last executing test programs:

2m24.616724127s ago: executing program 2 (id=1980):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0xb, &(0x7f00000000c0)={0xfffffff6}, 0x10)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xfffffff3}]}}]}, 0x38}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0xe05, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x48000)

2m24.549932741s ago: executing program 2 (id=1982):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000070a050000000000000000000a0040010900010073797a31000000000900020073797a32000000000c000340"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x4004014)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003e40)=@newtaction={0x78, 0x30, 0xffff, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0)

2m24.491043694s ago: executing program 2 (id=1984):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000817000001"], 0x50)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x4, 0xfc, 0x6, 0x8, 0x10, @private0, @local, 0x700, 0x40, 0x5, 0x9}})
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@gettaction={0x30, 0x32, 0xe72c5f922f23cad9, 0x70bd27, 0x25dfdbf7, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffffa8b4}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc844}, 0x4000000)
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000400)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@dstopts={0x67}], @ndisc_redir={0x89, 0x2, 0x0, '\x00', @private0, @ipv4={'\x00', '\xff\xff', @multicast1}, [{0x1, 0x1ed, "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"}]}}}}}, 0xfce)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x9}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}]}}]}, 0x40}}, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4)
r7 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="3504000030000511d25a80648c63940d1124fc60040035400c0002000a00002037153e373f04018006041000450055d64a12f76710989a119052acaa1100da3e813fa6ba1eb693d93f699e37af0d43f908fa7d995a8feb85d6a4e1b691276cd9561767306b74b4098e9e71fa51bde29f19b06fb9b3ba96da0e93d5a402dc7fe462a6cc4718c94c1747fff68092705b44bb48dd2db4f3127aab13b4af05549571a6c0e03db227b65d459fa5c1232d7b62f12b65354b7e70d32998da02ae0dc28942f682d97191d0b68697bac278c34b2972ca8ed35b61ee6831c78af85c6711cd687694ce3835a98387fcdb8616524ea04449dbedb3250fb366740d6b96307e1d2f0d85dd592ca2d8c2730ad1d16eb4d87cbb48d2f7c4eb7a490aee0493ffe3b72b508c9a8eb2ec9ed353d79ed29ffed1e48bf370bfb8af11085997d38210601155ec361cd6f3577da98c0a528a4d24ce75fbe297cb75f4b36719edd354ee6312c5527de7ea1a4233b9b0bba0ba2deac12f0257c64ceca8a0a62db179c7d9df7749da38624aab1865024e56a1b2a41e1c7e3a29c01adb31f1865bf6f44aa1e0fd6d827fbae1d57b5ff0026b580c890df83592aceb316fcd6ca200d007b786f9ae", 0x1c0}, {&(0x7f0000000a40)="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", 0x275}], 0x2}, 0x4)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r8}, 0x10)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000002d000100000000000000000004000080040012"], 0x18}], 0x1, 0x0, 0x0, 0x24000810}, 0x4000084)
r10 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x700, 0x1, 0x9, 0x800, {{0xd, 0x4, 0x1, 0x22, 0x34, 0x65, 0x0, 0x6, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xf}, {[@timestamp_addr={0x44, 0x4, 0xf3, 0x1, 0x8}, @noop, @end, @rr={0x7, 0xf, 0xe0, [@private=0xa010102, @local, @empty]}, @rr={0x7, 0x3, 0x46}, @noop, @noop, @end, @noop, @timestamp={0x44, 0x4, 0xa7}]}}}}})
socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

2m24.338336148s ago: executing program 2 (id=1985):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1400000004000000040000000900000000000000ee74981f5821834c9e7e6accd7afee18a9409d6498ddfafc5c08f8eb0d3f0f065be8ba0784be91d7a03b2acb25d5f8229d68826f40803f1bb7479d6f53cf9754f4093afc07f7b35357cb10e12b432339373f709b9d1e", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f0000000340)=@tcp=r1}, 0x20) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async, rerun: 32)
r3 = socket(0x15, 0x80005, 0x0) (rerun: 32)
getsockopt(r3, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000) (async)
r4 = socket(0x2, 0x3, 0xff)
setsockopt$inet_int(r4, 0x0, 0x3, 0x0, 0x0) (async)
sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) (async)
ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000000)) (async)
sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x8010) (async)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5d0, 0x2e8, 0x0, 0x2e8, 0x0, 0x2e8, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, &(0x7f0000000180), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xffffffff, 0xff000000, 0xff], [0xffffffff, 0xffffffff, 0xff000000, 0xff000000], '\x00', 'tunl0\x00', {0xff}, {0xff}, 0x36, 0x4, 0xf, 0x8}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x26}}}, {{@ipv6={@local, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0x0, 0xffffffff, 0xff000000], [0xff, 0x91ea20fa44f294db, 0x0, 0xff000000], 'syzkaller1\x00', 'vlan0\x00', {}, {0xff}, 0x1, 0xc, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private1, @mcast2, [0xff, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffffff, 0x0, 0xff000000, 0xffffff], 'ip6gre0\x00', 'vxcan1\x00', {}, {}, 0x1d, 0x8, 0x7}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x2}}}, {{@ipv6={@private0, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], [0x0, 0xffffffff, 0xff000000, 0xffffff00], 'pim6reg1\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x6c, 0x2, 0xe772453f5b41c059, 0x2}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x12}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) (async)
r5 = openat$cgroup_devices(r2, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='b 75:*\tm'], 0xa) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0) (async, rerun: 32)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff01000e0000000000000000000000010c00068005000100000000004700028005000100010000000600034000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x2048014}, 0x0) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async, rerun: 32)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async, rerun: 32)
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r7, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x40)
unshare(0x6a040000)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002001, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800050001200000080001"], 0x104}, 0x1, 0x0, 0x0, 0x4044051}, 0x0)

2m24.334705502s ago: executing program 2 (id=1986):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000))
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @llc={0x1a, 0x300, 0x7, 0xc7, 0x90, 0xc}, @llc={0x1a, 0x30f, 0x1f, 0x1, 0x5, 0x5, @multicast}, @ax25={0x3, @bcast, 0x3}, 0xe849, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)='vlan1\x00', 0x6, 0x7f, 0x2})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r0], 0x54}}, 0x0)

2m24.333862672s ago: executing program 2 (id=1987):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b70300000000000085"], 0x0, 0x8}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001800010027bd7000fcdbdf251d01020015000100040000e002000000213e92146611cf5b0400000008000900", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0800050001f8fd8108000e"], 0x64}, 0x1, 0x0, 0x0, 0x88}, 0x80)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r4)
sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x24, r5, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000)
sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x140d, 0x4, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010dd010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000030900020073797a31000000000900010073797a300000000008001f4000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c000080080004"], 0xe0}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x60, 0x1, 0x4, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x18}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x800}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xa00000}, @NFULA_CFG_MODE={0xa, 0x2, {0x3, 0x2}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x880)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x131080, 0x0)
ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000680)={0x1, @null, @bpq0, 0x89, 'syz1\x00', @null, 0x2, 0x8, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]})

2m9.108362995s ago: executing program 32 (id=1987):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b70300000000000085"], 0x0, 0x8}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001800010027bd7000fcdbdf251d01020015000100040000e002000000213e92146611cf5b0400000008000900", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0800050001f8fd8108000e"], 0x64}, 0x1, 0x0, 0x0, 0x88}, 0x80)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r4)
sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x24, r5, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000)
sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x140d, 0x4, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010dd010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000030900020073797a31000000000900010073797a300000000008001f4000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c000080080004"], 0xe0}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x60, 0x1, 0x4, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x18}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x800}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xa00000}, @NFULA_CFG_MODE={0xa, 0x2, {0x3, 0x2}}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x880)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x131080, 0x0)
ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000680)={0x1, @null, @bpq0, 0x89, 'syz1\x00', @null, 0x2, 0x8, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]})

39.142967049s ago: executing program 0 (id=3962):
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0xa) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01d90000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r1], 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x80)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x3c, r5, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x44840) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000b40)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async)
close(r7) (async)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx2\x00'}, 0x58) (async)
accept4(r8, 0x0, 0x0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

39.061456175s ago: executing program 0 (id=3965):
r0 = getpid()
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8803)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="b80000001300160000000000fedbdf25fc000000000000000000000000000000ac140200000000003504b691052966b5720c4f2512010000000000000000000004000000000a0060603b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000009000000400000000200020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbcb25fc00000000000000000000000000004000000000000000000000ff", @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500"/112], 0xb8}}, 0x4000)
r5 = socket(0x29, 0x80805, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58)
r7 = accept$alg(r6, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x11, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'vxcan1\x00', <r8=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f00000009c0)={&(0x7f0000000100), 0xc, &(0x7f0000000980)={&(0x7f0000000f40)=ANY=[@ANYBLOB="7c210000533e69ca4bb05962cf01d5eaefc21e371097218349c432a3656a135531ad3696ac1e911010ebef8a47b030aa6c296ebae543c411773231114837d5a4647ea25bc25e4e8a3aec69c8cd7f80b7113fb94ee08bdb276124209a63445daab430a768214e87a56554988a5a3c288434938a8cbb4236a2bf1ab3e2c9396fdb1a8d111dfbc0493a82848aa4da52aaa062e81ef40d713ae844d8c5108dded52e043bf5439f56b591d1187f8ffe22c6ebf9fb3bdbf42038fc228c327601d5992cbf1807be603ff83c24662ebf180a88cae50fae9a13729a72ea2b039f8e", @ANYRES16=0x0, @ANYBLOB="000428bd7000fcdbdf250b00000034000180140002007663616e30000000000000000000000014000200626f6e6430000000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="3c00018008000100", @ANYRES32=0x0, @ANYBLOB="140002006261746164765f736c6176655f30000008000100", @ANYRES16=r5, @ANYBLOB="14000200776732000000000000000000000000005c00018008000100", @ANYRES32=r8, @ANYBLOB="08000300030000001400020069705f767469300000000000000000001400020076657468315f746f5f621402629ef58be5ab030001000000080003000200000008000100", @ANYRES32=0x0, @ANYRESHEX=r8, @ANYRES32=0x0, @ANYBLOB="340001801400020069703607007370616e300000000000001400020076657468315f766c616e00000000000008000100", @ANYRES32=r0, @ANYRES32=r8, @ANYRES32=0x0, @ANYBLOB="d1820180"], 0x15c}, 0x1, 0x0, 0x0, 0x24008000}, 0x24004084)
sendmmsg$alg(r7, &(0x7f0000005c40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}], 0x1, 0x0)
recvmsg(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/25, 0x19}], 0x1}, 0x2)
r9 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r9, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r10 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1d, 0x2, 0x6)
socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r11}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
sendmmsg$inet(r5, &(0x7f0000001ec0)=[{{&(0x7f00000007c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[], 0xe0}}, {{&(0x7f0000000cc0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x2, 0x4000000)

38.975624052s ago: executing program 0 (id=3967):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x209d, 0x0, 0x4, 0x1f}, 0x10) (async, rerun: 32)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 32)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x4, 0x18, 0x0, 0xe, 0x4}]}, {0x0, [0x0, 0x30, 0x0]}}, 0x0, 0x2d}, 0x28)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x6, 0x2, '%g'}, 0xa) (async)
sendto$inet6(r4, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) (async)
write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="12008864"], 0xfce) (async, rerun: 32)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x2d, 0x9, 0x70bd27, 0x0, {0xb}}, 0x14}}, 0x4000080) (async)
write(r0, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000023000000", 0x18) (async)
r6 = socket(0x10, 0x3, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0)

38.900693457s ago: executing program 0 (id=3969):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x20, 0xc, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4804)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) (async)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="240000001a0001000000ff7f0002000080000100"], 0x24}, 0x1, 0x0, 0x0, 0x40408c4}, 0x0)

38.899812013s ago: executing program 0 (id=3971):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940))
pipe(&(0x7f0000000440))
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet(0x2, 0x3, 0x33)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x30, 0x0, 0x801, 0x0, 0x3, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0x30}}, 0x20000000)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd29}, 0x14}}, 0x40000)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x11, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000eeff120000000a0004007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a0003"], 0x64}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) (async)
pipe(&(0x7f0000000440)) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$inet(0x2, 0x3, 0x33) (async)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x30, 0x0, 0x801, 0x0, 0x3, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0x30}}, 0x20000000) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd29}, 0x14}}, 0x40000) (async)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) (async)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x11, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000eeff120000000a0004007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) (async)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a0003"], 0x64}, 0x1, 0x0, 0x0, 0x48010}, 0x0) (async)

38.840595831s ago: executing program 0 (id=3973):
unshare(0x6a040000) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x804) (async)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x1}, 0x50)
unshare(0x600) (async)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112df000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) (async)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x10000000, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x90)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async)
r4 = socket(0x2b, 0x80801, 0x1)
bind$unix(r4, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$inet(r2, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x999}], 0x1}}], 0x1, 0x40)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) (async)
sendto$inet(r2, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r5, 0x0)
setsockopt$inet6_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x303}, "000000000400", "2cdf820034afb3c1f2c3461acee115af3450be9c86b101ec10d31a68272f6119", "510802ae", "3f36f0669fd4b5fe"}, 0x38) (async)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)

23.841186348s ago: executing program 33 (id=3973):
unshare(0x6a040000) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x804) (async)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x1}, 0x50)
unshare(0x600) (async)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112df000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) (async)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x10000000, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x90)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async)
r4 = socket(0x2b, 0x80801, 0x1)
bind$unix(r4, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$inet(r2, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x999}], 0x1}}], 0x1, 0x40)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) (async)
sendto$inet(r2, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r5, 0x0)
setsockopt$inet6_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x303}, "000000000400", "2cdf820034afb3c1f2c3461acee115af3450be9c86b101ec10d31a68272f6119", "510802ae", "3f36f0669fd4b5fe"}, 0x38) (async)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)

1.388278641s ago: executing program 4 (id=4565):
r0 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, 0x4, 0xa, 0xbaa3bc3a656066c7, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x44050)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x9)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$int_in(r1, 0x5421, &(0x7f0000000240)=0xfffffffffffffe01)
connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r4 = accept(r1, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRESHEX], 0x88}}, 0x24004810)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000d00)={'vxcan0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000001800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000017c0)={&(0x7f0000000d40)={0xa74, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x100, 0x9, 0xf6, 0x9}, {0x5, 0x4, 0xf8, 0x7}, {0x7edd, 0x6, 0xe9, 0x200}, {0xb, 0x3, 0x40, 0x2ac}, {0x7a, 0x3, 0xe2, 0x8}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8494, 0xe, 0xa, 0x4}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffe01}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6c48}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x240, 0x2, 0x0, 0x1, [{0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x5, 0xf, 0x4, 0x14}, {0x80, 0xa, 0x2, 0x8}, {0x0, 0xe, 0x5, 0x6668c3e2}, {0x694d, 0x4, 0x3, 0x800}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x968}}, {0x8}}}]}}, {{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0x2, 0x1, 0xfb}, {0x7, 0x6, 0x8, 0x9}]}}}]}}, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x400, 0x73, 0x80, 0x9}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}]}, 0xa74}, 0x1, 0x0, 0x0, 0x80}, 0x40)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r7, &(0x7f0000000b80)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x7ffe, @mcast2, 0x4}, 0x17, &(0x7f00000002c0)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000000)=[@dstopts={{0x12, 0x29, 0x3e, {0x2f}}}], 0x18}}], 0x1, 0x4000084)
socket$unix(0x1, 0x5, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff1}, {}, {0x5, 0xf}}}, 0x24}}, 0x20040054)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r9, 0x1, 0x6, 0x0, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="68e0000020000000240012800b000100677265746170000014000280060003000900000006000200ff010000"], 0x44}, 0x1, 0x2000000000000000}, 0x4080)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)

1.298837161s ago: executing program 4 (id=4568):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fff, 0x68}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x5, 0x69e, 0x6, 0x0, r1, 0x0, '\x00', 0x0, r2, 0x1, 0x2, 0x0, 0x6}, 0x50)
ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000200))
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000240)={{0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0xe}, 0x24000000}, {0xa, 0x4e21, 0x2, @private2, 0x225}, 0xffffffffffffffff, {[0x4000000, 0x4, 0x6, 0x7, 0x0, 0xfffffffd, 0x8, 0xfffffffa]}}, 0x5c)
ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x2)
r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x4000, r1}, 0x18)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000340)={r6, r3}, 0xc)
r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0)
getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f00000003c0), &(0x7f0000000400)=0x8)
r8 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(r7, 0x40089416, 0x0)
r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r9, 0x8983, &(0x7f0000000440)={0x1, 'team_slave_1\x00', {}, 0x9})
r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r0)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r10, 0x8, 0x70bd29, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4008000)
ioctl$BTRFS_IOC_SNAP_DESTROY(r7, 0x5000940f, &(0x7f00000005c0)={{r3}, "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"})
r11 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x81000)
sendmmsg$alg(r11, &(0x7f0000002940)=[{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000015c0)="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", 0x1000}], 0x1, &(0x7f0000002600)=[@assoc={0x18, 0x117, 0x4, 0x8000}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x78, 0x24000000}, {0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002680)="52884077d94f760a32c132682a2597a22474a46184879d8cda2f", 0x1a}, {&(0x7f00000026c0)="85db3e0052c60ac229fa9e16562a48411ac8c5c58af89a00d1d1616ad6a28ce4a308ddf02822e1db75ee8831c1b5268a6c57ccf09b864bb9aa4d26afbb548d9a4c0964877d3764d7495491490c4503b7d4dd0e518c5028b3f86e5502309e8a395e6de7c660dfd90445ad23e7cd5ec339c0f999c81a634fc556a6e9a9a44e3d138e3e1ad2475b8a8c0689317d5a7d", 0x8e}, {&(0x7f0000002780)="a2c6889f57b8659b707d39aba114cf36377ad3d68658097f8f225bcd1bef3de2", 0x20}, {&(0x7f00000027c0)="a3d04bdd10557877e24d94edf9975aa7408607e6faff491976482c8744cfc0f4a246e3d5b524b344299000b8bea3925264bbf9469a670ddda8a25308eaab8bb7b384e5584ceb030296ec765ad0280009980a05e04ad1938553d91a49f4aa41470e62d9117d5d473ef0cbc581c4ec73048e87bcae278a6c308790baafe8aaf06612ef2227bbcb9f974d70d97aa4282eb310914e5d53c0adc13b2b0a1449f03020e37b92ec7b455c225d6facb86b026fc27bf4e527e7cb6cff0cc5165cbd0679284e6f8246f12dbbd94cdd7f56a15f5ec607b5e9c3b9a937410a9174d2011e69ec7f4c9882e038cb849024fe44", 0xec}], 0x4, &(0x7f0000002900), 0x0, 0x20000000}], 0x2, 0x4c080)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000029c0))
bind$netlink(r0, &(0x7f0000002a00)={0x10, 0x0, 0x25dfdbfc, 0x80000}, 0xc)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000002a40)={'wg2\x00', <r12=>0x0})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002a80)={0x1b, 0x0, 0x0, 0x4, 0x0, r1, 0x1ff, '\x00', r12, r2, 0x5, 0x1, 0x5}, 0x50)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000002b00)={0x40, 0x3, 0x2}, 0x10)
r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000002b80), r0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000002c80)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)={0x38, r13, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fff8000}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x80)

1.297810601s ago: executing program 4 (id=4569):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
pwrite64(r1, &(0x7f00000004c0)="fdf1", 0x2, 0xd39)
readv(r1, &(0x7f0000001980)=[{0x0}, {&(0x7f0000000180)=""/238, 0xee}], 0x2)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}, 0x0)
recvmmsg(r2, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x6, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x4, 0x1, 0x0, 0x1, 0xfffffffe}]}]}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00'})
socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000001400002c00128009000100626f6e64000000001c00028008000b0004200000050006000000000008000700"], 0x4c}}, 0x0)

1.088453018s ago: executing program 3 (id=4574):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1200000008000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4)
sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000200)={<r6=>0x0, 0xdb, "6b11460446dd5dc62c3b5678052a2f7a0e7678984b9d7195eb7634c8f7c5086179bc39d881a500b74c498d0403ee134edc71930fbd05a594d807989d6f339cef00098b84aa277dec5ed3d1bf0315350e30a3e2517e39dcdcf654e08acc0658fd5253e52d662b89e87162dfd5450a753d6a679f659128a517f373512660f7d668c88401af8a889cc4fd62b9d7704b44f7252913b634d59b53afa47fa05ce151d1f07ca8a1eb9ad62642b8c971888b66086bfb3aebcaa2dfa0feff566a81bdf8855bdc6bb5c3d8148aa5f41e3df2f48a2e061709aa624b31d5d0dc1a"}, &(0x7f0000000300)=0xe3)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000380)={r6, 0x1}, &(0x7f00000003c0)=0x8)
ioctl$AUTOFS_IOC_PROTOVER(r5, 0x80049363, &(0x7f0000000180))
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r7, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r9, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x24}}, 0x40080f0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)='2', 0xfffffeb9}], 0x1}}], 0x1, 0x4000007)
sendto(r0, &(0x7f0000000440)="1d", 0x1, 0x4000000, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000007000000e27f000003"], 0x50)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000007000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r12, @ANYBLOB='\r\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000400"/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r13}, &(0x7f0000000880), &(0x7f00000008c0)=r11}, 0x20)
r14 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r14, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x5, 0xfffffffb}, 0x10)

498.914883ms ago: executing program 1 (id=4578):
r0 = socket$kcm(0x10, 0x2, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='-1'], 0x27) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014003000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0)

487.777881ms ago: executing program 1 (id=4579):
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x1c, 0x4, &(0x7f0000001580)=ANY=[@ANYBLOB="b4000000000000007910480000000000a600ffff800000f195007400000000008b26680991cf7be46e92ba4de27a4391c3b6f3fc34b23fb6589be2ac17c158b20730d0e4a5e23aec41720069dad78941577563ed97c0dc925f7cb5f6dfa1da74d5ff4d8b20ed27b2e52d57571cec5d64abf249e96a2f41a0da474a05f908dbc363d6e9ad37192114c094288d"], &(0x7f0000001180)='syzkaller\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000000c0)={0x0, 'bridge_slave_0\x00', {0x2}, 0x7ffd})
socket$netlink(0x10, 0x3, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x0, @local}, 0x2}}, 0x26)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r5, 0x1, 0x70bd27, 0x4, {0x5}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}]}, 0x34}}, 0x0)
r7 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001280)="f78d8db93227b6c26df8aedb32f2a69ca38fff48f3be52163448412ba8", 0x1d}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000012c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc30f024e8058da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000001240)=[@assoc={0xfffffffffffffecb, 0x117, 0x4, 0xffffffff}], 0x18}], 0x1, 0x44800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0)
bpf$ENABLE_STATS(0x20, &(0x7f00000002c0), 0x4)
ioctl$SIOCRSGCAUSE(r7, 0x89e0, &(0x7f0000000000))
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000f80)=ANY=[@ANYBLOB="02010909070000002bbd5000fdffffff050007002aa000000a004e230000005efe800000000000000000000000000041d40d00000000000085cb72acec7f8258598c001c6bf5c7aefbaee63219c9146dbe254a5613a0ca432db030db7ddf33918062814caa3d333490417abc648f934ae225d4b22c07acc9a84e84e36efd6fc9cc26a85cc12446e66a2711d2feb86fd74528f171c01a77d19fab97891dd9cca1d86ec827319cc290df9d5413934e42e8adcfd4348de7ba2df7e1a16083d6098a7073e141ee57fd000000001f6fa75e9387b9e7bf76cedb897942edb74c086c"], 0x38}}, 0x24000802)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r9=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000030500000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1501000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r9, @ANYBLOB="ed89dc3c", @ANYRES32=r1, @ANYBLOB], 0x44}}, 0x0)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000011c0), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0xfffffffffffffea4)

400.204456ms ago: executing program 1 (id=4580):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800e00010069703665727370616e000000080002800400120008000300", @ANYRES32], 0x44}}, 0x4000000) (async, rerun: 64)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x200, 0x70bd2e, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x1, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r1, &(0x7f0000000c80)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5}, 0x1c)
sendmmsg(r0, &(0x7f0000000040), 0x0, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x80000000}, {0x61}, {}, {0x2}, {0x6}]})
r3 = socket$packet(0x11, 0x3, 0x300) (async)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'gretap0\x00', <r5=>0x0})
r6 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x275a, 0x0) (async)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x1f00) (async)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x40000000) (async)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000008, 0x2010, r7, 0x4000) (async)
socket$inet(0xa, 0x801, 0x84) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000005f00)={'wlan1\x00', <r10=>0x0}) (async)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r10, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x28000)
sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x8100, r5, 0x1, 0xe0}, 0x14)

399.565721ms ago: executing program 4 (id=4581):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1ff}, @IFLA_GRE_LOCAL={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x80, 0x0, 0x1, 0x5, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x64, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0xffffffc3, 0x1, @dev={0xac, 0x14, 0x14, 0x27}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0x24, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}]}, 0x80}}, 0x0)
ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000080))
sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x9, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x18}}], 0x1, 0x4880)

350.058224ms ago: executing program 4 (id=4582):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2) (async)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async)
listen(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) (rerun: 32)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) (async, rerun: 32)
socket$netlink(0x10, 0x3, 0x0) (rerun: 32)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETSGCNT(r9, 0x89e1, &(0x7f0000000140)={@multicast1, @broadcast}) (async)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000340)={'wpan1\x00', <r11=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan1\x00', <r12=>0x0}) (async)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r15=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x78, r14, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdc01, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_SEC_KEY={0x5c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "dfeedc2634e7d49420f73e16e79faba0"}, @NL802154_KEY_ATTR_ID={0x3c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8010}, 0x48804) (async)
sendmsg$NL802154_CMD_GET_INTERFACE(r8, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, r10, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x60}, 0x1, 0x0, 0x0, 0xc145}, 0x4040000) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)

347.337099ms ago: executing program 1 (id=4583):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="98010000280000032bbd7000fbdbdf251b0000004328fb041b8c2cc9345fb82918f45e621e81666ad055b3990141c547013221272b62535c5112f299580c7c3073889136ec59053d289537e400b7b137a4ceb9a6a79f31dfe825948ec1480e683f670e920b63462bc5751f7ba62d03c7c5e8a9eb8cefc89d705cf2bf3c256001fda723cf12014180d30cc7abdffe4057b24e1149ee861355e809608d566cd96defb562d5bb6d08eedd879347556adfb16d5376abfff499df8eacfc3fbf61a33cff9000d48c697c11c9e6812fd165c207b1404c36b6cac5da4336814af821d8b29841bfdfeaefad4c14a1caa71ff71bd95729a753cef22b1b631d0a7cd401be4a59ea5a713704b41400f300fe880000000000000000000000000101040091802452702a40bd76313dedcc94fc8b47be59905c3a273510a8ea8f3e9c00f6ed45b120a2f0f103c59ad2dec812bf096d23e6ebfd60cd57981f47e963f2b30f6bd24dc8f1902104001b801796501cb80b03cab5fe8046444aabab217d948cd63e2b2a5e1f8329f4a0cafcc15d0b001400706f6c6963650000000039a9379a798821d43a9c64a1cfc1943e3a162aee99b83845cca3ae6fa1d5f6004c37a969c09c4b57bd13fe960e641f2f8523831b6cee9038a18450133bf1ff04151acb4523f5e94697a2370e33bceb0ad9115e620567eb53e6b052c9fd3752dc8dcd4c42beb32b2aad6dd2e66e9155c70783e6c0bdc61cb29e37626600000000000000"], 0x198}, 0x1, 0x0, 0x0, 0x1}, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x12c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x118, 0x1, [@m_police={0x114, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xd}]]}, {0xa1, 0x6, "23436059ad1f4f759fb01d2cf5eafe8006b621c7a0e0ac4651b8c99a7b2ed50a80cda38078de934095d386466ee1a963fdda4ee8a73b7ab662edf03c6a7739d64b21433ac7d83852b0ca57b8e65889d7b186057f6df8a4dbfbb3c9caedb148e8eab315fe3314a760170a8ebb7b63235014eb38e7f0e24ce875d48379d43e3a32b5aa2bbf590d1e41e643795d45de2d98730e253a345516f3e0370dbe22"}, {0xc}, {0xc}}}]}]}, 0x12c}}, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r2, 0x0, 0xf69}, 0x18)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r5, 0x0, 0xf69}, 0x18)
socket$inet6_tcp(0xa, 0x1, 0x0)
gettid()
r6 = socket(0x10, 0x80003, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xffffff81, "0000000000000000000100000e000081"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)

255.71133ms ago: executing program 4 (id=4584):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f00000012c0)={0x0, 0x2710}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x7ffffffe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r6=>0x0)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=<r7=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001180)=<r8=>0x0)
r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10)
ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=<r12=>0x0)
sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="01002609000000dbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x0)
sendmsg$NFC_CMD_ENABLE_SE(r2, &(0x7f0000001280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x44, r5, 0x410, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000060a010400000000000000000a0000030900010073797a31000000002400048020000180070001006374000014000280080002400000000108000140000000090900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
syz_emit_ethernet(0xfc6, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0xf90, 0x2c, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}, @mcast2, {[@hopopts={0x84}, @hopopts={0x88, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x8}]}, @hopopts={0x88, 0x1ed, '\x00', [@generic={0x10, 0xf67, "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"}]}]}}}}}, 0x0)

254.642782ms ago: executing program 1 (id=4585):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES8=<r1=>r0, @ANYBLOB="ad43"], 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) (async)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet(r2, &(0x7f0000000700)=[{{&(0x7f0000000c80)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000c40)}}, {{&(0x7f0000000340)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000380)="1ee861456c78998cfa732ec596f28f3b6f4b7e0b04e742811a606a0b95e9f76c440fe24951f50b0660df61d41b1529d521e4", 0x32}, {&(0x7f00000004c0)="0b02d2c84252335ad5f9991e8d86b20df1165ae19dcb434acabbd876bf0b3f4a94e7745f9f1a503076a7ce6b3c", 0x2d}, {&(0x7f0000000600)="e70bf7ab1fba0988db47aef61f2906066a5e9393eac74a4fc823f609b7dc8c2a6f6b92f95ed1a11750dec547e5d31bf36e7cca20a7cdd4e76a8478945b9c1897528662bb388eab1c5279a5de9540fe266f6bfbcefeb6df28087f8a045c36786a8d79e33f2d5f1b5692ca31b1dbf1992d704fe3bab8d65d972e1df9703c9bb4061b841ddf1d0f1955dbf95e485fc3e7a572f72c9f8c54639872053b74ae6b4d105883ff227cde8c8ffbd95ef3d0b09e4afc35cf1206a87e90255882af2443ba9fbfcfda6513d26e61313592bba2d1418deaccab98f080785e5485c8805cfacbef12e9d3cdee29b697498825a9b4b2a1a58c92dc", 0xf3}, {&(0x7f0000000500)="15612760becdaa803bc094d075f8a8342f3a8bd631f57c82d811b2ebe2474ee7dcabc8e2250ba65db122f137366323ec42dbff898d30f46207b68989d456597b03df2a4bc9238b5bb09b8c8650bc97378ff695a5cbbe2eea232d66d83cf5911456605da938bf40", 0x67}], 0x4}}], 0x2, 0x4000) (async)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002d0001000000ea001000000005000080050011802efff2"], 0x20}], 0x1}, 0x300) (async)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000800)=ANY=[@ANYRES64=r1, @ANYRES32=r5, @ANYRESHEX=r2, @ANYRES64=r0, @ANYRESOCT=r4, @ANYRESHEX=r3, @ANYRES64=r2, @ANYRES8=r5], 0x14}}, 0x800) (async)
shutdown(r2, 0x1) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0x20000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}], 0x1c) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r6}, 0x10) (async)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b05, &(0x7f0000000000)={'wlan1\x00'}) (async, rerun: 64)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (rerun: 64)
connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async)
r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000100)={r8, r8, 0xfffe, 0x0, 0x0, 0xc2, 0x85, 0x15c2, 0x5886, 0x6, 0x0, 0x0, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPCONNDEL(r9, 0x400448c9, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}) (async)
ioctl$sock_bt_hidp_HIDPCONNDEL(r9, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe(&(0x7f00000001c0)) (async, rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (rerun: 64)

253.604712ms ago: executing program 3 (id=4586):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x70bd2d, 0x0, {0xa, 0x0, 0x80}, [@RTA_MARK={0x8, 0x10, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa8100100086dd6000000000142b00fe8000000000000000000000000000aafe8000000000000000000000000000aa0000fffd", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0)

189.905676ms ago: executing program 3 (id=4587):
r0 = socket(0xa, 0x3, 0x3a)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x45a200, 0x0)
ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000240))
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800014000000003040002000c000280050001000000000014000280080001000000000008000200ac1414000800054000000000090001"], 0x58}}, 0x0)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00010000000796205d00000000e2f19eaf006458ad02f2b2a7d31d1147fefafa2cc3c7a5a767a11b45902e1e22adc58ada615a640605c97ea879a7379b49521e9aa5e3d5aa481542b4c1a0189971c3591b9a172a9f7e465e5203f31d29d7940b1aa2dd5ef4b57a14a7553ea8a5658889ca6f89d6d72dc406f94cd331bf09d09b6faf4b6e660077334c2754753084ec6e85b4b104030163c4b4821e7f767ab010f1f4e1542170737e96c884171cf4", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r5, @ANYBLOB="08001b000000000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x3c}}, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, 0x0, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000000c0)=0x74, 0x4)
ioctl$sock_bt_hci(r8, 0x400448ca, 0x0)
bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c)
sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
recvmmsg(r6, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f0000001140)}, 0x1}], 0x1, 0x40010041, 0x0)
ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000380)={0x0, 0xfb})
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080), 0x4)

189.238655ms ago: executing program 1 (id=4588):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe4, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7fffffff}]}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x44000}, 0x880) (async)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)={<r2=>0x0, 0x8, 0x4, [0x997, 0x5, 0x3, 0x8]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={r2, @in6={{0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}, 0x5}}, 0x5, 0x37, 0x9, 0x80000001, 0x0, 0x8, 0x8}, &(0x7f0000000340)=0x9c) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan3\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan1\x00', <r6=>0x0})
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r4, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x1}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x80}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000880}, 0x881e74a82d1164d5) (async, rerun: 32)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000580)={<r7=>r2, 0xdd, "7cf4f7008fb9516be6fbb0653ee8baf0b143eea499b21ee60af8133a2ef53b56286134457e8f80ac9fca226097f729f06eee731f97d58cf953fc63c3b88a83e237488a96b8ad525773fdd432f42b86deddacc66a0e900de345755e3f5abd060669ebbafe59da36e14f890ef585f4e64e5641f355a5d333eb79a5369ee48ef72bd68a1ae741476008cf1dcffc280d35a4c1903772c501460ab438e011635ba8f52e768725a33c9cf87a63c7bcb1f21fe0d59e4ab31bfcff3a60b9c700a5e5805ea36734308db4f5318f490363662367f3edbe2baf5a52a34c9289726726"}, &(0x7f0000000680)=0xe5) (async, rerun: 32)
r8 = syz_genetlink_get_family_id$team(&(0x7f0000000700), r0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000740)={'team0\x00', <r9=>0x0}) (async)
getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000780)={@private, @multicast1, <r10=>0x0}, &(0x7f00000007c0)=0xc)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'team0\x00', <r11=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_1\x00', <r12=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000880)={'vcan0\x00', <r13=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000008c0)={'team0\x00', <r14=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000bc0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000900)={0x27c, r8, 0x10, 0x70bd25, 0x25dfdbfe, {}, [{{0x8, 0x1, r9}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x164, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x265}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x27c}, 0x1, 0x0, 0x0, 0x48804}, 0x44008001) (async)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x41)
sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x5080a0}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x0, 0xb, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) (async, rerun: 32)
r15 = socket$inet6_sctp(0xa, 0x0, 0x84) (rerun: 32)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r15, 0x84, 0x9, &(0x7f0000000e00)={r7, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}}, 0xb9a7, 0x8, 0x7, 0x4, 0x0, 0x5, 0x1}, &(0x7f0000000ec0)=0x9c) (async)
r16 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r16, 0x84, 0x1c, &(0x7f0000000f00), &(0x7f0000000f40)=0x4)
socket$nl_audit(0x10, 0x3, 0x9) (async, rerun: 64)
r17 = openat$cgroup_ro(r0, &(0x7f0000000f80)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) (async, rerun: 64)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(r17, &(0x7f0000000fc0)='memory.numa_stat\x00', 0x0, 0x0) (async)
r18 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r3)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x34, r18, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xff}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x48050}, 0x8000)

116.680114ms ago: executing program 3 (id=4589):
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800000010000305000000000000000000cf0100", @ANYRES32=0x0, @ANYBLOB="83000000000000002000128008000100677265001400028008000700e000000208000600ac14142b08000400"], 0x78}}, 0x0)

116.025127ms ago: executing program 3 (id=4590):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x100, 0x1000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3e20bf4d404e0fde}]}}}]}, 0x38}}, 0x40) (async, rerun: 32)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x400000000010, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x3, 0x167f7c00, 0xf, 0x8000, 0x2, 0xfffffff5, 0xffff, 0xfff}}}}]}, 0x58}}, 0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) (async)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) (async)
pipe(&(0x7f0000002740)) (async)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x164, 0x18, 0x713, 0x0, 0x25dfdbfb, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@broadcast, {0x0, 0x0, 0x0, 0x8, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x1, 0x0, 0x50}, [@algo_aead={0x56, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x50, 0x60, "210466d38547aa140db9"}}, @encap={0x1c, 0x4, {0x2, 0x4e22, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x164}, 0x1, 0x0, 0x0, 0x880}, 0x2000) (async, rerun: 64)
r8 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64)
ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000400)={0x3, 0x401, 0x0, 0x34a, 0x4, 0x0, [{0x5c, 0x4, 0x2, '\x00', 0x800}, {0xb, 0x1ff, 0x0, '\x00', 0x4}, {0xf3bf, 0x5, 0x0, '\x00', 0x803}, {0x2, 0x1}]})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0x3}, {0x6, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x44040}, 0x4041080)

0s ago: executing program 3 (id=4591):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYBLOB="d8000000000203000000000000000000020000053c0002802c00018014000300fc00000000000000000000000000000114000400000000000000000000000000000000010c00028005000100210000000400038004000180"], 0xd8}}, 0x0) (async, rerun: 64)
r3 = socket$inet6(0xa, 0x2, 0x0) (rerun: 64)
ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xe, 0x0, 0x1000, 0x6, 0x400000, 0x7ff, 0x4, 0xc0000000, 0x402, 0x9, 0x5, 0x5, 0x3, 0x4006, 0x80, 0xfffffffc, 0x0, 0x37e9, 0x80000004, 0x1, 0x6, 0xfffffff9, 0x3}}) (async)
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2) (async)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=@flushpolicy={0x38, 0x12, 0x105, 0x0, 0x0, "", [@address_filter={0x28, 0x1a, {@in=@private=0xa010102, @in=@private=0xa010100, 0xa, 0x6, 0x9}}]}, 0x38}}, 0x20040810) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r6 = socket(0x10, 0x3, 0x0) (rerun: 32)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x2d6}, 0x10) (async)
write(r6, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000000000000000800010000000000", 0x24)
setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000240), 0x4)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r8}, 0x10) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r9}, 0x18)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r7, 0x9c3fa077fa966179, 0x70bd29, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x55}}}}}, 0x20}}, 0x4000054)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x110, r7, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x3, 0x5}}}}, [@NL80211_ATTR_IE={0xdd, 0x2a, [@ibss={0x6, 0x2, 0x8001}, @rann={0x7e, 0x15, {{0x0, 0x6d}, 0x9, 0x5, @broadcast, 0x10000, 0xe0e1, 0x9009}}, @tim={0x5, 0x81, {0x2, 0x53, 0xb, "54311defd8311fe363bb28f93d6a7f31ffd7eeb34e971aba27c3e7cea7697605352fccbe56f349a66849686a75d1bf97699713bcef5a4791fb0e8ee18a213d51aa1d907974f6cbf9ab28214b2b5ead5abbea13d653cdc3810091b7d4f0966a0f1ddd93d506003927672432c9f41291c1a89ec3603a0080b21ada9205fde6"}}, @prep={0x83, 0x1f, {{}, 0xa8, 0x8, @device_b, 0x0, @void, 0x1, 0x101, @broadcast, 0x7}}, @link_id={0x65, 0x12, {@initial, @broadcast}}, @peer_mgmt={0x75, 0x4, {0x1, 0x2, @void, @void, @void}}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x110}, 0x1, 0x0, 0x0, 0x800}, 0x20044051)

kernel console output (not intermixed with test programs):

 after parsing attributes in process `syz.0.2813'.
[  227.698283][T15462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2817'.
[  227.702639][T15462] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[  227.705957][T15462] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  227.738256][T15464] netlink: 'syz.3.2818': attribute type 1 has an invalid length.
[  227.744663][T15464] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2818'.
[  227.778671][T15468] lo speed is unknown, defaulting to 1000
[  227.781773][T15468] wg1 speed is unknown, defaulting to 1000
[  227.988177][T15478] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  227.992009][T15478] syzkaller0: entered promiscuous mode
[  227.994448][T15478] syzkaller0: entered allmulticast mode
[  227.999358][T15478] netlink: 'syz.3.2823': attribute type 11 has an invalid length.
[  228.004139][T15478] netlink: 'syz.3.2823': attribute type 11 has an invalid length.
[  228.008720][T15478] tipc: Resetting bearer <eth:syzkaller0>
[  228.012387][T15477] tipc: Resetting bearer <eth:syzkaller0>
[  228.017321][T15477] tipc: Disabling bearer <eth:syzkaller0>
[  228.114602][T15484] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) !
[  228.118787][T15484] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  228.121145][T15484] IPv6: NLM_F_CREATE should be set when creating new route
[  228.123360][T15484] IPv6: NLM_F_CREATE should be set when creating new route
[  228.130202][T15484] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  228.133218][T15484] batadv_slave_1: entered promiscuous mode
[  228.136718][T15483] batadv_slave_1: left promiscuous mode
[  229.418557][T15517] netlink: ct family unspecified
[  229.421841][T15517] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  229.498449][T15526] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  229.501476][T15526] syzkaller0: entered promiscuous mode
[  229.503307][T15526] syzkaller0: entered allmulticast mode
[  229.510342][T15528] __nla_validate_parse: 10 callbacks suppressed
[  229.510354][T15528] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2843'.
[  229.517609][T15526] tipc: Resetting bearer <eth:syzkaller0>
[  229.522197][T15525] tipc: Resetting bearer <eth:syzkaller0>
[  229.534815][T15525] tipc: Disabling bearer <eth:syzkaller0>
[  229.557523][T15534] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2845'.
[  229.571459][   T51] page_pool_release_retry() stalled pool shutdown: id 38, 3329 inflight 60 sec
[  229.589168][T15540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2846'.
[  229.593216][T15540] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[  229.596415][T15540] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  229.617385][T15543] netlink: ct family unspecified
[  229.619132][T15543] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  229.809391][T15556] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2854'.
[  230.163542][T15567] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2857'.
[  230.167787][T15567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2857'.
[  230.246873][T15575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2861'.
[  230.276400][T15581] vlan2: entered promiscuous mode
[  230.278877][T15581] vlan2: entered allmulticast mode
[  230.283352][T15581] hsr_slave_1: entered allmulticast mode
[  230.403036][T15598] netlink: 'syz.3.2866': attribute type 21 has an invalid length.
[  230.487356][T15604] bond0: option mode: unable to set because the bond device is up
[  230.572559][T15613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2872'.
[  230.651176][T15617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2875'.
[  230.775938][T15623] lo speed is unknown, defaulting to 1000
[  230.780190][T15623] wg1 speed is unknown, defaulting to 1000
[  230.853721][T15628] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2883'.
[  231.042422][T15648] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[  231.047141][T15648] netlink: 'syz.0.2885': attribute type 2 has an invalid length.
[  231.102350][T15652] netlink: 'syz.0.2887': attribute type 83 has an invalid length.
[  231.103065][T15653] netlink: 'syz.0.2887': attribute type 83 has an invalid length.
[  231.160436][   T54] Bluetooth: hci3: command 0x041b tx timeout
[  231.173307][T15662] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  231.884742][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  231.888028][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.406855][T15713] netlink: 'syz.0.2903': attribute type 10 has an invalid length.
[  232.533473][T15717] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  232.642570][T15724] pim6reg1: entered promiscuous mode
[  232.644271][T15724] pim6reg1: entered allmulticast mode
[  232.746175][T15735] netlink: 'syz.3.2910': attribute type 1 has an invalid length.
[  232.825846][T15739] bond14: entered promiscuous mode
[  232.827862][T15739] bond14: entered allmulticast mode
[  232.830626][T15739] 8021q: adding VLAN 0 to HW filter on device bond14
[  232.871189][T15739] lo speed is unknown, defaulting to 1000
[  232.879829][T15739] wg1 speed is unknown, defaulting to 1000
[  232.932980][T15751] net_ratelimit: 9 callbacks suppressed
[  232.932992][T15751] netlink: zone id is out of range
[  232.936326][T15751] netlink: zone id is out of range
[  232.937839][T15751] netlink: zone id is out of range
[  232.939319][T15751] netlink: zone id is out of range
[  232.946224][T15751] netlink: zone id is out of range
[  232.948227][T15751] netlink: zone id is out of range
[  232.955214][T15751] netlink: zone id is out of range
[  232.956858][T15751] netlink: zone id is out of range
[  232.958501][T15751] netlink: zone id is out of range
[  232.967713][T15751] netlink: zone id is out of range
[  232.982939][T15753] lo speed is unknown, defaulting to 1000
[  232.985346][T15753] wg1 speed is unknown, defaulting to 1000
[  233.086758][T15764] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  233.125507][T15753] macsec0: entered promiscuous mode
[  233.127668][T15753] syzkaller0: entered promiscuous mode
[  233.138048][T15753] syzkaller0: left promiscuous mode
[  233.150778][T15768] vlan3: entered promiscuous mode
[  233.152575][T15768] macvtap0: entered promiscuous mode
[  233.250427][T15774] bond0: entered promiscuous mode
[  233.252945][T15774] bond0: left promiscuous mode
[  234.394718][T15838] batadv5: entered promiscuous mode
[  234.396535][T15838] batadv5: entered allmulticast mode
[  234.982854][T15852] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  235.063257][T15851] delete_channel: no stack
[  235.088616][T15860] __nla_validate_parse: 23 callbacks suppressed
[  235.088628][T15860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2947'.
[  235.121017][T15862] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2948'.
[  235.128596][T15862] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2948'.
[  235.195233][T15866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2950'.
[  235.246140][T15872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2951'.
[  235.257337][T15872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2951'.
[  235.372912][T15886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2955'.
[  235.412804][T15889] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2956'.
[  235.462801][T15894] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2958'.
[  235.597934][T15917] team0: Port device dummy0 removed
[  235.630483][T15917] ieee802154 phy0 wpan0: encryption failed: -126
[  235.643746][T15921] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2965'.
[  235.846814][   T33] audit: type=1804 audit(1756323362.242:2): pid=15936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2969" name="/newroot/251/cgroup.controllers" dev="tmpfs" ino=1297 res=1 errno=0
[  235.860744][   T33] audit: type=1800 audit(1756323362.242:3): pid=15936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2969" name="cgroup.controllers" dev="tmpfs" ino=1297 res=0 errno=0
[  235.894346][T15938] netlink: 'syz.3.2970': attribute type 1 has an invalid length.
[  235.896916][T15938] netlink: 'syz.3.2970': attribute type 1 has an invalid length.
[  235.943696][T15942] tap0: tun_chr_ioctl cmd 1074025677
[  235.945987][T15942] tap0: linktype set to 0
[  236.115064][T15949] veth1_to_batadv: entered promiscuous mode
[  236.117076][T15949] vlan3: entered promiscuous mode
[  236.253175][T15959] veth2: entered promiscuous mode
[  236.298105][T15964] erspan0: entered allmulticast mode
[  236.345596][T15972] nbd: must specify at least one socket
[  237.110546][T16007] sctp: [Deprecated]: syz.0.2997 (pid 16007) Use of int in max_burst socket option.
[  237.110546][T16007] Use struct sctp_assoc_value instead
[  237.297928][T16013] netlink: 'syz.1.2996': attribute type 1 has an invalid length.
[  237.300794][T16004] netlink: 'syz.1.2996': attribute type 1 has an invalid length.
[  237.303255][T16004] netlink: 'syz.1.2996': attribute type 4 has an invalid length.
[  237.306183][T16013] netlink: 'syz.1.2996': attribute type 4 has an invalid length.
[  237.596444][T16044] bridge0: port 1(vlan3) entered blocking state
[  237.598996][T16044] bridge0: port 1(vlan3) entered disabled state
[  237.605180][T16044] vlan3: entered allmulticast mode
[  237.606815][T16044] bridge0: entered allmulticast mode
[  237.608993][T16044] vlan3: left allmulticast mode
[  237.610678][T16044] bridge0: left allmulticast mode
[  237.676244][T16052] netlink: 'syz.1.3015': attribute type 1 has an invalid length.
[  237.691601][T16052] 8021q: adding VLAN 0 to HW filter on device bond13
[  237.702414][T16052] vlan4: entered allmulticast mode
[  237.705051][T16052] batadv0: entered allmulticast mode
[  237.707458][T16052] bond13: (slave vlan4): Opening slave failed
[  238.037303][T16087] netlink: 'syz.3.3029': attribute type 29 has an invalid length.
[  238.087279][T16094] vlan1: entered promiscuous mode
[  238.088853][T16094] hsr_slave_1: entered promiscuous mode
[  238.091053][T16094] vlan1: entered allmulticast mode
[  238.092620][T16094] hsr_slave_1: entered allmulticast mode
[  238.318915][T16107] netlink: 'syz.0.3034': attribute type 6 has an invalid length.
[  238.400417][T16119] net_ratelimit: 47 callbacks suppressed
[  238.400429][T16119] netlink: ct family unspecified
[  238.404705][T16119] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  238.598332][T16136] netlink: ct family unspecified
[  238.601034][T16136] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  238.715387][T16150] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[  238.717990][T16150] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  238.732589][T16148] lo speed is unknown, defaulting to 1000
[  238.735691][T16148] wg1 speed is unknown, defaulting to 1000
[  238.797129][T16159] netlink: ct family unspecified
[  238.798837][T16159] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  238.841775][T16165] netlink: 'syz.1.3055': attribute type 1 has an invalid length.
[  238.952741][T16177] netlink: ct family unspecified
[  238.954582][T16177] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  239.040201][T16182] netlink: 'syz.1.3063': attribute type 83 has an invalid length.
[  239.872511][T16198] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input4
[  240.098826][T16235] __nla_validate_parse: 35 callbacks suppressed
[  240.098839][T16235] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3079'.
[  240.636778][T16266] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  240.641454][T16266] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  240.644989][T16267] tipc: Resetting bearer <eth:syzkaller0>
[  240.649246][T16265] tipc: Disabling bearer <eth:syzkaller0>
[  240.720302][T16270] netlink: 'syz.3.3090': attribute type 39 has an invalid length.
[  240.861898][T16277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3092'.
[  241.101424][T16291] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3099'.
[  241.111412][T16296] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3100'.
[  241.122487][T16298] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3101'.
[  241.167044][T16306] netlink: 'syz.0.3104': attribute type 1 has an invalid length.
[  241.177354][T16306] 8021q: adding VLAN 0 to HW filter on device bond15
[  241.186754][T16306] 8021q: adding VLAN 0 to HW filter on device bond15
[  241.189242][T16306] bond15: (slave vxcan1): The slave device specified does not support setting the MAC address
[  241.193409][T16306] bond15: (slave vxcan1): Error -95 calling set_mac_address
[  241.241353][T16308] veth11: entered promiscuous mode
[  241.245140][T16308] bond15: (slave veth11): Enslaving as an active interface with a down link
[  241.252218][T16306] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3104'.
[  241.255949][T16306] 8021q: adding VLAN 0 to HW filter on device bond15
[  241.505855][T16321] netlink: 'syz.0.3110': attribute type 10 has an invalid length.
[  241.508675][T16321] bond0: (slave wlan1): refused to change device type
[  241.541824][T16325] netlink: 'syz.0.3111': attribute type 1 has an invalid length.
[  241.544581][T16325] netlink: 'syz.0.3111': attribute type 1 has an invalid length.
[  241.551782][T16325] netlink: 'syz.0.3111': attribute type 1 has an invalid length.
[  241.563583][T16325] 8021q: adding VLAN 0 to HW filter on device bond16
[  241.568159][T16325] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3111'.
[  241.660517][T16328] 8021q: adding VLAN 0 to HW filter on device bond17
[  241.667164][T16328] bond17: entered promiscuous mode
[  242.011013][T16340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3116'.
[  242.033628][T16342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3117'.
[  242.036454][T16342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3117'.
[  242.153292][T16356] dvmrp1: left allmulticast mode
[  242.204127][T16356] rdma_rxe: rxe_newlink: failed to add lo
[  242.214574][T16356] team0: left promiscuous mode
[  242.216932][T16356] 8021q: adding VLAN 0 to HW filter on device team0
[  242.364012][T16365] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  242.616415][T16378] veth1: entered promiscuous mode
[  242.743332][T16393] macsec2: entered promiscuous mode
[  242.745363][T16393] bridge0: entered promiscuous mode
[  242.748484][T16393] bridge0: port 1(macsec2) entered blocking state
[  242.753237][T16393] bridge0: port 1(macsec2) entered disabled state
[  242.756442][T16393] macsec2: entered allmulticast mode
[  242.758578][T16393] bridge0: entered allmulticast mode
[  242.762366][T16393] macsec2: left allmulticast mode
[  242.764475][T16393] bridge0: left allmulticast mode
[  242.767110][T16393] bridge0: left promiscuous mode
[  242.888471][T16403] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  243.043195][T16411] 8021q: adding VLAN 0 to HW filter on device bond0
[  243.111399][T16415] geneve4: entered promiscuous mode
[  243.857837][T16445] validate_nla: 3 callbacks suppressed
[  243.857849][T16445] netlink: 'syz.3.3155': attribute type 3 has an invalid length.
[  243.865869][T16446] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  243.892011][T16447] syzkaller0: entered promiscuous mode
[  243.893864][T16447] syzkaller0: entered allmulticast mode
[  243.913405][T16446] tipc: Resetting bearer <eth:syzkaller0>
[  243.917875][T16446] tipc: Disabling bearer <eth:syzkaller0>
[  243.955047][T16452] net_ratelimit: 15 callbacks suppressed
[  243.955058][T16452] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  244.029146][T16458] lo speed is unknown, defaulting to 1000
[  244.032453][T16458] wg1 speed is unknown, defaulting to 1000
[  244.083203][T16458] lo speed is unknown, defaulting to 1000
[  244.086090][T16458] wg1 speed is unknown, defaulting to 1000
[  244.206370][T16466] netlink: 'syz.3.3161': attribute type 10 has an invalid length.
[  244.222265][T16466] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  244.309448][T16474] syzkaller0: entered promiscuous mode
[  244.317116][T16474] syzkaller0: entered allmulticast mode
[  244.465665][T16489] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  244.494461][T16489] bridge82: entered promiscuous mode
[  244.496348][T16489] bridge82: entered allmulticast mode
[  244.576038][T16496] netlink: 'syz.0.3172': attribute type 21 has an invalid length.
[  244.638625][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  244.642200][T16500] netlink: 'syz.0.3172': attribute type 7 has an invalid length.
[  245.225240][T16505] __nla_validate_parse: 42 callbacks suppressed
[  245.225258][T16505] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3174'.
[  245.428611][T16512] sch_tbf: burst 2 is lower than device lo mtu (18) !
[  245.434127][T16512] sch_tbf: burst 2 is lower than device lo mtu (18) !
[  245.436574][T16512] sch_tbf: burst 2 is lower than device lo mtu (18) !
[  245.446782][T16513] sch_tbf: burst 2 is lower than device lo mtu (18) !
[  245.517905][T16518] netlink: 'syz.1.3179': attribute type 11 has an invalid length.
[  245.521910][T16518] netlink: 'syz.1.3179': attribute type 4 has an invalid length.
[  245.524594][T16518] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3179'.
[  245.528454][T16518] openvswitch: netlink: Message has 1 unknown bytes.
[  245.534283][T16518] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  245.556393][T16521] netlink: ct family unspecified
[  245.565652][T16521] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  245.568397][T16523] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3181'.
[  245.596517][T16527] netlink: 'syz.1.3182': attribute type 9 has an invalid length.
[  245.599406][T16527] netlink: 'syz.1.3182': attribute type 7 has an invalid length.
[  245.605501][T16527] netlink: 'syz.1.3182': attribute type 8 has an invalid length.
[  245.639348][T16531] pim6reg1: entered promiscuous mode
[  245.642182][T16531] pim6reg1: entered allmulticast mode
[  245.686361][T16539] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3186'.
[  245.694099][T16539] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  245.698116][T16539] syzkaller0: entered promiscuous mode
[  245.702594][T16539] syzkaller0: entered allmulticast mode
[  245.715088][T16535] lo speed is unknown, defaulting to 1000
[  245.717410][T16535] wg1 speed is unknown, defaulting to 1000
[  245.735159][T16538] tipc: Resetting bearer <eth:syzkaller0>
[  245.741068][T16538] tipc: Disabling bearer <eth:syzkaller0>
[  245.819522][T16546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3188'.
[  245.822616][T16548] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3189'.
[  245.875277][T16552] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3190'.
[  245.878804][T16552] ip6tnl7: entered promiscuous mode
[  245.956033][T16562] raw_sendmsg: syz.0.3193 forgot to set AF_INET. Fix it!
[  246.006775][T16566] IPVS: Scheduler module ip_vs_sip not found
[  246.032872][T16569] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3198'.
[  246.061091][T16571] vlan4: entered promiscuous mode
[  246.104079][T16571] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3199'.
[  246.349286][T16595] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3206'.
[  246.763000][T16605] netlink: 'syz.0.3210': attribute type 1 has an invalid length.
[  246.782201][T16605] bond18: entered promiscuous mode
[  246.784971][T16605] 8021q: adding VLAN 0 to HW filter on device bond18
[  246.793334][T16605] batadv3: entered promiscuous mode
[  246.796623][T16605] batadv3: entered allmulticast mode
[  246.800035][T16605] 8021q: adding VLAN 0 to HW filter on device batadv3
[  246.803411][T16605] bond18: (slave batadv3): making interface the new active one
[  246.807578][T16605] bond18: (slave batadv3): Enslaving as an active interface with an up link
[  247.378784][T16634] netlink: 'syz.3.3218': attribute type 1 has an invalid length.
[  247.413889][T16634] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  247.426458][T16634] 8021q: adding VLAN 0 to HW filter on device bond3
[  247.429205][T14062] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  247.447902][T16634] veth4: entered promiscuous mode
[  247.451572][T16634] bond3: (slave veth4): Enslaving as a backup interface with a down link
[  247.478906][T16634] bond0: (slave wlan1): Releasing backup interface
[  247.489249][T16634] bond3: (slave ip6gretap1): Removing an active aggregator
[  247.493249][T16634] bond3: (slave ip6gretap1): Releasing backup interface
[  247.496044][T16634] bond3: (slave ip6gretap1): the permanent HWaddr of slave - d6:8b:13:41:43:f4 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  247.506461][T16634] bond3: (slave veth4): Releasing backup interface
[  247.637997][T16661] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[  247.645764][T16661] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  247.960023][ T5234] Bluetooth: hci3: command 0x041b tx timeout
[  248.312867][T16691] rdma_rxe: rxe_newlink: failed to add lo
[  248.322117][T16691] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  248.659221][T16706] lo speed is unknown, defaulting to 1000
[  248.662523][T16706] wg1 speed is unknown, defaulting to 1000
[  248.895944][T16718] 8021q: adding VLAN 0 to HW filter on device bond15
[  248.899158][T16718] bond14: (slave bond15): Enslaving as an active interface with an up link
[  248.965683][T16731] net_ratelimit: 4 callbacks suppressed
[  248.965699][T16731] netlink: ct family unspecified
[  248.969279][T16731] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  248.996151][T16733] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  249.115867][T16746] bridge12: port 1(veth0_to_bond) entered blocking state
[  249.119052][T16746] bridge12: port 1(veth0_to_bond) entered disabled state
[  249.122292][T16746] veth0_to_bond: entered allmulticast mode
[  249.125751][T16746] veth0_to_bond: entered promiscuous mode
[  249.236568][T16749] netlink: ct family unspecified
[  249.238661][T16749] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  249.342304][T16755] validate_nla: 3 callbacks suppressed
[  249.342317][T16755] netlink: 'syz.1.3259': attribute type 4 has an invalid length.
[  249.448009][T16765] netlink: ct family unspecified
[  249.449760][T16765] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  249.503430][T16770] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  249.506621][T16770] syzkaller0: entered promiscuous mode
[  249.509328][T16770] syzkaller0: entered allmulticast mode
[  249.516047][T16770] tipc: Resetting bearer <eth:syzkaller0>
[  249.519139][T16769] tipc: Resetting bearer <eth:syzkaller0>
[  249.523231][T16769] tipc: Disabling bearer <eth:syzkaller0>
[  249.538340][T16778] netlink: 'syz.1.3268': attribute type 1 has an invalid length.
[  249.560247][T16778] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  249.563088][T16778] IPv6: NLM_F_CREATE should be set when creating new route
[  249.565850][T16778] IPv6: NLM_F_CREATE should be set when creating new route
[  249.570248][T16778] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  249.692913][T16788] netlink: ct family unspecified
[  249.695095][T16788] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  249.743539][T16792] 8021q: adding VLAN 0 to HW filter on device bond4
[  249.753287][T16792] macvlan4: entered promiscuous mode
[  249.755306][T16792] macvlan4: entered allmulticast mode
[  249.869033][T16810] netlink: ct family unspecified
[  249.988609][T16822] 8021q: adding VLAN 0 to HW filter on device bond16
[  250.022134][T16825] netlink: 'syz.3.3285': attribute type 1 has an invalid length.
[  250.034382][T16827] netlink: 'syz.1.3286': attribute type 12 has an invalid length.
[  250.048598][T16825] bond5: (slave veth6): Enslaving as an active interface with a down link
[  250.054160][T16825] 8021q: adding VLAN 0 to HW filter on device bond5
[  250.281001][T16842] netlink: 'syz.3.3292': attribute type 1 has an invalid length.
[  250.283871][T16842] __nla_validate_parse: 29 callbacks suppressed
[  250.283880][T16842] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3292'.
[  250.321851][T16844] GUP no longer grows the stack in syz.3.3293 (16844): 200000006000-20000000a000 (200000005000)
[  250.325641][T16844] CPU: 0 UID: 0 PID: 16844 Comm: syz.3.3293 Not tainted syzkaller #0 PREEMPT(full) 
[  250.325653][T16844] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  250.325659][T16844] Call Trace:
[  250.325663][T16844]  <TASK>
[  250.325668][T16844]  dump_stack_lvl+0x189/0x250
[  250.325682][T16844]  ? __pfx_css_rstat_updated+0x10/0x10
[  250.325692][T16844]  ? __pfx_dump_stack_lvl+0x10/0x10
[  250.325701][T16844]  ? __pfx__printk+0x10/0x10
[  250.325710][T16844]  ? find_vma+0xe7/0x160
[  250.325722][T16844]  ? __pfx___calc_delta+0x10/0x10
[  250.325735][T16844]  __get_user_pages+0x24d0/0x2ce0
[  250.325746][T16844]  ? __gup_longterm_locked+0xc68/0x1660
[  250.325758][T16844]  ? __gup_longterm_locked+0xc68/0x1660
[  250.325768][T16844]  __gup_longterm_locked+0xde9/0x1660
[  250.325778][T16844]  ? try_grab_folio_fast+0x1be/0x4f0
[  250.325788][T16844]  ? rcu_is_watching+0x15/0xb0
[  250.325797][T16844]  ? rcu_is_watching+0x15/0xb0
[  250.325805][T16844]  gup_fast_fallback+0x1e6a/0x2010
[  250.325820][T16844]  ? __pfx_gup_fast_fallback+0x10/0x10
[  250.325828][T16844]  ? __mutex_lock+0x335/0x1350
[  250.325842][T16844]  ? lock_release+0x4b/0x3e0
[  250.325853][T16844]  ? futex_unqueue+0x22/0x240
[  250.325862][T16844]  ? futex_unqueue+0x22/0x240
[  250.325869][T16844]  ? is_valid_gup_args+0x11f/0x200
[  250.325878][T16844]  ? get_user_pages_fast+0x4d/0xb0
[  250.325887][T16844]  __iov_iter_get_pages_alloc+0x39a/0xb40
[  250.325899][T16844]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  250.325912][T16844]  ? futex_private_hash_get+0x43/0x290
[  250.325920][T16844]  ? wait_for_space+0x24d/0x2d0
[  250.325930][T16844]  iov_iter_get_pages2+0x5e/0xa0
[  250.325948][T16844]  __se_sys_vmsplice+0x548/0x10d0
[  250.325963][T16844]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  250.325973][T16844]  ? __pfx_futex_wait+0x10/0x10
[  250.325994][T16844]  ? do_pipe2+0xf7/0x170
[  250.326007][T16844]  ? rcu_is_watching+0x15/0xb0
[  250.326015][T16844]  ? rcu_is_watching+0x15/0xb0
[  250.326023][T16844]  do_syscall_64+0xfa/0x3b0
[  250.326030][T16844]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.326038][T16844]  ? exc_page_fault+0x9f/0xf0
[  250.326049][T16844]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.326057][T16844] RIP: 0033:0x7f673ad8ebe9
[  250.326065][T16844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  250.326073][T16844] RSP: 002b:00007f673bc9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  250.326082][T16844] RAX: ffffffffffffffda RBX: 00007f673afb5fa0 RCX: 00007f673ad8ebe9
[  250.326088][T16844] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000e
[  250.326093][T16844] RBP: 00007f673ae11e19 R08: 0000000000000000 R09: 0000000000000000
[  250.326099][T16844] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  250.326103][T16844] R13: 00007f673afb6038 R14: 00007f673afb5fa0 R15: 00007ffef9bc51a8
[  250.326112][T16844]  </TASK>
[  250.479467][T16852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3296'.
[  250.499247][T16854] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3297'.
[  250.517618][T16851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3295'.
[  250.523872][T16851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3295'.
[  250.591159][T16851] netlink: 'syz.0.3295': attribute type 1 has an invalid length.
[  250.594267][T16851] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3295'.
[  250.615774][T16869] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3301'.
[  250.622746][T16874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3302'.
[  250.916549][T16886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3305'.
[  251.523712][T16897] macsec0: entered promiscuous mode
[  251.525494][T16897] macsec0: entered allmulticast mode
[  251.567857][T16902] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3310'.
[  252.578436][T16924] netlink: 'syz.3.3317': attribute type 21 has an invalid length.
[  252.606352][T16926] netlink: 'syz.3.3318': attribute type 10 has an invalid length.
[  252.632971][T16927] 8021q: adding VLAN 0 to HW filter on device bond17
[  252.637122][T16927] team0: Port device bond17 added
[  252.746197][T16943] lo speed is unknown, defaulting to 1000
[  252.748680][T16943] wg1 speed is unknown, defaulting to 1000
[  252.939394][T16971] netlink: 'syz.1.3333': attribute type 2 has an invalid length.
[  253.078920][ T5864] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0
[  253.085434][ T5864] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0
[  253.088475][ T5864] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0
[  253.093168][ T5864] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0
[  253.123154][ T8773] IPVS: starting estimator thread 0...
[  253.168128][T16995] netlink: 'syz.1.3343': attribute type 39 has an invalid length.
[  253.211064][T16991] IPVS: using max 92 ests per chain, 220800 per kthread
[  253.310708][T16998] vlan3: entered promiscuous mode
[  253.312888][T16998] bond0: entered promiscuous mode
[  253.315125][T16998] vlan3: entered allmulticast mode
[  253.317369][T16998] bond0: entered allmulticast mode
[  253.832648][T17005] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  253.845326][T17004] tipc: Disabling bearer <eth:syzkaller0>
[  254.104132][T17027] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  254.477558][T17054] net_ratelimit: 20 callbacks suppressed
[  254.477570][T17054] openvswitch: netlink: Flow key attr not present in new flow.
[  254.872384][T17076] validate_nla: 1 callbacks suppressed
[  254.872395][T17076] netlink: 'syz.3.3367': attribute type 4 has an invalid length.
[  254.974784][T17081] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  254.994200][T17081] netlink: 'syz.3.3369': attribute type 7 has an invalid length.
[  254.997310][T17081] netlink: 'syz.3.3369': attribute type 8 has an invalid length.
[  255.172018][T17089] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  255.213851][T17097] openvswitch: netlink: Flow key attr not present in new flow.
[  255.287768][T17105] netlink: 'syz.3.3376': attribute type 1 has an invalid length.
[  255.366002][T17114] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  255.369500][T17114] syzkaller0: entered promiscuous mode
[  255.375233][T17114] syzkaller0: entered allmulticast mode
[  255.427085][T17114] tipc: Resetting bearer <eth:syzkaller0>
[  255.446527][T17114] veth13: entered promiscuous mode
[  255.468378][T17122] syzkaller0: tun_chr_ioctl cmd 1074025677
[  255.472536][T17122] syzkaller0: linktype set to 1
[  255.492083][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  255.500198][T17112] tipc: Resetting bearer <eth:syzkaller0>
[  255.504502][T17112] tipc: Disabling bearer <eth:syzkaller0>
[  255.592484][T17128] openvswitch: netlink: Flow key attr not present in new flow.
[  255.685148][T17131] __nla_validate_parse: 34 callbacks suppressed
[  255.685162][T17131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3383'.
[  255.767555][T17135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3385'.
[  255.772313][T17135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3385'.
[  255.799544][T17137] syzkaller0: entered promiscuous mode
[  255.802079][T17137] syzkaller0: entered allmulticast mode
[  256.177916][T17154] openvswitch: netlink: Message has 8 unknown bytes.
[  256.306639][T17160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3395'.
[  256.314166][T17160] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[  256.317247][T17160] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  256.366074][T17166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3398'.
[  256.370574][T17166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3398'.
[  256.425624][T17170] syzkaller1: entered promiscuous mode
[  256.427634][T17170] syzkaller1: entered allmulticast mode
[  256.436672][T17172] openvswitch: netlink: Message has 8 unknown bytes.
[  256.463971][T17174] netlink: 'syz.0.3401': attribute type 4 has an invalid length.
[  256.468126][T17176] netlink: 'syz.0.3401': attribute type 4 has an invalid length.
[  256.479325][T17179] openvswitch: netlink: Key type 198 is out of range max 32
[  256.536085][T17189] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3406'.
[  256.572417][T17187] lo speed is unknown, defaulting to 1000
[  256.574384][T17192] openvswitch: netlink: Message has 8 unknown bytes.
[  256.574883][T17187] wg1 speed is unknown, defaulting to 1000
[  256.620311][T17187] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3405'.
[  256.650783][T17198] nbd: nbd0 already in use
[  256.654170][T17199] nbd: nbd0 already in use
[  256.656242][T17198] block nbd0: NBD_DISCONNECT
[  256.658019][T17198] block nbd0: Send disconnect failed -32
[  256.659430][T17201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3410'.
[  256.662032][T17198] block nbd0: shutting down sockets
[  256.667627][T17201] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[  256.673582][T17201] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (7)
[  256.904854][T17221] openvswitch: netlink: Message has 8 unknown bytes.
[  256.928384][T17223] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  256.937146][T17223] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3417'.
[  257.150287][T17225] nbd0: detected capacity change from 0 to 127
[  257.154903][   T55] block nbd0: Receive control failed (result -104)
[  257.157577][ T7082] block nbd0: Receive control failed (result -32)
[  257.225542][T17249] netlink: 'syz.3.3425': attribute type 1 has an invalid length.
[  257.257042][T17249] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  257.264780][T17249] syzkaller0: entered promiscuous mode
[  257.266907][T17249] syzkaller0: entered allmulticast mode
[  257.279496][T17249] tipc: Resetting bearer <eth:syzkaller0>
[  257.282953][T17248] tipc: Resetting bearer <eth:syzkaller0>
[  257.288635][T17248] tipc: Disabling bearer <eth:syzkaller0>
[  257.401034][T17263] tls_set_device_offload: netdev not found
[  257.447871][T17268] lo speed is unknown, defaulting to 1000
[  257.451795][T17268] wg1 speed is unknown, defaulting to 1000
[  257.615205][T17286] bond5: (slave veth6): Releasing active interface
[  257.632509][T17288] dvmrp8: entered allmulticast mode
[  257.712043][T17292] netlink: 'syz.3.3438': attribute type 2 has an invalid length.
[  257.746365][T17288] dvmrp8: left allmulticast mode
[  257.979978][T17316] bridge0: port 1(vlan4) entered blocking state
[  257.982332][T17316] bridge0: port 1(vlan4) entered disabled state
[  257.984586][T17316] vlan4: entered allmulticast mode
[  257.986484][T17316] bridge0: entered allmulticast mode
[  257.989227][T17316] vlan4: left allmulticast mode
[  257.991537][T17316] bridge0: left allmulticast mode
[  258.305403][T17348] netlink: 'syz.3.3454': attribute type 9 has an invalid length.
[  258.308506][T17348] netlink: 'syz.3.3454': attribute type 6 has an invalid length.
[  258.925887][T17354] bond0: (slave wlan1): refused to change device type
[  259.243415][T17392] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  259.246844][T17392] syzkaller0: entered promiscuous mode
[  259.249304][T17392] syzkaller0: entered allmulticast mode
[  259.271203][T17392] tipc: Resetting bearer <eth:syzkaller0>
[  259.280880][T17391] tipc: Resetting bearer <eth:syzkaller0>
[  259.298260][T17391] tipc: Disabling bearer <eth:syzkaller0>
[  259.421170][T17408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  259.646075][T17425] net_ratelimit: 11 callbacks suppressed
[  259.646089][T17425] openvswitch: netlink: EtherType 50a is less than min 600
[  259.789442][T17435] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[  259.792817][T17435] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  259.855518][T17442] sctp: [Deprecated]: syz.1.3485 (pid 17442) Use of int in max_burst socket option.
[  259.855518][T17442] Use struct sctp_assoc_value instead
[  259.997856][T17450] lo speed is unknown, defaulting to 1000
[  260.002556][T17450] wg1 speed is unknown, defaulting to 1000
[  260.103351][T17464] x9: renamed from bridge_slave_0
[  260.416983][T17481] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  260.420041][T17481] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  260.422789][T17481] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  260.426587][T17482] syzkaller0: entered promiscuous mode
[  260.430525][T17482] syzkaller0: entered allmulticast mode
[  260.434564][T17481] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  260.437891][T17481] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  260.442891][T17481] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  260.445705][T17481] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  260.448952][T17481] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  260.453060][T17481] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  260.455998][T17481] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  260.458765][T17481] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  260.462016][T17481] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  260.464989][T17481] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  260.468037][T17481] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  260.472721][T17481] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  260.490164][T17481] tipc: Resetting bearer <eth:syzkaller0>
[  260.496958][T17481] tipc: Disabling bearer <eth:syzkaller0>
[  260.974229][T17502] validate_nla: 2 callbacks suppressed
[  260.974245][T17502] netlink: 'syz.1.3503': attribute type 1 has an invalid length.
[  260.980381][T17502] __nla_validate_parse: 22 callbacks suppressed
[  260.980397][T17502] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3503'.
[  261.048707][T17509] openvswitch: netlink: Key type 5894 is out of range max 32
[  261.097402][T17514] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3507'.
[  261.108030][T17514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3507'.
[  261.185305][T17525] lo speed is unknown, defaulting to 1000
[  261.187803][T17525] wg1 speed is unknown, defaulting to 1000
[  261.236320][T17536] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3512'.
[  261.343562][   T33] audit: type=1800 audit(1756323387.732:4): pid=17545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3515" name="memory.events" dev="tmpfs" ino=2226 res=0 errno=0
[  261.353767][   T33] audit: type=1804 audit(1756323387.732:5): pid=17548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3515" name="/newroot/434/memory.events" dev="tmpfs" ino=2226 res=1 errno=0
[  261.448917][T17558] syzkaller1: entered promiscuous mode
[  261.451102][T17558] syzkaller1: entered allmulticast mode
[  261.500676][T17567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3519'.
[  261.504696][T17567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3519'.
[  261.535738][T17569] netlink: 'syz.1.3520': attribute type 1 has an invalid length.
[  261.567757][T17569] 8021q: adding VLAN 0 to HW filter on device bond18
[  261.582326][T17569] vlan4: entered promiscuous mode
[  261.584454][T17569] bond18: entered promiscuous mode
[  261.587394][T17569] vlan4: entered allmulticast mode
[  261.589517][T17569] bond18: entered allmulticast mode
[  261.605513][T17569] bond18: (slave gretap2): making interface the new active one
[  261.608671][T17569] gretap2: entered promiscuous mode
[  261.614989][T17569] gretap2: entered allmulticast mode
[  261.621476][T17569] bond18: (slave gretap2): Enslaving as an active interface with an up link
[  261.628959][T17569] netlink: 'syz.1.3520': attribute type 1 has an invalid length.
[  261.678792][T17575] netlink: 'syz.1.3521': attribute type 1 has an invalid length.
[  261.723567][T17575] veth13: entered promiscuous mode
[  261.726963][T17575] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3521'.
[  261.892538][T17585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3524'.
[  261.902923][T17585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3524'.
[  262.027693][T17594] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3528'.
[  262.095535][T17604] sctp: [Deprecated]: syz.1.3531 (pid 17604) Use of int in maxseg socket option.
[  262.095535][T17604] Use struct sctp_assoc_value instead
[  262.332456][T17629] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  262.435724][T17637] tipc: Trying to set illegal importance in message
[  262.438711][T17637] netlink: 'syz.3.3541': attribute type 21 has an invalid length.
[  262.442393][T17637] netlink: 'syz.3.3541': attribute type 5 has an invalid length.
[  262.463712][T17639] netlink: 'syz.1.3542': attribute type 16 has an invalid length.
[  262.468411][T17639] netlink: 'syz.1.3542': attribute type 17 has an invalid length.
[  262.476044][T17639] tipc: Resetting bearer <eth:gre0>
[  262.562010][T17639] bond0: left promiscuous mode
[  262.588509][T17644] veth0: entered promiscuous mode
[  262.594692][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  262.599281][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  262.604684][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  262.607659][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  262.632273][T17651] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  262.878819][T17674] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  262.907600][T17676] openvswitch: netlink: Flow actions attr not present in new flow.
[  262.941691][T17678] netlink: 'syz.1.3554': attribute type 2 has an invalid length.
[  263.159468][T17686] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  263.162236][T17687] syzkaller0: entered promiscuous mode
[  263.164370][T17687] syzkaller0: entered allmulticast mode
[  263.203437][T17688] tipc: Resetting bearer <eth:syzkaller0>
[  263.211341][T17688] tipc: Disabling bearer <eth:syzkaller0>
[  263.258855][T17693] 8021q: adding VLAN 0 to HW filter on device bond20
[  263.265238][T17697] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  263.270262][T17693] bond19: (slave bond20): Enslaving as an active interface with an up link
[  263.278360][T17693] 8021q: adding VLAN 0 to HW filter on device bond19
[  263.313781][T17704] Bluetooth: MGMT ver 1.23
[  263.339240][T17643] veth0: left promiscuous mode
[  263.510318][T17728] netlink: 'syz.1.3568': attribute type 1 has an invalid length.
[  263.602722][T17734] bond21: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  263.607481][T17734] bond21: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  263.611827][T17734] bond21: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode
[  263.678949][T17737] lo speed is unknown, defaulting to 1000
[  263.683478][T17737] wg1 speed is unknown, defaulting to 1000
[  264.008642][T17769] ieee802154 phy0 wpan0: encryption failed: -126
[  264.371523][T17802] RDS: rds_bind could not find a transport for ::ffff:172.20.20.35, load rds_tcp or rds_rdma?
[  264.397606][T17806] lo speed is unknown, defaulting to 1000
[  264.401708][T17806] wg1 speed is unknown, defaulting to 1000
[  264.490851][T17806] lo speed is unknown, defaulting to 1000
[  264.494548][T17806] wg1 speed is unknown, defaulting to 1000
[  265.112279][T17835] netlink: ct family unspecified
[  265.114373][T17835] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  265.178092][T17844] openvswitch: netlink: Flow actions attr not present in new flow.
[  265.321756][T17859] netlink: ct family unspecified
[  265.323385][T17859] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  265.516955][T17882] 8021q: adding VLAN 0 to HW filter on device bond22
[  265.527680][T17883] bond22: entered promiscuous mode
[  265.638115][T17897] syzkaller0: entered promiscuous mode
[  265.642639][T17897] syzkaller0: entered allmulticast mode
[  265.729762][T17904] 8021q: adding VLAN 0 to HW filter on device bond7
[  266.009494][T17937] sctp: [Deprecated]: syz.0.3632 (pid 17937) Use of struct sctp_assoc_value in delayed_ack socket option.
[  266.009494][T17937] Use struct sctp_sack_info instead
[  266.059835][T17947] validate_nla: 11 callbacks suppressed
[  266.059846][T17947] netlink: 'syz.1.3638': attribute type 5 has an invalid length.
[  266.065068][T17947] __nla_validate_parse: 86 callbacks suppressed
[  266.065077][T17947] netlink: 212316 bytes leftover after parsing attributes in process `syz.1.3638'.
[  266.292578][T17960] netlink: ct family unspecified
[  266.294487][T17960] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  266.338369][T17964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3643'.
[  266.483007][T17976] netlink: 212264 bytes leftover after parsing attributes in process `syz.1.3646'.
[  266.787042][T17980] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3648'.
[  266.820944][T17984] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3649'.
[  266.823057][T17983] netlink: 'syz.0.3649': attribute type 1 has an invalid length.
[  266.828468][T17984] batadv4: entered promiscuous mode
[  266.828481][T17984] batadv4: entered allmulticast mode
[  266.835286][T17983] workqueue: Failed to create a rescuer kthread for wq "bond21": -EINTR
[  266.981980][T17991] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3651'.
[  266.989154][T17991] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3651'.
[  266.994537][T17991] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3651'.
[  267.023563][T17993] netlink: 'syz.0.3652': attribute type 1 has an invalid length.
[  267.026596][T17993] netlink: 'syz.0.3652': attribute type 1 has an invalid length.
[  267.035761][T17993] netlink: 'syz.0.3652': attribute type 1 has an invalid length.
[  267.044115][T17997] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3653'.
[  267.045669][T17993] 8021q: adding VLAN 0 to HW filter on device bond21
[  267.067576][T17994] vlan2: entered allmulticast mode
[  267.070439][T17994] veth1: entered allmulticast mode
[  267.097153][T18000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3654'.
[  267.101387][T18000] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[  267.104723][T18000] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  267.213142][T18008] netlink: 'syz.0.3656': attribute type 4 has an invalid length.
[  267.254371][T18010] pim6reg1: entered promiscuous mode
[  267.256447][T18010] pim6reg1: entered allmulticast mode
[  267.462483][T18022] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  267.531006][T18024] erspan0: entered promiscuous mode
[  267.534550][T18024] erspan0: left promiscuous mode
[  268.021770][T18036] 8021q: adding VLAN 0 to HW filter on device batadv0
[  268.931379][T18089] bridge3: entered promiscuous mode
[  268.933877][T18089] macsec2: entered promiscuous mode
[  268.937687][T18089] macsec2: entered allmulticast mode
[  268.941456][T18089] bridge3: entered allmulticast mode
[  268.945076][T18089] bridge3: port 1(macsec2) entered blocking state
[  268.947804][T18089] bridge3: port 1(macsec2) entered disabled state
[  268.951681][T18089] bridge3: left allmulticast mode
[  268.953412][T18089] bridge3: left promiscuous mode
[  269.365860][T18097] netlink: 'syz.1.3683': attribute type 2 has an invalid length.
[  269.616289][T18106] netlink: 'syz.0.3685': attribute type 1 has an invalid length.
[  269.665476][T18106] 8021q: adding VLAN 0 to HW filter on device bond22
[  269.674632][T18106] 8021q: adding VLAN 0 to HW filter on device bond22
[  269.678085][T18106] bond22: (slave vcan0): The slave device specified does not support setting the MAC address
[  269.686318][T18106] bond22: (slave vcan0): Error -95 calling set_mac_address
[  269.729180][T18107] gretap2: entered promiscuous mode
[  269.734856][T18107] bond22: (slave gretap2): making interface the new active one
[  269.738394][T18107] bond22: (slave gretap2): Enslaving as an active interface with an up link
[  269.867870][T18132] netlink: 'syz.0.3687': attribute type 1 has an invalid length.
[  269.891910][T18132] bond23: entered promiscuous mode
[  269.894003][T18132] 8021q: adding VLAN 0 to HW filter on device bond23
[  269.913724][T18132] bond23: (slave bridge83): making interface the new active one
[  269.916934][T18132] bridge83: entered promiscuous mode
[  269.921012][T18132] bond23: (slave bridge83): Enslaving as an active interface with an up link
[  270.545084][T18143] netlink: 'syz.0.3692': attribute type 10 has an invalid length.
[  270.548298][T18143] bond0: (slave wlan1): refused to change device type
[  270.686012][T18159] syzkaller1: entered promiscuous mode
[  270.688162][T18159] syzkaller1: entered allmulticast mode
[  270.706286][T18158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  270.819100][T18194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  271.331059][T18225] 8021q: adding VLAN 0 to HW filter on device bond23
[  271.338553][T18225] bond23: (slave macvlan3): Enslaving as a backup interface with a down link
[  271.344094][T18225] bond23: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  271.348066][T18225] net_ratelimit: 2 callbacks suppressed
[  271.348077][T18225] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  271.394626][T18235] syzkaller0: entered promiscuous mode
[  271.396961][T18235] syzkaller0: entered allmulticast mode
[  271.403750][T18235] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  271.409216][T18235] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  271.419060][T18235] tipc: Resetting bearer <eth:syzkaller0>
[  271.426592][T18234] tipc: Resetting bearer <eth:syzkaller0>
[  271.430185][T18234] tipc: Disabling bearer <eth:syzkaller0>
[  271.638463][T18245] __nla_validate_parse: 13 callbacks suppressed
[  271.638486][T18245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3711'.
[  271.711184][T18249] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3713'.
[  271.736931][T18252] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3714'.
[  271.762647][T18255] validate_nla: 2 callbacks suppressed
[  271.762661][T18255] netlink: 'syz.1.3715': attribute type 12 has an invalid length.
[  271.806719][T18260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3716'.
[  271.813368][T18260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3716'.
[  271.816704][T18260] netlink: 'syz.1.3716': attribute type 12 has an invalid length.
[  271.819303][T18260] netlink: 'syz.1.3716': attribute type 11 has an invalid length.
[  271.825821][T18265] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3718'.
[  271.887487][T18272] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  272.268352][T18296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3726'.
[  272.291579][T18298] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  272.332987][T18300] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3728'.
[  272.339352][T18300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3728'.
[  272.342969][T18300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3728'.
[  272.803563][T18311] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  272.930295][T18319] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  273.053525][T18330] netlink: 'syz.3.3738': attribute type 12 has an invalid length.
[  273.318423][T18340] macsec1: entered promiscuous mode
[  273.321074][T18340] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  273.323541][T18340] macsec1: entered allmulticast mode
[  273.325679][T18340] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  273.403007][T18345] netlink: ct family unspecified
[  273.405002][T18345] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  274.030820][T18352] netlink: 'syz.3.3744': attribute type 30 has an invalid length.
[  274.097072][T18365] smc: net device bond0 erased user defined pnetid SYZ
[  274.367786][T18394] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  274.379339][T18388] bond0: Error: Cannot enslave bond to itself.
[  274.476697][T18406] netlink: 'syz.3.3759': attribute type 29 has an invalid length.
[  275.318922][T18415] erspan0: left allmulticast mode
[  275.348117][T18415] tipc: Resetting bearer <ib:ip6gre0>
[  275.568301][T18415] gretap1: left promiscuous mode
[  275.577900][T18415] macsec1: left promiscuous mode
[  275.582054][T18415] macsec1: left allmulticast mode
[  275.586231][T18415] vlan2: left promiscuous mode
[  275.587910][T18415] vlan2: left allmulticast mode
[  275.589458][T18415] hsr_slave_1: left allmulticast mode
[  275.605357][T18415] veth4: left promiscuous mode
[  275.611517][T18415] macvlan4: left promiscuous mode
[  275.613269][T18415] macvlan4: left allmulticast mode
[  275.619493][T18415] vlan3: left promiscuous mode
[  275.623885][T18415] bond0: left promiscuous mode
[  275.625682][T18415] vlan3: left allmulticast mode
[  275.627573][T18415] bond0: left allmulticast mode
[  275.645778][ T5909] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  275.652579][ T5909] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20001 - 0
[  275.656840][ T5909] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  275.663045][ T5909] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20001 - 0
[  275.672837][ T5909] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  275.676615][ T5909] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20001 - 0
[  275.686887][ T5909] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  275.690504][ T5909] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20001 - 0
[  275.719093][T18429] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  275.723862][T18429] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  275.742755][T18433] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  275.875739][T18446] netlink: 'syz.0.3775': attribute type 18 has an invalid length.
[  275.895628][T18440] syzkaller0: entered promiscuous mode
[  275.897944][T18440] syzkaller0: entered allmulticast mode
[  276.076205][T18463] netlink: 'syz.0.3781': attribute type 5 has an invalid length.
[  276.971030][T18482] __nla_validate_parse: 21 callbacks suppressed
[  276.971053][T18482] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3788'.
[  277.131876][T18505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3795'.
[  277.134767][T18505] netlink: 'syz.0.3795': attribute type 30 has an invalid length.
[  277.141986][T18505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3795'.
[  277.144905][T18505] netlink: 'syz.0.3795': attribute type 30 has an invalid length.
[  277.145207][ T5868] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  277.154849][ T5868] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  277.166741][ T5868] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  277.175186][ T5868] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  277.191512][T18513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3797'.
[  277.238699][T18513] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3797'.
[  277.265087][T18513] netlink: 'syz.1.3797': attribute type 4 has an invalid length.
[  277.267826][T18513] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3797'.
[  277.364762][T18521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3799'.
[  277.425556][T18532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3801'.
[  277.436312][T18532] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3801'.
[  277.466227][T18536] netlink: 'syz.1.3803': attribute type 1 has an invalid length.
[  277.592342][ T5909] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  277.665863][T18555] netlink: 'syz.1.3809': attribute type 83 has an invalid length.
[  277.734356][ T5909] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x82
[  277.738819][T18555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3809'.
[  277.742585][T18555] IPVS: Unknown mcast interface: vcan0
[  277.848701][T18569] netlink: 'syz.1.3812': attribute type 1 has an invalid length.
[  278.147657][T18600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  278.152125][T18600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  278.904251][T18613] netlink: 'syz.3.3829': attribute type 62 has an invalid length.
[  279.604137][T18624] lo speed is unknown, defaulting to 1000
[  279.606603][T18624] wg1 speed is unknown, defaulting to 1000
[  279.834710][T18633] net_ratelimit: 1 callbacks suppressed
[  279.834725][T18633] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  279.881523][T18640] netlink: 'syz.0.3836': attribute type 13 has an invalid length.
[  279.884924][T18640] netlink: 'syz.0.3836': attribute type 17 has an invalid length.
[  279.897938][T18640] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  279.931626][T18640] lo speed is unknown, defaulting to 1000
[  279.934721][T18640] wg1 speed is unknown, defaulting to 1000
[  279.937433][T18645] netlink: zone id is out of range
[  279.939296][T18645] netlink: zone id is out of range
[  279.941555][T18645] netlink: set zone limit has 4 unknown bytes
[  279.969370][T18649] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  279.976596][T18649] netlink: 'syz.3.3842': attribute type 17 has an invalid length.
[  279.992763][T18640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  280.087060][T18656] bridge4: entered allmulticast mode
[  280.095267][T18656] siw: device registration error -23
[  280.124361][T18656] 8021q: adding VLAN 0 to HW filter on device bond0
[  280.129011][T18656] 8021q: adding VLAN 0 to HW filter on device team0
[  280.134937][T18656] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  280.147036][T18655] bridge4: left allmulticast mode
[  280.770959][T18673] vlan0: entered allmulticast mode
[  280.773099][T18673] bridge0: entered allmulticast mode
[  280.775511][T18673] bridge14: port 1(vlan0) entered blocking state
[  280.778023][T18673] bridge14: port 1(vlan0) entered disabled state
[  280.782881][T18673] vlan0: entered promiscuous mode
[  280.785109][T18673] bridge0: entered promiscuous mode
[  280.867114][T18677] ieee802154 phy0 wpan0: encryption failed: -126
[  281.802391][T18687] lo speed is unknown, defaulting to 1000
[  281.805557][T18687] wg1 speed is unknown, defaulting to 1000
[  282.084231][T18699] lo speed is unknown, defaulting to 1000
[  282.087868][T18699] wg1 speed is unknown, defaulting to 1000
[  282.121364][T18711] __nla_validate_parse: 21 callbacks suppressed
[  282.121384][T18711] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3861'.
[  282.157901][T18715] validate_nla: 2 callbacks suppressed
[  282.157916][T18715] netlink: 'syz.1.3862': attribute type 29 has an invalid length.
[  282.171941][T18719] syzkaller1: entered promiscuous mode
[  282.173878][T18719] syzkaller1: entered allmulticast mode
[  282.222371][T18724] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3864'.
[  282.285099][T18732] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3867'.
[  282.289160][T18732] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3867'.
[  282.325035][T18736] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3869'.
[  282.332581][T18737] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3869'.
[  282.338818][   T54] Bluetooth: hci2: link tx timeout
[  282.340729][   T54] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  282.497938][T18743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3871'.
[  282.498969][T18756] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3873'.
[  282.531606][T18758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3874'.
[  282.535190][T18758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3874'.
[  282.582156][T18762] netlink: 'syz.1.3876': attribute type 1 has an invalid length.
[  282.786226][T18783] netlink: ct family unspecified
[  282.788043][T18783] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  282.982686][T18797] netlink: 'syz.0.3886': attribute type 15 has an invalid length.
[  283.904313][T18826] syzkaller1: entered promiscuous mode
[  283.906007][T18826] syzkaller1: entered allmulticast mode
[  283.964786][T18841] can: request_module (can-proto-3) failed.
[  284.228822][T18862] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  284.360062][   T54] Bluetooth: hci2: command 0x0419 tx timeout
[  284.447483][T18875] bond0: invalid ARP target 0.0.0.0 specified for addition
[  284.451134][T18875] bond0: option arp_ip_target: invalid value (0)
[  284.496275][T18883] openvswitch: netlink: nsh attr 2560 is out of range max 3
[  284.774218][T18902] ieee802154 phy0 wpan0: encryption failed: -126
[  284.965551][T18917] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  284.968094][T18917] syzkaller0: entered promiscuous mode
[  284.971497][T18917] syzkaller0: entered allmulticast mode
[  284.977105][T18917] tipc: Resetting bearer <eth:syzkaller0>
[  284.980326][T18916] tipc: Resetting bearer <eth:syzkaller0>
[  284.984702][T18916] tipc: Disabling bearer <eth:syzkaller0>
[  285.032247][T18926] netlink: 'syz.0.3926': attribute type 12 has an invalid length.
[  285.054320][T18928] netlink: 'syz.1.3927': attribute type 1 has an invalid length.
[  285.056830][T18928] netlink: 'syz.1.3927': attribute type 2 has an invalid length.
[  285.059225][T18928] netlink: 'syz.1.3927': attribute type 8 has an invalid length.
[  285.339258][T18968] net_ratelimit: 1 callbacks suppressed
[  285.339270][T18968] netlink: ct family unspecified
[  285.350345][T18968] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  285.442723][T18972] netlink: 'syz.1.3936': attribute type 1 has an invalid length.
[  285.445364][T18972] NCSI netlink: No device for ifindex 0
[  285.806402][   T33] audit: type=1800 audit(1756323412.202:6): pid=18985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3939" name="memory.events" dev="tmpfs" ino=7392 res=0 errno=0
[  286.296384][T19001] netlink: ct family unspecified
[  286.298569][T19001] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  287.394283][T19026] netlink: ct family unspecified
[  287.396353][T19026] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  287.428996][T19028] __nla_validate_parse: 27 callbacks suppressed
[  287.429009][T19028] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3955'.
[  287.480078][   T60] block nbd0: Connection timed out, retrying (0/2 alive)
[  287.482775][   T60] block nbd0: Connection timed out, retrying (0/2 alive)
[  287.485618][   T60] block nbd0: Connection timed out, retrying (0/2 alive)
[  287.488446][   T60] block nbd0: Connection timed out, retrying (0/2 alive)
[  287.492064][   T60] block nbd0: Dead connection, failed to find a fallback
[  287.495054][   T60] block nbd0: shutting down sockets
[  287.497134][   T60] blk_print_req_error: 138 callbacks suppressed
[  287.497146][   T60] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  287.503449][   T60] buffer_io_error: 138 callbacks suppressed
[  287.503462][   T60] Buffer I/O error on dev nbd0, logical block 3, async page read
[  287.508798][   T60] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  287.512236][   T60] Buffer I/O error on dev nbd0, logical block 2, async page read
[  287.515032][   T60] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  287.517692][   T60] Buffer I/O error on dev nbd0, logical block 1, async page read
[  287.520522][   T60] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  287.523945][   T60] Buffer I/O error on dev nbd0, logical block 0, async page read
[  287.526736][T16946] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  287.529554][T16946] Buffer I/O error on dev nbd0, logical block 0, async page read
[  287.532834][T16946] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  287.536294][T16946] Buffer I/O error on dev nbd0, logical block 1, async page read
[  287.539404][T16946] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  287.543483][T16946] Buffer I/O error on dev nbd0, logical block 2, async page read
[  287.546730][T16946] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  287.550993][T16946] Buffer I/O error on dev nbd0, logical block 3, async page read
[  287.554094][T16946] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  287.557625][T16946] Buffer I/O error on dev nbd0, logical block 0, async page read
[  287.561437][T16946] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  287.565018][T16946] Buffer I/O error on dev nbd0, logical block 1, async page read
[  287.569412][T16946] ldm_validate_partition_table(): Disk read failed.
[  287.576231][T16946] Dev nbd0: unable to read RDB block 0
[  287.577195][T19038] netlink: 'syz.0.3958': attribute type 1 has an invalid length.
[  287.578545][T16946]  nbd0: unable to read partition table
[  287.585085][T16946] ldm_validate_partition_table(): Disk read failed.
[  287.587793][T16946] Dev nbd0: unable to read RDB block 0
[  287.590442][T16946]  nbd0: unable to read partition table
[  287.593073][T19038] workqueue: Failed to create a rescuer kthread for wq "bond24": -EINTR
[  287.651138][T19044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3959'.
[  287.723916][T19051] netlink: 'syz.0.3962': attribute type 1 has an invalid length.
[  287.736903][T19051] bond24: entered promiscuous mode
[  287.739206][T19051] 8021q: adding VLAN 0 to HW filter on device bond24
[  287.753045][T19053] lo speed is unknown, defaulting to 1000
[  287.755379][T19053] wg1 speed is unknown, defaulting to 1000
[  287.826865][T19063] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3964'.
[  287.871630][T19066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3965'.
[  287.936926][T19070] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3966'.
[  287.972464][T19083] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3969'.
[  288.006173][T19089] netlink: 'syz.0.3971': attribute type 4 has an invalid length.
[  288.073262][T19096] lo speed is unknown, defaulting to 1000
[  288.075407][T19096] wg1 speed is unknown, defaulting to 1000
[  288.124610][T19104] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3975'.
[  288.127952][T19104] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3975'.
[  288.296482][T19115] geneve5: entered promiscuous mode
[  288.298489][T19115] geneve5: entered allmulticast mode
[  288.302155][T14062] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 49840 - 0
[  288.305178][T14062] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 40742 - 0
[  288.308205][T14062] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 49840 - 0
[  288.313117][T14062] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 40742 - 0
[  288.316505][T14062] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 49840 - 0
[  288.319153][T14062] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 40742 - 0
[  288.322909][T14062] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 49840 - 0
[  288.325426][T14062] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 40742 - 0
[  288.444345][T19120] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3980'.
[  288.858727][T19124] lo speed is unknown, defaulting to 1000
[  288.862199][T19124] wg1 speed is unknown, defaulting to 1000
[  288.987196][T19127] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  288.991505][T19127] syzkaller0: entered promiscuous mode
[  288.993276][T19127] syzkaller0: entered allmulticast mode
[  289.662818][T19145] netlink: 'syz.1.3988': attribute type 8 has an invalid length.
[  289.696636][T19149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3989'.
[  289.815617][T19126] tipc: Resetting bearer <eth:syzkaller0>
[  289.821561][T19126] tipc: Disabling bearer <eth:syzkaller0>
[  289.879754][ T7415] page_pool_release_retry() stalled pool shutdown: id 38, 3329 inflight 120 sec
[  289.913961][T19160] netlink: 'syz.3.3993': attribute type 3 has an invalid length.
[  290.040701][T19162] netlink: 'syz.1.3994': attribute type 1 has an invalid length.
[  290.101942][T19181] xfrm0 speed is unknown, defaulting to 1000
[  290.135799][T19184] netlink: 'syz.1.3998': attribute type 2 has an invalid length.
[  290.142195][T19184] k*]: entered promiscuous mode
[  290.153040][T19183] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  290.180669][T19183] veth0_to_team: entered promiscuous mode
[  290.182890][T19183] veth0_to_team: entered allmulticast mode
[  290.185664][T19183] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  290.188545][T19183] IPv6: NLM_F_CREATE should be set when creating new route
[  290.191508][T19183] IPv6: NLM_F_CREATE should be set when creating new route
[  290.194342][T19183] IPv6: NLM_F_CREATE should be set when creating new route
[  290.200406][T19184] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  290.203389][T19183] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  290.228721][T19186] bond0: Device is already in use.
[  290.324340][T19192] bond24: (slave vxcan1): The slave device specified does not support setting the MAC address
[  290.328652][T19192] bond24: (slave vxcan1): Error -95 calling set_mac_address
[  290.373798][T19194] : renamed from netdevsim0
[  290.974699][T19213] tipc: Resetting bearer <ib:ip6gre0>
[  291.927108][T19226] netlink: 'syz.3.4012': attribute type 1 has an invalid length.
[  291.930512][T19226] netlink: 'syz.3.4012': attribute type 2 has an invalid length.
[  292.086277][T19238] netlink: ct family unspecified
[  292.088401][T19238] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  292.231473][T19240] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  293.166124][T19248] __nla_validate_parse: 16 callbacks suppressed
[  293.166143][T19248] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4020'.
[  293.231053][T19252] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  293.314515][T19256] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4023'.
[  293.342504][T19258] netlink: ct family unspecified
[  293.344424][T19258] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  293.364115][T19260] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4025'.
[  293.384427][T19265] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4026'.
[  293.993164][T19304] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  293.996550][T19304] syzkaller0: entered promiscuous mode
[  293.998691][T19304] syzkaller0: entered allmulticast mode
[  294.006075][T19304] tipc: Resetting bearer <eth:syzkaller0>
[  294.380366][T19307] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4038'.
[  294.454109][T19316] netlink: ct family unspecified
[  294.456118][T19316] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  294.521401][T19320] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4043'.
[  294.525104][T19320] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4043'.
[  294.536313][T19320] team0: entered promiscuous mode
[  294.538721][T19320] bond0: entered promiscuous mode
[  294.541725][T19320] debugfs: 'hsr1' already exists in 'hsr'
[  294.544103][T19320] Cannot create hsr debugfs directory
[  294.546201][T19320] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network
[  294.549478][T19320] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network
[  294.554443][T19320] 8021q: adding VLAN 0 to HW filter on device hsr1
[  294.871814][T19303] tipc: Resetting bearer <eth:syzkaller0>
[  294.876958][T19303] tipc: Disabling bearer <eth:syzkaller0>
[  294.952285][T19329] bridge17: entered promiscuous mode
[  294.954063][T19329] bridge17: entered allmulticast mode
[  294.991704][T19331] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4047'.
[  294.996436][T19331] netlink: 'syz.1.4047': attribute type 1 has an invalid length.
[  295.016392][T19331] 8021q: adding VLAN 0 to HW filter on device bond25
[  295.028468][T19331] veth15: entered promiscuous mode
[  295.033019][T19331] bond25: (slave veth15): Enslaving as an active interface with a down link
[  295.036451][T19331] erspan0: entered allmulticast mode
[  295.123020][T19337] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  295.128949][T19337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4049'.
[  295.167166][T19339] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4050'.
[  295.246688][T19343] netlink: 'syz.1.4051': attribute type 4 has an invalid length.
[  295.365291][T19349] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  295.372047][T19349] tipc: Failed to remove unknown binding: 66,1,1/3209707721:664916264/664916266
[  295.376201][T19349] tipc: Failed to remove unknown binding: 66,1,1/3209707721:664916264/664916266
[  295.379221][T19349] tipc: Failed to remove unknown binding: 66,1,1/3209707721:664916264/664916266
[  295.605621][T19368] netlink: 'syz.1.4057': attribute type 10 has an invalid length.
[  295.624551][T19370] batadv_slave_0: entered promiscuous mode
[  295.632340][T19370] batadv_slave_0: left promiscuous mode
[  295.806086][T19389] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  295.812547][T19389] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  295.831666][T19394] netlink: 'syz.3.4065': attribute type 1 has an invalid length.
[  295.974400][T19397] netlink: 'syz.3.4066': attribute type 3 has an invalid length.
[  295.977714][T19397] netlink: 'syz.3.4066': attribute type 1 has an invalid length.
[  296.708643][T19406] netlink: 'syz.1.4069': attribute type 10 has an invalid length.
[  296.788371][T19410] only policy match revision 0 supported
[  296.788387][T19410] unable to load match
[  297.095980][T19417] hsr_slave_0: left promiscuous mode
[  297.099011][T19417] hsr_slave_1: left promiscuous mode
[  297.975767][T19436] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  297.978463][T19436] syzkaller0: entered promiscuous mode
[  297.981807][T19436] syzkaller0: entered allmulticast mode
[  297.987648][T19436] tipc: Resetting bearer <eth:syzkaller0>
[  297.994482][T19435] tipc: Resetting bearer <eth:syzkaller0>
[  297.999478][T19435] tipc: Disabling bearer <eth:syzkaller0>
[  298.203050][T19445] __nla_validate_parse: 18 callbacks suppressed
[  298.203068][T19445] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4084'.
[  298.239551][T19447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4085'.
[  298.354917][T19455] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4088'.
[  298.855788][T19466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  298.858707][T19466] IPv6: NLM_F_CREATE should be set when creating new route
[  298.861843][T19466] IPv6: NLM_F_CREATE should be set when creating new route
[  298.865515][T19466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  298.868584][T19466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  298.872276][T19466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  298.875214][T19466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  298.877751][T19466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  298.881448][T19466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  298.884449][T19466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  298.887412][T19466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  298.890517][T19466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  298.893412][T19466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  298.896325][T19466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  298.898697][T19466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  298.901958][T19466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  298.904570][T19466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  298.907533][T19466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  298.911117][T19466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  298.914075][T19466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  298.917024][T19466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  298.920864][T19466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  298.923857][T19466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  298.926868][T19466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  298.930450][T19466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  298.933377][T19466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  298.936331][T19466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  298.938937][T19466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  298.942845][T19466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  298.945290][T19466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  298.947592][T19466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  298.950293][T19466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  298.952641][T19466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  298.954885][T19466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  298.957110][T19466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  298.988196][T19469] netlink: 'syz.3.4093': attribute type 1 has an invalid length.
[  299.011331][T19469] bond9: (slave bridge5): making interface the new active one
[  299.014666][T19469] bond9: (slave bridge5): Enslaving as an active interface with an up link
[  299.065458][T19477] netlink: 'syz.3.4095': attribute type 5 has an invalid length.
[  299.212052][T19458] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  299.297070][T19507] netlink: 212892 bytes leftover after parsing attributes in process `syz.3.4102'.
[  299.328040][T19511] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4104'.
[  299.391768][   T56] block nbd2: Receive control failed (result -32)
[  299.437891][T19514] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4105'.
[  299.493738][T19521] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4107'.
[  299.533073][T19524] veth0_to_bond: left allmulticast mode
[  299.535537][T19524] veth0_to_bond: left promiscuous mode
[  299.537711][T19524] bridge12: port 1(veth0_to_bond) entered disabled state
[  299.546363][T19524] bond10: (slave batadv4): Releasing active interface
[  299.553055][T19524] bond14: (slave bond15): Releasing backup interface
[  299.559894][T19524] team0: Port device bond17 removed
[  299.568637][T19524] bond18: (slave gretap2): Releasing active interface
[  299.576637][T19524] gretap2: left promiscuous mode
[  299.578641][T19524] gretap2: left allmulticast mode
[  299.585668][T19524] bond23: (slave macvlan3): Releasing backup interface
[  299.595903][T19524] vlan0: left allmulticast mode
[  299.597932][T19524] bridge0: left allmulticast mode
[  299.600682][T19524] bridge14: port 1(vlan0) entered disabled state
[  299.607186][T19524] bond25: (slave veth15): Releasing active interface
[  299.650417][T19524] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4106'.
[  299.653365][T19528] lo speed is unknown, defaulting to 1000
[  299.654232][T19524] netlink: 'syz.1.4106': attribute type 10 has an invalid length.
[  299.657025][T19528] wg1 speed is unknown, defaulting to 1000
[  299.661794][T19524] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  299.661818][T19524] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  299.762991][T19528] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4109'.
[  299.964912][T19532] IPv6: sit1: Disabled Multicast RS
[  299.967341][T19532] sit1: entered allmulticast mode
[  300.232584][T19536] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4111'.
[  300.516526][T19562] bridge4: entered allmulticast mode
[  300.528218][T19562] dvmrp8: entered allmulticast mode
[  300.540918][T19562] netlink: 'syz.3.4116': attribute type 1 has an invalid length.
[  300.561031][T19562] lo speed is unknown, defaulting to 1000
[  300.563378][T19562] wg1 speed is unknown, defaulting to 1000
[  300.612354][T19561] bridge4: left allmulticast mode
[  300.614036][T19561] dvmrp8: left allmulticast mode
[  300.685332][T19571] sch_tbf: burst 19872 is lower than device lo mtu (65499) !
[  301.239933][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  301.613899][T19586] syzkaller1: entered promiscuous mode
[  301.616150][T19586] syzkaller1: entered allmulticast mode
[  301.626883][T19588] netlink: 'syz.3.4121': attribute type 2 has an invalid length.
[  301.633914][T19588] netlink: 'syz.3.4121': attribute type 2 has an invalid length.
[  301.636828][T19588] netlink: 'syz.3.4121': attribute type 2 has an invalid length.
[  301.641069][T19588] netlink: 'syz.3.4121': attribute type 2 has an invalid length.
[  301.643733][T19588] netlink: 'syz.3.4121': attribute type 2 has an invalid length.
[  301.646483][T19588] netlink: 'syz.3.4121': attribute type 2 has an invalid length.
[  301.649402][T19588] netlink: 'syz.3.4121': attribute type 2 has an invalid length.
[  301.652812][T19588] netlink: 'syz.3.4121': attribute type 2 has an invalid length.
[  301.655606][T19588] netlink: 'syz.3.4121': attribute type 2 has an invalid length.
[  301.769446][T19593] ip6gretap4: entered promiscuous mode
[  302.279886][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  302.442621][T19624] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  302.661852][T19660] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  302.664657][T19660] syzkaller0: entered promiscuous mode
[  302.666664][T19660] syzkaller0: entered allmulticast mode
[  302.718362][T19664] syzkaller0: entered promiscuous mode
[  302.721109][T19664] syzkaller0: entered allmulticast mode
[  302.755800][T19659] tipc: Resetting bearer <eth:syzkaller0>
[  302.760858][T19659] tipc: Disabling bearer <eth:syzkaller0>
[  302.824782][T19669] 8021q: VLANs not supported on ipvlan1
[  302.965600][T19680] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  303.081622][T19694] openvswitch: netlink: Key type 251 is out of range max 32
[  303.182964][T19707] syzkaller1: entered promiscuous mode
[  303.184690][T19707] syzkaller1: entered allmulticast mode
[  303.214241][   T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  303.217571][   T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  303.221447][   T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  303.224937][   T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  303.228334][   T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  303.254328][T19709] lo speed is unknown, defaulting to 1000
[  303.257304][T19709] wg1 speed is unknown, defaulting to 1000
[  303.287451][T19713] bridge4: entered allmulticast mode
[  303.293792][T19713] siw: device registration error -23
[  303.305553][T19713] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  303.316774][T19712] bridge4: left allmulticast mode
[  303.320052][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  303.393902][T19709] chnl_net:caif_netlink_parms(): no params data found
[  303.457711][T19709] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.460803][T19709] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.464573][T19709] bridge_slave_0: entered allmulticast mode
[  303.467722][T19709] bridge_slave_0: entered promiscuous mode
[  303.472635][T19709] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.475249][T19709] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.478274][T19709] bridge_slave_1: entered allmulticast mode
[  303.482833][T19709] bridge_slave_1: entered promiscuous mode
[  303.488079][T19729] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  303.493784][T19729] sctp: [Deprecated]: syz.3.4160 (pid 19729) Use of int in max_burst socket option deprecated.
[  303.493784][T19729] Use struct sctp_assoc_value instead
[  303.503929][T19709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  303.510186][T19709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  303.533924][T19709] team0: Port device team_slave_0 added
[  303.538808][T19709] team0: Port device team_slave_1 added
[  303.573928][T19709] batman_adv: batadv0: Adding interface: batadv_slave_0
[  303.577323][T19709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  303.587629][T19709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  303.600728][T19709] batman_adv: batadv0: Adding interface: batadv_slave_1
[  303.614962][T19709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  303.631417][T19709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  303.673130][T19709] hsr_slave_0: entered promiscuous mode
[  303.675387][T19709] hsr_slave_1: entered promiscuous mode
[  303.759446][T19709] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  303.763679][T19709] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  303.767684][T19709] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  303.772794][T19709] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  303.823446][T19709] 8021q: adding VLAN 0 to HW filter on device bond0
[  303.836674][T19709] 8021q: adding VLAN 0 to HW filter on device team0
[  303.844482][T10706] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.846941][T10706] bridge0: port 1(bridge_slave_0) entered forwarding state
[  303.865638][T10706] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.868165][T10706] bridge0: port 2(bridge_slave_1) entered forwarding state
[  303.920843][T19746] _Z`Ԁ@S: entered promiscuous mode
[  304.003075][T19709] 8021q: adding VLAN 0 to HW filter on device batadv0
[  304.077094][T19762] __nla_validate_parse: 12 callbacks suppressed
[  304.077114][T19762] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4164'.
[  304.096091][T19756] lo speed is unknown, defaulting to 1000
[  304.099248][T19756] wg1 speed is unknown, defaulting to 1000
[  304.153805][T19709] veth0_vlan: entered promiscuous mode
[  304.161000][T19709] veth1_vlan: entered promiscuous mode
[  304.178211][T19709] veth0_macvtap: entered promiscuous mode
[  304.187185][T19709] veth1_macvtap: entered promiscuous mode
[  304.205943][T19709] batman_adv: batadv0: Interface activated: batadv_slave_0
[  304.213020][T19709] batman_adv: batadv0: Interface activated: batadv_slave_1
[  304.226651][ T5868] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  304.231354][ T5868] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  304.234957][ T5868] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  304.238414][ T5868] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  304.330666][T10743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  304.333131][T10743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  304.359838][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  304.377708][T10743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  304.383014][T10743] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  304.414331][T19774] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  304.436275][T19756] syzkaller1: entered promiscuous mode
[  304.438166][T19756] syzkaller1: entered allmulticast mode
[  304.646138][T19794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4171'.
[  304.649354][T19794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4171'.
[  304.715029][T19796] k*]: entered promiscuous mode
[  304.717042][T19801] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4173'.
[  304.744799][T19803] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96
[  304.818212][T19812] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4176'.
[  304.831855][T19814] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4177'.
[  304.897615][T19817] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  304.907044][T19817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4178'.
[  304.927947][T19830] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  305.239859][   T54] Bluetooth: hci4: command tx timeout
[  305.723445][T19844] validate_nla: 31 callbacks suppressed
[  305.723460][T19844] netlink: 'syz.1.4184': attribute type 1 has an invalid length.
[  305.737059][T19844] bond26: entered promiscuous mode
[  305.739801][T19844] 8021q: adding VLAN 0 to HW filter on device bond26
[  305.742511][T19844] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4184'.
[  305.747903][T19844] batadv0: entered promiscuous mode
[  305.750562][T19844] batadv0: entered allmulticast mode
[  305.751026][T19845] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4184'.
[  305.753027][T19844] 8021q: adding VLAN 0 to HW filter on device batadv0
[  305.758918][T19844] bond26: (slave batadv0): making interface the new active one
[  305.764068][T19844] bond26: (slave batadv0): Enslaving as an active interface with an up link
[  305.772593][T19845] batadv5: entered promiscuous mode
[  305.774832][T19845] batadv5: entered allmulticast mode
[  305.777877][T19845] 8021q: adding VLAN 0 to HW filter on device batadv5
[  305.783026][T19845] bond26: (slave batadv5): Enslaving as an active interface with an up link
[  305.895644][T19844] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4184'.
[  305.909197][T19852] IPVS: length: 252 != 8
[  305.961009][T19856] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1803188595)
[  305.974566][T19856] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  306.003417][T19859] tipc: Enabled bearer <ib:bond_slave_0>, priority 10
[  306.038073][T19865] bond0: default FDB implementation only supports local addresses
[  306.091978][T19863] netlink: 'syz.4.4191': attribute type 6 has an invalid length.
[  306.186455][T19877] bridge0: port 1(batadv6) entered blocking state
[  306.188970][T19877] bridge0: port 1(batadv6) entered disabled state
[  306.195397][T19877] batadv6: entered allmulticast mode
[  306.198681][T19877] batadv6: entered promiscuous mode
[  306.439901][    C0] net_ratelimit: 1 callbacks suppressed
[  306.439918][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  306.486688][T19909] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  306.491659][T19909] syzkaller0: entered promiscuous mode
[  306.493930][T19909] syzkaller0: entered allmulticast mode
[  306.498872][T19909] tipc: Resetting bearer <eth:syzkaller0>
[  306.502755][T19908] tipc: Resetting bearer <eth:syzkaller0>
[  306.506212][T19908] tipc: Disabling bearer <eth:syzkaller0>
[  306.616337][T19915] xt_socket: unknown flags 0xd0
[  306.620943][T19915] netlink: 'syz.1.4207': attribute type 1 has an invalid length.
[  306.623536][T19915] netlink: 'syz.1.4207': attribute type 1 has an invalid length.
[  306.700165][ T5868] batman_adv: batadv6: No IGMP Querier present - multicast optimizations disabled
[  306.703096][ T5868] batman_adv: batadv6: No MLD Querier present - multicast optimizations disabled
[  306.713376][T19919] bridge0: port 2(ipvlan0) entered blocking state
[  306.715884][T19919] bridge0: port 2(ipvlan0) entered disabled state
[  306.718205][T19919] ipvlan0: entered allmulticast mode
[  306.720475][T19919] bridge0: entered allmulticast mode
[  306.722867][T19919] ipvlan0: left allmulticast mode
[  306.724805][T19919] bridge0: left allmulticast mode
[  306.733215][T19918] bridge0: port 2(ipvlan0) entered blocking state
[  306.735745][T19918] bridge0: port 2(ipvlan0) entered disabled state
[  306.738288][T19918] ipvlan0: entered allmulticast mode
[  306.741436][T19918] bridge0: entered allmulticast mode
[  306.745184][T19918] ipvlan0: left allmulticast mode
[  306.747315][T19918] bridge0: left allmulticast mode
[  306.861310][T19921] lo speed is unknown, defaulting to 1000
[  306.863880][T19921] wg1 speed is unknown, defaulting to 1000
[  306.994889][T19926] bond1 (unregistering): Released all slaves
[  307.041709][T19929] ip6gretap0: entered promiscuous mode
[  307.043559][T19929] macsec1: entered promiscuous mode
[  307.045445][T19929] macsec1: entered allmulticast mode
[  307.047291][T19929] ip6gretap0: entered allmulticast mode
[  307.165304][T19940] netlink: 'syz.1.4212': attribute type 1 has an invalid length.
[  307.184980][T19942] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  307.251155][T19949] lo speed is unknown, defaulting to 1000
[  307.253622][T19949] wg1 speed is unknown, defaulting to 1000
[  307.320245][   T54] Bluetooth: hci4: command tx timeout
[  307.341139][T19954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  307.357030][T19955] syzkaller1: entered allmulticast mode
[  307.479977][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  307.899446][T19959] dvmrp8: entered allmulticast mode
[  307.912457][T19958] dvmrp8: left allmulticast mode
[  307.994446][ T4560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  307.997105][ T4560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  308.004873][T19961] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  308.008827][T19961] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  308.254588][T19975] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb
[  308.435200][T19985] batadv_slave_1: entered promiscuous mode
[  308.447447][T19985] bridge_slave_1: left allmulticast mode
[  308.450843][T19985] bridge_slave_1: left promiscuous mode
[  308.453176][T19985] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.457656][T19985] bridge_slave_0: left allmulticast mode
[  308.463912][T19985] bridge_slave_0: left promiscuous mode
[  308.466354][T19985] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.519945][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  308.590689][T19984] batadv_slave_1: left promiscuous mode
[  308.847303][T20005] batadv1: entered promiscuous mode
[  308.849372][T20005] batadv1: entered allmulticast mode
[  308.980445][T20005] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  309.059006][T20011] netlink: 'syz.3.4232': attribute type 1 has an invalid length.
[  309.182758][T20022] __nla_validate_parse: 17 callbacks suppressed
[  309.182775][T20022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4235'.
[  309.192732][T20022] syzkaller0: entered promiscuous mode
[  309.194938][T20022] syzkaller0: entered allmulticast mode
[  309.396554][T20037] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4239'.
[  309.400136][   T54] Bluetooth: hci4: command tx timeout
[  309.522548][T20049] bond0: (slave bond_slave_0): Releasing backup interface
[  309.528592][T20049] bond0: (slave bond_slave_1): Releasing backup interface
[  309.538935][T20049] team0: Port device team_slave_0 removed
[  309.545908][T20049] team0: Port device team_slave_1 removed
[  309.548355][T20049] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  309.551624][T20049] batman_adv: batadv0: Removing interface: batadv_slave_0
[  309.555121][T20049] batman_adv: batadv0: Removing interface: batadv_slave_1
[  309.558703][T20053] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4241'.
[  309.561906][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  309.584479][T20048] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4241'.
[  309.590069][T20048] vlan0: entered allmulticast mode
[  309.591704][T20048] team0: entered allmulticast mode
[  309.679002][T20064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4244'.
[  309.690488][T20062] netlink: 'syz.1.4240': attribute type 16 has an invalid length.
[  309.697368][T20062] netlink: 'syz.1.4240': attribute type 17 has an invalid length.
[  309.722104][T20062] 8021q: adding VLAN 0 to HW filter on device team0
[  309.726274][T20062] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  309.733883][T20067] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4246'.
[  309.733885][T20066] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4246'.
[  309.768123][T20069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4247'.
[  309.772829][T20069] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4247'.
[  309.786667][T20069] netlink: 'syz.4.4247': attribute type 2 has an invalid length.
[  309.978624][T20079] tipc: Started in network mode
[  309.981437][T20079] tipc: Node identity 9684c7204828, cluster identity 4711
[  309.984193][T20079] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  309.987295][T20079] syzkaller0: entered promiscuous mode
[  309.989095][T20079] syzkaller0: entered allmulticast mode
[  309.996112][T20079] tipc: Resetting bearer <eth:syzkaller0>
[  310.435015][T20082] erspan0: left allmulticast mode
[  310.440921][T20082] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  310.599868][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  310.695707][T20075] tipc: Resetting bearer <eth:syzkaller0>
[  310.703096][T20075] tipc: Disabling bearer <eth:syzkaller0>
[  310.718674][T20092] netlink: 788 bytes leftover after parsing attributes in process `syz.3.4254'.
[  310.902033][T20111] tipc: New replicast peer: 0.0.0.0
[  310.905436][T20111] tipc: Enabled bearer <udp:syz2>, priority 10
[  310.915519][T20111] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  310.994869][T20127] netlink: 'syz.3.4265': attribute type 4 has an invalid length.
[  311.037282][T20132] ieee802154 phy0 wpan0: encryption failed: -126
[  311.345273][T20141] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  311.480304][   T54] Bluetooth: hci4: command tx timeout
[  311.640138][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  311.911209][ T7415] tipc: Node number set to 3735865120
[  311.948282][T20152] batman_adv: batadv0: Adding interface: dummy0
[  311.951429][T20152] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  311.961338][T20152] batman_adv: batadv0: Interface activated: dummy0
[  311.975039][T20152] batadv0: mtu less than device minimum
[  311.979808][T20152] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  311.984059][T20152] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  311.987762][T20152] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  311.991465][T20152] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  311.995117][T20152] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  311.998598][T20152] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  312.002225][T20152] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  312.006047][T20152] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  312.018593][T20152] batman_adv: batadv0: Adding interface: ip6gretap1
[  312.021166][T20152] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  312.029466][T20152] batman_adv: batadv0: Interface activated: ip6gretap1
[  312.402183][T20202] netlink: 'syz.1.4285': attribute type 1 has an invalid length.
[  312.428108][T20202] 8021q: adding VLAN 0 to HW filter on device bond27
[  312.444279][T20202] gretap3: entered promiscuous mode
[  312.659242][T20226] 8021q: adding VLAN 0 to HW filter on device bond28
[  312.702766][T20226] netlink: 'syz.1.4292': attribute type 17 has an invalid length.
[  312.739163][T20230] netlink: 'syz.1.4293': attribute type 4 has an invalid length.
[  312.744448][T20230] netlink: 'syz.1.4293': attribute type 6 has an invalid length.
[  312.885252][T20238] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  312.887740][T20238] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  312.895073][T20238] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  312.900085][T20238] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  312.919076][T20238] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  312.926104][T20238] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  312.965024][T20238] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  312.966917][T20238] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  313.152297][T20266] netlink: 'syz.1.4304': attribute type 17 has an invalid length.
[  313.158456][T20266] tipc: Resetting bearer <eth:gre0>
[  313.318048][T20282] IPv6: NLM_F_REPLACE set, but no existing node found!
[  313.366923][T13234] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 49840 - 0
[  313.370591][T13234] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 40742 - 0
[  313.373524][T13234] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 49840 - 0
[  313.376370][T13234] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 40742 - 0
[  313.380591][T13234] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 49840 - 0
[  313.383331][T13234] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 40742 - 0
[  313.386374][T13234] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 49840 - 0
[  313.391301][T13234] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 40742 - 0
[  313.893427][T20326] netlink: 'syz.3.4320': attribute type 2 has an invalid length.
[  313.895958][T20326] netlink: 'syz.3.4320': attribute type 1 has an invalid length.
[  313.972349][T20333] bridge20: port 1(veth17) entered blocking state
[  313.975078][T20333] bridge20: port 1(veth17) entered disabled state
[  313.977766][T20333] veth17: entered allmulticast mode
[  313.981108][T20333] veth17: entered promiscuous mode
[  314.062293][T20334] vlan1: entered allmulticast mode
[  314.066540][T20334] veth1: entered allmulticast mode
[  314.073158][T20334] bridge20: port 2(vlan1) entered blocking state
[  314.077338][T20334] bridge20: port 2(vlan1) entered disabled state
[  314.084248][T20334] vlan1: entered promiscuous mode
[  314.086331][T20334] veth1: entered promiscuous mode
[  314.086342][T20343] netlink: 'syz.3.4326': attribute type 1 has an invalid length.
[  314.092734][T20341] vxcan1: entered allmulticast mode
[  314.165609][T20356] netlink: 'syz.3.4330': attribute type 1 has an invalid length.
[  314.209827][T20364] __nla_validate_parse: 24 callbacks suppressed
[  314.209840][T20364] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4332'.
[  314.287588][T20368] 8021q: adding VLAN 0 to HW filter on device bond12
[  314.293937][T20368] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4335'.
[  314.301258][T20368] bond9: (slave bridge5): Releasing active interface
[  314.306541][T20376] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  314.319234][T20374] syzkaller0: entered promiscuous mode
[  314.322867][T20374] syzkaller0: entered allmulticast mode
[  314.326271][T20376] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  314.348457][T20376] tipc: Resetting bearer <eth:syzkaller0>
[  314.357643][T20376] tipc: Disabling bearer <eth:syzkaller0>
[  314.475224][T20390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4340'.
[  314.512529][T20394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4341'.
[  314.516786][T20394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4341'.
[  314.698396][T20413] netlink: 786 bytes leftover after parsing attributes in process `syz.4.4349'.
[  314.740376][T20419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4352'.
[  314.746671][T20420] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4351'.
[  314.821546][T20429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4355'.
[  314.948172][T20433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4358'.
[  315.111186][T20449] batadv7: entered promiscuous mode
[  315.112990][T20449] batadv7: entered allmulticast mode
[  315.246267][T20461] tipc: Resetting bearer <ib:ip6gre0>
[  315.275904][T20458] ieee802154 phy0 wpan0: encryption failed: -22
[  315.277989][T20458] ieee802154 phy0 wpan0: encryption failed: -22
[  315.324191][T20471] sctp: [Deprecated]: syz.3.4371 (pid 20471) Use of int in max_burst socket option.
[  315.324191][T20471] Use struct sctp_assoc_value instead
[  315.417670][T20483] macvtap1: entered allmulticast mode
[  315.419487][T20483] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  315.423512][T20483] batman_adv: batadv0: Adding interface: macvtap1
[  315.426200][T20483] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  315.436123][T20483] batman_adv: batadv0: Interface activated: macvtap1
[  315.642929][T20518] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  315.646893][T20518] syzkaller0: entered promiscuous mode
[  315.648655][T20518] syzkaller0: entered allmulticast mode
[  315.674371][T20518] tipc: Resetting bearer <eth:syzkaller0>
[  315.678530][T20517] tipc: Resetting bearer <eth:syzkaller0>
[  315.687079][T20517] tipc: Disabling bearer <eth:syzkaller0>
[  316.691482][T20564] vlan0: entered allmulticast mode
[  316.697338][T20564] bridge0: entered allmulticast mode
[  316.707874][T20564] bridge1: port 1(vlan0) entered blocking state
[  316.722768][T20564] bridge1: port 1(vlan0) entered disabled state
[  316.734478][T20564] vlan0: entered promiscuous mode
[  316.740767][T20564] bridge0: entered promiscuous mode
[  316.747404][T20560] mac80211_hwsim hwsim91 wlan0: entered allmulticast mode
[  316.839813][    C0] net_ratelimit: 38 callbacks suppressed
[  316.839833][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  316.931965][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  317.027123][T20594] validate_nla: 7 callbacks suppressed
[  317.027145][T20594] netlink: 'syz.1.4407': attribute type 1 has an invalid length.
[  317.047660][T20594] bond29: entered promiscuous mode
[  317.050800][T20594] 8021q: adding VLAN 0 to HW filter on device bond29
[  317.064139][T20594] bond29: (slave bridge21): making interface the new active one
[  317.067928][T20594] bridge21: entered promiscuous mode
[  317.072135][T20594] bond29: (slave bridge21): Enslaving as an active interface with an up link
[  317.108356][T20598] pimreg: entered allmulticast mode
[  317.247332][T20609] netlink: 'syz.1.4412': attribute type 2 has an invalid length.
[  317.491189][T20618] lo speed is unknown, defaulting to 1000
[  317.494084][T20618] wg1 speed is unknown, defaulting to 1000
[  317.575239][T20629] xt_time: unknown flags 0xf4
[  317.694575][T20637] netlink: 'syz.3.4422': attribute type 32 has an invalid length.
[  317.697814][T20637] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192)
[  317.739074][T20637] netlink: 'syz.3.4422': attribute type 1 has an invalid length.
[  317.879979][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  317.895775][T20652] vlan0: left allmulticast mode
[  317.915024][T20655] ip6gre1: entered allmulticast mode
[  318.090766][T20687] 0X: renamed from caif0
[  318.097843][T20687] 0X: entered allmulticast mode
[  318.104505][T20687] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  318.403684][T13234] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  318.407256][ T5868] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  318.414682][ T5868] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  318.423876][ T5868] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  318.489511][T20709] netlink: 'syz.4.4442': attribute type 10 has an invalid length.
[  318.495509][T20709] bond0: (slave wlan1): Opening slave failed
[  318.706371][T20721] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  318.849246][T20730] team0: Device gtp0 is up. Set it down before adding it as a team port
[  318.919896][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  318.976510][T20741] mac80211_hwsim hwsim92 wlan1: entered allmulticast mode
[  318.998549][T20742] batman_adv: batadv0: Interface deactivated: dummy0
[  319.006410][T20742] batman_adv: batadv0: Removing interface: dummy0
[  319.040965][T20742] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  319.044037][T20742] batman_adv: batadv0: Removing interface: ip6gretap1
[  319.048044][T20742] vlan0: left promiscuous mode
[  319.056211][T20742] bridge0: left promiscuous mode
[  319.058458][T20742] bridge1: port 1(vlan0) entered disabled state
[  319.137809][T20752] netlink: 'syz.4.4454': attribute type 1 has an invalid length.
[  319.145596][T20752] openvswitch: netlink: Flow actions attr not present in new flow.
[  319.176698][T20755] netlink: 'syz.4.4455': attribute type 1 has an invalid length.
[  319.538916][T20771] __nla_validate_parse: 56 callbacks suppressed
[  319.538940][T20771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4460'.
[  319.544809][T20771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4460'.
[  319.585726][T20777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4462'.
[  319.607130][T20780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4463'.
[  319.613304][T20780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4463'.
[  319.670656][T20782] syzkaller0: entered promiscuous mode
[  319.672798][T20782] syzkaller0: entered allmulticast mode
[  319.676148][T20783] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  319.694410][T20782] tipc: Resetting bearer <eth:syzkaller0>
[  319.697751][T20781] tipc: Resetting bearer <eth:syzkaller0>
[  319.705693][T20781] tipc: Disabling bearer <eth:syzkaller0>
[  319.821480][T20786] netlink: 'syz.1.4465': attribute type 9 has an invalid length.
[  319.825116][T20786] netlink: 'syz.1.4465': attribute type 6 has an invalid length.
[  319.960170][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  320.456903][T20802] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4469'.
[  320.532744][T20809] netlink: 'syz.3.4472': attribute type 1 has an invalid length.
[  320.549876][T20809] 8021q: adding VLAN 0 to HW filter on device bond13
[  320.557087][T20809] 8021q: adding VLAN 0 to HW filter on device bond13
[  320.559556][T20809] bond13: (slave vcan0): The slave device specified does not support setting the MAC address
[  320.564253][T20809] bond13: (slave vcan0): Error -95 calling set_mac_address
[  320.616641][T20816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4473'.
[  320.618250][T20809] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4472'.
[  320.619524][T20816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4473'.
[  320.662978][T20818] syz_tun: entered promiscuous mode
[  320.668278][T20818] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  320.674855][T20818] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4474'.
[  320.688676][T20816] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  320.725658][T20816] syzkaller0: entered promiscuous mode
[  320.727382][T20816] syzkaller0: entered allmulticast mode
[  320.730036][T20816] tipc: Resetting bearer <eth:syzkaller0>
[  320.781974][T20815] tipc: Resetting bearer <eth:syzkaller0>
[  320.854756][T20815] tipc: Disabling bearer <eth:syzkaller0>
[  320.999911][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  321.005866][T20833] 8021q: adding VLAN 0 to HW filter on device bond1
[  321.024083][T20843] 8021q: adding VLAN 0 to HW filter on device bond14
[  321.032371][T20833] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  321.035860][T20833] bond1: (slave macvlan0): Enslaving as a backup interface with a down link
[  321.062943][T20833] bond1: (slave macvlan0): Releasing backup interface
[  321.154710][T20847] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  321.157435][T20847] syzkaller0: entered promiscuous mode
[  321.159126][T20847] syzkaller0: entered allmulticast mode
[  321.164080][T20847] tipc: Resetting bearer <eth:syzkaller0>
[  321.167187][T20846] tipc: Resetting bearer <eth:syzkaller0>
[  321.186492][T20846] tipc: Disabling bearer <eth:syzkaller0>
[  321.235709][T20858] bond2: (slave gretap2): making interface the new active one
[  321.238623][T20858] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  321.246231][T20858] bond2: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  321.257334][T20859] tipc: Bearer <udp:s>: already 2 bearers with priority 10
[  321.259546][T20859] tipc: Bearer <udp:s>: trying with adjusted priority
[  321.275931][T20859] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  321.536206][   T33] audit: type=1800 audit(1756323447.932:7): pid=20886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4495" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=3709 res=0 errno=0
[  321.558338][   T33] audit: type=1804 audit(1756323447.932:8): pid=20886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.4495" name="/newroot/723/x000000000000000300000000000000000000003" dev="tmpfs" ino=3709 res=1 errno=0
[  321.575711][T20887] syzkaller0: entered promiscuous mode
[  321.577922][T20887] syzkaller0: entered allmulticast mode
[  321.666505][T20899] 8021q: adding VLAN 0 to HW filter on device bond0
[  321.673693][T20899] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  321.734990][T20902] lo speed is unknown, defaulting to 1000
[  321.738295][T20902] wg1 speed is unknown, defaulting to 1000
[  322.040515][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  322.336358][T20921] lo speed is unknown, defaulting to 1000
[  322.338640][T20921] wg1 speed is unknown, defaulting to 1000
[  322.478187][T20929] vlan5: entered promiscuous mode
[  322.484444][T20929] bond0: entered promiscuous mode
[  322.502912][T20929] validate_nla: 6 callbacks suppressed
[  322.502931][T20929] netlink: 'syz.1.4509': attribute type 17 has an invalid length.
[  322.528806][T20929] batman_adv: batadv0: Interface deactivated: macvtap1
[  322.539380][T20929] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  322.597037][T20936] netlink: 'syz.4.4511': attribute type 1 has an invalid length.
[  322.611965][T20936] 8021q: adding VLAN 0 to HW filter on device bond3
[  322.625137][T20936] bond3: (slave geneve2): making interface the new active one
[  322.628796][T20936] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  322.667499][T20939] netlink: 'syz.1.4512': attribute type 4 has an invalid length.
[  322.691991][T20944] mac80211_hwsim hwsim91 wlan0: entered promiscuous mode
[  322.694399][T20944] mac80211_hwsim hwsim91 wlan0: left allmulticast mode
[  322.702038][T20944] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  322.765567][T20949] syzkaller0: entered promiscuous mode
[  322.767311][T20949] syzkaller0: entered allmulticast mode
[  322.773149][T20951] netlink: 'syz.4.4515': attribute type 9 has an invalid length.
[  322.888436][T20956] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  322.903117][T20962] netlink: 'syz.1.4518': attribute type 4 has an invalid length.
[  322.907132][T20962] netlink: 'syz.1.4518': attribute type 4 has an invalid length.
[  322.979207][T20968] : renamed from bond_slave_0
[  322.983079][T20968] tipc: Disabling bearer <ib:bond_slave_0>
[  323.079867][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  323.514543][T20998] bond0: (slave syz_tun): Releasing backup interface
[  323.520648][T20998] bond26: (slave batadv0): Releasing active interface
[  323.523334][T20998] bond26: (slave batadv0): the permanent HWaddr of slave - c2:92:5a:84:02:4e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  323.531354][T20998] bond26: (slave batadv5): making interface the new active one
[  323.536302][T20998] bond26: (slave batadv5): Releasing active interface
[  323.542895][T20998] batadv6: left allmulticast mode
[  323.544970][T20998] batadv6: left promiscuous mode
[  323.547062][T20998] bridge0: port 1(batadv6) entered disabled state
[  323.552768][T20998] veth17: left allmulticast mode
[  323.554788][T20998] veth17: left promiscuous mode
[  323.556819][T20998] bridge20: port 1(veth17) entered disabled state
[  323.561538][T20998] vlan1: left promiscuous mode
[  323.563471][T20998] veth1: left promiscuous mode
[  323.566653][T20998] bridge20: port 2(vlan1) entered disabled state
[  323.573078][T20998] batman_adv: batadv0: Removing interface: macvtap1
[  323.577273][T20998] bond29: (slave bridge21): Releasing backup interface
[  323.580207][T20998] bridge21: left promiscuous mode
[  323.615341][T21001] bridge15: entered allmulticast mode
[  323.623495][T21001] dvmrp8: entered allmulticast mode
[  323.694428][T21001] lo speed is unknown, defaulting to 1000
[  323.697037][T21001] wg1 speed is unknown, defaulting to 1000
[  323.738594][T21000] bridge15: left allmulticast mode
[  323.740865][T21000] dvmrp8: left allmulticast mode
[  323.876090][T21026] netlink: 'syz.4.4539': attribute type 10 has an invalid length.
[  323.891888][T21026] netlink: 'syz.4.4539': attribute type 4 has an invalid length.
[  323.895346][T21028] syzkaller1: entered promiscuous mode
[  323.897268][T21028] syzkaller1: entered allmulticast mode
[  323.929616][T21030] xfrm0 speed is unknown, defaulting to 1000
[  323.968717][T21033] lo speed is unknown, defaulting to 1000
[  323.972516][T21033] wg1 speed is unknown, defaulting to 1000
[  324.065122][T21036] netlink: 'syz.1.4542': attribute type 1 has an invalid length.
[  324.085629][T21036] 8021q: adding VLAN 0 to HW filter on device bond30
[  324.119870][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  324.258471][T21053] nbd: socks must be embedded in a SOCK_ITEM attr
[  324.276615][T19266] block nbd64: NBD_DISCONNECT
[  324.402816][T21073] xfrm0 speed is unknown, defaulting to 1000
[  324.588591][T21086] netlink: 'syz.1.4553': attribute type 1 has an invalid length.
[  324.657503][T21089] bond31: (slave geneve6): making interface the new active one
[  324.661185][T21089] bond31: (slave geneve6): Enslaving as an active interface with an up link
[  324.664325][T13234] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  324.667072][T13234] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  324.670329][T13234] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  324.673144][T13234] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  324.675100][T21086] __nla_validate_parse: 29 callbacks suppressed
[  324.675111][T21086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4553'.
[  324.712625][T21092] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  324.967838][T21108] sctp: [Deprecated]: syz.3.4558 (pid 21108) Use of int in max_burst socket option deprecated.
[  324.967838][T21108] Use struct sctp_assoc_value instead
[  325.159777][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  325.282790][T21125] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4562'.
[  325.397408][T21121] ip6gretap0: left allmulticast mode
[  325.419645][ T5864] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  325.426834][ T5864] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  325.432584][ T5864] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  325.435501][ T5864] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  325.438760][ T5864] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  325.443790][ T5864] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  325.447006][ T5864] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  325.455154][ T5864] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  325.464644][T21131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4564'.
[  325.477193][T21131] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  325.572629][T21140] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4567'.
[  325.575628][T21140] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4567'.
[  325.586923][T21141] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4567'.
[  325.591982][T21141] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4567'.
[  325.617408][T21146] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4570'.
[  325.665938][T21147] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  326.210081][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  326.638482][T21218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4585'.
[  326.745974][T21236] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4589'.
[  327.160372][   T34] INFO: task syz.2.1987:12857 blocked for more than 143 seconds.
[  327.163417][   T34]       Not tainted syzkaller #0
[  327.166018][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  327.193435][   T34] task:syz.2.1987      state:D stack:22992 pid:12857 tgid:12856 ppid:5845   task_flags:0x400140 flags:0x00004004
[  327.208730][   T34] Call Trace:
[  327.210008][   T34]  <TASK>
[  327.210930][   T34]  __schedule+0x1798/0x4cc0
[  327.212456][   T34]  ? stack_depot_save_flags+0x41b/0x860
[  327.214261][   T34]  ? kasan_save_free_info+0x46/0x50
[  327.216195][   T34]  ? __kasan_slab_free+0x5b/0x80
[  327.218198][   T34]  ? __pfx___schedule+0x10/0x10
[  327.226405][   T34]  ? disable_device+0x137/0x320
[  327.227045][T21213] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  327.228290][   T34]  ? ib_unregister_device_and_put+0xb8/0xf0
[  327.235006][   T34]  ? schedule+0x91/0x360
[  327.236650][   T34]  ? rcu_is_watching+0x15/0xb0
[  327.238490][   T34]  ? lock_release+0x4b/0x3e0
[  327.249915][    C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  327.250348][   T34]  schedule+0x165/0x360
[  327.259654][   T34]  schedule_timeout+0x9a/0x270
[  327.261260][   T34]  ? __pfx_schedule_timeout+0x10/0x10
[  327.270001][   T34]  ? rcu_is_watching+0x15/0xb0
[  327.271919][   T34]  ? rcu_is_watching+0x15/0xb0
[  327.273729][   T34]  ? wait_for_completion+0x267/0x5d0
[  327.275794][   T34]  wait_for_completion+0x2bf/0x5d0
[  327.279745][   T34]  ? __pfx_wait_for_completion+0x10/0x10
[  327.281975][   T34]  ? remove_client_context+0x19c/0x1e0
[  327.284131][   T34]  disable_device+0x1c6/0x320
[  327.286041][   T34]  ? __pfx_disable_device+0x10/0x10
[  327.288107][   T34]  ? xa_load+0x1ea/0x210
[  327.291171][   T34]  __ib_unregister_device+0x2cb/0x3f0
[  327.293284][   T34]  ? __pfx_ib_device_get_by_index+0x10/0x10
[  327.295565][   T34]  ib_unregister_device_and_put+0xb8/0xf0
[  327.297847][   T34]  nldev_dellink+0x2d1/0x320
[  327.299828][   T34]  ? __pfx_nldev_dellink+0x10/0x10
[  327.301903][   T34]  ? apparmor_capable+0x137/0x1b0
[  327.303633][   T34]  ? bpf_lsm_capable+0x9/0x20
[  327.305284][   T34]  ? security_capable+0x7e/0x2e0
[  327.306825][   T34]  ? __pfx_nldev_dellink+0x10/0x10
[  327.308464][   T34]  rdma_nl_rcv+0x6ae/0x980
[  327.310389][   T34]  ? __pfx_rdma_nl_rcv+0x10/0x10
[  327.312415][   T34]  ? net_generic+0x1e/0x240
[  327.314235][   T34]  ? rcu_is_watching+0x15/0xb0
[  327.316102][   T34]  netlink_unicast+0x82f/0x9e0
[  327.318019][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  327.320571][   T34]  ? netlink_sendmsg+0x642/0xb30
[  327.322545][   T34]  ? skb_put+0x11b/0x210
[  327.324628][   T34]  netlink_sendmsg+0x805/0xb30
[  327.327262][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  327.329861][   T34]  ? futex_unqueue+0x22/0x240
[  327.331675][   T34]  ? aa_sock_msg_perm+0xf1/0x1d0
[  327.333594][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  327.335590][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  327.337621][   T34]  __sock_sendmsg+0x21c/0x270
[  327.339905][   T34]  ____sys_sendmsg+0x505/0x830
[  327.341810][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  327.343857][   T34]  ? import_iovec+0x74/0xa0
[  327.345669][   T34]  ___sys_sendmsg+0x21f/0x2a0
[  327.347583][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  327.349842][   T34]  ? futex_wait+0x285/0x360
[  327.351602][   T34]  ? __fget_files+0x2a/0x420
[  327.353394][   T34]  ? __fget_files+0x3a0/0x420
[  327.355291][   T34]  __x64_sys_sendmsg+0x19b/0x260
[  327.357342][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  327.359922][   T34]  ? rcu_is_watching+0x15/0xb0
[  327.361868][   T34]  ? rcu_is_watching+0x15/0xb0
[  327.363787][   T34]  do_syscall_64+0xfa/0x3b0
[  327.365320][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.367138][   T34]  ? exc_page_fault+0x9f/0xf0
[  327.368493][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.370808][   T34] RIP: 0033:0x7fdeeff8ebe9
[  327.372539][   T34] RSP: 002b:00007fdef0e39038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  327.375684][   T34] RAX: ffffffffffffffda RBX: 00007fdef01b5fa0 RCX: 00007fdeeff8ebe9
[  327.378641][   T34] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005
[  327.381922][   T34] RBP: 00007fdef0011e19 R08: 0000000000000000 R09: 0000000000000000
[  327.385044][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  327.388106][   T34] R13: 00007fdef01b6038 R14: 00007fdef01b5fa0 R15: 00007ffd28522668
[  327.391258][   T34]  </TASK>
[  327.392631][   T34] INFO: lockdep is turned off.
[  327.394458][   T34] NMI backtrace for cpu 1
[  327.394473][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  327.394487][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  327.394496][   T34] Call Trace:
[  327.394501][   T34]  <TASK>
[  327.394508][   T34]  dump_stack_lvl+0x189/0x250
[  327.394532][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  327.394547][   T34]  ? __pfx__printk+0x10/0x10
[  327.394568][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  327.394586][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  327.394601][   T34]  ? __pfx__printk+0x10/0x10
[  327.394618][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  327.394639][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  327.394657][   T34]  watchdog+0xf93/0xfe0
[  327.394677][   T34]  ? watchdog+0x1de/0xfe0
[  327.394721][   T34]  kthread+0x711/0x8a0
[  327.394741][   T34]  ? __pfx_watchdog+0x10/0x10
[  327.394757][   T34]  ? __pfx_kthread+0x10/0x10
[  327.394774][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  327.394791][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  327.394810][   T34]  ? __pfx_kthread+0x10/0x10
[  327.394825][   T34]  ret_from_fork+0x3fc/0x770
[  327.394840][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  327.394854][   T34]  ? __switch_to_asm+0x39/0x70
[  327.394872][   T34]  ? __switch_to_asm+0x33/0x70
[  327.394889][   T34]  ? __pfx_kthread+0x10/0x10
[  327.394903][   T34]  ret_from_fork_asm+0x1a/0x30
[  327.394926][   T34]  </TASK>
[  327.394932][   T34] Sending NMI from CPU 1 to CPUs 0:
[  327.453418][    C0] NMI backtrace for cpu 0
[  327.453439][    C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) 
[  327.453457][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  327.453468][    C0] Workqueue: events drain_vmap_area_work
[  327.453491][    C0] RIP: 0010:debug_check_no_obj_freed+0x205/0x470
[  327.453514][    C0] Code: 00 ff c3 48 8b 44 24 18 49 89 c7 48 85 c0 0f 84 45 02 00 00 4d 89 fe 49 c1 ee 03 48 b8 00 00 00 00 00 fc ff df 41 80 3c 06 00 <74> 08 4c 89 ff e8 01 d6 52 fd 49 8b 07 48 89 44 24 18 4d 8d 67 18
[  327.453527][    C0] RSP: 0018:ffffc900000c75c0 EFLAGS: 00000046
[  327.453539][    C0] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: dffffc0000000001
[  327.453549][    C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc900000c74a0
[  327.453558][    C0] RBP: ffff8880244d9d78 R08: 0000000000000003 R09: 0000000000000004
[  327.453567][    C0] R10: dffffc0000000000 R11: fffff52000018e94 R12: ffff88811fe4c4e8
[  327.453577][    C0] R13: ffff88804643a000 R14: 1ffff11003f8dbe3 R15: ffff88801fc6df18
[  327.453587][    C0] FS:  0000000000000000(0000) GS:ffff8880b861a000(0000) knlGS:0000000000000000
[  327.453597][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  327.453606][    C0] CR2: 00007fc7bb687e20 CR3: 000000000df36000 CR4: 00000000000006f0
[  327.453639][    C0] Call Trace:
[  327.453646][    C0]  <TASK>
[  327.453656][    C0]  ? __page_table_check_zero+0xba/0x530
[  327.453680][    C0]  __free_frozen_pages+0x4dd/0xd30
[  327.453739][    C0]  kasan_depopulate_vmalloc_pte+0x74/0xa0
[  327.453758][    C0]  __apply_to_page_range+0xb92/0x1380
[  327.453779][    C0]  ? __pfx_kasan_depopulate_vmalloc_pte+0x10/0x10
[  327.453797][    C0]  ? __pfx___apply_to_page_range+0x10/0x10
[  327.453812][    C0]  ? __pfx_do_flush_tlb_all+0x10/0x10
[  327.453833][    C0]  kasan_release_vmalloc+0xa2/0xd0
[  327.453848][    C0]  purge_vmap_node+0x214/0x8f0
[  327.453866][    C0]  ? __pfx_purge_vmap_node+0x10/0x10
[  327.453880][    C0]  ? flush_tlb_kernel_range+0x358/0x470
[  327.453899][    C0]  __purge_vmap_area_lazy+0x7a4/0xb40
[  327.453914][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  327.453928][    C0]  drain_vmap_area_work+0x27/0x40
[  327.453940][    C0]  process_scheduled_works+0xae1/0x17b0
[  327.453962][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  327.453981][    C0]  worker_thread+0x8a0/0xda0
[  327.454002][    C0]  kthread+0x711/0x8a0
[  327.454019][    C0]  ? __pfx_worker_thread+0x10/0x10
[  327.454031][    C0]  ? __pfx_kthread+0x10/0x10
[  327.454047][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  327.454065][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  327.454086][    C0]  ? __pfx_kthread+0x10/0x10
[  327.454103][    C0]  ret_from_fork+0x3fc/0x770
[  327.454119][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  327.454134][    C0]  ? __switch_to_asm+0x39/0x70
[  327.454152][    C0]  ? __switch_to_asm+0x33/0x70
[  327.454169][    C0]  ? __pfx_kthread+0x10/0x10
[  327.454185][    C0]  ret_from_fork_asm+0x1a/0x30
[  327.454208][    C0]  </TASK>
[  327.454474][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  327.567474][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  327.571009][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  327.575035][   T34] Call Trace:
[  327.576360][   T34]  <TASK>
[  327.577528][   T34]  dump_stack_lvl+0x99/0x250
[  327.579319][   T34]  ? __asan_memcpy+0x40/0x70
[  327.581072][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  327.583081][   T34]  ? __pfx__printk+0x10/0x10
[  327.584937][   T34]  vpanic+0x281/0x750
[  327.586505][   T34]  ? __pfx_vpanic+0x10/0x10
[  327.588255][   T34]  ? rcu_is_watching+0x15/0xb0
[  327.590082][   T34]  ? preempt_schedule+0xae/0xc0
[  327.591960][   T34]  ? preempt_schedule_common+0x83/0xd0
[  327.594052][   T34]  panic+0xb9/0xc0
[  327.595533][   T34]  ? __pfx_panic+0x10/0x10
[  327.597259][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  327.599254][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  327.601706][   T34]  watchdog+0xfd2/0xfe0
[  327.603398][   T34]  ? watchdog+0x1de/0xfe0
[  327.605169][   T34]  kthread+0x711/0x8a0
[  327.606816][   T34]  ? __pfx_watchdog+0x10/0x10
[  327.608660][   T34]  ? __pfx_kthread+0x10/0x10
[  327.610152][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  327.611847][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  327.613909][   T34]  ? __pfx_kthread+0x10/0x10
[  327.615654][   T34]  ret_from_fork+0x3fc/0x770
[  327.617052][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  327.618721][   T34]  ? __switch_to_asm+0x39/0x70
[  327.620423][   T34]  ? __switch_to_asm+0x33/0x70
[  327.622086][   T34]  ? __pfx_kthread+0x10/0x10
[  327.623729][   T34]  ret_from_fork_asm+0x1a/0x30
[  327.625417][   T34]  </TASK>
[  327.626995][   T34] Kernel Offset: disabled
[  327.628307][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:37:33  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffff888029680000 RCX=ffff888022fbd640 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=ffffc9000344fa70 RSP=ffffc9000344f918
R8 =ffffffff8fa38637 R9 =1ffffffff1f470c6 R10=dffffc0000000000 R11=fffffbfff1f470c7
R12=1ffff11024b670f9 R13=ffff888125b387c8 R14=0000000000000000 R15=00000000000049fd
RIP=ffffffff81bfaf70 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005583a45057e8 CR3=000000001ca8a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000006b RBX=000000000000006b RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff888106300237 R9 =1ffff11020c60046 R10=dffffc0000000000 R11=ffffffff854f22c0
R12=dffffc0000000000 R13=ffffffff99afb8ec R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f233c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f673bc59f68 CR3=0000000120034000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=7400aef692ea5ee3 a9d26d6aac622adf
XMM02=399288aff671f055 698057eb39fe96a0 XMM03=7424157288d7f714 cdf2180da880a17a
XMM04=5e54291eb68f9a3b c342ba74de96ecd0 XMM05=a3de7ad1a26c5e58 d34132f410d52efb
XMM06=262d5097d738960c 472cac8306f35b5e XMM07=54291eb68f9a3bc3 42ba74de96ecd074
XMM08=24157288d7f714cd f2180da880a17a39 XMM09=0000000000000000 00007f2cca812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
