last executing test programs:

2.042224755s ago: executing program 2 (id=2608):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x5452, &(0x7f0000000a00)={'geneve1\x00', @remote})
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0xfffffc56, 0x0}, 0x2)
close(r2)
getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000040)={@multicast1, @multicast1}, &(0x7f00000000c0)=0xc)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f0000004380)={0x34, r6, 0x20d, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x8, 0x4, [0xffff]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x34}}, 0x4000)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r9 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x84, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}}, 0xfffc, 0x86}, &(0x7f00000000c0)=0x90)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r8, 0x0, 0x0}, 0x20)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}}, 0x0)
r10 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r10, &(0x7f0000000480)={0x2, 0x0, @loopback}, 0x10)
sendmmsg$inet(r10, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x20000080)

1.897553595s ago: executing program 2 (id=2611):
mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6, 0x8010, 0xffffffffffffffff, 0x180000000)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'})
sendmmsg$inet(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="942dacf3a24707c9b96cee89b38185c2", 0x10}, {&(0x7f0000000700)}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c80)=[{0x0}, {0x0}, {0x0}], 0x3}}], 0x2, 0xc08c0)

1.441713473s ago: executing program 1 (id=2619):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000a80)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x78, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x578}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x48025}, 0x8050)
setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f00000000c0)=0x3a7b, 0x4)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100005800a"], 0x84}}, 0x20008040)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f00000000c0), 0x10)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r7], 0x448}}, 0x0)
r8 = syz_genetlink_get_family_id$fou(&(0x7f00000005c0), r3)
sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x404000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r8, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4088005}, 0x800)
sendmmsg$inet(r7, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086", 0x2b}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x0)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x2d, 0x20040040)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbec, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
ppoll(&(0x7f00000000c0)=[{r6, 0x100a}, {r6, 0x212bdb8c3662ab0c}], 0x2, 0x0, 0x0, 0x0)
r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00')
ioctl$NS_GET_PARENT(r10, 0x8004b707, 0x0)
connect$unix(r6, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000180)={0x20000010})

1.302417348s ago: executing program 1 (id=2620):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x98}, 0x1c)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c)
listen(r1, 0x200204)
r2 = socket$netlink(0x10, 0x3, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)

1.301159455s ago: executing program 1 (id=2621):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='dctcp', 0x5)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
unshare(0x6a040000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0xfffffffffffffeca)
r4 = accept(r2, 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x0, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}}, 0x0)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)

1.02214974s ago: executing program 2 (id=2622):
r0 = socket(0x2c, 0x3, 0x6)
sendmsg$nl_generic(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1ec, 0x21, 0x800, 0x70bd2a, 0x25dfdbfb, {0x11}, [@nested={0x1cb, 0x9d, 0x0, 0x1, [@typed={0x8, 0x3a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x43}}, @typed={0xc, 0xa2, 0x0, 0x0, @u64=0xc}, @generic="48b4cdcfad04549a093b05f42f34943924febd104f8d5fa2058deee10d2ac1cab7005e4b4fd24a674fc5ed2b4d5517fb09c295ab753bd624ed3c745797ab77eee282711bc560501e6035ab67374b674ad4a368e64247b0aec241d4c3625d09c2bd04bc1ebb97c0ce2b1ec849fa27c8fef1b17fdab2299fd6db7198cf606b164c32cf96dee9e4646be55be9ee4f8617f68f02d023a82d4f7e2ec4b8544fee27748e3a66dbcebea06d1d488d0a29dba7f0d4309e2ed0fbc702300cc19389ca73bef7612a04a2f56c6d52", @nested={0x4, 0x1e}, @generic="e2f9451b6d0b2546d0ad56a00f4fb3ac9cdcc8d19fc1385a1322faf575e6a7f02036dee6a929b4d48ed79cca385f7cdac3aab04a79e1e8b90ecb34e68eb5181804e0a7ac6d6e38f5466f525a6f557ebc7c111c6b3d4bc28aa3c819a93ce6a733640dabc3191b4405d81ac69a3b3e1f051c7d94698822044922b7f85923ee889c95aa64b60421695f9fde7568422ade44c54eae00840f247d97f1fc241fb8e6eb309a548073e2d1f5a7ec0f96bfd468d667d355688629c00f71275054c5bde095922de983e2f3c7918f339f8dc6c997ba46be27d8dc6af2a35644a746f86ab089d9b3", @nested={0x4, 0xeb}]}, @typed={0x5, 0x124, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x50}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x2000005}, 0xac7f2cc1c345f56d) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', <r2=>0x0}) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000012c0), r3)
sendmsg$IEEE802154_LIST_PHY(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001300)={0x14, r4, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc1}, 0x100) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x11, 0x10, 0xbb2f, 0x7}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x84}}, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000000)={0x4, [0x1, 0x7fd], 0x88}, 0x10) (async)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00'/13, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e00140002800800010010000000080003000100000008000500", @ANYRES32=r9, @ANYBLOB], 0x4c}}, 0x0) (async)
bind$l2tp6(r6, &(0x7f0000000640)={0xa, 0x0, 0x1, @local, 0x9}, 0x20)

1.019958092s ago: executing program 2 (id=2623):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async)
unshare(0x36050f00)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) (async)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r4 = accept(r2, 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x24, 0x0, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22eb}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xa5ce9cd6a1836a59}]}, 0x24}}, 0x0) (async, rerun: 32)
sendmsg$NFT_BATCH(r3, 0x0, 0x0) (rerun: 32)

752.149224ms ago: executing program 0 (id=2624):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r0, &(0x7f0000000140)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x14)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
syz_emit_ethernet(0x52, &(0x7f0000000180)=ANY=[], 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$unix(r1, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
setsockopt(r1, 0x1, 0xe, &(0x7f00000008c0)="591e8901e76b9a4f0cccd539c2cbb9b99fc9ba93e187e1eeac820242e910911a2c2d52acee58220a443745e80fe23b043625fa3eb5e5a4ca935778767585731cc6f4c37db9ab74a6ae726323a429e29ea5dd52aa99cd90f42f0498f03a819eaedb30a8f899a89c4ef1bb279d2fa6dbdedfb2f1ee2a59a1500fda5c76d2b7bdbdf969c03e26f6f8cfb8343fbc9c8263aef85436bc1db5c7145d61ef60432f2b101e1da36a7a8b299867730800000000000000184b8137c00976e38ff6f0657d3c64bfa8bc0ec4b40efe9cbe2a3fcabb00ec250607c43397ee", 0xd8)
r2 = socket(0x15, 0x80005, 0x0)
getsockopt(r2, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x24, &(0x7f0000000300)=0x100000001, 0x4)
recvfrom$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x88885}, 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10)
sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f1"], &(0x7f0000000140)='GPL\x00'}, 0x94)
r8 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r7}, 0x8)
close(r8)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xc, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0, @ANYRESDEC, @ANYRES32=r2, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94)
r10 = socket$tipc(0x1e, 0x4, 0x0)
bind$tipc(r10, 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x4000)
close(0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

750.017377ms ago: executing program 0 (id=2625):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="210000000000000007000000000000000000000057c1d0e3a34594931ca516cb6f79c04fd6bcca87f1dd4e647a1d1080455e9e884d6adf4e0cd95cdcccfc571a01af94cede8b8ae155247acb8ec6fff91c"], 0xa6) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r2, 0x0) (async)
mmap(&(0x7f0000c61000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r4, 0x0) (async)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="98fad5709c567926", 0x8}], 0x1}}], 0x1, 0x5) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0xd1383000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r5, 0x0) (async)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x1000) (async)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0xfffff000) (async)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x6c, 0x24, 0xd0f, 0x80000000, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}, {0xb, 0xc}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "0000000000000000000500"}}}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1, 0x7, 0x1}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x66b8}]}, 0x6c}}, 0x0) (async)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000240)={r0, r0, 0x36, 0xae, &(0x7f0000000180)="2bf0f187497c4a935150bc0c06779e9f106b1f49a0bf4e392b9b2a9fa38842fe29118d445bcc0c06d4dec8d35eb28fef31cde7d9e1c7ce41efb9c2e137ff9208da1d4a4f3f9cf9358951eeb3870d83754422a8e8e8554ccbcddd66d0f4ddb5e542602540fc83acccb20105d0668d4faa72dc65ed2d47b9a0a51bfe2f14428ea672347bf9c15974c336314b4c22b6fc630d91f70b3945581f4a9685c82255c8586be7d9755997686113c83d35c317", 0x6, 0x2, 0xa, 0x4, 0x7f, 0x0, 0x40, 'syz0\x00'}) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) (async)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001080)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10)
setsockopt$sock_int(r3, 0x1, 0x1e, &(0x7f0000000100)=0x401, 0x4) (async)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, &(0x7f00000000c0)={0x0, 0x82e4, 0x2})
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) (async)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010014000000000000000200e70308000300", @ANYRES32, @ANYBLOB="0c00990000000000000000000800a0002616000008009f0005000000080026000816"], 0x40}}, 0x0)
sendmsg$NL80211_CMD_SET_WDS_PEER(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffff4, 0x1b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="99606c576d41"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x4000)

660.905361ms ago: executing program 0 (id=2626):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe579ba3fddbe9c36}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0x18, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "37eb9dd0c889d80217ea0e80a024191c"}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048054}, 0x8000)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r3, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
shutdown(r5, 0x1)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000079ffff4b6a7e3600000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018910000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8)
sendto$inet6(r5, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c)
listen(r4, 0x39e)
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x9)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000100081ae08060cdc030000007f03e3e70000004f6ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00121000a6400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

562.218038ms ago: executing program 0 (id=2627):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0xa, 0x7, 0x5, 0xf, 0x81, 0x9, 0x0, 0x98, 0x4, 0xf, 0x2, 0xf42, 0x8, 0x7, 0x0, 0xfffffffc, [0x8002, 0xffff]}})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000040)=0x1000000, &(0x7f0000000100)}, 0x20)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, 0x1b9, 0x3}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5, 0x9, 0x1}, @IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000091}, 0x4000000)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000400)='illinois', 0x8)
getsockopt$inet_tcp_buf(r6, 0x6, 0x1a, 0x0, &(0x7f00000000c0))

438.478321ms ago: executing program 0 (id=2628):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) (async)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f00000000c0)=[{0x6, 0x81, 0xca}]}, 0x10) (async)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0xfffffffc}, 0x1c) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x30}}, 0x0)
listen(r0, 0xb) (async)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r3, 0x0) (async)
r4 = accept(r3, 0x0, 0x0) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x5}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r4}, 0x47) (async)
shutdown(r4, 0x0) (async)
recvfrom$unix(r4, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xf0, r6, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x200}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6000}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x600}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x22c8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xe7}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6f}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x49}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x48092}, 0x40001) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async)
r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_stats={0x48}}) (async)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_int(r9, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0)
socket(0x1d, 0x2, 0x1000)
write$cgroup_subtree(r10, &(0x7f00000005c0)=ANY=[], 0x8) (async)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r11 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})

436.928872ms ago: executing program 0 (id=2629):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) (async)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) (async)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) (async)
r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4)
ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f00000000c0)={0x1, 0x5d, "37ff9281b361e7f24ff7cc846c9a67e77c2dd81e45c6c206d3c8d351143e01393fc808a9fa16435235281f3f24f3edbf31ff0fb46521eec4af71583ac8d707675dfa0c48aa88ceed26f861afaba0843695d0853893ee3e06f1b5ace3d3"})
socketpair(0x23, 0x1, 0x6062, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280)={<r3=>0x0, 0x5}, &(0x7f00000002c0)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000300)={r3, 0xf1}, 0x8) (async)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000040)="43ffffac3dd6cc74c2ef7544b72e067c", 0x10)

433.191556ms ago: executing program 1 (id=2630):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x32, 0xffffffffffffffff, 0x2000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r2, 0x917, 0x1000}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000680)=0xfffffff9, 0x4)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a0800064000000025090001"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r5, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x84, 0x30, 0x51b, 0x0, 0x0, {}, [{0x70, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5a}}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, @TCA_SKBMOD_DMAC={0xa}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x84}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000008000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000200"/28], 0x50)
r6 = socket$key(0xf, 0x3, 0x2)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/454], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd74}, 0x48)
sendmsg$key(r6, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)={0x2, 0x3, 0x0, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_x_filter={0x5, 0x1a, @in=@remote, @in=@remote, 0x2b, 0x10, 0x4}, @sadb_sa={0x2, 0x1, 0x0, 0xfd, 0x1, 0x0, 0x8, 0x20000000}, @sadb_x_sa2={0x2, 0x13, 0x81, 0x0, 0x0, 0x70bd2b, 0x3506}]}, 0x68}, 0x1, 0x7}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000005480)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r8], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r9, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000800)='cubic', 0x4)
bind$inet(r9, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r9, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x80040000}}], 0x1, 0x24000800)
setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000017c0)=@gcm_256={{}, "2710812d8c227eab", "2aade1aa965e611899c2a40889d4b110389398808b9d31cae1bc954b53e429e5", "33f3df93", "7e68d31c6375e358"}, 0x38)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c0000001000f50700"/20, @ANYRES32=r0, @ANYBLOB="11a000000000000034002b8008000100", @ANYRESDEC=r5, @ANYBLOB="08000300030005000000000000000000080003000300000008000100", @ANYRES32=r7, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB="08001b0000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x200480d4}, 0x80)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040), 0x4)

151.643646ms ago: executing program 1 (id=2631):
r0 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r1=>0x0})
recvmsg(r0, &(0x7f0000001380)={&(0x7f0000000180)=@nfc, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/136, 0x88}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x2, &(0x7f0000001300)=""/112, 0x70}, 0x10020)
r2 = socket(0x200000000000011, 0x2, 0xd)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000540)={@private2, 0x6, 0x1, 0xff, 0x9, 0x8, 0x790}, 0x20)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r4, 0x28, 0x8, &(0x7f0000000080)=""/54, &(0x7f0000000000)=0x36)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001540), r2)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x60, r5, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x201}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x379}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x9}, @ETHTOOL_A_COALESCE_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x2}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x0, 0x18, 0x1}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x8000}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x40}]}, 0x60}, 0x1, 0x0, 0x0, 0x41}, 0x4000010)
bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
getsockopt(r8, 0x111, 0x1, 0x0, &(0x7f0000000080))
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt(r2, 0x401, 0x10, &(0x7f0000001a40), 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r9, 0x6, 0x3, &(0x7f0000000140)=0x5, 0x4)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000016c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000019c0)={r11, 0x0, 0x47, 0xf2, &(0x7f0000001700)="528377ab05daeccbf86313ddf0a39f9971ff275190a94ccd4f1d7467ed98c2fcf269881dd75879a95cf6fda57b7608230a177dfad57b2d303bba9ec060d9aa79be1d504d3f8cc0", &(0x7f0000001780)=""/242, 0x400, 0x0, 0x2, 0xfb, &(0x7f0000001880)="8a74", &(0x7f00000018c0)="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", 0x0, 0x0, 0x5}, 0x50)
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000001b00))
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000001680)={r1, @loopback, @rand_addr=0x64010102}, 0xc)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000013c0)=""/197, &(0x7f00000014c0)=0xc5)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @random="e5db029ea53c"})
write$cgroup_devices(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd)

151.213603ms ago: executing program 2 (id=2632):
r0 = socket(0x200000000000011, 0x2, 0xd)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc3842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, 0x0, 0x108)
socketpair(0x18, 0x3, 0x5, &(0x7f00000000c0))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='pids.events\x00', 0x275a, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r4}, 0x10)
write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r3, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={0x0, 0x0, 0x4}, 0x18)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r5)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @random="e5db029ea53c"})
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r7=>0x0}, &(0x7f0000000080)=0x8)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r8, 0x84, 0x7d, &(0x7f0000000040)={r7}, 0x8)
write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd)

2.170111ms ago: executing program 2 (id=2633):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000a80)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100005800a"], 0x84}}, 0x20008040)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480))
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

0s ago: executing program 1 (id=2634):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec80000ec00120c00014006040400090404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, 0x5, 0x7, 0x9})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYRES8=r1], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xffffffff}, 0x8, 0x10, &(0x7f0000000040)={0x1}, 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="ffc4438e5c3081d0e133e812196ec0ed923733aa8b5aba32c8650e7a66d6136853773dfbc6226be13039e230d511f1ac50cc7811aac0400e4c833fedf842ae2918e6fddb550729246fcf4c0a01bc64989ea3985fb362751a83991bd56e761379caa64f6148893ff25f38d5cd6dd695bbf9ca709a9960e0e6b054d5e2239bcb7c0fb2ac66dc4c8f534e439ff20ccaf0d48a98c19c92a3b437a699350f49606d21a403f8c112c46fea5486bf367a854b0f6c1e563b656e4794f6793a08bb3656c391643f6df71d0255054368a938d38503d064da82d5dbf395ad47ed3932669168d324ed0f6de8360d499042ddc7d02b6c0772128257702bfe6d0971f00fea85da062cdc", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x2f)
connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@gettaction={0x90, 0x32, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}]}, @action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000021}, 0x4044080)
bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r4, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x20003, 0xfffffffd}, 0x8)
close(r3)

kernel console output (not intermixed with test programs):

[ T5876] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   85.942046][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.177'.
[   86.193769][ T6596] netlink: 'syz.0.178': attribute type 1 has an invalid length.
[   86.197598][ T6596] nbd: error processing sock list
[   86.206351][ T6596] block nbd0: shutting down sockets
[   86.464174][ T6610] netlink: 'syz.2.181': attribute type 10 has an invalid length.
[   87.350266][ T6631] netlink: 'syz.2.189': attribute type 5 has an invalid length.
[   87.353977][ T6632] netlink: 'syz.2.189': attribute type 5 has an invalid length.
[   87.492319][ T6639] __nla_validate_parse: 8 callbacks suppressed
[   87.492332][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.192'.
[   87.547473][ T6655] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[   87.738425][ T6652] netlink: 'syz.0.193': attribute type 10 has an invalid length.
[   87.741631][ T6652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.193'.
[   87.746040][ T6652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.193'.
[   87.822211][ T6664] netlink: 'syz.0.196': attribute type 3 has an invalid length.
[   87.864602][ T6666] netlink: 32 bytes leftover after parsing attributes in process `syz.0.197'.
[   87.978951][ T6668] netlink: 830 bytes leftover after parsing attributes in process `syz.0.197'.
[   88.366439][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.370135][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.589050][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.203'.
[   88.592228][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.203'.
[   88.598565][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.203'.
[   88.601951][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.203'.
[   88.637725][ T6694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.204'.
[   88.866195][ T6707] netlink: 'syz.2.207': attribute type 1 has an invalid length.
[   88.870949][ T6707] netlink: 'syz.2.207': attribute type 2 has an invalid length.
[   89.702899][ T6732] netlink: 'syz.2.214': attribute type 6 has an invalid length.
[   89.737332][ T6732] netlink: 'syz.2.214': attribute type 12 has an invalid length.
[   89.825215][ T6745] ieee802154 phy0 wpan0: encryption failed: -22
[   90.009181][ T6749] netlink: 'syz.0.216': attribute type 16 has an invalid length.
[   90.012596][ T6749] netlink: 'syz.0.216': attribute type 17 has an invalid length.
[   91.127237][ T6783] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.131217][ T6783] 8021q: adding VLAN 0 to HW filter on device team0
[   91.149445][ T6783] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   91.175873][ T6789] netlink: 'syz.0.229': attribute type 12 has an invalid length.
[   92.468802][ T6830] netlink: 'syz.1.240': attribute type 1 has an invalid length.
[   92.521297][ T6826] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   92.526672][ T5717] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   92.526928][ T6826] 8021q: adding VLAN 0 to HW filter on device bond1
[   92.591550][ T6826] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator
[   92.595273][ T6826] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface
[   92.601063][ T6826] bond1 (unregistering): Released all slaves
[   92.963675][ T6868] __nla_validate_parse: 18 callbacks suppressed
[   92.963689][ T6868] netlink: 52 bytes leftover after parsing attributes in process `syz.1.247'.
[   92.971854][ T6868] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   93.541527][ T6909] netlink: 'syz.1.256': attribute type 1 has an invalid length.
[   93.565452][ T6909] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   93.570135][ T6909] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   93.620752][ T6911] macvlan2: entered promiscuous mode
[   93.623077][ T6911] macvlan2: entered allmulticast mode
[   93.625924][ T6911] bond1: entered promiscuous mode
[   93.628807][ T6911] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   93.633103][ T6911] bond1: left promiscuous mode
[   93.666900][ T6909] netlink: 20 bytes leftover after parsing attributes in process `syz.1.256'.
[   93.764681][ T6916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.258'.
[   93.773525][ T6916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.258'.
[   93.779838][ T6916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.258'.
[   93.809833][ T6916] netlink: 45 bytes leftover after parsing attributes in process `syz.2.258'.
[   93.864590][ T6922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.259'.
[   93.864782][ T6921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.259'.
[   94.088334][ T6936] netlink: 'syz.2.263': attribute type 10 has an invalid length.
[   94.091717][ T6936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.263'.
[   94.104614][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'.
[   94.250765][ T6947] netlink: 'syz.2.266': attribute type 1 has an invalid length.
[   94.273832][ T6947] 8021q: adding VLAN 0 to HW filter on device bond1
[   94.300222][ T6947] bond1: (slave veth3): Enslaving as an active interface with a down link
[   94.325279][ T6947] 8021q: adding VLAN 0 to HW filter on device batadv1
[   94.328814][ T6947] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[   94.847128][ T6970] 8021q: VLANs not supported on lo
[   95.439851][ T6995] netlink: 'syz.2.282': attribute type 2 has an invalid length.
[   95.442701][ T6995] netlink: 'syz.2.282': attribute type 2 has an invalid length.
[   95.481260][ T6995] tc_dump_action: action bad kind
[   95.590605][ T7003] netlink: 'syz.1.284': attribute type 10 has an invalid length.
[   96.041497][ T7036] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.044547][ T7036] 8021q: adding VLAN 0 to HW filter on device team0
[   96.051439][ T7036] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   96.511883][ T7056] xt_HMARK: spi-set and port-set can't be combined
[   96.802140][ T7067] netlink: 'syz.2.302': attribute type 11 has an invalid length.
[   96.852262][ T7067] netlink: 'syz.2.302': attribute type 3 has an invalid length.
[   96.944200][ T7079] pim6reg: entered allmulticast mode
[   96.947520][ T7079] pim6reg: left allmulticast mode
[   97.171479][ T7100] vlan0: left promiscuous mode
[   97.492133][ T7115] tipc: Started in network mode
[   97.494210][ T7115] tipc: Node identity , cluster identity 4711
[   97.496569][ T7115] tipc: Failed to obtain node identity
[   97.499251][ T7115] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   97.503319][ T7115] syzkaller0: entered promiscuous mode
[   97.505544][ T7115] syzkaller0: entered allmulticast mode
[   97.688717][ T7124] syzkaller1: entered promiscuous mode
[   97.692621][ T7124] syzkaller1: entered allmulticast mode
[   98.019342][ T7145] tipc: Started in network mode
[   98.021336][ T7145] tipc: Node identity ee9ff348909d, cluster identity 4711
[   98.024409][ T7145] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.026886][ T7146] syzkaller0: entered promiscuous mode
[   98.029206][ T7146] syzkaller0: entered allmulticast mode
[   98.041170][ T7147] tipc: Resetting bearer <eth:syzkaller0>
[   98.051690][ T7147] tipc: Disabling bearer <eth:syzkaller0>
[   98.233175][ T7158] atomic_op ffff8880269df998 conn xmit_atomic 0000000000000000
[   98.311595][ T7165] __nla_validate_parse: 18 callbacks suppressed
[   98.311606][ T7165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.328'.
[   98.355283][ T7167] bridge0: the hash_elasticity option has been deprecated and is always 16
[   98.498683][ T7178] netlink: 'syz.2.333': attribute type 1 has an invalid length.
[   98.503017][ T7178] netlink: 'syz.2.333': attribute type 2 has an invalid length.
[   98.534775][ T7183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.334'.
[   98.709993][ T7191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.336'.
[   99.088968][ T7199] netlink: 36 bytes leftover after parsing attributes in process `syz.2.339'.
[   99.091941][ T7199] netlink: 40 bytes leftover after parsing attributes in process `syz.2.339'.
[   99.094729][ T7199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.339'.
[   99.127366][ T7214] netlink: 28 bytes leftover after parsing attributes in process `syz.0.342'.
[   99.258432][ T7221] netlink: 36 bytes leftover after parsing attributes in process `syz.0.344'.
[   99.261543][ T7221] netlink: 16 bytes leftover after parsing attributes in process `syz.0.344'.
[   99.264442][ T7221] netlink: 36 bytes leftover after parsing attributes in process `syz.0.344'.
[  100.086360][ T7248] validate_nla: 1 callbacks suppressed
[  100.086392][ T7248] netlink: 'syz.0.352': attribute type 10 has an invalid length.
[  100.103928][ T7248] team0: Port device dummy0 added
[  100.110499][ T7248] syz.0.352 (7248) used greatest stack depth: 19944 bytes left
[  101.410962][ T7296] netlink: 'syz.0.364': attribute type 4 has an invalid length.
[  102.006556][ T7306] syzkaller0: entered promiscuous mode
[  102.008483][ T7306] syzkaller0: entered allmulticast mode
[  102.180748][ T7310] netlink: 'syz.0.368': attribute type 1 has an invalid length.
[  102.209334][ T7310] bond1: (slave gretap1): making interface the new active one
[  102.212566][ T7310] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  102.568227][ T7331] sctp: [Deprecated]: syz.0.372 (pid 7331) Use of int in maxseg socket option.
[  102.568227][ T7331] Use struct sctp_assoc_value instead
[  104.032750][ T7364] __nla_validate_parse: 22 callbacks suppressed
[  104.032817][ T7364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.381'.
[  104.133497][ T7369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.382'.
[  104.311872][ T7379] netlink: 20 bytes leftover after parsing attributes in process `syz.0.385'.
[  104.448578][ T7386] syzkaller0: entered promiscuous mode
[  104.450959][ T7386] syzkaller0: entered allmulticast mode
[  105.142172][ T7392] netlink: 'syz.1.389': attribute type 10 has an invalid length.
[  105.145773][ T7392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.389'.
[  105.257219][ T7397] netlink: 24 bytes leftover after parsing attributes in process `syz.1.390'.
[  105.326102][ T7398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.390'.
[  105.329309][ T7398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.390'.
[  105.558492][ T7407] netlink: 24 bytes leftover after parsing attributes in process `syz.0.393'.
[  105.722333][ T7414] netlink: 12 bytes leftover after parsing attributes in process `syz.0.396'.
[  105.779325][ T7417] netlink: 'syz.0.397': attribute type 29 has an invalid length.
[  105.783074][ T7417] netlink: 'syz.0.397': attribute type 29 has an invalid length.
[  105.790573][ T7417] netlink: 500 bytes leftover after parsing attributes in process `syz.0.397'.
[  105.794350][ T7417] unsupported nla_type 58
[  107.659326][ T7529] netlink: 'syz.0.427': attribute type 1 has an invalid length.
[  107.689160][ T7533] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  107.789336][ T7537] mac80211_hwsim hwsim3 ;: renamed from wlan0
[  107.986397][ T7549] netlink: 'syz.0.432': attribute type 5 has an invalid length.
[  108.420767][ T7567] netlink: 'syz.2.437': attribute type 10 has an invalid length.
[  108.868059][ T7591] tipc: Started in network mode
[  108.870630][ T7591] tipc: Node identity 8eda9adc9ea6, cluster identity 4711
[  108.873267][ T7591] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.876938][ T7591] syzkaller0: entered promiscuous mode
[  108.879591][ T7591] syzkaller0: entered allmulticast mode
[  108.894812][ T7591] tipc: Resetting bearer <eth:syzkaller0>
[  108.902296][ T7590] tipc: Resetting bearer <eth:syzkaller0>
[  108.912918][ T7590] tipc: Disabling bearer <eth:syzkaller0>
[  109.091586][ T7597] __nla_validate_parse: 17 callbacks suppressed
[  109.091601][ T7597] netlink: 32 bytes leftover after parsing attributes in process `syz.0.445'.
[  109.257813][ T7607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.446'.
[  109.318257][ T7609] Bluetooth: MGMT ver 1.23
[  109.322311][ T7609] netlink: 'syz.2.448': attribute type 1 has an invalid length.
[  109.343010][ T7609] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  109.348512][ T7609] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  109.411296][ T7609] gretap1: entered promiscuous mode
[  109.416296][ T7609] bond2: (slave gretap1): making interface the new active one
[  109.426587][ T7609] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  109.469941][ T7617] netlink: 56 bytes leftover after parsing attributes in process `syz.1.449'.
[  109.473286][ T7617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.449'.
[  109.524224][ T7627] syzkaller1: entered promiscuous mode
[  109.525980][ T7627] syzkaller1: entered allmulticast mode
[  109.784208][ T7631] netlink: 36 bytes leftover after parsing attributes in process `syz.1.454'.
[  109.792550][ T7640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.456'.
[  109.795507][ T7631] netlink: 16 bytes leftover after parsing attributes in process `syz.1.454'.
[  109.804271][ T7631] netlink: 36 bytes leftover after parsing attributes in process `syz.1.454'.
[  109.807714][ T7631] netlink: 36 bytes leftover after parsing attributes in process `syz.1.454'.
[  111.383791][ T7689] pim6reg1: entered promiscuous mode
[  111.385740][ T7689] pim6reg1: entered allmulticast mode
[  111.618394][ T7693] netlink: 36 bytes leftover after parsing attributes in process `syz.1.470'.
[  111.879317][ T7708] 0X: renamed from caif0
[  111.884777][ T7708] 0X: entered allmulticast mode
[  111.886917][ T7708] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  111.944236][ T7706] delete_channel: no stack
[  111.947439][ T7706] delete_channel: no stack
[  112.166491][ T7726] netlink: 'syz.1.479': attribute type 10 has an invalid length.
[  112.304737][ T7731] netlink: 'syz.0.480': attribute type 1 has an invalid length.
[  113.437298][ T7760] netlink: 'syz.0.488': attribute type 1 has an invalid length.
[  113.439986][ T7760] nbd: error processing sock list
[  113.441828][ T7760] block nbd0: shutting down sockets
[  113.824774][ T7770] netlink: 'syz.2.490': attribute type 10 has an invalid length.
[  114.213404][ T7788] __nla_validate_parse: 5 callbacks suppressed
[  114.213423][ T7788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.495'.
[  114.363854][ T7803] netlink: 'syz.2.500': attribute type 15 has an invalid length.
[  114.749103][ T7819] geneve0: entered promiscuous mode
[  114.750990][ T7819] geneve0: entered allmulticast mode
[  115.027400][ T7847] syzkaller1: entered promiscuous mode
[  115.029572][ T7847] syzkaller1: entered allmulticast mode
[  115.774440][ T7877] netlink: 24 bytes leftover after parsing attributes in process `syz.1.513'.
[  116.641791][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.520'.
[  116.775520][ T7906] netlink: 'syz.0.522': attribute type 10 has an invalid length.
[  116.783498][ T7906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.522'.
[  116.795525][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.522'.
[  116.964410][ T7920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.525'.
[  117.093373][ T7931] netlink: 'syz.1.528': attribute type 1 has an invalid length.
[  117.161602][ T7931] 8021q: adding VLAN 0 to HW filter on device bond2
[  117.554164][ T7963] netlink: 'syz.1.535': attribute type 1 has an invalid length.
[  117.557737][ T7963] netlink: 224 bytes leftover after parsing attributes in process `syz.1.535'.
[  117.576505][ T7963] netlink: 48 bytes leftover after parsing attributes in process `syz.1.535'.
[  117.764742][ T7981] netlink: 27 bytes leftover after parsing attributes in process `syz.0.539'.
[  117.842405][ T7992] netlink: 36 bytes leftover after parsing attributes in process `syz.0.542'.
[  117.903323][ T7999] netlink: 'syz.2.544': attribute type 10 has an invalid length.
[  118.039952][ T8011] IPVS: Error joining to the multicast group
[  118.932828][ T8037] syzkaller0: entered promiscuous mode
[  118.934864][ T8037] syzkaller0: entered allmulticast mode
[  118.960719][ T8040] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  118.963428][ T8040] IPv6: NLM_F_CREATE should be set when creating new route
[  118.966654][ T8041] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  119.968982][ T8052] netlink: 'syz.1.557': attribute type 10 has an invalid length.
[  119.972321][ T8052] __nla_validate_parse: 8 callbacks suppressed
[  119.972329][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.557'.
[  120.046326][ T8067] netlink: 'syz.1.557': attribute type 27 has an invalid length.
[  120.078060][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.559'.
[  120.080887][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.559'.
[  120.299126][ T8091] netlink: 16 bytes leftover after parsing attributes in process `syz.0.564'.
[  120.302871][ T8091] netlink: 16 bytes leftover after parsing attributes in process `syz.0.564'.
[  120.321470][ T8092] dvmrp8: entered allmulticast mode
[  120.925536][ T8100] netlink: 'syz.1.567': attribute type 16 has an invalid length.
[  120.928120][ T8100] netlink: 'syz.1.567': attribute type 17 has an invalid length.
[  120.936242][ T8100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.567'.
[  120.992689][ T8101] IPv6: NLM_F_REPLACE set, but no existing node found!
[  121.208656][ T8103] netlink: 'syz.0.568': attribute type 1 has an invalid length.
[  121.212510][ T8103] nbd: error processing sock list
[  121.214908][ T8103] block nbd0: shutting down sockets
[  121.832847][ T8127] netlink: 36 bytes leftover after parsing attributes in process `syz.1.573'.
[  121.835847][ T8127] netlink: 40 bytes leftover after parsing attributes in process `syz.1.573'.
[  121.839924][ T8127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.573'.
[  121.983168][ T8133] syzkaller0: entered promiscuous mode
[  121.985433][ T8133] syzkaller0: entered allmulticast mode
[  123.259493][ T8170] netlink: 232 bytes leftover after parsing attributes in process `syz.1.582'.
[  123.272286][ T8156] Unsupported ieee802154 address type: 0
[  124.113275][ T8207] xt_l2tp: missing protocol rule (udp|l2tpip)
[  124.149237][ T8209] netlink: 'syz.1.593': attribute type 10 has an invalid length.
[  124.385574][ T8217] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  124.388521][ T8217] netdevsim netdevsim1 netdevsim0: refused to change device tx_queue_len
[  125.274571][ T8248] __nla_validate_parse: 3 callbacks suppressed
[  125.274586][ T8248] netlink: 52 bytes leftover after parsing attributes in process `syz.2.601'.
[  125.283422][ T8248] netlink: 'syz.2.601': attribute type 1 has an invalid length.
[  125.366688][ T8250] xt_l2tp: v2 sid > 0xffff: 1114112
[  126.074468][ T8257] netlink: 'syz.1.603': attribute type 10 has an invalid length.
[  126.077550][ T8257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.603'.
[  126.244142][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.606'.
[  126.255022][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.606'.
[  126.267952][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.606'.
[  126.273964][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.606'.
[  126.279714][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.606'.
[  126.284804][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.606'.
[  126.290739][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.606'.
[  126.296621][ T8278] netlink: 36 bytes leftover after parsing attributes in process `syz.0.609'.
[  126.318296][ T8275] 8021q: adding VLAN 0 to HW filter on device bond0
[  126.328903][ T8275] 8021q: adding VLAN 0 to HW filter on device team0
[  126.349199][ T8275] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  127.332583][ T8313] netlink: 'syz.0.617': attribute type 16 has an invalid length.
[  127.335745][ T8313] netlink: 'syz.0.617': attribute type 17 has an invalid length.
[  127.581220][ T8325] ipvlan0: mtu less than device minimum
[  127.760476][ T8334] !: renamed from dummy0
[  127.997921][ T8349] netlink: 'syz.1.629': attribute type 10 has an invalid length.
[  128.120619][ T8354] ieee802154 phy0 wpan0: encryption failed: -22
[  128.228978][ T8359] syzkaller0: entered promiscuous mode
[  128.231108][ T8359] syzkaller0: entered allmulticast mode
[  129.312891][ T8383] netlink: 'syz.0.637': attribute type 16 has an invalid length.
[  129.317111][ T8383] netlink: 'syz.0.637': attribute type 17 has an invalid length.
[  129.381211][ T8390] netlink: 'syz.0.639': attribute type 1 has an invalid length.
[  129.466725][ T8392] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  130.269031][ T8462] unsupported nlmsg_type 40
[  130.323083][ T8470] __nla_validate_parse: 37 callbacks suppressed
[  130.323093][ T8470] netlink: 16 bytes leftover after parsing attributes in process `syz.0.659'.
[  131.424934][ T8501] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  131.463051][ T8499] netlink: 20 bytes leftover after parsing attributes in process `syz.1.668'.
[  131.503802][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.669'.
[  131.725170][ T8510] netlink: 28 bytes leftover after parsing attributes in process `syz.2.671'.
[  131.729110][ T8510] netlink: 28 bytes leftover after parsing attributes in process `syz.2.671'.
[  131.793492][ T8511] netlink: 36 bytes leftover after parsing attributes in process `syz.2.671'.
[  131.796435][ T8511] netlink: 16 bytes leftover after parsing attributes in process `syz.2.671'.
[  131.800216][ T8511] netlink: 36 bytes leftover after parsing attributes in process `syz.2.671'.
[  131.803280][ T8511] netlink: 36 bytes leftover after parsing attributes in process `syz.2.671'.
[  132.340402][ T8518] netlink: 36 bytes leftover after parsing attributes in process `syz.0.673'.
[  132.461428][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.465284][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.850980][ T8555] netlink: 'syz.2.685': attribute type 1 has an invalid length.
[  132.858323][ T8555] netlink: 'syz.2.685': attribute type 11 has an invalid length.
[  132.873057][ T8557] syzkaller1: entered promiscuous mode
[  132.876940][ T8557] syzkaller1: entered allmulticast mode
[  133.060980][ T8562] netlink: 'syz.1.687': attribute type 16 has an invalid length.
[  133.063733][ T8562] netlink: 'syz.1.687': attribute type 17 has an invalid length.
[  133.068664][ T8562] IPv6: NLM_F_REPLACE set, but no existing node found!
[  133.708965][ T8579] netlink: 'syz.2.691': attribute type 1 has an invalid length.
[  134.209652][ T8612] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.212785][ T8612] syzkaller0: entered promiscuous mode
[  134.214785][ T8612] syzkaller0: entered allmulticast mode
[  134.949479][ T8607] tipc: Resetting bearer <eth:syzkaller0>
[  134.970971][ T8607] tipc: Disabling bearer <eth:syzkaller0>
[  135.301352][ T8674] pim6reg1: entered promiscuous mode
[  135.303480][ T8674] pim6reg1: entered allmulticast mode
[  135.342381][ T8676] __nla_validate_parse: 12 callbacks suppressed
[  135.342399][ T8676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.715'.
[  135.349399][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.715'.
[  135.379134][ T8678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.714'.
[  135.394370][ T8680] netlink: 'syz.1.716': attribute type 10 has an invalid length.
[  135.399569][ T8680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.716'.
[  135.598514][ T8687] netlink: 27 bytes leftover after parsing attributes in process `syz.0.718'.
[  135.613750][ T8688] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  135.754021][ T8700] netlink: 'syz.0.721': attribute type 10 has an invalid length.
[  135.756612][ T8700] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  135.763720][ T8700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.721'.
[  135.804740][ T8702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.722'.
[  136.237168][ T8727] netlink: 'syz.2.724': attribute type 16 has an invalid length.
[  136.240152][ T8727] netlink: 'syz.2.724': attribute type 17 has an invalid length.
[  136.249685][ T8727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.724'.
[  136.254876][ T8727] IPv6: NLM_F_REPLACE set, but no existing node found!
[  136.679884][ T8707] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  136.682912][ T8707] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  136.692587][ T8707] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  136.695596][ T8707] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  137.355253][ T8782] syzkaller1: entered promiscuous mode
[  137.359683][ T8782] syzkaller1: entered allmulticast mode
[  137.891249][ T8790] netlink: 1 bytes leftover after parsing attributes in process `syz.0.737'.
[  138.244358][ T8794] macvlan0: entered promiscuous mode
[  138.249522][ T8794] batadv0: entered promiscuous mode
[  138.254467][ T8794] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network
[  138.259198][ T8794] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  138.263266][ T8794] hsr1: entered allmulticast mode
[  138.265281][ T8794] macvlan0: entered allmulticast mode
[  138.269569][ T8794] batadv0: entered allmulticast mode
[  138.288787][ T8794] macvlan0: left promiscuous mode
[  138.294219][ T8794] batadv0: left promiscuous mode
[  138.413297][ T8805] netlink: 'syz.1.740': attribute type 16 has an invalid length.
[  138.415773][ T8805] netlink: 'syz.1.740': attribute type 17 has an invalid length.
[  138.422670][ T8805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.740'.
[  138.426180][ T8805] IPv6: NLM_F_REPLACE set, but no existing node found!
[  138.736695][ T8837] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  139.117113][ T8842] netlink: 'syz.2.749': attribute type 1 has an invalid length.
[  139.119599][ T8842] nbd: error processing sock list
[  139.121285][ T8842] block nbd0: shutting down sockets
[  139.210270][ T8846] netlink: 'syz.1.750': attribute type 10 has an invalid length.
[  139.829962][ T8869] netlink: 'syz.2.756': attribute type 11 has an invalid length.
[  140.004091][ T8879] netlink: 'syz.2.758': attribute type 10 has an invalid length.
[  140.011366][ T8879] 8021q: adding VLAN 0 to HW filter on device team0
[  140.018511][ T8879] bond0: (slave team0): Enslaving as an active interface with an up link
[  140.291014][ T8894] syzkaller0: entered promiscuous mode
[  140.293461][ T8894] syzkaller0: entered allmulticast mode
[  140.422220][ T8897] __nla_validate_parse: 9 callbacks suppressed
[  140.422235][ T8897] netlink: 36 bytes leftover after parsing attributes in process `syz.1.765'.
[  140.428435][ T8897] netlink: 40 bytes leftover after parsing attributes in process `syz.1.765'.
[  140.431668][ T8897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.765'.
[  140.498713][ T8905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.767'.
[  140.533354][ T8906] netlink: 28 bytes leftover after parsing attributes in process `syz.2.766'.
[  140.643431][ T8912] IPVS: length: 233 != 8
[  140.904395][ T8926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.771'.
[  140.907955][ T8926] batman_adv: batadv0: Removing interface: batadv_slave_0
[  140.910703][ T8926] batman_adv: batadv0: Removing interface: batadv_slave_1
[  141.324732][ T8960] sit0: entered promiscuous mode
[  141.326942][ T8960] netlink: 'syz.1.778': attribute type 1 has an invalid length.
[  141.335700][ T8960] netlink: 1 bytes leftover after parsing attributes in process `syz.1.778'.
[  141.423769][ T8970] 0X: left allmulticast mode
[  141.430781][ T8970] gretap1: left promiscuous mode
[  141.515346][ T8978] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  141.553202][ T8982] netlink: 40 bytes leftover after parsing attributes in process `syz.2.785'.
[  141.570281][ T8982] pimreg: entered allmulticast mode
[  141.637685][ T8981] pimreg: left allmulticast mode
[  141.801435][ T8991] netlink: 16 bytes leftover after parsing attributes in process `syz.2.787'.
[  142.001687][ T8999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.789'.
[  142.172596][ T9009] tipc: Invalid UDP bearer configuration
[  142.172647][ T9009] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  144.669006][ T9134] netlink: 'syz.0.825': attribute type 10 has an invalid length.
[  144.978880][ T9166] gtp0: entered promiscuous mode
[  146.002273][ T9197] netlink: 'syz.1.841': attribute type 10 has an invalid length.
[  146.005566][ T9197] __nla_validate_parse: 10 callbacks suppressed
[  146.005576][ T9197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.841'.
[  146.024126][ T9199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.842'.
[  146.387491][ T9220] sit0: left promiscuous mode
[  146.405314][ T9220] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.409527][ T9220] 8021q: adding VLAN 0 to HW filter on device team0
[  146.413752][ T9220] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  146.788828][ T9252] netlink: 48 bytes leftover after parsing attributes in process `syz.1.855'.
[  146.856505][ T9260] netlink: 36 bytes leftover after parsing attributes in process `syz.1.857'.
[  146.860239][ T9260] netlink: 16 bytes leftover after parsing attributes in process `syz.1.857'.
[  146.863744][ T9260] netlink: 36 bytes leftover after parsing attributes in process `syz.1.857'.
[  146.867644][ T9260] netlink: 36 bytes leftover after parsing attributes in process `syz.1.857'.
[  146.901313][ T9264] netlink: 'syz.2.858': attribute type 10 has an invalid length.
[  146.904345][ T9264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.858'.
[  147.148392][ T9289] netlink: 36 bytes leftover after parsing attributes in process `syz.2.864'.
[  147.193873][ T9291] 8021q: adding VLAN 0 to HW filter on device bond0
[  147.217675][ T9289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.864'.
[  147.220527][ T9289] netlink: 'syz.2.864': attribute type 1 has an invalid length.
[  147.223026][ T9289] netlink: 'syz.2.864': attribute type 2 has an invalid length.
[  147.543008][ T9328] ieee802154 phy0 wpan0: encryption failed: -22
[  148.631099][ T9365] gtp0: left promiscuous mode
[  148.661868][ T9363] netlink: 'syz.2.884': attribute type 1 has an invalid length.
[  148.846173][ T9389] netlink: 'syz.0.890': attribute type 16 has an invalid length.
[  148.849255][ T9389] netlink: 'syz.0.890': attribute type 17 has an invalid length.
[  150.027595][   T55] block nbd0: Receive control failed (result -104)
[  150.203322][ T9433] netlink: 'syz.0.902': attribute type 10 has an invalid length.
[  150.298448][ T9440] netlink: 'syz.0.904': attribute type 10 has an invalid length.
[  150.536940][ T9453] netlink: 'syz.0.907': attribute type 10 has an invalid length.
[  150.828930][ T9472] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  151.234716][ T9492] bridge5: entered allmulticast mode
[  151.383854][ T9508] __nla_validate_parse: 24 callbacks suppressed
[  151.383871][ T9508] netlink: 28 bytes leftover after parsing attributes in process `syz.0.920'.
[  151.561512][ T9514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.923'.
[  152.214494][ T9527] netlink: 'syz.2.927': attribute type 2 has an invalid length.
[  152.369955][ T9548] netlink: 36 bytes leftover after parsing attributes in process `syz.0.933'.
[  152.372836][ T9548] netlink: 40 bytes leftover after parsing attributes in process `syz.0.933'.
[  152.375698][ T9548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.933'.
[  152.470896][ T9556] netlink: 'syz.2.935': attribute type 16 has an invalid length.
[  152.473519][ T9556] netlink: 'syz.2.935': attribute type 17 has an invalid length.
[  152.482287][ T9556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.935'.
[  152.488241][ T9556] IPv6: NLM_F_REPLACE set, but no existing node found!
[  153.333688][ T9570] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.941'.
[  153.355522][ T9569] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.941'.
[  153.468824][ T9584] syz.0.945 (9584) used obsolete PPPIOCDETACH ioctl
[  154.365004][ T9608] netlink: 'syz.1.951': attribute type 13 has an invalid length.
[  154.376420][ T9608] netlink: 'syz.1.951': attribute type 27 has an invalid length.
[  154.783396][ T9657] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  154.859633][ T9660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.963'.
[  154.906129][ T9665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.965'.
[  154.968512][ T9671] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  156.839204][ T9669] Set syz1 is full, maxelem 65536 reached
[  156.974023][ T9739] __nla_validate_parse: 3 callbacks suppressed
[  156.974033][ T9739] netlink: 24 bytes leftover after parsing attributes in process `syz.1.980'.
[  157.166610][ T9755] netlink: 36 bytes leftover after parsing attributes in process `syz.0.984'.
[  157.169744][ T9755] netlink: 40 bytes leftover after parsing attributes in process `syz.0.984'.
[  157.172593][ T9755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.984'.
[  157.922280][ T9811] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1000'.
[  157.927094][ T9811] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1000'.
[  157.930051][ T9811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1000'.
[  158.020200][ T9819] delete_channel: no stack
[  158.662584][ T9824] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1004'.
[  158.932518][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1006'.
[  158.936039][ T9830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1006'.
[  159.483324][ T9848] netlink: 'syz.2.1012': attribute type 16 has an invalid length.
[  159.486604][ T9848] netlink: 'syz.2.1012': attribute type 17 has an invalid length.
[  161.311341][ T9914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  161.690157][ T9927] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  161.710261][ T9927] team0: Port device 0! removed
[  161.714295][ T9927] bond0: (slave bond_slave_0): Releasing backup interface
[  161.731806][ T9927] bond0: (slave bond_slave_1): Releasing backup interface
[  161.739784][ T9927] team0: Port device team_slave_0 removed
[  161.745136][ T9927] team0: Port device team_slave_1 removed
[  161.748692][ T9927] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  161.772874][ T9927] netlink: 'syz.0.1036': attribute type 10 has an invalid length.
[  161.776228][ T9927] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[  161.780567][ T9927] bond0: (slave wlan1): Opening slave failed
[  161.791052][ T9927] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  161.794911][ T9927] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  162.427950][ T9943] ieee802154 phy0 wpan0: encryption failed: -90
[  162.464866][ T9948] !: renamed from dummy0
[  162.622444][ T9960] sctp: [Deprecated]: syz.2.1044 (pid 9960) Use of struct sctp_assoc_value in delayed_ack socket option.
[  162.622444][ T9960] Use struct sctp_sack_info instead
[  162.970061][ T9987] __nla_validate_parse: 6 callbacks suppressed
[  162.970074][ T9987] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1051'.
[  162.975575][ T9991] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1052'.
[  164.190315][T10051] syzkaller1: entered promiscuous mode
[  164.192987][T10051] syzkaller1: entered allmulticast mode
[  164.196620][T10053] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1070'.
[  164.466785][T10066] netlink: 'syz.2.1073': attribute type 21 has an invalid length.
[  165.179722][T10087] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1077'.
[  165.274746][T10096] ieee802154 phy0 wpan0: encryption failed: -22
[  165.552970][T10104] syzkaller0: entered promiscuous mode
[  165.555119][T10104] syzkaller0: entered allmulticast mode
[  165.786724][T10110] syzkaller0: entered promiscuous mode
[  165.788742][T10110] syzkaller0: entered allmulticast mode
[  166.862409][T10129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1091'.
[  166.926873][T10133] macvlan2: entered promiscuous mode
[  166.929374][T10133] vlan0: entered promiscuous mode
[  167.031588][T10144] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1097'.
[  167.169597][T10161] netlink: 'syz.2.1102': attribute type 1 has an invalid length.
[  167.179493][T10155] veth0: entered promiscuous mode
[  167.184320][T10154] veth0: left promiscuous mode
[  167.226153][T10163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1102'.
[  167.229606][T10163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1102'.
[  167.360713][   T33] audit: type=1107 audit(1758975880.324:2): pid=10170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=';s>m?e\Gs|_N"Uu7Ok3_#bIui8H_"tf8Z9^!x쐄'
[  167.363090][T10171] sctp: [Deprecated]: syz.0.1105 (pid 10171) Use of int in maxseg socket option.
[  167.363090][T10171] Use struct sctp_assoc_value instead
[  167.587646][T10187] netlink: 'syz.0.1108': attribute type 6 has an invalid length.
[  167.590795][T10187] netlink: zone id is out of range
[  167.592701][T10187] netlink: zone id is out of range
[  167.595708][T10187] netlink: set zone limit has 8 unknown bytes
[  168.114331][T10200] netlink: 'syz.2.1113': attribute type 10 has an invalid length.
[  168.117843][T10200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1113'.
[  168.175372][T10201] vlan0: left promiscuous mode
[  168.533466][T10206] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1114'.
[  168.696168][T10217] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1116'.
[  168.702415][T10217] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1116'.
[  168.705650][T10217] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1116'.
[  168.708755][T10217] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1116'.
[  168.753207][T10217] netlink: 'syz.1.1116': attribute type 1 has an invalid length.
[  168.824369][T10229] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1118'.
[  168.828549][T10229] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1118'.
[  168.832759][T10229] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1118'.
[  168.836785][T10229] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1118'.
[  168.841413][T10230] netlink: 'syz.0.1119': attribute type 10 has an invalid length.
[  168.905359][T10229] netlink: 'syz.1.1118': attribute type 1 has an invalid length.
[  169.443106][T10280] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  169.560996][T10280] syzkaller0: entered promiscuous mode
[  169.562941][T10280] syzkaller0: entered allmulticast mode
[  171.841972][T10362] netlink: 'syz.1.1154': attribute type 10 has an invalid length.
[  171.879336][T10365] netlink: 'syz.2.1155': attribute type 7 has an invalid length.
[  171.882503][T10365] netlink: 'syz.2.1155': attribute type 8 has an invalid length.
[  171.888567][T10365] netlink: 'syz.2.1155': attribute type 11 has an invalid length.
[  172.889977][T10391] syz.2.1162: vmalloc error: size 134221824, failed to allocated page array size 262152, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  172.896076][T10391] CPU: 0 UID: 0 PID: 10391 Comm: syz.2.1162 Not tainted syzkaller #0 PREEMPT(full) 
[  172.896089][T10391] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  172.896095][T10391] Call Trace:
[  172.896111][T10391]  <TASK>
[  172.896117][T10391]  dump_stack_lvl+0x189/0x250
[  172.896134][T10391]  ? __pfx_dump_stack_lvl+0x10/0x10
[  172.896143][T10391]  ? __pfx__printk+0x10/0x10
[  172.896155][T10391]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  172.896164][T10391]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  172.896173][T10391]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  172.896182][T10391]  warn_alloc+0x214/0x310
[  172.896197][T10391]  ? __pfx_warn_alloc+0x10/0x10
[  172.896212][T10391]  ? __get_vm_area_node+0x28f/0x300
[  172.896224][T10391]  ? hash_netiface_create+0x358/0xfe0
[  172.896238][T10391]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  172.896248][T10391]  ? do_syscall_64+0xfa/0x3b0
[  172.896270][T10391]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  172.896282][T10391]  ? rcu_is_watching+0x15/0xb0
[  172.896290][T10391]  ? hash_netiface_create+0x358/0xfe0
[  172.896300][T10391]  ? hash_netiface_create+0x358/0xfe0
[  172.896310][T10391]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  172.896321][T10391]  ? hash_netiface_create+0x358/0xfe0
[  172.896331][T10391]  ? hash_netiface_create+0x2fe/0xfe0
[  172.896344][T10391]  hash_netiface_create+0x358/0xfe0
[  172.896358][T10391]  ? __nla_parse+0x40/0x60
[  172.896366][T10391]  ? __pfx_hash_netiface_create+0x10/0x10
[  172.896377][T10391]  ip_set_create+0xa97/0x1940
[  172.896391][T10391]  ? ip_set_create+0x4a2/0x1940
[  172.896407][T10391]  ? __pfx_ip_set_create+0x10/0x10
[  172.896433][T10391]  nfnetlink_rcv_msg+0xb4d/0x1130
[  172.896449][T10391]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  172.896469][T10391]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  172.896493][T10391]  ? __lock_acquire+0xab9/0xd20
[  172.896513][T10391]  netlink_rcv_skb+0x208/0x470
[  172.896544][T10391]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  172.896558][T10391]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  172.896571][T10391]  ? bpf_lsm_capable+0x9/0x20
[  172.896582][T10391]  ? security_capable+0x7e/0x2e0
[  172.896598][T10391]  nfnetlink_rcv+0x26a/0x2520
[  172.896609][T10391]  ? is_bpf_text_address+0x26/0x2b0
[  172.896624][T10391]  ? kernel_text_address+0xa5/0xe0
[  172.896635][T10391]  ? __kernel_text_address+0xd/0x40
[  172.896644][T10391]  ? unwind_get_return_address+0x4d/0x90
[  172.896653][T10391]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  172.896662][T10391]  ? arch_stack_walk+0xfc/0x150
[  172.896678][T10391]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  172.896690][T10391]  ? stack_depot_save_flags+0x40/0x860
[  172.896704][T10391]  ? __lock_acquire+0xab9/0xd20
[  172.896726][T10391]  ? __lock_acquire+0xab9/0xd20
[  172.896740][T10391]  ? netlink_deliver_tap+0x2e/0x1b0
[  172.896751][T10391]  ? netlink_deliver_tap+0x2e/0x1b0
[  172.896763][T10391]  netlink_unicast+0x82f/0x9e0
[  172.896779][T10391]  ? __pfx_netlink_unicast+0x10/0x10
[  172.896787][T10391]  ? netlink_sendmsg+0x642/0xb30
[  172.896795][T10391]  ? skb_put+0x11b/0x210
[  172.896806][T10391]  netlink_sendmsg+0x805/0xb30
[  172.896818][T10391]  ? __pfx_netlink_sendmsg+0x10/0x10
[  172.896828][T10391]  ? aa_sock_msg_perm+0xf1/0x1d0
[  172.896842][T10391]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  172.896850][T10391]  ? __pfx_netlink_sendmsg+0x10/0x10
[  172.896859][T10391]  __sock_sendmsg+0x21c/0x270
[  172.896873][T10391]  ____sys_sendmsg+0x505/0x830
[  172.896886][T10391]  ? __pfx_____sys_sendmsg+0x10/0x10
[  172.896899][T10391]  ? import_iovec+0x74/0xa0
[  172.896911][T10391]  ___sys_sendmsg+0x21f/0x2a0
[  172.896922][T10391]  ? __pfx____sys_sendmsg+0x10/0x10
[  172.896947][T10391]  ? __fget_files+0x2a/0x420
[  172.896958][T10391]  ? __fget_files+0x3a0/0x420
[  172.896987][T10391]  __x64_sys_sendmsg+0x19b/0x260
[  172.896999][T10391]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  172.897013][T10391]  ? rcu_is_watching+0x15/0xb0
[  172.897022][T10391]  ? do_syscall_64+0xbe/0x3b0
[  172.897031][T10391]  do_syscall_64+0xfa/0x3b0
[  172.897038][T10391]  ? lockdep_hardirqs_on+0x9c/0x150
[  172.897049][T10391]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.897057][T10391]  ? exc_page_fault+0x9f/0xf0
[  172.897069][T10391]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.897076][T10391] RIP: 0033:0x7eff1938ec29
[  172.897086][T10391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  172.897093][T10391] RSP: 002b:00007eff1a1f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  172.897102][T10391] RAX: ffffffffffffffda RBX: 00007eff195d5fa0 RCX: 00007eff1938ec29
[  172.897107][T10391] RDX: 0000000040000010 RSI: 0000200000002900 RDI: 0000000000000005
[  172.897112][T10391] RBP: 00007eff19411e41 R08: 0000000000000000 R09: 0000000000000000
[  172.897117][T10391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  172.897121][T10391] R13: 00007eff195d6038 R14: 00007eff195d5fa0 R15: 00007fff692b8838
[  172.897134][T10391]  </TASK>
[  173.058125][T10391] Mem-Info:
[  173.060080][T10391] active_anon:5805 inactive_anon:0 isolated_anon:0
[  173.060080][T10391]  active_file:1354 inactive_file:38282 isolated_file:0
[  173.060080][T10391]  unevictable:1768 dirty:27 writeback:0
[  173.060080][T10391]  slab_reclaimable:10372 slab_unreclaimable:57252
[  173.060080][T10391]  mapped:18259 shmem:2401 pagetables:956
[  173.060080][T10391]  sec_pagetables:0 bounce:0
[  173.060080][T10391]  kernel_misc_reclaimable:0
[  173.060080][T10391]  free:281697 free_pcp:24834 free_cma:0
[  173.073902][T10391] Node 0 active_anon:9100kB inactive_anon:0kB active_file:3992kB inactive_file:132132kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32984kB dirty:76kB writeback:0kB shmem:4772kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3612kB pagetables:1496kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  173.083321][T10391] Node 1 active_anon:14120kB inactive_anon:0kB active_file:1424kB inactive_file:20996kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40052kB dirty:32kB writeback:0kB shmem:4832kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8348kB pagetables:2328kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  173.093277][T10391] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  173.102394][T10391] lowmem_reserve[]: 0 814 814 814 814
[  173.104207][T10391] Node 0 DMA32 free:255232kB boost:0kB min:33720kB low:42148kB high:50576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9100kB inactive_anon:0kB active_file:3992kB inactive_file:132132kB unevictable:3536kB writepending:76kB present:1556484kB managed:833644kB mlocked:0kB bounce:0kB free_pcp:52684kB local_pcp:38052kB free_cma:0kB
[  173.114841][T10391] lowmem_reserve[]: 0 0 0 0 0
[  173.116418][T10391] Node 1 DMA32 free:458492kB boost:0kB min:19172kB low:23964kB high:28756kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  173.127574][T10391] lowmem_reserve[]: 0 0 854 854 854
[  173.130705][T10391] Node 1 Normal free:397704kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14052kB inactive_anon:0kB active_file:1424kB inactive_file:20996kB unevictable:3536kB writepending:32kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:46728kB local_pcp:18152kB free_cma:0kB
[  173.142225][T10391] lowmem_reserve[]: 0 0 0 0 0
[  173.143846][T10391] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  173.148262][T10391] Node 0 DMA32: 290*4kB (UME) 159*8kB (UME) 156*16kB (UME) 111*32kB (ME) 65*64kB (UME) 49*128kB (UME) 35*256kB (UM) 18*512kB (UM) 13*1024kB (UM) 6*2048kB (UME) 47*4096kB (UM) = 255200kB
[  173.155021][T10391] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  173.161324][T10391] Node 1 Normal: 1331*4kB (UE) 616*8kB (UE) 372*16kB (UME) 698*32kB (UME) 388*64kB (UME) 118*128kB (UM) 47*256kB (UME) 20*512kB (UME) 8*1024kB (UME) 7*2048kB (UM) 67*4096kB (UM) = 397708kB
[  173.177058][T10391] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  173.185934][T10391] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  173.190990][T10391] 42037 total pagecache pages
[  173.192615][T10391] 0 pages in swap cache
[  173.194150][T10391] Free swap  = 124996kB
[  173.195556][T10391] Total swap = 124996kB
[  173.197055][T10391] 786301 pages RAM
[  173.198286][T10391] 0 pages HighMem/MovableOnly
[  173.199855][T10391] 240658 pages reserved
[  173.201199][T10391] 0 pages cma reserved
[  173.217599][T10408] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  173.231080][T10408] __nla_validate_parse: 16 callbacks suppressed
[  173.231093][T10408] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1166'.
[  173.253973][T10408] vlan2: entered allmulticast mode
[  173.256152][T10408] bridge0: entered allmulticast mode
[  173.262152][T10408] bridge6: port 1(vlan2) entered blocking state
[  173.264724][T10408] bridge6: port 1(vlan2) entered disabled state
[  173.269134][T10408] vlan2: entered promiscuous mode
[  173.270877][T10408] bridge0: entered promiscuous mode
[  173.349735][T10411] netlink: 'syz.2.1167': attribute type 16 has an invalid length.
[  173.352322][T10411] netlink: 'syz.2.1167': attribute type 17 has an invalid length.
[  173.362922][T10411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1167'.
[  173.367677][T10411] IPv6: NLM_F_REPLACE set, but no existing node found!
[  173.440211][T10415] netlink: 'syz.0.1169': attribute type 10 has an invalid length.
[  173.443642][T10415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1169'.
[  173.502430][T10418] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1170'.
[  173.505716][T10417] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1170'.
[  173.513405][T10418] tipc: New replicast peer: 0.0.0.0
[  173.515517][T10418] tipc: Enabled bearer <udp:syz2>, priority 10
[  173.517930][T10417] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  173.520640][T10418] tipc: New replicast peer: 255.255.255.255
[  173.655998][T10428] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1171'.
[  173.757324][T10436] tipc: Started in network mode
[  173.759936][T10436] tipc: Node identity ac14142f, cluster identity 4711
[  173.762945][T10436] tipc: New replicast peer: 0.0.0.0
[  173.766013][T10436] tipc: Enabled bearer <udp:syz2>, priority 10
[  173.823111][T10436] tipc: New replicast peer: 255.255.255.255
[  174.154283][T10439] netlink: 'syz.2.1175': attribute type 10 has an invalid length.
[  174.158135][T10439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1175'.
[  174.629136][   T10] tipc: Node number set to 276601564
[  174.755987][T10460] syzkaller1: entered promiscuous mode
[  174.759123][ T5883] tipc: Node number set to 2886997039
[  174.766843][T10460] syzkaller1: entered allmulticast mode
[  175.610080][T10477] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1183'.
[  175.681244][T10490] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1186'.
[  175.863346][T10497] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1187'.
[  177.289157][T10523] netlink: 'syz.0.1196': attribute type 16 has an invalid length.
[  177.292586][T10523] netlink: 'syz.0.1196': attribute type 17 has an invalid length.
[  177.348954][T10526] vlan2: entered promiscuous mode
[  177.350587][T10526] bond0: entered promiscuous mode
[  177.352284][T10526] bond_slave_0: entered promiscuous mode
[  177.354845][T10526] bond_slave_1: entered promiscuous mode
[  177.360617][T10526] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  177.363899][T10526] vlan2: entered allmulticast mode
[  177.366172][T10526] bond0: entered allmulticast mode
[  177.369380][T10526] bond_slave_0: entered allmulticast mode
[  177.372039][T10526] bond_slave_1: entered allmulticast mode
[  177.374860][T10526] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  178.469768][T10577] syz.2.1210 uses old SIOCAX25GETINFO
[  178.476825][T10578] bridge6: entered allmulticast mode
[  178.719936][T10600] __nla_validate_parse: 7 callbacks suppressed
[  178.719948][T10600] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1212'.
[  178.920972][T10602] netlink: 'syz.2.1216': attribute type 1 has an invalid length.
[  178.927210][T10602] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1216'.
[  178.934510][T10612] syzkaller0: entered promiscuous mode
[  178.936834][T10612] syzkaller0: entered allmulticast mode
[  179.584071][T10619] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1218'.
[  180.185834][T10635] syzkaller1: entered promiscuous mode
[  180.188034][T10635] syzkaller1: entered allmulticast mode
[  180.426201][T10655] netlink: 'syz.2.1227': attribute type 13 has an invalid length.
[  180.433800][T10655] netlink: 'syz.2.1227': attribute type 17 has an invalid length.
[  180.504376][T10655] 8021q: adding VLAN 0 to HW filter on device bond0
[  180.510471][T10655] 8021q: adding VLAN 0 to HW filter on device team0
[  180.516693][T10655] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  180.658488][T10665] netlink: 'syz.2.1228': attribute type 10 has an invalid length.
[  180.662748][T10664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1228'.
[  181.587296][T10681] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1232'.
[  181.681393][T10689] netlink: 'syz.2.1233': attribute type 16 has an invalid length.
[  181.684264][T10689] netlink: 'syz.2.1233': attribute type 17 has an invalid length.
[  181.728345][T10690] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  181.728443][T10689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1233'.
[  181.732181][T10690] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1234'.
[  181.739933][T10689] IPv6: NLM_F_REPLACE set, but no existing node found!
[  181.806280][T10690] bond0 (unregistering): Released all slaves
[  182.488893][T10704] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1238'.
[  182.505266][T10706] ieee802154 phy0 wpan0: encryption failed: -22
[  182.536036][T10708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1240'.
[  182.556711][T10708] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1240'.
[  182.588038][T10714] netlink: 'syz.2.1242': attribute type 10 has an invalid length.
[  182.594247][T10716] netlink: 'syz.0.1243': attribute type 10 has an invalid length.
[  182.674103][T10728] netlink: 'syz.0.1245': attribute type 27 has an invalid length.
[  182.680508][T10728] bridge5: left allmulticast mode
[  182.681423][T10729] netlink: 'syz.0.1245': attribute type 27 has an invalid length.
[  182.940622][T10752] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.972963][T10752] syzkaller0: entered promiscuous mode
[  182.974914][T10752] syzkaller0: entered allmulticast mode
[  182.977709][T10752] tipc: Resetting bearer <eth:syzkaller0>
[  182.992412][T10752] tipc: Resetting bearer <eth:syzkaller0>
[  183.738454][T10757] __nla_validate_parse: 6 callbacks suppressed
[  183.738465][T10757] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1253'.
[  183.869776][T10766] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1258'.
[  183.969225][T10752] tipc: Disabling bearer <eth:syzkaller0>
[  183.974504][T10754] validate_nla: 2 callbacks suppressed
[  183.974514][T10754] netlink: 'syz.0.1253': attribute type 12 has an invalid length.
[  184.109703][T10773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1261'.
[  184.112757][T10773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1261'.
[  184.212542][T10786] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1264'.
[  184.215537][T10786] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1264'.
[  184.218764][T10786] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1264'.
[  184.221891][T10786] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1264'.
[  185.131014][T10815] netlink: 'syz.0.1271': attribute type 10 has an invalid length.
[  185.133857][T10815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1271'.
[  185.192759][T10816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1271'.
[  186.278286][T10858] netlink: 'syz.1.1281': attribute type 1 has an invalid length.
[  186.380793][T10862] netlink: 'syz.1.1282': attribute type 1 has an invalid length.
[  186.383331][T10862] NCSI netlink: No device for ifindex 0
[  186.503506][T10868] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  186.506285][T10868] syzkaller0: entered promiscuous mode
[  186.508632][T10868] syzkaller0: entered allmulticast mode
[  186.522886][T10867] tipc: Resetting bearer <eth:syzkaller0>
[  186.535903][T10867] tipc: Disabling bearer <eth:syzkaller0>
[  186.912596][T10884] ieee802154 phy0 wpan0: encryption failed: -22
[  187.784378][T10910] pim6reg1: entered promiscuous mode
[  187.789095][T10910] pim6reg1: entered allmulticast mode
[  188.203736][T10931] macvlan2: left promiscuous mode
[  188.494628][T10942] vxcan3: entered allmulticast mode
[  188.775930][T10951] netlink: 'syz.1.1304': attribute type 10 has an invalid length.
[  188.779229][T10951] __nla_validate_parse: 41 callbacks suppressed
[  188.779237][T10951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1304'.
[  188.959238][T10957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1305'.
[  189.949266][T10987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1311'.
[  190.643098][T11029] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  190.651911][T11029] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1324'.
[  190.689730][T11031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1325'.
[  191.779953][T11058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1332'.
[  192.086790][T11078] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40
[  192.154204][T11084] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1339'.
[  192.165808][T11084] batadv1: entered promiscuous mode
[  192.168653][T11084] batadv1: entered allmulticast mode
[  192.176274][T11078] syzkaller1: entered promiscuous mode
[  192.178411][T11078] syzkaller1: entered allmulticast mode
[  192.212483][T11086] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1339'.
[  192.754314][T11110] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1346'.
[  192.900994][T11120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1348'.
[  192.984473][T11122] IPVS: Scheduler module ip_vs_sip not found
[  193.804788][T11147] __nla_validate_parse: 2 callbacks suppressed
[  193.804804][T11147] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1357'.
[  193.810591][T11147] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1357'.
[  193.813782][T11147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1357'.
[  193.910147][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  193.912802][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  194.077694][T11167] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1359'.
[  194.166802][T11176] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1365'.
[  194.169748][T11175] syzkaller1: entered promiscuous mode
[  194.171082][T11176] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1365'.
[  194.172393][T11175] syzkaller1: entered allmulticast mode
[  194.245047][T11178] netlink: 'syz.0.1364': attribute type 11 has an invalid length.
[  194.841919][T11182] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1367'.
[  195.069715][T11195] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1372'.
[  195.075214][T11195] tipc: New replicast peer: 0.0.0.0
[  195.081397][T11195] tipc: Enabled bearer <udp:syz2>, priority 10
[  195.085413][T11195] tipc: New replicast peer: 255.255.255.255
[  195.181486][T11207] netlink: 'syz.1.1377': attribute type 10 has an invalid length.
[  195.184871][T11207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1377'.
[  196.207303][    T9] tipc: Node number set to 2114122568
[  196.479712][   T33] audit: type=1800 audit(1758975909.444:3): pid=11244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1384" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2192 res=0 errno=0
[  196.905520][T11266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1385'.
[  197.406777][T11292] netlink: 'syz.1.1387': attribute type 2 has an invalid length.
[  198.564292][T11317] IPv6: NLM_F_REPLACE set, but no existing node found!
[  199.121181][T11326] __nla_validate_parse: 13 callbacks suppressed
[  199.121193][T11326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1396'.
[  199.426106][T11335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1398'.
[  199.429740][T11335] IPv6: NLM_F_REPLACE set, but no existing node found!
[  200.080213][T11349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1403'.
[  200.231487][T11354] Unsupported ieee802154 address type: 0
[  200.512378][T11358] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1406'.
[  200.515506][T11358] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1406'.
[  200.519078][T11358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1406'.
[  200.954920][   T55] block nbd1: Receive control failed (result -104)
[  201.038288][T11369] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  201.050644][T11369] bridge_slave_0: invalid flags given to default FDB implementation
[  201.261759][T11374] netlink: 'syz.1.1410': attribute type 2 has an invalid length.
[  201.491067][T11377] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1411'.
[  201.494000][T11377] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1411'.
[  201.496903][T11377] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1411'.
[  201.501011][T11377] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1411'.
[  201.539318][T11377] netlink: 'syz.2.1411': attribute type 1 has an invalid length.
[  201.924586][T11394] Bluetooth: MGMT ver 1.23
[  202.742539][T11422] netlink: 'syz.0.1422': attribute type 10 has an invalid length.
[  202.801703][T11425] lo: entered promiscuous mode
[  202.803786][T11425] tunl0: entered promiscuous mode
[  202.805500][T11425] gre0: entered promiscuous mode
[  202.807800][T11425] gretap0: entered promiscuous mode
[  202.809597][T11425] erspan0: entered promiscuous mode
[  202.811439][T11425] ip_vti0: entered promiscuous mode
[  202.813175][T11425] ip6_vti0: entered promiscuous mode
[  202.815028][T11425] sit0: entered promiscuous mode
[  202.816741][T11425] ip6tnl0: entered promiscuous mode
[  202.818729][T11425] ip6gre0: entered promiscuous mode
[  202.821440][T11425] syz_tun: entered promiscuous mode
[  202.823315][T11425] ip6gretap0: entered promiscuous mode
[  202.825300][T11425] vcan0: entered promiscuous mode
[  202.827683][T11425] team0: entered promiscuous mode
[  202.829466][T11425] !: entered promiscuous mode
[  202.831065][T11425] nlmon0: entered promiscuous mode
[  202.832803][T11425] caif0: entered promiscuous mode
[  202.834656][T11425] vxcan0: entered promiscuous mode
[  202.836516][T11425] vxcan1: entered promiscuous mode
[  202.840232][T11425] veth0: entered promiscuous mode
[  202.842010][T11425] veth1: entered promiscuous mode
[  202.843802][T11425] wg0: entered promiscuous mode
[  202.845515][T11425] wg1: entered promiscuous mode
[  202.847762][T11425] wg2: entered promiscuous mode
[  202.849988][T11425] veth0_to_bridge: entered promiscuous mode
[  202.852103][T11425] bridge_slave_0: entered promiscuous mode
[  202.855028][T11425] veth1_to_bridge: entered promiscuous mode
[  202.861474][T11425] bridge_slave_1: entered promiscuous mode
[  202.863896][T11425] veth0_to_bond: entered promiscuous mode
[  202.866422][T11425] bond_slave_0: entered promiscuous mode
[  202.868985][T11425] veth1_to_bond: entered promiscuous mode
[  202.871400][T11425] bond_slave_1: entered promiscuous mode
[  202.873766][T11425] veth0_to_team: entered promiscuous mode
[  202.876101][T11425] team_slave_0: entered promiscuous mode
[  202.878656][T11425] veth1_to_team: entered promiscuous mode
[  202.881024][T11425] team_slave_1: entered promiscuous mode
[  202.883377][T11425] veth0_to_batadv: entered promiscuous mode
[  202.885783][T11425] batadv_slave_0: entered promiscuous mode
[  202.888655][T11425] veth1_to_batadv: entered promiscuous mode
[  202.891145][T11425] batadv_slave_1: entered promiscuous mode
[  202.893473][T11425] veth0_to_hsr: entered promiscuous mode
[  202.895945][T11425] veth1_to_hsr: entered promiscuous mode
[  202.898558][T11425] hsr0: entered promiscuous mode
[  202.900716][T11425] veth1_virt_wifi: entered promiscuous mode
[  202.903185][T11425] veth0_virt_wifi: entered promiscuous mode
[  202.905661][T11425] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  202.909073][T11425] vlan0: entered promiscuous mode
[  202.911378][T11425] vlan1: entered promiscuous mode
[  202.913620][T11425] macvlan0: entered promiscuous mode
[  202.915910][T11425] macvlan1: entered promiscuous mode
[  202.918625][T11425] ipvlan0: entered promiscuous mode
[  202.920897][T11425] ipvlan1: entered promiscuous mode
[  202.923330][T11425] macvtap0: entered promiscuous mode
[  202.925637][T11425] macsec0: entered promiscuous mode
[  202.928175][T11425] geneve0: entered promiscuous mode
[  202.930565][T11425] geneve1: entered promiscuous mode
[  202.932628][T11425] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  202.935495][T11425] netdevsim netdevsim0 netdevsim1: entered promiscuous mode
[  202.938155][T11425] netdevsim netdevsim0 netdevsim2: entered promiscuous mode
[  202.940797][T11425] netdevsim netdevsim0 netdevsim3: entered promiscuous mode
[  202.943249][T11425] mac80211_hwsim hwsim3 ;: entered promiscuous mode
[  202.945703][T11425] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[  202.948494][T11425] syztnl0: entered promiscuous mode
[  202.950445][T11425] gtp0: entered promiscuous mode
[  202.952250][T11425] veth2: entered promiscuous mode
[  202.954020][T11425] veth3: entered promiscuous mode
[  202.955804][T11425] veth4: entered promiscuous mode
[  202.957730][T11425] veth5: entered promiscuous mode
[  202.959577][T11425] bond1: entered promiscuous mode
[  202.961324][T11425] gretap1: entered promiscuous mode
[  202.963264][T11425] bridge1: entered promiscuous mode
[  202.965265][T11425] mac80211_hwsim hwsim14 wlan2: entered promiscuous mode
[  202.968208][T11425] bridge2: entered promiscuous mode
[  202.970013][T11425] bridge3: entered promiscuous mode
[  202.971954][T11425] bond2: entered promiscuous mode
[  202.973653][T11425] ip6tnl1: entered promiscuous mode
[  202.975758][T11425] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode
[  202.978515][T11425] mac80211_hwsim hwsim17 wlan3: entered promiscuous mode
[  202.980960][T11425] macvlan2: entered promiscuous mode
[  202.983208][T11425] bridge4: entered promiscuous mode
[  202.985191][T11425] macsec0.2: entered promiscuous mode
[  202.997505][T11425] mac80211_hwsim hwsim21 wlan4: entered promiscuous mode
[  203.000490][T11425] bridge5: entered promiscuous mode
[  203.002662][T11425] vxlan0: entered promiscuous mode
[  203.004848][T11425] bridge6: entered promiscuous mode
[  203.007483][T11425] mac80211_hwsim hwsim22 wlan5: entered promiscuous mode
[  203.009917][T11425] bridge7: entered promiscuous mode
[  203.011837][T11425] bridge8: entered promiscuous mode
[  203.013733][T11425] ip6erspan0: entered promiscuous mode
[  203.096231][T11442] netlink: 'syz.1.1427': attribute type 4 has an invalid length.
[  204.279889][T11482] netlink: 'syz.1.1438': attribute type 12 has an invalid length.
[  204.694380][T11492] __nla_validate_parse: 9 callbacks suppressed
[  204.694392][T11492] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1441'.
[  204.941525][T11512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1444'.
[  205.219639][T11526] netlink: 'syz.0.1448': attribute type 3 has an invalid length.
[  205.264003][T11531] tipc: New replicast peer: 255.255.255.255
[  205.268138][T11531] tipc: Enabled bearer <udp:s>, priority 10
[  205.271644][T11531] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1450'.
[  205.759666][T11539] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1452'.
[  206.081459][T11564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1459'.
[  206.099319][T11566] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1460'.
[  206.104275][T11566] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  206.193933][T11568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1460'.
[  206.488806][T11594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1466'.
[  206.492455][T11594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1466'.
[  207.319529][T11622] lo: left promiscuous mode
[  207.323880][T11622] tunl0: left promiscuous mode
[  207.327183][T11622] gre0: left promiscuous mode
[  207.330632][T11622] gretap0: left promiscuous mode
[  207.333127][T11622] erspan0: left promiscuous mode
[  207.335552][T11622] ip_vti0: left promiscuous mode
[  207.340351][T11622] ip6_vti0: left promiscuous mode
[  207.343370][T11622] sit0: left promiscuous mode
[  207.355410][T11622] ip6tnl0: left promiscuous mode
[  207.361981][T11622] ip6gre0: left promiscuous mode
[  207.365438][T11622] syz_tun: left promiscuous mode
[  207.375095][T11622] ip6gretap0: left promiscuous mode
[  207.380283][T11622] team0: left promiscuous mode
[  207.383118][T11622] 8021q: adding VLAN 0 to HW filter on device team0
[  207.387482][T11622] !: left promiscuous mode
[  207.390066][T11622] nlmon0: left promiscuous mode
[  207.393724][T11622] caif0: left promiscuous mode
[  207.395761][T11622] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  207.405752][T11624] bond0: (slave bond_slave_0): Releasing backup interface
[  207.408349][T11613] netlink: 'syz.2.1468': attribute type 1 has an invalid length.
[  207.411254][T11613] nbd: error processing sock list
[  207.411693][T11624] bond_slave_0: left promiscuous mode
[  207.413115][T11613] block nbd2: shutting down sockets
[  207.414775][T11624] bond_slave_0: left allmulticast mode
[  207.419838][T11624] bond0: (slave bond_slave_1): Releasing backup interface
[  207.422739][T11624] bond_slave_1: left promiscuous mode
[  207.424674][T11624] bond_slave_1: left allmulticast mode
[  207.428812][T11624] team0: Port device team_slave_0 removed
[  207.433098][T11624] team0: Port device team_slave_1 removed
[  207.435417][T11624] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  207.516440][T11631] syzkaller0: entered promiscuous mode
[  207.520894][T11631] syzkaller0: entered allmulticast mode
[  207.761252][T11639] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1474'.
[  207.829686][    C0] Illegal XDP return value 16128 on prog  (id 582) dev lo, expect packet loss!
[  208.772493][T11663] netlink: 'syz.2.1480': attribute type 5 has an invalid length.
[  208.776282][T11663] netlink: 'syz.2.1480': attribute type 6 has an invalid length.
[  208.891899][T11673] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  209.246470][T11686] netlink: 'syz.0.1486': attribute type 1 has an invalid length.
[  209.820258][T11719] __nla_validate_parse: 5 callbacks suppressed
[  209.820277][T11719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1494'.
[  209.924159][T11721] netlink: 'syz.2.1495': attribute type 16 has an invalid length.
[  209.928052][T11721] netlink: 'syz.2.1495': attribute type 17 has an invalid length.
[  209.931422][T11721] netlink: 'syz.2.1495': attribute type 27 has an invalid length.
[  209.941249][T11721] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1495'.
[  209.948616][T11721] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1495'.
[  210.098074][T11731] netlink: 'syz.2.1498': attribute type 10 has an invalid length.
[  210.104703][T11731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1498'.
[  210.156026][T11736] netlink: 'syz.1.1499': attribute type 10 has an invalid length.
[  210.159633][T11736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1499'.
[  210.383756][T11751] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1502'.
[  211.174204][T11762] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1507'.
[  211.846595][T11780] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  212.178749][T11788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1514'.
[  212.277783][T11799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1516'.
[  212.346587][T11803] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  212.349440][T11803] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  212.455411][T11809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1520'.
[  214.301079][T11882] nbd: illegal input index -1
[  214.303293][T11882] nbd: illegal input index -1
[  214.304981][T11882] nbd: illegal input index -1
[  214.306638][T11882] nbd: illegal input index -1
[  215.332911][T11925] netlink: 'syz.1.1547': attribute type 9 has an invalid length.
[  215.335620][T11925] __nla_validate_parse: 4 callbacks suppressed
[  215.335633][T11925] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1547'.
[  215.585030][T11946] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1553'.
[  215.593129][T11946] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1553'.
[  216.001527][T11975] netlink: 'syz.0.1557': attribute type 10 has an invalid length.
[  216.005277][T11975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1557'.
[  216.544772][T11983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1559'.
[  216.544814][T11982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1559'.
[  217.208176][T12012] vxcan0: left promiscuous mode
[  217.210199][T12012] vxcan1: left promiscuous mode
[  217.212282][T12012] veth0: left promiscuous mode
[  217.214365][T12012] veth1: left promiscuous mode
[  217.216505][T12012] wg0: left promiscuous mode
[  217.219997][T12012] wg1: left promiscuous mode
[  217.222066][T12012] wg2: left promiscuous mode
[  217.224121][T12012] veth0_to_bridge: left promiscuous mode
[  217.226605][T12012] bridge_slave_0: left promiscuous mode
[  217.229214][T12012] veth1_to_bridge: left promiscuous mode
[  217.231676][T12012] bridge_slave_1: left promiscuous mode
[  217.234077][T12012] veth0_to_bond: left promiscuous mode
[  217.236461][T12012] bond_slave_0: left promiscuous mode
[  217.239749][T12012] veth1_to_bond: left promiscuous mode
[  217.242161][T12012] bond_slave_1: left promiscuous mode
[  217.244550][T12012] veth0_to_team: left promiscuous mode
[  217.246939][T12012] team_slave_0: left promiscuous mode
[  217.249538][T12012] veth1_to_team: left promiscuous mode
[  217.251908][T12012] team_slave_1: left promiscuous mode
[  217.254268][T12012] veth0_to_batadv: left promiscuous mode
[  217.256736][T12012] batadv_slave_0: left promiscuous mode
[  217.259679][T12012] veth1_to_batadv: left promiscuous mode
[  217.262122][T12012] batadv_slave_1: left promiscuous mode
[  217.264652][T12012] veth0_to_hsr: left promiscuous mode
[  217.267455][T12012] veth1_to_hsr: left promiscuous mode
[  217.269943][T12012] hsr0: left promiscuous mode
[  217.272049][T12012] veth1_virt_wifi: left promiscuous mode
[  217.274426][T12012] veth0_virt_wifi: left promiscuous mode
[  217.276823][T12012] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  217.281146][T12012] vlan0: left promiscuous mode
[  217.283443][T12012] vlan1: left promiscuous mode
[  217.285708][T12012] macvlan0: left promiscuous mode
[  217.288203][T12012] macvlan1: left promiscuous mode
[  217.290446][T12012] ipvlan0: left promiscuous mode
[  217.292616][T12012] ipvlan1: left promiscuous mode
[  217.294981][T12012] macvtap0: left promiscuous mode
[  217.297692][T12012] geneve0: left promiscuous mode
[  217.300410][T12012] geneve1: left promiscuous mode
[  217.302607][T12012] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  217.305652][T12012] netdevsim netdevsim0 netdevsim1: left promiscuous mode
[  217.309085][T12012] netdevsim netdevsim0 netdevsim2: left promiscuous mode
[  217.312361][T12012] netdevsim netdevsim0 netdevsim3: left promiscuous mode
[  217.327346][T12012] mac80211_hwsim hwsim3 ;: left promiscuous mode
[  217.330339][T12012] mac80211_hwsim hwsim6 wlan1: left promiscuous mode
[  217.333152][T12012] syztnl0: left promiscuous mode
[  217.335951][T12012] gtp0: left promiscuous mode
[  217.338570][T12012] veth2: left promiscuous mode
[  217.340724][T12012] veth3: left promiscuous mode
[  217.342798][T12012] veth4: left promiscuous mode
[  217.344849][T12012] veth5: left promiscuous mode
[  217.347525][T12012] bond1: left promiscuous mode
[  217.350060][T12012] gretap1: left promiscuous mode
[  217.352192][T12012] bridge1: left promiscuous mode
[  217.354373][T12012] mac80211_hwsim hwsim14 wlan2: left promiscuous mode
[  217.358235][T12012] bridge2: left promiscuous mode
[  217.360544][T12012] bridge3: left promiscuous mode
[  217.362913][T12012] bond2: left promiscuous mode
[  217.365449][T12012] ip6tnl1: left promiscuous mode
[  217.368111][T12012] mac80211_hwsim hwsim16 wlan0: left promiscuous mode
[  217.371783][T12012] mac80211_hwsim hwsim17 wlan3: left promiscuous mode
[  217.374776][T12012] macvlan2: left promiscuous mode
[  217.387740][T12012] bridge4: left promiscuous mode
[  217.389962][T12012] macsec0.2: left promiscuous mode
[  217.392083][T12012] macsec0: left promiscuous mode
[  217.394445][T12012] mac80211_hwsim hwsim21 wlan4: left promiscuous mode
[  217.398007][T12012] bridge5: left promiscuous mode
[  217.400180][T12012] vxlan0: left promiscuous mode
[  217.402349][T12012] bridge6: left promiscuous mode
[  217.404645][T12012] mac80211_hwsim hwsim22 wlan5: left promiscuous mode
[  217.407863][T12012] bridge7: left promiscuous mode
[  217.410023][T12012] bridge8: left promiscuous mode
[  217.412186][T12012] ip6erspan0: left promiscuous mode
[  217.919286][T12028] 8021q: adding VLAN 0 to HW filter on device bond0
[  217.923698][T12028] 8021q: adding VLAN 0 to HW filter on device team0
[  217.930975][T12028] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  218.189946][T12034] netlink: 'syz.0.1573': attribute type 16 has an invalid length.
[  218.192723][T12034] netlink: 'syz.0.1573': attribute type 17 has an invalid length.
[  218.196092][T12034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1573'.
[  218.200797][T12034] IPv6: NLM_F_REPLACE set, but no existing node found!
[  218.291372][T12036] netlink: 'syz.1.1574': attribute type 10 has an invalid length.
[  218.294832][T12036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1574'.
[  218.791966][T12042] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  219.218933][T12049] syzkaller1: entered promiscuous mode
[  219.227084][T12049] syzkaller1: entered allmulticast mode
[  219.432973][T12051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1579'.
[  219.676239][T12060] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1580'.
[  219.783957][T12063] netlink: 'syz.1.1582': attribute type 11 has an invalid length.
[  219.787914][T12064] netlink: 'syz.1.1582': attribute type 11 has an invalid length.
[  220.412108][T12067] __nla_validate_parse: 2 callbacks suppressed
[  220.412121][T12067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1583'.
[  221.059629][T12100] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  221.064949][T12100] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1589'.
[  221.452360][T12112] netlink: 'syz.2.1592': attribute type 16 has an invalid length.
[  221.455339][T12112] netlink: 'syz.2.1592': attribute type 17 has an invalid length.
[  221.459536][T12112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1592'.
[  221.465947][T12112] IPv6: NLM_F_REPLACE set, but no existing node found!
[  221.586840][T12114] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1593'.
[  222.397705][T12132] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[  222.417430][T12121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1595'.
[  222.421246][T12121] netlink: 'syz.2.1595': attribute type 1 has an invalid length.
[  222.585739][T12145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1600'.
[  223.065729][T12174] netlink: 'syz.2.1605': attribute type 10 has an invalid length.
[  223.069542][T12174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1605'.
[  223.216066][T12182] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1607'.
[  223.222385][T12182] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1607'.
[  223.225939][T12182] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1607'.
[  223.422417][T12199] netlink: 'syz.0.1611': attribute type 10 has an invalid length.
[  224.093600][T12223] netlink: 'syz.2.1617': attribute type 1 has an invalid length.
[  224.311507][T12231] sctp: [Deprecated]: syz.1.1619 (pid 12231) Use of struct sctp_assoc_value in delayed_ack socket option.
[  224.311507][T12231] Use struct sctp_sack_info instead
[  224.990238][T12262] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  224.992972][T12262] syzkaller0: entered promiscuous mode
[  224.994919][T12262] syzkaller0: entered allmulticast mode
[  225.014973][T12262] tipc: Resetting bearer <eth:syzkaller0>
[  225.224410][T12279] syzkaller1: entered promiscuous mode
[  225.226646][T12279] syzkaller1: entered allmulticast mode
[  225.814072][T12261] tipc: Resetting bearer <eth:syzkaller0>
[  225.839800][T12261] tipc: Disabling bearer <eth:syzkaller0>
[  225.979882][T12324] netlink: 'syz.2.1644': attribute type 16 has an invalid length.
[  225.982607][T12324] netlink: 'syz.2.1644': attribute type 17 has an invalid length.
[  226.002757][T12324] __nla_validate_parse: 7 callbacks suppressed
[  226.002772][T12324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1644'.
[  226.014146][T12324] IPv6: NLM_F_REPLACE set, but no existing node found!
[  226.178734][T12332] netlink: 'syz.0.1646': attribute type 16 has an invalid length.
[  226.182068][T12332] netlink: 'syz.0.1646': attribute type 17 has an invalid length.
[  226.186013][T12332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1646'.
[  226.772210][T12335] vlan2: left promiscuous mode
[  226.773844][T12335] bond0: left promiscuous mode
[  226.775490][T12335] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  226.782057][T12335] vlan2: left allmulticast mode
[  226.783715][T12335] bond0: left allmulticast mode
[  226.785260][T12335] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  226.789346][T12335] bridge6: left allmulticast mode
[  226.805023][T12337] syz_tun: entered allmulticast mode
[  226.860129][T12338] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1648'.
[  226.951090][T12351] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1651'.
[  227.214612][T12366] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1655'.
[  227.261287][T12368] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1656'.
[  227.276509][T12368] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  227.378317][T12375] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1657'.
[  227.557870][T12386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1660'.
[  227.561278][T12386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1660'.
[  228.065890][T12407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1664'.
[  229.271403][T12446] ieee802154 phy0 wpan0: encryption failed: -22
[  229.919711][T12481] syzkaller0: entered promiscuous mode
[  229.921832][T12481] syzkaller0: entered allmulticast mode
[  230.328082][T12488] netlink: 'syz.2.1682': attribute type 16 has an invalid length.
[  230.331272][T12488] netlink: 'syz.2.1682': attribute type 17 has an invalid length.
[  230.583258][T12504] netlink: 'syz.1.1685': attribute type 1 has an invalid length.
[  230.615646][T12504] bond3: (slave bridge10): making interface the new active one
[  230.619840][T12504] bond3: (slave bridge10): Enslaving as an active interface with an up link
[  231.375677][T12508] __nla_validate_parse: 2 callbacks suppressed
[  231.375689][T12508] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1686'.
[  231.382665][T12509] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1686'.
[  231.394354][T12509] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1686'.
[  232.073867][T12524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1691'.
[  232.079934][T12524] netlink: 'syz.0.1691': attribute type 1 has an invalid length.
[  232.143821][T12530] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1693'.
[  232.240027][T12521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  232.251571][T12521] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  232.262815][T12521] bond0 (unregistering): (slave team0): Releasing backup interface
[  232.276757][T12542] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  232.276811][T12521] bond0 (unregistering): Released all slaves
[  232.281407][T12542] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1695'.
[  232.510703][T12562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1703'.
[  232.519331][T12562] chnl_net:caif_netlink_parms(): no params data found
[  232.534630][T12565] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1700'.
[  232.718332][T12582] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1707'.
[  232.719480][T12584] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1707'.
[  232.914616][T12594] netlink: 'syz.2.1709': attribute type 16 has an invalid length.
[  232.917230][T12594] netlink: 'syz.2.1709': attribute type 17 has an invalid length.
[  233.908055][    T9] IPVS: starting estimator thread 0...
[  233.997678][T12629] IPVS: using max 63 ests per chain, 151200 per kthread
[  235.122287][T12688] syzkaller1: entered promiscuous mode
[  235.124659][T12688] syzkaller1: entered allmulticast mode
[  235.128403][T12688] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  235.131928][T12688] nbd: nbd0 already in use
[  235.396387][T12704] netlink: 'syz.0.1740': attribute type 1 has an invalid length.
[  235.405036][ T3600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  235.408735][ T3600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  235.616645][T12719] netlink: 'syz.2.1743': attribute type 22 has an invalid length.
[  236.319525][T12742] 8021q: adding VLAN 0 to HW filter on device bond0
[  236.323345][T12742] 8021q: adding VLAN 0 to HW filter on device team0
[  236.327864][T12742] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  236.740872][T12758] __nla_validate_parse: 11 callbacks suppressed
[  236.740924][T12758] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1754'.
[  236.934484][T12774] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1761'.
[  237.491149][T12801] can: request_module (can-proto-0) failed.
[  237.751506][T12813] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1770'.
[  237.845730][T12816] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1771'.
[  237.868043][T12816] netlink: 'syz.0.1771': attribute type 1 has an invalid length.
[  238.099459][T12829] netlink: 'syz.2.1776': attribute type 12 has an invalid length.
[  238.102152][T12829] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1776'.
[  238.131163][T12829] syzkaller0: entered promiscuous mode
[  238.133125][T12829] syzkaller0: entered allmulticast mode
[  239.178175][T12836] veth1_to_bond: entered allmulticast mode
[  239.290862][T12844] netlink: 'syz.0.1780': attribute type 10 has an invalid length.
[  239.298349][T12844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1780'.
[  239.648909][T12885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1793'.
[  239.809149][T12893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1794'.
[  239.953124][T12901] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1797'.
[  239.956189][T12901] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1797'.
[  240.032139][T12909] netlink: 'syz.1.1798': attribute type 10 has an invalid length.
[  240.537267][T12946] atomic_op ffff888026857198 conn xmit_atomic 0000000000000000
[  240.606390][T12949] netlink: 'syz.1.1809': attribute type 3 has an invalid length.
[  240.611656][T12950] netlink: 'syz.1.1809': attribute type 3 has an invalid length.
[  240.774652][T12957] ip6_vti0: entered promiscuous mode
[  240.803688][T12959] netlink: 'syz.1.1812': attribute type 10 has an invalid length.
[  240.806769][T12959] syz_tun: entered promiscuous mode
[  240.811995][T12959] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  240.816171][T12960] netlink: 'syz.1.1812': attribute type 1 has an invalid length.
[  241.140437][T12976] netlink: 'syz.0.1817': attribute type 10 has an invalid length.
[  241.885400][T12998] __nla_validate_parse: 9 callbacks suppressed
[  241.885415][T12998] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1822'.
[  241.893448][T12998] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1822'.
[  241.896629][T12998] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1822'.
[  241.907184][T12998] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1822'.
[  241.966820][T13008] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1824'.
[  242.032905][T13014] netlink: 464 bytes leftover after parsing attributes in process `syz.2.1824'.
[  242.078380][T13016] netlink: 'syz.0.1826': attribute type 1 has an invalid length.
[  242.105437][T13016] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address
[  242.110830][T13016] bond0: (slave vxcan3): Error -95 calling set_mac_address
[  242.155094][T13016] macvlan3: entered promiscuous mode
[  242.156823][T13016] macvlan3: entered allmulticast mode
[  242.159254][T13016] bond0: entered promiscuous mode
[  242.162055][T13016] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  242.166525][T13016] bond0: left promiscuous mode
[  243.671055][T13042] syzkaller1: entered promiscuous mode
[  243.673224][T13042] syzkaller1: entered allmulticast mode
[  243.679946][T13042] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1834'.
[  243.810421][T13044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1835'.
[  243.851699][T13051] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1838'.
[  243.989208][T13067] netlink: 'syz.2.1842': attribute type 10 has an invalid length.
[  243.992735][T13067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1842'.
[  244.855708][T13087] netlink: 'syz.2.1847': attribute type 10 has an invalid length.
[  255.339645][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  255.342317][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  272.944337][T13114] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available
[  273.121838][T13125] __nla_validate_parse: 2 callbacks suppressed
[  273.121852][T13125] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1857'.
[  273.127449][T13125] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1857'.
[  273.131280][T13125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1857'.
[  273.164748][T13131] netlink: 'syz.1.1858': attribute type 1 has an invalid length.
[  273.899800][T13149] netlink: 'syz.2.1862': attribute type 1 has an invalid length.
[  273.933135][T13149] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1862'.
[  274.167323][T13150] netlink: 'syz.0.1863': attribute type 1 has an invalid length.
[  274.169768][T13150] nbd: error processing sock list
[  274.171632][T13150] block nbd2: shutting down sockets
[  274.885725][T13167] netlink: 'syz.0.1868': attribute type 29 has an invalid length.
[  274.891895][T13167] netlink: 'syz.0.1868': attribute type 29 has an invalid length.
[  274.895811][T13167] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1868'.
[  275.051731][T13169] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1869'.
[  275.125887][T13171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1870'.
[  275.271774][T13175] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1871'.
[  275.274640][T13175] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1871'.
[  275.278040][T13175] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1871'.
[  275.977180][T13182] netlink: 'syz.0.1873': attribute type 1 has an invalid length.
[  275.979768][T13182] nbd: error processing sock list
[  275.981519][T13182] block nbd2: shutting down sockets
[  276.586356][T13242] ip6_vti0: left promiscuous mode
[  278.094029][T13295] ieee802154 phy0 wpan0: encryption failed: -22
[  278.223199][T13311] __nla_validate_parse: 17 callbacks suppressed
[  278.223216][T13311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1904'.
[  278.260774][T13311] syzkaller0: entered promiscuous mode
[  278.263277][T13311] syzkaller0: entered allmulticast mode
[  280.492044][T13362] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1915'.
[  280.494766][T13362] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1915'.
[  280.498275][T13362] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1915'.
[  280.501300][T13362] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1915'.
[  280.635717][T13364] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1916'.
[  280.971304][T13369] netlink: 'syz.0.1917': attribute type 1 has an invalid length.
[  280.974459][T13369] nbd: error processing sock list
[  280.978135][T13369] block nbd2: shutting down sockets
[  281.306324][T13378] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1920'.
[  281.395596][T13382] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1919'.
[  281.785747][T13396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1924'.
[  282.821984][T13437] netlink: 'syz.2.1934': attribute type 16 has an invalid length.
[  282.831447][T13437] netlink: 'syz.2.1934': attribute type 17 has an invalid length.
[  282.868724][T13437] 8021q: adding VLAN 0 to HW filter on device team0
[  282.884940][T13437] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  282.905246][T13440] IPVS: Scheduler module ip_vs_sip not found
[  282.922944][T13437] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  283.194767][T13459] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  283.239906][T13465] netlink: 'syz.1.1936': attribute type 16 has an invalid length.
[  283.243114][T13465] netlink: 'syz.1.1936': attribute type 17 has an invalid length.
[  283.246940][T13463] netlink: 'syz.1.1936': attribute type 16 has an invalid length.
[  283.253427][T13463] netlink: 'syz.1.1936': attribute type 17 has an invalid length.
[  283.261228][T13465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1936'.
[  283.471471][T13486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1939'.
[  283.475067][T13486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1939'.
[  283.484439][T13486] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1939'.
[  283.766326][T13504] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1943'.
[  285.059236][T13548] syz_tun: left promiscuous mode
[  285.065318][T13548] 8021q: adding VLAN 0 to HW filter on device bond0
[  285.070968][T13548] 8021q: adding VLAN 0 to HW filter on device team0
[  285.075278][T13548] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  285.864381][T13568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1960'.
[  285.868431][T13568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1960'.
[  285.875495][T13568] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1960'.
[  285.880066][T13568] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1960'.
[  285.883660][T13568] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1960'.
[  285.939028][T13568] netlink: 'syz.1.1960': attribute type 1 has an invalid length.
[  286.260135][T13581] netlink: 'syz.0.1963': attribute type 2 has an invalid length.
[  286.425551][T13587] ieee802154 phy0 wpan0: encryption failed: -22
[  286.740607][T13611] tipc: Can't bind to reserved service type 0
[  286.914556][T13628] erspan0: entered promiscuous mode
[  286.921068][T13628] erspan0: left promiscuous mode
[  286.949699][T13630] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  287.058859][T13625] syzkaller0: entered promiscuous mode
[  287.065160][T13625] syzkaller0: entered allmulticast mode
[  288.559642][T13677] __nla_validate_parse: 12 callbacks suppressed
[  288.559656][T13677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1988'.
[  288.565739][T13677] batman_adv: batadv0: Removing interface: batadv_slave_0
[  288.569433][T13677] batman_adv: batadv0: Removing interface: batadv_slave_1
[  288.762740][T13694] netlink: 'syz.2.1994': attribute type 2 has an invalid length.
[  288.765540][T13694] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1994'.
[  288.780752][T13694] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1994'.
[  288.797202][T13695] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1993'.
[  288.820837][T13694] syzkaller0: entered promiscuous mode
[  288.822781][T13694] syzkaller0: entered allmulticast mode
[  289.765591][T13707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1998'.
[  289.981724][T13705] veth1_to_bond: left allmulticast mode
[  289.985569][T13705] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  290.072541][T13714] ip6gretap0: entered promiscuous mode
[  290.079166][T13714] macvlan0: entered allmulticast mode
[  290.081494][T13714] ip6gretap0: entered allmulticast mode
[  290.085173][T13714] ip6gretap0: left allmulticast mode
[  290.093069][T13714] ip6gretap0: left promiscuous mode
[  290.244464][T13728] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2004'.
[  290.268128][T13728] syzkaller0: entered promiscuous mode
[  290.270156][T13728] syzkaller0: entered allmulticast mode
[  291.009690][T13732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2006'.
[  291.349717][T13742] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2009'.
[  291.495985][T13762] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2014'.
[  291.574056][T13771] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2016'.
[  291.978269][T13791] policy can only be matched on NF_INET_PRE_ROUTING
[  291.978282][T13791] unable to load match
[  292.143050][T13802] netlink: 'syz.2.2023': attribute type 13 has an invalid length.
[  292.448102][T13821] syzkaller1: entered promiscuous mode
[  292.450083][T13821] syzkaller1: entered allmulticast mode
[  292.452969][T13821] nbd: nbd0 already in use
[  292.639150][T13843] sctp: [Deprecated]: syz.2.2037 (pid 13843) Use of struct sctp_assoc_value in delayed_ack socket option.
[  292.639150][T13843] Use struct sctp_sack_info instead
[  293.213062][T13873] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  294.602908][T13939] lo: Caught tx_queue_len zero misconfig
[  294.668942][T13941] __nla_validate_parse: 13 callbacks suppressed
[  294.668954][T13941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2057'.
[  294.682023][T13941] syzkaller1: entered promiscuous mode
[  294.683943][T13941] syzkaller1: entered allmulticast mode
[  294.690073][T13941] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2057'.
[  294.800771][T13946] netlink: 'syz.2.2058': attribute type 1 has an invalid length.
[  295.036253][T13976] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2067'.
[  295.419391][T13983] vxcan2: entered allmulticast mode
[  295.527356][T13987] netlink: 'syz.0.2072': attribute type 16 has an invalid length.
[  295.530764][T13987] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2072'.
[  296.627379][T14028] netlink: 'syz.0.2082': attribute type 3 has an invalid length.
[  296.632805][T14028] netlink: 'syz.0.2082': attribute type 1 has an invalid length.
[  296.647836][T14028] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2082'.
[  296.669315][T14030] trusted_key: syz.2.2083 sent an empty control message without MSG_MORE.
[  296.723633][T14036] netlink: 'syz.2.2085': attribute type 10 has an invalid length.
[  296.731146][T14036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2085'.
[  296.960683][T14062] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2091'.
[  296.964261][T14062] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2091'.
[  296.968357][T14062] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2091'.
[  296.972184][T14062] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2091'.
[  297.071381][T14074] openvswitch: netlink: Duplicate key (type 32).
[  298.760884][T14102] syzkaller0: entered promiscuous mode
[  298.763014][T14102] syzkaller0: entered allmulticast mode
[  299.228422][T14134] ip6tnl0: Caught tx_queue_len zero misconfig
[  299.240475][T14134] syzkaller1: entered promiscuous mode
[  299.242729][T14134] syzkaller1: entered allmulticast mode
[  299.936498][T14179] netlink: 'syz.2.2119': attribute type 1 has an invalid length.
[  299.947602][T14179] netlink: 'syz.2.2119': attribute type 1 has an invalid length.
[  300.002625][T14183] __nla_validate_parse: 5 callbacks suppressed
[  300.002638][T14183] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2121'.
[  300.193831][T14195] IPVS: Error connecting to the multicast addr
[  300.225764][T14202] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2126'.
[  300.281052][T14204] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2127'.
[  300.283961][T14204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2127'.
[  300.287967][T14204] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2127'.
[  300.291431][T14204] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2127'.
[  301.334013][T14243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2135'.
[  301.419723][T14244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2138'.
[  301.431382][T14244] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2138'.
[  301.435220][T14244] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2138'.
[  301.574803][T14257] dvmrp0: entered allmulticast mode
[  303.100103][T14331] netlink: 'syz.2.2166': attribute type 16 has an invalid length.
[  303.103312][T14331] netlink: 'syz.2.2166': attribute type 17 has an invalid length.
[  303.175925][T14331] IPv6: NLM_F_REPLACE set, but no existing node found!
[  303.886939][T14380] syzkaller1: entered promiscuous mode
[  303.889545][T14380] syzkaller1: entered allmulticast mode
[  304.134116][T14398] !: renamed from dummy0 (while UP)
[  304.341183][T14418] raw_sendmsg: syz.1.2188 forgot to set AF_INET. Fix it!
[  304.462473][T14436] netlink: 'syz.1.2194': attribute type 4 has an invalid length.
[  305.117602][T14480] xt_l2tp: missing protocol rule (udp|l2tpip)
[  305.260585][T14484] __nla_validate_parse: 14 callbacks suppressed
[  305.260598][T14484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2208'.
[  305.433838][T14499] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2210'.
[  305.441330][T14499] netlink: 'syz.2.2210': attribute type 16 has an invalid length.
[  305.444287][T14499] netlink: 'syz.2.2210': attribute type 17 has an invalid length.
[  305.913534][T14520] netlink: 'syz.1.2217': attribute type 10 has an invalid length.
[  305.930413][T14520] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2217'.
[  306.274214][T14549] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2224'.
[  306.281348][T14549] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2224'.
[  306.284871][T14549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2224'.
[  306.363157][T14562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2227'.
[  306.426784][T14565] syzkaller1: entered promiscuous mode
[  306.429857][T14565] syzkaller1: entered allmulticast mode
[  306.602043][T14575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2231'.
[  307.165897][T14594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2235'.
[  307.290809][T14598] ip6gre0: Caught tx_queue_len zero misconfig
[  307.293385][T14598] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) !
[  307.308432][T14600] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2237'.
[  307.472966][T14619] x_tables: ip_tables: udp match: only valid for protocol 17
[  316.779642][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  316.781909][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  336.313915][T14643] batadv_slave_0: entered promiscuous mode
[  336.318293][T14639] batadv_slave_0: left promiscuous mode
[  336.354098][T14647] netlink: 'syz.2.2248': attribute type 10 has an invalid length.
[  336.359485][T14647] __nla_validate_parse: 6 callbacks suppressed
[  336.359502][T14647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2248'.
[  336.365768][T14648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2248'.
[  336.464927][T14658] netlink: 'syz.2.2251': attribute type 10 has an invalid length.
[  336.467843][T14658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2251'.
[  336.504239][T14656] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2250'.
[  336.509460][T14656] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2250'.
[  336.513932][T14656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2250'.
[  336.613144][T14669] 8021q: adding VLAN 0 to HW filter on device team0
[  336.619491][T14669] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  337.646304][T14694] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2260'.
[  338.263088][T14736] netlink: 'syz.2.2272': attribute type 13 has an invalid length.
[  338.265899][T14736] netlink: 'syz.2.2272': attribute type 17 has an invalid length.
[  340.654398][T14736] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  340.702466][T14751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2273'.
[  340.727786][T14753] netlink: 'syz.2.2274': attribute type 16 has an invalid length.
[  340.731068][T14753] netlink: 'syz.2.2274': attribute type 17 has an invalid length.
[  340.805601][T14757] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2275'.
[  340.883806][T14760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2275'.
[  341.220251][T14785] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  341.270382][T14789] veth1_to_bond: entered allmulticast mode
[  341.321623][T14788] veth1_to_bond: left allmulticast mode
[  341.431568][T14796] netlink: 'syz.1.2286': attribute type 10 has an invalid length.
[  341.435365][T14795] __nla_validate_parse: 2 callbacks suppressed
[  341.435378][T14795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2286'.
[  342.574906][T14825] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2294'.
[  342.951340][T14836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2297'.
[  343.111073][T14843] (unnamed net_device) (uninitialized): option lacp_active: invalid value (7)
[  343.115660][T14848] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2301'.
[  343.121703][T14848] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2301'.
[  343.166092][T14848] 8021q: adding VLAN 0 to HW filter on device bond0
[  343.170435][T14848] 8021q: adding VLAN 0 to HW filter on device team0
[  343.174353][T14848] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  343.283220][T14860] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2304'.
[  343.286832][T14860] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2304'.
[  343.290759][T14860] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2304'.
[  343.294408][T14860] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2304'.
[  343.543004][T14874] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  343.642140][T14876] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20000
[  343.725573][T14884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2310'.
[  344.153213][T14905] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  344.848394][T14929] netlink: 'syz.1.2321': attribute type 10 has an invalid length.
[  344.960223][T14939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  345.004338][T14945] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  345.302520][T14971] bond4: entered promiscuous mode
[  345.305103][T14971] 8021q: adding VLAN 0 to HW filter on device bond4
[  345.417645][T14977] syzkaller0: entered promiscuous mode
[  345.420125][T14977] syzkaller0: entered allmulticast mode
[  346.512397][T14989] 8021q: VLANs not supported on ip6tnl0
[  346.705066][T15011] ip6gre0: entered allmulticast mode
[  347.735448][T15050] __nla_validate_parse: 5 callbacks suppressed
[  347.735465][T15050] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2352'.
[  347.808008][T15057] veth1_to_bond: entered promiscuous mode
[  347.815911][T15057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  347.824912][T15057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2354'.
[  347.893485][T15064] netlink: 'syz.1.2357': attribute type 39 has an invalid length.
[  348.253972][T15088] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2363'.
[  348.339351][T15099] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2365'.
[  348.344593][T15099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2365'.
[  348.384968][T15101] netlink: 'syz.0.2366': attribute type 1 has an invalid length.
[  348.422506][T15103] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  348.535432][T15109] netlink: 'syz.0.2370': attribute type 83 has an invalid length.
[  348.652893][T15127] IPv6: NLM_F_CREATE should be specified when creating new route
[  348.715621][T15131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2377'.
[  348.740246][T15131] syzkaller0: mtu less than device minimum
[  348.884251][T15142] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2381'.
[  348.923991][T15148] netlink: 'syz.2.2383': attribute type 10 has an invalid length.
[  348.927377][T15148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2383'.
[  349.868726][T15164] netlink: 'syz.2.2386': attribute type 23 has an invalid length.
[  349.957803][T15161] netlink: 'syz.0.2387': attribute type 1 has an invalid length.
[  349.960427][T15161] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2387'.
[  350.095276][T15173] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2389'.
[  351.007405][T15214] netlink: 'syz.2.2400': attribute type 10 has an invalid length.
[  351.673175][T15224] syzkaller1: entered promiscuous mode
[  351.675513][T15224] syzkaller1: entered allmulticast mode
[  351.891759][T15235] netlink: 'syz.0.2405': attribute type 10 has an invalid length.
[  352.468936][T15263] mac80211_hwsim hwsim5 ;: renamed from wlan0
[  352.612508][T15272] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  352.620170][T15273] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  352.803775][T15285] IPv6: sit2: Disabled Multicast RS
[  352.860518][T15296] netlink: 'syz.1.2419': attribute type 10 has an invalid length.
[  352.863799][T15296] __nla_validate_parse: 11 callbacks suppressed
[  352.863810][T15296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2419'.
[  352.926479][T15286] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  352.934103][T15286] netdevsim netdevsim2 netdevsim0: refused to change device tx_queue_len
[  353.180849][T15300] dvmrp8: entered allmulticast mode
[  353.272270][T15299] dvmrp8: left allmulticast mode
[  353.444247][T15306] 8021q: adding VLAN 0 to HW filter on device team0
[  353.449239][T15306] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  353.726075][T15319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2425'.
[  353.915870][T15334] netlink: 516 bytes leftover after parsing attributes in process `syz.1.2431'.
[  354.174454][T15349] bridge12: the hash_elasticity option has been deprecated and is always 16
[  354.178307][T15349] bridge12: entered allmulticast mode
[  354.183567][T15349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2434'.
[  354.186449][T15349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2434'.
[  354.266293][T15355] netlink: 14679 bytes leftover after parsing attributes in process `syz.1.2436'.
[  354.690477][T15376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2443'.
[  355.368958][T15394] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2447'.
[  355.511744][T15399] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2448'.
[  355.514647][T15399] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2448'.
[  355.924736][T15424] netlink: 'syz.1.2456': attribute type 64 has an invalid length.
[  357.049301][T15451] netlink: 'syz.1.2464': attribute type 1 has an invalid length.
[  357.532735][T15474] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  357.862184][T15492] netlink: 'syz.2.2477': attribute type 21 has an invalid length.
[  357.864697][T15492] netlink: 'syz.2.2477': attribute type 22 has an invalid length.
[  357.869574][T15492] netlink: 'syz.2.2477': attribute type 23 has an invalid length.
[  357.872126][T15492] netlink: 'syz.2.2477': attribute type 25 has an invalid length.
[  357.874787][T15492] netlink: 'syz.2.2477': attribute type 26 has an invalid length.
[  357.877821][T15492] __nla_validate_parse: 22 callbacks suppressed
[  357.877831][T15492] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2477'.
[  358.147464][T15508] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  358.189337][T15508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2480'.
[  358.514592][T15529] netlink: 'syz.0.2486': attribute type 1 has an invalid length.
[  358.517539][T15529] netlink: 'syz.0.2486': attribute type 4 has an invalid length.
[  358.520273][T15529] netlink: 15538 bytes leftover after parsing attributes in process `syz.0.2486'.
[  358.540171][ T5717] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  358.578617][T15532] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2486'.
[  358.813240][T15536] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:1696
[  359.502128][T15584] openvswitch: netlink: Message has -2 unknown bytes.
[  359.542432][T15588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2497'.
[  359.690773][T15599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2500'.
[  359.713756][T15602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2503'.
[  359.716844][T15603] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  359.721906][T15603] syzkaller0: entered promiscuous mode
[  359.725214][T15603] syzkaller0: entered allmulticast mode
[  359.785885][T15603] tipc: Resetting bearer <eth:syzkaller0>
[  359.796910][T15601] tipc: Resetting bearer <eth:syzkaller0>
[  359.822059][T15601] tipc: Disabling bearer <eth:syzkaller0>
[  360.004864][T15605] syzkaller0: entered promiscuous mode
[  360.011651][T15605] syzkaller0: entered allmulticast mode
[  360.149632][T15634] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2509'.
[  360.239963][T15638] syzkaller1: entered promiscuous mode
[  360.241944][T15638] syzkaller1: entered allmulticast mode
[  361.907953][T15674] IPv6: sit1: Disabled Multicast RS
[  361.914752][T15674] sit1: entered allmulticast mode
[  361.920455][T15676] netlink: 'syz.1.2521': attribute type 21 has an invalid length.
[  361.986761][T15680] netlink: 'syz.2.2522': attribute type 16 has an invalid length.
[  361.989714][T15680] netlink: 'syz.2.2522': attribute type 17 has an invalid length.
[  362.054410][T15682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2522'.
[  362.072149][T15680] IPv6: NLM_F_REPLACE set, but no existing node found!
[  362.130465][T15685] bridge14: entered promiscuous mode
[  362.285527][T15696] netlink: 'syz.1.2527': attribute type 1 has an invalid length.
[  362.354034][T15698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2528'.
[  363.010368][T15746] netlink: 'syz.0.2539': attribute type 16 has an invalid length.
[  363.013261][T15746] netlink: 'syz.0.2539': attribute type 17 has an invalid length.
[  363.094080][T15750] __nla_validate_parse: 6 callbacks suppressed
[  363.094096][T15750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2539'.
[  363.108108][T15746] IPv6: NLM_F_REPLACE set, but no existing node found!
[  363.108525][T15752] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2543'.
[  363.113819][T15752] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2543'.
[  363.116573][T15752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2543'.
[  363.144349][T15755] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2542'.
[  363.147435][T15755] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2542'.
[  363.150357][T15755] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2542'.
[  363.153448][T15755] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2542'.
[  363.421224][T15766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2544'.
[  363.814201][T15773] veth1_to_bond: left promiscuous mode
[  363.816322][T15773] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  363.892375][T15773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2545'.
[  363.966157][T15781] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  363.972492][T15781] syzkaller0: entered promiscuous mode
[  363.974826][T15781] syzkaller0: entered allmulticast mode
[  363.992170][T15781] tipc: Resetting bearer <eth:syzkaller0>
[  364.003438][T15780] tipc: Resetting bearer <eth:syzkaller0>
[  364.013892][T15780] tipc: Disabling bearer <eth:syzkaller0>
[  364.136741][T15788] netlink: 'syz.0.2549': attribute type 9 has an invalid length.
[  364.668008][T15804] netlink: 'syz.1.2553': attribute type 1 has an invalid length.
[  365.296777][T15861] netlink: 'syz.1.2569': attribute type 10 has an invalid length.
[  365.422286][T15868] syzkaller1: entered promiscuous mode
[  365.424134][T15868] syzkaller1: entered allmulticast mode
[  365.789276][T15879] netlink: 'syz.2.2574': attribute type 1 has an invalid length.
[  368.142802][T15953] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  369.035952][T15986] netlink: 'syz.0.2601': attribute type 16 has an invalid length.
[  369.040613][T15986] netlink: 'syz.0.2601': attribute type 17 has an invalid length.
[  369.049012][T15986] __nla_validate_parse: 19 callbacks suppressed
[  369.049025][T15986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2601'.
[  369.056225][T15986] IPv6: NLM_F_REPLACE set, but no existing node found!
[  369.133416][T15994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2604'.
[  369.307599][T16006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2607'.
[  369.560850][T16018] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2610'.
[  369.563717][T16018] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2610'.
[  369.566730][T16018] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2610'.
[  369.570106][T16018] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2610'.
[  369.770625][T16034] netlink: 'syz.1.2615': attribute type 10 has an invalid length.
[  369.774388][T16034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2615'.
[  369.881130][T16040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2617'.
[  370.021809][T16050] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2619'.
[  370.437932][T16061] xfrm0: Caught tx_queue_len zero misconfig
[  371.572946][    C0] ------------[ cut here ]------------
[  371.575777][    C0] WARNING: CPU: 0 PID: 16110 at net/mptcp/subflow.c:1520 subflow_data_ready+0x4b8/0x7e0
[  371.579690][    C0] Modules linked in:
[  371.581666][    C0] CPU: 0 UID: 0 PID: 16110 Comm: syz.1.2636 Not tainted syzkaller #0 PREEMPT(full) 
[  371.586420][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  371.589780][    C0] RIP: 0010:subflow_data_ready+0x4b8/0x7e0
[  371.591605][    C0] Code: 0f 0b 90 90 e9 bc fc ff ff e8 74 b3 60 f6 48 89 df 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 6e 0e 00 00 e8 59 b3 60 f6 90 <0f> 0b 90 e9 e5 fd ff ff 90 0f 0b 90 43 0f b6 04 2f 84 c0 0f 85 a1
[  371.597361][    C0] RSP: 0018:ffffc90000007160 EFLAGS: 00010246
[  371.599404][    C0] RAX: ffffffff8b5efa37 RBX: ffff888011bfe800 RCX: ffff888107c45640
[  371.601911][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  371.604385][    C0] RBP: 0000000000000000 R08: ffff88811c40d137 R09: 1ffff11023881a26
[  371.606857][    C0] R10: dffffc0000000000 R11: ffffed1023881a27 R12: 0000000000000000
[  371.609692][    C0] R13: dffffc0000000000 R14: ffff88811c40c800 R15: 0000000000000000
[  371.612140][    C0] FS:  00007fc7382116c0(0000) GS:ffff8880b863d000(0000) knlGS:0000000000000000
[  371.614894][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  371.616890][    C0] CR2: 0000200000005000 CR3: 0000000040106000 CR4: 00000000000006f0
[  371.619651][    C0] Call Trace:
[  371.621017][    C0]  <IRQ>
[  371.622271][    C0]  tcp_data_queue+0x54b/0x6450
[  371.624464][    C0]  ? __pfx_tcp_data_queue+0x10/0x10
[  371.626493][    C0]  ? __pfx_tcp_urg+0x10/0x10
[  371.628482][    C0]  tcp_rcv_state_process+0x2396/0x43b0
[  371.630705][    C0]  ? __lock_acquire+0xab9/0xd20
[  371.632687][    C0]  ? __pfx_tcp_rcv_state_process+0x10/0x10
[  371.635056][    C0]  ? do_raw_spin_lock+0x121/0x290
[  371.637223][    C0]  tcp_v4_do_rcv+0x3f2/0xce0
[  371.639104][    C0]  tcp_v4_rcv+0x252a/0x2dc0
[  371.640953][    C0]  ? __lock_acquire+0xab9/0xd20
[  371.642907][    C0]  ? __pfx_tcp_v4_rcv+0x10/0x10
[  371.644872][    C0]  ? __pfx_tcp_v4_rcv+0x10/0x10
[  371.646842][    C0]  ip_protocol_deliver_rcu+0x221/0x440
[  371.649189][    C0]  ? ip_local_deliver_finish+0x2ae/0x6f0
[  371.651468][    C0]  ip_local_deliver_finish+0x3bb/0x6f0
[  371.653568][    C0]  NF_HOOK+0x30c/0x3a0
[  371.654848][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  371.656920][    C0]  ? NF_HOOK+0x9a/0x3a0
[  371.658743][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  371.660200][    C0]  ? ip_rcv_finish_core+0xda3/0x1c00
[  371.661838][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  371.663747][    C0]  ? skb_dst+0x4f/0xd0
[  371.665044][    C0]  ? ip_local_deliver+0x12a/0x1b0
[  371.666648][    C0]  NF_HOOK+0x30c/0x3a0
[  371.668132][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  371.670111][    C0]  ? NF_HOOK+0x9a/0x3a0
[  371.671782][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  371.673634][    C0]  ? ip_rcv_core+0x7f7/0xd00
[  371.675509][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  371.677659][    C0]  ? __pfx_ip_rcv+0x10/0x10
[  371.679505][    C0]  __netif_receive_skb+0x143/0x380
[  371.681603][    C0]  ? process_backlog+0x2d5/0x14f0
[  371.683604][    C0]  process_backlog+0x60e/0x14f0
[  371.685371][    C0]  ? __pfx_process_backlog+0x10/0x10
[  371.687490][    C0]  __napi_poll+0xc7/0x360
[  371.689264][    C0]  ? net_rx_action+0x46d/0xe30
[  371.691235][    C0]  net_rx_action+0x707/0xe30
[  371.693168][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  371.695325][    C0]  ? __pfx_sched_clock_cpu+0x10/0x10
[  371.697615][    C0]  handle_softirqs+0x286/0x870
[  371.699584][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  371.701545][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  371.703681][    C0]  __irq_exit_rcu+0xca/0x1f0
[  371.705548][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  371.707802][    C0]  irq_exit_rcu+0x9/0x30
[  371.709830][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  371.712148][    C0]  </IRQ>
[  371.713371][    C0]  <TASK>
[  371.714606][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  371.717115][    C0] RIP: 0010:netlink_attachskb+0x0/0xa60
[  371.719356][    C0] Code: 38 c1 0f 8c 73 ff ff ff 4c 89 ff e8 ea cc 81 f8 e9 66 ff ff ff 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48
[  371.727127][    C0] RSP: 0018:ffffc90002acf538 EFLAGS: 00000246
[  371.729532][    C0] RAX: ffffffff89a171df RBX: ffff888027af3030 RCX: ffff888027af3000
[  371.732689][    C0] RDX: ffffc90002acf598 RSI: ffff88810b5a5200 RDI: ffff8880417a8000
[  371.735906][    C0] RBP: ffffc90002acf630 R08: 0000000000000000 R09: ffffffff896c74a0
[  371.739181][    C0] R10: dffffc0000000000 R11: ffffed10082f50ae R12: ffff88810b5a5200
[  371.742374][    C0] R13: 0000000000000000 R14: ffff8880417a8000 R15: 0000000000000000
[  371.745554][    C0]  ? sk_filter_trim_cap+0x1d0/0x9d0
[  371.747785][    C0]  ? netlink_unicast+0x2af/0x9e0
[  371.749760][    C0]  netlink_unicast+0x2cd/0x9e0
[  371.751677][    C0]  ? __asan_memcpy+0x40/0x70
[  371.753559][    C0]  ? __pfx_netlink_unicast+0x10/0x10
[  371.755692][    C0]  netlink_rcv_skb+0x28c/0x470
[  371.757734][    C0]  ? __lock_acquire+0xab9/0xd20
[  371.759750][    C0]  ? __pfx_genl_rcv_msg+0x10/0x10
[  371.761720][    C0]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  371.763895][    C0]  ? down_read+0x1ad/0x2e0
[  371.765729][    C0]  genl_rcv+0x28/0x40
[  371.767512][    C0]  netlink_unicast+0x82f/0x9e0
[  371.769483][    C0]  ? __pfx_netlink_unicast+0x10/0x10
[  371.771633][    C0]  ? netlink_sendmsg+0x642/0xb30
[  371.773658][    C0]  ? skb_put+0x11b/0x210
[  371.775452][    C0]  netlink_sendmsg+0x805/0xb30
[  371.777643][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  371.779847][    C0]  ? aa_sock_msg_perm+0xf1/0x1d0
[  371.781889][    C0]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  371.784089][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  371.786261][    C0]  __sock_sendmsg+0x21c/0x270
[  371.788314][    C0]  ____sys_sendmsg+0x505/0x830
[  371.790121][    C0]  ? __pfx_____sys_sendmsg+0x10/0x10
[  371.795182][    C0]  ? import_iovec+0x74/0xa0
[  371.796893][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  371.801867][    C0]  ? __pfx____sys_sendmsg+0x10/0x10
[  371.806881][    C0]  ? __fget_files+0x2a/0x420
[  371.808663][    C0]  ? __fget_files+0x3a0/0x420
[  371.813505][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  371.818538][    C0]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  371.820578][    C0]  ? rcu_is_watching+0x15/0xb0
[  371.825459][    C0]  ? do_syscall_64+0xbe/0x3b0
[  371.830391][    C0]  do_syscall_64+0xfa/0x3b0
[  371.832090][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.837576][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  371.842946][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.848331][    C0] RIP: 0033:0x7fc73738ec29
[  371.849997][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  371.859902][    C0] RSP: 002b:00007fc738211038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  371.863762][    C0] RAX: ffffffffffffffda RBX: 00007fc7375d5fa0 RCX: 00007fc73738ec29
[  371.866937][    C0] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 000000000000000b
[  371.870200][    C0] RBP: 00007fc737411e41 R08: 0000000000000000 R09: 0000000000000000
[  371.873355][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  371.876371][    C0] R13: 00007fc7375d6038 R14: 00007fc7375d5fa0 R15: 00007ffef42503d8
[  371.879536][    C0]  </TASK>
[  371.880756][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  371.883633][    C0] CPU: 0 UID: 0 PID: 16110 Comm: syz.1.2636 Not tainted syzkaller #0 PREEMPT(full) 
[  371.887343][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  371.891269][    C0] Call Trace:
[  371.892616][    C0]  <IRQ>
[  371.893797][    C0]  dump_stack_lvl+0x99/0x250
[  371.895700][    C0]  ? __asan_memcpy+0x40/0x70
[  371.897590][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  371.899679][    C0]  ? __pfx__printk+0x10/0x10
[  371.901591][    C0]  vpanic+0x281/0x750
[  371.903225][    C0]  ? __pfx__printk+0x10/0x10
[  371.905095][    C0]  ? __pfx_vpanic+0x10/0x10
[  371.906837][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  371.908889][    C0]  panic+0xb9/0xc0
[  371.910443][    C0]  ? __pfx_panic+0x10/0x10
[  371.912280][    C0]  __warn+0x31b/0x4b0
[  371.913846][    C0]  ? subflow_data_ready+0x4b8/0x7e0
[  371.915931][    C0]  ? subflow_data_ready+0x4b8/0x7e0
[  371.917983][    C0]  report_bug+0x2be/0x4f0
[  371.919726][    C0]  ? subflow_data_ready+0x4b8/0x7e0
[  371.921846][    C0]  ? subflow_data_ready+0x4b8/0x7e0
[  371.923942][    C0]  ? subflow_data_ready+0x4ba/0x7e0
[  371.925993][    C0]  handle_bug+0x84/0x160
[  371.927724][    C0]  exc_invalid_op+0x1a/0x50
[  371.929583][    C0]  asm_exc_invalid_op+0x1a/0x20
[  371.931568][    C0] RIP: 0010:subflow_data_ready+0x4b8/0x7e0
[  371.933901][    C0] Code: 0f 0b 90 90 e9 bc fc ff ff e8 74 b3 60 f6 48 89 df 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 6e 0e 00 00 e8 59 b3 60 f6 90 <0f> 0b 90 e9 e5 fd ff ff 90 0f 0b 90 43 0f b6 04 2f 84 c0 0f 85 a1
[  371.941507][    C0] RSP: 0018:ffffc90000007160 EFLAGS: 00010246
[  371.943831][    C0] RAX: ffffffff8b5efa37 RBX: ffff888011bfe800 RCX: ffff888107c45640
[  371.946965][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  371.950159][    C0] RBP: 0000000000000000 R08: ffff88811c40d137 R09: 1ffff11023881a26
[  371.953343][    C0] R10: dffffc0000000000 R11: ffffed1023881a27 R12: 0000000000000000
[  371.956535][    C0] R13: dffffc0000000000 R14: ffff88811c40c800 R15: 0000000000000000
[  371.959567][    C0]  ? subflow_data_ready+0x4b7/0x7e0
[  371.961693][    C0]  tcp_data_queue+0x54b/0x6450
[  371.963595][    C0]  ? __pfx_tcp_data_queue+0x10/0x10
[  371.965741][    C0]  ? __pfx_tcp_urg+0x10/0x10
[  371.967704][    C0]  tcp_rcv_state_process+0x2396/0x43b0
[  371.969887][    C0]  ? __lock_acquire+0xab9/0xd20
[  371.971864][    C0]  ? __pfx_tcp_rcv_state_process+0x10/0x10
[  371.974225][    C0]  ? do_raw_spin_lock+0x121/0x290
[  371.976265][    C0]  tcp_v4_do_rcv+0x3f2/0xce0
[  371.978160][    C0]  tcp_v4_rcv+0x252a/0x2dc0
[  371.979987][    C0]  ? __lock_acquire+0xab9/0xd20
[  371.981963][    C0]  ? __pfx_tcp_v4_rcv+0x10/0x10
[  371.983905][    C0]  ? __pfx_tcp_v4_rcv+0x10/0x10
[  371.985829][    C0]  ip_protocol_deliver_rcu+0x221/0x440
[  371.988010][    C0]  ? ip_local_deliver_finish+0x2ae/0x6f0
[  371.990266][    C0]  ip_local_deliver_finish+0x3bb/0x6f0
[  371.992398][    C0]  NF_HOOK+0x30c/0x3a0
[  371.994068][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  371.996512][    C0]  ? NF_HOOK+0x9a/0x3a0
[  371.998170][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  371.999966][    C0]  ? ip_rcv_finish_core+0xda3/0x1c00
[  372.002063][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  372.004524][    C0]  ? skb_dst+0x4f/0xd0
[  372.006145][    C0]  ? ip_local_deliver+0x12a/0x1b0
[  372.008124][    C0]  NF_HOOK+0x30c/0x3a0
[  372.009725][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  372.011713][    C0]  ? NF_HOOK+0x9a/0x3a0
[  372.013316][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  372.015076][    C0]  ? ip_rcv_core+0x7f7/0xd00
[  372.016808][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  372.018758][    C0]  ? __pfx_ip_rcv+0x10/0x10
[  372.020550][    C0]  __netif_receive_skb+0x143/0x380
[  372.022504][    C0]  ? process_backlog+0x2d5/0x14f0
[  372.024531][    C0]  process_backlog+0x60e/0x14f0
[  372.026421][    C0]  ? __pfx_process_backlog+0x10/0x10
[  372.028489][    C0]  __napi_poll+0xc7/0x360
[  372.030136][    C0]  ? net_rx_action+0x46d/0xe30
[  372.031946][    C0]  net_rx_action+0x707/0xe30
[  372.033796][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  372.035803][    C0]  ? __pfx_sched_clock_cpu+0x10/0x10
[  372.037938][    C0]  handle_softirqs+0x286/0x870
[  372.039877][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  372.041802][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  372.043905][    C0]  __irq_exit_rcu+0xca/0x1f0
[  372.045729][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  372.047822][    C0]  irq_exit_rcu+0x9/0x30
[  372.049540][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  372.051777][    C0]  </IRQ>
[  372.052976][    C0]  <TASK>
[  372.054198][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  372.056606][    C0] RIP: 0010:netlink_attachskb+0x0/0xa60
[  372.058690][    C0] Code: 38 c1 0f 8c 73 ff ff ff 4c 89 ff e8 ea cc 81 f8 e9 66 ff ff ff 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48
[  372.065940][    C0] RSP: 0018:ffffc90002acf538 EFLAGS: 00000246
[  372.068385][    C0] RAX: ffffffff89a171df RBX: ffff888027af3030 RCX: ffff888027af3000
[  372.071500][    C0] RDX: ffffc90002acf598 RSI: ffff88810b5a5200 RDI: ffff8880417a8000
[  372.074657][    C0] RBP: ffffc90002acf630 R08: 0000000000000000 R09: ffffffff896c74a0
[  372.077813][    C0] R10: dffffc0000000000 R11: ffffed10082f50ae R12: ffff88810b5a5200
[  372.080951][    C0] R13: 0000000000000000 R14: ffff8880417a8000 R15: 0000000000000000
[  372.084106][    C0]  ? sk_filter_trim_cap+0x1d0/0x9d0
[  372.086205][    C0]  ? netlink_unicast+0x2af/0x9e0
[  372.088204][    C0]  netlink_unicast+0x2cd/0x9e0
[  372.090002][    C0]  ? __asan_memcpy+0x40/0x70
[  372.091757][    C0]  ? __pfx_netlink_unicast+0x10/0x10
[  372.093840][    C0]  netlink_rcv_skb+0x28c/0x470
[  372.095748][    C0]  ? __lock_acquire+0xab9/0xd20
[  372.097739][    C0]  ? __pfx_genl_rcv_msg+0x10/0x10
[  372.099701][    C0]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  372.101710][    C0]  ? down_read+0x1ad/0x2e0
[  372.103519][    C0]  genl_rcv+0x28/0x40
[  372.105113][    C0]  netlink_unicast+0x82f/0x9e0
[  372.106957][    C0]  ? __pfx_netlink_unicast+0x10/0x10
[  372.109003][    C0]  ? netlink_sendmsg+0x642/0xb30
[  372.110956][    C0]  ? skb_put+0x11b/0x210
[  372.112647][    C0]  netlink_sendmsg+0x805/0xb30
[  372.114508][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  372.116629][    C0]  ? aa_sock_msg_perm+0xf1/0x1d0
[  372.118545][    C0]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  372.120646][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  372.122751][    C0]  __sock_sendmsg+0x21c/0x270
[  372.124647][    C0]  ____sys_sendmsg+0x505/0x830
[  372.126530][    C0]  ? __pfx_____sys_sendmsg+0x10/0x10
[  372.128662][    C0]  ? import_iovec+0x74/0xa0
[  372.130442][    C0]  ___sys_sendmsg+0x21f/0x2a0
[  372.132284][    C0]  ? __pfx____sys_sendmsg+0x10/0x10
[  372.134380][    C0]  ? __fget_files+0x2a/0x420
[  372.136230][    C0]  ? __fget_files+0x3a0/0x420
[  372.138067][    C0]  __x64_sys_sendmsg+0x19b/0x260
[  372.139985][    C0]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  372.142072][    C0]  ? rcu_is_watching+0x15/0xb0
[  372.143998][    C0]  ? do_syscall_64+0xbe/0x3b0
[  372.145901][    C0]  do_syscall_64+0xfa/0x3b0
[  372.147694][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.150088][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  372.152460][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.154808][    C0] RIP: 0033:0x7fc73738ec29
[  372.156645][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  372.164134][    C0] RSP: 002b:00007fc738211038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  372.167516][    C0] RAX: ffffffffffffffda RBX: 00007fc7375d5fa0 RCX: 00007fc73738ec29
[  372.170543][    C0] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 000000000000000b
[  372.173620][    C0] RBP: 00007fc737411e41 R08: 0000000000000000 R09: 0000000000000000
[  372.176773][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  372.179879][    C0] R13: 00007fc7375d6038 R14: 00007fc7375d5fa0 R15: 00007ffef42503d8
[  372.182929][    C0]  </TASK>
[  372.184878][    C0] Kernel Offset: disabled
[  372.186673][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:28:04  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000006910
R8 =ffff88801f240237 R9 =1ffff11003e48046 R10=dffffc0000000000 R11=ffffffff854fac30
R12=dffffc0000000000 R13=ffffffff99ad78ef R14=ffffffff99dcc480 R15=0000000000000000
RIP=ffffffff854facac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc7382116c0 ffffffff 00c00000
GS =0000 ffff8880b863d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000005000 CR3=0000000040106000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fc7375a7498 00007fc7375a7470 XMM03=00007fc7375a74a8 00007fc7375a74a0
XMM04=00007fc73810d100 00007fc7375a7460 XMM05=00007fc7375a7478 00007fc7375a74c0
XMM06=00007fc7375a74b8 00007fc7375a74b0 XMM07=00007fc7375a74a8 00007fc7375a74a0
XMM08=0000000000000000 00007fc737412f0f XMM09=0000000000000000 00007fc737412fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=86c7aefd40d48f00 RBX=0000000000000000 RCX=86c7aefd40d48f00 RDX=0000000000000000
RSI=ffffffff8db9e79c RDI=ffffffff8be33f00 RBP=ffffffff825d8081 RSP=ffffc900042af5a0
R8 =0000000000000000 R9 =ffffffff825d8081 R10=dffffc0000000000 R11=ffffed1023c6450f
R12=0000000000000000 R13=ffff8881000e0188 R14=0000000000000001 R15=0000000000000246
RIP=ffffffff819d5ea5 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00100
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00100
FS =0000 00007eff1a1f46c0 ffffffff 00c00100
GS =0000 ffff8881a3c3d000 ffffffff 00c00100
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000083 CR3=0000000113568000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007eff19412e7b
XMM06=0000000000000000 00007eff19412e75 XMM07=0000000000000000 00007eff19412e89
XMM08=0000000000000000 00007eff19412f0f XMM09=0000000000000000 00007eff19412fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
