T31006] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  746.796843][T31006] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  746.799717][T31006] 42392 total pagecache pages
[  746.801238][T31006] 0 pages in swap cache
[  746.802607][T31006] Free swap  = 124996kB
[  746.803992][T31006] Total swap = 124996kB
[  746.805547][T31006] 786301 pages RAM
[  746.806888][T31006] 0 pages HighMem/MovableOnly
[  746.808545][T31006] 241343 pages reserved
[  746.809918][T31006] 0 pages cma reserved
[  747.765842][T31037] vxcan1: entered allmulticast mode
[  747.768231][T31037] vxcan1: left allmulticast mode
[  747.862916][T31041] __nla_validate_parse: 11 callbacks suppressed
[  747.862928][T31041] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6842'.
[  748.573816][T31045] bond0: entered promiscuous mode
[  748.578006][T31045] batadv0: entered promiscuous mode
[  748.586725][T31045] 8021q: adding VLAN 0 to HW filter on device batadv0
[  748.730787][T31059] vxcan1: entered allmulticast mode
[  748.735002][T31059] vxcan1: left allmulticast mode
[  748.811818][T31071] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6848'.
[  749.251298][T31112] lo speed is unknown, defaulting to 1000
[  749.258395][T31115] can: request_module (can-proto-3) failed.
[  749.346085][T31125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6859'.
[  749.411078][T31131] netlink: 16386 bytes leftover after parsing attributes in process `syz.0.6861'.
[  749.452695][T31133] netlink: 'syz.0.6862': attribute type 10 has an invalid length.
[  749.600821][T31144] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6865'.
[  749.646887][T31150] netlink: 'syz.1.6867': attribute type 4 has an invalid length.
[  749.689234][T31152] IPVS: Scheduler module ip_vs_ not found
[  749.753177][T31159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6871'.
[  749.756469][T31159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6871'.
[  749.830422][T31171] netlink: 'syz.2.6874': attribute type 1 has an invalid length.
[  749.880952][T31178] netlink: 'syz.2.6877': attribute type 2 has an invalid length.
[  749.915890][T31180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6878'.
[  750.020820][T31186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6880'.
[  750.072378][T31197] netlink: 384 bytes leftover after parsing attributes in process `syz.0.6880'.
[  750.293848][T31210] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  750.388432][T31213] syzkaller1: entered promiscuous mode
[  750.390203][T31213] syzkaller1: entered allmulticast mode
[  750.702658][T31231] vxcan1: entered allmulticast mode
[  750.704542][T31231] vxcan1: left allmulticast mode
[  750.713195][T31233] netlink: 'syz.0.6891': attribute type 11 has an invalid length.
[  751.780791][T31268] netlink: 'syz.1.6902': attribute type 19 has an invalid length.
[  751.998674][T31278] netlink: 'syz.2.6904': attribute type 10 has an invalid length.
[  752.003814][T31278] team0: Device ipvlan1 failed to register rx_handler
[  752.256978][T31282] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  752.260265][T31283] syzkaller0: entered promiscuous mode
[  752.263633][T31283] syzkaller0: entered allmulticast mode
[  752.269915][T31282] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  752.282312][T31283] tipc: Resetting bearer <eth:syzkaller0>
[  752.290294][T31281] tipc: Resetting bearer <eth:syzkaller0>
[  752.307803][T31281] tipc: Disabling bearer <eth:syzkaller0>
[  752.884106][   T33] audit: type=1800 audit(1757691625.665:11): pid=31309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6914" name=CB dev="tmpfs" ino=12110 res=0 errno=0
[  753.006830][T31320] IPVS: length: 238 != 8
[  753.015914][T31320] sctp: [Deprecated]: syz.2.6918 (pid 31320) Use of int in max_burst socket option deprecated.
[  753.015914][T31320] Use struct sctp_assoc_value instead
[  753.219932][T31344] __nla_validate_parse: 13 callbacks suppressed
[  753.219949][T31344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6926'.
[  753.463338][T31372] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080
[  753.533064][T31379] netlink: 'syz.1.6936': attribute type 10 has an invalid length.
[  753.542131][T31379] team0: Device ipvlan1 failed to register rx_handler
[  753.786179][T31390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6941'.
[  753.791793][T31391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6941'.
[  753.835533][T31395] netlink: 'syz.0.6942': attribute type 1 has an invalid length.
[  753.838724][T31395] netlink: 'syz.0.6942': attribute type 11 has an invalid length.
[  753.841835][T31395] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6942'.
[  753.950788][T31401] sctp: [Deprecated]: syz.0.6944 (pid 31401) Use of int in maxseg socket option.
[  753.950788][T31401] Use struct sctp_assoc_value instead
[  754.403261][T31420] lo speed is unknown, defaulting to 1000
[  754.455129][T31425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6953'.
[  754.458736][T31425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6953'.
[  754.567664][T31434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6954'.
[  754.688227][T31444] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  754.694746][T31444] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  754.767256][T31446] lo speed is unknown, defaulting to 1000
[  754.893827][T31453] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6960'.
[  754.897524][T31454] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6960'.
[  755.098941][T31462] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6962'.
[  755.356003][T31483] 8021q: adding VLAN 0 to HW filter on device bond14
[  755.421023][T31483] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  755.429067][T31483] bond14: (slave macvlan0): Enslaving as a backup interface with a down link
[  755.619601][T31503] lo speed is unknown, defaulting to 1000
[  755.639700][T31508] lo speed is unknown, defaulting to 1000
[  755.850159][T31520] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component
[  756.110392][T31533] lo speed is unknown, defaulting to 1000
[  756.577578][T31561] lo speed is unknown, defaulting to 1000
[  756.922242][T31565] net_ratelimit: 35 callbacks suppressed
[  756.922260][T31565] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  756.925011][T31566] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  756.925030][T31566] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  756.950203][T31565] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  757.017800][T31570] syzkaller1: entered promiscuous mode
[  757.019636][T31570] syzkaller1: entered allmulticast mode
[  757.491187][T31608] lo speed is unknown, defaulting to 1000
[  757.606884][T31615] veth13: entered promiscuous mode
[  757.698494][T31621] tipc: MTU too low for tipc bearer
[  757.752832][T31626] netlink: 'syz.0.7007': attribute type 11 has an invalid length.
[  758.036122][T31641] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  758.232249][T31661] netlink: 'syz.1.7016': attribute type 1 has an invalid length.
[  758.235537][T31661] __nla_validate_parse: 19 callbacks suppressed
[  758.235545][T31661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7016'.
[  758.270540][T31663] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7017'.
[  758.378539][T31669] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.7020'.
[  758.457197][T31674] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7019'.
[  758.461510][T31674] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7019'.
[  758.465664][T31674] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7019'.
[  758.469190][T31674] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7019'.
[  758.481496][T31676] netlink: 'syz.0.7022': attribute type 3 has an invalid length.
[  758.486105][T31676] netlink: 'syz.0.7022': attribute type 3 has an invalid length.
[  758.536856][T31678] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7023'.
[  758.622748][T31687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7026'.
[  758.628427][T31687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7026'.
[  759.607552][T31740] pimreg3: entered allmulticast mode
[  759.615605][T31740] syzkaller1: entered promiscuous mode
[  759.617517][T31740] syzkaller1: entered allmulticast mode
[  759.979110][T31770] vxcan1: entered allmulticast mode
[  759.981751][T31770] vxcan1: left allmulticast mode
[  760.164005][T31781] sctp: [Deprecated]: syz.1.7049 (pid 31781) Use of int in max_burst socket option deprecated.
[  760.164005][T31781] Use struct sctp_assoc_value instead
[  760.301057][T31788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  760.852074][T31820] ip6tnl5: entered promiscuous mode
[  760.854223][T31820] ip6tnl5: entered allmulticast mode
[  760.857012][T31820] team0: Device ip6tnl5 is up. Set it down before adding it as a team port
[  760.879569][T31819] ip6tnl5: entered promiscuous mode
[  760.882726][T31819] ip6tnl5: entered allmulticast mode
[  760.886589][T31819] team0: Device ip6tnl5 is up. Set it down before adding it as a team port
[  761.232775][T31835] lo speed is unknown, defaulting to 1000
[  761.238091][T31835] netlink: 'syz.0.7059': attribute type 22 has an invalid length.
[  761.241311][T31835] netlink: 'syz.0.7059': attribute type 22 has an invalid length.
[  761.305106][T31841] netlink: 'syz.1.7060': attribute type 1 has an invalid length.
[  762.064043][T31873] netlink: 'syz.2.7068': attribute type 10 has an invalid length.
[  762.070457][T31873] team0: Device ipvlan1 failed to register rx_handler
[  762.577769][T31887] netlink: 'syz.0.7073': attribute type 13 has an invalid length.
[  762.580981][T31887] netlink: 'syz.0.7073': attribute type 17 has an invalid length.
[  762.611260][T31887] 8021q: adding VLAN 0 to HW filter on device bond0
[  762.617376][T31887] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  762.669224][T31887] lo speed is unknown, defaulting to 1000
[  762.713454][T31888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  762.797029][T31886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  762.992814][T31898] lo speed is unknown, defaulting to 1000
[  763.123345][T31907] netlink: 'syz.1.7077': attribute type 12 has an invalid length.
[  763.273550][T31914] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  763.277654][T31914] __nla_validate_parse: 15 callbacks suppressed
[  763.277664][T31914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7078'.
[  763.451780][T31920] lo speed is unknown, defaulting to 1000
[  763.720833][T31920] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7081'.
[  763.862277][T31927] lo speed is unknown, defaulting to 1000
[  764.057714][T31934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7083'.
[  764.060566][T31934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7083'.
[  764.618539][T31943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7086'.
[  764.785672][T31948] netlink: 830 bytes leftover after parsing attributes in process `syz.0.7088'.
[  764.836797][T31950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7089'.
[  764.839888][T31950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7089'.
[  765.057710][T31971] netlink: 172 bytes leftover after parsing attributes in process `syz.1.7093'.
[  765.887350][T31984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7096'.
[  765.891142][T31984] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  765.963695][T32000] netlink: 'syz.2.7100': attribute type 12 has an invalid length.
[  765.969574][T31999] delete_channel: no stack
[  766.008463][T32011] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  766.011678][T32011] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  767.032476][T32033] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  767.070484][T32043] lo speed is unknown, defaulting to 1000
[  767.306571][T32063] netlink: 'syz.1.7119': attribute type 13 has an invalid length.
[  767.309299][T32063] netlink: 'syz.1.7119': attribute type 17 has an invalid length.
[  767.337157][T32063] 8021q: adding VLAN 0 to HW filter on device team0
[  767.340677][T32063] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  767.349799][ T5869] lo speed is unknown, defaulting to 1000
[  767.351626][ T5869] s: Port: 1 Link ACTIVE
[  767.407045][T32061] lo speed is unknown, defaulting to 1000
[  767.603881][T32077] netlink: 'syz.1.7123': attribute type 10 has an invalid length.
[  767.619967][T32077] team0: Device ipvlan1 failed to register rx_handler
[  768.138480][T32117] lo speed is unknown, defaulting to 1000
[  768.305824][T32129] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  768.311535][T32129] __nla_validate_parse: 16 callbacks suppressed
[  768.311546][T32129] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7137'.
[  768.568797][T32138] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7140'.
[  768.843772][T32149] netlink: 27 bytes leftover after parsing attributes in process `syz.0.7144'.
[  768.900185][T32149] lo speed is unknown, defaulting to 1000
[  768.937863][T32152] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7145'.
[  769.668103][T32169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7150'.
[  769.783745][T32171] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7151'.
[  769.911721][T32185] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7155'.
[  769.915166][T32185] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7155'.
[  769.917867][T32185] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7155'.
[  769.921093][T32185] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7155'.
[  770.344976][T32194] lo speed is unknown, defaulting to 1000
[  771.455724][T32236] lo speed is unknown, defaulting to 1000
[  772.540157][T32265] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  772.817159][T32289] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  773.021441][T32310] lo speed is unknown, defaulting to 1000
[  773.082598][T32311] bond11: entered promiscuous mode
[  773.086899][T32311] 8021q: adding VLAN 0 to HW filter on device bond11
[  773.111581][T32311] 8021q: adding VLAN 0 to HW filter on device bond11
[  773.114561][T32311] bond11: (slave wireguard1): The slave device specified does not support setting the MAC address
[  773.118275][T32311] bond11: (slave wireguard1): Error -95 calling set_mac_address
[  773.134100][T32314] bond11: (slave wireguard1): The slave device specified does not support setting the MAC address
[  773.139788][T32314] bond11: (slave wireguard1): Error -95 calling set_mac_address
[  773.328001][T32326] __nla_validate_parse: 7 callbacks suppressed
[  773.328028][T32326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7189'.
[  773.333784][T32326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7189'.
[  773.452473][  T973] lo speed is unknown, defaulting to 1000
[  773.454441][  T973] s: Port: 1 Link DOWN
[  773.508503][T32343] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7194'.
[  773.532818][T32342] lo speed is unknown, defaulting to 1000
[  774.158661][T32393] lo speed is unknown, defaulting to 1000
[  774.729699][T32415] lo speed is unknown, defaulting to 1000
[  774.735762][T32423] netlink: 'syz.2.7215': attribute type 2 has an invalid length.
[  774.739578][T32423] netlink: 'syz.2.7215': attribute type 1 has an invalid length.
[  774.742601][T32423] netlink: 'syz.2.7215': attribute type 1 has an invalid length.
[  775.057389][T32443] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7221'.
[  775.121965][T32436] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  775.327194][T32457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7225'.
[  775.337374][T32457] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7225'.
[  775.340583][T32457] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7225'.
[  775.343611][T32457] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7225'.
[  775.356523][T32457] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7225'.
[  775.454787][T32460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  776.015782][T32479] lo speed is unknown, defaulting to 1000
[  776.053500][T32483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7231'.
[  776.385961][T32504] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  776.934215][  T128] block nbd2: Possible stuck request ffff88803aa11a00: control (read@0,1024B). Runtime 30 seconds
[  776.944631][  T128] block nbd2: Possible stuck request ffff88803aa11c00: control (read@1024,1024B). Runtime 30 seconds
[  776.948911][  T128] block nbd2: Possible stuck request ffff88803aa11e00: control (read@2048,1024B). Runtime 30 seconds
[  776.953161][  T128] block nbd2: Possible stuck request ffff88803aa12000: control (read@3072,1024B). Runtime 30 seconds
[  777.375591][T32610] veth13: left promiscuous mode
[  777.496309][T32639] block nbd0: NBD_DISCONNECT
[  777.498407][T32639] block nbd0: Send disconnect failed -32
[  777.500698][T32639] block nbd0: shutting down sockets
[  778.674477][ T5244] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  778.818356][T32692] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  778.882783][T32714] vxcan1: entered allmulticast mode
[  778.889018][T32714] vxcan1: left allmulticast mode
[  778.903161][T32717] __nla_validate_parse: 13 callbacks suppressed
[  778.903177][T32717] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.7285'.
[  778.977499][T32721] lo speed is unknown, defaulting to 1000
[  779.088503][T32724] lo speed is unknown, defaulting to 1000
[  779.500621][T32747] tipc: Resetting bearer <eth:macvtap0>
[  779.909553][T32757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7295'.
[  779.912640][T32757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7295'.
[  780.090198][T32760] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  780.131464][  T307] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7299'.
[  780.174660][  T310] netlink: 'syz.1.7298': attribute type 10 has an invalid length.
[  780.178674][  T310] team0: Device ipvlan1 failed to register rx_handler
[  780.270489][  T324] lo speed is unknown, defaulting to 1000
[  780.998264][  T344] bridge0: port 1(syz_tun) entered blocking state
[  781.002289][  T344] bridge0: port 1(syz_tun) entered disabled state
[  781.007284][  T344] syz_tun: entered allmulticast mode
[  781.011262][  T344] syz_tun: entered promiscuous mode
[  781.072034][  T350] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7307'.
[  781.075429][  T350] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7307'.
[  781.080142][  T350] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7307'.
[  781.083162][  T350] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7307'.
[  781.956469][  T379] syzkaller0: tun_chr_ioctl cmd 1074025673
[  781.989899][  T379] syzkaller0: create flow: hash 3073632820 index 1
[  782.189782][  T395] lo speed is unknown, defaulting to 1000
[  782.203751][  T396] lo speed is unknown, defaulting to 1000
[  782.781874][  T378] syzkaller0: delete flow: hash 3073632820 index 1
[  783.458414][  T423] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7325'.
[  784.171961][  T420] lo speed is unknown, defaulting to 1000
[  784.177716][  T425] lo speed is unknown, defaulting to 1000
[  784.353259][  T437] lo speed is unknown, defaulting to 1000
[  784.601898][  T463] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7333'.
[  784.628182][  T466] lo speed is unknown, defaulting to 1000
[  784.723965][  T478] vxcan1: entered allmulticast mode
[  784.727182][  T478] vxcan1: left allmulticast mode
[  784.847312][  T483] lo speed is unknown, defaulting to 1000
[  784.856256][  T486] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7338'.
[  784.949113][  T490] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  806.998843][  T128] block nbd2: Possible stuck request ffff88803aa11a00: control (read@0,1024B). Runtime 60 seconds
[  807.007084][  T128] block nbd2: Possible stuck request ffff88803aa11c00: control (read@1024,1024B). Runtime 60 seconds
[  807.011074][  T128] block nbd2: Possible stuck request ffff88803aa11e00: control (read@2048,1024B). Runtime 60 seconds
[  807.016017][  T128] block nbd2: Possible stuck request ffff88803aa12000: control (read@3072,1024B). Runtime 60 seconds
[  809.294513][ T5300] udevd[5300]: worker [30947] /devices/virtual/block/nbd2 is taking a long time
[  819.048953][  T626] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7363'.
[  819.095638][   T33] audit: type=1800 audit(1757691691.885:12): pid=630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7364" name="blkio.bfq.time_recursive" dev="tmpfs" ino=12166 res=0 errno=0
[  819.096315][  T631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7364'.
[  819.116099][  T623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7361'.
[  819.119517][  T623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7361'.
[  819.373627][  T643] lo speed is unknown, defaulting to 1000
[  819.403768][  T656] syzkaller1: entered allmulticast mode
[  819.568351][  T662] dvmrp8: entered allmulticast mode
[  819.597610][  T662] lo speed is unknown, defaulting to 1000
[  819.669026][  T661] dvmrp8: left allmulticast mode
[  819.701751][  T664] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7372'.
[  819.707326][  T664] netlink: 216 bytes leftover after parsing attributes in process `syz.1.7372'.
[  819.948893][  T675] lo speed is unknown, defaulting to 1000
[  820.023547][  T678] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7377'.
[  820.027722][  T678] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7377'.
[  820.031285][  T678] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7377'.
[  820.035940][  T678] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7377'.
[  820.793138][  T724] lo speed is unknown, defaulting to 1000
[  820.927663][  T733] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  820.931796][  T733] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  821.164918][  T743] lo speed is unknown, defaulting to 1000
[  821.784700][  T780] lo speed is unknown, defaulting to 1000
[  821.967307][  T800] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  822.813702][  T827] lo speed is unknown, defaulting to 1000
[  822.818822][  T825] netlink: 'syz.1.7410': attribute type 1 has an invalid length.
[  823.206823][  T851] lo speed is unknown, defaulting to 1000
[  823.568646][  T879] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  823.677803][  T883] lo speed is unknown, defaulting to 1000
[  823.845400][  T905] lo speed is unknown, defaulting to 1000
[  824.005260][  T920] sch_tbf: burst 2 is lower than device lo mtu (1550) !
[  824.131876][  T938] lo speed is unknown, defaulting to 1000
[  824.614487][  T961] __nla_validate_parse: 13 callbacks suppressed
[  824.614528][  T961] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.7443'.
[  824.621758][  T960] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.7443'.
[  824.702726][  T967] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7445'.
[  824.777897][  T974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7447'.
[  825.023718][  T983] tipc: Failed to remove unknown binding: 66,1,1/2391530252:3420817219/3420817221
[  825.082772][  T983] tipc: Failed to remove unknown binding: 66,1,1/2391530252:3420817219/3420817221
[  825.176969][  T997] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7453'.
[  825.286153][ T1009] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  825.313263][ T1008] syzkaller0: entered promiscuous mode
[  825.315443][ T1008] syzkaller0: entered allmulticast mode
[  825.317624][ T1008] tipc: Resetting bearer <eth:syzkaller0>
[  825.322227][ T1007] tipc: Resetting bearer <eth:syzkaller0>
[  826.169624][ T1026] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7457'.
[  826.538723][ T1007] tipc: Disabling bearer <eth:syzkaller0>
[  826.583509][ T1032] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7459'.
[  826.586862][ T1032] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7459'.
[  826.763019][ T1050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7463'.
[  826.988687][ T1058] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7466'.
[  827.130071][ T5713] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  828.012731][ T1101] netlink: 'syz.1.7470': attribute type 83 has an invalid length.
[  828.088613][ T1109] openvswitch: netlink: VXLAN extension message has 2 unknown bytes.
[  828.406041][ T1135] netlink: 'syz.1.7481': attribute type 10 has an invalid length.
[  828.449836][ T1140] sctp: [Deprecated]: syz.1.7482 (pid 1140) Use of int in maxseg socket option.
[  828.449836][ T1140] Use struct sctp_assoc_value instead
[  828.963042][ T1143] lo speed is unknown, defaulting to 1000
[  829.102752][ T1148] netlink: 'syz.2.7484': attribute type 12 has an invalid length.
[  829.330336][ T1159] lo speed is unknown, defaulting to 1000
[  829.615985][ T1177] vxcan1: entered allmulticast mode
[  829.618184][ T1178] vxcan1: left allmulticast mode
[  829.652596][ T1181] __nla_validate_parse: 10 callbacks suppressed
[  829.652610][ T1181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7493'.
[  829.699506][   T33] audit: type=1800 audit(1757691702.485:13): pid=1184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7494" name="blkio.bfq.time_recursive" dev="tmpfs" ino=13171 res=0 errno=0
[  829.797064][ T1195] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7498'.
[  829.972915][ T1207] netlink: 'syz.2.7500': attribute type 1 has an invalid length.
[  830.124104][ T1222] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7508'.
[  830.421100][ T1256] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7516'.
[  830.423957][ T1256] netlink: 84 bytes leftover after parsing attributes in process `syz.0.7516'.
[  830.788070][ T1273] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  830.800812][ T1273] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7519'.
[  830.812083][ T1273] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7519'.
[  830.824818][ T1273] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7519'.
[  830.833631][ T1273] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7519'.
[  831.266131][ T1288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7523'.
[  831.386123][ T1309] lo speed is unknown, defaulting to 1000
[  832.029507][ T1327] lo speed is unknown, defaulting to 1000
[  832.345824][ T1337] dvmrp8: entered allmulticast mode
[  832.380273][ T1337] lo speed is unknown, defaulting to 1000
[  832.712165][ T1355] lo speed is unknown, defaulting to 1000
[  832.808065][ T1360] lo speed is unknown, defaulting to 1000
[  833.107806][ T1332] dvmrp8: left allmulticast mode
[  833.388080][ T1399] lo speed is unknown, defaulting to 1000
[  833.457914][ T1401] lo speed is unknown, defaulting to 1000
[  833.471623][ T1406] veth16: entered allmulticast mode
[  833.566609][ T1399] openvswitch: netlink: Missing valid actions attribute.
[  833.569442][ T1399] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  834.154248][ T1444] netlink: 'syz.1.7560': attribute type 1 has an invalid length.
[  834.157764][ T1444] netlink: 'syz.1.7560': attribute type 2 has an invalid length.
[  834.923378][ T1494] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  834.927881][ T1494] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  834.962078][ T1497] __nla_validate_parse: 20 callbacks suppressed
[  834.962095][ T1497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7569'.
[  834.968217][ T1497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7569'.
[  835.143137][ T1499] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7570'.
[  835.194932][ T1509] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7573'.
[  835.489580][ T1532] netlink: 'syz.1.7579': attribute type 1 has an invalid length.
[  835.492906][ T1532] netlink: 'syz.1.7579': attribute type 2 has an invalid length.
[  835.497152][ T1532] netlink: 'syz.1.7579': attribute type 1 has an invalid length.
[  835.500133][ T1532] netlink: 1156 bytes leftover after parsing attributes in process `syz.1.7579'.
[  835.615262][ T1538] syzkaller1: entered promiscuous mode
[  835.617432][ T1538] syzkaller1: entered allmulticast mode
[  835.870461][ T1545] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  835.874398][ T5244] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  835.983902][ T1551] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7586'.
[  836.026831][ T1554] lo speed is unknown, defaulting to 1000
[  836.122608][ T1561] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7587'.
[  836.127687][ T1561] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7587'.
[  836.130588][ T1561] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7587'.
[  836.133542][ T1561] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7587'.
[  837.078006][  T128] block nbd2: Possible stuck request ffff88803aa11a00: control (read@0,1024B). Runtime 90 seconds
[  837.082229][  T128] block nbd2: Possible stuck request ffff88803aa11c00: control (read@1024,1024B). Runtime 90 seconds
[  837.086675][  T128] block nbd2: Possible stuck request ffff88803aa11e00: control (read@2048,1024B). Runtime 90 seconds
[  837.091019][  T128] block nbd2: Possible stuck request ffff88803aa12000: control (read@3072,1024B). Runtime 90 seconds
[  837.869186][ T1631] nbd: illegal input index 65508
[  837.874228][ T1629] lo speed is unknown, defaulting to 1000
[  837.952113][ T1641] delete_channel: no stack
[  838.127657][ T1660] lo speed is unknown, defaulting to 1000
[  838.860432][ T1679] lo speed is unknown, defaulting to 1000
[  840.182070][ T1727] netlink: 'syz.2.7631': attribute type 12 has an invalid length.
[  840.457099][ T1741] __nla_validate_parse: 10 callbacks suppressed
[  840.457120][ T1741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7636'.
[  840.643106][ T1753] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7639'.
[  840.648724][ T1753] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7639'.
[  840.651747][ T1753] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7639'.
[  840.655619][ T1753] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7639'.
[  840.730561][ T1757] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  841.141517][ T1767] lo speed is unknown, defaulting to 1000
[  842.298211][ T1817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7656'.
[  842.301088][ T1817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7656'.
[  842.329675][ T1819] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7657'.
[  842.332941][ T1819] sit0: entered promiscuous mode
[  842.335480][ T1819] sit0: entered allmulticast mode
[  842.365128][ T1822] vxcan1: entered allmulticast mode
[  842.367337][ T1822] vxcan1: left allmulticast mode
[  842.621214][ T1832] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7661'.
[  842.869487][ T1838] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7662'.
[  844.194923][ T1894] netlink: 'syz.2.7677': attribute type 10 has an invalid length.
[  844.199500][ T1894] team0: Device ipvlan1 failed to register rx_handler
[  844.479161][ T1898] sit0: left promiscuous mode
[  844.480858][ T1898] sit0: left allmulticast mode
[  844.490219][ T1898] vlan0: left promiscuous mode
[  844.497683][ T1898] xfrm2: left allmulticast mode
[  844.499851][ T1898] ip6tnl4: left promiscuous mode
[  844.840367][ T1926] netlink: 'syz.0.7685': attribute type 1 has an invalid length.
[  844.846609][ T1926] pim6reg: entered allmulticast mode
[  844.848946][ T1926] pim6reg: left allmulticast mode
[  845.493540][T20250] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  845.499931][T20250] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  845.503174][T20250] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  845.506484][T20250] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  845.509286][T20250] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  845.561748][ T1967] lo speed is unknown, defaulting to 1000
[  845.571039][ T1971] lo speed is unknown, defaulting to 1000
[  845.689022][ T1975] __nla_validate_parse: 10 callbacks suppressed
[  845.689036][ T1975] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7697'.
[  845.759385][ T1971] chnl_net:caif_netlink_parms(): no params data found
[  845.853516][ T1971] bridge0: port 1(bridge_slave_0) entered blocking state
[  845.856101][ T1971] bridge0: port 1(bridge_slave_0) entered disabled state
[  845.858367][ T1971] bridge_slave_0: entered allmulticast mode
[  845.861111][ T1971] bridge_slave_0: entered promiscuous mode
[  845.865021][ T1971] bridge0: port 2(bridge_slave_1) entered blocking state
[  845.867355][ T1971] bridge0: port 2(bridge_slave_1) entered disabled state
[  845.870250][ T1971] bridge_slave_1: entered allmulticast mode
[  845.874246][ T1971] bridge_slave_1: entered promiscuous mode
[  845.910450][ T1971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  845.914236][ T1993] can: request_module (can-proto-0) failed.
[  845.925348][ T1971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  845.989227][ T1971] team0: Port device team_slave_0 added
[  845.994050][ T1971] team0: Port device team_slave_1 added
[  845.995699][ T2000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7702'.
[  846.026765][ T1971] batman_adv: batadv0: Adding interface: batadv_slave_0
[  846.029130][ T1971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  846.042968][ T1971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  846.061854][ T1971] batman_adv: batadv0: Adding interface: batadv_slave_1
[  846.065143][ T1971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  846.074862][ T1971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  846.147255][ T1971] hsr_slave_0: entered promiscuous mode
[  846.149580][ T1971] hsr_slave_1: entered promiscuous mode
[  846.151775][ T1971] debugfs: 'hsr0' already exists in 'hsr'
[  846.153681][ T1971] Cannot create hsr debugfs directory
[  846.341238][ T1971] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  846.357226][ T1971] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  846.362320][ T1971] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  846.370212][ T1971] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  846.401944][ T2026] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  846.421220][ T1971] bridge0: port 2(bridge_slave_1) entered blocking state
[  846.424106][ T1971] bridge0: port 2(bridge_slave_1) entered forwarding state
[  846.428327][ T1971] bridge0: port 1(bridge_slave_0) entered blocking state
[  846.431225][ T1971] bridge0: port 1(bridge_slave_0) entered forwarding state
[  846.479388][ T1971] 8021q: adding VLAN 0 to HW filter on device bond0
[  846.489387][T23941] bridge0: port 1(bridge_slave_0) entered disabled state
[  846.493175][T23941] bridge0: port 2(bridge_slave_1) entered disabled state
[  846.506089][ T1971] 8021q: adding VLAN 0 to HW filter on device team0
[  846.513770][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  846.516670][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  846.524188][ T2043] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7710'.
[  846.535104][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  846.538048][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  846.575204][ T2046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7711'.
[  846.578898][ T2046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7711'.
[  846.651656][ T1971] 8021q: adding VLAN 0 to HW filter on device batadv0
[  846.679873][ T1971] veth0_vlan: entered promiscuous mode
[  846.686879][ T1971] veth1_vlan: entered promiscuous mode
[  846.711962][ T1971] veth0_macvtap: entered promiscuous mode
[  846.723991][ T1971] veth1_macvtap: entered promiscuous mode
[  846.739997][ T1971] batman_adv: batadv0: Interface activated: batadv_slave_0
[  846.747761][ T1971] batman_adv: batadv0: Interface activated: batadv_slave_1
[  846.754015][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  846.757245][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  846.761729][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  846.766039][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  846.827635][ T3629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  846.833203][ T3629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  846.851206][ T2064] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7715'.
[  846.858765][ T3654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  846.861444][ T2064] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7715'.
[  846.865861][ T3654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  846.910205][ T2071] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  846.913717][ T2071] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  846.917756][ T2072] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  846.921220][ T2072] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  847.122211][ T2080] netlink: 6 bytes leftover after parsing attributes in process `syz.3.7718'.
[  847.291021][ T2090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7720'.
[  847.296093][ T2090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7720'.
[  847.360203][ T2098] sctp: [Deprecated]: syz.3.7724 (pid 2098) Use of int in max_burst socket option.
[  847.360203][ T2098] Use struct sctp_assoc_value instead
[  847.368475][ T2098] sctp: [Deprecated]: syz.3.7724 (pid 2098) Use of int in max_burst socket option.
[  847.368475][ T2098] Use struct sctp_assoc_value instead
[  847.373496][ T2098] sctp: [Deprecated]: syz.3.7724 (pid 2098) Use of int in max_burst socket option.
[  847.373496][ T2098] Use struct sctp_assoc_value instead
[  847.379002][ T2098] sctp: [Deprecated]: syz.3.7724 (pid 2098) Use of int in max_burst socket option.
[  847.379002][ T2098] Use struct sctp_assoc_value instead
[  847.383926][ T2098] sctp: [Deprecated]: syz.3.7724 (pid 2098) Use of int in max_burst socket option.
[  847.383926][ T2098] Use struct sctp_assoc_value instead
[  847.392007][ T2098] sctp: [Deprecated]: syz.3.7724 (pid 2098) Use of int in max_burst socket option.
[  847.392007][ T2098] Use struct sctp_assoc_value instead
[  847.398068][ T2098] sctp: [Deprecated]: syz.3.7724 (pid 2098) Use of int in max_burst socket option.
[  847.398068][ T2098] Use struct sctp_assoc_value instead
[  847.402773][ T2098] sctp: [Deprecated]: syz.3.7724 (pid 2098) Use of int in max_burst socket option.
[  847.402773][ T2098] Use struct sctp_assoc_value instead
[  847.407831][ T2098] sctp: [Deprecated]: syz.3.7724 (pid 2098) Use of int in max_burst socket option.
[  847.407831][ T2098] Use struct sctp_assoc_value instead
[  847.413241][ T2098] sctp: [Deprecated]: syz.3.7724 (pid 2098) Use of int in max_burst socket option.
[  847.413241][ T2098] Use struct sctp_assoc_value instead
[  847.554990][T20250] Bluetooth: hci1: command tx timeout
[  847.564193][ T2123] netlink: 'syz.0.7729': attribute type 4 has an invalid length.
[  847.571312][ T2123] netlink: 'syz.0.7729': attribute type 4 has an invalid length.
[  847.646774][ T2127] TC_ACT_REPEAT abuse ?
[  847.677190][ T2134] netlink: 'syz.3.7734': attribute type 83 has an invalid length.
[  847.693604][ T2131] lo speed is unknown, defaulting to 1000
[  847.800640][ T5713] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  847.820605][ T2147] lo speed is unknown, defaulting to 1000
[  848.081621][ T2155] lo speed is unknown, defaulting to 1000
[  848.849387][ T2193] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  848.918392][ T2200] lo speed is unknown, defaulting to 1000
[  849.161330][ T2215] team0: No ports can be present during mode change
[  849.362790][ T2226] lo speed is unknown, defaulting to 1000
[  849.615199][ T2234] lo speed is unknown, defaulting to 1000
[  849.634475][T20250] Bluetooth: hci1: command tx timeout
[  849.763494][ T2252] vxcan1: entered allmulticast mode
[  849.807001][ T2257] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  849.848236][ T2263] netlink: 'syz.0.7762': attribute type 1 has an invalid length.
[  849.969363][ T2268] lo speed is unknown, defaulting to 1000
[  850.031016][ T2274] lo speed is unknown, defaulting to 1000
[  850.079204][ T2274] netlink: 'syz.1.7766': attribute type 1 has an invalid length.
[  850.081619][ T2274] netlink: 'syz.1.7766': attribute type 2 has an invalid length.
[  850.102300][ T2286] netlink: 'syz.0.7769': attribute type 7 has an invalid length.
[  850.107445][ T2286] netlink: 'syz.0.7769': attribute type 8 has an invalid length.
[  850.377490][ T2312] Bluetooth: MGMT ver 1.23
[  850.382283][ T2312] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  850.490035][ T2317] lo speed is unknown, defaulting to 1000
[  850.791702][ T2339] __nla_validate_parse: 14 callbacks suppressed
[  850.791713][ T2339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7784'.
[  850.796714][ T2339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7784'.
[  850.959090][ T2346] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  850.962518][ T2346] syzkaller0: entered promiscuous mode
[  850.964214][ T2346] syzkaller0: entered allmulticast mode
[  851.004212][ T2346] tipc: Resetting bearer <eth:syzkaller0>
[  851.008223][ T2346] netlink: 'syz.1.7787': attribute type 2 has an invalid length.
[  851.024825][ T2346] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7787'.
[  851.055815][ T2345] tipc: Resetting bearer <eth:syzkaller0>
[  851.068229][ T2345] tipc: Disabling bearer <eth:syzkaller0>
[  851.110636][ T2357] netlink: 'syz.3.7789': attribute type 1 has an invalid length.
[  851.115803][ T2356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7790'.
[  851.129530][ T2357] 8021q: adding VLAN 0 to HW filter on device bond1
[  851.141712][ T2356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7790'.
[  851.147856][ T2356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7790'.
[  851.152057][ T2357] bond1: (slave geneve2): making interface the new active one
[  851.158212][ T2357] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  851.164911][ T2360] vxcan1: entered allmulticast mode
[  851.167627][ T2360] vxcan1: left allmulticast mode
[  851.173562][ T2357] bond1: entered promiscuous mode
[  851.179916][ T2357] geneve2: entered promiscuous mode
[  851.268988][ T2375] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7795'.
[  851.315058][ T2382] vxcan1: entered allmulticast mode
[  851.319252][ T2382] vxcan1: left allmulticast mode
[  851.332903][ T2377] lo speed is unknown, defaulting to 1000
[  851.528698][ T2393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7800'.
[  851.533128][ T2393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7800'.
[  851.674215][ T2409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7803'.
[  851.714788][T20250] Bluetooth: hci1: command tx timeout
[  852.969734][ T2472] lo speed is unknown, defaulting to 1000
[  853.266564][ T2490] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  853.269829][ T2490] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  853.804448][T20250] Bluetooth: hci1: command tx timeout
[  853.967923][ T2539] lo speed is unknown, defaulting to 1000
[  854.039843][ T2546] validate_nla: 1 callbacks suppressed
[  854.039919][ T2546] netlink: 'syz.0.7833': attribute type 12 has an invalid length.
[  854.402294][ T2570] syzkaller1: entered promiscuous mode
[  854.408722][ T2570] syzkaller1: entered allmulticast mode
[  854.597276][ T2598] netlink: 'syz.1.7844': attribute type 13 has an invalid length.
[  854.600287][ T2598] netlink: 'syz.1.7844': attribute type 13 has an invalid length.
[  855.307715][ T2668] netlink: 'syz.0.7862': attribute type 30 has an invalid length.
[  855.638244][ T2677] syzkaller1: entered promiscuous mode
[  855.640052][ T2677] syzkaller1: entered allmulticast mode
[  855.736956][ T2679] netlink: 'syz.3.7865': attribute type 1 has an invalid length.
[  855.739872][ T2679] netlink: 'syz.3.7865': attribute type 2 has an invalid length.
[  855.861447][ T2684] netlink: 'syz.3.7866': attribute type 12 has an invalid length.
[  856.463970][ T2711] bridge_slave_0: entered promiscuous mode
[  856.467339][ T2711] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  856.693304][ T2724] vxcan1: entered allmulticast mode
[  856.696328][ T2724] vxcan1: left allmulticast mode
[  856.865923][ T2731] lo speed is unknown, defaulting to 1000
[  856.939764][ T2731] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32)
[  857.503231][ T2758] __nla_validate_parse: 30 callbacks suppressed
[  857.503253][ T2758] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7880'.
[  857.698957][ T2763] sctp: [Deprecated]: syz.0.7882 (pid 2763) Use of int in max_burst socket option deprecated.
[  857.698957][ T2763] Use struct sctp_assoc_value instead
[  857.794787][T20250] Bluetooth: hci1: command tx timeout
[  867.161125][  T128] block nbd2: Possible stuck request ffff88803aa11a00: control (read@0,1024B). Runtime 120 seconds
[  867.165825][  T128] block nbd2: Possible stuck request ffff88803aa11c00: control (read@1024,1024B). Runtime 120 seconds
[  867.170110][  T128] block nbd2: Possible stuck request ffff88803aa11e00: control (read@2048,1024B). Runtime 120 seconds
[  867.174236][  T128] block nbd2: Possible stuck request ffff88803aa12000: control (read@3072,1024B). Runtime 120 seconds
[  886.261578][ T2780] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7885'.
[  886.320786][ T2793] vxcan1: entered allmulticast mode
[  886.493248][ T2823] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7888'.
[  886.548441][ T2827] netlink: 236 bytes leftover after parsing attributes in process `syz.1.7893'.
[  886.572371][ T2820] netlink: 124 bytes leftover after parsing attributes in process `syz.3.7892'.
[  886.696317][ T2840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7897'.
[  886.818096][ T2849] lo speed is unknown, defaulting to 1000
[  887.564071][ T2878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7902'.
[  887.676612][ T2883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7902'.
[  887.680196][ T2883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7902'.
[  887.929743][ T2891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7905'.
[  888.376383][ T2925] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input4
[  888.933976][ T2948] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5
[  889.007959][ T2951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7916'.
[  889.032368][ T2951] netlink: 'syz.3.7916': attribute type 2 has an invalid length.
[  889.083480][ T2953] vxcan1: left allmulticast mode
[  889.222854][ T2957] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  889.530745][ T2975] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20000
[  889.537153][ T2976] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20000
[  890.090641][ T2991] lo speed is unknown, defaulting to 1000
[  891.091035][ T3013] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  891.103257][ T3018] vxcan1: entered allmulticast mode
[  891.111999][ T3018] vxcan1: left allmulticast mode
[  891.339710][ T3034] __nla_validate_parse: 11 callbacks suppressed
[  891.339728][ T3034] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7936'.
[  891.348990][ T3034] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7936'.
[  891.357302][ T3034] netlink: 11 bytes leftover after parsing attributes in process `syz.0.7936'.
[  891.818473][ T3081] lo speed is unknown, defaulting to 1000
[  891.857408][ T3081] netlink: 55 bytes leftover after parsing attributes in process `syz.1.7947'.
[  891.861677][ T3081] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7947'.
[  892.547204][ T3108] IPVS: length: 8 != 173531835472
[  892.624412][ T3112] sctp: [Deprecated]: syz.3.7954 (pid 3112) Use of int in maxseg socket option.
[  892.624412][ T3112] Use struct sctp_assoc_value instead
[  892.722379][ T3118] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7953'.
[  893.203884][ T3154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7965'.
[  893.206988][ T3154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7965'.
[  893.694156][ T3160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7967'.
[  893.697393][ T3160] syz_tun: left allmulticast mode
[  893.699239][ T3160] syz_tun: left promiscuous mode
[  893.700965][ T3160] bridge0: port 1(syz_tun) entered disabled state
[  893.867242][ T3163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7968'.
[  894.282868][ T3175] netlink: 'syz.3.7972': attribute type 12 has an invalid length.
[  894.969152][ T3194] tap0: tun_chr_ioctl cmd 2147767507
[  895.255911][ T3198] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  895.374551][ T3216] netlink: 'syz.0.7981': attribute type 10 has an invalid length.
[  896.224132][ T3228] lo speed is unknown, defaulting to 1000
[  896.460381][ T3240] __nla_validate_parse: 4 callbacks suppressed
[  896.460396][ T3240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7989'.
[  896.466772][ T3240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7989'.
[  896.492724][ T3242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7990'.
[  896.495733][ T3242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7990'.
[  896.498566][ T3242] netlink: 'syz.1.7990': attribute type 7 has an invalid length.
[  896.501789][ T3242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7990'.
[  896.507843][ T3242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7990'.
[  896.515297][ T3242] netlink: 'syz.1.7990': attribute type 7 has an invalid length.
[  896.553799][ T3249] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma?
[  896.666006][ T3262] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7994'.
[  896.668939][ T3262] netlink: 43 bytes leftover after parsing attributes in process `syz.1.7994'.
[  896.671773][ T3262] netlink: 'syz.1.7994': attribute type 5 has an invalid length.
[  896.674756][ T3262] netlink: 43 bytes leftover after parsing attributes in process `syz.1.7994'.
[  896.708971][ T3262] lo speed is unknown, defaulting to 1000
[  896.781115][ T3273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7996'.
[  897.042035][ T3289] netlink: 'syz.0.8000': attribute type 14 has an invalid length.
[  897.214235][ T3299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  897.238225][  T128] block nbd2: Possible stuck request ffff88803aa11a00: control (read@0,1024B). Runtime 150 seconds
[  897.241638][  T128] block nbd2: Possible stuck request ffff88803aa11c00: control (read@1024,1024B). Runtime 150 seconds
[  897.245295][  T128] block nbd2: Possible stuck request ffff88803aa11e00: control (read@2048,1024B). Runtime 150 seconds
[  897.249021][  T128] block nbd2: Possible stuck request ffff88803aa12000: control (read@3072,1024B). Runtime 150 seconds
[  897.326050][ T3306] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  899.716780][ T3397] bridge0: port 2(bridge_slave_1) entered disabled state
[  899.719580][ T3397] bridge0: port 1(bridge_slave_0) entered disabled state
[  899.796108][ T3397] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  899.802728][ T3397] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  899.960790][ T3397] bond1: left promiscuous mode
[  899.962999][ T3397] geneve2: left promiscuous mode
[  899.971056][ T5713] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  899.974574][ T5713] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  899.977636][ T5713] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  899.980590][ T5713] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  902.080015][ T3450] lo speed is unknown, defaulting to 1000
[  902.459277][ T3479] lo speed is unknown, defaulting to 1000
[  902.543602][ T3492] __nla_validate_parse: 7 callbacks suppressed
[  902.543615][ T3492] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8045'.
[  902.582102][ T3492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8045'.
[  903.142717][ T3503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8047'.
[  903.147885][ T3503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8047'.
[  903.152581][ T3499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8047'.
[  903.156679][ T3499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8047'.
[  903.247526][ T3505] lo speed is unknown, defaulting to 1000
[  903.350275][ T3511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8049'.
[  903.368990][ T3511] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8049'.
[  903.372633][ T3511] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8049'.
[  903.377925][ T3511] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8049'.
[  903.432150][ T3517] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  904.284051][ T3527] syzkaller0: entered promiscuous mode
[  904.287405][ T3527] syzkaller0: entered allmulticast mode
[  905.442142][ T3553] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  906.206214][ T3570] geneve3: entered promiscuous mode
[  906.209584][ T5713] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  906.215306][ T5713] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  906.218706][ T5713] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  906.222113][ T5713] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  906.869926][ T3602] IPVS: set_ctl: invalid protocol: 29 10.1.1.1:4096
[  907.321705][ T3637] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  907.519600][ T3656] netlink: 'syz.1.8084': attribute type 2 has an invalid length.
[  907.522175][ T3656] netlink: 'syz.1.8084': attribute type 1 has an invalid length.
[  907.815978][ T3669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  908.456641][ T3692] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  908.466391][ T3689] lo speed is unknown, defaulting to 1000
[  908.558992][ T3696] __nla_validate_parse: 12 callbacks suppressed
[  908.559011][ T3696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8097'.
[  908.612671][ T3699] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  908.617288][ T3699] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  909.017597][ T3716] netlink: 'syz.3.8102': attribute type 26 has an invalid length.
[  909.213985][ T3724] lo speed is unknown, defaulting to 1000
[  909.395166][ T3728] bond12: (slave bridge13): Releasing backup interface
[  909.399374][ T3728] bond14: (slave macvlan0): Releasing backup interface
[  909.679497][ T3743] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  909.732021][ T3743] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8106'.
[  909.828700][ T3747] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8107'.
[  909.831541][ T3747] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8107'.
[  909.835427][ T3747] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8107'.
[  909.839197][ T3747] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8107'.
[  910.369841][ T3753] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8109'.
[  910.433833][ T3754] netlink: 'syz.0.8109': attribute type 10 has an invalid length.
[  910.811116][ T3768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8112'.
[  910.887690][   T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  910.891498][   T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  910.895738][   T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  910.899581][   T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  911.100492][ T3784] netlink: 'syz.1.8116': attribute type 1 has an invalid length.
[  911.160087][ T3785] netlink: 'syz.1.8116': attribute type 1 has an invalid length.
[  911.682313][ T3799] team0: entered promiscuous mode
[  911.685812][ T3799] team_slave_0: entered promiscuous mode
[  911.688708][ T3799] team_slave_1: entered promiscuous mode
[  911.691332][ T3799] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  911.701491][ T3800] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8120'.
[  911.943716][ T3811] netlink: 'syz.1.8124': attribute type 1 has an invalid length.
[  911.946862][ T3811] netlink: 600 bytes leftover after parsing attributes in process `syz.1.8124'.
[  912.266006][ T3827] lo speed is unknown, defaulting to 1000
[  912.999226][ T3852] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  913.107289][ T3857] : renamed from vlan1
[  913.574406][ T3891] __nla_validate_parse: 4 callbacks suppressed
[  913.574420][ T3891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8141'.
[  913.580371][ T3891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8141'.
[  913.671381][ T3899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8143'.
[  913.674376][ T3899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8143'.
[  913.782293][ T3908] lo speed is unknown, defaulting to 1000
[  914.277067][ T3916] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  914.329775][ T3916] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8147'.
[  914.491583][ T3921] lo speed is unknown, defaulting to 1000
[  914.641332][ T3927] netlink: 'syz.3.8150': attribute type 10 has an invalid length.
[  914.646808][ T3927] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  914.987282][ T3948] netlink: 'syz.0.8152': attribute type 10 has an invalid length.
[  915.043850][ T3953] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8156'.
[  915.470726][ T3983] lo speed is unknown, defaulting to 1000
[  915.724486][ T4001] lo speed is unknown, defaulting to 1000
[  915.816691][ T4006] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8169'.
[  915.821835][ T4006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8169'.
[  915.827496][ T4006] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8169'.
[  915.832745][ T4006] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8169'.
[  916.084408][ T4017] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 4, id = 0
[  916.098619][T23988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  916.102917][ T4018] sctp: [Deprecated]: syz.3.8173 (pid 4018) Use of int in max_burst socket option deprecated.
[  916.102917][ T4018] Use struct sctp_assoc_value instead
[  916.107441][T23988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  916.196991][ T4022] lo speed is unknown, defaulting to 1000
[  916.206394][ T4021] lo speed is unknown, defaulting to 1000
[  916.705077][ T4041] batman_adv: batadv0: Removing interface: batadv_slave_1
[  917.947494][ T4085] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  917.992635][ T4082] lo speed is unknown, defaulting to 1000
[  918.618204][ T4100] __nla_validate_parse: 6 callbacks suppressed
[  918.618215][ T4100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8197'.
[  918.681576][ T4102] netlink: 'syz.3.8198': attribute type 83 has an invalid length.
[  918.826646][ T4107] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8200'.
[  918.833474][ T4104] 8021q: VLANs not supported on ip_vti0
[  918.846609][ T4104] syzkaller1: entered promiscuous mode
[  918.848788][ T4104] syzkaller1: entered allmulticast mode
[  918.862484][ T4110] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  918.898440][ T4104] lo speed is unknown, defaulting to 1000
[  918.989802][ T4116] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8202'.
[  919.053150][ T4120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8203'.
[  919.216450][ T4129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8206'.
[  919.219280][ T4129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8206'.
[  919.287140][ T4143] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8209'.
[  919.292353][ T4144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  919.588210][ T4173] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  919.917739][ T4176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8218'.
[  919.924136][ T4176] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8218'.
[  919.928071][ T4176] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8218'.
[  920.580067][ T4211] openvswitch: netlink: EtherType 0 is less than min 600
[  920.585694][ T4211] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  921.219977][ T4223] ip6gre2: entered allmulticast mode
[  921.416320][ T4234] vxcan1: left allmulticast mode
[  921.606902][ T4240] team0: left promiscuous mode
[  921.614683][ T4240] team_slave_0: left promiscuous mode
[  921.616681][ T4240] team_slave_1: left promiscuous mode
[  921.642005][ T4240] geneve3: left promiscuous mode
[  921.814762][ T4271] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  927.314660][  T128] block nbd2: Possible stuck request ffff88803aa11a00: control (read@0,1024B). Runtime 180 seconds
[  927.318774][  T128] block nbd2: Possible stuck request ffff88803aa11c00: control (read@1024,1024B). Runtime 180 seconds
[  927.322898][  T128] block nbd2: Possible stuck request ffff88803aa11e00: control (read@2048,1024B). Runtime 180 seconds
[  927.327372][  T128] block nbd2: Possible stuck request ffff88803aa12000: control (read@3072,1024B). Runtime 180 seconds
[  927.858235][ T5300] udevd[5300]: worker [30947] /devices/virtual/block/nbd2 timeout; kill it
[  927.863974][ T5300] udevd[5300]: seq 34347 '/devices/virtual/block/nbd2' killed
[  946.922332][    C1] ==================================================================
[  946.925382][    C1] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  946.928603][    C1] Write of size 8 at addr ffff88812bda2d30 by task swapper/1/0
[  946.932411][    C1] 
[  946.933398][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  946.933426][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  946.933438][    C1] Call Trace:
[  946.933447][    C1]  <IRQ>
[  946.933456][    C1]  dump_stack_lvl+0x189/0x250
[  946.933479][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  946.933496][    C1]  ? rcu_is_watching+0x15/0xb0
[  946.933509][    C1]  ? __kasan_check_byte+0x12/0x40
[  946.933529][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  946.933544][    C1]  ? rcu_is_watching+0x15/0xb0
[  946.933557][    C1]  ? lock_release+0x4b/0x3e0
[  946.933578][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  946.933595][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  946.933612][    C1]  print_report+0xca/0x240
[  946.933625][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  946.933639][    C1]  kasan_report+0x118/0x150
[  946.933657][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  946.933673][    C1]  __xfrm_state_delete+0x696/0xca0
[  946.933692][    C1]  xfrm_timer_handler+0x18f/0xa00
[  946.933708][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  946.933721][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  946.933740][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  946.933760][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  946.933778][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  946.933799][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  946.933811][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  946.933823][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  946.933844][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  946.933858][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  946.933875][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  946.933890][    C1]  handle_softirqs+0x286/0x870
[  946.933904][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  946.933948][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  946.933964][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  946.933982][    C1]  __irq_exit_rcu+0xca/0x1f0
[  946.933995][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  946.934012][    C1]  irq_exit_rcu+0x9/0x30
[  946.934023][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  946.934043][    C1]  </IRQ>
[  946.934048][    C1]  <TASK>
[  946.934054][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  946.934068][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  946.934088][    C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 73 27 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  946.934100][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  946.934114][    C1] RAX: 62c6308c28028c00 RBX: ffffffff819683f8 RCX: 62c6308c28028c00
[  946.934124][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b8dc3 RDI: ffffffff8be33880
[  946.934134][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  946.934144][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa39830
[  946.934154][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d0000
[  946.934164][    C1]  ? do_idle+0x1e8/0x510
[  946.934182][    C1]  default_idle+0x13/0x20
[  946.934195][    C1]  default_idle_call+0x74/0xb0
[  946.934210][    C1]  do_idle+0x1e8/0x510
[  946.934224][    C1]  ? __pfx_do_idle+0x10/0x10
[  946.934243][    C1]  cpu_startup_entry+0x44/0x60
[  946.934256][    C1]  start_secondary+0x101/0x110
[  946.934276][    C1]  common_startup_64+0x13e/0x147
[  946.934298][    C1]  </TASK>
[  946.934304][    C1] 
[  947.053418][    C1] Allocated by task 4060:
[  947.055043][    C1]  kasan_save_track+0x3e/0x80
[  947.056714][    C1]  __kasan_slab_alloc+0x6c/0x80
[  947.058331][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  947.060417][    C1]  xfrm_state_alloc+0x24/0x2f0
[  947.061968][    C1]  __find_acq_core+0x8a7/0x1c00
[  947.063529][    C1]  xfrm_find_acq+0x78/0xa0
[  947.065014][    C1]  xfrm_alloc_userspi+0x6b3/0xc90
[  947.066925][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  947.068835][    C1]  netlink_rcv_skb+0x208/0x470
[  947.070705][    C1]  xfrm_netlink_rcv+0x79/0x90
[  947.072518][    C1]  netlink_unicast+0x82f/0x9e0
[  947.074440][    C1]  netlink_sendmsg+0x805/0xb30
[  947.076347][    C1]  __sock_sendmsg+0x21c/0x270
[  947.078165][    C1]  ____sys_sendmsg+0x505/0x830
[  947.080066][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  947.081923][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  947.083839][    C1]  do_syscall_64+0xfa/0x3b0
[  947.085635][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  947.087818][    C1] 
[  947.088791][    C1] Freed by task 25688:
[  947.090447][    C1]  kasan_save_track+0x3e/0x80
[  947.092019][    C1]  kasan_save_free_info+0x46/0x50
[  947.093570][    C1]  __kasan_slab_free+0x5b/0x80
[  947.095155][    C1]  kmem_cache_free+0x18f/0x400
[  947.096886][    C1]  xfrm_state_gc_task+0x52d/0x6b0
[  947.098556][    C1]  process_scheduled_works+0xae1/0x17b0
[  947.100573][    C1]  worker_thread+0x8a0/0xda0
[  947.102054][    C1]  kthread+0x711/0x8a0
[  947.103678][    C1]  ret_from_fork+0x3fc/0x770
[  947.105540][    C1]  ret_from_fork_asm+0x1a/0x30
[  947.107345][    C1] 
[  947.108102][    C1] The buggy address belongs to the object at ffff88812bda2d00
[  947.108102][    C1]  which belongs to the cache xfrm_state of size 928
[  947.112593][    C1] The buggy address is located 48 bytes inside of
[  947.112593][    C1]  freed 928-byte region [ffff88812bda2d00, ffff88812bda30a0)
[  947.116885][    C1] 
[  947.117839][    C1] The buggy address belongs to the physical page:
[  947.119967][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88812bda2880 pfn:0x12bda0
[  947.123555][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  947.126491][    C1] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  947.129208][    C1] page_type: f5(slab)
[  947.130732][    C1] raw: 057ff00000000040 ffff888104e66780 dead000000000122 0000000000000000
[  947.133430][    C1] raw: ffff88812bda2880 00000000800e0006 00000000f5000000 0000000000000000
[  947.136539][    C1] head: 057ff00000000040 ffff888104e66780 dead000000000122 0000000000000000
[  947.139392][    C1] head: ffff88812bda2880 00000000800e0006 00000000f5000000 0000000000000000
[  947.142397][    C1] head: 057ff00000000002 ffffea0004af6801 00000000ffffffff 00000000ffffffff
[  947.145209][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  947.147861][    C1] page dumped because: kasan: bad access detected
[  947.149924][    C1] page_owner tracks the page as allocated
[  947.151764][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 2210, tgid 2209 (syz.3.7751), ts 849100022545, free_ts 848907468186
[  947.157775][    C1]  post_alloc_hook+0x240/0x2a0
[  947.159448][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  947.161492][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  947.163376][    C1]  alloc_pages_mpol+0x232/0x4a0
[  947.164913][    C1]  allocate_slab+0x8a/0x370
[  947.166403][    C1]  ___slab_alloc+0xbeb/0x1420
[  947.167972][    C1]  kmem_cache_alloc_noprof+0x283/0x3c0
[  947.169695][    C1]  xfrm_state_alloc+0x24/0x2f0
[  947.171450][    C1]  xfrm_add_sa+0x17d1/0x4070
[  947.173116][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  947.175034][    C1]  netlink_rcv_skb+0x208/0x470
[  947.176945][    C1]  xfrm_netlink_rcv+0x79/0x90
[  947.178852][    C1]  netlink_unicast+0x82f/0x9e0
[  947.180757][    C1]  netlink_sendmsg+0x805/0xb30
[  947.182662][    C1]  __sock_sendmsg+0x21c/0x270
[  947.184675][    C1]  ____sys_sendmsg+0x505/0x830
[  947.186606][    C1] page last free pid 2200 tgid 2198 stack trace:
[  947.189114][    C1]  __free_frozen_pages+0xbc4/0xd30
[  947.191180][    C1]  __put_partials+0x156/0x1a0
[  947.193061][    C1]  put_cpu_partial+0x17c/0x250
[  947.194962][    C1]  __slab_free+0x2d5/0x3c0
[  947.196737][    C1]  qlist_free_all+0x97/0x140
[  947.198599][    C1]  kasan_quarantine_reduce+0x148/0x160
[  947.200492][    C1]  __kasan_slab_alloc+0x22/0x80
[  947.202019][    C1]  __kmalloc_noprof+0x224/0x4f0
[  947.203530][    C1]  ops_init+0x7b/0x5c0
[  947.204806][    C1]  setup_net+0x10c/0x320
[  947.206225][    C1]  copy_net_ns+0x31b/0x4d0
[  947.208009][    C1]  create_new_namespaces+0x3f3/0x720
[  947.209975][    C1]  unshare_nsproxy_namespaces+0x11c/0x170
[  947.212267][    C1]  ksys_unshare+0x4c8/0x8c0
[  947.214120][    C1]  __x64_sys_unshare+0x38/0x50
[  947.216026][    C1]  do_syscall_64+0xfa/0x3b0
[  947.217776][    C1] 
[  947.218740][    C1] Memory state around the buggy address:
[  947.220860][    C1]  ffff88812bda2c00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  947.223314][    C1]  ffff88812bda2c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  947.226328][    C1] >ffff88812bda2d00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  947.229440][    C1]                                      ^
[  947.231689][    C1]  ffff88812bda2d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  947.234762][    C1]  ffff88812bda2e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  947.237351][    C1] ==================================================================
[  947.240243][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  947.242651][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  947.245609][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  947.248940][    C1] Call Trace:
[  947.250269][    C1]  <IRQ>
[  947.251429][    C1]  dump_stack_lvl+0x99/0x250
[  947.253333][    C1]  ? __asan_memcpy+0x40/0x70
[  947.255058][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  947.256737][    C1]  ? __pfx__printk+0x10/0x10
[  947.258223][    C1]  vpanic+0x281/0x750
[  947.259621][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  947.261314][    C1]  ? __pfx_vpanic+0x10/0x10
[  947.262850][    C1]  ? asm_common_interrupt+0x26/0x40
[  947.264565][    C1]  panic+0xb9/0xc0
[  947.265840][    C1]  ? __pfx_panic+0x10/0x10
[  947.267250][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  947.269226][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  947.271405][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  947.273087][    C1]  check_panic_on_warn+0x89/0xb0
[  947.274676][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  947.276407][    C1]  end_report+0x78/0x160
[  947.277722][    C1]  kasan_report+0x129/0x150
[  947.279179][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  947.280927][    C1]  __xfrm_state_delete+0x696/0xca0
[  947.282624][    C1]  xfrm_timer_handler+0x18f/0xa00
[  947.284274][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  947.285955][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  947.287897][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  947.289564][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  947.291532][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  947.293597][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  947.295337][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  947.297160][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  947.298793][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  947.300667][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  947.302534][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  947.304246][    C1]  handle_softirqs+0x286/0x870
[  947.305756][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  947.307303][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  947.308987][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  947.310639][    C1]  __irq_exit_rcu+0xca/0x1f0
[  947.312242][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  947.314259][    C1]  irq_exit_rcu+0x9/0x30
[  947.315580][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  947.317344][    C1]  </IRQ>
[  947.318266][    C1]  <TASK>
[  947.319193][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  947.321084][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  947.322828][    C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 73 27 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  947.329371][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  947.331525][    C1] RAX: 62c6308c28028c00 RBX: ffffffff819683f8 RCX: 62c6308c28028c00
[  947.334000][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b8dc3 RDI: ffffffff8be33880
[  947.336750][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  947.339497][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa39830
[  947.342102][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d0000
[  947.344514][    C1]  ? do_idle+0x1e8/0x510
[  947.345980][    C1]  default_idle+0x13/0x20
[  947.347317][    C1]  default_idle_call+0x74/0xb0
[  947.348816][    C1]  do_idle+0x1e8/0x510
[  947.350446][    C1]  ? __pfx_do_idle+0x10/0x10
[  947.351953][    C1]  cpu_startup_entry+0x44/0x60
[  947.353389][    C1]  start_secondary+0x101/0x110
[  947.354833][    C1]  common_startup_64+0x13e/0x147
[  947.356571][    C1]  </TASK>
[  947.358399][    C1] Kernel Offset: disabled
[  947.359690][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:43:39  Registers:
info registers vcpu 0

CPU#0
RAX=2f4f3f2b7ec61900 RBX=ffffffff819683f8 RCX=2f4f3f2b7ec61900 RDX=0000000000000001
RSI=ffffffff8d9b8dc3 RDI=ffffffff8be33880 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa39830 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7a03f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffecf391288 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 00ff000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000061 0000003131313038
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffff0000000000 XMM09=696b66722f393479 68702f3131323038
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e03b0
R8 =ffff888108ac8237 R9 =1ffff11021159046 R10=dffffc0000000000 R11=ffffffff854f4700
R12=dffffc0000000000 R13=ffffffff99afd911 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f477c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f61d302f50b CR3=0000000027b04000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f61d53a7d20
XMM02=8400018403140400 0180033810000004 XMM03=000490000190030e 0488000188030604
XMM04=08808080080001b0 030204900001a003 XMM05=0138100001800401 00000e0806060104
XMM06=9208808080080001 b0030204900001a0 XMM07=0300049000019003 0e04880001880306
XMM08=0484000184031404 0001800338100000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
