last executing test programs:

6m4.975205376s ago: executing program 2 (id=1375):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'lo\x00'})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={<r3=>0x0, 0x0, 0x10}, &(0x7f00000001c0)=0xc)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000200)={r3, 0x1}, 0x8)
bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0)
ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x1)
ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000140)=0x86)

6m4.91053226s ago: executing program 2 (id=1378):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1a, 0xc, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
unshare(0x26020480)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10009}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0)
sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x94, 0x2c, 0xd27, 0x870bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x64, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x48, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x44, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x81}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xa}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x1)
r8 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2a}, @loopback, 0xff000000, 0xff, 'macvlan0\x00', 'dvmrp1\x00', {0xff}, {}, 0x62, 0x0, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x40, 0x2}}}, {{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:groupadd_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

6m4.910301033s ago: executing program 0 (id=1379):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @multicast, @val={@void, {0x8100, 0x4, 0x1, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x880b, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20}}}}}}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2440601}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x20004000)

6m4.738094253s ago: executing program 0 (id=1382):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1a, 0xc, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
accept(r0, 0x0, 0x0)
pipe(&(0x7f0000000600)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10)
pipe(&(0x7f0000000500)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0)
close(r4)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r5 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r5, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r5, &(0x7f0000000140)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
unshare(0x26020480)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r6)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0)
ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000040)=0x1)
r8 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2a}, @loopback, 0xff000000, 0xff, 'macvlan0\x00', 'dvmrp1\x00', {0xff}, {}, 0x62, 0x0, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x40, 0x2}}}, {{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:groupadd_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r7, 0x4018f50b, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)

6m4.736838228s ago: executing program 2 (id=1384):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000100), 0x1)
r1 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0)
ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1)
ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000140)=0x86)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
socket$inet6(0xa, 0x5, 0x0) (async)
setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000100), 0x1) (async)
socket$pptp(0x18, 0x1, 0x2) (async)
bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) (async)
connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) (async)
ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) (async)
ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000140)=0x86) (async)

6m4.736294389s ago: executing program 0 (id=1385):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
connect$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x1, @rand_addr=0x64010101}}, 0x1e)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff0003000000000000000000000000ffff"], 0x4c}}, 0x0)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x8000086)
socket$inet_sctp(0x2, 0x1, 0x84)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000340)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r4=>0x0}], 0x7, "6f4688a25a527c"})
ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001340)={r4, 0x4})
ioctl$PPPIOCSCOMPRESS(r3, 0x4010744d)

6m4.734635372s ago: executing program 2 (id=1387):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20048080)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd27, 0x0, {{@in=@multicast2, @in6=@empty, 0x1fe, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x8, 0x0, 0x2, 0x40}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004)
setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0)
close(0x3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x0)
unshare(0x2c020680)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000001f40)={0x6, 0xac, 0xffffff31}, 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = epoll_create1(0x80000)
ioctl$FS_IOC_SETFLAGS(r5, 0x40088a01, &(0x7f0000000000))
r6 = epoll_create1(0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
epoll_pwait(r6, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x6, 0x8, &(0x7f0000000300)={[0xffff]}, 0x8)
sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000100)=@newtaction={0x15c, 0x30, 0x800, 0x0, 0x0, {}, [{0x148, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x0, 0x0, 0x40}, {0x20}, {0x0, 0x2}, {}, {0x64}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0xbc, 0x18, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x100, 0x9, 0x1, 0x40, 0x2}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x1f, 0x10}}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9, 0x7}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9, 0xfff2}}]}, {0x86, 0x6, "ec9325054dc44697814fa0240e94c7e611959dcdbcbd3c580ee6993043bc7ad8a861d01116e2ab521b8c13980f195e1c17de5a13fd21776618f4258359910e34ae912d83"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x15c}}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)={0x1})
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000340)={0xa000001c})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r8 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r8, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r8, &(0x7f0000000080)={0x18, 0x2, {0x0, @private=0xa010101}}, 0x1e)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'nr0\x00', {0x2, 0x4e21, @multicast2}})

6m4.66958287s ago: executing program 0 (id=1388):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x6e) (async, rerun: 32)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 32)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) (async, rerun: 32)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) (rerun: 32)
ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, 0x0, 0x1, 0x0, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
pipe(&(0x7f0000000040)={<r5=>0xffffffffffffffff}) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x9, 0x5, 0x4, 0x1048, r5, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1, 0x1}, 0x50)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000080), 0x4)
sendmmsg$inet(r6, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x57}}], 0x1, 0x8000)
close(r7) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r9 = socket(0x400000000010, 0x2, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000)
sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r11}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff}}]}, 0x90}}, 0x0) (async)
sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000d0000000500070012000000050018007f00000006000800feff0000050017000000000005001a000000000006000a00ffff00000500190004000000050007000700000005001b00ff0000000500010001000000060008"], 0x6c}, 0x1, 0x0, 0x0, 0x18000}, 0x0)

6m4.592289562s ago: executing program 0 (id=1389):
socket(0x18, 0x0, 0x2)
socket(0x400000000010, 0x3, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
epoll_create1(0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x5452, &(0x7f0000000000))
ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x6)
setsockopt$inet_tcp_int(r4, 0x6, 0x5, &(0x7f0000000280)=0x1, 0x4)
socket$inet6(0xa, 0x80003, 0xff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0))
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x5, 0x84)
r6 = syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="210400000000040000000100000008000100"], 0x38}}, 0x4)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r7, 0x3)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)

6m4.591674889s ago: executing program 2 (id=1390):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@getstats={0x1c, 0x5e, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
r8 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast1, @in=@broadcast, 0xfffd, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x1d}, {0xffbffffffffffffe, 0x6, 0x1, 0x0, 0x0, 0x2009, 0xf0e, 0x10000}, {0x3, 0xb, 0x4053e5, 0x20}, 0x8, 0x2000001, 0x1, 0x0, 0x1, 0x2}, {{@in6=@remote, 0x0, 0x32}, 0xa, @in=@empty, 0x3502, 0x1, 0x0, 0x0, 0x2, 0x1, 0x3}}, 0xe8)
connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r4, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r11 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r11, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e)
sendmmsg(r11, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50)

6m4.509898052s ago: executing program 0 (id=1391):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64)
r0 = socket(0x18, 0x4, 0xc) (async, rerun: 64)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="7400000010003b15000100001000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000001000000540012800b0001006772657461700000440002800500160001000000050009000800000008000100", @ANYRES32=0x0, @ANYBLOB="060018008000000008001500656e050005000800"], 0x74}}, 0x0) (async, rerun: 64)
unshare(0x22020600) (rerun: 64)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) (async, rerun: 64)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) (async, rerun: 64)
r5 = socket(0x2b, 0x80801, 0x1) (rerun: 64)
sendmmsg(r5, &(0x7f0000001f40)=[{{&(0x7f0000000180)=@qipcrtr={0x2a, 0x2, 0x8000}, 0x80, 0x0}}], 0x1, 0x20000090) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x20040885}, 0x40000) (async)
sendmmsg(r3, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x7000000}, 0xf401}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005c40)=ANY=[@ANYBLOB="0e000000000000000c01000048000000"], 0x10}}], 0x2, 0x0)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff})
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async)
r9 = accept4(r8, 0x0, 0x0, 0x0)
sendmsg$alg(r9, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x1018}, 0x14010016) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r9)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r6, @ANYBLOB="010025bd7000fcdbdf25030000000c000600020000000000000008000100000000000c0006000100000000000000640007800c00018008000100", @ANYRES32=r0, @ANYBLOB="0c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=r0, @ANYBLOB="0c00018008000100", @ANYRES32=r9, @ANYBLOB="0c000180080001007f3c908b234a5d5201ddc670e5ce9f68633d6c1768b6f1939cc4a4c63f0cd7df46", @ANYRES32=r0, @ANYBLOB="0c00018008000100", @ANYRES32=r0, @ANYBLOB="0c00018008000100", @ANYRES32=r0, @ANYBLOB="0c0001800800000000", @ANYRES32=r0, @ANYBLOB="0d000a00237d5d292c5b25b17d0000000c00040001000000000000000c0008000700000000000000"], 0xc0}, 0x1, 0x0, 0x0, 0x20004001}, 0xc0) (async)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async)
connect$pppl2tp(r0, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 32)
r10 = socket$pptp(0x18, 0x1, 0x2) (rerun: 32)
bind$pptp(r10, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) (async)
connect$pptp(r10, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0)

6m4.432329462s ago: executing program 32 (id=1391):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64)
r0 = socket(0x18, 0x4, 0xc) (async, rerun: 64)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="7400000010003b15000100001000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000001000000540012800b0001006772657461700000440002800500160001000000050009000800000008000100", @ANYRES32=0x0, @ANYBLOB="060018008000000008001500656e050005000800"], 0x74}}, 0x0) (async, rerun: 64)
unshare(0x22020600) (rerun: 64)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) (async, rerun: 64)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) (async, rerun: 64)
r5 = socket(0x2b, 0x80801, 0x1) (rerun: 64)
sendmmsg(r5, &(0x7f0000001f40)=[{{&(0x7f0000000180)=@qipcrtr={0x2a, 0x2, 0x8000}, 0x80, 0x0}}], 0x1, 0x20000090) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x20040885}, 0x40000) (async)
sendmmsg(r3, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x7000000}, 0xf401}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005c40)=ANY=[@ANYBLOB="0e000000000000000c01000048000000"], 0x10}}], 0x2, 0x0)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff})
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async)
r9 = accept4(r8, 0x0, 0x0, 0x0)
sendmsg$alg(r9, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x1018}, 0x14010016) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r9)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r6, @ANYBLOB="010025bd7000fcdbdf25030000000c000600020000000000000008000100000000000c0006000100000000000000640007800c00018008000100", @ANYRES32=r0, @ANYBLOB="0c00018008000100", @ANYRES32=r7, @ANYBLOB="0c00018008000100", @ANYRES32=r0, @ANYBLOB="0c00018008000100", @ANYRES32=r9, @ANYBLOB="0c000180080001007f3c908b234a5d5201ddc670e5ce9f68633d6c1768b6f1939cc4a4c63f0cd7df46", @ANYRES32=r0, @ANYBLOB="0c00018008000100", @ANYRES32=r0, @ANYBLOB="0c00018008000100", @ANYRES32=r0, @ANYBLOB="0c0001800800000000", @ANYRES32=r0, @ANYBLOB="0d000a00237d5d292c5b25b17d0000000c00040001000000000000000c0008000700000000000000"], 0xc0}, 0x1, 0x0, 0x0, 0x20004001}, 0xc0) (async)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async)
connect$pppl2tp(r0, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 32)
r10 = socket$pptp(0x18, 0x1, 0x2) (rerun: 32)
bind$pptp(r10, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) (async)
connect$pptp(r10, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0)

6m1.448296495s ago: executing program 2 (id=1422):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1a, 0xc, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
unshare(0x26020480)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0)
ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x54, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, @in6={0xa, 0x4e21, 0x9, @loopback, 0x7ab}]}, &(0x7f0000000180)=0x10)
r4 = socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2a}, @loopback, 0xff000000, 0xff, 'macvlan0\x00', 'dvmrp1\x00', {0xff}, {}, 0x62, 0x0, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x40, 0x2}}}, {{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:groupadd_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$packet(0x11, 0x2, 0x300)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x7fffffffffffffff, 0xfffffffffffffffd, 0x9}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

6m1.376703263s ago: executing program 33 (id=1422):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1a, 0xc, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
unshare(0x26020480)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0)
ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x54, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, @in6={0xa, 0x4e21, 0x9, @loopback, 0x7ab}]}, &(0x7f0000000180)=0x10)
r4 = socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2a}, @loopback, 0xff000000, 0xff, 'macvlan0\x00', 'dvmrp1\x00', {0xff}, {}, 0x62, 0x0, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x40, 0x2}}}, {{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:groupadd_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$packet(0x11, 0x2, 0x300)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x7fffffffffffffff, 0xfffffffffffffffd, 0x9}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

277.064197ms ago: executing program 3 (id=8091):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r3, @ANYBLOB="040013000600b500850100000a000600080211000001000006001200090000001c00810005000200020000000500020030000000050002d203000000"], 0x58}, 0x1, 0x0, 0x0, 0x40480c0}, 0x4000004)

276.36465ms ago: executing program 4 (id=8092):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff02)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000001640), 0x4)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r4, &(0x7f0000000140), 0x9)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r2, 0x11a, 0x3, &(0x7f00000000c0), 0x4)
setsockopt$packet_int(r1, 0x107, 0xc, 0x0, 0x0)
r5 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r5, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @empty}}, 0x1e)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000180)=0xf23, 0x4)
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r8 = socket$packet(0x11, 0x3, 0x300)
r9 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r9, &(0x7f00000001c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000)
sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@deltclass={0x54, 0x29, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0x7, 0x8}, {0x6f678af82cd4a34b, 0xa}}, [@tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x0, 0x5, {0x6, 0x3}}, @TCA_RATE={0xfffffffffffffec2, 0x5, {0x2, 0x4}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x5, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
connect$packet(r8, &(0x7f00000000c0)={0x11, 0x0, r10, 0x1, 0x3}, 0x14)
recvmmsg(r7, &(0x7f00000037c0), 0x0, 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000040)=0x1)
ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000140)=0x86)

275.921696ms ago: executing program 1 (id=8093):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1a, 0xc, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
unshare(0x26020480)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r1)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0)
ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x1)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2a}, @loopback, 0xff000000, 0xff, 'macvlan0\x00', 'dvmrp1\x00', {0xff}, {}, 0x62, 0x0, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x40, 0x2}}}, {{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:groupadd_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)={0x44, r5, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac06}]}]}, 0x44}}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
unshare(0x10000)

217.450089ms ago: executing program 4 (id=8094):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1a, 0xc, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) (async)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) (async)
connect$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
unshare(0x26020480)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r2) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 64)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0)
ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x1) (async)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2a}, @loopback, 0xff000000, 0xff, 'macvlan0\x00', 'dvmrp1\x00', {0xff}, {}, 0x62, 0x0, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x40, 0x2}}}, {{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:groupadd_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
socket$packet(0x11, 0x2, 0x300)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x7fffffffffffffff, 0xfffffffffffffffd, 0x9}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

216.768801ms ago: executing program 3 (id=8095):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1a, 0xc, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x54)
connect$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
unshare(0x26020480)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0)
ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000180)=0x1)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2a}, @loopback, 0xff000000, 0xff, 'macvlan0\x00', 'dvmrp1\x00', {0xff}, {}, 0x62, 0x0, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x40, 0x2}}}, {{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:groupadd_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
recvmsg(r4, &(0x7f0000004b40)={0x0, 0x0, 0x0}, 0x40002100)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmmsg$alg(r6, &(0x7f00000040c0)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000280)="81", 0x1}], 0x1, 0x0, 0x0, 0x40088d5}], 0x1, 0x40)
recvmmsg(r6, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}, 0x7fff}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/15, 0xf}], 0x1}, 0x8}], 0x2, 0x10000, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x48)

216.638727ms ago: executing program 1 (id=8096):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00000002"], 0x8)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0)
ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2) (async)
ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2)
ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000140)=0x86) (async)
ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000140)=0x86)

165.920797ms ago: executing program 4 (id=8097):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'veth0_to_team\x00', 0x800})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x202}], 0x18}, 0x0)
sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000000400)=""/101, 0x65}, {&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f00000004c0)=""/21, 0x15}], 0x5}}], 0x2, 0x60, 0x0)
r4 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r4, 0x0, 0x0)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x40000)
r5 = socket$kcm(0x2d, 0x2, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000001c0)=<r7=>0x0)
unshare(0x2a020480)
r8 = socket(0xa, 0x3, 0x3a)
connect$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x2711, @hyper}, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYRES16, @ANYRES16, @ANYRESDEC], 0x38}}, 0x0)
write$cgroup_pid(r5, &(0x7f0000000280)=r7, 0x12)
r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r6)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b80)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="fba70000e80000867f0004"], 0x14}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000000000e4c4582cfffffffffffff2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)

165.243395ms ago: executing program 1 (id=8098):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2006c08020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000090a010400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797ab10000000008000640ffffff000800084000000001080003400000011c14000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x80)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0xd}, &(0x7f0000000080)=0x8)
socketpair(0x18, 0x0, 0x2, &(0x7f0000000000))
socket$inet_udp(0x2, 0x2, 0x0) (async)
setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2006c08020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000090a010400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797ab10000000008000640ffffff000800084000000001080003400000011c14000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x80) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0xd}, &(0x7f0000000080)=0x8) (async)
socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) (async)

164.902817ms ago: executing program 3 (id=8099):
r0 = socket$pptp(0x18, 0x1, 0x2)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000280)={0xffffffffffffffff, 0xfff5, 'H8-', 0x1f, 0x80})
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
unshare(0xc040400)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0xf4395814d547d234, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f}, 0x38)
openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'})
socket$packet(0x11, 0x3, 0x300)
connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x1c}}, 0x0)
pipe(&(0x7f0000000480)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0)
setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000800)=0x1, 0x4)

163.732036ms ago: executing program 4 (id=8100):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES16, @ANYRES16=0x0, @ANYRESHEX=0x0, @ANYRESDEC, @ANYBLOB="ec"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 32)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) (async, rerun: 32)
connect$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) (async, rerun: 32)
unshare(0x26020480) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r1) (async, rerun: 64)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 64)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) (async, rerun: 32)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (rerun: 32)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x20, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) (async)
ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2a}, @loopback, 0xff000000, 0xff, 'macvlan0\x00', 'dvmrp1\x00', {0xff}, {}, 0x62, 0x0, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x40, 0x2}}}, {{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:groupadd_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) (async)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
socket$packet(0x11, 0x2, 0x300) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x7fffffffffffffff, 0xfffffffffffffffd, 0x9}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x4, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

8.755419ms ago: executing program 1 (id=8101):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r3, @ANYBLOB="040013000600b500850100000a000600080211000001000006001200090000001c00810005000200020000000500020030000000050002d203000000"], 0x58}, 0x1, 0x0, 0x0, 0x40480c0}, 0x4000004)

8.417897ms ago: executing program 3 (id=8102):
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0)
ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1)
ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000140)=0x86)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8)
syz_genetlink_get_family_id$devlink(&(0x7f0000000540), r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4)
ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000600))
sendmsg$unix(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
recvmsg$unix(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)}, 0x2062)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$int_in(r8, 0x5421, &(0x7f0000001100)=0x2000000009)
accept4(r8, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', <r9=>0x0})
r10 = socket(0x2a, 0x2, 0xffffffff)
sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=@newqdisc={0x24, 0x24, 0x10, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {}, {0xb, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004001)
getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r11, {}, {}, {0x2, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_DIVISOR={0xfffffffffffffd81, 0x4, 0x10}]}}]}, 0x40}}, 0x40808c4)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl2\x00', <r12=>0x0, 0x2f, 0xd, 0xc, 0x81a, 0x58, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x8000, 0x1, 0x8, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', <r13=>0x0, 0x0, 0x32, 0x2, 0x3, 0x1, @private0, @mcast2, 0x1, 0x7, 0x8, 0x800}})
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2e010000", @ANYRES16=r5, @ANYBLOB="000227bd7000fedbdf250100000008000100", @ANYRES32=r9, @ANYBLOB="f400028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000500000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000002000008000600", @ANYRES32=r11, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB], 0x110}, 0x1, 0x0, 0x0, 0x81}, 0x40004)

7.373219ms ago: executing program 4 (id=8103):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1a, 0xc, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x1)
getsockopt$ax25_int(r1, 0x101, 0xa, &(0x7f0000001080), &(0x7f00000010c0)=0x4)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
unshare(0x26020480)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0)
ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x1)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2a}, @loopback, 0xff000000, 0xff, 'macvlan0\x00', 'dvmrp1\x00', {0xff}, {}, 0x62, 0x0, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x40, 0x2}}}, {{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:groupadd_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$packet(0x11, 0x2, 0x300)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x7ffffffffbffffff, 0xfffffffffffffffd, 0x22a6, 0x6}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x5, 0x0, 0x0, 0x80000000, 0x4}, 0x0, 0x0)

6.898407ms ago: executing program 1 (id=8104):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1a, 0xc, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
unshare(0x26020480)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0)
ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x9, 0x3, 0x2c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2a}, @loopback, 0xff000000, 0xff, 'macvlan0\x00', 'dvmrp1\x00', {0xff}, {}, 0x62, 0x0, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x40, 0x2}}}, {{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:groupadd_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r6, @ANYBLOB="24005a80200000800500040002000000140005"], 0x40}, 0x1, 0x0, 0x0, 0x24004001}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$packet(0x11, 0x2, 0x300)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x7fffffffffffffff, 0xfffffffffffffffd, 0x9}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

5.466299ms ago: executing program 3 (id=8105):
socketpair(0xef7d8a7945fd62e8, 0xa, 0xfff, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="9dc873bab95141ef72ed790813bb50b1aa0d68639b33133346226bf4a0dc7e0253d49a2c1c0f330c7001bde4c917f9ca1d14e725af6bd297db091e597a2afd4007c98c04a7bbb32a491bec1d35c291296295ef6d7b90cfd00ef1f2d06406f3ba5d4bcefc08216d964c8efa6527b3d8c41e6091744db341432c8bd40d1b8c752c2789bd8d065cfaa58bbd3b4048cd293471525c2a421af0d05ba415", 0x9b}, {&(0x7f0000000100)="e760f7e12d866b0bd1326246206a601b2a8a2d55a02c7889b878b898da74f5240442e516d6f8555d302464f037ee8d1e9b0a16799c77e3d3d3ec6d8c2c17079a51e03571bd2c2250eab9d3bc24ef758d1d61079085a43f3b01bd153eb6534044061463138f0386d297d848317cf6e5bf4677557e0c355643f53b5ef8214e3856a1251b60468fa74f06af092b564f88", 0x8f}, {&(0x7f00000001c0)="d75e3ebf8ecb962490e9", 0xa}, {&(0x7f0000000200)="12afb6ae216682752f7f32dd8965df530320920e86780c3eca7025d83601a7141ad606a4e5c75804679216b851fa5a851e574482d5de21452900ffb364423f16ad9ed3bbe721faec59330e901cc8c81cfa3b2fd47cf9e00eaca2b0a91d4126b674a195", 0x63}], 0x4)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x1, 0xfff}, 0x8)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=<r2=>0x0)
sendmsg$nfc_llcp(r0, &(0x7f0000000540)={&(0x7f0000000340)={0x27, r2, 0x1, 0x7, 0xf8, 0x7, "e20048fc1c4bee061e04cee4d468dba6aacea169df88d55fce4b4170cdccdd8be7d5ad813427b13bd8c67b3b91e3c999e995e36a04bea2871aaed1692ebd19", 0x2d}, 0x60, &(0x7f00000004c0)=[{&(0x7f00000003c0)="1ae1b814fc10dd05c738dbac46255c882f5d9401d845b72b95ea72bca3096941d8a0c611245ffcdc21f5f4d173bb396e6058048c2e4b35119ebd5b8141315e80b9e312513e156264cc80140d49628c179ad83923459b360321aa181c01fa317836700070490c560f77bce7a30cd066bef00f18ae7542f31a3b43f96081a19bc2d7eccb963a76e9489e032b92c9c1d8f1b2554b83b610e9f27d17b5950e9b40e62cf517c3f021b84a456e9424110df4da494b3f15d4afa1dabcd64ed68e997e5338a8bf43", 0xc4}], 0x1, &(0x7f0000000500)={0x40, 0x11, 0x80000000, "88e975aa36922e984a0c0f416aa07da4b7ed363ea61160dbd7d45329c4903f34d46c57bebeedd8c881"}, 0x40, 0x8000}, 0x44040)
r3 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r3, &(0x7f00000013c0)=[{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)="d48d9c7af761e3456bfeeddf7d6464a403f1840884d5fa8ed147a88a8182140a7c88f33b67b7987553bb18dc34a0766b048ae7e05a9cf0b292c7a4048f73ce96700df80957dc8fc5c89dc65a51d7ac1f05c526dd4e268200e6f1cd987d8ec84513ad4aca726dc06b0ce7af22cd3e4e91bf4e43e9f2ebcd296a086ba646dd3b2e4137ffec93b753c541e5df59590306ce571e0155b61efe6628e9da6707def0aadc0a905248b79c462003e2c5016a621691a1d91595c198136768651034cd746df0fbf5a9dd2b88d71328472fb1f3a8bff645f3", 0xd3}, {&(0x7f0000000680)="ec2fe24480fa6881bd4e6db2f1c914fc0f8b014ddba1", 0x16}, {&(0x7f00000006c0)="a7c2d58f7571935b032c5b86f0498cd6d24b97c58580f9a7b3b8b70fcef844d8248056c1c32b3239a9c0a790d1a8174dfa876ef543ab0cf0a95f3a7565a3ddc07d1e8579b958f25b5d8f34742dd8447d7c323d6694267ff978e1ef5ba6ddd52afa2b5a7fb5ac6145d19d6964d87eb0d48940fbbaf8510a5ff1603ef65ac7c9c4d9e3d008cb0ba3cc4025f0fa0061", 0x8e}, {&(0x7f0000000780)="5d406250325577e5c443418fece1143f50eb501cee8ee9ccfbb2e650a2655a15461405a4618784bd57370189dc49d10be61f04f1d4ea525f1d0dcf79ff7854aab495cc6cde569a8ac6bcb4e8c644b767ea08b18bb8796c6e03083f0b1fd3abf30564da178ba40ac6792d8396ce1822970a4301c857ae7a62c4aa0d1e4d55779adc7b2509eba2b46ad856e37065f3c26801e4e1d194c26447315c6ffc0536eaea845c2d951655f7cae8f47bfd2967d53ad250ef", 0xb3}], 0x4, &(0x7f0000000880)=[@iv={0x90, 0x117, 0x2, 0x7c, "9693db114a5798f0470806f65850d20e17a25959dcefab622fe7ff6d8ff640bae40a14972ba8ff87c8d5771690a6b1d08b48e13ce254d77ac5033ecd4c98303808c878dcdbd34062d70c6f83a4191ffc3ecc2fa0d74ea53d4520bcec23070aac6947d102bb78844d48f5a8f87e53b169c20c37284e8460db6cf253ca"}], 0x90}, {0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000940)="a58ee4b830e9765e94555f47cc2f9cb74d0914f8f77ebe", 0x17}, {&(0x7f0000000980)="05923163fac50273f89feaf545420b3fad54e362990e26a2031106ba9135890a32af53958a74bfc2fea29b954a7ff4f49b66a76f0e88af6b093cb691baca84b61cd33e66173dda61b364f68ebffd1c997870788c20f0adf6e03078d5c4ab0385d90e69eee47ee6b642edc41a04cc0a2ff28a57374763a0f1196e7fbd799a525c", 0x80}, {&(0x7f0000000a00)="08ebe530ae3a4227b468f81543aef8c9b3025870502956498b01aa50396658605cf0f889dcdc456f09af4abef5f86bae6e6c559d58f2c6dc906461de01a954706ba4741e5480e2a3d9473ce59be9f9080f24a72db5a4dfcdfea2093e4ff11bcd9a8ae8fcd7c55c9664445e2ad5e7a9a57f9748db7f72b5c0fcf51a2ad57b4f41cd907e580166545b47b114d0914448d4c050dcda", 0x94}, {&(0x7f0000000ac0)="ef06e3d32bd83b5f3a3404ff693ce81717aa1c18ba47626ab1dc71d345caa81ea68c6a34d25311a835206f86dd59209e08226f11650e7cd887262c5cf4424cbb16814638698b9c81b083acf49ba1fb450b8f6168b6cafe0791ffbdfca07dc085ef8d72b2466df49d9775849cda3bce959389a81c4fbd34d311046edfa899af1f23f9492a5d5d740a68c6b838425bd58683dea256a11a225ad35d8558cdc4af2c353f04533bfa728eff8980b6ac364839cee386bcb2b110c0f7c9c58063c9b6b0caa247d6322656cd041ca7504f2c3d6cb4441432afef1f7c63afd66d3cd3528b5fd43290", 0xe4}, {&(0x7f0000000bc0)="f0721d5c721c1be149c1307f9933", 0xe}, {&(0x7f0000000c00)="1b716e68ccfd3eab751834d41cda3ead8fa5c30b545f8e0cd998fe6127dd42fe6c725c5384ca17550a6b75009f26f6873a30f417612a83d8071debff89319addd8d1d7bd90f152181dc77a1b916aa0ad3c82ec2fcfece136b05bc4527817e080e34992d2969fb301ff9cc5ea73e97a529d1b737cbf9f205b1b390c66a6e1d39b0ca6fe3408e47784264d532dd26b91723a294248405bfea6aee3f766c3d5cded9788b6662e238b4d5c488aa5db7b288b49b7db6b0e10b17347", 0xb9}], 0x6, &(0x7f0000000d40)=[@assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x3}], 0x48, 0x40010}, {0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000dc0)="798386f7b5ef646c164780d954a860491918c1950f1ff186f0c6bc5fdf73f9ca0ee1bdd926925e9bdd9f4125c0e58cbd4de0e185bc551a7005d347bcb44cf0c1f83e5c0a7ca13db019f81099f65a582b4a26aeb94ec9a0d587cf9c06d178cf96d3df43d4fd3816d40580dcab69502fbef645ae5fcfdb4aadd5b2756e8c5ec67093d1d13c942fef2ab3761bb4e849fc0e7eb7caac1bb47f32d5532b2f0eeeb94767", 0xa1}, {&(0x7f0000000e80)="866ddfbab88a08bb7c2ddb8e288280a7955eb83b4f4419996785378b8c171428f51b60f260567e71437d52072a6896ddbdb1416fda83b98b07b47ce9cf96a000b9eb517b76cb1c3f4be3c75c765b38519f64cd964d03f1a937c1578edfbd2fd8ae5df9b98eeb87e6393eb87277ff06659a0c917e8f711bdd5fac7524f9464e0099625bebf97fc546df95202f1248b0a160e2440fab9e960bea40485573fdaa84cc938840c6d3d76364049c1dfe64f3a11eaf512cd0965bbf7063972c7dd68582ecdec0fbe37842ba624394eb771da07354976c61a6be9c4d19d11c2dfca2bbc694a3f724ec83421b", 0xe8}, {&(0x7f0000000f80)="25ff9faa693bf557cd6cb1e38d113bcdc626d3c135221b54a5285d8e5b232650e3ca40c5e4d385f710559662da9239bdcce1419f4721b1f023dcfc809b859655246cc2c870ec479477d2e139c8041513f1bb2c6733a2a8242ae92c20d5fe84731b0a2bb1d90d1f92334f11d8c23e7febabd4fb8286a5cd363827c03d1aec7f02b28c856c12cf1421ce877c82109c9f6ddbfec55b4ff040e80ca71bbbd3b9cbba86d56d8d870ca8e48970c2450c33003de6d4", 0xb2}, {&(0x7f0000001040)="1f39fb74ef506779badf70e7615263dd2029ad695fe654ded97ba615a0855ca990831b6874506faf67d0adb0453f6b95a2dd65b0c2a0d7212d5b0da2cd35f7c605b3324900e7e45c33a58f6a0dde28781cae14fdf83340f7682259ab645caa270b78a570c57c4adae8696717ecd48d0fffc3f1dc75c4635fd3f2bc24c20e15c21dea5afc913141cb2ac2f8b4128fa16e236c5fc5d6516b0dfa4c07e9f53dff5c9fdc7147eeed952111002392a885d983e722dafa7e145b2fc3b7cbdbd8d1133747edda4abe57cd54ef1a0e142e55a217e55e08857c405aa5a0230a8ecaa1ad612e2f06812405eec58defa7984395a2180031b0c29061a6", 0xf7}, {&(0x7f0000001140)="b5891c766e46725e245b558d0290effa5db4410c2cdf5becd04978e0fa9e3b116e4fa5912a113a19e23c54e6cd8d1d91ee1d14a7eaf7", 0x36}, {&(0x7f0000001180)="aad9", 0x2}, {&(0x7f00000011c0)="5cddf4a7f6934005f7fec95e2f88e6b7b74d8b20ea7dd758a94ac3dee797f2ce9d7bfb0268b763f50ba4eedbd0d097a4fc0440580f57fdc9d65ca57506213bba3e7f95e4ed72577aeebfbed554b87fc6a267de334163816a5a894b00bb2d7f5a9d47eff456ce5635121a914b48186c9da6ad7107899fa73b51f7a9def8d17ba65ddec649656abbfb9e3cc803570c707e55149b961c9db6e7bd3efe2fe020325f8eade6ef55cd9cc4c9d581e582fcdcdf3bf647775192119aa8c2a7d9625dcdf2dba0e062c4abc844c0245c9aeeb036", 0xcf}], 0x7, &(0x7f0000001340)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0x5}], 0x48, 0x4000000}], 0x3, 0x0)
recvmsg$unix(r1, &(0x7f0000002880)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000001480)=""/164, 0xa4}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/184, 0xb8}, {&(0x7f0000002600)=""/106, 0x6a}, {&(0x7f0000002680)=""/108, 0x6c}, {&(0x7f0000002700)=""/112, 0x70}, {&(0x7f0000002780)=""/55, 0x37}], 0x7, &(0x7f0000002840)=[@cred={{0x1c}}], 0x20}, 0x60)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000002980)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x30, 0x140e, 0x800, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x3}]}, 0x30}}, 0x8754fb2cc94af8e1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000002a40)={'syztnl1\x00', &(0x7f00000029c0)={'syztnl1\x00', <r4=>0x0, 0x80, 0x700, 0x0, 0x0, {{0x10, 0x4, 0x3, 0x8, 0x40, 0x67, 0x0, 0x36, 0x29, 0x0, @multicast1, @private=0xa010101, {[@rr={0x7, 0x2b, 0xaf, [@dev={0xac, 0x14, 0x14, 0x1f}, @dev={0xac, 0x14, 0x14, 0x33}, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @private=0x7ff, @rand_addr=0x64010102, @private=0xa010101, @rand_addr=0x64010102, @empty]}]}}}}})
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000002a80)={@ipv4={'\x00', '\xff\xff', @local}, 0x5, r4})
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000002ac0)=0x8, 0x4)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000002b00), &(0x7f0000002b40)=0x4)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002b80)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002c00), r0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000002d00)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c40)={0x4c, r6, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x43}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x26, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_b, @from_mac, {0x2, 0x9}, @value=@ver_80211n={0x0, 0x81, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x5, 0x74, 0xa}, @void}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x8000)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000002d40)={<r7=>0x0, 0x5}, &(0x7f0000002d80)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000002dc0)={r7, @in={{0x2, 0x4e21, @broadcast}}, 0x7f, 0xf6}, &(0x7f0000002e80)=0x90)
openat$cgroup_subtree(r5, &(0x7f0000002ec0), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002f40)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000003000)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002f80)={0x34, r6, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x40008)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000003040)={r7, 0xa, 0x1, 0x80000000, 0x8, 0x5}, &(0x7f0000003080)=0x14)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000003100), 0xffffffffffffffff)
sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f00000031c0)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003180)={&(0x7f0000003140)={0x24, r9, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x24}}, 0x2004c001)
sendmsg$nl_route(r0, &(0x7f0000003300)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x10000200}, 0xc, &(0x7f00000032c0)={&(0x7f0000003240)=@newnexthop={0x54, 0x68, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x1, 0x0, 0x22}, [@NHA_GROUP_TYPE={0x6}, @NHA_ENCAP_TYPE={0x6, 0x7, 0xc}, @NHA_GATEWAY={0x14, 0x6, @ip4=@empty}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x9}}, @NHA_FDB={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4050)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003380), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000003440)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003400)={&(0x7f00000033c0)={0x24, r10, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000)
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000003480)=0xd)

1.138066ms ago: executing program 3 (id=8106):
r0 = socket(0xa, 0x3, 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x78, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8100}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bond={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_PEER_NOTIF_DELAY={0x8}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x400}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x4}]}}}, @IFLA_VF_PORTS={0x1c, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x11, 0x2, '/dev/net/tun\x00'}]}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x5d26}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c)
bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendto$inet6(r4, 0x0, 0xffffffffffffff69, 0x44854, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000010c0)=@newqdisc={0x144, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x118, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x7, 0x5, 0x6}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x6}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x144}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x6, 0x0, &(0x7f0000000840))
syz_extract_tcp_res(&(0x7f00000000c0)={<r8=>0x41424344}, 0x9f, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCGIFCONF(r10, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'dummy0\x00', @ifru_addrs=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}})
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
socket(0x26, 0x800, 0x4)
write$tun(r9, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x4, 0x4, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa, 0x4}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x4e)
syz_emit_ethernet(0xa2, &(0x7f0000000300)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x880c, 0x41424344, r8, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x6, 0xa8}, @sack={0x5, 0x16, [0x4, 0x3, 0x2, 0x2a, 0x9]}, @generic={0x4, 0x11, "289b5ee8a2a0a46a43a15379ff9522"}, @sack_perm={0x4, 0x2}, @generic={0x5, 0x8, "72ff1cac374c"}, @exp_fastopen={0xfe, 0x6, 0xf989, "170c"}, @exp_fastopen={0xfe, 0x14, 0xf989, "b7db361e33acec3092505a4accb8c170"}, @generic={0x2, 0x6, "2d3bb320"}, @exp_smc={0xfe, 0x6}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x7, @broadcast, 0x40}]}}}}}}}, 0x0)

759.956µs ago: executing program 1 (id=8107):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x0, 0x8, 0x7}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket(0x1e, 0x5, 0x0)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r4, 0x107, 0xc, &(0x7f0000000040), 0x4)
setsockopt$rose(r3, 0x104, 0x3, &(0x7f0000000000)=0xffffffff, 0x4)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r7, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x56}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2b6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c084}, 0x4000)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0)
r9 = socket$inet(0x10, 0x2, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280))
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', <r10=>0x0})
r11 = socket$isdn_base(0x22, 0x2, 0x10)
ioctl$IMGETVERSION(r11, 0x80044942, &(0x7f0000000040))
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd28, 0x0, {0x0, 0x0, 0x12, r10, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x28)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r14}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94)
r15 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r15, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d42400000000000000290000003b000000", 0xfe60)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1f, 0x4, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r14, 0x2, 0x1}, 0x50)
r16 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r13)
ioctl$sock_SIOCGIFINDEX_80211(r16, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})

0s ago: executing program 4 (id=8108):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$cgroup_type(r0, &(0x7f0000000000), 0x9)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000300)={&(0x7f0000000140)=""/205, 0xcd, <r1=>0x0, &(0x7f0000000240)=""/180, 0xb4}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c3100004a1000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e62367581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0xffffffffffffff45)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000005000000020000000400000000000000", @ANYRES32, @ANYBLOB="00001200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b80)={{r2}, &(0x7f0000000940), &(0x7f0000000b40)='%pK    \x00'}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4)
sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x17, 0x0, 0x0, 0x0, 0x6a, 0x4004884}, 0x2000408c)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r8 = socket(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYRESOCT=r8, @ANYRES16=r4, @ANYRESDEC, @ANYRES32, @ANYRES8=r3, @ANYBLOB="295e00cd0415516fe9d388479de3c619e9d8a2ae36975ba706015bc40b273f0afa0f27e6fbbbe5166072e1fd9de9fa22b1ff9900dfa00f6367dff899306fdb6a32fcbb6336c152d2aca2cb2b3eedf9915f79", @ANYRESDEC=r8], 0x48)
r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='blkio.bfq.dequeue\x00', 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r10)
r11 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r11, 0x8948, &(0x7f0000000200)={'bond0\x00', 0x10000})
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000a40)=ANY=[@ANYBLOB="18eeff000000007e5827b56f3c0c000000000000", @ANYRES32=r2, @ANYBLOB="e563c5dabb465f5b6025ae2a97648a9eb41a3bee1d50df7c326971e91c6c2a3a16f42e4a653b0fb0a680ebbe936c3e4b17b6d68c03f07859a4faafa5a5ea348c3147c69d7c7112ab646c010e630eb2b1ca529e7271fa77ced40273710fe0616b"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000005c0)={'gretap0\x00', 0x0, 0x8, 0x700, 0x8001, 0x5, {{0x2e, 0x4, 0x0, 0x3a, 0xb8, 0x64, 0x0, 0x3, 0x2, 0x0, @multicast1, @broadcast, {[@timestamp_addr={0x44, 0x3c, 0x75, 0x1, 0x7, [{@empty, 0xe}, {@broadcast, 0x5b}, {@private=0xa010101, 0x5}, {@multicast1, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty, 0xfffffffe}, {@multicast1, 0xa00}]}, @end, @rr={0x7, 0x13, 0xe4, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @local]}, @generic={0x82, 0x3, 'v'}, @timestamp_addr={0x44, 0x34, 0x8b, 0x1, 0xc, [{@multicast1, 0x4}, {@rand_addr=0x64010102, 0x6}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x3}, {@multicast2, 0x5}, {@loopback, 0x149fea77}]}, @ssrr={0x89, 0x17, 0x5b, [@private=0xa010102, @multicast1, @remote, @multicast2, @remote]}, @ra={0x94, 0x4, 0x1}]}}}}})
r12 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r12, 0x20, &(0x7f0000000100)={0x0, 0x0, <r13=>0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r13, 0x4)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f00000007c0)={<r14=>r6, 0x7f, 0xffffffff00000000, 0x2})
mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000002, 0x4000010, r14, 0x0)

kernel console output (not intermixed with test programs):

15630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  262.552140][T15651] syzkaller1: entered promiscuous mode
[  262.554161][T15651] syzkaller1: entered allmulticast mode
[  262.962111][T15684] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3037'.
[  263.605027][T15744] syz_tun: left promiscuous mode
[  263.739214][T15757] syzkaller0: entered promiscuous mode
[  263.741087][T15757] syzkaller0: entered allmulticast mode
[  263.803967][T15768] syzkaller0: entered promiscuous mode
[  263.806032][T15768] syzkaller0: entered allmulticast mode
[  263.839182][T15776] IPVS: set_ctl: invalid protocol: 94 100.1.1.2:20000
[  264.754075][T15792] syzkaller0: entered promiscuous mode
[  264.756062][T15792] syzkaller0: entered allmulticast mode
[  265.751941][T15821] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3080'.
[  265.757934][T15826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3082'.
[  265.802465][T15830] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3083'.
[  266.024906][T15864] netlink: 'syz.4.3094': attribute type 2 has an invalid length.
[  266.027536][T15864] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3094'.
[  266.029868][T15863] syzkaller1: entered promiscuous mode
[  266.032501][T15863] syzkaller1: entered allmulticast mode
[  266.118778][T15866] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  266.286650][T15888] netlink: 'syz.1.3103': attribute type 13 has an invalid length.
[  266.288841][T15890] net_ratelimit: 8 callbacks suppressed
[  266.288850][T15890] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  266.296909][T15890] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3104'.
[  266.440119][T15902] syzkaller0: entered promiscuous mode
[  266.441940][T15902] syzkaller0: entered allmulticast mode
[  266.683210][T15935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3118'.
[  266.704891][T15936] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  266.714156][T15936] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.764104][T15936] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  266.769058][T15936] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.848077][T15936] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  266.851606][T15936] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.919603][T15936] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  266.923140][T15936] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.975604][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  266.978643][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  266.986917][ T5849] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  266.989607][ T5849] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  266.998631][   T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  267.001478][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  267.009121][   T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  267.014421][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  267.119884][T15964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3130'.
[  267.214604][T15974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3134'.
[  267.219782][T15974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3134'.
[  267.223012][T15974] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3134'.
[  267.744911][T16031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3155'.
[  267.747945][T16031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3155'.
[  267.750950][T16031] netlink: 'syz.1.3155': attribute type 5 has an invalid length.
[  267.753517][T16031] netlink: 'syz.1.3155': attribute type 6 has an invalid length.
[  267.890034][T16040] bond0: (slave wlan1): Releasing backup interface
[  267.935571][T16043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3158'.
[  268.358197][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  269.487908][T16130] netlink: 'syz.1.3182': attribute type 32 has an invalid length.
[  269.493359][T16132] netlink: 'syz.1.3182': attribute type 32 has an invalid length.
[  270.880415][T16190] ieee802154 phy0 wpan0: encryption failed: -22
[  270.933480][T16194] bridge0: port 3(ipvlan2) entered blocking state
[  270.937045][T16194] bridge0: port 3(ipvlan2) entered disabled state
[  270.939268][T16194] ipvlan2: entered allmulticast mode
[  270.941035][T16194] bridge0: entered allmulticast mode
[  270.943859][T16194] ipvlan2: left allmulticast mode
[  270.945492][T16194] bridge0: left allmulticast mode
[  270.954977][T16197] netlink: 'syz.3.3205': attribute type 12 has an invalid length.
[  270.957835][T16197] netlink: 'syz.3.3205': attribute type 29 has an invalid length.
[  270.960468][T16197] netlink: 'syz.3.3205': attribute type 2 has an invalid length.
[  270.963181][T16197] netlink: 'syz.3.3205': attribute type 12 has an invalid length.
[  271.346867][ T5871] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  271.487607][T16275] __nla_validate_parse: 135 callbacks suppressed
[  271.487623][T16275] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3232'.
[  271.494576][T16274] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3232'.
[  272.186200][T16290] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3236'.
[  272.661041][T16371] wg1: entered promiscuous mode
[  272.662742][T16371] wg1: entered allmulticast mode
[  272.688579][T16375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3266'.
[  272.761547][T16385] Can't find ip_set type bitmap:ip,mac
[  272.887073][T16402] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3275'.
[  272.960807][T16408] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.017987][T16408] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.023171][T16414] validate_nla: 191 callbacks suppressed
[  273.023179][T16414] netlink: 'syz.4.3274': attribute type 5 has an invalid length.
[  273.071977][T16408] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.133981][T16408] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.217142][T12592] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  273.225753][T12592] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  273.241965][T12592] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  273.245201][T12592] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  273.359725][T16444] bond0: Error: Cannot enslave bond to itself.
[  273.779399][T16457] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3294'.
[  273.791768][T16457] bond0: (slave v): Releasing backup interface
[  273.793848][T16457] bond0: (slave v): the permanent HWaddr of slave - aa:aa:aa:aa:aa:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  273.898594][T16473] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3300'.
[  273.958791][T16480] syzkaller0: entered promiscuous mode
[  273.960669][T16480] syzkaller0: entered allmulticast mode
[  274.052486][T16483] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3303'.
[  274.215534][T16486] netlink: 'syz.3.3304': attribute type 1 has an invalid length.
[  274.218450][T16486] netlink: 'syz.3.3304': attribute type 11 has an invalid length.
[  274.221233][T16486] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3304'.
[  275.994704][T16576] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3331'.
[  276.170533][T16609] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  276.613104][T16690] __nla_validate_parse: 1 callbacks suppressed
[  276.613115][T16690] netlink: 364 bytes leftover after parsing attributes in process `syz.1.3374'.
[  276.620808][T16690] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  276.745209][T16703] netlink: 'syz.3.3379': attribute type 11 has an invalid length.
[  276.749483][T16707] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3381'.
[  276.752495][T16707] netem: invalid attributes len -16
[  276.754237][T16707] netem: change failed
[  276.754930][T16703] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3379'.
[  276.760916][T16703] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3379'.
[  277.117471][T16771] 8021q: adding VLAN 0 to HW filter on device bond8
[  277.120622][T16771] bridge0: port 1(bond8) entered blocking state
[  277.125667][T16771] bridge0: port 1(bond8) entered disabled state
[  277.130694][T16771] bond8: entered allmulticast mode
[  277.133955][T16771] bond8: entered promiscuous mode
[  277.206012][T16781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3401'.
[  277.218085][T16784] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3403'.
[  277.252033][T16776] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3401'.
[  277.334965][T16802] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  277.599747][T16846] netlink: 'syz.1.3415': attribute type 5 has an invalid length.
[  279.027957][T16900] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3437'.
[  279.168604][T16930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3447'.
[  279.324541][T16960] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  279.336194][T16961] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3458'.
[  279.347316][T16964] netlink: 'syz.4.3459': attribute type 1 has an invalid length.
[  279.349832][T16964] netlink: 'syz.4.3459': attribute type 2 has an invalid length.
[  279.373675][T16960] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  279.384265][T16960] syzkaller0: entered promiscuous mode
[  279.388059][T16960] syzkaller0: entered allmulticast mode
[  279.410061][T16960] tipc: Resetting bearer <eth:syzkaller0>
[  279.415325][T16957] tipc: Resetting bearer <eth:syzkaller0>
[  279.429843][T16957] tipc: Disabling bearer <eth:syzkaller0>
[  279.438896][T16969] netlink: 'syz.4.3461': attribute type 1 has an invalid length.
[  279.441488][T16970] netlink: 'syz.4.3461': attribute type 1 has an invalid length.
[  279.607550][T16998] vlan0: entered promiscuous mode
[  279.609260][T16998] bond0: entered promiscuous mode
[  279.610915][T16998] bond_slave_0: entered promiscuous mode
[  279.613561][T16998] bond_slave_1: entered promiscuous mode
[  279.615591][T16998] syz_tun: entered promiscuous mode
[  279.618561][T16998] vlan0: entered allmulticast mode
[  279.621706][T16998] bond0: entered allmulticast mode
[  279.623473][T16998] bond_slave_0: entered allmulticast mode
[  279.631529][T16998] bond_slave_1: entered allmulticast mode
[  279.637431][T16998] syz_tun: entered allmulticast mode
[  280.738307][T17093] netlink: 'syz.4.3501': attribute type 31 has an invalid length.
[  280.859102][T17110] sctp: [Deprecated]: syz.4.3506 (pid 17110) Use of int in max_burst socket option.
[  280.859102][T17110] Use struct sctp_assoc_value instead
[  281.384461][T17126] veth0: entered promiscuous mode
[  282.548101][T17130] syzkaller1: entered promiscuous mode
[  282.549925][T17130] syzkaller1: entered allmulticast mode
[  282.759763][T17183] syzkaller1: entered promiscuous mode
[  282.761815][T17183] syzkaller1: entered allmulticast mode
[  282.773179][T17182] tipc: Started in network mode
[  282.774962][T17182] tipc: Node identity d6b3b6157fe3, cluster identity 4711
[  282.780155][T17182] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  282.782818][T17182] syzkaller0: entered promiscuous mode
[  282.784572][T17182] syzkaller0: entered allmulticast mode
[  282.799759][T17182] tipc: Resetting bearer <eth:syzkaller0>
[  282.803442][T17182] __nla_validate_parse: 4 callbacks suppressed
[  282.803451][T17182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3528'.
[  282.821472][T17182] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3528'.
[  282.826622][T17181] tipc: Resetting bearer <eth:syzkaller0>
[  282.835263][T17181] tipc: Disabling bearer <eth:syzkaller0>
[  282.920288][T17192] openvswitch: netlink: Tunnel attr 0 has unexpected len 4 expected 8
[  283.063689][T17203] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3536'.
[  283.069220][T17203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3536'.
[  283.229726][T17222] netlink: 388 bytes leftover after parsing attributes in process `syz.4.3542'.
[  283.323668][T17227] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  283.474709][   T33] audit: type=1804 audit(1754587667.799:3): pid=17251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3551" name="/newroot/672/cgroup.controllers" dev="tmpfs" ino=3599 res=1 errno=0
[  283.483262][   T33] audit: type=1800 audit(1754587667.799:4): pid=17251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3551" name="cgroup.controllers" dev="tmpfs" ino=3599 res=0 errno=0
[  283.588357][T17276] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3557'.
[  283.591424][T17276] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3557'.
[  283.769727][T17295] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  283.850525][T17309] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3568'.
[  283.930404][T17316] mac80211_hwsim hwsim11 ": renamed from wlan0 (while UP)
[  283.941161][T17316] netlink: 'syz.3.3571': attribute type 1 has an invalid length.
[  283.943846][T17316] netlink: 'syz.3.3571': attribute type 2 has an invalid length.
[  283.949814][T17316] netlink: 'syz.3.3571': attribute type 8 has an invalid length.
[  283.952468][T17316] netlink: 1148 bytes leftover after parsing attributes in process `syz.3.3571'.
[  284.114083][T17320] syzkaller0: entered promiscuous mode
[  284.117189][T17320] syzkaller0: entered allmulticast mode
[  284.263832][T17337] IPVS: set_ctl: invalid protocol: 12 10.1.1.1:20000
[  284.368894][T17348] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  284.372912][T17348] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  284.411531][T17356] netlink: 'syz.3.3584': attribute type 1 has an invalid length.
[  284.465522][T17362] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20002
[  284.470599][T17362] sctp: [Deprecated]: syz.1.3587 (pid 17362) Use of struct sctp_assoc_value in delayed_ack socket option.
[  284.470599][T17362] Use struct sctp_sack_info instead
[  284.504686][T17364] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3588'.
[  284.884067][T17395] tipc: Can't bind to reserved service type 2
[  285.858904][T17426] IPVS: set_ctl: invalid protocol: 33 172.30.1.2:20002
[  285.895191][T17431] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  286.168837][T17451] syzkaller1: entered promiscuous mode
[  286.171001][T17451] syzkaller1: entered allmulticast mode
[  286.358089][T17467] nbd: must specify at least one socket
[  286.803631][T17522] netlink: 'syz.4.3638': attribute type 2 has an invalid length.
[  287.413931][T17601] netlink: 'syz.1.3664': attribute type 21 has an invalid length.
[  288.298154][T17626] __nla_validate_parse: 12 callbacks suppressed
[  288.298165][T17626] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3669'.
[  288.303931][T17626] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3669'.
[  288.565463][T17645] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  288.913276][T17664] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3682'.
[  288.949270][T17670] netlink: 'syz.1.3683': attribute type 1 has an invalid length.
[  288.964857][T17670] 8021q: adding VLAN 0 to HW filter on device bond9
[  288.978377][T17670] bond9: (slave ip6erspan0): making interface the new active one
[  288.981934][T17670] bond9: (slave ip6erspan0): Enslaving as an active interface with an up link
[  289.012597][T17673] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3684'.
[  289.018390][T17674] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3684'.
[  289.296545][T17712] netlink: 'syz.1.3694': attribute type 4 has an invalid length.
[  289.299364][T17711] netlink: 'syz.1.3694': attribute type 4 has an invalid length.
[  289.462372][T17730] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3699'.
[  289.811174][T17748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3704'.
[  289.820326][T17748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3704'.
[  289.902532][T17751] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  290.107865][T17708] delete_channel: no stack
[  290.203327][T17787] syzkaller0: entered promiscuous mode
[  290.207097][T17787] syzkaller0: entered allmulticast mode
[  290.299593][T17797] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3716'.
[  290.487126][T17801] IPv6: Can't replace route, no match found
[  291.462414][T17845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3732'.
[  291.705160][T17879] batadv0: entered promiscuous mode
[  291.708752][T17879] macsec2: entered allmulticast mode
[  291.712237][T17879] batadv0: entered allmulticast mode
[  291.745125][T17889] lo: entered allmulticast mode
[  291.748332][T17889] netlink: 'syz.3.3748': attribute type 1 has an invalid length.
[  291.763159][T17889] lo: left allmulticast mode
[  292.319583][T17956] netlink: 'syz.1.3772': attribute type 11 has an invalid length.
[  292.778650][T17995] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  293.296027][ T5821] Bluetooth: hci2: command 0x0406 tx timeout
[  293.740930][T18028] __nla_validate_parse: 14 callbacks suppressed
[  293.740939][T18028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3795'.
[  294.602011][T18060] netlink: 'syz.4.3803': attribute type 9 has an invalid length.
[  294.604437][T18060] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3803'.
[  294.792103][T18090] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3812'.
[  294.958490][T18107] syzkaller0: entered promiscuous mode
[  294.960441][T18107] syzkaller0: entered allmulticast mode
[  295.897731][T18133] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3822'.
[  295.935372][T18139] netlink: del zone limit has 8 unknown bytes
[  295.963547][T18136] syzkaller0: entered promiscuous mode
[  295.965674][T18136] syzkaller0: entered allmulticast mode
[  296.164984][T18159] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3832'.
[  296.880249][T18147] veth1_to_bond: entered allmulticast mode
[  296.882514][T18147] veth1_to_bond: left allmulticast mode
[  297.129376][T18196] pim6reg1: entered promiscuous mode
[  297.131331][T18196] pim6reg1: entered allmulticast mode
[  297.208235][T18205] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3844'.
[  297.285639][T18212] netlink: 14281 bytes leftover after parsing attributes in process `syz.1.3847'.
[  297.322004][T18216] netlink: 'syz.1.3848': attribute type 21 has an invalid length.
[  297.653484][T18249] nft_compat: unsupported protocol 0
[  297.767506][T18251] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  297.770859][T18251] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  298.530370][T18289] IPv6: sit2: Disabled Multicast RS
[  298.532713][T18289] sit2: entered allmulticast mode
[  299.135964][T18354] netlink: 'syz.4.3892': attribute type 1 has an invalid length.
[  299.316199][T18377] macsec2: entered promiscuous mode
[  299.338098][T18378] netlink: 'syz.1.3899': attribute type 1 has an invalid length.
[  299.340789][T18378] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3899'.
[  299.343834][T18378] NCSI netlink: No device for ifindex 0
[  299.419015][T18387] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3903'.
[  299.422626][T18391] syzkaller0: entered allmulticast mode
[  299.442904][T18389] syzkaller0: left allmulticast mode
[  299.461552][T18399] netlink: 'syz.4.3906': attribute type 4 has an invalid length.
[  299.464497][T18398] netlink: 'syz.4.3906': attribute type 4 has an invalid length.
[  299.508487][T18402] syzkaller1: entered promiscuous mode
[  299.510504][T18402] syzkaller1: entered allmulticast mode
[  299.579655][T18405] syzkaller0: entered promiscuous mode
[  299.581467][T18405] syzkaller0: entered allmulticast mode
[  299.662713][T18413] netlink: 212264 bytes leftover after parsing attributes in process `syz.4.3912'.
[  300.532442][T18428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3917'.
[  300.535308][T18428] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3917'.
[  300.609472][T18441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3921'.
[  300.616072][T18435] nbd0: detected capacity change from 0 to 127
[  300.621090][T18439] block nbd0: Receive control failed (result -32)
[  300.621852][T18314] block nbd0: Send control failed (result -32)
[  300.627501][T18314] block nbd0: Request send failed, requeueing
[  300.632512][   T97] block nbd0: Dead connection, failed to find a fallback
[  300.635075][   T97] block nbd0: shutting down sockets
[  300.635163][T18314] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  300.638346][   T97] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  300.642202][T18314] Buffer I/O error on dev nbd0, logical block 1, async page read
[  300.643735][   T97] Buffer I/O error on dev nbd0, logical block 0, async page read
[  300.646698][T18314] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  300.656832][T18314] Buffer I/O error on dev nbd0, logical block 2, async page read
[  300.665699][T18314] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  300.669128][T18314] Buffer I/O error on dev nbd0, logical block 3, async page read
[  300.671973][T18314] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  300.675240][T18314] Buffer I/O error on dev nbd0, logical block 0, async page read
[  300.678101][T18314] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  300.681298][T18314] Buffer I/O error on dev nbd0, logical block 1, async page read
[  300.684398][T18314] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  300.695849][T18314] Buffer I/O error on dev nbd0, logical block 2, async page read
[  300.698661][T18314] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  300.701803][T18314] Buffer I/O error on dev nbd0, logical block 3, async page read
[  300.704474][T18314] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  300.709365][T18314] Buffer I/O error on dev nbd0, logical block 0, async page read
[  300.712122][T18314] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  300.715536][T18314] Buffer I/O error on dev nbd0, logical block 1, async page read
[  300.719453][T18314] ldm_validate_partition_table(): Disk read failed.
[  300.722880][T18314] Dev nbd0: unable to read RDB block 0
[  300.726486][T18314]  nbd0: unable to read partition table
[  300.738303][T18314] ldm_validate_partition_table(): Disk read failed.
[  300.742011][T18314] Dev nbd0: unable to read RDB block 0
[  300.745090][T18314]  nbd0: unable to read partition table
[  300.833306][T18457] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  300.836605][T18457] syzkaller0: entered promiscuous mode
[  300.838497][T18457] syzkaller0: entered allmulticast mode
[  300.842179][T18457] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  300.851855][T18457] tipc: Resetting bearer <eth:syzkaller0>
[  300.912318][T18465] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3929'.
[  301.394928][T18503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3942'.
[  301.476900][T18508] vlan0: entered promiscuous mode
[  301.710116][T18521] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3949'.
[  301.799022][T18532] netlink: 'syz.4.3953': attribute type 39 has an invalid length.
[  301.821024][T18534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3954'.
[  301.824118][T18534] netlink: 'syz.3.3954': attribute type 30 has an invalid length.
[  301.830801][T12592] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  301.830839][T18534] netlink: 'syz.3.3954': attribute type 30 has an invalid length.
[  301.833639][T12592] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  301.836525][   T24] tipc: Node number set to 2840638997
[  301.839784][T12592] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  301.848388][T12592] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  301.975941][T18537] block nbd1: server does not support multiple connections per device.
[  301.979616][T18537] block nbd1: shutting down sockets
[  302.289015][T18568] gretap1: entered promiscuous mode
[  302.560766][T18608] syzkaller0: entered promiscuous mode
[  302.562675][T18608] syzkaller0: entered allmulticast mode
[  303.501744][T18626] tipc: New replicast peer: 255.255.255.255
[  303.504995][T18626] tipc: Enabled bearer <udp:syz2>, priority 26
[  303.943884][ T5884] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[  304.090548][T18703] syz.4.4006 (18703) used greatest stack depth: 17464 bytes left
[  304.603859][T18750] __nla_validate_parse: 11 callbacks suppressed
[  304.603869][T18750] netlink: 788 bytes leftover after parsing attributes in process `syz.1.4022'.
[  304.644948][T18756] netlink: 'syz.4.4023': attribute type 3 has an invalid length.
[  304.656977][T18756] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  304.663951][T18756] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  305.687950][T18794] netlink: 'syz.3.4036': attribute type 30 has an invalid length.
[  305.958498][T18803] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4040'.
[  305.961813][T18803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4040'.
[  306.332264][T18845] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4056'.
[  306.335271][T18845] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4056'.
[  306.510786][T18863] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4063'.
[  306.654328][T18887] veth0_to_bond: entered allmulticast mode
[  306.797487][T18898] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.958845][T18916] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4082'.
[  307.594585][T18933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4088'.
[  307.619250][T18935] netlink: 'syz.3.4089': attribute type 1 has an invalid length.
[  307.621990][T18935] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4089'.
[  307.625110][T18935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4089'.
[  308.219273][T19025] netlink: 'syz.1.4118': attribute type 1 has an invalid length.
[  308.553546][T19078] syzkaller0: Caught tx_queue_len zero misconfig
[  308.598998][T19084] netlink: 'syz.1.4135': attribute type 3 has an invalid length.
[  308.607304][T19084] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  308.609785][T19084] IPv6: NLM_F_CREATE should be set when creating new route
[  308.612288][T19084] IPv6: NLM_F_CREATE should be set when creating new route
[  308.880523][T19117] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[  309.074717][T19146] netlink: 'syz.3.4158': attribute type 4 has an invalid length.
[  310.751445][T19216] netlink: 'syz.3.4180': attribute type 2 has an invalid length.
[  310.754108][T19216] __nla_validate_parse: 10 callbacks suppressed
[  310.754115][T19216] netlink: 1184 bytes leftover after parsing attributes in process `syz.3.4180'.
[  310.794733][T19222] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  310.889103][T19236] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4187'.
[  310.892210][T19236] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4187'.
[  310.895468][T19236] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4187'.
[  310.900303][T19236] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4187'.
[  310.950530][T19245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4190'.
[  311.774643][T19298] sctp: [Deprecated]: syz.4.4208 (pid 19298) Use of int in max_burst socket option deprecated.
[  311.774643][T19298] Use struct sctp_assoc_value instead
[  311.943511][T19318] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4216'.
[  311.970016][T19320] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4217'.
[  312.838937][T19350] pim6reg: entered allmulticast mode
[  312.841989][T19350] pim6reg: left allmulticast mode
[  313.021749][T19360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4231'.
[  313.024889][T19360] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4231'.
[  313.537122][ T5825] Bluetooth: hci1: command 0x0401 tx timeout
[  314.078298][T19421] netlink: 'syz.3.4249': attribute type 1 has an invalid length.
[  314.080985][T19421] NCSI netlink: No device for ifindex 813332851
[  314.204531][T19434] tipc: Failed to remove unknown binding: 66,1,1/2840638997:1082046566/1082046568
[  314.209466][T19434] tipc: Failed to remove unknown binding: 66,1,1/2840638997:1082046566/1082046568
[  314.227885][T19436] netlink: 'syz.3.4254': attribute type 1 has an invalid length.
[  314.318783][T19452] ieee802154 phy0 wpan0: encryption failed: -126
[  314.370078][T19459] syzkaller1: entered allmulticast mode
[  314.831833][T19537] syzkaller0: entered promiscuous mode
[  314.833690][T19537] syzkaller0: entered allmulticast mode
[  314.902193][T19542] mac80211_hwsim hwsim13 ": renamed from wlan0 (while UP)
[  316.085651][T19579] __nla_validate_parse: 5 callbacks suppressed
[  316.085663][T19579] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4301'.
[  316.235440][T19601] netlink: 'syz.3.4307': attribute type 4 has an invalid length.
[  316.238746][T19601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4307'.
[  316.582140][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  316.584231][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  317.293329][T19663] syzkaller1: entered promiscuous mode
[  317.296889][T19663] syzkaller1: entered allmulticast mode
[  317.418770][T19667] tipc: Started in network mode
[  317.420585][T19667] tipc: Node identity 4649f1dcf433, cluster identity 4711
[  317.422984][T19667] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  317.426923][T19667] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  317.430599][T19668] syzkaller0: entered promiscuous mode
[  317.432906][T19668] syzkaller0: entered allmulticast mode
[  317.439166][T19669] tipc: Resetting bearer <eth:syzkaller0>
[  317.462839][T19669] tipc: Resetting bearer <eth:syzkaller0>
[  317.473587][T19669] tipc: Disabling bearer <eth:syzkaller0>
[  317.625176][T19692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4334'.
[  318.515660][T19692] kthread_run failed with err -4
[  318.588991][T19709] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4337'.
[  318.592703][T19709] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4337'.
[  318.596539][T19709] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4337'.
[  318.771518][T19732] nbd: must specify a device to reconfigure
[  319.857007][T19814] IPVS: Unknown mcast interface: dvmrp0
[  320.031126][T19829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4378'.
[  320.037611][T19827] Bluetooth: MGMT ver 1.23
[  320.045134][T19827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4377'.
[  320.122018][T19835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4381'.
[  320.369669][T19873] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4391'.
[  320.751867][T19911] netlink: 'syz.3.4405': attribute type 1 has an invalid length.
[  321.466283][T19937] __nla_validate_parse: 3 callbacks suppressed
[  321.466294][T19937] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.4413'.
[  321.472342][T19937] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  321.474987][T19937] openvswitch: netlink: Duplicate key (type 0).
[  321.590742][T19946] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  321.979030][T19991] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4431'.
[  322.198296][T20014] syzkaller0: entered promiscuous mode
[  322.200167][T20014] syzkaller0: entered allmulticast mode
[  323.489200][T20047] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4451'.
[  323.571740][T20060] vlan0: entered promiscuous mode
[  323.573685][T20060] vlan0: entered allmulticast mode
[  323.575464][T20060] hsr_slave_1: entered allmulticast mode
[  323.595739][T20060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4455'.
[  323.797828][T20086] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4463'.
[  323.803190][T20083] can: request_module (can-proto-4) failed.
[  323.943210][T20100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4468'.
[  324.018488][T20103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4470'.
[  324.090916][T20121] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4475'.
[  324.093710][T20122] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4475'.
[  324.098693][T20121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4475'.
[  324.232094][T20126] sctp: [Deprecated]: syz.1.4476 (pid 20126) Use of int in max_burst socket option deprecated.
[  324.232094][T20126] Use struct sctp_assoc_value instead
[  324.713934][   T33] audit: type=1800 audit(1754587709.039:5): pid=20188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4494" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=5633 res=0 errno=0
[  324.749520][T20193] netlink: 'syz.3.4495': attribute type 7 has an invalid length.
[  324.754467][T20193] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  325.333382][T20249] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  325.537624][T12592] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  325.613041][T20298] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  325.615564][T20298] IPv6: NLM_F_CREATE should be set when creating new route
[  325.894474][T20327] netlink: 'syz.1.4536': attribute type 1 has an invalid length.
[  325.915071][T20327] bond10: (slave gretap1): making interface the new active one
[  325.919565][T20327] bond10: (slave gretap1): Enslaving as an active interface with an up link
[  325.929428][T20327] 8021q: adding VLAN 0 to HW filter on device bond10
[  326.200531][T20358] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  326.203296][T20358] syzkaller0: entered promiscuous mode
[  326.205091][T20358] syzkaller0: entered allmulticast mode
[  326.216623][T20358] tipc: Resetting bearer <eth:syzkaller0>
[  326.228887][T20358] tipc: Resetting bearer <eth:syzkaller0>
[  326.237632][T20358] tipc: Disabling bearer <eth:syzkaller0>
[  326.597162][T20392] __nla_validate_parse: 14 callbacks suppressed
[  326.597173][T20392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4555'.
[  326.604196][T20392] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4555'.
[  326.794034][T20418] nbd: must specify at least one socket
[  326.837253][T20423] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4562'.
[  326.848371][T20421] netlink: 'syz.3.4564': attribute type 1 has an invalid length.
[  326.949087][T20437] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  326.951417][T20438] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4567'.
[  326.954820][T20438] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4567'.
[  327.376518][ T5821] Bluetooth: hci0: command tx timeout
[  328.892075][T20508] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  328.931146][T20531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4595'.
[  328.934132][T20531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4595'.
[  328.938854][T20531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4595'.
[  328.941908][T20531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4595'.
[  328.945023][T20531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4595'.
[  328.988544][T20541] netlink: 'syz.1.4598': attribute type 4 has an invalid length.
[  329.150094][T20556] netlink: 'syz.1.4603': attribute type 10 has an invalid length.
[  329.152710][T20556] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  329.210704][T20566] netlink: 'syz.4.4605': attribute type 20 has an invalid length.
[  329.215084][T20567] netlink: 'syz.4.4605': attribute type 20 has an invalid length.
[  329.315543][T20581] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  329.734581][T20648] Bluetooth: MGMT ver 1.23
[  330.799679][T20704] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  330.802119][T20704] IPv6: NLM_F_CREATE should be set when creating new route
[  330.804472][T20704] IPv6: NLM_F_CREATE should be set when creating new route
[  330.998794][T20742] policy can only be matched on NF_INET_PRE_ROUTING
[  330.998806][T20742] unable to load match
[  331.173429][T20778] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  331.195515][T20779] tipc: Disabling bearer <eth:syzkaller0>
[  331.332706][T20802] netlink: 'syz.4.4679': attribute type 101 has an invalid length.
[  331.443961][T20817] netlink: 'syz.1.4680': attribute type 5 has an invalid length.
[  331.623535][T20830] DL<Y: renamed from lo
[  331.695723][   T33] audit: type=1800 audit(1754587716.019:6): pid=20838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4692" name="memory.events" dev="tmpfs" ino=5452 res=0 errno=0
[  332.184220][T20842] netlink: 'syz.1.4693': attribute type 1 has an invalid length.
[  332.188394][T20842] __nla_validate_parse: 40 callbacks suppressed
[  332.188403][T20842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4693'.
[  332.193475][T20842] netlink: 45 bytes leftover after parsing attributes in process `syz.1.4693'.
[  332.222038][T20845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4694'.
[  332.291046][T20853] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4696'.
[  332.536978][T20875] IPv6: Can't replace route, no match found
[  333.633059][T20920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4715'.
[  333.636957][T20920] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4715'.
[  333.720019][T20927] tipc: Failed to remove unknown binding: 66,1,1/2887052253:4098926059/4098926061
[  333.853218][T20927] tipc: Failed to remove unknown binding: 66,1,1/2887052253:4098926059/4098926061
[  333.856789][T20927] tipc: Failed to remove unknown binding: 66,1,1/2887052253:4098926059/4098926061
[  333.893977][T20937] bond0: (slave syz_tun): Releasing backup interface
[  333.897325][T20937] syz_tun (unregistering): left promiscuous mode
[  333.899417][T20937] syz_tun (unregistering): left allmulticast mode
[  333.930970][T20940] tipc: Enabling of bearer <ib:pimreg> rejected, failed to enable media
[  334.024150][T20943] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.4723'.
[  334.059897][T20948] netlink: 65520 bytes leftover after parsing attributes in process `syz.3.4723'.
[  334.066104][T20948] netlink: 65520 bytes leftover after parsing attributes in process `syz.3.4723'.
[  334.077258][T20948] netlink: 65520 bytes leftover after parsing attributes in process `syz.3.4723'.
[  334.159006][T20963] xfrm1: entered promiscuous mode
[  334.160782][T20963] xfrm1: entered allmulticast mode
[  334.170539][T20965] openvswitch: netlink: nsh attribute has 13 unknown bytes.
[  334.173045][T20965] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  334.278670][T20980] netlink: 'syz.4.4734': attribute type 2 has an invalid length.
[  334.418925][T21011] netlink: 'syz.1.4745': attribute type 3 has an invalid length.
[  334.421709][T21011] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  334.509314][T21024] ipvlan2: entered promiscuous mode
[  334.602913][T21038] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  334.605400][T21038] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  334.669294][T21026] netlink: 'syz.3.4752': attribute type 1 has an invalid length.
[  334.942986][T21103] netlink: 'syz.3.4774': attribute type 1 has an invalid length.
[  335.321766][T21142] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  335.440928][T21154] openvswitch: netlink: Geneve opt len 63 is not a multiple of 4.
[  335.590356][T21176] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  335.592978][T21177] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  335.618667][T21176] syzkaller0: entered promiscuous mode
[  335.620762][T21176] syzkaller0: entered allmulticast mode
[  335.623057][T21176] tipc: Resetting bearer <eth:syzkaller0>
[  335.629255][T21175] tipc: Resetting bearer <eth:syzkaller0>
[  336.564876][T21175] tipc: Disabling bearer <eth:syzkaller0>
[  336.835629][T21222] delete_channel: no stack
[  337.711277][T21313] sctp: [Deprecated]: syz.3.4845 (pid 21313) Use of int in max_burst socket option.
[  337.711277][T21313] Use struct sctp_assoc_value instead
[  338.495596][   T24] hid-generic 0005:07C0:5505.0002: item fetching failed at offset 0/1
[  338.500631][   T24] hid-generic 0005:07C0:5505.0002: probe with driver hid-generic failed with error -22
[  338.522260][T21355] syzkaller0: Caught tx_queue_len zero misconfig
[  338.608932][T21364] __nla_validate_parse: 53 callbacks suppressed
[  338.608942][T21364] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4864'.
[  338.709419][T21377] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4867'.
[  338.716803][T21377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4867'.
[  338.723035][T21377] batadv_slave_1: entered promiscuous mode
[  338.728082][T21376] batadv_slave_1: left promiscuous mode
[  338.791393][T21390] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.4872'.
[  339.221093][T21451] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.4892'.
[  339.274661][T21458] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  339.276980][T21458] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  340.129313][T21462] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4895'.
[  340.230905][T21479] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4901'.
[  340.263308][T21490] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4905'.
[  340.314296][T21497] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4904'.
[  341.057373][T21538] netlink: 'syz.1.4920': attribute type 1 has an invalid length.
[  341.060061][T21538] netlink: 208 bytes leftover after parsing attributes in process `syz.1.4920'.
[  341.063198][T21538] netlink: 'syz.1.4920': attribute type 1 has an invalid length.
[  341.066000][T21538] netlink: 'syz.1.4920': attribute type 2 has an invalid length.
[  341.741282][T21580] netlink: 'syz.3.4930': attribute type 10 has an invalid length.
[  342.335719][ T5884] IPVS: starting estimator thread 0...
[  342.428212][T21614] IPVS: using max 79 ests per chain, 189600 per kthread
[  342.483184][T21626] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  342.532926][T21630] tipc: Enabling of bearer <ib:pimreg> rejected, failed to enable media
[  342.661581][ T5825] Bluetooth: hci2: command 0x0406 tx timeout
[  342.804756][T21667] syzkaller0: entered promiscuous mode
[  342.807420][T21667] syzkaller0: entered allmulticast mode
[  343.505070][T21684] netlink: 'syz.4.4966': attribute type 6 has an invalid length.
[  343.559835][T21685] netlink: 'syz.4.4966': attribute type 6 has an invalid length.
[  343.787587][T21688] batadv0: entered promiscuous mode
[  343.898216][T21706] __nla_validate_parse: 9 callbacks suppressed
[  343.898226][T21706] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4974'.
[  343.903263][T21706] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4974'.
[  343.907074][T21706] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4974'.
[  343.910254][T21701] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  343.924213][T21708] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  344.255654][T21765] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4991'.
[  344.405869][T21785] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  344.498906][T21785] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  344.501887][T21785] batadv_slave_0: entered promiscuous mode
[  344.506830][T21785] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4994'.
[  344.788971][T21800] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4998'.
[  344.795282][T21800] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  344.884648][T21804] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5000'.
[  344.911370][T21808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5001'.
[  345.063107][T21818] tipc: Invalid UDP bearer configuration
[  345.063133][T21818] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  345.097270][T21822] netlink: 'syz.1.5004': attribute type 5 has an invalid length.
[  345.124050][T21820] netlink: 'syz.4.5006': attribute type 2 has an invalid length.
[  345.348100][T21837] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5009'.
[  345.677037][T21855] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  345.716749][T21859] ieee802154 phy0 wpan0: encryption failed: -22
[  346.129412][T21911] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  346.144438][T21912] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5033'.
[  346.380008][T21940] team_slave_0: entered promiscuous mode
[  346.382165][T21940] team_slave_1: entered promiscuous mode
[  346.384162][T21940] vlan2: entered promiscuous mode
[  346.386788][T21940] team0: entered promiscuous mode
[  346.717170][T21994] sctp: [Deprecated]: syz.1.5065 (pid 21994) Use of int in max_burst socket option.
[  346.717170][T21994] Use struct sctp_assoc_value instead
[  346.850144][T22009] lo: entered allmulticast mode
[  346.856483][T22009] netlink: 'syz.1.5069': attribute type 10 has an invalid length.
[  347.725317][T22060] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  347.730695][T22060] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  347.951695][T22073] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.954930][T22073] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.015697][T22073] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  348.043742][T22073] veth1_macvtap: left allmulticast mode
[  348.056303][T22073] macsec0: left allmulticast mode
[  348.063988][T22073] batadv0: left allmulticast mode
[  348.077026][ T5714] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  348.081631][ T5714] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  348.084463][ T5714] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  348.088178][ T5714] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  348.091023][ T5714] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  348.093803][ T5714] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  348.099583][ T5714] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  348.103305][ T5714] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  349.535552][T22147] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  349.541150][T22147] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  350.052869][T22154] __nla_validate_parse: 11 callbacks suppressed
[  350.052880][T22154] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5116'.
[  350.086613][T22158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5118'.
[  350.104739][T22158] netlink: 'syz.1.5118': attribute type 12 has an invalid length.
[  350.262260][T22163] syzkaller0: entered allmulticast mode
[  350.418825][T22171] debugfs: 'netdev:nicvf0' already exists in 'phy5'
[  350.571736][T22202] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  350.981323][T22223] syzkaller0: Caught tx_queue_len zero misconfig
[  351.205063][T22257] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5152'.
[  351.431750][T22288] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5159'.
[  351.446086][T22288] netlink: 'syz.4.5159': attribute type 7 has an invalid length.
[  351.448687][T22288] netlink: 'syz.4.5159': attribute type 8 has an invalid length.
[  351.452748][T22288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5159'.
[  351.488763][T22293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5161'.
[  351.493346][T22293] netlink: 'syz.4.5161': attribute type 29 has an invalid length.
[  351.496252][T22293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5161'.
[  351.689576][T22331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5171'.
[  351.947961][T22355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5180'.
[  351.950982][T22355] tipc: Disabling bearer <udp:syz2>
[  352.752901][T22357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5182'.
[  352.921134][T22385] syzkaller0: entered promiscuous mode
[  352.923217][T22385] syzkaller0: entered allmulticast mode
[  354.151279][T22422] netlink: 'syz.3.5199': attribute type 4 has an invalid length.
[  355.558952][T22551] __nla_validate_parse: 2 callbacks suppressed
[  355.558963][T22551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5240'.
[  355.559974][T22553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5242'.
[  355.575282][T22553] erspan1: entered promiscuous mode
[  355.683161][T22566] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5247'.
[  355.776175][T22566] nbd1: detected capacity change from 0 to 875674160
[  355.779771][T18439] block nbd1: Receive control failed (result -104)
[  356.138870][T22609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5259'.
[  356.145112][T22609] ip6gre1: entered allmulticast mode
[  356.880638][T22666] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5273'.
[  356.904652][T22670] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5274'.
[  356.909622][T22670] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5274'.
[  357.186505][T22681] netlink: 'syz.1.5277': attribute type 10 has an invalid length.
[  357.189134][T22681] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  357.220135][T22683] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  357.895274][T22729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5291'.
[  358.486517][T22772] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5303'.
[  358.496833][T22772] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5303'.
[  358.761761][T22800] netlink: 'syz.3.5310': attribute type 12 has an invalid length.
[  358.764542][T22800] netlink: 'syz.3.5310': attribute type 11 has an invalid length.
[  358.770000][T22800] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) !
[  359.256749][T22850] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  359.273307][T22850] bridge0: entered allmulticast mode
[  359.277823][T22850] pim6reg: entered allmulticast mode
[  359.280451][T22850] netlink: 'syz.4.5316': attribute type 1 has an invalid length.
[  359.282963][T22850] netlink: 'syz.4.5316': attribute type 2 has an invalid length.
[  359.294052][T22850] netlink: 'syz.4.5316': attribute type 8 has an invalid length.
[  359.491108][T22881] netlink: 'syz.1.5324': attribute type 1 has an invalid length.
[  359.759908][T22917] netlink: 'syz.3.5330': attribute type 6 has an invalid length.
[  359.763196][T22917] netlink: 'syz.3.5330': attribute type 6 has an invalid length.
[  360.662211][T22989] __nla_validate_parse: 12 callbacks suppressed
[  360.662224][T22989] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5352'.
[  360.698219][T22993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5353'.
[  360.702804][T22993] netlink: 'syz.3.5353': attribute type 12 has an invalid length.
[  360.705457][T22993] netlink: 248 bytes leftover after parsing attributes in process `syz.3.5353'.
[  360.709297][T22993] netlink: 59 bytes leftover after parsing attributes in process `syz.3.5353'.
[  361.296006][   T36] wlan0: Trigger new scan to find an IBSS to join
[  361.303735][T23019] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5362'.
[  361.308291][T23019] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  361.314904][T23020] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5362'.
[  361.319223][T23020] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  361.352206][T23025] bridge_slave_0: invalid flags given to default FDB implementation
[  361.358223][T23025] netlink: 'syz.1.5364': attribute type 1 has an invalid length.
[  361.360756][T23025] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5364'.
[  361.615105][T23046] netlink: 'syz.4.5371': attribute type 1 has an invalid length.
[  361.618544][T23046] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5371'.
[  361.629097][T23046] netlink: 'syz.4.5371': attribute type 1 has an invalid length.
[  361.651316][T23050] syzkaller0: entered promiscuous mode
[  361.665433][T23050] syzkaller0: entered allmulticast mode
[  361.692205][T23054] bond3: (slave geneve3): making interface the new active one
[  361.695243][T23054] bond3: (slave geneve3): Enslaving as an active interface with an up link
[  361.699770][T12592] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  361.702520][T12592] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  361.705287][T12592] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  361.717136][T23046] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5371'.
[  361.720666][T12592] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  361.731479][T23046] 8021q: adding VLAN 0 to HW filter on device bond3
[  361.734420][T23050] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5372'.
[  363.728918][T23131] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  364.336085][T17292] wlan0: Trigger new scan to find an IBSS to join
[  364.524978][T23173] netlink: 'syz.1.5410': attribute type 1 has an invalid length.
[  364.528534][T23173] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  365.095867][T23225] netlink: 'syz.1.5427': attribute type 21 has an invalid length.
[  366.471680][T23319] syzkaller0: Caught tx_queue_len zero misconfig
[  367.296204][   T26] wlan0: Trigger new scan to find an IBSS to join
[  367.520988][T23384] __nla_validate_parse: 16 callbacks suppressed
[  367.520998][T23384] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5474'.
[  367.558564][T23391] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.5476'.
[  367.565312][T23391] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5476'.
[  367.672808][T23401] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.5480'.
[  367.780701][T23404] lo: left allmulticast mode
[  367.820793][T23404] syz_tun: left allmulticast mode
[  367.849344][T23404] wg1: left promiscuous mode
[  367.850941][T23404] wg1: left allmulticast mode
[  367.939044][T23404] macsec0: left allmulticast mode
[  367.953218][T23404] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  367.968413][T23404] vxlan0: left promiscuous mode
[  367.970798][T23404] vxlan0: left allmulticast mode
[  368.016806][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  368.019755][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  368.022892][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  368.027465][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  368.030391][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  368.033171][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  368.038809][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  368.041965][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  368.072251][T23416] bridge0: entered allmulticast mode
[  368.112102][T23421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5487'.
[  368.115107][T23421] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  368.119172][T23422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5487'.
[  368.120060][T23421] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  368.122425][T23422] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  368.135648][T23422] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  368.279499][T23440] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5494'.
[  368.286683][T23442] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5494'.
[  368.664292][T23481] netlink: 'syz.4.5502': attribute type 5 has an invalid length.
[  368.716185][T23477] netlink: 'syz.1.5504': attribute type 1 has an invalid length.
[  368.720068][T23477] nbd: error processing sock list
[  368.722085][T23477] block nbd2: shutting down sockets
[  368.753443][T23483] geneve3: entered promiscuous mode
[  368.758125][ T5849] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  368.761027][ T5849] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  368.763836][ T5849] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  368.766864][ T5849] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  369.887459][T23561] openvswitch: netlink: IP tunnel dst address not specified
[  370.214999][T23592] delete_channel: no stack
[  370.258711][T23596] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5539'.
[  370.399687][T23619] netlink: 216 bytes leftover after parsing attributes in process `syz.3.5547'.
[  370.438783][T23623] netlink: 'syz.3.5549': attribute type 1 has an invalid length.
[  370.444452][T23623] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  370.546926][T23639] netlink: 'syz.4.5554': attribute type 10 has an invalid length.
[  370.549686][T23639] dummy0: left allmulticast mode
[  370.552946][T23639] dummy0: entered promiscuous mode
[  370.555143][T23639] team0: Port device dummy0 added
[  370.560091][T23639] netlink: 'syz.4.5554': attribute type 10 has an invalid length.
[  370.569198][T23639] dummy0: left promiscuous mode
[  370.572217][T23639] team0: Port device dummy0 removed
[  370.578974][T23639] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  370.642299][T23648] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  370.648684][T23648] syzkaller0: MTU too low for tipc bearer
[  370.650885][T23648] tipc: Disabling bearer <eth:syzkaller0>
[  370.660752][T23643] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  370.739587][T23662] ieee802154 phy0 wpan0: encryption failed: -22
[  370.901732][T23670] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  371.231968][T23707] sock: sock_set_timeout: `syz.1.5573' (pid 23707) tries to set negative timeout
[  371.265371][T23707] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  371.515052][T23738] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.519470][T23738] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  371.565637][T23743] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  371.577329][T23738] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.580574][T23738] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  371.623141][T23738] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.627758][T23738] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  371.671181][T23738] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.675314][T23738] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  371.738692][T12592] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  371.742117][T12592] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  371.750662][T12592] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  371.753400][T12592] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  371.762208][T12592] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  371.764950][T12592] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  371.773258][T12592] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  371.776333][T12592] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  372.377350][T23777] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  372.465471][T23784] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  372.632553][T23805] __nla_validate_parse: 4 callbacks suppressed
[  372.632564][T23805] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5607'.
[  373.024227][T23832] netlink: 134820 bytes leftover after parsing attributes in process `syz.4.5616'.
[  373.107416][T23840] netlink: 'syz.4.5619': attribute type 1 has an invalid length.
[  373.110777][T23840] netlink: 244 bytes leftover after parsing attributes in process `syz.4.5619'.
[  373.183471][T23848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5622'.
[  373.188284][T23848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5622'.
[  373.542261][T23852] vti0: entered promiscuous mode
[  374.431047][T23875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5630'.
[  374.710057][T23897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5637'.
[  374.945707][T23913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5640'.
[  374.951902][T23913] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5640'.
[  375.132439][T23923] netlink: 'syz.3.5645': attribute type 11 has an invalid length.
[  375.214609][T23933] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5648'.
[  375.245738][T23936] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[  375.405634][T23955] netlink: 'syz.3.5655': attribute type 10 has an invalid length.
[  375.699473][T23979] netlink: 'syz.4.5665': attribute type 1 has an invalid length.
[  375.950348][T24007] IPVS: set_ctl: invalid protocol: 25054 172.20.20.56:20003
[  375.999769][T24011] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  376.192466][T24017] netlink: 'syz.1.5677': attribute type 8 has an invalid length.
[  376.856916][T24054] netlink: zone id is out of range
[  376.858811][T24054] netlink: zone id is out of range
[  376.860636][T24054] netlink: get zone limit has 8 unknown bytes
[  377.393421][ T5884] hid-generic 0005:15C2:0003.0003: item fetching failed at offset 0/1
[  377.402461][ T5884] hid-generic 0005:15C2:0003.0003: probe with driver hid-generic failed with error -22
[  377.497703][T24102] openvswitch: netlink: Duplicate or invalid key (type 0).
[  377.500478][T24102] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  377.835217][T24127] __nla_validate_parse: 10 callbacks suppressed
[  377.835227][T24127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5709'.
[  378.018382][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  378.021015][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  378.638710][T24224] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5734'.
[  378.828746][T24241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5739'.
[  380.081577][T24307] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  380.949212][T24334] netlink: 'syz.4.5770': attribute type 1 has an invalid length.
[  380.994668][T24337] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  381.001155][T24336] delete_channel: no stack
[  381.008381][T24334] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  381.213006][T23071] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  381.229286][T24373] sctp: [Deprecated]: syz.3.5782 (pid 24373) Use of struct sctp_assoc_value in delayed_ack socket option.
[  381.229286][T24373] Use struct sctp_sack_info instead
[  381.284265][T24384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5785'.
[  382.162729][T24407] netlink: 'syz.1.5792': attribute type 1 has an invalid length.
[  382.165482][T24407] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5792'.
[  382.168840][T24407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5792'.
[  382.274975][T24417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5795'.
[  382.286274][   T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  382.289264][   T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  382.294443][   T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  382.299607][   T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  382.309475][T24422] netlink: 'syz.3.5796': attribute type 3 has an invalid length.
[  382.537743][T24439] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5802'.
[  382.568229][T24442] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5803'.
[  382.660319][T24447] netlink: 'syz.3.5804': attribute type 11 has an invalid length.
[  382.664148][T24447] netlink: 308 bytes leftover after parsing attributes in process `syz.3.5804'.
[  382.667708][T24447] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  382.719692][T24455] nbd: couldn't find device at index 536870912
[  383.052763][T24474] __nla_validate_parse: 1 callbacks suppressed
[  383.052775][T24474] netlink: 596 bytes leftover after parsing attributes in process `syz.1.5813'.
[  383.144875][T24485] netlink: 'syz.1.5817': attribute type 5 has an invalid length.
[  383.145280][T24486] netlink: 'syz.1.5817': attribute type 5 has an invalid length.
[  383.785625][T24554] syzkaller0: entered promiscuous mode
[  383.789028][T24554] syzkaller0: entered allmulticast mode
[  383.797446][T24554] tap0: tun_chr_ioctl cmd 1074025677
[  383.800869][T24554] tap0: linktype set to 0
[  384.034719][T24577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5846'.
[  384.039773][T24577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5846'.
[  384.281176][T24602] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5853'.
[  384.341738][T24606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5855'.
[  384.612436][T24636] netlink: 'syz.3.5867': attribute type 1 has an invalid length.
[  384.615554][T24636] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  384.713846][T24645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5869'.
[  384.758214][T24655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5872'.
[  385.745331][T24721] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  385.752177][T24722] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  385.781421][T24726] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  386.113032][T24789] bridge0: port 3(vlan1) entered blocking state
[  386.115277][T24789] bridge0: port 3(vlan1) entered disabled state
[  386.118130][T24789] vlan1: entered allmulticast mode
[  386.126160][T24789] vlan1: entered promiscuous mode
[  386.273097][T24815] IPVS: persistence engine module ip_vs_pe_ not found
[  386.348527][   T61] block nbd1: Possible stuck request ffff888020840000: control (read@0,4096B). Runtime 30 seconds
[  386.375038][T24830] netlink: 'syz.4.5929': attribute type 10 has an invalid length.
[  386.387719][T24830] 8021q: adding VLAN 0 to HW filter on device team0
[  386.391191][T24830] bond0: (slave team0): Enslaving as an active interface with an up link
[  386.398590][T24830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5929'.
[  386.416089][T24830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5929'.
[  386.419156][T24830] netlink: 124 bytes leftover after parsing attributes in process `syz.4.5929'.
[  387.621898][T24923] tls_set_device_offload: netdev not found
[  387.929055][T24935] netlink: 'syz.1.5964': attribute type 1 has an invalid length.
[  387.943948][T24935] 8021q: adding VLAN 0 to HW filter on device bond13
[  387.956843][T24935] 8021q: adding VLAN 0 to HW filter on device bond13
[  387.960224][T24935] bond13: (slave vxcan1): The slave device specified does not support setting the MAC address
[  387.964383][T24935] bond13: (slave vxcan1): Error -95 calling set_mac_address
[  388.012202][T24937] veth9: entered promiscuous mode
[  388.015670][T24937] bond13: (slave veth9): Enslaving as an active interface with a down link
[  388.022692][T24935] erspan0: entered allmulticast mode
[  388.027486][T24935] bond13: (slave erspan0): making interface the new active one
[  388.030516][T24935] bond13: (slave erspan0): Enslaving as an active interface with an up link
[  388.128458][T24949] ip6tnl4: entered promiscuous mode
[  388.130231][T24949] ip6tnl4: entered allmulticast mode
[  388.138596][T24949] team0: Device ip6tnl4 is up. Set it down before adding it as a team port
[  388.260614][T24958] syzkaller0: entered promiscuous mode
[  388.262592][T24958] syzkaller0: entered allmulticast mode
[  389.317480][T24975] __nla_validate_parse: 5 callbacks suppressed
[  389.317492][T24975] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5975'.
[  389.823931][T25030] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5989'.
[  390.579975][T25077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6005'.
[  391.442015][T25079] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  391.581351][T25127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6019'.
[  391.581353][T25126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6019'.
[  391.581429][T25126] veth0_macvtap: left promiscuous mode
[  391.732858][T25150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6026'.
[  391.733586][T25152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6026'.
[  391.748929][T25151] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  391.805587][T25158] netlink: 'syz.3.6022': attribute type 5 has an invalid length.
[  391.810529][T25151] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  391.866062][T25151] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  391.881727][T25165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6030'.
[  391.921648][T25171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6033'.
[  391.943819][T25151] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  392.003425][   T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  392.019891][   T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  392.028265][   T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  392.031295][   T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  392.037036][T25183] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6037'.
[  394.211607][T25379] macvlan1: entered promiscuous mode
[  394.214611][T25379] macvlan1: left promiscuous mode
[  395.520702][T25458] __nla_validate_parse: 8 callbacks suppressed
[  395.520862][T25458] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6132'.
[  395.528213][T25458] bond0: invalid ARP target 0.0.0.0 specified for addition
[  395.530575][T25458] bond0: option arp_ip_target: invalid value (0)
[  395.532994][T25458] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6132'.
[  395.540509][T25442] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6126'.
[  395.543997][T25458] bond0: invalid ARP target 0.0.0.0 specified for addition
[  395.546802][T25458] bond0: option arp_ip_target: invalid value (0)
[  395.549065][T25458] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6132'.
[  395.552078][T25458] bond0: invalid ARP target 0.0.0.0 specified for addition
[  395.554371][T25458] bond0: option arp_ip_target: invalid value (0)
[  395.557035][T25458] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6132'.
[  395.559963][T25458] bond0: invalid ARP target 0.0.0.0 specified for addition
[  395.562284][T25458] bond0: option arp_ip_target: invalid value (0)
[  395.564386][T25458] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6132'.
[  395.567501][T25458] bond0: invalid ARP target 0.0.0.0 specified for addition
[  395.569865][T25458] bond0: option arp_ip_target: invalid value (0)
[  395.711815][T25468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6135'.
[  395.769389][T25485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6138'.
[  395.772256][T25485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6138'.
[  395.775219][T25485] netlink: 'syz.4.6138': attribute type 5 has an invalid length.
[  395.778225][T25485] netlink: 'syz.4.6138': attribute type 6 has an invalid length.
[  395.852176][T25500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6143'.
[  395.864239][T25500] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  395.867856][T25500] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  395.901573][T25500] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  395.904844][T25500] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  395.919407][T25503] netlink: 'syz.3.6141': attribute type 5 has an invalid length.
[  395.949418][T25500] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  395.952635][T25500] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  396.001423][T25500] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[  396.005639][T25500] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  396.071208][ T5849] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  396.074136][ T5849] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  396.085077][ T5849] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  396.088286][ T5849] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  396.094737][ T5849] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  396.098354][ T5849] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  396.108146][ T5849] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  396.110905][ T5849] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  396.170403][T25508] ip6gretap0: entered allmulticast mode
[  396.314136][T25526] syzkaller0: MTU too low for tipc bearer
[  396.320147][T25526] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  396.390829][T25533] IPVS: Unknown mcast interface: vcan0
[  396.461558][T25541] syzkaller1: entered promiscuous mode
[  396.463380][T25541] syzkaller1: entered allmulticast mode
[  397.642148][T25575] netlink: 'syz.1.6168': attribute type 30 has an invalid length.
[  397.780619][T25577] geneve4: entered promiscuous mode
[  398.198279][T25605] delete_channel: no stack
[  398.395550][T25618] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  401.031202][T25728] netlink: 'syz.4.6222': attribute type 3 has an invalid length.
[  401.033887][T25728] __nla_validate_parse: 13 callbacks suppressed
[  401.033895][T25728] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6222'.
[  401.079871][T25728] 8021q: adding VLAN 0 to HW filter on device bond4
[  401.090835][T25735] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6223'.
[  401.179499][T25751] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6227'.
[  401.567624][T25808] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6247'.
[  401.973333][T25856] syzkaller1: entered promiscuous mode
[  401.975338][T25856] syzkaller1: entered allmulticast mode
[  401.998933][T25858] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6261'.
[  402.164602][T25880] netlink: 'syz.4.6266': attribute type 10 has an invalid length.
[  402.173479][T25880] bond0: (slave dummy0): Releasing backup interface
[  402.184121][T25880] dummy0: entered promiscuous mode
[  402.189831][T25880] team0: Port device dummy0 added
[  402.301012][T25889] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  402.590439][T25902] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  402.592751][T25902] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  403.062113][T25947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6286'.
[  403.149850][T25959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6291'.
[  403.152855][T25959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6291'.
[  403.158862][T25959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6291'.
[  403.161831][T25959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6291'.
[  403.312997][T25975] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  403.338218][T25981] netlink: 'syz.4.6296': attribute type 13 has an invalid length.
[  403.340823][T25981] netlink: 'syz.4.6296': attribute type 17 has an invalid length.
[  403.382322][T25981] ip6gretap0: left allmulticast mode
[  403.429940][T25992] netlink: 'syz.1.6303': attribute type 21 has an invalid length.
[  403.432636][T25992] netlink: 'syz.1.6303': attribute type 22 has an invalid length.
[  403.435215][T25992] netlink: 'syz.1.6303': attribute type 23 has an invalid length.
[  403.438736][T25992] netlink: 'syz.1.6303': attribute type 25 has an invalid length.
[  403.477176][T25981] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  403.558236][T26006] netlink: 'syz.3.6309': attribute type 1 has an invalid length.
[  403.593683][   T33] audit: type=1800 audit(1754587787.919:7): pid=26002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6308" name=34FFFF dev="tmpfs" ino=11927 res=0 errno=0
[  403.604820][   T33] audit: type=1804 audit(1754587787.939:8): pid=26002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.6308" name=2F6E6577726F6F742F323231382F34FFFF dev="tmpfs" ino=11927 res=1 errno=0
[  404.709126][T26055] netlink: 'syz.1.6324': attribute type 2 has an invalid length.
[  404.713022][T26055] netlink: 'syz.1.6324': attribute type 1 has an invalid length.
[  404.716179][T26055] netlink: 'syz.1.6324': attribute type 2 has an invalid length.
[  405.393259][   T24] hid-generic 0005:07C0:5505.0004: item fetching failed at offset 0/1
[  405.396925][   T24] hid-generic 0005:07C0:5505.0004: probe with driver hid-generic failed with error -22
[  405.971194][T26124] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  406.057799][T26136] __nla_validate_parse: 69 callbacks suppressed
[  406.057809][T26136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6352'.
[  406.071515][T26136] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6352'.
[  406.087922][T26136] bridge0: port 4(vlan3) entered blocking state
[  406.093806][T26136] bridge0: port 4(vlan3) entered disabled state
[  406.100878][T26136] vlan3: entered allmulticast mode
[  406.105082][T26136] bridge0: entered allmulticast mode
[  406.117560][T26136] vlan3: left allmulticast mode
[  406.122759][T26136] bridge0: left allmulticast mode
[  406.626224][T26155] block nbd2: server does not support multiple connections per device.
[  406.630170][T26155] block nbd2: shutting down sockets
[  407.264425][T26223] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6380'.
[  407.355038][T26155] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  407.384580][T26231] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6381'.
[  407.470167][T26249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6388'.
[  407.473339][T26249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6388'.
[  407.484089][T26249] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.540259][T26249] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.589185][T26249] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.598660][T26259] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6392'.
[  407.620884][T26249] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  407.692372][T23071] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  407.701388][T23071] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  407.710590][T23071] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  407.728136][ T5849] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  407.954332][T26307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6407'.
[  408.193340][T26325] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6411'.
[  408.196943][T26326] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6411'.
[  408.575665][T26343] syzkaller0: tun_chr_ioctl cmd 1074025673
[  408.601910][ T5849] syzkaller0: tun_net_xmit 76
[  408.602032][T26342] syzkaller0: create flow: hash 3374506925 index 1
[  408.603996][ T5849] syzkaller0: tun_net_xmit 48
[  408.627511][ T5884] syzkaller0: tun_net_xmit 76
[  408.631931][T26342] syzkaller0: delete flow: hash 3374506925 index 1
[  409.786892][T26375] tc_dump_action: action bad kind
[  410.191640][T26422] IPVS: Scheduler module ip_vs_ not found
[  410.235018][T26427] validate_nla: 10 callbacks suppressed
[  410.235028][T26427] netlink: 'syz.4.6442': attribute type 29 has an invalid length.
[  416.436159][   T61] block nbd1: Possible stuck request ffff888020840000: control (read@0,4096B). Runtime 60 seconds
[  417.505585][ T5270] udevd[5270]: worker [22569] /devices/virtual/block/nbd1 is taking a long time
[  431.068523][T26492] syzkaller0: MTU too low for tipc bearer
[  431.070458][T26492] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  431.075174][T26492] syzkaller0: Caught tx_queue_len zero misconfig
[  431.098218][T26493] netlink: 'syz.3.6462': attribute type 17 has an invalid length.
[  431.918257][T26551] __nla_validate_parse: 8 callbacks suppressed
[  431.918267][T26551] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6483'.
[  431.923158][T26551] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6483'.
[  431.927555][T26551] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6483'.
[  432.066573][T26567] netlink: 'syz.4.6490': attribute type 3 has an invalid length.
[  435.201320][T26593] netlink: ct family unspecified
[  435.203215][T26593] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  435.211675][T26593] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6498'.
[  436.065754][ T5821] Bluetooth: hci2: link tx timeout
[  436.067887][ T5821] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  436.070530][ T5825] Bluetooth: hci2: link tx timeout
[  436.072436][ T5825] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  436.075205][ T5825] Bluetooth: hci2: link tx timeout
[  436.078935][ T5825] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  436.103977][T26616] netlink: 'syz.3.6506': attribute type 1 has an invalid length.
[  436.107263][T26616] netlink: 120 bytes leftover after parsing attributes in process `syz.3.6506'.
[  436.110628][T26616] netlink: 'syz.3.6506': attribute type 2 has an invalid length.
[  436.113125][T26616] netlink: 'syz.3.6506': attribute type 1 has an invalid length.
[  436.309314][T26645] netlink: 'syz.4.6515': attribute type 3 has an invalid length.
[  436.316879][T26645] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6515'.
[  436.433097][T26661] netlink: 'syz.4.6520': attribute type 1 has an invalid length.
[  436.435672][T26661] netlink: 'syz.4.6520': attribute type 2 has an invalid length.
[  436.572626][T26686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6524'.
[  436.576784][T26693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6524'.
[  437.004614][T26749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6541'.
[  438.024185][T26781] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6555'.
[  438.097415][ T5825] Bluetooth: hci2: command 0x0406 tx timeout
[  438.320619][T26788] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6558'.
[  438.409830][T26794] netlink: 'syz.1.6561': attribute type 1 has an invalid length.
[  438.425215][T26794] bond15: entered promiscuous mode
[  438.427461][T26794] 8021q: adding VLAN 0 to HW filter on device bond15
[  438.440068][T26794] 8021q: adding VLAN 0 to HW filter on device bond15
[  438.442604][T26794] bond15: (slave wireguard0): The slave device specified does not support setting the MAC address
[  438.446406][T26794] bond15: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  438.454420][T26794] bond15: (slave wireguard0): making interface the new active one
[  438.457482][T26794] wireguard0: entered promiscuous mode
[  438.460047][T26794] bond15: (slave wireguard0): Enslaving as an active interface with an up link
[  438.584764][T26811] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6567'.
[  438.740320][T26826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6572'.
[  439.458225][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  439.460451][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  439.514551][T26842] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  439.669943][T26867] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6587'.
[  446.500123][   T61] block nbd1: Possible stuck request ffff888020840000: control (read@0,4096B). Runtime 90 seconds
[  461.205522][T26902] netlink: 9280 bytes leftover after parsing attributes in process `syz.4.6600'.
[  461.248764][T26905] netlink: 'syz.1.6599': attribute type 10 has an invalid length.
[  464.373462][T26924] block nbd2: Unsupported socket: shutdown callout must be supported.
[  464.408892][T26930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6610'.
[  464.440566][T26930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6610'.
[  464.458841][T26930] macvlan0: entered promiscuous mode
[  464.460683][T26930] macvlan0: entered allmulticast mode
[  464.463524][T26930] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6610'.
[  464.572699][T26949] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6616'.
[  464.625130][T26955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6618'.
[  464.714320][T26966] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6621'.
[  464.836440][T26968] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  464.839058][T26968] syzkaller0: entered promiscuous mode
[  464.840927][T26968] syzkaller0: entered allmulticast mode
[  464.852765][T26967] tipc: Resetting bearer <eth:syzkaller0>
[  464.863381][T26967] tipc: Disabling bearer <eth:syzkaller0>
[  465.306081][T26975] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[  465.443419][T26994] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6631'.
[  465.574218][T26998] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.6633'.
[  465.579326][T26998] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6633'.
[  465.779852][T27013] IPVS: set_ctl: invalid protocol: 0 172.30.1.4:20004
[  465.932060][T27032] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  466.429152][T27072] __nla_validate_parse: 6 callbacks suppressed
[  466.429161][T27072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6659'.
[  466.459539][T27074] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  466.479901][T27076] netlink: 'syz.3.6661': attribute type 5 has an invalid length.
[  466.555649][T27084] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.6665'.
[  466.661305][T27101] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.6671'.
[  466.792092][T27112] 8021q: adding VLAN 0 to HW filter on device bond0
[  466.802649][T27112] bond0: (slave rose0): Enslaving as an active interface with an up link
[  466.911804][T27122] netlink: 18 bytes leftover after parsing attributes in process `syz.4.6678'.
[  469.857808][T27132] netlink: 172 bytes leftover after parsing attributes in process `syz.3.6680'.
[  470.262626][T27157] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6688'.
[  470.290300][T27170] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  470.833330][T27224] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6712'.
[  471.243936][T27242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6717'.
[  471.299171][T27246] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6719'.
[  471.549056][T27259] syzkaller0: entered promiscuous mode
[  471.551184][T27259] syzkaller0: entered allmulticast mode
[  472.122383][T27331] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6748'.
[  472.307816][T27369] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6759'.
[  472.428648][T27385] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6763'.
[  472.844587][T27436] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6780'.
[  472.848787][T27429] tipc: Started in network mode
[  472.851534][T27429] tipc: Node identity de8493b9ba29, cluster identity 4711
[  472.855074][T27429] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  472.858451][T27429] syzkaller0: entered promiscuous mode
[  472.860995][T27429] syzkaller0: entered allmulticast mode
[  472.863869][T27436] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6780'.
[  472.869935][T27428] tipc: Resetting bearer <eth:syzkaller0>
[  472.878635][T27428] tipc: Disabling bearer <eth:syzkaller0>
[  472.882237][T27436] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6780'.
[  472.885248][T27436] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6780'.
[  472.888387][T27436] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6780'.
[  472.891357][T27436] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6780'.
[  472.894425][T27436] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6780'.
[  473.047200][T12592] tipc: Left network mode
[  473.146822][T27460] 8021q: VLANs not supported on ip_vti0
[  473.173865][T27464] 8021q: adding VLAN 0 to HW filter on device bond0
[  473.187866][   T12] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  473.190921][   T12] bond0: (slave bond_slave_1): link status definitely down, disabling slave
[  473.205176][   T12] bond0: now running without any active interface!
[  473.608394][T27484] netlink: 'syz.4.6800': attribute type 1 has an invalid length.
[  473.973005][T27495] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  474.002724][T27495] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  475.518880][T27598] netlink: 'syz.3.6837': attribute type 21 has an invalid length.
[  475.529528][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  475.533018][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  475.604735][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  475.609437][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  475.636322][T27603] pim6reg1: entered promiscuous mode
[  475.638192][T27603] pim6reg1: entered allmulticast mode
[  475.664618][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  475.670211][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  475.740483][T27606] syzkaller0: entered promiscuous mode
[  475.742292][T27606] syzkaller0: entered allmulticast mode
[  475.757313][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  475.760998][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  476.578727][   T61] block nbd1: Possible stuck request ffff888020840000: control (read@0,4096B). Runtime 120 seconds
[  476.884729][   T13] bridge_slave_1: left allmulticast mode
[  476.888216][   T13] bridge_slave_1: left promiscuous mode
[  476.891240][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  476.909389][   T13] bridge_slave_0: left allmulticast mode
[  476.919546][   T13] bridge_slave_0: left promiscuous mode
[  476.921606][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  477.296759][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  477.301200][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  477.304690][   T13] bond0 (unregistering): Released all slaves
[  477.311146][   T13] bond1 (unregistering): Released all slaves
[  477.317563][   T13] bond2 (unregistering): Released all slaves
[  477.367559][   T13] k*]: left promiscuous mode
[  477.395407][T27643] syzkaller0: entered promiscuous mode
[  477.398778][T27643] syzkaller0: entered allmulticast mode
[  477.439731][   T13] tipc: Left network mode
[  477.553765][T27652] __nla_validate_parse: 72 callbacks suppressed
[  477.553780][T27652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6853'.
[  477.561110][T27652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6853'.
[  477.648425][   T13] hsr_slave_0: left promiscuous mode
[  477.653121][   T13] hsr_slave_1: left promiscuous mode
[  477.655320][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  477.659186][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  477.662167][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  477.664682][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  477.681395][   T13] veth0_macvtap: left promiscuous mode
[  477.683412][   T13] veth1_vlan: left promiscuous mode
[  477.685280][   T13] veth0_vlan: left promiscuous mode
[  477.733517][T27652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6853'.
[  477.932619][   T13] team0 (unregistering): Port device team_slave_1 removed
[  477.957652][   T13] team0 (unregistering): Port device team_slave_0 removed
[  478.259798][T27671] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  478.445761][   T13] IPVS: stop unused estimator thread 0...
[  478.501592][T27695] tipc: New replicast peer: 0.0.0.0
[  478.504078][T27695] tipc: Enabled bearer <udp:syz2>, priority 26
[  478.508331][T27695] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  478.519999][T27699] netlink: 'syz.4.6871': attribute type 21 has an invalid length.
[  478.524220][T27699] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6871'.
[  478.601720][T27710] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6874'.
[  479.456762][T27737] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  479.459705][T27737] syzkaller0: entered promiscuous mode
[  479.461724][T27737] syzkaller0: entered allmulticast mode
[  479.475423][T27737] tipc: Resetting bearer <eth:syzkaller0>
[  479.482743][T27736] tipc: Resetting bearer <eth:syzkaller0>
[  479.492884][T27736] tipc: Disabling bearer <eth:syzkaller0>
[  479.563858][T27755] syzkaller0: left promiscuous mode
[  479.565623][T27755] syzkaller0: left allmulticast mode
[  479.595945][T27757] netlink: 'syz.1.6885': attribute type 58 has an invalid length.
[  479.770112][T27784] openvswitch: netlink: IPv6 tunnel dst address is zero
[  479.877763][T27788] netlink: 'syz.1.6895': attribute type 1 has an invalid length.
[  479.880510][T27788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6895'.
[  479.991847][T27794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6898'.
[  480.171584][T27811] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6902'.
[  480.300247][T27813] netlink: 440 bytes leftover after parsing attributes in process `syz.1.6903'.
[  480.450935][T27838] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma?
[  480.877832][T27881] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6925'.
[  480.880902][T27881] netlink: 'syz.1.6925': attribute type 6 has an invalid length.
[  481.417994][T27907] veth1_to_bond: entered allmulticast mode
[  481.442569][T27907] bond0: (slave bond_slave_1): Releasing backup interface
[  481.460109][T27907] veth1_to_bond (unregistering): left allmulticast mode
[  482.051266][T27923] veth1_macvtap: default FDB implementation only supports local addresses
[  482.145399][T27941] netlink: 'syz.3.6944': attribute type 1 has an invalid length.
[  482.150490][T27941] netlink: 'syz.3.6944': attribute type 2 has an invalid length.
[  482.968933][T28037] __nla_validate_parse: 12 callbacks suppressed
[  482.968944][T28037] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6978'.
[  483.272390][T28067] nbd: must specify an index to disconnect
[  483.281370][T28067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6986'.
[  483.322424][T28069] syzkaller0: entered promiscuous mode
[  483.324927][T28069] syzkaller0: entered allmulticast mode
[  483.532963][T28073] netlink: 'syz.3.6988': attribute type 12 has an invalid length.
[  483.536145][T28074] netlink: 'syz.3.6988': attribute type 12 has an invalid length.
[  483.938762][T28083] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma?
[  484.006546][T28087] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6992'.
[  484.077663][T28093] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe
[  484.358098][T28107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6998'.
[  484.577644][T28119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7002'.
[  484.635634][T28126] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7004'.
[  484.708069][T28142] netlink: 'syz.3.7009': attribute type 2 has an invalid length.
[  484.739524][T28144] syzkaller0: entered promiscuous mode
[  484.741456][T28144] syzkaller0: entered allmulticast mode
[  485.075736][T28176] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7019'.
[  485.127531][T28185] IPVS: stopping backup sync thread 23784 ...
[  485.320947][T28200] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7027'.
[  485.571710][T28220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7033'.
[  485.576864][T28221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7033'.
[  485.855751][T28249] sctp: [Deprecated]: syz.4.7039 (pid 28249) Use of struct sctp_assoc_value in delayed_ack socket option.
[  485.855751][T28249] Use struct sctp_sack_info instead
[  486.054433][T28274] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  486.850835][T28351] netlink: 'syz.1.7070': attribute type 1 has an invalid length.
[  487.571404][T28404] netlink: 'syz.4.7088': attribute type 42 has an invalid length.
[  487.574262][T28405] netlink: 'syz.4.7088': attribute type 42 has an invalid length.
[  488.013998][T28429] __nla_validate_parse: 5 callbacks suppressed
[  488.014032][T28429] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7097'.
[  488.093495][T28435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7100'.
[  488.641578][T28450] netlink: 'syz.4.7104': attribute type 1 has an invalid length.
[  488.703487][T28459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7106'.
[  488.750073][T28461] netlink: 'syz.3.7107': attribute type 5 has an invalid length.
[  488.752752][T28461] netlink: 'syz.3.7107': attribute type 5 has an invalid length.
[  488.898915][T28481] netlink: 356 bytes leftover after parsing attributes in process `syz.3.7115'.
[  488.952640][T28486] netlink: 244 bytes leftover after parsing attributes in process `syz.4.7117'.
[  488.966326][T28486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7117'.
[  488.969466][T28486] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7117'.
[  488.977165][T28484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7116'.
[  489.028854][T28493] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7117'.
[  489.031866][T28493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7117'.
[  489.278635][T28505] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  489.281758][T28506] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  489.696809][T28528] netlink: 'syz.3.7132': attribute type 5 has an invalid length.
[  489.823924][T28530] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  489.926535][T28542] pimreg3: entered allmulticast mode
[  492.077289][T28634] netlink: 'syz.3.7164': attribute type 1 has an invalid length.
[  492.098972][T28634] 8021q: adding VLAN 0 to HW filter on device bond8
[  492.108706][T28634] 8021q: adding VLAN 0 to HW filter on device bond8
[  492.111128][T28634] bond8: (slave vcan0): The slave device specified does not support setting the MAC address
[  492.125347][T28634] bond8: (slave vcan0): Error -95 calling set_mac_address
[  492.194165][T28649] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  492.219693][T28652] netlink: 'syz.3.7170': attribute type 1 has an invalid length.
[  492.222449][T28652] netlink: 'syz.3.7170': attribute type 2 has an invalid length.
[  492.643700][T28710] IPv4: Oversized IP packet from 127.202.26.0
[  492.651345][T28710] netlink: 'syz.4.7191': attribute type 1 has an invalid length.
[  492.908865][T28757] Unsupported ieee802154 address type: 0
[  492.953837][T28764] : renamed from batadv_slave_1
[  492.957441][T28762] netpci0: tun_chr_ioctl cmd 1074025681
[  493.318143][T28812] __nla_validate_parse: 6 callbacks suppressed
[  493.318156][T28812] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7224'.
[  493.461794][T28829] netlink: 248 bytes leftover after parsing attributes in process `syz.1.7231'.
[  493.560275][T28838] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  493.589295][T28838] syzkaller0: entered promiscuous mode
[  493.591337][T28838] syzkaller0: entered allmulticast mode
[  493.598600][T28838] tipc: Resetting bearer <eth:syzkaller0>
[  493.607063][T28835] tipc: Resetting bearer <eth:syzkaller0>
[  494.585910][   T24] tipc: Node number set to 2994401756
[  494.607636][T28835] tipc: Disabling bearer <eth:syzkaller0>
[  494.703568][T28863] netlink: 312 bytes leftover after parsing attributes in process `syz.1.7239'.
[  494.707802][T28863] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7239'.
[  494.711021][T28863] unsupported nlmsg_type 40
[  495.153706][T28902] openvswitch: netlink: Flow actions attr not present in new flow.
[  495.177349][T28906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7258'.
[  495.190194][T28904] 8021q: VLANs not supported on ip_vti0
[  495.195079][T28904] sctp: [Deprecated]: syz.3.7257 (pid 28904) Use of struct sctp_assoc_value in delayed_ack socket option.
[  495.195079][T28904] Use struct sctp_sack_info instead
[  495.483406][T28934] netlink: 'syz.4.7266': attribute type 5 has an invalid length.
[  495.539920][T28938] netlink: 248 bytes leftover after parsing attributes in process `syz.4.7268'.
[  495.620741][T28942] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7269'.
[  497.616071][ T5825] Bluetooth: hci2: command 0x0406 tx timeout
[  500.900906][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  500.903127][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  506.657220][   T61] block nbd1: Possible stuck request ffff888020840000: control (read@0,4096B). Runtime 150 seconds
[  517.425598][T28951] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  517.758112][T29010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7289'.
[  517.766439][T29010] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7289'.
[  517.937703][T29030] mac80211_hwsim hwsim25 wlan0: entered promiscuous mode
[  517.940248][T29030] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  518.018214][T29037] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7299'.
[  518.132307][T29042] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7301'.
[  518.221739][T29048] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7304'.
[  518.280209][T29052] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7306'.
[  518.472166][T29067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7311'.
[  518.522458][T29073] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  518.575607][T29081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7316'.
[  518.605148][T29088] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7318'.
[  518.610269][T29088] netlink: 19 bytes leftover after parsing attributes in process `syz.4.7318'.
[  518.614070][T29088] netlink: 'syz.4.7318': attribute type 6 has an invalid length.
[  518.621498][T29088] netlink: 'syz.4.7318': attribute type 4 has an invalid length.
[  518.743517][T29116] syzkaller1: entered promiscuous mode
[  518.745533][T29116] syzkaller1: entered allmulticast mode
[  518.757896][T29115] tipc: Failed to remove unknown binding: 66,1,1/2887052253:2402751126/2402751127
[  518.809981][T29122] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  518.826143][T29119] sctp: [Deprecated]: syz.4.7327 (pid 29119) Use of struct sctp_assoc_value in delayed_ack socket option.
[  518.826143][T29119] Use struct sctp_sack_info instead
[  518.922218][T29142] netlink: 'syz.3.7333': attribute type 10 has an invalid length.
[  519.062045][T29159] netlink: 'syz.1.7335': attribute type 5 has an invalid length.
[  519.107462][T29162] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  520.949351][T29273] netlink: 'syz.4.7373': attribute type 6 has an invalid length.
[  521.260202][T29311] 8021q: VLANs not supported on bond0
[  521.294365][T29309] IPv6: Can't replace route, no match found
[  521.338502][T29320] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  521.344206][T29317] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  521.681556][T29355] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  521.685294][T29355] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  521.862707][T29385] bond16: entered promiscuous mode
[  521.864439][T29385] bond16: entered allmulticast mode
[  521.866567][T29385] 8021q: adding VLAN 0 to HW filter on device bond16
[  521.871783][T29385] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  522.043568][T29406] netlink: 'syz.3.7419': attribute type 1 has an invalid length.
[  522.048043][T29406] netlink: 'syz.3.7419': attribute type 1 has an invalid length.
[  522.050813][T29406] netlink: 'syz.3.7419': attribute type 1 has an invalid length.
[  522.053677][T29406] netlink: 'syz.3.7419': attribute type 1 has an invalid length.
[  522.057398][T29406] netlink: 'syz.3.7419': attribute type 1 has an invalid length.
[  522.065224][T29410] syzkaller0: entered promiscuous mode
[  522.068704][T29410] syzkaller0: entered allmulticast mode
[  522.770635][T29485] __nla_validate_parse: 47 callbacks suppressed
[  522.770645][T29485] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7435'.
[  522.862131][T29500] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7437'.
[  523.222447][T29545] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.7446'.
[  523.388487][T29575] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  523.391627][T29575] syzkaller0: entered promiscuous mode
[  523.393618][T29575] syzkaller0: entered allmulticast mode
[  523.407738][T29575] tipc: Resetting bearer <eth:syzkaller0>
[  523.410966][T29574] tipc: Resetting bearer <eth:syzkaller0>
[  523.421033][T29574] tipc: Disabling bearer <eth:syzkaller0>
[  523.610770][T29605] netlink: 324 bytes leftover after parsing attributes in process `syz.1.7467'.
[  523.635593][T29609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7468'.
[  523.756713][T29624] netlink: 212296 bytes leftover after parsing attributes in process `syz.1.7472'.
[  524.183295][T29668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7486'.
[  524.329643][T29697] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7497'.
[  524.393525][T29708] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  524.564828][T29731] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  524.811368][T29774] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7522'.
[  524.814556][T29774] netlink: 43 bytes leftover after parsing attributes in process `syz.3.7522'.
[  524.819698][T29774] validate_nla: 31 callbacks suppressed
[  524.819713][T29774] netlink: 'syz.3.7522': attribute type 6 has an invalid length.
[  524.827179][T29774] netlink: 'syz.3.7522': attribute type 5 has an invalid length.
[  525.959226][T29879] netlink: 'syz.1.7559': attribute type 1 has an invalid length.
[  525.961873][T29879] netlink: 'syz.1.7559': attribute type 1 has an invalid length.
[  526.019496][T29887] netlink: 'syz.1.7559': attribute type 1 has an invalid length.
[  526.343413][T29904] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  526.450490][T29910] netlink: 'syz.3.7571': attribute type 83 has an invalid length.
[  526.531780][T29916] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  526.537376][T29916] tipc: Invalid UDP bearer configuration
[  526.537400][T29916] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  526.825204][T29932] team0: No ports can be present during mode change
[  527.065107][T29957] syzkaller0: entered promiscuous mode
[  527.067301][T29957] syzkaller0: entered allmulticast mode
[  527.069714][T29961] netlink: 'syz.4.7586': attribute type 20 has an invalid length.
[  527.078035][T29961] netlink: 'syz.4.7586': attribute type 20 has an invalid length.
[  528.052888][ T5849] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  528.058971][ T5849] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  528.065152][ T5849] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  528.067980][ T5849] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  528.179643][T29977] __nla_validate_parse: 13 callbacks suppressed
[  528.179654][T29977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7591'.
[  528.235441][T29980] netlink: zone id is out of range
[  528.237588][T29978] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7590'.
[  528.239185][T29974] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7590'.
[  528.242754][T29980] netlink: zone id is out of range
[  528.248161][T29980] netlink: zone id is out of range
[  528.249880][T29980] netlink: zone id is out of range
[  528.255668][T29980] netlink: zone id is out of range
[  528.258863][T29980] netlink: zone id is out of range
[  528.260681][T29980] netlink: zone id is out of range
[  528.308761][T29989] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7594'.
[  528.553779][T30020] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7603'.
[  529.013248][T30038] netlink: 'syz.1.7609': attribute type 1 has an invalid length.
[  529.022396][T30038] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7609'.
[  529.032431][T30038] netlink: 'syz.1.7609': attribute type 2 has an invalid length.
[  529.039842][T30038] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7609'.
[  529.057418][T30038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7609'.
[  529.073133][T30038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7609'.
[  529.219608][T30048] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7613'.
[  530.500377][T30103] sit1: entered promiscuous mode
[  530.650540][T30135] syzkaller1: entered promiscuous mode
[  530.652353][T30135] syzkaller1: entered allmulticast mode
[  530.769125][T30144] syzkaller1: entered promiscuous mode
[  530.776241][T30144] syzkaller1: entered allmulticast mode
[  531.159974][T30169] net_ratelimit: 10 callbacks suppressed
[  531.159986][T30169] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  531.164313][T30169] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  531.542975][T30178] netlink: 'syz.1.7657': attribute type 9 has an invalid length.
[  531.606820][T30184] netlink: 'syz.3.7659': attribute type 2 has an invalid length.
[  531.615974][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  531.688005][T30194] 8021q: VLANs not supported on sit0
[  531.948565][T30237] @: renamed from bond_slave_0
[  531.954151][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  531.958124][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  532.010414][T30248] netlink: 'syz.3.7678': attribute type 3 has an invalid length.
[  532.012947][T30248] netlink: 'syz.3.7678': attribute type 3 has an invalid length.
[  532.075169][T30260] netlink: 'syz.3.7682': attribute type 1 has an invalid length.
[  532.139119][T30267] tipc: Enabled bearer <eth:gre0>, priority 10
[  532.447119][T30304] macvtap0: entered allmulticast mode
[  533.279553][T30405] __nla_validate_parse: 18 callbacks suppressed
[  533.279566][T30405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7719'.
[  533.329766][T30415] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7721'.
[  533.332771][T30415] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7721'.
[  534.060526][T30447] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7732'.
[  534.064919][T30447] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7732'.
[  534.430410][T30490] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7746'.
[  534.501876][T30502] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  534.505289][T30502] syzkaller0: entered promiscuous mode
[  534.509280][T30502] syzkaller0: entered allmulticast mode
[  534.514364][T30502] tipc: Resetting bearer <eth:syzkaller0>
[  534.544964][T30506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7751'.
[  534.579194][T30515] vxcan1: tx drop: invalid da for name 0x0000000000000014
[  534.812456][T30538] syzkaller1: entered promiscuous mode
[  534.814825][T30538] syzkaller1: entered allmulticast mode
[  534.853895][T30540] openvswitch: netlink: Key 13 has unexpected len 2 expected 24
[  535.270305][T30598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7782'.
[  535.304843][T30605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7784'.
[  536.175635][T30636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7791'.
[  536.561178][T30684] netlink: 'syz.1.7804': attribute type 1 has an invalid length.
[  536.575188][T30684] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  536.757133][   T61] block nbd1: Possible stuck request ffff888020840000: control (read@0,4096B). Runtime 180 seconds
[  538.101725][T30808] macvlan1: entered allmulticast mode
[  538.106231][T30808] bond7: entered allmulticast mode
[  538.110898][T30808] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  538.111043][T30814] netlink: 'syz.4.7846': attribute type 1 has an invalid length.
[  538.120183][T30808] bond7: left allmulticast mode
[  538.151341][T30814] 8021q: adding VLAN 0 to HW filter on device bond6
[  539.336986][T30876] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  539.700425][T30911] __nla_validate_parse: 7 callbacks suppressed
[  539.700435][T30911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7873'.
[  539.718844][T30913] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7875'.
[  539.749344][T30917] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7876'.
[  540.041576][T30962] netlink: 'syz.4.7890': attribute type 1 has an invalid length.
[  540.044313][T30962] netlink: 244 bytes leftover after parsing attributes in process `syz.4.7890'.
[  540.934201][T31036] netlink: 'syz.1.7913': attribute type 35 has an invalid length.
[  540.991251][T31038] geneve5: entered promiscuous mode
[  541.209927][T31077] syzkaller0: entered promiscuous mode
[  541.211817][T31077] syzkaller0: entered allmulticast mode
[  542.499782][T31106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7936'.
[  542.574664][T31121] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  542.579307][T31121] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7941'.
[  542.582297][T31121] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7941'.
[  543.010097][T31162] netlink: 'syz.1.7944': attribute type 1 has an invalid length.
[  543.012782][T31162] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7944'.
[  543.015697][T31162] netlink: 'syz.1.7944': attribute type 2 has an invalid length.
[  543.020021][T31162] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7944'.
[  543.025541][T31162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7944'.
[  543.177074][T31180] netlink: 'syz.4.7950': attribute type 2 has an invalid length.
[  543.251508][T31190] netlink: 'syz.4.7954': attribute type 13 has an invalid length.
[  543.254080][T31190] netlink: 'syz.4.7954': attribute type 17 has an invalid length.
[  543.264885][T31190] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  543.273569][T23071] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  543.521826][T31205] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  543.715684][T31220] netlink: 'syz.4.7964': attribute type 5 has an invalid length.
[  544.751096][T31262] __nla_validate_parse: 1 callbacks suppressed
[  544.751107][T31262] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7977'.
[  544.924297][T31278] : renamed from lo (while UP)
[  545.368425][T31316] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7993'.
[  545.372611][T31316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7993'.
[  545.380531][T31316] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  545.383831][T31316] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  545.409973][T31324] netlink: 5164 bytes leftover after parsing attributes in process `syz.4.7996'.
[  545.413031][T31324] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  545.462447][T31333] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7999'.
[  545.465716][T31333] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7999'.
[  545.472083][T31333] gretap0: entered promiscuous mode
[  545.474777][T31333] gretap0: left promiscuous mode
[  545.642619][T31353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8004'.
[  545.649718][T31352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8004'.
[  546.498075][T31402] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8020'.
[  546.907599][T31453] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8027'.
[  547.215954][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  547.810681][T31481] : entered promiscuous mode
[  547.873749][T31485] netlink: 'syz.1.8036': attribute type 4 has an invalid length.
[  548.466489][T31528] bond0: (slave gretap0): Error: Device type is different from other slaves
[  549.466569][T31603] gtp1: entered promiscuous mode
[  549.472814][T31603] gtp1: entered allmulticast mode
[  549.475283][T31604] sctp: [Deprecated]: syz.1.8079 (pid 31604) Use of int in max_burst socket option deprecated.
[  549.475283][T31604] Use struct sctp_assoc_value instead
[  549.518260][T31612] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.549311][T31612] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.595232][T31612] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.640507][T31612] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.738715][ T5849] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  549.748752][ T5849] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  549.760673][ T5849] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  549.772166][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  550.167836][T31688] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  550.172576][T31688] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  550.198411][T31689] delete_channel: no stack
[  550.201739][T31688] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  550.205803][T31688] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  550.208718][T31688] CPU: 1 UID: 0 PID: 31688 Comm: syz.3.8106 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10-dirty #0 PREEMPT(full) 
[  550.213282][T31688] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  550.216568][T31688] RIP: 0010:xfrm_state_find+0x4c9b/0x5400
[  550.218442][T31688] Code: 00 00 00 00 00 fc ff df 80 3c 03 00 74 08 4c 89 ff e8 d9 b1 0b f8 49 8b 1f 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 a7 b2 0b f8 4c 89 23 48 b8 00 00 00
[  550.224705][T31688] RSP: 0018:ffffc9000342f1a0 EFLAGS: 00010246
[  550.226732][T31688] RAX: 0000000000000000 RBX: 0000000000000000 RCX: dffffc0000000000
[  550.229351][T31688] RDX: ffffc90028bd1000 RSI: 0000000000000a67 RDI: 0000000000000a68
[  550.231965][T31688] RBP: ffffc9000342f3c0 R08: dffffc0000000000 R09: 0000000000000002
[  550.234593][T31688] R10: 000000000000000a R11: 0000000000000002 R12: ffff888111827aa8
[  550.237172][T31688] R13: ffff888111827a80 R14: ffff888111827aa8 R15: ffff888111827ab0
[  550.239787][T31688] FS:  00007ff2a688f6c0(0000) GS:ffff8881a3c80000(0000) knlGS:0000000000000000
[  550.242705][T31688] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  550.244866][T31688] CR2: 000000110c374e7c CR3: 0000000020dd2000 CR4: 00000000000006f0
[  550.247491][T31688] Call Trace:
[  550.248803][T31688]  <TASK>
[  550.249963][T31688]  ? __pfx___rt6_find_exception_rcu+0x10/0x10
[  550.252284][T31688]  ? xfrm_state_find+0x1da/0x5400
[  550.254239][T31688]  ? __pfx_xfrm_state_find+0x10/0x10
[  550.256240][T31688]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  550.258613][T31688]  ? xfrm_policy_lookup_bytype+0x2a7/0x1250
[  550.260915][T31688]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  550.263390][T31688]  ? xfrm_policy_lookup_bytype+0x123/0x1250
[  550.265338][T31688]  ? xfrm_policy_lookup_bytype+0x11ef/0x1250
[  550.267320][T31688]  ? ip6_dst_lookup_tail+0x2ca/0x1510
[  550.269216][T31688]  ? xfrm_expand_policies+0x41f/0x6a0
[  550.271353][T31688]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  550.273439][T31688]  ? ip6_dst_lookup_tail+0x2ca/0x1510
[  550.275497][T31688]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  550.277747][T31688]  ? sk_dst_check+0x25/0x480
[  550.279568][T31688]  xfrm_lookup_route+0x3c/0x1c0
[  550.281455][T31688]  ip6_sk_dst_lookup_flow+0x790/0x980
[  550.283525][T31688]  ? udpv6_sendmsg+0x1656/0x24b0
[  550.285394][T31688]  udpv6_sendmsg+0x183b/0x24b0
[  550.287239][T31688]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  550.289397][T31688]  ? __pfx_udpv6_sendmsg+0x10/0x10
[  550.291466][T31688]  ? __lock_acquire+0xab9/0xd20
[  550.293430][T31688]  ? __local_bh_enable_ip+0x12d/0x1c0
[  550.295496][T31688]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  550.297749][T31688]  ? inet_send_prepare+0x1b9/0x270
[  550.299736][T31688]  ? inet_send_prepare+0x1b9/0x270
[  550.301570][T31688]  ? inet6_sendmsg+0xe4/0x120
[  550.303158][T31688]  __sock_sendmsg+0xe5/0x270
[  550.304735][T31688]  __sys_sendto+0x3bd/0x520
[  550.306275][T31688]  ? __pfx___sys_sendto+0x10/0x10
[  550.307994][T31688]  ? do_futex+0x395/0x420
[  550.309457][T31688]  ? rcu_is_watching+0x15/0xb0
[  550.311089][T31688]  __x64_sys_sendto+0xde/0x100
[  550.312726][T31688]  do_syscall_64+0xfa/0x3b0
[  550.314265][T31688]  ? lockdep_hardirqs_on+0x9c/0x150
[  550.316138][T31688]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  550.318181][T31688]  ? exc_page_fault+0x9f/0xf0
[  550.319815][T31688]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  550.321822][T31688] RIP: 0033:0x7ff2a598ebe9
[  550.323356][T31688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  550.329721][T31688] RSP: 002b:00007ff2a688f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  550.332486][T31688] RAX: ffffffffffffffda RBX: 00007ff2a5bb5fa0 RCX: 00007ff2a598ebe9
[  550.335130][T31688] RDX: ffffffffffffff69 RSI: 0000000000000000 RDI: 0000000000000007
[  550.338136][T31688] RBP: 00007ff2a5a11e19 R08: 0000200000000540 R09: 000000000000001c
[  550.340915][T31688] R10: 0000000000044854 R11: 0000000000000246 R12: 0000000000000000
[  550.343569][T31688] R13: 00007ff2a5bb6038 R14: 00007ff2a5bb5fa0 R15: 00007ffe9d09d548
[  550.346203][T31688]  </TASK>
[  550.347251][T31688] Modules linked in:
[  550.348892][T31688] ---[ end trace 0000000000000000 ]---
[  550.350757][T31688] RIP: 0010:xfrm_state_find+0x4c9b/0x5400
[  550.352695][T31688] Code: 00 00 00 00 00 fc ff df 80 3c 03 00 74 08 4c 89 ff e8 d9 b1 0b f8 49 8b 1f 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 a7 b2 0b f8 4c 89 23 48 b8 00 00 00
[  550.359167][T31688] RSP: 0018:ffffc9000342f1a0 EFLAGS: 00010246
[  550.361195][T31688] RAX: 0000000000000000 RBX: 0000000000000000 RCX: dffffc0000000000
[  550.363812][T31688] RDX: ffffc90028bd1000 RSI: 0000000000000a67 RDI: 0000000000000a68
[  550.366464][T31688] RBP: ffffc9000342f3c0 R08: dffffc0000000000 R09: 0000000000000002
[  550.368970][T31688] R10: 000000000000000a R11: 0000000000000002 R12: ffff888111827aa8
[  550.371518][T31688] R13: ffff888111827a80 R14: ffff888111827aa8 R15: ffff888111827ab0
[  550.374069][T31688] FS:  00007ff2a688f6c0(0000) GS:ffff8881a3c80000(0000) knlGS:0000000000000000
[  550.377126][T31688] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  550.379269][T31688] CR2: 000000110c374e7c CR3: 0000000020dd2000 CR4: 00000000000006f0
[  550.381855][T31688] Kernel panic - not syncing: Fatal exception in interrupt
[  550.384845][T31688] Kernel Offset: disabled
[  550.386263][T31688] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:32:14  Registers:
info registers vcpu 0

CPU#0
RAX=b58ef4423bbfb200 RBX=ffffffff81969b18 RCX=b58ef4423bbfb200 RDX=0000000000000001
RSI=ffffffff8be309e0 RDI=ffffffff81969b18 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa07bf0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a18
RIP=ffffffff8b6fc4f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001840 CR3=000000002ffa4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007ff2a5a12e53
XMM06=0000000000000000 00007ff2a5a12e4d XMM07=0000000000000000 00007ff2a5a12e61
XMM08=0000000000000000 00007ff2a5a12ee7 XMM09=0000000000000000 00007ff2a5a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000054 RBX=0000000000000054 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001c6f RDI=0000000000001c70 RBP=00000000000003f8 RSP=ffffc9000342e930
R8 =ffff8881086f0237 R9 =1ffff110210de046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a958f0 R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ff2a688f6c0 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c374e7c CR3=0000000020dd2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007ff2a5b87498 00007ff2a5b87470 XMM03=00007ff2a5b874a8 00007ff2a5b874a0
XMM04=00007ff2a66ed100 00007ff2a5b87460 XMM05=00007ff2a5b87478 00007ff2a5b874c0
XMM06=00007ff2a5b874b8 00007ff2a5b874b0 XMM07=00007ff2a5b874a8 00007ff2a5b874a0
XMM08=0000000000000000 00007ff2a5a12ee7 XMM09=0000000000000000 00007ff2a5a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
