last executing test programs:

6m12.38805434s ago: executing program 1 (id=1002):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000003c0)=0x5, 0x4)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f00000002c0)="23000000010006", 0x7)
r1 = socket$inet6(0xa, 0x4, 0x7)
socket$nl_route(0x10, 0x3, 0x0)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004)
recvmmsg(r7, &(0x7f00000004c0), 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x2, 0x6}, 0x8)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, 0x0, 0xd01, 0x70bd28, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fdbe51ab651e8cc908000300", @ANYRESDEC=r7, @ANYBLOB="08002689f5750572ad7db89f425a580094090000"], 0x30}}, 0x48800)
r10 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
sendfile(r0, r10, 0x0, 0x1)

5m45.310253804s ago: executing program 1 (id=1005):
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x66, 0x8, 0x0, 0x0, 0xff000000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x200}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}, {0x85, 0x0, 0x0, 0xb4}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e02742e868fba54e3335729a5ce8", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async, rerun: 64)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x14) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x30, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000080)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040), 0x0, 0x40800) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async, rerun: 64)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)={0x44, r7, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0x44}}, 0x48040) (async)
nanosleep(&(0x7f0000000000), 0x0)
r8 = socket(0x10, 0x803, 0x0) (async, rerun: 32)
r9 = socket$unix(0x1, 0x1, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r10, {0xc, 0xffe0}, {0x0, 0x10}, {0xf, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x5, 0x0, 0x200}}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40010}, 0x20040054)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)

5m45.30717864s ago: executing program 1 (id=1007):
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f00000000c0)=""/147, &(0x7f0000000000)=0x93) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async)
bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r1, 0x4) (async)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000180)={0x283})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="54000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="802100000000000014000300776c616e300000000000000000000000080004000e0400001800168014000180100006"], 0x54}}, 0x0)

5m45.255858851s ago: executing program 1 (id=1010):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a40)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117300000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
sendmsg$DEVLINK_CMD_GET(r3, 0x0, 0x24000040)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x4, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000180)={'ip6gre0\x00', <r7=>0x0, 0x4, 0x4, 0xff, 0x40, 0x70, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x20, 0x700, 0x5, 0x90ec}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000500)={'syztnl0\x00', r7, 0x8, 0x40, 0x8, 0xfb, {{0x39, 0x4, 0x0, 0xb, 0xe4, 0x64, 0x0, 0x3, 0x29, 0x0, @multicast2, @remote, {[@cipso={0x86, 0x6f, 0x2, [{0x2, 0x10, "3b4f3b619cc46b7faf61ba0da963"}, {0x5, 0xf, "c2e73f63db14fda5cf05f2ac66"}, {0x2, 0x12, "ae948633993d667e914d5caaf94f9f2e"}, {0x2, 0xf, "9d9b5bb87276cdce1b8c32ccc4"}, {0x5, 0x3, '>'}, {0x6, 0x6, "1da0afac"}, {0x2, 0x10, "71013f5da71e2c2c973bc5d9b75a"}, {0x5, 0x10, "c37e54033ce1ebaa90f1ed421882"}]}, @ssrr={0x89, 0x27, 0x1e, [@loopback, @multicast2, @empty, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010100, @multicast1, @private=0xa010101]}, @lsrr={0x83, 0x23, 0x84, [@local, @local, @broadcast, @private=0xa010101, @multicast2, @remote, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x14, 0xde, 0x1, 0x3, [{@local, 0x5}, {@loopback, 0xfffffffc}]}]}}}}})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x3c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @random="76a3cdac698f"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x84)

5m45.025480477s ago: executing program 1 (id=1013):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCBRDELBR(r2, 0x89a3, &(0x7f0000000200)='veth1_to_hsr\x00')
r3 = socket(0x18, 0x6, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@local, 0x82})
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r4, 0x1000)
getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
sendmsg$nl_route(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x40004)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, 0x0, &(0x7f0000000500))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r6, &(0x7f0000000200), 0x806000)
ioctl$FS_IOC_RESVSP(r6, 0x4030582a, &(0x7f00000002c0)={0x0, 0x3, 0x7, 0x80000003})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000a00"})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0)

5m44.7890322s ago: executing program 1 (id=1017):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}, 0x1, 0x0, 0x0, 0xe0ffff}, 0x0)

5m44.564399771s ago: executing program 32 (id=1017):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}, 0x1, 0x0, 0x0, 0xe0ffff}, 0x0)

931.252895ms ago: executing program 2 (id=5097):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000100)=0x4)
syz_80211_inject_frame(0x0, &(0x7f0000000000)=ANY=[], 0xb5)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000001280)=ANY=[@ANYBLOB="48000025440605000700000000000000020000070c00078008001200000000050500050005000000ba29643b5855e920371ee1ff05000200000062fe040003000000ceef01000700000005000400030000006ee7bba5d7280ba0ecd81e4baf361e8f31237efa9f9c315ffd7f325607a3fb6d6b0fe99c887d6236431dc02e3239d3df261d19ecc4792bdf016093df10ba5c806761df8f3aa01b15982110d99064a390d3df1994ef2d94f0fc17a79a0fb3c02f440858c167c6acfaa6cb67c1b3c093796bc4ed55088455fb89f08758d1ada16c51268edfaa8a4c57c536ccb8fdfa755f96de30df39b8ac9d8004f74ffee7375c31e41aaaf3b9bfa8f1b4216c60cb3b94f2a195459af095e6ad12f563f8a59790bc07eab04a12ee678ba414c3"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x405)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001200)={&(0x7f0000001940)={0x2c4, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x114, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x497c47b557cff785}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x13c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x400c000}, 0x40000)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001880)={0x6, 0x16, &(0x7f0000000880)=ANY=[@ANYBLOB="921800181300", @ANYRES32=0x1, @ANYBLOB="000000000000000018100000", @ANYRES32=0x1, @ANYBLOB="00000000000000001845000002000000000000000000000018440000feffffff000000000000000018230000", @ANYRES32=0x1, @ANYBLOB="000000000300000018110000", @ANYRESDEC, @ANYBLOB="0000000000000000b7080000c0ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], &(0x7f0000000500)='syzkaller\x00', 0x6, 0x0, &(0x7f0000001780), 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000017c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000001800)={0x3, 0x10, 0x833, 0x8c43}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000001840)=[{0x0, 0x4, 0x8, 0x4}, {0x4, 0x2, 0xd, 0x5}, {0x3, 0x4, 0x3, 0xb}], 0x10, 0x2}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000740)={0x0, r2}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0xe, &(0x7f0000000740)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x2000, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1, 0xfffffffe}, 0x10, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
sendmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x20008010)
r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001400)=@o_path={&(0x7f0000000340)='./file0\x00', 0x0, 0x10, r2}, 0x18)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000014c0)={'ip6tnl0\x00', &(0x7f0000001440)={'syztnl2\x00', <r5=>0x0, 0x4, 0x6, 0x5, 0x82, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x8000, 0x10, 0xd}})
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001500), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="09000000080000003ffaffff0000000020000000", @ANYRES32=r4, @ANYBLOB='\t\x00'/20, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="00000000020000000200000000000000000000000000000000100000"], 0x50)
socket(0x26, 0x5, 0x8)
sendmsg$kcm(r2, &(0x7f0000000700)={&(0x7f00000003c0)=@ieee802154={0x24, @none={0x0, 0x1}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000440)="48eda5e1eefd2f7787d77a957aa36e5388f869fc8a3dc5f646a4", 0x1a}, {&(0x7f0000000480)="26897d8c47a2b1e835", 0x9}, {&(0x7f00000004c0)="6adc59f0d066756e088878a8dca8590056c1eb1da4a1fd39a1fda5b82c9cfb4d47b5128ffd6eab7a491ad56abc5808437a7ad051da9f8536526a1988aea8", 0x3e}, {&(0x7f0000000540)="caadeab9c53e4c64b97dba3044cf8f80c0a0a045aec6078a4498cb2f5369a9df4e330cf3c0ccb1589be96537cffc23b31fe89b467267118bdb9ce86b0b50", 0x3e}, {&(0x7f0000000640)="2a72357eea6c106178a942be3a202441b9c4ba6291e6e494e0206bcdc192ac1883b838e3772ad4e6dbd13531a49bbd1a466ac19dd39f5f6fe87c82ae2d4a0a2db9b1e006cf00dc51379e8ae93135560af471c52f5955de61cbe4b781620cf5e38712bea6412fca5971f89be72a45bb0b2cdbc7d516848eaca6d2cc66cc8e7436967f1dccaccd4d0ea1423c2b327577ba654fcbcd3cc81a688a9e410abe9447afe4c86659457c92c234371c54ddac65674d481e6371c0c270c296", 0xba}], 0x5, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x118}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="182400002457eecefabfca9adebfe9142e971a3c47d19534d8b545e90272899c64", @ANYRES64, @ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500100800000085000021380110000000"], &(0x7f0000000840)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x5c, 0x10, &(0x7f0000000200)={0x4, 0x6, 0x0, 0x80000000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x1, r4, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x4dc2}, 0x94)
r7 = socket$tipc(0x1e, 0x5, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10)
sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x89fc, &(0x7f0000000040)={'bond0\x00'})
sendmsg$inet(r1, &(0x7f00000013c0)={&(0x7f00000000c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001700)=[{&(0x7f0000000180)="4b17b692b49606a98f1579bab97bbf404b", 0x11}, {&(0x7f0000000b00)="c7c07c143ca806662bda71aef49dfda583ac33a153fe35424b4b4e7c93f7997aef54cd1adae3106c1a7e67a795c2b1bbc7c574cc5c7332328f6e443bde65457bf9e7504fbdaa79e59a5ff33940656dbf78de2ede41bf64e7a25852317b8830a9c8d7070be656bf5e21738fc326d343b43498730cced23fbc", 0x78}, {&(0x7f00000015c0)="661a141d60755305b4d604fc58fe7e9188a72e8daa5de3e1b1a29a865d087f5b4e9fe8bbc8afb6d769ef4fab9f1a97c08613e509aa21f0699a7ef487034a2d4f827fd813fdd591a58c4ca625b43b8ce2211964272764528150dba5b24cfeb23aa3cfecd6a5d072778123a45f5cb568252ee74cae72e76c128a699a012a1c5a439a453ec8c9828d68352316433ccbc3db2078fa8a7de08aa53a673ace046710a6d7d39e8dd228f36581d403cf9dafd949e3d38c45", 0xb4}, {&(0x7f0000000b80)="0ff77e153b65553bb685d69bdf7e2aae811aa3857ed21f678d90ea1484d5ac1d664bef59dbd9e21a914940e461db2b87c7cb67bf219a2bc0188064b45c0fd0e5f1f4d06082d0197df4f62405637e544fad0c2ddeabcf206976874634a80c8d0a4302cc7d9e0b0cbfadd59100f0f5710a", 0x70}, {&(0x7f0000001680)="0a5b391d9bf8c6138d3ec34c05b2605976a87d4dbb0311aca1c5b4346e472ed14aac85fec08de561afb84cb5812f259144f6249c73e91405330f1be023fb7304fd1113173a462c456531709566582594190757014cf8e135d1fcf985d6d49d2f7e5e520ae20db92fabb395a983edfc149aa5c3e257079a5c980c56b36f", 0x7d}], 0x5, &(0x7f0000000e00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80000001}}], 0x30}, 0x80)
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r9, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2)
r10 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r10, 0x29, 0x1a, &(0x7f0000000140)=0x6, 0x4)

680.372944ms ago: executing program 3 (id=5102):
r0 = socket(0x1d, 0x2, 0x6)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}})
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0x6, &(0x7f0000000300)=@framed={{0x18, 0x2, 0x0, 0x0, 0x200}, [@map_fd={0x18, 0x3, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x1f}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)={0x14, r3, 0x1, 0x70bc28, 0x25dfdbfc}, 0x14}}, 0x40) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x430b1cfb}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 32)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000400000002000000000000110300000001000000000000000100000d000000000000000000000000020000000000000c02000000000061"], 0x0, 0x4c, 0x0, 0x1}, 0x28) (async, rerun: 32)
r4 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) (async)
setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x3) (async)
sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001900674c0000000004000000fc000000000000000000000000000002e000000200000000000000000000000000000000000000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000400000000000008000000000000000000000000000fcffffffffffffff0000000000000000020000000002000000000000000000000000000000000000000400000000000000000000000000000a00100001"], 0xc4}}, 0x4c050) (async)
r8 = socket$key(0xf, 0x3, 0x2)
sendto$isdn(r0, &(0x7f0000000680)={0xfffffff9, 0x6, "19e5b3619e6bdb366b31e11325298b99f07353cad9a14d232926d410348a912df16181889d6025602bd502317c2636c7ff4fac69207ecf48922c8d63198b3f936deb826c4b8ad3cceafe1c658eedea7b98f7a90104c3919f552ee59b044a8be77b8615417f3e3611d877e99fdaf0289276fa60a245e95e275c08faf298d7f26d9f4c07f8377956acd7c2db62b397f0c28f6e6f5f9cbc9b378cee498c710e2ceb0f4f296c892df997286216571b986cd934d26b9e385fe17b46f48dd2927247be353f84884bce63c190cef016"}, 0xd4, 0x200040c1, &(0x7f0000000240)={0x22, 0x66, 0x8, 0x3, 0x3e}, 0x6) (async)
sendmsg$key(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02120909020000fa25bd7000fbdbdf25"], 0x10}}, 0x40010)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x7, &(0x7f00000000c0)="f8ffffff", 0x4) (async)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="54000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="802100000000000014000300776c616e300000000000000000000000080004000e0400001800168014000180100006"], 0x54}}, 0x0)

584.789465ms ago: executing program 3 (id=5104):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0xa, &(0x7f00000000c0)=0x1, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000540)=0x427b, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}]}, 0x10)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x80)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0)

525.667935ms ago: executing program 0 (id=5106):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000003c0)=0x5, 0x4) (async)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f00000002c0)="23000000010006", 0x7) (async, rerun: 64)
r1 = socket$inet6(0xa, 0x4, 0x7) (rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (async)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) (async)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x100}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) (async, rerun: 32)
r5 = socket$netlink(0x10, 0x3, 0x10) (rerun: 32)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async, rerun: 32)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) (async, rerun: 32)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464656073696d0000ed0ba413474c940f32707a67446a000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) (async)
recvmmsg(r8, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000780)=""/260, 0x104}, {0x0}, {&(0x7f0000002900)=""/4114, 0x1012}, {&(0x7f00000017c0)=""/220, 0xdc}, {&(0x7f0000000f40)=""/218, 0xda}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f00000008c0)=""/234, 0xea}], 0x8}, 0x80000002}], 0x3, 0x0, 0x0) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
r11 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x0) (async)
sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r10, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})

413.113583ms ago: executing program 3 (id=5107):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000400016803c0001800c000500f9ffffff3f060004280003"], 0x68}, 0x1, 0x0, 0x0, 0x44004}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x80, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0xfe}]}, 0x10)
r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50)
r6 = socket$alg(0x26, 0x5, 0x0)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bond0\x00', <r9=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d800000012"], 0xd8}, 0x1, 0x0, 0x0, 0x44040}, 0x0)
bind$alg(r6, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58)
r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4102a}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r12, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0)
r13 = socket$vsock_stream(0x28, 0x1, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r13, 0x0)
pipe(&(0x7f0000002740))
epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r4, &(0x7f00000002c0)={0x10})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f00000000c0), &(0x7f0000000100)=r10}, 0x20)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x1000)
sendmsg$NFT_BATCH(r12, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}, 0x1, 0x0, 0x0, 0x20000041}, 0x1)

410.044078ms ago: executing program 0 (id=5108):
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000280)={0x2, 0x1000}, 0x4)
ioctl$sock_SIOCBRDELBR(r1, 0x89a3, &(0x7f0000000200)='veth1_to_hsr\x00') (async)
ioctl$sock_SIOCBRDELBR(r1, 0x89a3, &(0x7f0000000200)='veth1_to_hsr\x00')
r2 = socket(0x26, 0x3, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'})
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r3, 0x1000)
getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
sendmsg$nl_route(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x40004)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, 0x0, &(0x7f0000000500)) (async)
getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, 0x0, &(0x7f0000000500))
r6 = openat$cgroup_ro(r5, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000280)={'wlan1\x00'})
sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000300000000f50663fcffacb16dc64bf70edd3597a176ef0ef8edae2612e8e174f82b7401000000000000009364e2b5a0f1b6120cf1fecc95f35bf8d37d7cf557f9adcd871afb4e12a48219493474c5f8f4f04bcd2cf2ed95d4c38776a0e27664193cdca0c094c8e699028c8f458a2ec5a26a07d509782fdb080bc90546033f28fa1167470720b430c2676004e07636e156e1221b25a95713f8b536fd764ac800"/180, @ANYRESDEC=r5, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x404c850)
write$cgroup_int(r6, &(0x7f0000000200), 0x806000) (async)
write$cgroup_int(r6, &(0x7f0000000200), 0x806000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)

408.447577ms ago: executing program 2 (id=5109):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000000010000081100000900000001"], 0x50)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)="d13c9633909a", 0x0, 0x1, r0}, 0x38) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xffffff01}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r2, 0x1) (async, rerun: 32)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) (rerun: 32)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async)
r4 = socket$packet(0x11, 0x3, 0x300) (async)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async)
recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x980, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0xfff}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r5, r0, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r7, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async)
unshare(0x62040200) (async, rerun: 32)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="97343a31000000000000000800035b0000001796b3dc5d376791af5890cba6819286ab98416d5a2dd9b26469a94bbbe651b6723e1d158b2bad32f3d473e3c30b807516e1f3a100"/81, @ANYRES32=r10, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000001002ec5fe2100", @ANYRES32=r10, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0) (async)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000280)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0x0, 0xa, 0x28}}}, 0x3f) (async)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b0000000080d110000010802110000000802110000001000000002000000"], 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0)

300.477258ms ago: executing program 3 (id=5110):
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x66, 0x8, 0x0, 0x0, 0xff000000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x200}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}, {0x85, 0x0, 0x0, 0xb4}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e02742e868fba54e3335729a5ce8", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4)
r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r5, &(0x7f0000000040), 0x10)
setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000000)=[{{0x2, 0x1, 0x1, 0x1}, {0x2, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}, {{0x3, 0x1}, {0x4, 0x1, 0x1}}], 0x18)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r4, 0xf505, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0)
write(r4, 0x0, 0x2b)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRESOCT=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYRESDEC=r7], 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x20000041)
sendmsg$inet6(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="bd", 0x1}], 0x1}, 0x4040845)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x14)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}}, 0x0)
bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
accept4(r8, 0x0, 0x0, 0x800)

299.042159ms ago: executing program 0 (id=5111):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x2, &(0x7f0000000400)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x216}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async)
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@broadcast, @dev, @val={@val={0x88a8, 0x1, 0x1, 0x2}, {0x8100, 0x0, 0x1}}, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x4, 0x0, @private2, @mcast2}}}}, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50)
r2 = socket$vsock_stream(0x28, 0x1, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r3], 0x20}}, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async, rerun: 32)
listen(r0, 0xfffffffc) (rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f00000003c0)) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106) (async, rerun: 32)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f00000002c0)={'ip_vti0\x00', <r6=>0x0, 0x7800, 0x20, 0xffffffff, 0x4, {{0x12, 0x4, 0x3, 0x3, 0x48, 0x64, 0x0, 0x80, 0x29, 0x0, @broadcast, @broadcast, {[@lsrr={0x83, 0x1b, 0x21, [@remote, @private=0xa010100, @broadcast, @broadcast, @loopback, @rand_addr=0x64010102]}, @cipso={0x86, 0x16, 0x1, [{0x5, 0x10, "676ff11144898e38f8d00b7696f1"}]}]}}}}})
setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000340)={@dev={0xfe, 0x80, '\x00', 0x3e}, r6}, 0x14) (async, rerun: 64)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async, rerun: 64)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000380)={'wpan3\x00'}) (async, rerun: 32)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async)
recvmmsg(r8, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001740)=""/4071, 0xfe7}, {&(0x7f00000012c0)=""/165, 0xa5}, {&(0x7f0000001380)=""/127, 0x7f}, {&(0x7f0000001440)=""/131, 0x89}, {&(0x7f0000000000)=""/48, 0x30}], 0x5}, 0x4}], 0x45, 0x12000, 0x0)

231.401092ms ago: executing program 0 (id=5112):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x148, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0xf}, {0xe, 0xd}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0xf4, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x731, 0x2, 0x3, 0x9}}, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x9, 0x4, 0x80, 0xffffff0f}}, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x8000, 0x2, 0xe, 0xf}}, @TCA_CBS_PARMS={0x18, 0x1, {0xfb, '\x00', 0x0, 0x3, 0xfffffff8, 0x6}}, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0x8001, 0xff, 0xeba, 0xfffc}}, @TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0x0, 0x7d10, 0x3}}, @TCA_CBS_PARMS={0x18, 0x1, {0xff, '\x00', 0x4, 0x8, 0x2000000, 0x8}}, @TCA_CBS_PARMS={0x18, 0x1, {0x9b, '\x00', 0x824, 0xea38, 0x10001, 0x8}}, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0xffffff81, 0x5, 0x6, 0xfff}}, @TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0x2, 0x3, 0x5, 0x4}}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket(0x1e, 0x2, 0xb5)
syz_emit_ethernet(0x82, &(0x7f0000000240)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @rand_addr=0x4, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000089}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0)

229.621702ms ago: executing program 0 (id=5113):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200)=0x427f, 0x4)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)
sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="f6ff00000000", @ANYRES32=0x0, @ANYBLOB="0800030000000000"], 0x2e}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}]}, 0x10)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x38}}, 0x80)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000080)="f78d9ca3163448412ba8000000000000", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000000640)="a40fe8399992dcbd7a9a03d5e07773238ff86081543f1ce25e205e99338d0a597416ede6471f4c920fa76276f92275ec764a000000000000", 0x38}], 0x4, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r2)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000006c0)={&(0x7f0000000540), 0xc, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB="7cf2c58e6148f5d6230d171b92665a232f9401547420c72d498d40dc2515fd2455d81e794e8e6ecea89001525f99e725ecf2e556544fa2a97292d64ca6edaf6da6bfd5562cdbf3808d12157b06bf2514e4a01f014ef554111ae24532a02e32c4fb79c76e55095e7381454ee1f317133bc7616d8cc6595d59c750f28cb25f0152f8c5209babfd45c3bebb3426f11cce9af79396", @ANYRES16=r5, @ANYBLOB="00042dbd7000fedbdf250e00000008000400680b0000"], 0x1c}, 0x1, 0x0, 0x0, 0x8081}, 0x4004)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r6 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x81}, 0x8)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c)
sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000eeff000000000700000000007912b8105c13ba2b8d9c5294000000"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0xe}, 0x94)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000340)={0x1, 'wlan1\x00', {}, 0x9})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES64=0x0, @ANYRES16=r7, @ANYRES32=r8, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014011}, 0x0)

170.919267ms ago: executing program 2 (id=5114):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x80040001, 0x0, 0x0, 0x40f00, 0x18}, 0x94)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000003", @ANYRES16=0x0, @ANYBLOB="000000000000000000000e000000"], 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000200)={0x18, r7, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) (async)
setsockopt(r5, 0x4, 0x7fff, 0x0, 0x0) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6)
sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4c68340}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x198, r8, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x1, 0x1, 0x0, {0x7fff, 0x4, 0x0, 0x5, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x800, 0x8001, 0x1}}, @NL80211_ATTR_IE={0x2d, 0x2a, [@ht={0x2d, 0x1a, {0x800, 0x0, 0x3, 0x0, {0x1de4, 0x9f0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8, 0x7, 0x6}}, @cf={0x4, 0x6, {0x7f, 0x6, 0x1, 0x7}}, @channel_switch={0x25, 0x3, {0x0, 0x4, 0x7}}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x1}, @NL80211_ATTR_KEYS={0x118, 0x51, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "5b9777ace05434846bb3c0b784"}, @NL80211_KEY_SEQ={0x6, 0x4, '3\f'}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "ae99c85b6f"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x10, 0x4, "4db5d56f1c0e67ca26f731d7"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "1317c234adef54c97a7f69c9e9"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_TYPE={0x8}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "924a2b9b98f7c620bce78c0bb9"}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_SEQ={0x8, 0x4, "cd5bef1d"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "0da261f3f5"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "46fced2444"}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "579df7cd70"}]}]}, @NL80211_ATTR_PBSS={0x4}]}, 0x198}, 0x1, 0x0, 0x0, 0x8011}, 0x4040) (async)
ioctl(r4, 0x8b1a, &(0x7f0000000040))

90.230784ms ago: executing program 3 (id=5115):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000000)=0x8000007, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="911001000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x800)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r1, &(0x7f0000000000)={0x0, 0x6, 0xfc, 0xfc, 0x1}, 0x8)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x1405, 0x20, 0x70bd29, 0x25dfdbfd, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)

89.674324ms ago: executing program 2 (id=5116):
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008040) (async)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008040)
socket$unix(0x1, 0x1, 0x0) (async)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7fff, 0x4, 0xe, 0x0, 0x5661}, 0x5, 0x1, 0x1, 0x6, 0x100, 0x1c, 0x1e, 0xf, 0x6, 0xb, {0x563d, 0x1000, 0x8, 0x6, 0x9, 0x1}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x4090)
connect$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}})
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x40000) (async)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x40000)
socket(0x2b, 0x1, 0x1)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x4) (async)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000003e0007012dbd7000fcdbdf25047c0000040000001400018006", @ANYRES32=0x0, @ANYBLOB="9bb89d6bc52ef377a01ff7eb1568257dd36482dd75dab204a09dee121a74e9a739"], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000)
socket$kcm(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000300), 0x4) (async)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000300), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r7, 0xfffffffc)
socket$inet_mptcp(0x2, 0x1, 0x106)

88.395538ms ago: executing program 3 (id=5117):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x10000000}]}}]}, 0x3c}}, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'})
r4 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r5, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) (async)
connect$rose(r5, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
connect$rose(r5, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @default, @bcast, @bcast]}, 0x40)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x5}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x1}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x7ffe, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0xffff, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008050}, 0x20004044) (async)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x7ffe, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0xffff, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008050}, 0x20004044)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl2\x00', r8, 0x7800, 0x7800, 0x6, 0x6, {{0x26, 0x4, 0x3, 0xd, 0x98, 0x64, 0x0, 0xc, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x89, 0xb, "91c6a38b8e39dea2b3"}, @timestamp_addr={0x44, 0x54, 0x52, 0x1, 0x8, [{@remote, 0x40}, {@remote, 0xda42}, {@empty}, {@multicast1, 0x4}, {@rand_addr=0x64010101, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0xa}, {@multicast1}, {@private=0xa010101, 0xb}, {@empty, 0xe8c}, {@rand_addr=0x64010101, 0x3}]}, @generic={0x89, 0xb, "2c28ebc234b6b12dc0"}, @end, @lsrr={0x83, 0x13, 0x5c, [@empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x1d}, @broadcast]}, @generic={0x0, 0x2}, @lsrr={0x83, 0x3, 0xb6}]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl2\x00', r8, 0x7800, 0x7800, 0x6, 0x6, {{0x26, 0x4, 0x3, 0xd, 0x98, 0x64, 0x0, 0xc, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x89, 0xb, "91c6a38b8e39dea2b3"}, @timestamp_addr={0x44, 0x54, 0x52, 0x1, 0x8, [{@remote, 0x40}, {@remote, 0xda42}, {@empty}, {@multicast1, 0x4}, {@rand_addr=0x64010101, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0xa}, {@multicast1}, {@private=0xa010101, 0xb}, {@empty, 0xe8c}, {@rand_addr=0x64010101, 0x3}]}, @generic={0x89, 0xb, "2c28ebc234b6b12dc0"}, @end, @lsrr={0x83, 0x13, 0x5c, [@empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x1d}, @broadcast]}, @generic={0x0, 0x2}, @lsrr={0x83, 0x3, 0xb6}]}}}}})
socket$unix(0x1, 0x1, 0x0) (async)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
socket$nl_route(0x10, 0x3, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@getchain={0x5c, 0x66, 0x100, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xd, 0xc}, {0xa, 0x3}, {0xffff, 0xf}}, [{0x8, 0xb, 0x7ff}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x1f8}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x401}, {0x8, 0xb, 0x10}, {0x8, 0xb, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80e1}, [@IFLA_PHYS_SWITCH_ID={0x24, 0x24, "00de5e16089fbd8d48cc58fb845707947564ccbbc3acd5e5989807da08b1f209"}]}, 0x44}}, 0x0)
unshare(0x6020400) (async)
unshare(0x6020400)
unshare(0x2e000400) (async)
unshare(0x2e000400)
socket$nl_netfilter(0x10, 0x3, 0xc)

87.598547ms ago: executing program 0 (id=5118):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x3})
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4)
setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, 0x0, 0x0)
setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000080)=0x7, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@link_local={0x5}, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x1000, 0x2]}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0xb2}}}}}}}}, 0x0)
r4 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r5 = socket$unix(0x1, 0x2, 0x0)
r6 = socket$unix(0x1, 0x2, 0x0)
r7 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000000)={0x80000000})
connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r6, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ppoll(&(0x7f0000000300)=[{r6, 0x3328}, {r5, 0x4236}], 0x2, 0x0, 0x0, 0x0)
close(r4)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRES16=r2, @ANYBLOB="200001"], 0x38}}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x2d, 0x9, 0x70bd27, 0x0, {0x5}, [@typed={0x14, 0xa, 0x0, 0x0, @ipv6=@loopback={0x200000000000000}}]}, 0x28}}, 0x84)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0x32}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0xff24, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0xfa665a81a6d02b4d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0)

1.473002ms ago: executing program 2 (id=5119):
r0 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c) (async)
setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4) (async)
sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1, 0x0, 0x3}, 0x18) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0) (async)
r5 = socket(0x6, 0x3, 0xc) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x20000810) (async)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async)
r7 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r8, 0x400448c9, 0x0) (async)
sendmmsg$inet(r7, &(0x7f00000005c0)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)='\x00', 0x1}, {&(0x7f0000000180)="5440caa287f3778894bb87ab40e30af2c3e6d4d14053d588f13464ba78f9136f50fc376cbaa57ca583288d768cee60fef7a96366e2e42fab59", 0x39}], 0x2}}], 0x1, 0x2400c042)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000078c0)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0x9, 0xffff}, {0xc}}}, 0x24}}, 0x0) (async)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000020000000001a0000001c0000800400010200000800060000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2)
sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0)

0s ago: executing program 2 (id=5120):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200)=0x427f, 0x4)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000001c0)={0x3f, 0x3}, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}]}, 0x10)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x38}}, 0x80)
accept4(r1, &(0x7f0000000680)=@ax25={{0x3, @null}, [@netrom, @remote, @default, @remote, @bcast, @netrom, @null, @null]}, &(0x7f0000000700)=0x80, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'lo\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001400b59527bd7000ffdbdf250a1700ff", @ANYRES32=r5, @ANYBLOB="140002000000000000000000000100000000000108000800400100"], 0x34}, 0x1, 0x0, 0x0, 0x2004c040}, 0x10)
sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f0000000640)={&(0x7f0000000340), 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x68, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x29}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x2}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x800, 0x2, 0x4, 0x0, {0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x70e, 0xd26c, 0x1}}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x4}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x1}, @NL80211_MESHCONF_MAX_RETRIES={0x5}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES64=r2, @ANYBLOB="090024bd70401e0001000000000008000300457f3637e0367483", @ANYRESDEC=r1, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0)

kernel console output (not intermixed with test programs):

ype 13 has an invalid length.
[  368.511112][T23726] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  368.518145][T23735] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  368.522052][T23735] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  370.067771][T23837] lo speed is unknown, defaulting to 1000
[  370.579100][T23875] __nla_validate_parse: 22 callbacks suppressed
[  370.579112][T23875] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3738'.
[  371.034301][T23893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3742'.
[  371.040323][T23893] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3742'.
[  371.191349][T23899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3743'.
[  371.270564][T23902] 8021q: VLANs not supported on ip6tnl0
[  371.520431][T23927] Unsupported ieee802154 address type: 0
[  371.686405][T23939] IPVS: Error connecting to the multicast addr
[  371.767120][T23926] validate_nla: 9 callbacks suppressed
[  371.767141][T23926] netlink: 'syz.2.3748': attribute type 10 has an invalid length.
[  371.824548][T23926] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  371.828621][T23926] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  371.982175][T23973] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3756'.
[  372.303328][T23982] pim6reg1: entered promiscuous mode
[  372.306331][T23982] pim6reg1: entered allmulticast mode
[  372.461975][T23994] netlink: 'syz.2.3759': attribute type 13 has an invalid length.
[  372.466015][T23994] netlink: 'syz.2.3759': attribute type 17 has an invalid length.
[  372.527253][T23994] 8021q: adding VLAN 0 to HW filter on device bond0
[  372.530449][T23994] 8021q: adding VLAN 0 to HW filter on device team0
[  372.534473][T23994] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  372.569370][T24000] netlink: 'syz.0.3761': attribute type 10 has an invalid length.
[  372.773245][T24025] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3766'.
[  372.780113][T24026] syzkaller1: entered promiscuous mode
[  372.781863][T24026] syzkaller1: entered allmulticast mode
[  372.838527][T24043] "syz.2.3768" (24043) uses obsolete ecb(arc4) skcipher
[  372.843359][T24030] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3767'.
[  372.846520][T24030] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-alb(6)
[  372.918932][T24038] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3767'.
[  372.921813][T24038] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3767'.
[  372.927061][T24037] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3767'.
[  373.201921][T24085] netlink: 'syz.0.3776': attribute type 13 has an invalid length.
[  373.214553][T24087] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  373.232001][T24087] veth0_to_team: entered promiscuous mode
[  373.324152][T24091] netlink: 'syz.3.3777': attribute type 10 has an invalid length.
[  373.327526][T24091] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[  373.901149][T24099] "syz.2.3779" (24099) uses obsolete ecb(arc4) skcipher
[  373.952903][T24099] wlan0: left promiscuous mode
[  374.080031][T24103] netlink: 'syz.2.3780': attribute type 10 has an invalid length.
[  374.352495][T24117] IPVS: Error connecting to the multicast addr
[  374.441941][T24131] netlink: 'syz.0.3785': attribute type 1 has an invalid length.
[  374.614342][T24149] IPVS: Scheduler module ip_vs_sip not found
[  374.638209][T24148] IPVS: Scheduler module ip_vs_sip not found
[  375.340959][T24188] netlink: 'syz.2.3791': attribute type 10 has an invalid length.
[  375.504637][T24193] bridge7: entered promiscuous mode
[  375.507071][T24193] bridge7: entered allmulticast mode
[  375.511626][T24193] team0: Port device bridge7 added
[  375.521181][T24198] bridge8: entered promiscuous mode
[  375.523328][T24198] bridge8: entered allmulticast mode
[  375.527716][T24198] team0: Port device bridge8 added
[  375.603978][T24204] netlink: 'syz.3.3794': attribute type 1 has an invalid length.
[  375.608703][T24204] __nla_validate_parse: 10 callbacks suppressed
[  375.608713][T24204] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3794'.
[  375.674961][T24213] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  375.680410][T24213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3796'.
[  375.701564][T24215] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3797'.
[  375.713445][T24215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3797'.
[  375.785797][T24219] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3799'.
[  375.840995][T24223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3800'.
[  375.845825][T24223] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3800'.
[  375.849245][T24223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3800'.
[  375.853444][T24223] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3800'.
[  375.892034][T24232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3801'.
[  375.989228][T24244] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  376.023870][T24244] team0: Port device bridge7 removed
[  376.037203][T24244] team0: Port device bridge8 removed
[  376.098368][T24250] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  376.447708][T24275] syzkaller0: entered promiscuous mode
[  376.449622][T24275] syzkaller0: entered allmulticast mode
[  376.462895][T24275] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) !
[  376.981021][T24291] syz.3.3815: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  376.986187][T24291] CPU: 1 UID: 0 PID: 24291 Comm: syz.3.3815 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  376.986200][T24291] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  376.986207][T24291] Call Trace:
[  376.986211][T24291]  <TASK>
[  376.986216][T24291]  dump_stack_lvl+0x189/0x250
[  376.986240][T24291]  ? __pfx_dump_stack_lvl+0x10/0x10
[  376.986257][T24291]  ? __pfx__printk+0x10/0x10
[  376.986280][T24291]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  376.986301][T24291]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  376.986316][T24291]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  376.986330][T24291]  warn_alloc+0x214/0x310
[  376.986350][T24291]  ? stack_depot_save_flags+0x40/0x860
[  376.986372][T24291]  ? __pfx_warn_alloc+0x10/0x10
[  376.986420][T24291]  ? kasan_save_track+0x4f/0x80
[  376.986438][T24291]  ? xskq_create+0x56/0x170
[  376.986454][T24291]  ? xsk_init_queue+0xb0/0x110
[  376.986468][T24291]  ? xsk_setsockopt+0x4dc/0x8d0
[  376.986480][T24291]  ? do_sock_setsockopt+0x17c/0x1b0
[  376.986502][T24291]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  376.986524][T24291]  ? do_syscall_64+0xfa/0x3b0
[  376.986540][T24291]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.986553][T24291]  __vmalloc_node_range_noprof+0x125/0x12f0
[  376.986581][T24291]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  376.986595][T24291]  ? __kasan_kmalloc+0x93/0xb0
[  376.986607][T24291]  vmalloc_user_noprof+0xad/0xf0
[  376.986618][T24291]  ? xskq_create+0xbf/0x170
[  376.986629][T24291]  xskq_create+0xbf/0x170
[  376.986641][T24291]  xsk_init_queue+0xb0/0x110
[  376.986652][T24291]  xsk_setsockopt+0x4dc/0x8d0
[  376.986662][T24291]  ? __pfx_xsk_setsockopt+0x10/0x10
[  376.986671][T24291]  ? __pfx_aa_sk_perm+0x10/0x10
[  376.986686][T24291]  ? aa_sock_opt_perm+0xff/0x1b0
[  376.986695][T24291]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  376.986705][T24291]  ? __pfx_xsk_setsockopt+0x10/0x10
[  376.986715][T24291]  do_sock_setsockopt+0x17c/0x1b0
[  376.986729][T24291]  __x64_sys_setsockopt+0x13f/0x1b0
[  376.986740][T24291]  do_syscall_64+0xfa/0x3b0
[  376.986750][T24291]  ? lockdep_hardirqs_on+0x9c/0x150
[  376.986760][T24291]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.986768][T24291]  ? exc_page_fault+0x9f/0xf0
[  376.986778][T24291]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.986786][T24291] RIP: 0033:0x7fad8f58ebe9
[  376.986795][T24291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  376.986802][T24291] RSP: 002b:00007fad8d7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  376.986813][T24291] RAX: ffffffffffffffda RBX: 00007fad8f7b5fa0 RCX: 00007fad8f58ebe9
[  376.986819][T24291] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  376.986823][T24291] RBP: 00007fad8f611e19 R08: 0000000000000004 R09: 0000000000000000
[  376.986829][T24291] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  376.986834][T24291] R13: 00007fad8f7b6038 R14: 00007fad8f7b5fa0 R15: 00007ffe3ab277a8
[  376.986848][T24291]  </TASK>
[  376.986852][T24291] Mem-Info:
[  377.040249][T24297] IPVS: Error connecting to the multicast addr
[  377.040813][T24291] active_anon:5471 inactive_anon:0 isolated_anon:0
[  377.040813][T24291]  active_file:1396 inactive_file:38329 isolated_file:0
[  377.040813][T24291]  unevictable:1768 dirty:42 writeback:0
[  377.040813][T24291]  slab_reclaimable:9975 slab_unreclaimable:103412
[  377.040813][T24291]  mapped:18351 shmem:2442 pagetables:1111
[  377.040813][T24291]  sec_pagetables:0 bounce:0
[  377.040813][T24291]  kernel_misc_reclaimable:0
[  377.040813][T24291]  free:245507 free_pcp:21176 free_cma:0
[  377.100777][T24291] Node 0 active_anon:13752kB inactive_anon:0kB active_file:4460kB inactive_file:137460kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:48820kB dirty:120kB writeback:0kB shmem:4740kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7188kB pagetables:2936kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  377.110681][T24291] Node 1 active_anon:8200kB inactive_anon:0kB active_file:1124kB inactive_file:15856kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24652kB dirty:48kB writeback:0kB shmem:5028kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6588kB pagetables:1576kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  377.120847][T24291] Node 0 DMA free:14708kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:652kB local_pcp:368kB free_cma:0kB
[  377.130204][T24291] lowmem_reserve[]: 0 811 811 811 811
[  377.132023][T24291] Node 0 DMA32 free:186872kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13752kB inactive_anon:0kB active_file:4460kB inactive_file:137460kB unevictable:3536kB writepending:120kB present:1556484kB managed:830956kB mlocked:0kB bounce:0kB free_pcp:41152kB local_pcp:17272kB free_cma:0kB
[  377.141819][T24291] lowmem_reserve[]: 0 0 0 0 0
[  377.143398][T24291] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  377.152803][T24291] lowmem_reserve[]: 0 0 854 854 854
[  377.154551][T24291] Node 1 Normal free:321476kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8200kB inactive_anon:0kB active_file:1124kB inactive_file:15856kB unevictable:3536kB writepending:48kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:42572kB local_pcp:23536kB free_cma:0kB
[  377.164484][T24291] lowmem_reserve[]: 0 0 0 0 0
[  377.166106][T24291] Node 0 DMA: 3*4kB (U) 3*8kB (UM) 1*16kB (M) 4*32kB (UM) 3*64kB (UM) 4*128kB (UM) 4*256kB (UM) 5*512kB (UM) 6*1024kB (UM) 2*2048kB (U) 0*4096kB = 14708kB
[  377.171015][T24291] Node 0 DMA32: 486*4kB (UME) 812*8kB (UME) 320*16kB (UME) 294*32kB (UME) 291*64kB (UME) 161*128kB (UM) 65*256kB (UME) 23*512kB (UME) 12*1024kB (UM) 5*2048kB (UM) 18*4096kB (U) = 186872kB
[  377.177023][T24291] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  377.182191][T24291] Node 1 Normal: 1269*4kB (UM) 814*8kB (UME) 410*16kB (UE) 258*32kB (UME) 378*64kB (UME) 174*128kB (UME) 33*256kB (UME) 13*512kB (UME) 20*1024kB (UME) 4*2048kB (UME) 50*4096kB (UM) = 321444kB
[  377.188234][T24291] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  377.191121][T24291] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  377.193980][T24291] 42167 total pagecache pages
[  377.195605][T24291] 0 pages in swap cache
[  377.196900][T24291] Free swap  = 124996kB
[  377.198193][T24291] Total swap = 124996kB
[  377.199538][T24291] 786301 pages RAM
[  377.200727][T24291] 0 pages HighMem/MovableOnly
[  377.202201][T24291] 241330 pages reserved
[  377.203500][T24291] 0 pages cma reserved
[  377.341746][T24309] validate_nla: 7 callbacks suppressed
[  377.341759][T24309] netlink: 'syz.3.3819': attribute type 13 has an invalid length.
[  377.450493][T24318] netlink: 'syz.3.3821': attribute type 10 has an invalid length.
[  378.061376][T24368] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  378.177181][T24377] netlink: 'syz.3.3828': attribute type 10 has an invalid length.
[  378.180358][T24377] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[  378.188260][T24368] netlink: 'syz.3.3828': attribute type 10 has an invalid length.
[  378.196868][T24368] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  378.203962][T24368] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  378.290706][T24394] netlink: 'syz.0.3830': attribute type 10 has an invalid length.
[  378.307828][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  378.990923][T24437] netlink: 'syz.3.3835': attribute type 13 has an invalid length.
[  378.994038][T24436] netlink: 'syz.3.3835': attribute type 13 has an invalid length.
[  379.127752][T24451] vlan2: entered promiscuous mode
[  379.134129][T24451] team0: entered promiscuous mode
[  379.141629][T24451] vlan2: entered allmulticast mode
[  379.143782][T24451] team0: entered allmulticast mode
[  379.167608][T24455] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  379.230216][T24455] netlink: 'syz.3.3840': attribute type 10 has an invalid length.
[  379.257615][T24451] netlink: 'syz.2.3839': attribute type 10 has an invalid length.
[  379.552662][T24493] "syz.0.3848" (24493) uses obsolete ecb(arc4) skcipher
[  379.555854][T24493] bridge7: left promiscuous mode
[  379.557566][T24493] bridge7: left allmulticast mode
[  379.559613][T24493] bridge8: left promiscuous mode
[  379.561486][T24493] bridge8: left allmulticast mode
[  379.637098][T24498] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  379.637444][T24496] IPVS: stopping backup sync thread 24498 ...
[  379.776371][T24506] netlink: 'syz.2.3851': attribute type 10 has an invalid length.
[  380.530021][T24546] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[  380.534795][T24546] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  380.578902][T24553] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  380.712167][T24553] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  380.718228][T24553] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  380.721741][T24553] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  380.728476][T24561] __nla_validate_parse: 14 callbacks suppressed
[  380.728492][T24561] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3862'.
[  380.736780][T24563] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3862'.
[  381.435899][T24607] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3871'.
[  381.439632][T24613] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3871'.
[  381.638249][T24636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3876'.
[  381.665299][T24638] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3877'.
[  381.754542][T24641] IPVS: Error connecting to the multicast addr
[  381.887604][T24655] IPVS: Error connecting to the multicast addr
[  381.934363][T24663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3882'.
[  381.956096][T24663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3882'.
[  382.599862][T24715] vlan0: entered promiscuous mode
[  382.602132][T24715] team_slave_1: entered promiscuous mode
[  382.659589][T24721] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3893'.
[  382.788505][T24727] validate_nla: 8 callbacks suppressed
[  382.788522][T24727] netlink: 'syz.0.3895': attribute type 10 has an invalid length.
[  382.798904][T24727] bond0: option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6)
[  382.845700][T24727] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3895'.
[  383.009332][T24741] netlink: 'syz.3.3898': attribute type 13 has an invalid length.
[  383.153972][T24744] IPVS: Error connecting to the multicast addr
[  383.156870][T24745] IPVS: Error connecting to the multicast addr
[  383.271490][T24772] "syz.2.3904" (24772) uses obsolete ecb(arc4) skcipher
[  383.280895][T24773] vti1: entered promiscuous mode
[  383.300041][T24771] netlink: 'syz.3.3903': attribute type 10 has an invalid length.
[  383.317527][T24782] netlink: 'syz.2.3905': attribute type 10 has an invalid length.
[  383.939514][T24800] netlink: 'syz.3.3906': attribute type 10 has an invalid length.
[  384.055284][T24806] netlink: 'syz.0.3908': attribute type 10 has an invalid length.
[  384.478880][T24833] netlink: 'syz.2.3915': attribute type 10 has an invalid length.
[  384.510213][T24836] netlink: 'syz.2.3917': attribute type 13 has an invalid length.
[  384.584024][T24836] syzkaller0: entered promiscuous mode
[  384.586782][T24836] syzkaller0: entered allmulticast mode
[  385.786178][T24845] netlink: 'syz.3.3918': attribute type 10 has an invalid length.
[  385.789845][T24845] __nla_validate_parse: 10 callbacks suppressed
[  385.789856][T24845] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3918'.
[  385.795428][T24845] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3918'.
[  385.798397][T24845] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3918'.
[  385.801555][T24845] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3918'.
[  385.853425][T24847] netlink: 'syz.2.3919': attribute type 1 has an invalid length.
[  385.856210][T24847] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3919'.
[  385.946298][T24862] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3923'.
[  386.132526][T24890] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  386.139800][  T793] lo speed is unknown, defaulting to 1000
[  386.147365][  T793] syz1: Port: 1 Link ACTIVE
[  386.183439][T24900] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3929'.
[  386.255349][T24906] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3931'.
[  386.394007][T24914] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3933'.
[  386.398497][T24914] bridge0: entered allmulticast mode
[  386.403524][T24914] "syz.0.3933" (24914) uses obsolete ecb(arc4) skcipher
[  386.471617][T24919] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  386.546430][T24924] geneve2: entered promiscuous mode
[  386.549787][ T5875] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  386.553686][ T5875] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  386.557867][ T5875] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  386.560401][ T5875] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  386.597495][T24926] "syz.2.3937" (24926) uses obsolete ecb(arc4) skcipher
[  386.610323][T24926] vti1: left promiscuous mode
[  386.719171][T24928] lo speed is unknown, defaulting to 1000
[  387.017810][T24935] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3939'.
[  387.293161][T24961] IPVS: Error connecting to the multicast addr
[  387.329901][T24962] lo speed is unknown, defaulting to 1000
[  387.380683][   T33] audit: type=1800 audit(1755206731.762:7): pid=24964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3945" name="x000000000000000600000000000000000000006" dev="tmpfs" ino=6747 res=0 errno=0
[  387.392719][   T33] audit: type=1804 audit(1755206731.782:8): pid=24964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3945" name="x000000000000000600000000000000000000006" dev="tmpfs" ino=6747 res=1 errno=0
[  388.498776][T25000] tipc: Resetting bearer <eth:gre0>
[  388.615970][ T6011] lo speed is unknown, defaulting to 1000
[  388.617834][ T6011] syz1: Port: 1 Link DOWN
[  388.650496][ T5875] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  388.653973][ T5875] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  388.698105][ T5875] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  388.702203][ T5875] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  388.940836][T25031] validate_nla: 4 callbacks suppressed
[  388.940852][T25031] netlink: 'syz.0.3958': attribute type 13 has an invalid length.
[  389.037487][T25037] veth5: entered allmulticast mode
[  390.091872][T25079] netlink: 'syz.0.3966': attribute type 10 has an invalid length.
[  390.284595][T25106] "syz.2.3972" (25106) uses obsolete ecb(arc4) skcipher
[  390.349869][T25099] IPVS: Error connecting to the multicast addr
[  390.352107][T25101] IPVS: Error connecting to the multicast addr
[  390.594202][T25145] bridge0: left allmulticast mode
[  390.599483][T25145] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  390.608957][T25145] vlan0: left promiscuous mode
[  390.611442][T25145] team_slave_1: left promiscuous mode
[  390.614457][T25145] geneve2: left promiscuous mode
[  390.619593][T25145] veth5: left allmulticast mode
[  390.661554][T25148] bridge9: the hash_elasticity option has been deprecated and is always 16
[  390.666151][T25148] bridge9: entered allmulticast mode
[  390.871460][T25168] !: renamed from dummy0
[  390.942666][T25182] lo speed is unknown, defaulting to 1000
[  390.997293][T25186] __nla_validate_parse: 46 callbacks suppressed
[  390.997306][T25186] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3989'.
[  391.282509][T25204] openvswitch: netlink: IP tunnel TTL not specified.
[  391.322701][T25214] "syz.2.3996" (25214) uses obsolete ecb(arc4) skcipher
[  391.480883][T25227] netlink: 'syz.0.3999': attribute type 4 has an invalid length.
[  391.498269][T25234] netlink: 'syz.3.3998': attribute type 10 has an invalid length.
[  391.505947][T25234] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  391.509567][T25234] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  391.668592][T25249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4003'.
[  392.054629][T25298] netlink: 'syz.0.4013': attribute type 13 has an invalid length.
[  392.252941][T25315] netlink: 'syz.2.4015': attribute type 10 has an invalid length.
[  392.564041][T25328] netlink: 'syz.3.4019': attribute type 10 has an invalid length.
[  392.568442][T25331] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4019'.
[  392.575754][T25332] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4019'.
[  393.121099][T25346] netlink: 'syz.3.4023': attribute type 4 has an invalid length.
[  393.163490][T25349] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4024'.
[  393.169537][T25349] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4024'.
[  393.173435][T25349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4024'.
[  393.270450][T25351] ip6erspan0: entered allmulticast mode
[  393.283724][T25351] netlink: 'syz.3.4025': attribute type 10 has an invalid length.
[  393.555768][T25366] netlink: 'syz.0.4027': attribute type 13 has an invalid length.
[  393.653889][T25366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  393.660312][ T5883] lo speed is unknown, defaulting to 1000
[  393.667906][ T5883] syz1: Port: 1 Link ACTIVE
[  393.693542][T25369] lo speed is unknown, defaulting to 1000
[  393.882129][T25377] "syz.3.4030" (25377) uses obsolete ecb(arc4) skcipher
[  393.883956][T25378] "syz.3.4030" (25378) uses obsolete ecb(arc4) skcipher
[  393.892757][T25377] veth0_to_team: left promiscuous mode
[  393.903880][T25377] ip6erspan0: left allmulticast mode
[  393.996924][T25380] validate_nla: 1 callbacks suppressed
[  393.996945][T25380] netlink: 'syz.3.4031': attribute type 10 has an invalid length.
[  394.003070][T25381] netlink: 'syz.3.4031': attribute type 10 has an invalid length.
[  394.028423][T25380] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4031'.
[  394.028501][T25381] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4031'.
[  394.351079][T25395] netlink: 'syz.3.4034': attribute type 10 has an invalid length.
[  394.357160][T25395] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4034'.
[  394.607893][T25400] netlink: 'syz.2.4036': attribute type 10 has an invalid length.
[  395.091664][T25441] netlink: 'syz.0.4044': attribute type 10 has an invalid length.
[  395.375184][T25454] bridge0: entered allmulticast mode
[  395.380665][T25454] pim6reg: entered allmulticast mode
[  395.921675][T25489] IPVS: Error connecting to the multicast addr
[  396.077700][T25505] lo speed is unknown, defaulting to 1000
[  396.111820][T25518] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  396.127861][T25518] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  396.288060][T25529] __nla_validate_parse: 1 callbacks suppressed
[  396.288083][T25529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4060'.
[  396.486449][T25544] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.4062'.
[  396.704616][T25553] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4064'.
[  396.876285][   T60] block nbd3: Possible stuck request ffff888021250000: control (read@0,1024B). Runtime 180 seconds
[  396.879557][   T60] block nbd3: Possible stuck request ffff888021250200: control (read@1024,1024B). Runtime 180 seconds
[  396.883716][   T60] block nbd3: Possible stuck request ffff888021250400: control (read@2048,1024B). Runtime 180 seconds
[  396.889860][   T60] block nbd3: Possible stuck request ffff888021250600: control (read@3072,1024B). Runtime 180 seconds
[  396.966482][T25560] netlink: 'syz.2.4065': attribute type 10 has an invalid length.
[  396.971608][T25576] netlink: 'syz.3.4067': attribute type 4 has an invalid length.
[  396.974494][T25576] lo speed is unknown, defaulting to 1000
[  396.979808][T25566] netlink: 'syz.0.4066': attribute type 10 has an invalid length.
[  396.982655][T25576] lo speed is unknown, defaulting to 1000
[  396.985284][T25576] lo speed is unknown, defaulting to 1000
[  397.035640][T25580] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  397.039984][T25580] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  397.070966][T25581] 8021q: adding VLAN 0 to HW filter on device team0
[  397.080974][T25581] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  397.099383][T25581] netlink: 'syz.3.4067': attribute type 13 has an invalid length.
[  397.149739][T25576] infiniband syz0: set down
[  397.151911][T25576] infiniband syz0: added lo
[  397.191472][T25576] RDS/IB: syz0: added
[  397.194215][T25576] smc: adding ib device syz0 with port count 1
[  397.203328][T25576] smc:    ib device syz0 port 1 has pnetid 
[  397.268851][   T10] lo speed is unknown, defaulting to 1000
[  397.272037][ T6011] lo speed is unknown, defaulting to 1000
[  397.274638][T25576] lo speed is unknown, defaulting to 1000
[  397.340366][T25594] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4069'.
[  397.403583][T25595] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4069'.
[  397.428734][T25576] lo speed is unknown, defaulting to 1000
[  397.545797][T25576] lo speed is unknown, defaulting to 1000
[  397.973264][T25617] lo speed is unknown, defaulting to 1000
[  397.977434][T25617] lo speed is unknown, defaulting to 1000
[  398.114077][T25630] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  398.242281][T25638] netlink: 'syz.3.4075': attribute type 10 has an invalid length.
[  398.245354][T25638] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[  398.250882][T25638] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  398.254458][T25638] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  398.387649][T25646] IPVS: Error connecting to the multicast addr
[  398.466986][T25651] "syz.0.4079" (25651) uses obsolete ecb(arc4) skcipher
[  398.482377][T25651] tipc: Resetting bearer <eth:gre0>
[  398.557791][T25651] bridge9: left allmulticast mode
[  398.559681][ T6011] lo speed is unknown, defaulting to 1000
[  398.561750][ T6011] syz1: Port: 1 Link DOWN
[  398.953663][T25676] IPVS: Error connecting to the multicast addr
[  399.204150][T25681] netlink: 'syz.2.4085': attribute type 10 has an invalid length.
[  399.242623][T25681] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  399.247743][T25681] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  399.340568][T25713] netlink: 7376 bytes leftover after parsing attributes in process `syz.0.4089'.
[  399.343712][T25713] netlink: 6264 bytes leftover after parsing attributes in process `syz.0.4089'.
[  399.460428][T25724] netlink: 'syz.0.4091': attribute type 10 has an invalid length.
[  399.465591][T25724] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4091'.
[  400.027361][T25739] "syz.2.4095" (25739) uses obsolete ecb(arc4) skcipher
[  400.057299][T25743] IPVS: Error connecting to the multicast addr
[  400.093752][T25751] "syz.2.4098" (25751) uses obsolete ecb(arc4) skcipher
[  400.107647][T25751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4098'.
[  400.146304][T25754] netlink: 'syz.3.4099': attribute type 10 has an invalid length.
[  400.189238][T25758] netlink: 'syz.3.4101': attribute type 10 has an invalid length.
[  400.192239][T25758] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4101'.
[  400.260619][T25764] lo speed is unknown, defaulting to 1000
[  400.271731][T25764] lo speed is unknown, defaulting to 1000
[  400.273474][T25765] netlink: 'syz.2.4102': attribute type 1 has an invalid length.
[  400.355403][T25767] netlink: 'syz.2.4102': attribute type 13 has an invalid length.
[  400.927313][T25777] IPVS: Error connecting to the multicast addr
[  400.998050][T25788] "syz.0.4109" (25788) uses obsolete ecb(arc4) skcipher
[  401.109208][T25803] netlink: 'syz.3.4108': attribute type 16 has an invalid length.
[  401.222548][T25816] "syz.0.4114" (25816) uses obsolete ecb(arc4) skcipher
[  401.333534][T25830] netlink: 'syz.2.4117': attribute type 13 has an invalid length.
[  401.424135][T25845] netlink: 'syz.2.4120': attribute type 13 has an invalid length.
[  401.509780][T25848] __nla_validate_parse: 12 callbacks suppressed
[  401.509791][T25848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4121'.
[  401.740991][T25870] netlink: 'syz.2.4126': attribute type 10 has an invalid length.
[  401.871476][T25894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4128'.
[  401.876626][T25894] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4128'.
[  401.882393][T25892] sctp: [Deprecated]: syz.2.4130 (pid 25892) Use of int in max_burst socket option.
[  401.882393][T25892] Use struct sctp_assoc_value instead
[  402.091477][T25926] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4137'.
[  402.094547][T25926] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4137'.
[  402.544250][T25958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4144'.
[  402.587929][T25958] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4144'.
[  402.731876][T25971] "syz.0.4146" (25971) uses obsolete ecb(arc4) skcipher
[  402.868968][T25987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4150'.
[  402.872482][T25987] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4150'.
[  402.876548][T25987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4150'.
[  403.157297][T26018] lo speed is unknown, defaulting to 1000
[  403.160790][T26018] lo speed is unknown, defaulting to 1000
[  403.290202][T26030] vlan3: entered promiscuous mode
[  403.294130][T26030] bridge0: entered promiscuous mode
[  403.299701][T26030] vlan3: entered allmulticast mode
[  403.982235][T26073] "syz.0.4165" (26073) uses obsolete ecb(arc4) skcipher
[  404.059970][T26075] "syz.2.4166" (26075) uses obsolete ecb(arc4) skcipher
[  404.111991][T26085] openvswitch: netlink: Multiple metadata blocks provided
[  404.400457][T26096] validate_nla: 11 callbacks suppressed
[  404.400469][T26096] netlink: 'syz.2.4170': attribute type 10 has an invalid length.
[  404.533036][T26114] netlink: 'syz.3.4173': attribute type 10 has an invalid length.
[  405.234579][T26144] IPVS: set_ctl: invalid protocol: 44 172.30.0.1:20002
[  405.279685][T26138] netlink: 'syz.3.4179': attribute type 1 has an invalid length.
[  405.296698][T26138] netlink: 'syz.3.4179': attribute type 1 has an invalid length.
[  405.308369][T26143] smc: net device bond0 applied user defined pnetid SYZ
[  405.591781][T26181] netlink: 'syz.2.4187': attribute type 10 has an invalid length.
[  405.758425][T26205] lo speed is unknown, defaulting to 1000
[  405.761793][T26205] lo speed is unknown, defaulting to 1000
[  405.894348][T26209] lo speed is unknown, defaulting to 1000
[  406.007051][T26209] lo speed is unknown, defaulting to 1000
[  406.643021][T26256] netlink: 'syz.2.4202': attribute type 13 has an invalid length.
[  406.665076][T26256] __nla_validate_parse: 10 callbacks suppressed
[  406.665089][T26256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4202'.
[  406.783411][T26269] netlink: 'syz.0.4204': attribute type 10 has an invalid length.
[  406.799846][T26272] netlink: 'syz.2.4205': attribute type 13 has an invalid length.
[  406.802373][T26272] netlink: 'syz.2.4205': attribute type 17 has an invalid length.
[  406.881867][T26272] 8021q: adding VLAN 0 to HW filter on device bond0
[  406.893896][T26272] 8021q: adding VLAN 0 to HW filter on device team0
[  406.915870][T26272] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  406.995952][T26274] lo speed is unknown, defaulting to 1000
[  406.998892][T26274] lo speed is unknown, defaulting to 1000
[  407.259461][T26292] netlink: 'syz.3.4208': attribute type 10 has an invalid length.
[  407.384347][T26295] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4208'.
[  407.703471][T26311] IPVS: Error connecting to the multicast addr
[  407.798866][T26315] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4212'.
[  408.049955][T26339] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  408.053120][T26339] syzkaller0: entered promiscuous mode
[  408.056594][T26339] syzkaller0: entered allmulticast mode
[  408.073439][T26339] tipc: Resetting bearer <eth:syzkaller0>
[  408.088329][T26338] tipc: Resetting bearer <eth:syzkaller0>
[  408.116314][T26338] tipc: Disabling bearer <eth:syzkaller0>
[  408.271089][T26352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4219'.
[  408.472979][T26370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4222'.
[  408.478935][T26369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4222'.
[  408.482511][T26369] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4222'.
[  408.489140][T26369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4222'.
[  408.492721][T26369] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4222'.
[  408.557351][T26378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4225'.
[  409.681711][T26406] validate_nla: 5 callbacks suppressed
[  409.681723][T26406] netlink: 'syz.3.4230': attribute type 10 has an invalid length.
[  409.724497][T26408] netlink: 'syz.3.4231': attribute type 13 has an invalid length.
[  409.739655][T26410] netlink: 'syz.0.4232': attribute type 10 has an invalid length.
[  410.013685][T26437] netlink: 'syz.3.4239': attribute type 15 has an invalid length.
[  410.068637][T26442] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  410.121671][T26442] netlink: 'syz.3.4241': attribute type 10 has an invalid length.
[  410.125418][T26442] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[  410.130318][T26442] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  410.133650][T26442] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  410.933890][T26467] lo speed is unknown, defaulting to 1000
[  410.939325][T26467] lo speed is unknown, defaulting to 1000
[  411.273533][T26484] "syz.2.4248" (26484) uses obsolete ecb(arc4) skcipher
[  411.628893][T26501] netlink: 'syz.2.4253': attribute type 1 has an invalid length.
[  411.691851][T26502] netlink: 'syz.0.4254': attribute type 10 has an invalid length.
[  411.714294][T26502] __nla_validate_parse: 15 callbacks suppressed
[  411.714313][T26502] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4254'.
[  411.977291][T26520] "syz.2.4258" (26520) uses obsolete ecb(arc4) skcipher
[  412.043129][T26529] netlink: 'syz.2.4260': attribute type 10 has an invalid length.
[  412.046171][T26529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4260'.
[  412.049299][T26529] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4260'.
[  412.052424][T26529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4260'.
[  412.057112][T26529] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4260'.
[  412.599778][T26588] "syz.0.4272" (26588) uses obsolete ecb(arc4) skcipher
[  412.753399][T26600] "syz.0.4276" (26600) uses obsolete ecb(arc4) skcipher
[  412.970260][T26625] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4281'.
[  413.482960][T26668] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4289'.
[  413.490880][T26668] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4289'.
[  413.681384][T26687] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  413.685485][T26687] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  413.884296][T26692] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4292'.
[  413.910396][T26641] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  414.303036][T26729] lo speed is unknown, defaulting to 1000
[  414.309101][T26729] lo speed is unknown, defaulting to 1000
[  414.508634][T26741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4304'.
[  414.556461][T26744] netlink: 'syz.3.4305': attribute type 10 has an invalid length.
[  414.610180][T26748] netlink: 'syz.3.4307': attribute type 10 has an invalid length.
[  414.807380][T26757] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  415.442214][T26781] validate_nla: 1 callbacks suppressed
[  415.442230][T26781] netlink: 'syz.3.4315': attribute type 10 has an invalid length.
[  415.456794][T26781] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[  416.384179][T26867] "syz.2.4333" (26867) uses obsolete ecb(arc4) skcipher
[  416.405811][T26869] netlink: 'syz.3.4334': attribute type 13 has an invalid length.
[  416.502979][T26878] "syz.0.4337" (26878) uses obsolete ecb(arc4) skcipher
[  416.653051][T26895] "syz.3.4340" (26895) uses obsolete ecb(arc4) skcipher
[  416.664445][T26895] veth0_to_bond: entered allmulticast mode
[  416.743313][T26905] __nla_validate_parse: 8 callbacks suppressed
[  416.743326][T26905] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.4344'.
[  416.847355][T26918] netlink: 'syz.3.4347': attribute type 4 has an invalid length.
[  416.963895][T26925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4348'.
[  416.972364][T26931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4348'.
[  416.996766][T26917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4346'.
[  416.999563][T26917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4346'.
[  417.180793][T26954] netlink: 'syz.3.4354': attribute type 13 has an invalid length.
[  417.239219][T26953] IPVS: Error connecting to the multicast addr
[  417.278608][T26962] netlink: 'syz.3.4355': attribute type 13 has an invalid length.
[  417.281805][T26962] netlink: 'syz.3.4355': attribute type 17 has an invalid length.
[  417.346645][T26964] netlink: 'syz.0.4356': attribute type 13 has an invalid length.
[  417.369823][T26962] 8021q: adding VLAN 0 to HW filter on device team0
[  417.379324][T26962] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  417.386013][  T793] lo speed is unknown, defaulting to 1000
[  417.388361][  T793] syz0: Port: 1 Link ACTIVE
[  417.396816][  T793] lo speed is unknown, defaulting to 1000
[  417.411660][T26966] lo speed is unknown, defaulting to 1000
[  417.414534][T26966] lo speed is unknown, defaulting to 1000
[  417.645753][T26980] netlink: 'syz.0.4358': attribute type 10 has an invalid length.
[  417.725311][T26995] netlink: 'syz.0.4360': attribute type 13 has an invalid length.
[  417.789874][T26994] netlink: 'syz.2.4361': attribute type 1 has an invalid length.
[  417.919874][T27004] "syz.2.4362" (27004) uses obsolete ecb(arc4) skcipher
[  418.167748][T27013] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4365'.
[  418.942944][T27052] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4372'.
[  419.163122][T27054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4373'.
[  419.239916][T27060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4374'.
[  419.362786][T27066] 8021q: adding VLAN 0 to HW filter on device bond9
[  419.387737][T27068] 8021q: adding VLAN 0 to HW filter on device bond9
[  419.390891][T27068] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address
[  419.397510][T27068] bond9: (slave vxcan1): Error -95 calling set_mac_address
[  419.531766][T27074] syz.3.4376: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  419.539737][T27074] CPU: 1 UID: 0 PID: 27074 Comm: syz.3.4376 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  419.539751][T27074] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  419.539757][T27074] Call Trace:
[  419.539761][T27074]  <TASK>
[  419.539765][T27074]  dump_stack_lvl+0x189/0x250
[  419.539781][T27074]  ? __pfx_dump_stack_lvl+0x10/0x10
[  419.539790][T27074]  ? __pfx__printk+0x10/0x10
[  419.539801][T27074]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  419.539812][T27074]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  419.539821][T27074]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  419.539831][T27074]  warn_alloc+0x214/0x310
[  419.539844][T27074]  ? stack_depot_save_flags+0x40/0x860
[  419.539856][T27074]  ? __pfx_warn_alloc+0x10/0x10
[  419.539867][T27074]  ? kasan_save_track+0x4f/0x80
[  419.539877][T27074]  ? xskq_create+0x56/0x170
[  419.539886][T27074]  ? xsk_init_queue+0xb0/0x110
[  419.539897][T27074]  ? xsk_setsockopt+0x4dc/0x8d0
[  419.539908][T27074]  ? do_sock_setsockopt+0x17c/0x1b0
[  419.539924][T27074]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  419.539933][T27074]  ? do_syscall_64+0xfa/0x3b0
[  419.539947][T27074]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.539964][T27074]  __vmalloc_node_range_noprof+0x125/0x12f0
[  419.540000][T27074]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  419.540014][T27074]  ? __kasan_kmalloc+0x93/0xb0
[  419.540030][T27074]  vmalloc_user_noprof+0xad/0xf0
[  419.540047][T27074]  ? xskq_create+0xbf/0x170
[  419.540064][T27074]  xskq_create+0xbf/0x170
[  419.540080][T27074]  xsk_init_queue+0xb0/0x110
[  419.540097][T27074]  xsk_setsockopt+0x4dc/0x8d0
[  419.540113][T27074]  ? __pfx_xsk_setsockopt+0x10/0x10
[  419.540129][T27074]  ? __pfx_aa_sk_perm+0x10/0x10
[  419.540150][T27074]  ? aa_sock_opt_perm+0xff/0x1b0
[  419.540165][T27074]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  419.540179][T27074]  ? __pfx_xsk_setsockopt+0x10/0x10
[  419.540196][T27074]  do_sock_setsockopt+0x17c/0x1b0
[  419.540218][T27074]  __x64_sys_setsockopt+0x13f/0x1b0
[  419.540234][T27074]  do_syscall_64+0xfa/0x3b0
[  419.540250][T27074]  ? lockdep_hardirqs_on+0x9c/0x150
[  419.540265][T27074]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.540274][T27074]  ? exc_page_fault+0x9f/0xf0
[  419.540337][T27074]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.540348][T27074] RIP: 0033:0x7fad8f58ebe9
[  419.540367][T27074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  419.540377][T27074] RSP: 002b:00007fad8d7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  419.540390][T27074] RAX: ffffffffffffffda RBX: 00007fad8f7b6090 RCX: 00007fad8f58ebe9
[  419.540397][T27074] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000049
[  419.540404][T27074] RBP: 00007fad8f611e19 R08: 0000000000000004 R09: 0000000000000000
[  419.540410][T27074] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  419.540416][T27074] R13: 00007fad8f7b6128 R14: 00007fad8f7b6090 R15: 00007ffe3ab277a8
[  419.540433][T27074]  </TASK>
[  419.540438][T27074] Mem-Info:
[  419.650310][T27074] active_anon:5547 inactive_anon:0 isolated_anon:0
[  419.650310][T27074]  active_file:1396 inactive_file:38347 isolated_file:0
[  419.650310][T27074]  unevictable:1768 dirty:79 writeback:0
[  419.650310][T27074]  slab_reclaimable:10158 slab_unreclaimable:92810
[  419.650310][T27074]  mapped:18296 shmem:2458 pagetables:1094
[  419.650310][T27074]  sec_pagetables:0 bounce:0
[  419.650310][T27074]  kernel_misc_reclaimable:0
[  419.650310][T27074]  free:263119 free_pcp:12620 free_cma:0
[  419.667565][T27074] Node 0 active_anon:13992kB inactive_anon:0kB active_file:4460kB inactive_file:137464kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:48532kB dirty:256kB writeback:0kB shmem:4772kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7088kB pagetables:2948kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  419.679940][T27074] Node 1 active_anon:8196kB inactive_anon:0kB active_file:1124kB inactive_file:15924kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24652kB dirty:60kB writeback:0kB shmem:5060kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6640kB pagetables:1496kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  419.689611][T27074] Node 0 DMA free:14764kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:596kB local_pcp:312kB free_cma:0kB
[  419.699267][T27074] lowmem_reserve[]: 0 811 811 811 811
[  419.701721][T27074] Node 0 DMA32 free:163244kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14060kB inactive_anon:0kB active_file:4460kB inactive_file:137464kB unevictable:3536kB writepending:256kB present:1556484kB managed:830956kB mlocked:0kB bounce:0kB free_pcp:27528kB local_pcp:17364kB free_cma:0kB
[  419.712462][T27074] lowmem_reserve[]: 0 0 0 0 0
[  419.714790][T27074] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  419.724075][T27074] lowmem_reserve[]: 0 0 854 854 854
[  419.727791][T27074] Node 1 Normal free:415976kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8196kB inactive_anon:0kB active_file:1124kB inactive_file:15924kB unevictable:3536kB writepending:60kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:22380kB local_pcp:6100kB free_cma:0kB
[  419.737664][T27074] lowmem_reserve[]: 0 0 0 0 0
[  419.739186][T27074] Node 0 DMA: 3*4kB (U) 2*8kB (UM) 1*16kB (M) 4*32kB (UM) 4*64kB (UM) 4*128kB (UM) 4*256kB (UM) 5*512kB (UM) 6*1024kB (UM) 2*2048kB (U) 0*4096kB = 14764kB
[  419.745318][T27074] Node 0 DMA32: 715*4kB (UM) 402*8kB (UM) 259*16kB (UME) 356*32kB (UME) 89*64kB (UM) 162*128kB (UME) 70*256kB (UM) 32*512kB (UME) 19*1024kB (UM) 6*2048kB (UM) 12*4096kB (UM) = 163244kB
[  419.752325][T27074] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  419.767214][T27074] Node 1 Normal: 24*4kB (UME) 1265*8kB (UME) 872*16kB (UME) 462*32kB (UME) 459*64kB (UME) 176*128kB (UME) 34*256kB (UME) 14*512kB (UME) 16*1024kB (UE) 7*2048kB (UME) 68*4096kB (UM) = 415976kB
[  419.776012][T27074] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  419.779455][T27074] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  419.782905][T27074] 42201 total pagecache pages
[  419.785139][T27074] 0 pages in swap cache
[  419.786746][T27074] Free swap  = 124996kB
[  419.788339][T27074] Total swap = 124996kB
[  419.789925][T27074] 786301 pages RAM
[  419.791378][T27074] 0 pages HighMem/MovableOnly
[  419.793227][T27074] 241330 pages reserved
[  419.795970][T27074] 0 pages cma reserved
[  419.922853][ T5883] lo speed is unknown, defaulting to 1000
[  419.924869][ T5883] syz0: Port: 1 Link DOWN
[  419.926295][ T5883] lo speed is unknown, defaulting to 1000
[  420.255975][T27117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4385'.
[  420.763512][T27166] "syz.0.4394" (27166) uses obsolete ecb(arc4) skcipher
[  420.770292][T27166] validate_nla: 7 callbacks suppressed
[  420.770317][T27166] netlink: 'syz.0.4394': attribute type 4 has an invalid length.
[  420.860339][T27172] netlink: 'syz.0.4395': attribute type 4 has an invalid length.
[  421.007121][T27190] netlink: 'syz.2.4396': attribute type 10 has an invalid length.
[  421.072152][T27193] "syz.0.4399" (27193) uses obsolete ecb(arc4) skcipher
[  421.541294][T27218] IPVS: Error connecting to the multicast addr
[  421.588741][T27222] IPVS: Error connecting to the multicast addr
[  421.695261][T27231] netlink: 'syz.3.4407': attribute type 13 has an invalid length.
[  422.012538][T27269] netlink: 'syz.3.4412': attribute type 10 has an invalid length.
[  422.021091][T27261] __nla_validate_parse: 5 callbacks suppressed
[  422.021145][T27261] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4412'.
[  422.045966][T27272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4414'.
[  422.151635][T27277] netlink: 'syz.2.4415': attribute type 4 has an invalid length.
[  422.192528][T27279] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4416'.
[  422.538473][T27289] netlink: 'syz.2.4419': attribute type 10 has an invalid length.
[  422.598364][T27312] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  422.603532][T27312] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  423.249695][T27354] netlink: 'syz.2.4431': attribute type 4 has an invalid length.
[  423.258922][T27354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4431'.
[  423.267460][T27357] netlink: 'syz.3.4432': attribute type 10 has an invalid length.
[  423.287881][T27357] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  423.371878][T27357] syzkaller0: entered promiscuous mode
[  423.373723][T27357] syzkaller0: entered allmulticast mode
[  423.376902][T27357] tipc: Resetting bearer <eth:syzkaller0>
[  423.386416][T27366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4432'.
[  423.398568][T27369] netlink: 'syz.0.4434': attribute type 10 has an invalid length.
[  423.406817][T27366] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4432'.
[  423.414581][T27366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4432'.
[  423.419036][T27366] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4432'.
[  423.427021][T27356] tipc: Resetting bearer <eth:syzkaller0>
[  423.428443][T27364] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4434'.
[  424.798293][T27356] tipc: Disabling bearer <eth:syzkaller0>
[  424.975949][T27389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4440'.
[  425.908449][T27461] netlink: 'syz.0.4446': attribute type 13 has an invalid length.
[  425.911369][T27461] netlink: 'syz.0.4446': attribute type 17 has an invalid length.
[  426.008439][T27461] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  426.013245][ T6011] lo speed is unknown, defaulting to 1000
[  426.018646][ T6011] syz1: Port: 1 Link ACTIVE
[  426.077246][T27480] netlink: 'syz.0.4451': attribute type 10 has an invalid length.
[  426.165024][ T5295] udevd[5295]: worker [13368] /devices/virtual/block/nbd3 timeout; kill it
[  426.167846][ T5295] udevd[5295]: seq 14143 '/devices/virtual/block/nbd3' killed
[  426.206308][T27492] netlink: 'syz.2.4453': attribute type 10 has an invalid length.
[  426.945109][   T60] block nbd3: Possible stuck request ffff888021250000: control (read@0,1024B). Runtime 210 seconds
[  426.949569][   T60] block nbd3: Possible stuck request ffff888021250200: control (read@1024,1024B). Runtime 210 seconds
[  426.954039][   T60] block nbd3: Possible stuck request ffff888021250400: control (read@2048,1024B). Runtime 210 seconds
[  426.958668][   T60] block nbd3: Possible stuck request ffff888021250600: control (read@3072,1024B). Runtime 210 seconds
[  427.491330][T27529] __nla_validate_parse: 5 callbacks suppressed
[  427.491343][T27529] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4460'.
[  427.789472][T27562] netlink: 'syz.3.4468': attribute type 10 has an invalid length.
[  427.793940][T27562] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  427.798581][T27564] netlink: 'syz.2.4469': attribute type 10 has an invalid length.
[  427.858536][T27571] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4470'.
[  427.859273][T27572] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4470'.
[  427.899221][T27575] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4468'.
[  427.971457][T27580] sctp: [Deprecated]: syz.2.4471 (pid 27580) Use of struct sctp_assoc_value in delayed_ack socket option.
[  427.971457][T27580] Use struct sctp_sack_info instead
[  428.864899][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  429.099805][T27626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4479'.
[  429.179100][T27637] netlink: 'syz.2.4482': attribute type 13 has an invalid length.
[  429.186535][T27637] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4482'.
[  429.209866][T27631] netlink: 'syz.3.4480': attribute type 10 has an invalid length.
[  429.250303][T27645] netlink: 'syz.0.4483': attribute type 10 has an invalid length.
[  429.284800][T27652] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  429.303023][T27652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4486'.
[  429.414109][T27662] netlink: 'syz.0.4486': attribute type 10 has an invalid length.
[  429.419175][T27662] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  430.157030][T27666] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.4488'.
[  430.165550][T27666] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  430.168250][T27666] openvswitch: netlink: Duplicate key (type 0).
[  430.172862][T27666] veth0_to_bond: left allmulticast mode
[  430.191382][T27672] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4490'.
[  430.195763][T27673] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4490'.
[  430.308483][T27686] IPVS: Error connecting to the multicast addr
[  430.562765][T27721] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  430.895189][T27747] IPVS: Scheduler module ip_vs_sip not found
[  430.999366][T27756] "syz.0.4505" (27756) uses obsolete ecb(arc4) skcipher
[  431.010695][T27756] tipc: Resetting bearer <eth:gre0>
[  431.060224][   T10] lo speed is unknown, defaulting to 1000
[  431.062091][   T10] syz1: Port: 1 Link DOWN
[  431.131019][T27761] validate_nla: 2 callbacks suppressed
[  431.131031][T27761] netlink: 'syz.0.4506': attribute type 10 has an invalid length.
[  431.308476][T27773] syzkaller0: entered promiscuous mode
[  431.310405][T27773] syzkaller0: entered allmulticast mode
[  431.331118][T27773] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  431.731933][T27819] netlink: 'syz.2.4517': attribute type 10 has an invalid length.
[  432.211287][T27891] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  432.289006][T27898] netlink: 'syz.2.4527': attribute type 10 has an invalid length.
[  432.560068][T27935] RDS: rds_bind could not find a transport for ::ffff:0.0.0.6, load rds_tcp or rds_rdma?
[  432.566407][T27936] RDS: rds_bind could not find a transport for ::ffff:0.0.0.6, load rds_tcp or rds_rdma?
[  432.674503][T27936] __nla_validate_parse: 11 callbacks suppressed
[  432.674518][T27936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4533'.
[  432.679846][T27936] netlink: 'syz.3.4533': attribute type 2 has an invalid length.
[  432.682302][T27936] netlink: 'syz.3.4533': attribute type 1 has an invalid length.
[  432.684891][T27936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4533'.
[  432.688419][T27945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4533'.
[  432.692142][T27945] netlink: 'syz.3.4533': attribute type 2 has an invalid length.
[  432.696223][T27945] netlink: 'syz.3.4533': attribute type 1 has an invalid length.
[  432.699383][T27945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4533'.
[  432.833187][T27961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4537'.
[  432.837942][T27961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4537'.
[  432.972834][T27971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4540'.
[  432.981169][T27971] IPVS: Error connecting to the multicast addr
[  433.068834][T27977] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  433.288696][T27992] netlink: 'syz.2.4544': attribute type 1 has an invalid length.
[  433.292072][T27992] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4544'.
[  433.298873][T27994] netlink: 'syz.0.4545': attribute type 10 has an invalid length.
[  433.448532][T28007] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4547'.
[  434.190458][T28033] vlan0: entered promiscuous mode
[  434.276142][T28038] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4554'.
[  434.472397][T28058] lo speed is unknown, defaulting to 1000
[  434.493086][T28058] lo speed is unknown, defaulting to 1000
[  434.727867][T28067] netlink: 'syz.3.4558': attribute type 10 has an invalid length.
[  434.730537][T28067] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[  434.928917][T28079] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  434.932288][T28077] syzkaller0: entered promiscuous mode
[  434.934532][T28077] syzkaller0: entered allmulticast mode
[  434.951797][T28077] tipc: Resetting bearer <eth:syzkaller0>
[  434.965239][T28077] tipc: Disabling bearer <eth:syzkaller0>
[  435.127569][T28090] "syz.2.4562" (28090) uses obsolete ecb(arc4) skcipher
[  435.131083][T28090] vlan0: left promiscuous mode
[  435.572652][T28156] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  435.580490][T28156] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  435.583524][T28156] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  435.673983][T28165] "syz.3.4577" (28165) uses obsolete ecb(arc4) skcipher
[  435.892827][T28183] 8021q: adding VLAN 0 to HW filter on device team0
[  435.911821][T28183] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  435.918614][ T5876] lo speed is unknown, defaulting to 1000
[  435.920554][ T5876] syz0: Port: 1 Link ACTIVE
[  435.922228][ T5876] lo speed is unknown, defaulting to 1000
[  435.946742][T28187] lo speed is unknown, defaulting to 1000
[  435.950332][T28187] lo speed is unknown, defaulting to 1000
[  436.317598][T28209] validate_nla: 9 callbacks suppressed
[  436.317612][T28209] netlink: 'syz.2.4588': attribute type 10 has an invalid length.
[  436.343853][T28214] "syz.0.4589" (28214) uses obsolete ecb(arc4) skcipher
[  436.398036][T28217] "syz.0.4590" (28217) uses obsolete ecb(arc4) skcipher
[  436.479966][T28222] netlink: 'syz.0.4592': attribute type 1 has an invalid length.
[  436.535248][   T33] audit: type=1107 audit(1755206780.912:9): pid=28221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ĉ9,jJ7hÜN9儺drI)ȚiS$O~VE%UeZ,^S'
[  436.640067][T28228] netlink: 'syz.0.4594': attribute type 10 has an invalid length.
[  436.681425][T28232] netlink: 'syz.3.4595': attribute type 10 has an invalid length.
[  436.895980][T28246] netlink: 'syz.2.4598': attribute type 13 has an invalid length.
[  436.986454][T28249] netlink: 'syz.3.4599': attribute type 10 has an invalid length.
[  437.027961][T28258] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  437.034323][T28253] netlink: 'syz.2.4600': attribute type 1 has an invalid length.
[  437.042222][T28253] netlink: 'syz.2.4600': attribute type 1 has an invalid length.
[  437.082530][T28260] netlink: 'syz.2.4602': attribute type 4 has an invalid length.
[  437.127990][T28265] "syz.2.4603" (28265) uses obsolete ecb(arc4) skcipher
[  437.169533][T28261] netlink: 'syz.3.4601': attribute type 27 has an invalid length.
[  438.370512][   T10] lo speed is unknown, defaulting to 1000
[  438.372631][   T10] syz0: Port: 1 Link DOWN
[  438.374102][   T10] lo speed is unknown, defaulting to 1000
[  438.376030][T28321] IPVS: Error connecting to the multicast addr
[  438.388863][T28331] lo: entered promiscuous mode
[  438.390497][T28331] lo: entered allmulticast mode
[  438.393204][T28331] tunl0: entered promiscuous mode
[  438.398419][T28331] tunl0: entered allmulticast mode
[  438.400531][T28331] gre0: entered promiscuous mode
[  438.402061][T28331] gre0: entered allmulticast mode
[  438.403968][T28331] gretap0: entered promiscuous mode
[  438.411883][T28331] gretap0: entered allmulticast mode
[  438.422699][T28331] erspan0: entered promiscuous mode
[  438.424595][T28331] erspan0: entered allmulticast mode
[  438.434463][T28331] ip_vti0: entered promiscuous mode
[  438.437129][T28331] ip_vti0: entered allmulticast mode
[  438.439857][T28331] ip6_vti0: entered promiscuous mode
[  438.442021][T28331] ip6_vti0: entered allmulticast mode
[  438.446410][T28331] sit0: entered promiscuous mode
[  438.448411][T28331] sit0: entered allmulticast mode
[  438.451598][T28331] ip6tnl0: entered promiscuous mode
[  438.456625][T28331] ip6tnl0: entered allmulticast mode
[  438.459112][T28331] ip6gre0: entered promiscuous mode
[  438.461143][T28331] ip6gre0: entered allmulticast mode
[  438.469337][T28331] syz_tun: entered promiscuous mode
[  438.471458][T28331] syz_tun: entered allmulticast mode
[  438.482747][T28331] ip6gretap0: entered allmulticast mode
[  438.485835][T28331] vcan0: entered promiscuous mode
[  438.487861][T28331] vcan0: entered allmulticast mode
[  438.490388][T28331] bond0: entered promiscuous mode
[  438.492408][T28331] bond0: entered allmulticast mode
[  438.494931][T28331] dummy0: entered promiscuous mode
[  438.496978][T28331] dummy0: entered allmulticast mode
[  438.499385][T28331] nlmon0: entered promiscuous mode
[  438.501610][T28331] nlmon0: entered allmulticast mode
[  438.504091][T28331] caif0: entered promiscuous mode
[  438.506768][T28331] caif0: entered allmulticast mode
[  438.509191][T28331] batadv0: entered promiscuous mode
[  438.511385][T28331] batadv0: entered allmulticast mode
[  438.513932][T28331] veth0: entered promiscuous mode
[  438.516235][T28331] veth0: entered allmulticast mode
[  438.518706][T28331] veth1: entered promiscuous mode
[  438.521070][T28331] veth1: entered allmulticast mode
[  438.523643][T28331] wg0: entered promiscuous mode
[  438.531068][T28331] wg0: entered allmulticast mode
[  438.533749][T28331] wlan0: entered promiscuous mode
[  438.536555][T28331] wlan0: entered allmulticast mode
[  438.539238][T28331] wg2: entered promiscuous mode
[  438.541500][T28331] wg2: entered allmulticast mode
[  438.544210][T28331] veth0_to_bridge: entered promiscuous mode
[  438.547365][T28331] veth0_to_bridge: entered allmulticast mode
[  438.550416][T28331] bridge_slave_0: entered promiscuous mode
[  438.553086][T28331] bridge_slave_0: entered allmulticast mode
[  438.556415][T28331] veth1_to_bridge: entered promiscuous mode
[  438.559150][T28331] veth1_to_bridge: entered allmulticast mode
[  438.562208][T28331] bridge_slave_1: entered promiscuous mode
[  438.566105][T28331] bridge_slave_1: entered allmulticast mode
[  438.569205][T28331] veth0_to_bond: entered promiscuous mode
[  438.571860][T28331] veth0_to_bond: entered allmulticast mode
[  438.575955][T28331] bond_slave_0: entered promiscuous mode
[  438.578423][T28331] bond_slave_0: entered allmulticast mode
[  438.581611][T28331] veth1_to_bond: entered promiscuous mode
[  438.584122][T28331] veth1_to_bond: entered allmulticast mode
[  438.587209][T28331] bond_slave_1: entered promiscuous mode
[  438.589663][T28331] bond_slave_1: entered allmulticast mode
[  438.592812][T28331] veth1_to_team: entered promiscuous mode
[  438.595669][T28331] veth1_to_team: entered allmulticast mode
[  438.599835][T28331] team_slave_1: entered promiscuous mode
[  438.602362][T28331] team_slave_1: entered allmulticast mode
[  438.605232][T28331] veth0_to_batadv: entered promiscuous mode
[  438.607834][T28331] veth0_to_batadv: entered allmulticast mode
[  438.610762][T28331] batadv_slave_0: entered promiscuous mode
[  438.613362][T28331] batadv_slave_0: entered allmulticast mode
[  438.616744][T28331] veth1_to_batadv: entered promiscuous mode
[  438.619371][T28331] veth1_to_batadv: entered allmulticast mode
[  438.622492][T28331] batadv_slave_1: entered allmulticast mode
[  438.625996][T28331] xfrm0: entered promiscuous mode
[  438.628323][T28331] xfrm0: entered allmulticast mode
[  438.631012][T28331] veth0_to_hsr: entered promiscuous mode
[  438.633586][T28331] veth0_to_hsr: entered allmulticast mode
[  438.637132][T28331] hsr_slave_0: entered allmulticast mode
[  438.640084][T28331] veth1_to_hsr: entered promiscuous mode
[  438.642583][T28331] veth1_to_hsr: entered allmulticast mode
[  438.645539][T28331] hsr_slave_1: entered allmulticast mode
[  438.647616][T28331] hsr0: entered promiscuous mode
[  438.649384][T28331] hsr0: entered allmulticast mode
[  438.651378][T28331] veth1_virt_wifi: entered promiscuous mode
[  438.653397][T28331] veth1_virt_wifi: entered allmulticast mode
[  438.656016][T28331] veth0_virt_wifi: entered promiscuous mode
[  438.658095][T28331] veth0_virt_wifi: entered allmulticast mode
[  438.660830][T28331] veth1_vlan: entered allmulticast mode
[  438.663185][T28331] veth0_vlan: entered allmulticast mode
[  438.665606][T28331] vlan0: entered promiscuous mode
[  438.667440][T28331] vlan0: entered allmulticast mode
[  438.669354][T28331] vlan1: entered promiscuous mode
[  438.671184][T28331] vlan1: entered allmulticast mode
[  438.673109][T28331] macvlan0: entered promiscuous mode
[  438.675094][T28331] macvlan0: entered allmulticast mode
[  438.677011][T28331] macvlan1: entered promiscuous mode
[  438.678686][T28331] macvlan1: entered allmulticast mode
[  438.680559][T28331] ipvlan0: entered promiscuous mode
[  438.682197][T28331] ipvlan0: entered allmulticast mode
[  438.684097][T28331] ipvlan1: entered promiscuous mode
[  438.685865][T28331] ipvlan1: entered allmulticast mode
[  438.687729][T28331] veth1_macvtap: entered allmulticast mode
[  438.689746][T28331] veth0_macvtap: entered allmulticast mode
[  438.691758][T28331] macvtap0: entered promiscuous mode
[  438.693428][T28331] macvtap0: entered allmulticast mode
[  438.700497][T28331] geneve0: entered promiscuous mode
[  438.702159][T28331] geneve0: entered allmulticast mode
[  438.704025][T28331] geneve1: entered promiscuous mode
[  438.705994][T28331] geneve1: entered allmulticast mode
[  438.707949][T28331] gtp0: entered promiscuous mode
[  438.709534][T28331] gtp0: entered allmulticast mode
[  438.711320][T28331] gtp1: entered promiscuous mode
[  438.712909][T28331] gtp1: entered allmulticast mode
[  438.714971][T28331] gtp2: entered promiscuous mode
[  438.716553][T28331] gtp2: entered allmulticast mode
[  438.718359][T28331] team_slave_1.3: entered promiscuous mode
[  438.720271][T28331] team_slave_1.3: entered allmulticast mode
[  438.722260][T28331] gtp3: entered promiscuous mode
[  438.723822][T28331] gtp3: entered allmulticast mode
[  438.725911][T28331] gtp4: entered promiscuous mode
[  438.727502][T28331] gtp4: entered allmulticast mode
[  438.729322][T28331] gre1: entered promiscuous mode
[  438.730909][T28331] gre1: entered allmulticast mode
[  438.732631][T28331] gtp5: entered promiscuous mode
[  438.734212][T28331] gtp5: entered allmulticast mode
[  438.736307][T28331] @: entered promiscuous mode
[  438.737829][T28331] @: entered allmulticast mode
[  438.739495][T28331] syztnl0: entered promiscuous mode
[  438.741157][T28331] syztnl0: entered allmulticast mode
[  438.743042][T28331] bridge1: entered promiscuous mode
[  438.745179][T28331] bridge1: entered allmulticast mode
[  438.747066][T28331] gtp6: entered promiscuous mode
[  438.748609][T28331] gtp6: entered allmulticast mode
[  438.750405][T28331] ip6gretap1: entered promiscuous mode
[  438.752134][T28331] ip6gretap1: entered allmulticast mode
[  438.754046][T28331] bridge2: entered promiscuous mode
[  438.756011][T28331] bridge2: entered allmulticast mode
[  438.757908][T28331] gtp7: entered promiscuous mode
[  438.759449][T28331] gtp7: entered allmulticast mode
[  438.761803][T28331] gtp8: entered promiscuous mode
[  438.763403][T28331] gtp8: entered allmulticast mode
[  438.765603][T28331] pim6reg9: entered promiscuous mode
[  438.767499][T28331] gtp9: entered promiscuous mode
[  438.769082][T28331] gtp9: entered allmulticast mode
[  438.770899][T28331] bond1: entered promiscuous mode
[  438.772488][T28331] bond1: entered allmulticast mode
[  438.774254][T28331] gtp10: entered promiscuous mode
[  438.776190][T28331] gtp10: entered allmulticast mode
[  438.778157][T28331] gtp11: entered promiscuous mode
[  438.779754][T28331] gtp11: entered allmulticast mode
[  438.781683][T28331] gtp12: entered promiscuous mode
[  438.783284][T28331] gtp12: entered allmulticast mode
[  438.785466][T28331] gtp13: entered promiscuous mode
[  438.787110][T28331] gtp13: entered allmulticast mode
[  438.788952][T28331] ip6tnl1: entered promiscuous mode
[  438.790676][T28331] ip6tnl1: entered allmulticast mode
[  438.792720][T28331] gtp14: entered promiscuous mode
[  438.794969][T28331] gtp14: entered allmulticast mode
[  438.797051][T28331] gtp15: entered promiscuous mode
[  438.798638][T28331] gtp15: entered allmulticast mode
[  438.800432][T28331] gtp16: entered promiscuous mode
[  438.802043][T28331] gtp16: entered allmulticast mode
[  438.803900][T28331] gtp17: entered promiscuous mode
[  438.805995][T28331] gtp17: entered allmulticast mode
[  438.808032][T28331] ip6gre1: entered promiscuous mode
[  438.810106][T28331] ip6gre1: entered allmulticast mode
[  438.812387][T28331] gtp18: entered promiscuous mode
[  438.814325][T28331] gtp18: entered allmulticast mode
[  438.816487][T28331] syztnl1: entered promiscuous mode
[  438.818165][T28331] syztnl1: entered allmulticast mode
[  438.820050][T28331] gtp19: entered promiscuous mode
[  438.821700][T28331] gtp19: entered allmulticast mode
[  438.823545][T28331] bond2: entered promiscuous mode
[  438.825835][T28331] bond2: entered allmulticast mode
[  438.827717][T28331] gtp20: entered promiscuous mode
[  438.829357][T28331] gtp20: entered allmulticast mode
[  438.831187][T28331] gtp21: entered promiscuous mode
[  438.832793][T28331] gtp21: entered allmulticast mode
[  438.834838][T28331] bond3: entered promiscuous mode
[  438.836481][T28331] bond3: entered allmulticast mode
[  438.838250][T28331] bridge3: entered promiscuous mode
[  438.839922][T28331] bridge3: entered allmulticast mode
[  438.841775][T28331] gtp22: entered promiscuous mode
[  438.843404][T28331] gtp22: entered allmulticast mode
[  438.845602][T28331] gtp23: entered promiscuous mode
[  438.847244][T28331] gtp23: entered allmulticast mode
[  438.849106][T28331] gtp24: entered promiscuous mode
[  438.850715][T28331] gtp24: entered allmulticast mode
[  438.852514][T28331] bridge4: entered promiscuous mode
[  438.854210][T28331] bridge4: entered allmulticast mode
[  438.856549][T28331] gtp25: entered promiscuous mode
[  438.858171][T28331] gtp25: entered allmulticast mode
[  438.860009][T28331] bridge5: entered promiscuous mode
[  438.861643][T28331] bridge5: entered allmulticast mode
[  438.863482][T28331] gtp26: entered promiscuous mode
[  438.866056][T28331] gtp26: entered allmulticast mode
[  438.867965][T28331] gtp27: entered promiscuous mode
[  438.869754][T28331] gtp27: entered allmulticast mode
[  438.872056][T28331] bond4: entered promiscuous mode
[  438.873762][T28331] bond4: entered allmulticast mode
[  438.875930][T28331] veth2: entered promiscuous mode
[  438.877634][T28331] veth2: entered allmulticast mode
[  438.879751][T28331] veth3: entered promiscuous mode
[  438.881434][T28331] veth3: entered allmulticast mode
[  438.883621][T28331] vti0: entered promiscuous mode
[  438.885797][T28331] vti0: entered allmulticast mode
[  438.887765][T28331] bridge0: entered promiscuous mode
[  438.889921][T28331] gretap1: entered promiscuous mode
[  438.891898][T28331] gretap1: entered allmulticast mode
[  438.893906][T28331] gtp28: entered promiscuous mode
[  438.895861][T28331] gtp28: entered allmulticast mode
[  438.897787][T28331] hsr1: entered promiscuous mode
[  438.899453][T28331] hsr1: entered allmulticast mode
[  438.901808][T28331] bond5: entered promiscuous mode
[  438.903551][T28331] bond5: entered allmulticast mode
[  438.905843][T28331] bridge6: entered promiscuous mode
[  438.907596][T28331] bridge6: entered allmulticast mode
[  438.909676][T28331] gtp29: entered promiscuous mode
[  438.911357][T28331] gtp29: entered allmulticast mode
[  438.913286][T28331] gre2: entered promiscuous mode
[  438.914955][T28331] gre2: entered allmulticast mode
[  438.916809][T28331] gtp30: entered promiscuous mode
[  438.918481][T28331] gtp30: entered allmulticast mode
[  438.920937][T28331] gtp31: entered promiscuous mode
[  438.922931][T28331] gtp31: entered allmulticast mode
[  438.925911][T28331] gtp32: entered promiscuous mode
[  438.928009][T28331] gtp32: entered allmulticast mode
[  438.931224][T28331] gtp33: entered promiscuous mode
[  438.933359][T28331] gtp33: entered allmulticast mode
[  438.936180][T28331] gtp34: entered promiscuous mode
[  438.938278][T28331] gtp34: entered allmulticast mode
[  438.940755][T28331] bond6: entered promiscuous mode
[  438.942858][T28331] bond6: entered allmulticast mode
[  438.945752][T28331] bond7: entered promiscuous mode
[  438.947521][T28331] bond7: entered allmulticast mode
[  438.949954][T28331] gtp35: entered promiscuous mode
[  438.952078][T28331] gtp35: entered allmulticast mode
[  438.954537][T28331] bridge7: entered promiscuous mode
[  438.956803][T28331] bridge7: entered allmulticast mode
[  438.959324][T28331] gtp36: entered promiscuous mode
[  438.961412][T28331] gtp36: entered allmulticast mode
[  438.963895][T28331] gtp37: entered promiscuous mode
[  438.966730][T28331] gtp37: entered allmulticast mode
[  438.969251][T28331] gtp38: entered promiscuous mode
[  438.971367][T28331] gtp38: entered allmulticast mode
[  438.973712][T28331] bond8: entered promiscuous mode
[  438.976267][T28331] bond8: entered allmulticast mode
[  438.978739][T28331] wireguard0: entered promiscuous mode
[  438.981020][T28331] wireguard0: entered allmulticast mode
[  438.983631][T28331] wireguard1: entered promiscuous mode
[  438.986052][T28331] wireguard1: entered allmulticast mode
[  438.988656][T28331] gtp39: entered promiscuous mode
[  438.990713][T28331] gtp39: entered allmulticast mode
[  438.993233][T28331] gtp40: entered promiscuous mode
[  438.995741][T28331] gtp40: entered allmulticast mode
[  438.998318][T28331] gtp41: entered promiscuous mode
[  439.000403][T28331] gtp41: entered allmulticast mode
[  439.002852][T28331] gtp42: entered promiscuous mode
[  439.005462][T28331] gtp42: entered allmulticast mode
[  439.008445][T28331] gtp43: entered promiscuous mode
[  439.010552][T28331] gtp43: entered allmulticast mode
[  439.013024][T28331] vti1: entered promiscuous mode
[  439.014996][T28331] vti1: entered allmulticast mode
[  439.016837][T28331] gtp44: entered promiscuous mode
[  439.018438][T28331] gtp44: entered allmulticast mode
[  439.020280][T28331] gtp45: entered promiscuous mode
[  439.021882][T28331] gtp45: entered allmulticast mode
[  439.023686][T28331] pim6reg: entered promiscuous mode
[  439.025893][T28331] gtp46: entered promiscuous mode
[  439.027509][T28331] gtp46: entered allmulticast mode
[  439.029311][T28331] gtp47: entered promiscuous mode
[  439.030924][T28331] gtp47: entered allmulticast mode
[  439.032728][T28331] bridge8: entered promiscuous mode
[  439.034395][T28331] bridge8: entered allmulticast mode
[  439.036429][T28331] bridge9: entered promiscuous mode
[  439.038091][T28331] bridge9: entered allmulticast mode
[  439.039932][T28331] bridge10: entered promiscuous mode
[  439.041614][T28331] bridge10: entered allmulticast mode
[  439.043471][T28331] netdevsim netdevsim2 eth0: entered promiscuous mode
[  439.046053][T28331] netdevsim netdevsim2 eth0: entered allmulticast mode
[  439.048418][T28331] netdevsim netdevsim2 eth1: entered promiscuous mode
[  439.050541][T28331] netdevsim netdevsim2 eth1: entered allmulticast mode
[  439.052890][T28331] netdevsim netdevsim2 eth2: entered promiscuous mode
[  439.055308][T28331] netdevsim netdevsim2 eth2: entered allmulticast mode
[  439.057658][T28331] netdevsim netdevsim2 eth3: entered promiscuous mode
[  439.059807][T28331] netdevsim netdevsim2 eth3: entered allmulticast mode
[  439.062167][T28331] bridge11: entered promiscuous mode
[  439.063843][T28331] bridge11: entered allmulticast mode
[  439.066277][T28331] bond9: entered promiscuous mode
[  439.067922][T28331] bond9: entered allmulticast mode
[  439.069719][T28331] gtp48: entered promiscuous mode
[  439.071343][T28331] gtp48: entered allmulticast mode
[  439.073180][T28331] veth4: entered promiscuous mode
[  439.075219][T28331] veth4: entered allmulticast mode
[  439.077092][T28331] veth5: entered promiscuous mode
[  439.078677][T28331] veth5: entered allmulticast mode
[  439.080497][T28331] gtp49: entered promiscuous mode
[  439.082156][T28331] gtp49: entered allmulticast mode
[  439.084029][T28331] bridge12: entered promiscuous mode
[  439.086235][T28331] bridge12: entered allmulticast mode
[  439.088171][T28331] syztnl2: entered promiscuous mode
[  439.089814][T28331] syztnl2: entered allmulticast mode
[  439.091668][T28331] gtp50: entered promiscuous mode
[  439.093308][T28331] gtp50: entered allmulticast mode
[  439.131046][T28334] lo speed is unknown, defaulting to 1000
[  439.135180][T28334] lo speed is unknown, defaulting to 1000
[  439.329132][T28350] __nla_validate_parse: 12 callbacks suppressed
[  439.329150][T28350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4621'.
[  439.750224][T28377] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4625'.
[  439.757799][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  457.025084][   T60] block nbd3: Possible stuck request ffff888021250000: control (read@0,1024B). Runtime 240 seconds
[  457.029151][   T60] block nbd3: Possible stuck request ffff888021250200: control (read@1024,1024B). Runtime 240 seconds
[  457.033098][   T60] block nbd3: Possible stuck request ffff888021250400: control (read@2048,1024B). Runtime 240 seconds
[  457.039429][   T60] block nbd3: Possible stuck request ffff888021250600: control (read@3072,1024B). Runtime 240 seconds
[  467.700890][T28382] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge0
[  467.742334][T28387] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4629'.
[  467.749928][T28387] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4629'.
[  467.753559][T28387] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4629'.
[  467.765917][T28387] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4629'.
[  467.782896][T28387] veth2: entered allmulticast mode
[  467.807165][T28392] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4631'.
[  467.811783][T28392] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4631'.
[  467.824588][T28393] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4628'.
[  467.839198][T28393] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4628'.
[  467.964864][T28406] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4634'.
[  468.030685][T28409] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4635'.
[  468.178292][T28426] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  468.219101][T28423] IPVS: Error connecting to the multicast addr
[  468.329395][T28437] macsec1: entered promiscuous mode
[  468.331355][T28437] macsec1: entered allmulticast mode
[  468.696567][T28463] IPVS: Error connecting to the multicast addr
[  468.816430][T28468] validate_nla: 3 callbacks suppressed
[  468.816468][T28468] netlink: 'syz.3.4648': attribute type 10 has an invalid length.
[  468.821010][T28468] !: entered promiscuous mode
[  468.833933][T28468] bridge0: port 1(0!) entered blocking state
[  468.837678][T28468] bridge0: port 1(0!) entered disabled state
[  468.839910][T28468] !: entered allmulticast mode
[  468.916887][T28490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  469.012345][T28501] netlink: 'syz.2.4654': attribute type 10 has an invalid length.
[  469.018267][T28496] netlink: 'syz.3.4651': attribute type 1 has an invalid length.
[  469.159220][T28514] netlink: 'syz.0.4656': attribute type 10 has an invalid length.
[  469.250698][T28530] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  469.363067][T28540] veth0_to_bridge: entered promiscuous mode
[  469.371880][T28540] netlink: 'syz.0.4662': attribute type 10 has an invalid length.
[  469.380873][T28539] veth0_to_bridge: left promiscuous mode
[  469.683031][T28551] lo speed is unknown, defaulting to 1000
[  469.688039][T28551] lo speed is unknown, defaulting to 1000
[  469.893698][T28563] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  469.913376][T28563] !: left allmulticast mode
[  469.918476][T28563] bridge0: port 1(0!) entered disabled state
[  470.028176][T28573] netlink: 'syz.3.4666': attribute type 10 has an invalid length.
[  470.031591][T28573] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[  470.039977][T28573] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  470.043937][T28573] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  470.515511][T28596] netlink: 'syz.0.4670': attribute type 1 has an invalid length.
[  470.518210][T28596] netlink: 'syz.0.4670': attribute type 1 has an invalid length.
[  470.603378][T28603] netlink: 'syz.2.4671': attribute type 13 has an invalid length.
[  470.623178][T28603] netlink: 'syz.2.4671': attribute type 17 has an invalid length.
[  470.638952][T28603] lo: left promiscuous mode
[  470.640675][T28603] lo: left allmulticast mode
[  470.642812][T28603] tunl0: left promiscuous mode
[  470.645180][T28603] tunl0: left allmulticast mode
[  470.647969][T28603] gre0: left promiscuous mode
[  470.649544][T28603] gre0: left allmulticast mode
[  470.652334][T28603] gretap0: left promiscuous mode
[  470.654432][T28603] gretap0: left allmulticast mode
[  470.665863][T28603] erspan0: left promiscuous mode
[  470.667877][T28603] erspan0: left allmulticast mode
[  470.672917][T28603] ip_vti0: left promiscuous mode
[  470.676415][T28603] ip_vti0: left allmulticast mode
[  470.679911][T28603] ip6_vti0: left promiscuous mode
[  470.682086][T28603] ip6_vti0: left allmulticast mode
[  470.685530][T28603] sit0: left promiscuous mode
[  470.687590][T28603] sit0: left allmulticast mode
[  470.690617][T28603] ip6tnl0: left promiscuous mode
[  470.692692][T28603] ip6tnl0: left allmulticast mode
[  470.696150][T28603] ip6gre0: left promiscuous mode
[  470.698171][T28603] ip6gre0: left allmulticast mode
[  470.700587][T28603] syz_tun: left promiscuous mode
[  470.702263][T28603] syz_tun: left allmulticast mode
[  470.707323][T28603] vcan0: left promiscuous mode
[  470.708916][T28603] vcan0: left allmulticast mode
[  470.711346][T28603] bond0: left promiscuous mode
[  470.712937][T28603] bond0: left allmulticast mode
[  470.716468][T28603] 8021q: adding VLAN 0 to HW filter on device bond0
[  470.722173][T28603] 8021q: adding VLAN 0 to HW filter on device team0
[  470.725602][T28603] dummy0: left promiscuous mode
[  470.727134][T28603] dummy0: left allmulticast mode
[  470.729454][T28603] nlmon0: left promiscuous mode
[  470.731277][T28603] nlmon0: left allmulticast mode
[  470.745826][T28603] caif0: left promiscuous mode
[  470.747370][T28603] caif0: left allmulticast mode
[  470.748867][T28603] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  470.825425][T28606] lo speed is unknown, defaulting to 1000
[  470.831696][T28606] lo speed is unknown, defaulting to 1000
[  471.692840][T28676] bond0: option primary_reselect: invalid value (4)
[  471.913579][T28696] macsec1: left promiscuous mode
[  471.916682][T28696] macsec1: left allmulticast mode
[  472.774907][T28780] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20003
[  472.780384][T28780] sctp: [Deprecated]: syz.0.4702 (pid 28780) Use of struct sctp_assoc_value in delayed_ack socket option.
[  472.780384][T28780] Use struct sctp_sack_info instead
[  472.953306][T28790] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  473.294809][T28818] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  473.345259][T28802] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  473.349012][T28802] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  473.582972][T28829] "syz.0.4709" (28829) uses obsolete ecb(arc4) skcipher
[  473.652693][T28830] delete_channel: no stack
[  473.800215][T28846] __nla_validate_parse: 21 callbacks suppressed
[  473.800231][T28846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4714'.
[  473.859890][T28846] validate_nla: 8 callbacks suppressed
[  473.859905][T28846] netlink: 'syz.0.4714': attribute type 10 has an invalid length.
[  473.867247][T28846] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4714'.
[  474.455841][T28877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4720'.
[  474.518244][T28878] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4720'.
[  474.521161][T28878] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4720'.
[  474.917012][T28892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4723'.
[  475.137962][T28907] netlink: 'syz.2.4725': attribute type 10 has an invalid length.
[  475.142373][T28907] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4725'.
[  475.142374][T28908] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4725'.
[  475.196442][T28908] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4725'.
[  475.198919][T28907] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4725'.
[  475.421344][T28931] netlink: 'syz.0.4729': attribute type 1 has an invalid length.
[  475.424021][T28931] netlink: 'syz.0.4729': attribute type 3 has an invalid length.
[  475.789247][T28964] netlink: 'syz.0.4733': attribute type 10 has an invalid length.
[  475.920466][T28974] batadv0: left promiscuous mode
[  475.922802][T28974] veth0: left promiscuous mode
[  475.926370][T28974] veth0: left allmulticast mode
[  475.928509][T28974] veth1: left promiscuous mode
[  475.930487][T28974] veth1: left allmulticast mode
[  475.932616][T28974] wg0: left promiscuous mode
[  475.934516][T28974] wg0: left allmulticast mode
[  475.936800][T28974] wlan0: left promiscuous mode
[  475.938814][T28974] wlan0: left allmulticast mode
[  475.941821][T28974] wg2: left promiscuous mode
[  475.944420][T28974] wg2: left allmulticast mode
[  475.950009][T28974] veth0_to_bridge: left promiscuous mode
[  475.952313][T28974] veth0_to_bridge: left allmulticast mode
[  475.954610][T28974] bridge_slave_0: left promiscuous mode
[  475.956879][T28974] bridge_slave_0: left allmulticast mode
[  475.958977][T28974] veth1_to_bridge: left promiscuous mode
[  475.961069][T28974] veth1_to_bridge: left allmulticast mode
[  475.963613][T28974] bridge_slave_1: left promiscuous mode
[  475.967913][T28974] bridge_slave_1: left allmulticast mode
[  475.970265][T28974] veth0_to_bond: left promiscuous mode
[  475.972445][T28974] veth0_to_bond: left allmulticast mode
[  475.974490][T28974] bond_slave_0: left promiscuous mode
[  475.976880][T28974] bond_slave_0: left allmulticast mode
[  475.978914][T28974] veth1_to_bond: left promiscuous mode
[  475.981001][T28974] veth1_to_bond: left allmulticast mode
[  475.983517][T28974] bond_slave_1: left promiscuous mode
[  475.987657][T28974] bond_slave_1: left allmulticast mode
[  475.989705][T28974] veth1_to_team: left promiscuous mode
[  475.991643][T28974] veth1_to_team: left allmulticast mode
[  475.993816][T28974] veth0_to_batadv: left promiscuous mode
[  475.995959][T28974] veth0_to_batadv: left allmulticast mode
[  475.998421][T28974] batadv_slave_0: left promiscuous mode
[  476.000781][T28974] batadv_slave_0: left allmulticast mode
[  476.003054][T28974] veth1_to_batadv: left promiscuous mode
[  476.006006][T28974] veth1_to_batadv: left allmulticast mode
[  476.008201][T28974] xfrm0: left promiscuous mode
[  476.010098][T28974] xfrm0: left allmulticast mode
[  476.012053][T28974] veth0_to_hsr: left promiscuous mode
[  476.014073][T28974] veth0_to_hsr: left allmulticast mode
[  476.016354][T28974] veth1_to_hsr: left promiscuous mode
[  476.018195][T28974] veth1_to_hsr: left allmulticast mode
[  476.020340][T28974] hsr0: left promiscuous mode
[  476.022183][T28974] hsr0: left allmulticast mode
[  476.024269][T28974] hsr_slave_0: left allmulticast mode
[  476.026523][T28974] hsr_slave_1: left allmulticast mode
[  476.028675][T28974] veth1_virt_wifi: left promiscuous mode
[  476.031074][T28974] veth1_virt_wifi: left allmulticast mode
[  476.033323][T28974] veth0_virt_wifi: left promiscuous mode
[  476.035423][T28974] veth0_virt_wifi: left allmulticast mode
[  476.037549][T28974] veth1_vlan: left allmulticast mode
[  476.040107][T28974] vlan0: left promiscuous mode
[  476.042313][T28974] vlan0: left allmulticast mode
[  476.044536][T28974] vlan1: left promiscuous mode
[  476.046992][T28974] vlan1: left allmulticast mode
[  476.049012][T28974] macvlan0: left promiscuous mode
[  476.050789][T28974] macvlan0: left allmulticast mode
[  476.052838][T28974] macvlan1: left promiscuous mode
[  476.054758][T28974] macvlan1: left allmulticast mode
[  476.056750][T28974] ipvlan0: left promiscuous mode
[  476.058825][T28974] ipvlan0: left allmulticast mode
[  476.061077][T28974] ipvlan1: left promiscuous mode
[  476.063135][T28974] ipvlan1: left allmulticast mode
[  476.065070][T28974] veth0_vlan: left allmulticast mode
[  476.066830][T28974] veth1_macvtap: left allmulticast mode
[  476.068705][T28974] veth0_macvtap: left allmulticast mode
[  476.070890][T28974] macvtap0: left promiscuous mode
[  476.072563][T28974] macvtap0: left allmulticast mode
[  476.074439][T28974] geneve0: left promiscuous mode
[  476.076440][T28974] geneve0: left allmulticast mode
[  476.078382][T28974] geneve1: left promiscuous mode
[  476.079972][T28974] geneve1: left allmulticast mode
[  476.081656][T28974] gtp0: left promiscuous mode
[  476.083315][T28974] gtp0: left allmulticast mode
[  476.085298][T28974] gtp1: left promiscuous mode
[  476.086906][T28974] gtp1: left allmulticast mode
[  476.088637][T28974] gtp2: left promiscuous mode
[  476.090122][T28974] gtp2: left allmulticast mode
[  476.091766][T28974] team_slave_1.3: left promiscuous mode
[  476.093698][T28974] team_slave_1: left promiscuous mode
[  476.095585][T28974] team_slave_1.3: left allmulticast mode
[  476.097416][T28974] team_slave_1: left allmulticast mode
[  476.099374][T28974] gtp3: left promiscuous mode
[  476.100983][T28974] gtp3: left allmulticast mode
[  476.102685][T28974] gtp4: left promiscuous mode
[  476.104296][T28974] gtp4: left allmulticast mode
[  476.106333][T28974] gre1: left promiscuous mode
[  476.107882][T28974] gre1: left allmulticast mode
[  476.109701][T28974] gtp5: left promiscuous mode
[  476.111273][T28974] gtp5: left allmulticast mode
[  476.112918][T28974] @: left promiscuous mode
[  476.114582][T28974] @: left allmulticast mode
[  476.116881][T28974] syztnl0: left promiscuous mode
[  476.124772][T28974] syztnl0: left allmulticast mode
[  476.126429][T28974] bridge1: left promiscuous mode
[  476.128004][T28974] bridge1: left allmulticast mode
[  476.129904][T28974] gtp6: left promiscuous mode
[  476.131414][T28974] gtp6: left allmulticast mode
[  476.133726][T28974] ip6gretap1: left promiscuous mode
[  476.135748][T28974] ip6gretap1: left allmulticast mode
[  476.137523][T28974] bridge2: left promiscuous mode
[  476.139307][T28974] bridge2: left allmulticast mode
[  476.140981][T28974] gtp7: left promiscuous mode
[  476.142501][T28974] gtp7: left allmulticast mode
[  476.144143][T28974] gtp8: left promiscuous mode
[  476.145808][T28974] gtp8: left allmulticast mode
[  476.147444][T28974] pim6reg9: left promiscuous mode
[  476.149281][T28974] gtp9: left promiscuous mode
[  476.150902][T28974] gtp9: left allmulticast mode
[  476.152506][T28974] bond1: left promiscuous mode
[  476.154008][T28974] bond1: left allmulticast mode
[  476.156606][T28974] gtp10: left promiscuous mode
[  476.158432][T28974] gtp10: left allmulticast mode
[  476.160401][T28974] gtp11: left promiscuous mode
[  476.162328][T28974] gtp11: left allmulticast mode
[  476.163966][T28974] gtp12: left promiscuous mode
[  476.165789][T28974] gtp12: left allmulticast mode
[  476.167407][T28974] gtp13: left promiscuous mode
[  476.168948][T28974] gtp13: left allmulticast mode
[  476.170596][T28974] ip6tnl1: left promiscuous mode
[  476.172249][T28974] ip6tnl1: left allmulticast mode
[  476.173962][T28974] gtp14: left promiscuous mode
[  476.176508][T28974] gtp14: left allmulticast mode
[  476.178855][T28974] gtp15: left promiscuous mode
[  476.180611][T28974] gtp15: left allmulticast mode
[  476.182396][T28974] gtp16: left promiscuous mode
[  476.183983][T28974] gtp16: left allmulticast mode
[  476.185906][T28974] gtp17: left promiscuous mode
[  476.187488][T28974] gtp17: left allmulticast mode
[  476.189266][T28974] ip6gre1: left promiscuous mode
[  476.190877][T28974] ip6gre1: left allmulticast mode
[  476.193029][T28974] gtp18: left promiscuous mode
[  476.194545][T28974] gtp18: left allmulticast mode
[  476.196445][T28974] syztnl1: left promiscuous mode
[  476.198060][T28974] syztnl1: left allmulticast mode
[  476.199855][T28974] gtp19: left promiscuous mode
[  476.201359][T28974] gtp19: left allmulticast mode
[  476.203177][T28974] bond2: left promiscuous mode
[  476.205077][T28974] bond2: left allmulticast mode
[  476.206896][T28974] gtp20: left promiscuous mode
[  476.208556][T28974] gtp20: left allmulticast mode
[  476.210405][T28974] gtp21: left promiscuous mode
[  476.212116][T28974] gtp21: left allmulticast mode
[  476.213949][T28974] bond3: left promiscuous mode
[  476.216089][T28974] bond3: left allmulticast mode
[  476.217836][T28974] bridge3: left promiscuous mode
[  476.219527][T28974] bridge3: left allmulticast mode
[  476.221570][T28974] gtp22: left promiscuous mode
[  476.223163][T28974] gtp22: left allmulticast mode
[  476.225777][T28974] gtp23: left promiscuous mode
[  476.227431][T28974] gtp23: left allmulticast mode
[  476.229084][T28974] gtp24: left promiscuous mode
[  476.230722][T28974] gtp24: left allmulticast mode
[  476.232451][T28974] bridge4: left promiscuous mode
[  476.234058][T28974] bridge4: left allmulticast mode
[  476.236056][T28974] gtp25: left promiscuous mode
[  476.237739][T28974] gtp25: left allmulticast mode
[  476.239596][T28974] bridge5: left promiscuous mode
[  476.241622][T28974] bridge5: left allmulticast mode
[  476.243522][T28974] gtp26: left promiscuous mode
[  476.245320][T28974] gtp26: left allmulticast mode
[  476.247216][T28974] gtp27: left promiscuous mode
[  476.248873][T28974] gtp27: left allmulticast mode
[  476.250729][T28974] bond4: left promiscuous mode
[  476.252359][T28974] bond4: left allmulticast mode
[  476.254018][T28974] veth2: left promiscuous mode
[  476.255793][T28974] veth2: left allmulticast mode
[  476.257470][T28974] veth3: left promiscuous mode
[  476.258961][T28974] veth3: left allmulticast mode
[  476.260754][T28974] vti0: left promiscuous mode
[  476.262313][T28974] vti0: left allmulticast mode
[  476.264585][T28974] bridge0: left promiscuous mode
[  476.269374][T28974] gretap1: left promiscuous mode
[  476.271127][T28974] gretap1: left allmulticast mode
[  476.272881][T28974] gtp28: left promiscuous mode
[  476.274472][T28974] gtp28: left allmulticast mode
[  476.276359][T28974] hsr1: left promiscuous mode
[  476.277967][T28974] hsr1: left allmulticast mode
[  476.279524][T28974] ip6gretap0: left allmulticast mode
[  476.281303][T28974] batadv_slave_1: left allmulticast mode
[  476.283301][T28974] bond5: left promiscuous mode
[  476.285055][T28974] bond5: left allmulticast mode
[  476.286810][T28974] bridge6: left promiscuous mode
[  476.288416][T28974] bridge6: left allmulticast mode
[  476.290192][T28974] gtp29: left promiscuous mode
[  476.291865][T28974] gtp29: left allmulticast mode
[  476.293644][T28974] gre2: left promiscuous mode
[  476.295401][T28974] gre2: left allmulticast mode
[  476.297116][T28974] gtp30: left promiscuous mode
[  476.298712][T28974] gtp30: left allmulticast mode
[  476.300533][T28974] gtp31: left promiscuous mode
[  476.302171][T28974] gtp31: left allmulticast mode
[  476.303952][T28974] gtp32: left promiscuous mode
[  476.307098][T28974] gtp32: left allmulticast mode
[  476.309233][T28974] gtp33: left promiscuous mode
[  476.311033][T28974] gtp33: left allmulticast mode
[  476.312734][T28974] gtp34: left promiscuous mode
[  476.314330][T28974] gtp34: left allmulticast mode
[  476.316303][T28974] bond6: left promiscuous mode
[  476.317928][T28974] bond6: left allmulticast mode
[  476.319633][T28974] bond7: left promiscuous mode
[  476.321242][T28974] bond7: left allmulticast mode
[  476.322936][T28974] gtp35: left promiscuous mode
[  476.324562][T28974] gtp35: left allmulticast mode
[  476.326573][T28974] bridge7: left promiscuous mode
[  476.328257][T28974] bridge7: left allmulticast mode
[  476.330017][T28974] gtp36: left promiscuous mode
[  476.331671][T28974] gtp36: left allmulticast mode
[  476.333331][T28974] gtp37: left promiscuous mode
[  476.335787][T28974] gtp37: left allmulticast mode
[  476.337481][T28974] gtp38: left promiscuous mode
[  476.339084][T28974] gtp38: left allmulticast mode
[  476.340821][T28974] bond8: left promiscuous mode
[  476.342330][T28974] bond8: left allmulticast mode
[  476.344029][T28974] wireguard0: left promiscuous mode
[  476.346007][T28974] wireguard0: left allmulticast mode
[  476.347782][T28974] wireguard1: left promiscuous mode
[  476.349619][T28974] wireguard1: left allmulticast mode
[  476.351676][T28974] gtp39: left promiscuous mode
[  476.353480][T28974] gtp39: left allmulticast mode
[  476.355743][T28974] gtp40: left promiscuous mode
[  476.357658][T28974] gtp40: left allmulticast mode
[  476.359751][T28974] gtp41: left promiscuous mode
[  476.361709][T28974] gtp41: left allmulticast mode
[  476.363469][T28974] gtp42: left promiscuous mode
[  476.365269][T28974] gtp42: left allmulticast mode
[  476.367378][T28974] gtp43: left promiscuous mode
[  476.369309][T28974] gtp43: left allmulticast mode
[  476.371490][T28974] vti1: left promiscuous mode
[  476.373465][T28974] vti1: left allmulticast mode
[  476.375792][T28974] gtp44: left promiscuous mode
[  476.377740][T28974] gtp44: left allmulticast mode
[  476.379793][T28974] gtp45: left promiscuous mode
[  476.381692][T28974] gtp45: left allmulticast mode
[  476.383745][T28974] pim6reg: left promiscuous mode
[  476.385742][T28974] gtp46: left promiscuous mode
[  476.387239][T28974] gtp46: left allmulticast mode
[  476.388829][T28974] gtp47: left promiscuous mode
[  476.390318][T28974] gtp47: left allmulticast mode
[  476.392518][T28974] bridge8: left promiscuous mode
[  476.394277][T28974] bridge8: left allmulticast mode
[  476.396352][T28974] bridge9: left promiscuous mode
[  476.398265][T28974] bridge9: left allmulticast mode
[  476.400222][T28974] bridge10: left promiscuous mode
[  476.401886][T28974] bridge10: left allmulticast mode
[  476.403652][T28974] bridge11: left promiscuous mode
[  476.405574][T28974] bridge11: left allmulticast mode
[  476.407497][T28974] bond9: left promiscuous mode
[  476.409193][T28974] bond9: left allmulticast mode
[  476.410843][T28974] gtp48: left promiscuous mode
[  476.412460][T28974] gtp48: left allmulticast mode
[  476.414105][T28974] veth4: left promiscuous mode
[  476.415964][T28974] veth4: left allmulticast mode
[  476.417998][T28974] veth5: left promiscuous mode
[  476.419560][T28974] veth5: left allmulticast mode
[  476.421226][T28974] gtp49: left promiscuous mode
[  476.422884][T28974] gtp49: left allmulticast mode
[  476.424590][T28974] bridge12: left promiscuous mode
[  476.426715][T28974] bridge12: left allmulticast mode
[  476.428732][T28974] syztnl2: left promiscuous mode
[  476.430364][T28974] syztnl2: left allmulticast mode
[  476.432125][T28974] gtp50: left promiscuous mode
[  476.433777][T28974] gtp50: left allmulticast mode
[  476.710365][T28985] netlink: 'syz.2.4737': attribute type 10 has an invalid length.
[  476.943176][T29037] !: left promiscuous mode
[  476.964150][T29037] veth2: left allmulticast mode
[  477.077108][T29039] IPVS: Error connecting to the multicast addr
[  477.399899][T29058] netlink: 'syz.2.4749': attribute type 10 has an invalid length.
[  477.441289][T29066] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  477.521969][T29074] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  478.056138][T29103] netlink: 'syz.2.4757': attribute type 10 has an invalid length.
[  478.378720][T29136] netlink: 'syz.0.4764': attribute type 10 has an invalid length.
[  478.381610][T29136] netlink: 'syz.0.4764': attribute type 10 has an invalid length.
[  478.462435][T29131] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[  478.483310][T29131] team0: Port device sit2 added
[  478.487776][T29131] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  478.491203][T29131] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  478.678825][T29152] lo speed is unknown, defaulting to 1000
[  478.682701][T29152] lo speed is unknown, defaulting to 1000
[  478.874874][T29166] validate_nla: 27 callbacks suppressed
[  478.874889][T29166] netlink: 'syz.0.4769': attribute type 13 has an invalid length.
[  479.123862][T29175] __nla_validate_parse: 14 callbacks suppressed
[  479.123876][T29175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4770'.
[  479.131805][T29175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4770'.
[  479.261556][T29184] netlink: 'syz.0.4772': attribute type 10 has an invalid length.
[  479.387783][T29211] netlink: 'syz.3.4777': attribute type 13 has an invalid length.
[  479.792730][T29240] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  479.801299][T29240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4782'.
[  479.824233][T29245] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4783'.
[  479.878976][T29250] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4784'.
[  479.883459][T29250] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4784'.
[  479.939209][T29253] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  480.192396][T29270] netlink: 'syz.2.4788': attribute type 10 has an invalid length.
[  480.412207][T29292] netlink: 'syz.2.4792': attribute type 10 has an invalid length.
[  480.445931][T29292] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4792'.
[  480.681024][T29303] netlink: 'syz.3.4794': attribute type 10 has an invalid length.
[  480.727255][T29305] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  480.819251][T29306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4795'.
[  480.823696][T29306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4795'.
[  481.037658][T29310] netlink: 'syz.2.4796': attribute type 13 has an invalid length.
[  481.294362][T29312] netlink: 'syz.0.4797': attribute type 10 has an invalid length.
[  481.323262][T29330] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4800'.
[  481.353431][T29334] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  481.362057][T29334] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  481.372761][T29336] netlink: 'syz.2.4801': attribute type 13 has an invalid length.
[  481.403330][T29336] GUP no longer grows the stack in syz.2.4801 (29336): 200000003000-20000000a000 (200000001000)
[  481.408219][T29336] CPU: 1 UID: 0 PID: 29336 Comm: syz.2.4801 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  481.408246][T29336] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  481.408256][T29336] Call Trace:
[  481.408264][T29336]  <TASK>
[  481.408272][T29336]  dump_stack_lvl+0x189/0x250
[  481.408308][T29336]  ? __pfx_dump_stack_lvl+0x10/0x10
[  481.408324][T29336]  ? __pfx__printk+0x10/0x10
[  481.408339][T29336]  ? find_vma+0xe7/0x160
[  481.408354][T29336]  ? __lock_acquire+0xab9/0xd20
[  481.408380][T29336]  __get_user_pages+0x24d0/0x2ce0
[  481.408395][T29336]  ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190
[  481.408437][T29336]  ? rcu_is_watching+0x15/0xb0
[  481.408453][T29336]  __gup_longterm_locked+0xde9/0x1660
[  481.408479][T29336]  ? sanity_check_pinned_pages+0x123a/0x1300
[  481.408500][T29336]  gup_fast_fallback+0x1e6a/0x2010
[  481.408533][T29336]  ? __pfx_gup_fast_fallback+0x10/0x10
[  481.408545][T29336]  ? stack_trace_save+0x9c/0xe0
[  481.408556][T29336]  ? __pfx_stack_trace_save+0x10/0x10
[  481.408574][T29336]  ? pin_user_pages_fast+0x4d/0xb0
[  481.408587][T29336]  iov_iter_extract_pages+0x35a/0x5e0
[  481.408605][T29336]  extract_iter_to_sg+0xe46/0x24e0
[  481.408635][T29336]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  481.408660][T29336]  ? __asan_memset+0x22/0x50
[  481.408673][T29336]  af_alg_get_rsgl+0x436/0x810
[  481.408699][T29336]  aead_recvmsg+0x4cc/0x13f0
[  481.408719][T29336]  ? rcu_is_watching+0x15/0xb0
[  481.408733][T29336]  ? __pfx_aead_recvmsg+0x10/0x10
[  481.408751][T29336]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  481.408800][T29336]  ? __pfx_aead_recvmsg+0x10/0x10
[  481.408819][T29336]  sock_recvmsg_nosec+0x186/0x1c0
[  481.408842][T29336]  ____sys_recvmsg+0x3aa/0x460
[  481.408860][T29336]  ? __pfx_____sys_recvmsg+0x10/0x10
[  481.408884][T29336]  ? import_iovec+0x74/0xa0
[  481.408901][T29336]  ___sys_recvmsg+0x1b5/0x510
[  481.408918][T29336]  ? __pfx____sys_recvmsg+0x10/0x10
[  481.408950][T29336]  ? __might_fault+0xb0/0x130
[  481.408966][T29336]  do_recvmmsg+0x307/0x770
[  481.408983][T29336]  ? __pfx_do_recvmmsg+0x10/0x10
[  481.408994][T29336]  ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0
[  481.409019][T29336]  ? __pfx_do_futex+0x10/0x10
[  481.409044][T29336]  __x64_sys_recvmmsg+0x190/0x240
[  481.409059][T29336]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  481.409069][T29336]  ? rcu_is_watching+0x15/0xb0
[  481.409084][T29336]  ? do_syscall_64+0xbe/0x3b0
[  481.409102][T29336]  do_syscall_64+0xfa/0x3b0
[  481.409119][T29336]  ? lockdep_hardirqs_on+0x9c/0x150
[  481.409133][T29336]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  481.409147][T29336]  ? exc_page_fault+0x9f/0xf0
[  481.409164][T29336]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  481.409179][T29336] RIP: 0033:0x7f767298ebe9
[  481.409194][T29336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  481.409208][T29336] RSP: 002b:00007f767388c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  481.409224][T29336] RAX: ffffffffffffffda RBX: 00007f7672bb5fa0 RCX: 00007f767298ebe9
[  481.409233][T29336] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 000000000000000c
[  481.409264][T29336] RBP: 00007f7672a11e19 R08: 0000000000000000 R09: 0000000000000000
[  481.409272][T29336] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[  481.409279][T29336] R13: 00007f7672bb6038 R14: 00007f7672bb5fa0 R15: 00007ffcf3813f98
[  481.409309][T29336]  </TASK>
[  481.796139][T29351] mac80211_hwsim hwsim17 wlan0: entered promiscuous mode
[  481.799771][T29351] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  481.838811][   T33] audit: type=1107 audit(1755206826.222:10): pid=29352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='XMgBBZnyc1!5WSlF'
[  481.936604][T29358] mac80211_hwsim hwsim17 wlan0: left promiscuous mode
[  482.234064][T29384] 8021q: adding VLAN 0 to HW filter on device bond5
[  482.246504][T29387] "syz.3.4816" (29387) uses obsolete ecb(arc4) skcipher
[  482.250036][T29384] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  482.254477][T29384] bond5: (slave macvlan0): Enslaving as a backup interface with a down link
[  482.338901][T29391] pim6reg: left allmulticast mode
[  482.472994][T29398] netlink: 'syz.0.4819': attribute type 10 has an invalid length.
[  482.600585][T29418] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  482.633944][T29420] mac80211_hwsim hwsim17 wlan0: entered promiscuous mode
[  482.704515][T29426] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  483.211197][T29435] ip6gretap1: entered promiscuous mode
[  483.393451][T29458] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  483.667852][T29480] lo speed is unknown, defaulting to 1000
[  483.671671][T29480] lo speed is unknown, defaulting to 1000
[  483.765467][T29494] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  483.999169][T29503] validate_nla: 1 callbacks suppressed
[  483.999183][T29503] netlink: 'syz.0.4837': attribute type 10 has an invalid length.
[  484.059744][T29514] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  484.063082][T29514] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  484.382641][T29533] IPVS: Unknown mcast interface: bridge_slave_
[  484.513818][T29539] netlink: 'syz.2.4846': attribute type 1 has an invalid length.
[  484.516528][T29539] netlink: 'syz.2.4846': attribute type 1 has an invalid length.
[  484.576339][T29545] netlink: 'syz.2.4847': attribute type 10 has an invalid length.
[  484.579509][T29545] netlink: 'syz.2.4847': attribute type 10 has an invalid length.
[  484.582673][T29545] netlink: 'syz.2.4847': attribute type 10 has an invalid length.
[  484.758988][T29565] __nla_validate_parse: 14 callbacks suppressed
[  484.759002][T29565] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4852'.
[  484.772941][T29565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4852'.
[  484.943111][T29578] netlink: 'syz.3.4854': attribute type 1 has an invalid length.
[  485.113489][T29584] netlink: 'syz.2.4856': attribute type 10 has an invalid length.
[  485.369359][T29604] netlink: 'syz.2.4860': attribute type 13 has an invalid length.
[  485.407666][T29608] netlink: 'syz.2.4861': attribute type 10 has an invalid length.
[  485.702849][T29634] netlink: 1748 bytes leftover after parsing attributes in process `syz.2.4866'.
[  485.993015][T29667] sctp: [Deprecated]: syz.2.4873 (pid 29667) Use of struct sctp_assoc_value in delayed_ack socket option.
[  485.993015][T29667] Use struct sctp_sack_info instead
[  486.260800][T29689] IPVS: Error connecting to the multicast addr
[  486.464286][T29708] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  486.813968][T29748] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4888'.
[  487.074555][T29766] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  487.108823][   T25] block nbd3: Possible stuck request ffff888021250000: control (read@0,1024B). Runtime 270 seconds
[  487.113253][   T25] block nbd3: Possible stuck request ffff888021250200: control (read@1024,1024B). Runtime 270 seconds
[  487.117831][   T25] block nbd3: Possible stuck request ffff888021250400: control (read@2048,1024B). Runtime 270 seconds
[  487.123000][   T25] block nbd3: Possible stuck request ffff888021250600: control (read@3072,1024B). Runtime 270 seconds
[  487.509142][T29785] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4894'.
[  488.097921][T29824] bond5: (slave macvlan0): Releasing backup interface
[  488.239495][T29831] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  488.242417][T29831] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  488.338908][T29844] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4898'.
[  488.663360][T29866] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4902'.
[  489.040627][T29904] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4908'.
[  489.057330][T29897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4908'.
[  489.099579][T29897] validate_nla: 5 callbacks suppressed
[  489.099593][T29897] netlink: 'syz.0.4908': attribute type 2 has an invalid length.
[  489.170717][T29917] netlink: 'syz.2.4911': attribute type 2 has an invalid length.
[  489.173251][T29917] netlink: 'syz.2.4911': attribute type 1 has an invalid length.
[  489.432242][T29928] "syz.2.4913" (29928) uses obsolete ecb(arc4) skcipher
[  489.695001][T29939] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  489.850812][T29945] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4916'.
[  489.854363][T29945] netlink: 'syz.0.4916': attribute type 10 has an invalid length.
[  489.997456][T29975] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  490.380801][T29995] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4924'.
[  490.450467][T30009] team0: Mode "ac" not found
[  490.492999][T30019] ip6gretap1: left promiscuous mode
[  490.511976][T30009] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4926'.
[  490.594650][T30029] netlink: zone id is out of range
[  490.599422][T30029] netlink: zone id is out of range
[  490.603300][T30029] netlink: zone id is out of range
[  490.605508][T30029] netlink: zone id is out of range
[  490.607469][T30029] netlink: zone id is out of range
[  490.609139][T30029] netlink: zone id is out of range
[  490.611163][T30029] netlink: zone id is out of range
[  490.613016][T30029] netlink: zone id is out of range
[  490.623207][T30029] netlink: zone id is out of range
[  490.627658][T30029] netlink: zone id is out of range
[  490.819509][T30051] netlink: 'syz.3.4937': attribute type 10 has an invalid length.
[  490.823188][T30051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4937'.
[  490.828705][T30051] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4937'.
[  490.833404][T30051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4937'.
[  490.837867][T30051] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4937'.
[  490.880434][T30056] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4938'.
[  490.920973][T30061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4939'.
[  491.324179][   T33] audit: type=1107 audit(1755206835.702:11): pid=30065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='!SCjWgr7쇁.)I'
[  491.446260][T30070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4941'.
[  491.590959][T30079] netlink: 'syz.2.4942': attribute type 10 has an invalid length.
[  491.800132][T30099] netlink: 'syz.2.4946': attribute type 10 has an invalid length.
[  491.802795][T30099] netlink: 'syz.2.4946': attribute type 10 has an invalid length.
[  491.903380][T30119] netlink: 'syz.3.4948': attribute type 10 has an invalid length.
[  492.448518][T30154] "syz.0.4955" (30154) uses obsolete ecb(arc4) skcipher
[  492.551942][T30156] netlink: 'syz.0.4956': attribute type 10 has an invalid length.
[  492.734013][T30171] "syz.3.4959" (30171) uses obsolete ecb(arc4) skcipher
[  492.772840][T30173] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  492.786791][T30173] team0: Port device sit2 removed
[  493.706826][T30213] RDS: rds_bind could not find a transport for fe80::1f, load rds_tcp or rds_rdma?
[  493.881105][T30227] "syz.2.4970" (30227) uses obsolete ecb(arc4) skcipher
[  494.985934][T30276] validate_nla: 3 callbacks suppressed
[  494.985949][T30276] netlink: 'syz.2.4979': attribute type 1 has an invalid length.
[  495.335426][T30295] netlink: 'syz.2.4982': attribute type 10 has an invalid length.
[  495.777066][T30350] __nla_validate_parse: 11 callbacks suppressed
[  495.777080][T30350] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4990'.
[  495.806275][T30329] netlink: 'syz.2.4986': attribute type 10 has an invalid length.
[  495.853442][T30329] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  495.857115][T30329] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  495.954995][T30372] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4994'.
[  495.960106][T30372] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4994'.
[  495.963143][T30373] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4994'.
[  495.976130][T30375] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4995'.
[  496.015227][T30373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4994'.
[  496.018213][T30372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4994'.
[  496.162026][T30398] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4999'.
[  496.300093][T30414] netlink: 'syz.3.5003': attribute type 1 has an invalid length.
[  496.302848][T30414] netlink: 232 bytes leftover after parsing attributes in process `syz.3.5003'.
[  496.307586][T30414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5003'.
[  496.329033][T30386] netlink: 'syz.0.4997': attribute type 10 has an invalid length.
[  496.336560][T30414] tipc: New replicast peer: 255.255.255.255
[  496.339172][T30414] tipc: Enabled bearer <udp:syz2>, priority 10
[  496.540152][T30420] netlink: 'syz.3.5004': attribute type 13 has an invalid length.
[  496.542903][T30420] netlink: 'syz.3.5004': attribute type 17 has an invalid length.
[  496.577057][T30420] 8021q: adding VLAN 0 to HW filter on device team0
[  496.587096][T30420] net_ratelimit: 13 callbacks suppressed
[  496.587105][T30420] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  496.594557][  T793] lo speed is unknown, defaulting to 1000
[  496.597057][  T793] syz0: Port: 1 Link ACTIVE
[  496.599623][T30431] netlink: 'syz.2.5006': attribute type 10 has an invalid length.
[  496.603202][  T793] lo speed is unknown, defaulting to 1000
[  496.630760][T30420] lo speed is unknown, defaulting to 1000
[  496.670940][T30420] lo speed is unknown, defaulting to 1000
[  497.219480][T30479] netlink: 'syz.0.5013': attribute type 10 has an invalid length.
[  497.469004][T30485] netlink: 'syz.3.5015': attribute type 13 has an invalid length.
[  497.626633][ T5910] lo speed is unknown, defaulting to 1000
[  497.629416][ T5910] syz0: Port: 1 Link DOWN
[  497.631731][ T5910] lo speed is unknown, defaulting to 1000
[  497.813426][T30505] tipc: Resetting bearer <eth:gre0>
[  498.555955][T30573] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  498.618656][T30580] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  499.798032][T30661] "syz.0.5043" (30661) uses obsolete ecb(arc4) skcipher
[  499.929669][T30674] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[  500.100039][T30685] validate_nla: 4 callbacks suppressed
[  500.102464][T30685] netlink: 'syz.0.5047': attribute type 10 has an invalid length.
[  501.188752][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  501.292117][T30742] __nla_validate_parse: 13 callbacks suppressed
[  501.292136][T30742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5057'.
[  501.628517][T30767] netlink: 'syz.2.5062': attribute type 13 has an invalid length.
[  501.677114][T30780] netlink: 'syz.3.5064': attribute type 13 has an invalid length.
[  501.801222][T30791] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5067'.
[  501.902910][T30798] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  501.971397][T30800] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5069'.
[  502.028360][T30800] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  502.054468][ T5910] lo speed is unknown, defaulting to 1000
[  502.058463][ T5910] syz1: Port: 1 Link ACTIVE
[  502.121646][T30817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5071'.
[  502.168013][T30820] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5073'.
[  502.174042][T30820] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5073'.
[  502.748079][T30831] netlink: 'syz.3.5075': attribute type 10 has an invalid length.
[  502.797364][T30837] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5076'.
[  502.811506][T30838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5076'.
[  502.815146][T30837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5076'.
[  503.042134][T30850] netlink: 'syz.3.5077': attribute type 3 has an invalid length.
[  503.052315][T30850] netlink: 'syz.3.5077': attribute type 3 has an invalid length.
[  503.060735][T30860] netlink: 'syz.3.5077': attribute type 3 has an invalid length.
[  503.064039][T30860] netlink: 'syz.3.5077': attribute type 3 has an invalid length.
[  503.224843][T30882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5083'.
[  503.476503][T30904] netlink: 'syz.0.5085': attribute type 10 has an invalid length.
[  503.563975][T30914] netlink: 'syz.3.5087': attribute type 4 has an invalid length.
[  503.653909][T30920] "syz.0.5090" (30920) uses obsolete ecb(arc4) skcipher
[  503.669725][T30920] tipc: Resetting bearer <eth:gre0>
[  503.776374][ T6011] lo speed is unknown, defaulting to 1000
[  503.778731][ T6011] syz1: Port: 1 Link DOWN
[  504.330030][T30906] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  505.098970][T31001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  505.167728][T31012] "syz.3.5107" (31012) uses obsolete ecb(arc4) skcipher
[  505.205072][T31009] validate_nla: 3 callbacks suppressed
[  505.205086][T31009] netlink: 'syz.2.5109': attribute type 13 has an invalid length.
[  505.210276][T31009] netlink: 'syz.2.5109': attribute type 17 has an invalid length.
[  505.283734][T31009] 8021q: adding VLAN 0 to HW filter on device bond0
[  505.288700][T31025] netlink: 'syz.0.5112': attribute type 13 has an invalid length.
[  505.293663][T31009] 8021q: adding VLAN 0 to HW filter on device team0
[  505.298126][T31009] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  505.350393][T31032] netlink: 'syz.2.5114': attribute type 1 has an invalid length.
[  505.381651][T31033] bond11: (slave bridge13): making interface the new active one
[  505.384607][T31033] bond11: (slave bridge13): Enslaving as an active interface with an up link
[  505.462630][T31044] netlink: 'syz.2.5116': attribute type 6 has an invalid length.
[  505.469705][T31044] netlink: 'syz.2.5116': attribute type 5 has an invalid length.
[  505.472506][T31043] netlink: 'syz.2.5116': attribute type 6 has an invalid length.
[  505.477443][T31043] netlink: 'syz.2.5116': attribute type 5 has an invalid length.
[  505.480522][T31044] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  505.480589][T31046] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  505.588397][T31064] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] SMP KASAN PTI
[  505.592075][T31064] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037]
[  505.594733][T31064] CPU: 1 UID: 0 PID: 31064 Comm: syz.3.5117 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  505.599518][T31064] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  505.602637][T31064] RIP: 0010:rose_transmit_link+0x32/0x740
[  505.604419][T31064] Code: 56 41 55 41 54 53 48 83 ec 18 48 89 f5 49 89 fc 49 be 00 00 00 00 00 fc ff df e8 49 61 53 f7 4c 8d 7d 32 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 0f 85 6e 05 00 00 41 0f b6 1f 31 ff 89 de e8
[  505.610495][T31064] RSP: 0018:ffffc900216e7770 EFLAGS: 00010206
[  505.612453][T31064] RAX: 0000000000000006 RBX: 0000000000000000 RCX: ffff888108ac3980
[  505.614921][T31064] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810f387b00
[  505.617395][T31064] RBP: 0000000000000000 R08: ffff888108ac3980 R09: 0000000000000008
[  505.619900][T31064] R10: 000000000000000f R11: 0000000000000000 R12: ffff88810f387b00
[  505.622661][T31064] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000032
[  505.625127][T31064] FS:  00007fad8d7936c0(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  505.627866][T31064] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  505.629960][T31064] CR2: 00007f1e2a08d440 CR3: 000000010ef8e000 CR4: 00000000000006f0
[  505.632619][T31064] Call Trace:
[  505.632981][T31050] netlink: 'syz.0.5118': attribute type 10 has an invalid length.
[  505.633738][T31064]  <TASK>
[  505.633744][T31064]  ? skb_put+0x11b/0x210
[  505.639299][T31064]  rose_write_internal+0x11dc/0x1ac0
[  505.641076][T31064]  ? __pfx_rose_write_internal+0x10/0x10
[  505.642968][T31064]  ? __timer_delete+0x5d/0x390
[  505.644535][T31064]  rose_release+0x24e/0x520
[  505.646092][T31064]  sock_close+0xc3/0x240
[  505.647476][T31064]  ? __pfx_sock_close+0x10/0x10
[  505.649058][T31064]  __fput+0x44c/0xa70
[  505.650427][T31064]  task_work_run+0x1d4/0x260
[  505.652018][T31064]  ? __pfx_task_work_run+0x10/0x10
[  505.653691][T31064]  do_exit+0x6b5/0x2300
[  505.655077][T31064]  ? do_raw_spin_lock+0x121/0x290
[  505.656775][T31064]  ? __pfx_do_exit+0x10/0x10
[  505.658298][T31064]  do_group_exit+0x21c/0x2d0
[  505.659801][T31064]  ? lockdep_hardirqs_on+0x9c/0x150
[  505.661615][T31064]  get_signal+0x1286/0x1340
[  505.663098][T31064]  arch_do_signal_or_restart+0x9a/0x750
[  505.664968][T31064]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  505.666985][T31064]  ? ret_from_fork_asm+0x1a/0x30
[  505.668742][T31064]  ? exit_to_user_mode_loop+0x40/0x110
[  505.670952][T31064]  exit_to_user_mode_loop+0x75/0x110
[  505.673073][T31064]  do_syscall_64+0x2bd/0x3b0
[  505.674925][T31064]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  505.676878][T31064]  ? __switch_to_asm+0x39/0x70
[  505.678431][T31064]  ? __switch_to_asm+0x33/0x70
[  505.679963][T31064]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  505.682336][T31064] RIP: 0033:0x7fad8f58ebe9
[  505.683805][T31064] Code: Unable to access opcode bytes at 0x7fad8f58ebbf.
[  505.686075][T31064] RSP: 002b:00007fad8d7930e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  505.688753][T31064] RAX: fffffffffffffe00 RBX: 00007fad8f7b6278 RCX: 00007fad8f58ebe9
[  505.691357][T31064] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fad8f7b6278
[  505.694476][T31064] RBP: 00007fad8f7b6270 R08: 00007ffe3ab277a7 R09: 0000000000000000
[  505.697635][T31064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  505.700817][T31064] R13: 00007fad8f7b6308 R14: 00007ffe3ab276c0 R15: 00007ffe3ab277a8
[  505.703983][T31064]  </TASK>
[  505.705265][T31064] Modules linked in:
[  505.708143][T31064] ---[ end trace 0000000000000000 ]---
[  505.716719][T31064] RIP: 0010:rose_transmit_link+0x32/0x740
[  505.718690][T31064] Code: 56 41 55 41 54 53 48 83 ec 18 48 89 f5 49 89 fc 49 be 00 00 00 00 00 fc ff df e8 49 61 53 f7 4c 8d 7d 32 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 0f 85 6e 05 00 00 41 0f b6 1f 31 ff 89 de e8
[  505.731926][T31064] RSP: 0018:ffffc900216e7770 EFLAGS: 00010206
[  505.734395][T31064] RAX: 0000000000000006 RBX: 0000000000000000 RCX: ffff888108ac3980
[  505.738883][T31064] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810f387b00
[  505.742207][T31064] RBP: 0000000000000000 R08: ffff888108ac3980 R09: 0000000000000008
[  505.746364][T31064] R10: 000000000000000f R11: 0000000000000000 R12: ffff88810f387b00
[  505.749480][T31064] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000032
[  505.752689][T31064] FS:  00007fad8d7936c0(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  505.756302][T31064] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  505.758850][T31064] CR2: 00005555860e95c8 CR3: 0000000027d26000 CR4: 00000000000006f0
[  505.761915][T31064] Kernel panic - not syncing: Fatal exception
[  505.765039][T31064] Kernel Offset: disabled
[  505.766778][T31064] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:27:30  Registers:
info registers vcpu 0

CPU#0
RAX=ffff888135400000 RBX=0000000000000000 RCX=0000000000c16c80 RDX=00000000cc40a762
RSI=0000000000000001 RDI=000000002c649959 RBP=00000000c98c16c8 RSP=ffffc900001275e8
R8 =000000002d2557b3 R9 =000000005f6e182b R10=000000000000000b R11=ffffffff81ac3870
R12=ffff888136016c80 R13=0000000000000000 R14=ffffc90000127650 R15=ffff888119033f60
RIP=ffffffff84feaaf3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000000 CR3=0000000027d26000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007fad8f612e53
XMM06=0000000000000000 00007fad8f612e4d XMM07=0000000000000000 00007fad8f612e61
XMM08=0000000000000000 00007fad8f612ee7 XMM09=0000000000000000 00007fad8f612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000072 RBX=0000000000000072 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900216e6f10
R8 =ffff888107ae8237 R9 =1ffff11020f5d046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af9915 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fad8d7936c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1e2a08d440 CR3=000000010ef8e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f7672a12e53
XMM06=0000000000000000 00007f7672a12e4d XMM07=0000000000000000 00007f7672a12e61
XMM08=0000000000000000 00007f7672a12ee7 XMM09=0000000000000000 00007f7672a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
