last executing test programs:

3.121065614s ago: executing program 0 (id=3362):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a200000001a0a05000000000000000000070000000c0004"], 0x48}}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x93}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$inet(0x10, 0x3, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xd0}, 0x4048010)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee11, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x48}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xf}]}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x48804}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'erspan0\x00', r6, 0x1, 0x1, 0xfffffff9, 0xc852, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x67, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0x55, 0x3, 0x0, [{@broadcast, 0x8}]}, @lsrr={0x83, 0x2b, 0xc4, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x36}, @broadcast, @multicast2, @remote, @broadcast, @private=0xa010101, @remote, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}, @end]}}}}})
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
r9 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r9, 0x114, 0xa, 0x0, 0x4)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$inet6(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0xa, 0x4e24, 0x9, @private2, 0x8}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000340)="96f7752c71218af17b5baddc547d06e21c6018e4b12cd74dd0d3219cd6a7888146d966351f9fd1057ae717961c87cd81d8c5f54d4dcdccdb96a98d53ce8e035d0c7e673ec043dfbc133b804a3a872594ce545a516d0de4ff2b9d83faad623bb33d0b7b3f17f069d2896555f555c01dc579f017f0a0c860802375251497ee7a364fb5bdbfea377975b9dc9f6b9d60812a51cf24529679bc75162732df7e1d9b37afa6ef4a796c8a67774ee318c36f314332145d6b69e99777365f354195", 0xbd}], 0x1}, 0x4000000)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r11, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)

2.241844993s ago: executing program 0 (id=3367):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x4c, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f3030a7d3f408004a00003c0003000302059078ac1414000a0101004408f57000007fff070909b173380000010000004e240000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6100000090780003"], 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, <r2=>0x0, <r3=>0x0}, &(0x7f0000000400)=0xc)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a"], 0x1c}}, 0x20000086)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
r7 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)={0x24, 0x3a, 0x4, 0x70bd27, 0x25dfdbfd, "", [@typed={0xc, 0x58, 0x0, 0x0, @u64}, @typed={0x5, 0xc1, 0x0, 0x0, @str='\x00'}]}, 0x24}], 0x1, &(0x7f0000000480)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2, r3}}}, @rights={{0x30, 0x1, 0x1, [r4, r5, 0xffffffffffffffff, 0xffffffffffffffff, r6, 0xffffffffffffffff, r7, 0xffffffffffffffff]}}], 0x70, 0x50}, 0x200400c4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="34000000110001000000000000000000100003400c"], 0x34}], 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r9)
r10 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r10, 0x0)
r11 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r12 = accept(r10, 0x0, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="d4d9dfdb6510fba808001b"], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0)

1.432388147s ago: executing program 0 (id=3380):
r0 = socket$inet6(0xa, 0x4, 0x401)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f00000004c0)=0x9, 0x4)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$sock(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a)
r5 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000340)=0xffffffffffffff40, 0x4)
bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4a20, @multicast1}, 0x10)
sendfile(r3, r4, 0x0, 0xffffffff000)

703.001075ms ago: executing program 2 (id=3386):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='pids.events\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', r1, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3) (async)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x5, 0x20000000, 0x4)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e1f, 0x0, @empty, 0x5}, 0x1c) (async)
listen(r3, 0x9) (async)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f00000003c0), &(0x7f0000000400))
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000c547"], 0x4) (async)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r8, &(0x7f0000000040), 0x10) (async)
sendmsg$can_bcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r6, @ANYRES64], 0x80}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000010) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) (async)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r10, <r12=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)=r11}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r12], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x76, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r13}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8=r9], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

610.396803ms ago: executing program 2 (id=3387):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500001c000000000067907800000000e00000010f00907880010002d2673cb8cf70b3a0d192b73a3d54bab707dcdd56db011707763cc369098476ee3797c2a058e4a8167de1077e225dceeb20c735639a17427156bc5348d939ffb2dec57c51e02d3e088f81f56ad7c01fdeaed9dc999074a3c0a8fcdf3616e6b908db3911c1a68fa4e1405c98ccb4c71e60d9a03dc0fca01341574dd1b3d55a5a42edaea924979e5ae882e0c82d"], 0x0) (async)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r1, 0x10c, 0x5, &(0x7f0000000140), 0x0) (async, rerun: 32)
close(r0) (rerun: 32)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async)
listen(r0, 0x9) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffff0280080001"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
r3 = socket(0x15, 0x5, 0x0)
setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) (async)
recvmsg(r3, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407006}, 0x104) (async)
setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000440)=0x5d, 0x4)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000500)={'team0\x00', <r5=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@getchain={0x2c, 0x66, 0x10, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff3, 0xfff2}, {0x0, 0xfff3}, {0xffff, 0x4}}, [{0x8, 0xb, 0x10000}]}, 0x2c}}, 0x86cc4d1a9bbb94f) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106) (async)
splice(r0, &(0x7f00000000c0)=0x2, r1, &(0x7f00000001c0)=0xc, 0x8000000000000001, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'veth0_to_bridge\x00', 0x1000})
sendmmsg(r6, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) (async)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) (async, rerun: 32)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000080", @ANYRES16=r8, @ANYBLOB="01002cbd7000ffdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) (rerun: 32)

609.961809ms ago: executing program 2 (id=3388):
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='.']) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (rerun: 64)
connect$bt_l2cap(r0, 0x0, 0x0)
syz_emit_ethernet(0x36, 0x0, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0) (async, rerun: 64)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 64)
r3 = socket$netlink(0x10, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00'}) (async, rerun: 32)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="61000000000000001400127909000100626f6e64000000000400028008000a000a537221911246e54125440f0e176ab4ca1a3f3f14709d87b93726854261429268ff0cbf8142a105d84437", @ANYRESHEX=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20000881}, 0x4000) (rerun: 32)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1, 0x0, 0x0, 0x20000000}}) (async)
pipe(&(0x7f0000000040)) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[], 0x48) (async)
syz_emit_ethernet(0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6008008000383a00fc020000000000000000000000000000ff020000000000000000000000000001020090780000000a608cb0356c3618932a6cc9ca2a943e21739a2b00002f0000000000000000000000fffffffffffffe8000000000000000"], 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 32)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (rerun: 32)
mmap(&(0x7f0000690000/0x3000)=nil, 0x3000, 0x2000003, 0x10010, r5, 0x0) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r6, 0x0) (async)
r7 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r7, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) (async)
bind$inet(r7, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async, rerun: 64)
r8 = socket(0x15, 0x5, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0)
sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
getsockopt(r8, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) (async, rerun: 32)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x1000004, 0x11, r6, 0x51f20000) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)

562.002597ms ago: executing program 2 (id=3389):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
close(r0) (async)
close(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0feff00850000000f00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0feff00850000000f00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20)
sendmmsg$inet6(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="16", 0x1}], 0x1}}], 0x2, 0x4000050)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000000000000000000000010000850000002100000000020000000000000100000000da"], 0x0, 0x52, 0x0, 0x1}, 0x28)
listen(r0, 0x9) (async)
listen(r0, 0x9)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000c80)='ns/ipc\x00')
ioctl$NS_GET_USERNS(r5, 0xb701, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
sendmmsg(r6, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) (async)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1805000000fe0300000000000000000085000000c40000009500"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="01002cbd7000ffdbdf25040000004ec1ba92d7c60a0a36639c98efe3dd6da2aeda2c9c2cae205937cac8c3d97cfa20e671935d3e97a35773e040684fce182c0f596177f09465ebff6abae6eb6594aba4628af5ffeaf65681afc8936908976735ef75469487c0f84ce6d4b5f81ec0443fa1bed8"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)
sendmsg$IPSET_CMD_GET_BYINDEX(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0xf, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4800)

561.488937ms ago: executing program 0 (id=3390):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a200000001a0a05000000000000000000070000000c0004"], 0x48}}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x93}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
r5 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0xa, 0x0, 0x4)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000001240), 0x4)
sendmsg$inet6(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0xa, 0x4e24, 0x9, @private2, 0x8}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000340)="96f7752c71218af17b5baddc547d06e21c6018e4b12cd74dd0d3219cd6a7888146d966351f9fd1057ae717961c87cd81d8c5f54d4dcdccdb96a98d53ce8e035d0c7e673ec043dfbc133b804a3a872594ce545a516d0de4ff2b9d83faad623bb33d0b7b3f17f069d2896555f555c01dc579f017f0a0c860802375251497ee7a364fb5bdbfea377975b9dc9f6b9d60812a51cf24529679bc75162732df7e1d9b37afa6ef4a796c8a67774ee318c36f314332145d6b69e99777365f354195", 0xbd}], 0x1}, 0x4000000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r8, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
shutdown(r8, 0x1)
listen(r8, 0xfff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

473.328362ms ago: executing program 2 (id=3391):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10)
sendmmsg$inet(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003c80)="f50cb6ba80e5", 0x6}], 0x1}}], 0x1, 0x8011)
recvmmsg(r0, &(0x7f000000a400)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002c80)=""/4092, 0xffc}], 0x1}, 0x800040}], 0x1, 0x10120, 0x0)
shutdown(r0, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="580000000206010200000000004965056e7edadaff000780080012400006000005e4be52e7d1f621d5c025fbe1110b9e8000010006000000050005000a00000005000400000000000900020073797a310000000012000300686173683a6e65"], 0x58}}, 0x0)
socket(0x2b, 0x80801, 0x1)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.numa_stat\x00', 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20044010)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)

363.185804ms ago: executing program 0 (id=3392):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000640)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900fbffffffffffffff00000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000000000000000300000000000000000000000000009dcade15738a9f2691ca49790b58f65a6a770eca2380d77fd3c5dbb44a3869e275c94c27b4b3e9fecf89f87b68a154"], 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="cc000000210001000000000004000000ff010000000000000000000000000001fc02000000000000000000000000000000000000000000000a00000000200000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ff0200000000000000000000000000010a010100000000000000000000000000fc0100000000000000000000000000010a0101000000000000000000000000003c000000000000000a000a002c0013007f000001001200000000000000000000e0000001000000000000000a000000"], 0xcc}}, 0x0)

361.496126ms ago: executing program 0 (id=3393):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendto$inet(r0, 0x0, 0x0, 0x20048880, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000002733d05fbca0f036bee00db7eb7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='kvm_dirty_ring_exit\x00', r2, 0x0, 0x5f7e}, 0x18)
r3 = epoll_create(0xc)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x2000})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r5, 0x1, 0xff1f, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808)

289.619399ms ago: executing program 2 (id=3394):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r1, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000100)=0xffffff01, 0x4)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="d4d9dfdb6510fba808001b"], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0)

286.923904ms ago: executing program 1 (id=3396):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000001c0)=0x4)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000004000000a00000a74000000060a010400000000000000000200000048ffff80440001800a0001006d61746368000100340002800900010074696d65000000001c00030007682c020b7b37f2eb037acc54d4077549f4e34e86f469eb08000240000000000900010073797a30010000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
read(r2, &(0x7f0000000140)=""/20, 0x14)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb0}}, 0x4040840)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000005"], 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="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"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r7, &(0x7f0000000580), &(0x7f0000000200)=""/28}, 0x20)
ppoll(&(0x7f00000000c0)=[{r6, 0x13108}], 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10)
setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f0000000240)=0x3, 0x4)
listen(r6, 0x8)
socket(0x1e, 0xa, 0x3)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0)
r9 = socket(0x10, 0x80002, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210001c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a0002", 0xff82)
sendmmsg$alg(r9, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20)

163.177095ms ago: executing program 1 (id=3397):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0) (async)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) (async)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) (async)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
r2 = socket(0x1, 0x2, 0x0) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) (async, rerun: 32)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, 0x0, 0x0) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r7, &(0x7f0000000080)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1) (async)
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20)
bind$unix(r2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) (async, rerun: 64)
recvmmsg(r2, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) (async, rerun: 64)
ppoll(&(0x7f0000000180)=[{r2, 0x64a0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6", 0x38, 0x0, 0x0, 0x0) (async, rerun: 32)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) (rerun: 32)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32)
r10 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})

92.309753ms ago: executing program 1 (id=3398):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000195"], 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0)
close(0x4)
recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r4, @ANYRES16=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe13, 0x0, 0x0, 0x10, 0xa42}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r5}, 0x10)
r6 = socket$kcm(0xa, 0x1, 0x106)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00'}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r7, 0x2000012, 0x100e, 0x7ffe, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r8, 0x8918, 0x0)
sendmsg$inet(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x20004080)

1.449676ms ago: executing program 1 (id=3399):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x20000)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x3fb, 0x400, 0x70bd29, 0x25dfdbfb, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x91}, 0x40)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000140), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r3=>0x0})
syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000600a843000142f00fe8000"/37, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800"], 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01010700000000000000010000000900030073797a31000000000900010073797a300000000050000000060a010400ffffffff0000000100000028000480240001800b0001007470726f78790000140002800800024000000002080001400000001208000b40000000000900010073797a30"], 0xc4}}, 0x0)
sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xffffffff, 0x0]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x34}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r2)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000a80)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa8f}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@mark={0xc, 0x15, {0x35075d, 0x9}}]}, 0xc4}}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="cc000000210001000000000004000000ff010000000000000000000000000001fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011"], 0xcc}}, 0x0)
socketpair(0x2, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000007679fdeeffffff7cff", @ANYRES8=r4], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x40080}, 0x0)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffdff}, {}, {0x18, 0x3, 0x2, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendto$inet6(r10, 0x0, 0x0, 0x44000, &(0x7f0000000440)={0xa, 0x4e20, 0x800, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6e}, 0x1c)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0)

684.881µs ago: executing program 1 (id=3400):
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x24004094}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40) (async)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) (async)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
socket$inet(0x2b, 0x801, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) (async)
ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) (async)
socket(0x10, 0x803, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
close(r5) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8dffff"}) (async)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt(r7, 0x6, 0x0, 0x0, &(0x7f0000000000))
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4)

0s ago: executing program 1 (id=3401):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x9)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
sendmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3d3b75a0d8b39f6486b7deef027db7c2e7badb9b2fd389257ea28e95a174bc27f527430c2c212cb1a2d7fab31e8e170eaa1bb1f942bb5497704ad348c024a201a60df08059b7d6925a8b42811075f33c72a15d92e670ecf8a420131010b524903f338c0dcf471cd1494a40b3225e9b0ff2d7a2461c0e6a00e3cc920c4d9a398494cf6122b76f7b524cc691bd33bf5f01d9e336449eb2366f3fb6e8ed02435861ef0ef00638799a48e7cdec7add5f877ad23170154c", @ANYRES16=r4, @ANYBLOB="01002cbd7000ffdbdf25040000004ec1ba92d7c60a0a36639c98efe3dd6da2aeda2c9c2cae205937cac8c3d97cfa20e671935d3e97a35773e040684fce182c0f596177f09465ebff6abae6eb6594aba4628af5ffeaf65681afc8936908976735ef75469487c0f84ce6d4b5f81ec0443fa1bed8"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)

kernel console output (not intermixed with test programs):

 Not tainted syzkaller #0 PREEMPT(full) 
[  154.564379][ T9698] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  154.564386][ T9698] Call Trace:
[  154.564391][ T9698]  <TASK>
[  154.564396][ T9698]  dump_stack_lvl+0x189/0x250
[  154.564459][ T9698]  ? __pfx_dump_stack_lvl+0x10/0x10
[  154.564472][ T9698]  ? __pfx__printk+0x10/0x10
[  154.564487][ T9698]  ? lock_release+0x4b/0x3e0
[  154.564503][ T9698]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  154.564515][ T9698]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  154.564528][ T9698]  warn_alloc+0x214/0x310
[  154.564545][ T9698]  ? __pfx_warn_alloc+0x10/0x10
[  154.564561][ T9698]  ? __get_vm_area_node+0x28f/0x300
[  154.564575][ T9698]  ? xskq_create+0xbf/0x170
[  154.564592][ T9698]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  154.564614][ T9698]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  154.564630][ T9698]  ? xsk_setsockopt+0x502/0x8d0
[  154.564644][ T9698]  ? __kasan_kmalloc+0x93/0xb0
[  154.564661][ T9698]  vmalloc_user_noprof+0xad/0xf0
[  154.564676][ T9698]  ? xskq_create+0xbf/0x170
[  154.564690][ T9698]  xskq_create+0xbf/0x170
[  154.564706][ T9698]  xsk_init_queue+0xb0/0x110
[  154.564721][ T9698]  xsk_setsockopt+0x57b/0x8d0
[  154.564734][ T9698]  ? __pfx_xsk_setsockopt+0x10/0x10
[  154.564749][ T9698]  ? __pfx_aa_sk_perm+0x10/0x10
[  154.564764][ T9698]  ? lock_release+0x4b/0x3e0
[  154.564779][ T9698]  ? __se_sys_futex+0x36f/0x400
[  154.564793][ T9698]  ? aa_sock_opt_perm+0xff/0x1b0
[  154.564804][ T9698]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  154.564816][ T9698]  ? __pfx_xsk_setsockopt+0x10/0x10
[  154.564830][ T9698]  do_sock_setsockopt+0x17c/0x1b0
[  154.564844][ T9698]  __x64_sys_setsockopt+0x13f/0x1b0
[  154.564856][ T9698]  do_syscall_64+0xfa/0x3b0
[  154.564868][ T9698]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.564886][ T9698]  ? exc_page_fault+0x9f/0xf0
[  154.564900][ T9698]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.564912][ T9698] RIP: 0033:0x7ff6d058ebe9
[  154.564922][ T9698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  154.564932][ T9698] RSP: 002b:00007ff6ce7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  154.564945][ T9698] RAX: ffffffffffffffda RBX: 00007ff6d07b5fa0 RCX: 00007ff6d058ebe9
[  154.564954][ T9698] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003
[  154.564961][ T9698] RBP: 00007ff6d0611e19 R08: 0000000000000004 R09: 0000000000000000
[  154.564968][ T9698] R10: 0000200000001780 R11: 0000000000000246 R12: 0000000000000000
[  154.564976][ T9698] R13: 00007ff6d07b6038 R14: 00007ff6d07b5fa0 R15: 00007ffe8e7c5058
[  154.564988][ T9698]  </TASK>
[  154.564993][ T9698] Mem-Info:
[  154.667041][ T9698] active_anon:5096 inactive_anon:0 isolated_anon:0
[  154.667041][ T9698]  active_file:1152 inactive_file:38246 isolated_file:0
[  154.667041][ T9698]  unevictable:1768 dirty:22 writeback:0
[  154.667041][ T9698]  slab_reclaimable:10102 slab_unreclaimable:129593
[  154.667041][ T9698]  mapped:19037 shmem:2441 pagetables:915
[  154.667041][ T9698]  sec_pagetables:0 bounce:0
[  154.667041][ T9698]  kernel_misc_reclaimable:0
[  154.667041][ T9698]  free:220514 free_pcp:18749 free_cma:0
[  154.688323][ T9698] Node 0 active_anon:12864kB inactive_anon:0kB active_file:3840kB inactive_file:145960kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37292kB dirty:68kB writeback:0kB shmem:4788kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3740kB pagetables:1700kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  154.699019][ T9698] Node 1 active_anon:7452kB inactive_anon:0kB active_file:768kB inactive_file:7024kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34572kB dirty:20kB writeback:0kB shmem:4976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7884kB pagetables:1960kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  154.709284][ T9698] Node 0 DMA free:11264kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  154.721778][ T9698] lowmem_reserve[]: 0 811 811 811 811
[  154.724649][ T9698] Node 0 DMA32 free:295764kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12864kB inactive_anon:0kB active_file:3840kB inactive_file:145960kB unevictable:3536kB writepending:68kB present:1556484kB managed:830928kB mlocked:0kB bounce:0kB free_pcp:32976kB local_pcp:15056kB free_cma:0kB
[  154.738528][ T9698] lowmem_reserve[]: 0 0 0 0 0
[  154.746483][ T9698] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  154.757004][ T9698] lowmem_reserve[]: 0 0 854 854 854
[  154.759645][ T9698] Node 1 Normal free:116412kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7520kB inactive_anon:0kB active_file:768kB inactive_file:7024kB unevictable:3536kB writepending:20kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:43068kB local_pcp:17636kB free_cma:0kB
[  154.770720][ T9698] lowmem_reserve[]: 0 0 0 0 0
[  154.772870][ T9698] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (UM) = 11264kB
[  154.778156][ T9698] Node 0 DMA32: 142*4kB (ME) 49*8kB (ME) 89*16kB (UME) 138*32kB (UME) 91*64kB (UME) 94*128kB (UME) 51*256kB (UM) 24*512kB (UM) 10*1024kB (UM) 3*2048kB (M) 56*4096kB (U) = 295760kB
[  154.785975][ T9698] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  154.792584][ T9698] Node 1 Normal: 3*4kB (UME) 507*8kB (UE) 54*16kB (UE) 230*32kB (UM) 32*64kB (U) 39*128kB (U) 9*256kB (UM) 7*512kB (UME) 5*1024kB (U) 10*2048kB (UME) 16*4096kB (M) = 116356kB
[  154.798283][ T9698] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB
[  154.801473][ T9698] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  154.804570][ T9698] 41839 total pagecache pages
[  154.806129][ T9698] 0 pages in swap cache
[  154.807544][ T9698] Free swap  = 124996kB
[  154.808923][ T9698] Total swap = 124996kB
[  154.810354][ T9698] 786301 pages RAM
[  154.812243][ T9698] 0 pages HighMem/MovableOnly
[  154.813855][ T9698] 241337 pages reserved
[  154.815252][ T9698] 0 pages cma reserved
[  154.892243][ T9717] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  154.895917][ T9717] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  156.529332][ T9781] netlink: 'syz.2.1015': attribute type 5 has an invalid length.
[  157.531500][ T9806] __nla_validate_parse: 9 callbacks suppressed
[  157.531510][ T9806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1022'.
[  157.897299][ T9824] ip6tnl0: entered promiscuous mode
[  158.464768][ T9830] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  158.723440][ T9823] ip6tnl0: left promiscuous mode
[  158.966097][ T9845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1033'.
[  158.970156][ T9845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1033'.
[  158.999135][ T9849] openvswitch: netlink: Missing key (keys=40, expected=80)
[  159.053099][ T9856] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1036'.
[  159.057824][ T9856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1036'.
[  159.297110][ T9870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1041'.
[  159.300187][ T9870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1041'.
[  159.303481][ T9870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1041'.
[  159.306824][ T9870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1041'.
[  159.309856][ T9870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1041'.
[  164.988464][T10006] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  165.000697][T10006] syzkaller1: entered promiscuous mode
[  165.008119][T10006] syzkaller1: entered allmulticast mode
[  165.076568][  T217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.079640][  T217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.176424][T10022] __nla_validate_parse: 7 callbacks suppressed
[  165.176434][T10022] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1079'.
[  165.188191][T10022] trusted_key: syz.2.1079 sent an empty control message without MSG_MORE.
[  165.211247][T10022] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  165.944314][T10030] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1081'.
[  165.993130][T10039] netlink: 'syz.1.1083': attribute type 1 has an invalid length.
[  166.004251][T10039] 8021q: adding VLAN 0 to HW filter on device bond2
[  166.017318][T10039] 8021q: adding VLAN 0 to HW filter on device bond2
[  166.019633][T10039] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  166.025935][T10039] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  166.068317][T10067] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1083'.
[  166.077947][T10067] 8021q: adding VLAN 0 to HW filter on device bond2
[  166.127535][T10080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1094'.
[  166.130484][T10080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1094'.
[  167.043364][T10102] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1097'.
[  167.049864][T10104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1099'.
[  167.115829][T10115] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1099'.
[  167.155420][T10122] bond0: option arp_validate: invalid value (18446744073491447809)
[  167.183877][T10122] netlink: 'syz.0.1102': attribute type 1 has an invalid length.
[  167.186819][T10122] netlink: 'syz.0.1102': attribute type 2 has an invalid length.
[  167.189964][T10122] netlink: 'syz.0.1102': attribute type 1 has an invalid length.
[  167.193681][T10122] netlink: 'syz.0.1102': attribute type 2 has an invalid length.
[  167.235744][T10128] vxcan1: entered allmulticast mode
[  167.237847][T10128] vxcan1: left allmulticast mode
[  167.275976][T10129] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1103'.
[  167.356914][T10134] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1106'.
[  167.639461][T10167] netlink: 'syz.2.1117': attribute type 1 has an invalid length.
[  167.648601][T10167] 8021q: adding VLAN 0 to HW filter on device bond2
[  167.656531][T10167] veth3: entered promiscuous mode
[  167.659867][T10167] bond2: (slave veth3): Enslaving as an active interface with a down link
[  167.664659][  T217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.667335][  T217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.871808][T10174] netlink: 'syz.2.1119': attribute type 3 has an invalid length.
[  167.965453][T10195] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  168.789404][T10253] IPVS: set_ctl: invalid protocol: 50 172.20.20.66:20001
[  169.011678][T10281] netlink: 'syz.2.1149': attribute type 5 has an invalid length.
[  169.027795][T10283] vxcan1: entered allmulticast mode
[  169.029642][T10284] vxcan1: left allmulticast mode
[  169.065515][T10292] vxcan1: entered allmulticast mode
[  169.067546][T10292] vxcan1: left allmulticast mode
[  169.972988][T10315] netlink: 'syz.2.1160': attribute type 1 has an invalid length.
[  169.995675][T10317] tipc: Enabling of bearer <et:g> rejected, media not registered
[  170.341064][ T5235] Bluetooth: hci2: command 0x0406 tx timeout
[  170.687014][T10342] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20004
[  170.811935][T10347] __nla_validate_parse: 24 callbacks suppressed
[  170.811946][T10347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1168'.
[  170.816996][T10347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1168'.
[  170.821968][T10347] sctp: [Deprecated]: syz.0.1168 (pid 10347) Use of struct sctp_assoc_value in delayed_ack socket option.
[  170.821968][T10347] Use struct sctp_sack_info instead
[  170.928394][T10350] netlink: 'syz.0.1168': attribute type 1 has an invalid length.
[  171.049350][T10364] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1172'.
[  171.053331][T10364] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1172'.
[  171.056577][T10364] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1172'.
[  171.060373][T10364] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1172'.
[  171.122434][T10371] netlink: 'syz.2.1174': attribute type 10 has an invalid length.
[  171.125734][T10371] 8021q: adding VLAN 0 to HW filter on device bond0
[  171.128675][T10371] team0: Port device bond0 added
[  171.185395][T10372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1174'.
[  171.188289][T10372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1174'.
[  171.191356][T10372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1174'.
[  171.195010][T10372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1174'.
[  171.773447][T10382] syzkaller1: entered promiscuous mode
[  171.775404][T10382] syzkaller1: entered allmulticast mode
[  172.104343][T10413] netlink: 'syz.2.1187': attribute type 3 has an invalid length.
[  172.620765][T10458] vxcan1: entered allmulticast mode
[  172.623864][T10458] vxcan1: left allmulticast mode
[  172.678308][T10461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  173.810608][T10536] vxcan2: entered promiscuous mode
[  173.971506][T10544] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  174.091099][ T5853] Bluetooth: hci1: command 0x0405 tx timeout
[  174.112850][T10564] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  174.506528][T10615] siw: device registration error -23
[  174.514521][T10615] Driver unsupported XDP return value 0 on prog  (id 478) dev N/A, expect packet loss!
[  174.856146][T10641] netlink: 'syz.2.1251': attribute type 1 has an invalid length.
[  174.887870][T10643] netlink: 'syz.1.1252': attribute type 2 has an invalid length.
[  174.925155][T10650] netlink: 'syz.2.1253': attribute type 26 has an invalid length.
[  174.995318][T10656] sctp: [Deprecated]: syz.2.1254 (pid 10656) Use of struct sctp_assoc_value in delayed_ack socket option.
[  174.995318][T10656] Use struct sctp_sack_info instead
[  175.114504][T10671] rdma_rxe: rxe_newlink: failed to add ipvlan0
[  175.136962][T10674] team0: Port device bond0 removed
[  175.139336][T10674] bond2: (slave veth3): Releasing active interface
[  175.451467][ T1089] wlan0: Trigger new scan to find an IBSS to join
[  175.750410][T10681] IPv6: sit1: Disabled Multicast RS
[  175.754789][T10681] sit1: entered allmulticast mode
[  175.983795][T10687] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20000
[  176.002104][T10689] __nla_validate_parse: 56 callbacks suppressed
[  176.002115][T10689] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1265'.
[  176.010293][T10689] bond0: entered promiscuous mode
[  176.013073][T10689] bond0: left promiscuous mode
[  176.098826][T10695] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1267'.
[  176.181100][ T5853] Bluetooth: hci1: command 0x0405 tx timeout
[  176.194673][T10715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  176.786555][T10740] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1276'.
[  176.898946][T10745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1280'.
[  176.958704][T10753] sit1: left allmulticast mode
[  177.068172][T10760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1282'.
[  177.177399][T10773] netlink: 'syz.0.1284': attribute type 4 has an invalid length.
[  177.183175][T10773] netlink: 'syz.0.1284': attribute type 4 has an invalid length.
[  177.189027][T10773] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1284'.
[  178.226271][T10804] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1294'.
[  178.286800][T10813] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1297'.
[  178.294961][T10813] netlink: 'syz.2.1297': attribute type 1 has an invalid length.
[  178.311880][T10813] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1297'.
[  178.349370][T10820] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1299'.
[  178.362025][T10820] syzkaller1: entered promiscuous mode
[  178.363956][T10820] syzkaller1: entered allmulticast mode
[  178.501201][   T26] wlan0: Trigger new scan to find an IBSS to join
[  179.740840][T10878] delete_channel: no stack
[  180.817070][T10916] IPVS: persistence engine module ip_vs_pe_ not found
[  180.818241][T10919] delete_channel: no stack
[  180.997404][T10939] netlink: 'syz.2.1335': attribute type 10 has an invalid length.
[  181.059525][T10945] __nla_validate_parse: 13 callbacks suppressed
[  181.059537][T10945] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1336'.
[  181.065815][T10945] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1336'.
[  181.070456][T10945] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1336'.
[  181.074505][T10945] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1336'.
[  181.095914][T10949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1339'.
[  181.929505][T10975] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  182.133263][T10982] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.136396][T10982] syzkaller0: entered promiscuous mode
[  182.138627][T10982] syzkaller0: entered allmulticast mode
[  182.145336][T10982] tipc: Resetting bearer <eth:syzkaller0>
[  182.215465][T10981] tipc: Resetting bearer <eth:syzkaller0>
[  182.219183][T10981] tipc: Disabling bearer <eth:syzkaller0>
[  182.638948][T11007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1356'.
[  182.739930][T11024] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1360'.
[  182.766156][T11029] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1361'.
[  182.769245][T11029] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1361'.
[  182.773145][T11029] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1361'.
[  183.592995][T11064] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  183.825206][T11066] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20001
[  184.397022][T11104] IPVS: length: 176 != 8
[  184.758677][T11130] netlink: 'syz.0.1390': attribute type 2 has an invalid length.
[  184.884880][T11140] netlink: 'syz.0.1394': attribute type 1 has an invalid length.
[  185.371546][T11173] netlink: 'syz.2.1407': attribute type 5 has an invalid length.
[  186.535904][T11217] __nla_validate_parse: 17 callbacks suppressed
[  186.535913][T11217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1419'.
[  186.541948][T11217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1419'.
[  186.706410][T11223] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1421'.
[  186.964592][T11249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1429'.
[  187.016158][T11251] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1429'.
[  187.063701][T11256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1430'.
[  187.258687][T11280] syzkaller1: entered allmulticast mode
[  187.403751][ T4539] IPVS: starting estimator thread 0...
[  187.410313][T11286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  187.501279][T11287] IPVS: using max 134 ests per chain, 321600 per kthread
[  187.566311][T11296] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1440'.
[  187.576692][T11296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1440'.
[  187.579760][T11296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1440'.
[  187.583585][T11296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1440'.
[  188.143681][T11321] netlink: 'syz.0.1446': attribute type 1 has an invalid length.
[  188.587392][T11328] veth3: left promiscuous mode
[  188.622892][T11337] batadv_slave_1: entered promiscuous mode
[  188.701385][T11336] batadv_slave_1: left promiscuous mode
[  188.978157][T11371] netlink: 'syz.2.1461': attribute type 1 has an invalid length.
[  189.004061][T11371] bond4: (slave vti0): The slave device specified does not support setting the MAC address
[  189.008300][T11371] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  189.013625][T11371] bond4: (slave vti0): making interface the new active one
[  189.017099][T11371] bond4: (slave vti0): Enslaving as an active interface with an up link
[  189.054766][T11376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  189.122294][T11379] netlink: 'syz.1.1463': attribute type 1 has an invalid length.
[  189.694461][T11409] IPVS: Scheduler module ip_vs_sip not found
[  189.763299][T11420] 0: renamed from hsr0
[  189.765621][T11420] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  189.769048][T11420] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  189.773091][T11420] 0: entered allmulticast mode
[  189.775176][T11420] hsr_slave_0: entered allmulticast mode
[  189.777722][T11420] hsr_slave_1: entered allmulticast mode
[  189.781134][T11420] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  191.809591][T11478] __nla_validate_parse: 18 callbacks suppressed
[  191.809601][T11478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1489'.
[  191.844101][T11480] IPVS: set_ctl: invalid protocol: 135 100.1.1.2:20002
[  191.860592][T11484] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  191.881832][T11480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1491'.
[  192.037102][T11496] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1495'.
[  192.040834][T11496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1495'.
[  192.045126][T11496] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1495'.
[  192.049082][T11496] netlink: 'syz.2.1495': attribute type 3 has an invalid length.
[  192.051807][T11496] netlink: 'syz.2.1495': attribute type 2 has an invalid length.
[  192.054386][T11496] netlink: 31 bytes leftover after parsing attributes in process `syz.2.1495'.
[  192.057452][T11496] netlink: 'syz.2.1495': attribute type 2 has an invalid length.
[  192.524912][T11504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1496'.
[  192.547770][T11511] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1497'.
[  192.582631][T11515] netlink: 'syz.0.1499': attribute type 4 has an invalid length.
[  192.650690][T11521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1500'.
[  192.657624][T11521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1500'.
[  192.661012][T11521] nbd: couldn't find a device at index 65546
[  193.641723][T11594] netlink: 'syz.0.1519': attribute type 16 has an invalid length.
[  193.644607][T11594] netlink: 'syz.0.1519': attribute type 17 has an invalid length.
[  193.648611][T11594] IPv6: NLM_F_REPLACE set, but no existing node found!
[  193.851889][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.536585][T11619] netlink: 'syz.2.1528': attribute type 1 has an invalid length.
[  194.546420][T11619] 8021q: adding VLAN 0 to HW filter on device bond5
[  194.555405][T11619] 8021q: adding VLAN 0 to HW filter on device bond5
[  194.557846][T11619] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  194.562506][T11619] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  194.619036][T11627] siw: device registration error -23
[  194.706545][T11634] netlink: 'syz.2.1531': attribute type 9 has an invalid length.
[  196.963082][T11712] __nla_validate_parse: 15 callbacks suppressed
[  196.963098][T11712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1552'.
[  197.186696][T11716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1553'.
[  197.629205][T11719] netlink: 'syz.2.1554': attribute type 1 has an invalid length.
[  197.632008][T11719] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1554'.
[  197.662593][T11719] netlink: 'syz.2.1554': attribute type 1 has an invalid length.
[  197.826449][T11726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1556'.
[  198.071866][T11737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1561'.
[  198.075443][T11737] netlink: 'syz.0.1561': attribute type 13 has an invalid length.
[  198.078151][T11737] netlink: 'syz.0.1561': attribute type 17 has an invalid length.
[  198.083475][T11737] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  198.717429][T11777] netlink: 'syz.2.1571': attribute type 12 has an invalid length.
[  198.720056][T11777] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1571'.
[  198.767071][T11779] IPVS: Error connecting to the multicast addr
[  198.809439][T11781] 8021q: adding VLAN 0 to HW filter on device bond0
[  198.815518][T11781] 8021q: adding VLAN 0 to HW filter on device team0
[  198.822099][T11781] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  198.878851][T11793] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1577'.
[  198.897997][T11799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1579'.
[  198.901628][T11799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1579'.
[  198.906204][T11801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1580'.
[  199.066701][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  199.070313][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  199.075012][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  199.078739][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  199.818324][T11864] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  199.819209][T11863] netlink: 'syz.1.1597': attribute type 10 has an invalid length.
[  200.542163][T11919] syzkaller1: entered promiscuous mode
[  200.544629][T11919] syzkaller1: entered allmulticast mode
[  200.916348][ T5740] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  200.923541][ T5740] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  200.926566][ T5740] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  200.930513][ T5740] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  201.007837][T11948] 0: left allmulticast mode
[  201.009568][T11948] hsr_slave_0: left allmulticast mode
[  201.011575][T11948] hsr_slave_1: left allmulticast mode
[  202.092778][T11967] __nla_validate_parse: 10 callbacks suppressed
[  202.092797][T11967] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1626'.
[  202.119926][T11971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1627'.
[  202.123524][T11971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1627'.
[  202.209554][T11972] netlink: 'syz.1.1627': attribute type 1 has an invalid length.
[  202.723137][T11989] vxcan1: entered allmulticast mode
[  202.725325][T11989] vxcan1: left allmulticast mode
[  202.755040][T11990] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1630'.
[  202.758155][T11990] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1630'.
[  202.761612][T11990] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1630'.
[  202.764587][T11990] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1630'.
[  202.848901][T12006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1637'.
[  202.950546][T12024] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1641'.
[  203.018919][T12031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1644'.
[  203.166071][T12049] bond6 (unregistering): Released all slaves
[  203.870314][T12062] netlink: 'syz.0.1654': attribute type 10 has an invalid length.
[  203.874319][T12062] dummy0: entered promiscuous mode
[  203.877628][T12062] bridge0: port 1(dummy0) entered blocking state
[  203.880474][T12062] bridge0: port 1(dummy0) entered disabled state
[  203.884932][T12062] dummy0: entered allmulticast mode
[  204.367892][T12118] netlink: 'syz.2.1669': attribute type 13 has an invalid length.
[  204.473700][T12119] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  204.478667][T12118] dummy0: entered allmulticast mode
[  204.556549][T12121] bond4: (slave vti0): Releasing backup interface
[  205.011425][T12170] netlink: 'syz.1.1686': attribute type 10 has an invalid length.
[  205.011532][T12171] netlink: 'syz.1.1686': attribute type 10 has an invalid length.
[  205.016604][T12170] 8021q: adding VLAN 0 to HW filter on device team0
[  205.021726][T12170] bond0: (slave team0): Enslaving as an active interface with an up link
[  206.003904][T12193] sctp: [Deprecated]: syz.2.1693 (pid 12193) Use of int in maxseg socket option.
[  206.003904][T12193] Use struct sctp_assoc_value instead
[  206.244381][T12225] netlink: 'syz.2.1700': attribute type 1 has an invalid length.
[  206.255620][T12225] 8021q: adding VLAN 0 to HW filter on device bond6
[  206.264889][T12225] bond6: (slave veth5): Enslaving as an active interface with a down link
[  206.271058][T12225] 8021q: adding VLAN 0 to HW filter on device batadv0
[  206.273624][T12225] bond6: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  206.575863][T12244] netlink: 'syz.2.1705': attribute type 1 has an invalid length.
[  206.578600][T12244] netlink: 'syz.2.1705': attribute type 2 has an invalid length.
[  207.710078][T12279] __nla_validate_parse: 33 callbacks suppressed
[  207.710092][T12279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1714'.
[  207.715343][T12279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1714'.
[  207.718464][T12279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1714'.
[  207.780178][T12285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1716'.
[  207.894106][T12309] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1722'.
[  207.899720][T12309] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1722'.
[  208.775675][T12331] netlink: 'syz.1.1729': attribute type 1 has an invalid length.
[  208.778353][T12331] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1729'.
[  208.911488][T12336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1730'.
[  209.049087][T12343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1732'.
[  209.709123][T12360] IPVS: Error connecting to the multicast addr
[  209.724359][T12357] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1738'.
[  209.978087][T12372] netlink: 'syz.0.1742': attribute type 5 has an invalid length.
[  210.628055][T12380] netlink: 'syz.2.1743': attribute type 5 has an invalid length.
[  210.814703][T12387] bridge: RTM_NEWNEIGH with invalid ether address
[  211.724548][T12423] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  211.903667][T12451] batadv_slave_1: entered promiscuous mode
[  211.912342][T12450] batadv_slave_1: left promiscuous mode
[  212.969926][T12482] __nla_validate_parse: 19 callbacks suppressed
[  212.969939][T12482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1775'.
[  212.976099][T12485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1776'.
[  213.907368][T12507] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1778'.
[  214.333042][T12513] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1783'.
[  214.338857][T12513] tap0: tun_chr_ioctl cmd 1074025677
[  214.341015][T12513] tap0: linktype set to 0
[  214.379651][T12515] netlink: 'syz.0.1784': attribute type 5 has an invalid length.
[  214.474672][T12521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1785'.
[  214.730384][T12527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1787'.
[  214.755899][T12533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1786'.
[  215.508237][T12571] netlink: 'syz.0.1796': attribute type 83 has an invalid length.
[  215.671540][T12575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1798'.
[  215.740544][T12578] dummy0: left allmulticast mode
[  216.492643][T12588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1801'.
[  216.595541][T12590] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  216.630300][T12592] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  216.635982][T12592] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1803'.
[  216.640680][T12589] tipc: Disabling bearer <eth:syzkaller0>
[  217.835765][T12652] tap0: tun_chr_ioctl cmd 35108
[  217.978797][T12667] __nla_validate_parse: 4 callbacks suppressed
[  217.978810][T12667] netlink: 212176 bytes leftover after parsing attributes in process `syz.0.1820'.
[  218.183766][T12685] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1825'.
[  218.210088][T12685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1825'.
[  219.495722][T12780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1838'.
[  219.798805][T12804] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1845'.
[  220.367519][T12818] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1849'.
[  220.410798][T12824] bond0: (slave team0): Releasing backup interface
[  220.416127][T12824] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.693189][T12849] netlink: 'syz.2.1860': attribute type 1 has an invalid length.
[  220.696759][T12849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1860'.
[  220.699927][T12849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1860'.
[  220.704963][T12849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1860'.
[  220.708301][T12849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1860'.
[  221.779887][T12880] siw: device registration error -23
[  222.122934][T12909] netlink: 'syz.0.1876': attribute type 1 has an invalid length.
[  222.178818][T12914] geneve5: entered promiscuous mode
[  222.183039][ T5740] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  222.186820][ T5740] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  222.190147][ T5740] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  222.199801][ T5740] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  222.307264][ T5740] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  222.310494][ T5740] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  222.313416][ T5740] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  222.316366][ T5740] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  222.968839][T12960] "syz.2.1891" (12960) uses obsolete ecb(arc4) skcipher
[  223.095926][T12971] __nla_validate_parse: 11 callbacks suppressed
[  223.095936][T12971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1894'.
[  223.748683][T12975] delete_channel: no stack
[  223.766276][T12980] netlink: 'syz.2.1896': attribute type 1 has an invalid length.
[  223.768904][T12980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1896'.
[  223.998128][T13006] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1904'.
[  224.001542][T13006] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1904'.
[  224.006011][T13006] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1904'.
[  224.009811][T13006] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1904'.
[  224.014161][T13009] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  224.015785][T13006] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1904'.
[  224.023879][T13006] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1904'.
[  224.026801][T13006] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1904'.
[  224.029991][T13006] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1904'.
[  224.272300][T13043] netlink: 'syz.0.1915': attribute type 1 has an invalid length.
[  226.135454][T13138] netlink: 'syz.0.1940': attribute type 13 has an invalid length.
[  226.138730][T13138] netlink: 'syz.0.1940': attribute type 11 has an invalid length.
[  226.177934][T13142] vxcan1: entered allmulticast mode
[  226.180075][T13142] vxcan1: left allmulticast mode
[  228.438046][T13194] __nla_validate_parse: 67 callbacks suppressed
[  228.438056][T13194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1957'.
[  228.497863][T13200] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1957'.
[  229.179843][T13204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1959'.
[  229.257888][T13210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1961'.
[  229.366543][T13230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1966'.
[  230.251072][T13255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1971'.
[  230.255420][T13253] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1971'.
[  230.317986][T13263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1974'.
[  230.755773][T13273] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1977'.
[  230.764017][T13273] netlink: 'syz.0.1977': attribute type 5 has an invalid length.
[  230.858598][T13281] bond0: default FDB implementation only supports local addresses
[  230.863003][T13281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1981'.
[  231.440000][T13348] netlink: 'syz.2.1996': attribute type 1 has an invalid length.
[  231.455412][T13346] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  231.483375][T13355] pimreg: entered allmulticast mode
[  231.487079][T13355] dummy0: left allmulticast mode
[  231.488734][T13355] dummy0: left promiscuous mode
[  231.490584][T13355] bridge0: port 1(dummy0) entered disabled state
[  231.870657][T13384] pim6reg: entered allmulticast mode
[  231.875005][T13384] pim6reg: left allmulticast mode
[  232.202744][T13391] netlink: 'syz.2.2012': attribute type 1 has an invalid length.
[  232.217915][T13391] bond7: (slave bridge6): making interface the new active one
[  232.220833][T13391] bond7: (slave bridge6): Enslaving as an active interface with an up link
[  232.226332][T13391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  233.344186][T13432] syzkaller1: entered promiscuous mode
[  233.346074][T13432] syzkaller1: entered allmulticast mode
[  233.354481][T13432] netlink: 'syz.2.2026': attribute type 1 has an invalid length.
[  233.804762][T13434] __nla_validate_parse: 18 callbacks suppressed
[  233.804777][T13434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2027'.
[  233.939392][T13438] syzkaller1: entered promiscuous mode
[  233.941837][T13438] syzkaller1: entered allmulticast mode
[  234.503095][T13467] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2037'.
[  234.507394][T13467] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2037'.
[  234.513454][T13468] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2037'.
[  234.516696][T13468] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2037'.
[  234.897651][T13480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2040'.
[  234.993639][T13495] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2042'.
[  235.067966][T13506] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2047'.
[  235.717745][T13511] netlink: 'syz.2.2049': attribute type 1 has an invalid length.
[  235.720540][T13511] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2049'.
[  235.797399][T13517] netlink: 'syz.0.2053': attribute type 5 has an invalid length.
[  236.047453][T13550] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2063'.
[  236.775964][T13601] infiniband syz2: set down
[  236.777912][T13601] infiniband syz2: added bond0
[  236.780257][T13601] syz2: rxe_create_cq: returned err = -12
[  236.782892][T13601] infiniband syz2: Couldn't create ib_mad CQ
[  236.785595][T13601] infiniband syz2: Couldn't open port 1
[  236.793591][T13601] RDS/IB: syz2: added
[  236.795336][T13601] smc: adding ib device syz2 with port count 1
[  236.797563][T13601] smc:    ib device syz2 port 1 has pnetid 
[  236.931568][T13611] veth0_to_bond: entered allmulticast mode
[  237.818245][T13624] bond6: (slave veth5): Releasing active interface
[  237.823093][T13624] bond7: (slave bridge6): Releasing active interface
[  237.949184][T13643] syzkaller0: entered promiscuous mode
[  237.951912][T13643] syzkaller0: entered allmulticast mode
[  238.083891][T13660] veth1_to_bond: entered allmulticast mode
[  238.100380][T13661] veth1_to_bond: left allmulticast mode
[  238.127369][T13674] netlink: 'syz.0.2092': attribute type 3 has an invalid length.
[  238.182364][T13678] netlink: 'syz.0.2094': attribute type 1 has an invalid length.
[  238.199636][T13679] veth0_to_bond: left allmulticast mode
[  238.718765][T13734] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7)
[  239.696947][ T5853] Bluetooth: hci1: link tx timeout
[  239.698844][ T5853] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  239.747983][T13777] __nla_validate_parse: 16 callbacks suppressed
[  239.747996][T13777] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2124'.
[  239.768900][T13781] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2125'.
[  240.075348][T13799] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000
[  240.129609][T13807] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2131'.
[  240.234100][T13824] netlink: 676 bytes leftover after parsing attributes in process `syz.0.2137'.
[  240.237462][T13824] netlink: 676 bytes leftover after parsing attributes in process `syz.0.2137'.
[  240.244619][T13824] netlink: 676 bytes leftover after parsing attributes in process `syz.0.2137'.
[  240.248039][T13824] netlink: 676 bytes leftover after parsing attributes in process `syz.0.2137'.
[  240.304549][T13833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2140'.
[  240.340021][T13836] netlink: 'syz.0.2141': attribute type 1 has an invalid length.
[  240.343603][T13836] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2141'.
[  240.347109][T13835] netlink: 'syz.0.2141': attribute type 1 has an invalid length.
[  240.350737][T13835] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2141'.
[  240.479426][T13844] netlink: 'syz.0.2142': attribute type 1 has an invalid length.
[  240.538130][T13849] vxcan1: entered allmulticast mode
[  240.540519][T13849] vxcan1: left allmulticast mode
[  241.083307][T13895] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  241.086916][T13894] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  241.564843][T13912] siw: device registration error -23
[  241.770951][ T5853] Bluetooth: hci1: command 0x0405 tx timeout
[  243.627611][T13995] 8021q: adding VLAN 0 to HW filter on device bond0
[  243.636634][T13995] bond0: (slave rose0): Enslaving as an active interface with an up link
[  243.709959][T14007] geneve5: left promiscuous mode
[  244.709953][T14047] netlink: 'syz.2.2192': attribute type 5 has an invalid length.
[  245.304905][T14070] netlink: 'syz.0.2198': attribute type 1 has an invalid length.
[  245.308104][T14070] erspan0: entered allmulticast mode
[  245.344650][T14075] __nla_validate_parse: 26 callbacks suppressed
[  245.344662][T14075] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2200'.
[  245.616970][T14113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2210'.
[  245.645894][T14121] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2211'.
[  245.649361][T14121] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2211'.
[  245.657574][T14121] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2211'.
[  245.661174][T14121] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2211'.
[  245.664909][T14121] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2211'.
[  245.668838][T14121] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2211'.
[  245.672623][T14121] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2211'.
[  245.675641][T14121] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2211'.
[  245.715638][T14124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  245.752212][T14126] netlink: 'syz.2.2213': attribute type 5 has an invalid length.
[  246.244373][T14155] netlink: 'syz.0.2222': attribute type 21 has an invalid length.
[  246.347614][T14164] syzkaller1: entered promiscuous mode
[  246.349946][T14164] syzkaller1: entered allmulticast mode
[  247.379901][T14203] bridge3: the hash_elasticity option has been deprecated and is always 16
[  247.420327][T14205] netlink: 'syz.1.2239': attribute type 1 has an invalid length.
[  247.481904][T14210] tc_dump_action: action bad kind
[  248.411021][   T36] wlan0: Trigger new scan to find an IBSS to join
[  250.367406][T14351] __nla_validate_parse: 176 callbacks suppressed
[  250.367416][T14351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2276'.
[  250.406364][T14361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2277'.
[  251.106166][T14450] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2281'.
[  251.161696][T14456] syzkaller0: entered promiscuous mode
[  251.164176][T14456] syzkaller0: entered allmulticast mode
[  251.289149][T14458] netlink: 'syz.0.2285': attribute type 1 has an invalid length.
[  251.314111][T14466] netlink: 'syz.0.2286': attribute type 1 has an invalid length.
[  251.323080][T14466] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2286'.
[  252.196121][T14488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2291'.
[  252.214568][T14484] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2290'.
[  252.387874][T14506] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2295'.
[  252.392975][T14506] netlink: 'syz.1.2295': attribute type 16 has an invalid length.
[  252.395819][T14506] netlink: 'syz.1.2295': attribute type 17 has an invalid length.
[  253.135113][T14522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2300'.
[  253.438346][T14543] netlink: 'syz.2.2306': attribute type 16 has an invalid length.
[  253.447609][T14543] netlink: 'syz.2.2306': attribute type 17 has an invalid length.
[  253.456899][T14543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2306'.
[  253.512574][T14544] IPv6: NLM_F_REPLACE set, but no existing node found!
[  253.533525][T14546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2307'.
[  253.611786][T14550] syzkaller1: entered promiscuous mode
[  253.613959][T14550] syzkaller1: entered allmulticast mode
[  254.984389][T14594] netlink: 'syz.0.2317': attribute type 15 has an invalid length.
[  254.993821][T14594] netlink: 'syz.0.2317': attribute type 15 has an invalid length.
[  255.213792][T14603] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  256.167736][T14631] __nla_validate_parse: 8 callbacks suppressed
[  256.167752][T14631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2326'.
[  256.189450][T14632] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2329'.
[  256.745931][T14639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2332'.
[  257.005713][T14651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2336'.
[  257.054576][T14652] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2335'.
[  257.057754][T14652] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2335'.
[  257.060975][T14652] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2335'.
[  257.064904][T14652] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2335'.
[  257.243153][T14658] netlink: 'syz.1.2337': attribute type 5 has an invalid length.
[  258.003561][T14690] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2346'.
[  258.058015][T14693] syz.1.2347 (14693) used obsolete PPPIOCDETACH ioctl
[  258.227895][T14703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2350'.
[  258.233735][T14703] netlink: 'syz.1.2350': attribute type 1 has an invalid length.
[  258.450531][T14705] netlink: 'syz.0.2351': attribute type 2 has an invalid length.
[  258.509786][T14707] erspan0: left allmulticast mode
[  260.049609][T14773] netlink: 'syz.1.2368': attribute type 5 has an invalid length.
[  261.419442][T14794] netlink: 'syz.2.2374': attribute type 1 has an invalid length.
[  261.482681][T14804] __nla_validate_parse: 11 callbacks suppressed
[  261.482696][T14804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2377'.
[  261.489274][T14798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2375'.
[  261.616646][T14822] netlink: 'syz.0.2380': attribute type 21 has an invalid length.
[  261.619663][T14822] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2380'.
[  261.652958][T14825] vlan0: entered promiscuous mode
[  261.683700][T14832] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2384'.
[  261.732675][T14838] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2383'.
[  261.735910][T14838] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2383'.
[  261.741139][T14838] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2383'.
[  261.744235][T14838] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2383'.
[  262.312520][T14858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2389'.
[  262.358169][T14865] siw: device registration error -23
[  262.559277][T14891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2398'.
[  263.528812][T14939] syzkaller1: entered promiscuous mode
[  263.533548][T14939] syzkaller1: entered allmulticast mode
[  265.442703][T15107] sctp: [Deprecated]: syz.1.2452 (pid 15107) Use of int in max_burst socket option deprecated.
[  265.442703][T15107] Use struct sctp_assoc_value instead
[  265.576455][T15130] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  265.579042][T15130] IPv6: NLM_F_CREATE should be set when creating new route
[  265.581573][T15130] IPv6: NLM_F_CREATE should be set when creating new route
[  265.585345][T15130] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  266.387818][T15162] lo: entered promiscuous mode
[  266.389660][T15162] tunl0: entered promiscuous mode
[  266.391858][T15162] gre0: entered promiscuous mode
[  266.393650][T15162] gretap0: entered promiscuous mode
[  266.395533][T15162] erspan0: entered promiscuous mode
[  266.397383][T15162] ip_vti0: entered promiscuous mode
[  266.399294][T15162] ip6_vti0: entered promiscuous mode
[  266.401366][T15162] sit0: entered promiscuous mode
[  266.403118][T15162] ip6tnl0: entered promiscuous mode
[  266.404934][T15162] ip6gre0: entered promiscuous mode
[  266.406775][T15162] ip6gretap0: entered promiscuous mode
[  266.408678][T15162] bridge0: entered promiscuous mode
[  266.410621][T15162] bond0: entered promiscuous mode
[  266.412755][T15162] team0: entered promiscuous mode
[  266.414545][T15162] dummy0: entered promiscuous mode
[  266.416417][T15162] nlmon0: entered promiscuous mode
[  266.418220][T15162] caif0: entered promiscuous mode
[  266.420013][T15162] vxcan0: entered promiscuous mode
[  266.423099][T15162] vxcan1: entered promiscuous mode
[  266.424943][T15162] veth0: entered promiscuous mode
[  266.426714][T15162] veth1: entered promiscuous mode
[  266.428507][T15162] wg0: entered promiscuous mode
[  266.430239][T15162] wg1: entered promiscuous mode
[  266.432436][T15162] wg2: entered promiscuous mode
[  266.434258][T15162] veth0_to_bridge: entered promiscuous mode
[  266.436355][T15162] bridge_slave_0: entered promiscuous mode
[  266.438531][T15162] veth1_to_bridge: entered promiscuous mode
[  266.440826][T15162] bridge_slave_1: entered promiscuous mode
[  266.443040][T15162] veth0_to_bond: entered promiscuous mode
[  266.445134][T15162] bond_slave_0: entered promiscuous mode
[  266.447179][T15162] veth1_to_bond: entered promiscuous mode
[  266.449207][T15162] bond_slave_1: entered promiscuous mode
[  266.451636][T15162] veth0_to_team: entered promiscuous mode
[  266.453660][T15162] team_slave_0: entered promiscuous mode
[  266.455757][T15162] veth1_to_team: entered promiscuous mode
[  266.457783][T15162] team_slave_1: entered promiscuous mode
[  266.459769][T15162] veth0_to_batadv: entered promiscuous mode
[  266.462070][T15162] batadv_slave_0: entered promiscuous mode
[  266.464090][T15162] veth1_to_batadv: entered promiscuous mode
[  266.466277][T15162] batadv_slave_1: entered promiscuous mode
[  266.468345][T15162] xfrm0: entered promiscuous mode
[  266.470133][T15162] veth0_to_hsr: entered promiscuous mode
[  266.472993][T15162] veth1_to_hsr: entered promiscuous mode
[  266.475035][T15162] 0: entered promiscuous mode
[  266.476834][T15162] veth1_virt_wifi: entered promiscuous mode
[  266.478933][T15162] veth0_virt_wifi: entered promiscuous mode
[  266.481133][T15162] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  266.483822][T15162] vlan1: entered promiscuous mode
[  266.485715][T15162] macvlan0: entered promiscuous mode
[  266.487671][T15162] macvlan1: entered promiscuous mode
[  266.489574][T15162] ipvlan0: entered promiscuous mode
[  266.491975][T15162] ipvlan1: entered promiscuous mode
[  266.493826][T15162] veth1_macvtap: entered promiscuous mode
[  266.495921][T15162] macvtap0: entered promiscuous mode
[  266.497868][T15162] geneve0: entered promiscuous mode
[  266.499729][T15162] geneve1: entered promiscuous mode
[  266.502225][T15162] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  266.504664][T15162] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  266.507114][T15162] geneve2: entered promiscuous mode
[  266.509043][T15162] bond1: entered promiscuous mode
[  266.510838][T15162] geneve3: entered promiscuous mode
[  266.513321][T15162] bridge1: entered promiscuous mode
[  266.515209][T15162] bridge2: entered promiscuous mode
[  266.517081][T15162] ip6erspan1: entered promiscuous mode
[  266.519007][T15162] mac80211_hwsim hwsim10 wlan2: entered promiscuous mode
[  266.521579][T15162] mac80211_hwsim hwsim11 wlan3: entered promiscuous mode
[  266.524102][T15162] syztnl2: entered promiscuous mode
[  266.525946][T15162] bridge3: entered promiscuous mode
[  266.527833][T15162] bond2: entered promiscuous mode
[  266.529601][T15162] veth2: entered promiscuous mode
[  266.531846][T15162] veth3: entered promiscuous mode
[  266.533671][T15162] gre1: entered promiscuous mode
[  266.535430][T15162] bond3: entered promiscuous mode
[  266.537212][T15162] mac80211_hwsim hwsim16 wlan4: entered promiscuous mode
[  266.539663][T15162] mac80211_hwsim hwsim17 wlan5: entered promiscuous mode
[  266.542543][T15162] ieee802154 phy1 wpan1: entered promiscuous mode
[  266.544988][T15162] bond4: entered promiscuous mode
[  266.546924][T15162] vti0: entered promiscuous mode
[  266.548915][T15162] veth1_to_team.3: entered promiscuous mode
[  266.552422][T15162] bond5: entered promiscuous mode
[  266.555932][T15162] mac80211_hwsim hwsim18 wlan6: entered promiscuous mode
[  266.558667][T15162] bridge4: entered promiscuous mode
[  266.561069][T15162] bond6: entered promiscuous mode
[  266.563115][T15162] veth4: entered promiscuous mode
[  266.565327][T15162] veth5: entered promiscuous mode
[  266.567628][T15162] ip6tnl1: entered promiscuous mode
[  266.569946][T15162] bridge5: entered promiscuous mode
[  266.572783][T15162] bond7: entered promiscuous mode
[  266.575021][T15162] bridge6: entered promiscuous mode
[  266.577249][T15162] netdevsim netdevsim2 eth0: entered promiscuous mode
[  266.579585][T15162] netdevsim netdevsim2 eth1: entered promiscuous mode
[  266.582531][T15162] netdevsim netdevsim2 eth2: entered promiscuous mode
[  266.584830][T15162] netdevsim netdevsim2 eth3: entered promiscuous mode
[  266.587237][T15162] gre2: entered promiscuous mode
[  266.589109][T15162] mac80211_hwsim hwsim23 wlan7: entered promiscuous mode
[  266.592106][T15162] vlan0: entered promiscuous mode
[  266.727216][T15183] siw: device registration error -23
[  266.982617][T15211] __nla_validate_parse: 28 callbacks suppressed
[  266.982632][T15211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2477'.
[  267.019327][T15215] team0: Mode changed to "loadbalance"
[  267.062608][T15217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2479'.
[  267.102928][T15228] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2481'.
[  267.147961][T15235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2482'.
[  267.214853][T15242] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2484'.
[  267.219498][T15242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2484'.
[  267.223855][T15242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2484'.
[  267.245177][T15247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2483'.
[  267.426497][T15278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2490'.
[  267.429636][T15278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2490'.
[  267.562084][T15284] IPVS: Error connecting to the multicast addr
[  267.575679][T15289] netlink: 'syz.0.2495': attribute type 1 has an invalid length.
[  268.449351][T15311] pim6reg1: entered promiscuous mode
[  268.451585][T15311] pim6reg1: entered allmulticast mode
[  268.546864][T15319] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  268.552112][T15319] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  268.599613][T15321] IPVS: set_ctl: invalid protocol: 52498 172.20.20.11:21
[  268.794199][T15335] syzkaller0: entered promiscuous mode
[  268.796116][T15335] syzkaller0: entered allmulticast mode
[  269.195158][T15357] lo: left promiscuous mode
[  269.196831][T15357] tunl0: left promiscuous mode
[  269.198628][T15357] gre0: left promiscuous mode
[  269.200319][T15357] gretap0: left promiscuous mode
[  269.202600][T15357] erspan0: left promiscuous mode
[  269.204494][T15357] ip_vti0: left promiscuous mode
[  269.206200][T15357] ip6_vti0: left promiscuous mode
[  269.208070][T15357] sit0: left promiscuous mode
[  269.209996][T15357] ip6tnl0: left promiscuous mode
[  269.212669][T15357] ip6gre0: left promiscuous mode
[  269.214878][T15357] ip6gretap0: left promiscuous mode
[  269.217198][T15357] bridge0: left promiscuous mode
[  269.219263][T15357] bond0: left promiscuous mode
[  269.223181][T15357] team0: left promiscuous mode
[  269.225110][T15357] dummy0: left promiscuous mode
[  269.226964][T15357] nlmon0: left promiscuous mode
[  269.228815][T15357] caif0: left promiscuous mode
[  269.230600][T15357] vxcan0: left promiscuous mode
[  269.232494][T15357] vxcan1: left promiscuous mode
[  269.234345][T15357] veth0: left promiscuous mode
[  269.236146][T15357] veth1: left promiscuous mode
[  269.237957][T15357] wg0: left promiscuous mode
[  269.239729][T15357] wg1: left promiscuous mode
[  269.241724][T15357] wg2: left promiscuous mode
[  269.243481][T15357] veth0_to_bridge: left promiscuous mode
[  269.245666][T15357] bridge_slave_0: left promiscuous mode
[  269.248148][T15357] veth1_to_bridge: left promiscuous mode
[  269.250345][T15357] bridge_slave_1: left promiscuous mode
[  269.252624][T15357] veth0_to_bond: left promiscuous mode
[  269.254651][T15357] bond_slave_0: left promiscuous mode
[  269.256596][T15357] veth1_to_bond: left promiscuous mode
[  269.258650][T15357] bond_slave_1: left promiscuous mode
[  269.260680][T15357] veth0_to_team: left promiscuous mode
[  269.262922][T15357] team_slave_0: left promiscuous mode
[  269.264972][T15357] team_slave_1: left promiscuous mode
[  269.266958][T15357] veth0_to_batadv: left promiscuous mode
[  269.269049][T15357] batadv_slave_0: left promiscuous mode
[  269.271197][T15357] veth1_to_batadv: left promiscuous mode
[  269.273264][T15357] batadv_slave_1: left promiscuous mode
[  269.275308][T15357] xfrm0: left promiscuous mode
[  269.277090][T15357] veth0_to_hsr: left promiscuous mode
[  269.279191][T15357] veth1_to_hsr: left promiscuous mode
[  269.281345][T15357] 0: left promiscuous mode
[  269.282972][T15357] veth1_virt_wifi: left promiscuous mode
[  269.284972][T15357] veth0_virt_wifi: left promiscuous mode
[  269.286939][T15357] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  269.289494][T15357] vlan1: left promiscuous mode
[  269.291426][T15357] macvlan0: left promiscuous mode
[  269.293212][T15357] macvlan1: left promiscuous mode
[  269.294999][T15357] ipvlan0: left promiscuous mode
[  269.296762][T15357] ipvlan1: left promiscuous mode
[  269.298498][T15357] veth1_macvtap: left promiscuous mode
[  269.300570][T15357] macvtap0: left promiscuous mode
[  269.302448][T15357] geneve0: left promiscuous mode
[  269.304244][T15357] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  269.306556][T15357] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  269.308868][T15357] geneve2: left promiscuous mode
[  269.310788][T15357] bond1: left promiscuous mode
[  269.312722][T15357] geneve3: left promiscuous mode
[  269.314494][T15357] bridge1: left promiscuous mode
[  269.316308][T15357] bridge2: left promiscuous mode
[  269.318044][T15357] ip6erspan1: left promiscuous mode
[  269.319987][T15357] mac80211_hwsim hwsim10 wlan2: left promiscuous mode
[  269.322476][T15357] mac80211_hwsim hwsim11 wlan3: left promiscuous mode
[  269.324825][T15357] syztnl2: left promiscuous mode
[  269.326588][T15357] bridge3: left promiscuous mode
[  269.328332][T15357] bond2: left promiscuous mode
[  269.330198][T15357] veth2: left promiscuous mode
[  269.334267][T15357] veth3: left promiscuous mode
[  269.335980][T15357] gre1: left promiscuous mode
[  269.337665][T15357] bond3: left promiscuous mode
[  269.339345][T15357] mac80211_hwsim hwsim16 wlan4: left promiscuous mode
[  269.341903][T15357] mac80211_hwsim hwsim17 wlan5: left promiscuous mode
[  269.344404][T15357] ieee802154 phy1 wpan1: left promiscuous mode
[  269.346626][T15357] bond4: left promiscuous mode
[  269.348398][T15357] vti0: left promiscuous mode
[  269.350208][T15357] veth1_to_team.3: left promiscuous mode
[  269.352295][T15357] veth1_to_team: left promiscuous mode
[  269.354324][T15357] bond5: left promiscuous mode
[  269.356176][T15357] mac80211_hwsim hwsim18 wlan6: left promiscuous mode
[  269.358510][T15357] bridge4: left promiscuous mode
[  269.360267][T15357] bond6: left promiscuous mode
[  269.362033][T15357] veth4: left promiscuous mode
[  269.363730][T15357] veth5: left promiscuous mode
[  269.365430][T15357] ip6tnl1: left promiscuous mode
[  269.367284][T15357] bridge5: left promiscuous mode
[  269.369053][T15357] bond7: left promiscuous mode
[  269.370730][T15357] bridge6: left promiscuous mode
[  269.372717][T15357] netdevsim netdevsim2 eth0: left promiscuous mode
[  269.374993][T15357] netdevsim netdevsim2 eth1: left promiscuous mode
[  269.377353][T15357] netdevsim netdevsim2 eth2: left promiscuous mode
[  269.379596][T15357] netdevsim netdevsim2 eth3: left promiscuous mode
[  269.381982][T15357] gre2: left promiscuous mode
[  269.383609][T15357] mac80211_hwsim hwsim23 wlan7: left promiscuous mode
[  269.385799][T15357] vlan0: left promiscuous mode
[  269.387481][T15357] geneve1: left promiscuous mode
[  270.692820][T15444] netlink: 'syz.0.2531': attribute type 1 has an invalid length.
[  272.082551][T15488] netlink: 'syz.2.2544': attribute type 9 has an invalid length.
[  272.085108][T15488] netlink: 'syz.2.2544': attribute type 6 has an invalid length.
[  272.374995][T15493] __nla_validate_parse: 13 callbacks suppressed
[  272.375009][T15493] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2546'.
[  272.433234][T15494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2546'.
[  272.436970][T15494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2546'.
[  272.440498][T15494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2546'.
[  272.444872][T15494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2546'.
[  272.448703][T15494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2546'.
[  272.597370][T15498] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2548'.
[  272.635443][T15501] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  272.635994][T15502] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  272.943945][T15514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2552'.
[  273.562357][T15533] netlink: 'syz.0.2556': attribute type 5 has an invalid length.
[  273.849624][T15548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2560'.
[  273.894211][T15552] netlink: 'syz.0.2561': attribute type 9 has an invalid length.
[  273.897048][T15552] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2561'.
[  273.916665][T15552] netlink: 'syz.0.2561': attribute type 1 has an invalid length.
[  274.242711][T15607] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  274.449419][T15636] netlink: 'syz.0.2583': attribute type 3 has an invalid length.
[  274.452903][T15636] netlink: 'syz.0.2583': attribute type 3 has an invalid length.
[  274.705427][ T5847] cgroup: fork rejected by pids controller in /syz0
[  274.865194][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  274.867755][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  274.870406][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  274.873544][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  274.876231][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  275.000727][T15651] chnl_net:caif_netlink_parms(): no params data found
[  275.033729][T15651] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.036355][T15651] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.038960][T15651] bridge_slave_0: entered allmulticast mode
[  275.041822][T15651] bridge_slave_0: entered promiscuous mode
[  275.044962][T15651] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.047600][T15651] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.050145][T15651] bridge_slave_1: entered allmulticast mode
[  275.052983][T15651] bridge_slave_1: entered promiscuous mode
[  275.066336][T15651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  275.072278][T15651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  275.085994][T15651] team0: Port device team_slave_0 added
[  275.089567][T15651] team0: Port device team_slave_1 added
[  275.109796][T15651] batman_adv: batadv0: Adding interface: batadv_slave_0
[  275.112888][T15651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.123045][T15651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  275.127505][T15651] batman_adv: batadv0: Adding interface: batadv_slave_1
[  275.130765][T15651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.140201][T15651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  275.156452][T15665] vxcan1: entered allmulticast mode
[  275.159974][T15651] hsr_slave_0: entered promiscuous mode
[  275.162624][T15651] hsr_slave_1: entered promiscuous mode
[  275.164778][T15651] debugfs: 'hsr0' already exists in 'hsr'
[  275.166944][T15651] Cannot create hsr debugfs directory
[  275.168946][T15665] vxcan1: left allmulticast mode
[  275.198795][T15668] netlink: 'syz.1.2595': attribute type 5 has an invalid length.
[  275.387901][T15651] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  275.392161][T15651] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  275.395789][T15651] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  275.399489][T15651] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  275.411817][T15651] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.414289][T15651] bridge0: port 2(bridge_slave_1) entered forwarding state
[  275.416784][T15651] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.419144][T15651] bridge0: port 1(bridge_slave_0) entered forwarding state
[  275.441264][T15651] 8021q: adding VLAN 0 to HW filter on device bond0
[  275.447311][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.450025][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.456115][T15651] 8021q: adding VLAN 0 to HW filter on device team0
[  275.460466][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.462933][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  275.468857][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.471875][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  275.562576][T15651] 8021q: adding VLAN 0 to HW filter on device batadv0
[  275.578332][T15651] veth0_vlan: entered promiscuous mode
[  275.582873][T15651] veth1_vlan: entered promiscuous mode
[  275.593393][T15651] veth0_macvtap: entered promiscuous mode
[  275.597086][T15651] veth1_macvtap: entered promiscuous mode
[  275.604565][T15651] batman_adv: batadv0: Interface activated: batadv_slave_0
[  275.610453][T15651] batman_adv: batadv0: Interface activated: batadv_slave_1
[  275.617020][ T5740] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  275.620807][ T5740] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  275.625117][ T5740] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  275.628253][ T5740] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  275.654406][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  275.658945][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.667347][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  275.670101][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.803323][T15692] netlink: 'syz.0.2597': attribute type 1 has an invalid length.
[  276.072567][T15697] netlink: 'syz.2.2600': attribute type 1 has an invalid length.
[  276.075550][T15697] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  276.635092][T15724] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 3, id = 0
[  276.891178][ T5235] Bluetooth: hci2: command tx timeout
[  277.087933][T15761] vlan0: left promiscuous mode
[  277.853901][T15769] __nla_validate_parse: 23 callbacks suppressed
[  277.853913][T15769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2618'.
[  278.017847][T15790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2625'.
[  278.185511][T15804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2627'.
[  278.243270][T15807] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2627'.
[  278.477374][T15813] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2630'.
[  278.532379][T15820] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2632'.
[  278.817056][T15823] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2633'.
[  278.914834][T15833] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2635'.
[  278.981157][ T5235] Bluetooth: hci2: command tx timeout
[  279.017245][T15836] netlink: 'syz.2.2636': attribute type 4 has an invalid length.
[  279.021981][T15836] netlink: 'syz.2.2636': attribute type 4 has an invalid length.
[  279.423099][T15860] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.425675][T15860] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.485465][T15860] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  279.493058][T15860] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  279.550445][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  279.555839][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  279.561930][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  279.571025][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  279.652001][T15884] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2646'.
[  279.656052][T15884] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2646'.
[  280.519211][T15913] rdma_rxe: rxe_newlink: failed to add macvlan1
[  280.530587][T15918] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  280.698371][T15935] netlink: 'syz.0.2657': attribute type 39 has an invalid length.
[  281.051121][ T5235] Bluetooth: hci2: command tx timeout
[  281.474097][T15961] syzkaller0: tun_chr_ioctl cmd 1074812117
[  281.627020][T15965] sock: sock_set_timeout: `syz.2.2666' (pid 15965) tries to set negative timeout
[  281.792915][T15978] netlink: 'syz.2.2669': attribute type 29 has an invalid length.
[  283.131171][ T5235] Bluetooth: hci2: command tx timeout
[  283.541654][T16026] __nla_validate_parse: 19 callbacks suppressed
[  283.541672][T16026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2681'.
[  283.594922][T16040] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2684'.
[  283.598184][T16040] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  283.606406][T16040] bridge_slave_0: left allmulticast mode
[  283.608482][T16040] bridge_slave_0: left promiscuous mode
[  283.610601][T16040] bridge0: port 1(bridge_slave_0) entered disabled state
[  283.615704][T16040] bridge_slave_1: left allmulticast mode
[  283.617903][T16040] bridge_slave_1: left promiscuous mode
[  283.620043][T16040] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.625147][T16040] bond0: (slave bond_slave_0): Releasing backup interface
[  283.631628][T16040] bond0: (slave bond_slave_1): Releasing backup interface
[  283.635788][T16040] team0: Port device team_slave_0 removed
[  283.638933][T16040] team0: Port device team_slave_1 removed
[  283.642236][T16040] batman_adv: batadv0: Removing interface: batadv_slave_0
[  283.645769][T16040] batman_adv: batadv0: Removing interface: batadv_slave_1
[  283.680696][T16052] vxcan1: entered allmulticast mode
[  283.687540][T16052] vxcan1: left allmulticast mode
[  283.724232][T16056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2690'.
[  284.026371][T16073] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2694'.
[  284.062565][T16077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2695'.
[  284.065564][T16077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2695'.
[  284.068705][T16077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2695'.
[  284.380727][T16087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2697'.
[  284.576519][T16096] netlink: 'syz.1.2699': attribute type 23 has an invalid length.
[  284.939152][T16100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2700'.
[  285.026048][T16101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2700'.
[  285.211587][T16103] vxcan1: entered allmulticast mode
[  285.230634][T16108] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20004
[  287.098763][T16238] netlink: 'syz.2.2735': attribute type 21 has an invalid length.
[  287.247436][T16261] netlink: 'syz.0.2739': attribute type 3 has an invalid length.
[  287.250149][T16261] netlink: 'syz.0.2739': attribute type 2 has an invalid length.
[  287.253154][T16260] netlink: 'syz.0.2739': attribute type 3 has an invalid length.
[  287.256278][T16260] netlink: 'syz.0.2739': attribute type 2 has an invalid length.
[  288.364403][T16372] siw: device registration error -23
[  288.503663][T16379] netlink: 'syz.0.2749': attribute type 1 has an invalid length.
[  288.507043][T16379] netlink: 'syz.0.2749': attribute type 1 has an invalid length.
[  288.922825][T16383] __nla_validate_parse: 38 callbacks suppressed
[  288.922838][T16383] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2750'.
[  288.927990][T16383] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2750'.
[  288.931101][T16383] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2750'.
[  288.934055][T16383] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2750'.
[  289.309232][T16404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2755'.
[  289.758937][T16416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2758'.
[  290.672368][T16433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2762'.
[  290.675594][T16433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2762'.
[  290.678971][T16433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2762'.
[  290.882852][T16444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2765'.
[  291.858509][T16468] netlink: 'syz.0.2774': attribute type 1 has an invalid length.
[  293.992148][T16527] IPVS: Error connecting to the multicast addr
[  294.098129][T16546] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  294.154781][T16547] __nla_validate_parse: 21 callbacks suppressed
[  294.154794][T16547] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2798'.
[  294.160029][T16547] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2798'.
[  294.163278][T16547] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2798'.
[  294.166379][T16547] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2798'.
[  294.433389][T16549] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2799'.
[  295.496882][T16575] pim6reg1: entered promiscuous mode
[  295.499329][T16575] pim6reg1: entered allmulticast mode
[  295.675708][T16580] vlan0: entered promiscuous mode
[  296.478417][T16601] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2815'.
[  296.481745][T16601] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2815'.
[  296.727640][T16607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2816'.
[  296.736005][T16607] lo: entered promiscuous mode
[  296.738190][T16607] lo: entered allmulticast mode
[  296.740442][T16607] tunl0: entered promiscuous mode
[  296.743644][T16607] tunl0: entered allmulticast mode
[  296.746445][T16607] gre0: entered promiscuous mode
[  296.748545][T16607] gre0: entered allmulticast mode
[  296.750773][T16607] gretap0: entered promiscuous mode
[  296.753089][T16607] gretap0: entered allmulticast mode
[  296.755413][T16607] erspan0: entered promiscuous mode
[  296.757466][T16607] erspan0: entered allmulticast mode
[  296.759356][T16607] ip_vti0: entered promiscuous mode
[  296.761313][T16607] ip_vti0: entered allmulticast mode
[  296.763163][T16607] ip6_vti0: entered promiscuous mode
[  296.764932][T16607] ip6_vti0: entered allmulticast mode
[  296.766748][T16607] sit0: entered promiscuous mode
[  296.768414][T16607] sit0: entered allmulticast mode
[  296.770200][T16607] ip6tnl0: entered promiscuous mode
[  296.772135][T16607] ip6tnl0: entered allmulticast mode
[  296.773961][T16607] ip6gre0: entered promiscuous mode
[  296.775690][T16607] ip6gre0: entered allmulticast mode
[  296.777512][T16607] ip6gretap0: entered promiscuous mode
[  296.779345][T16607] ip6gretap0: entered allmulticast mode
[  296.781347][T16607] bond0: entered promiscuous mode
[  296.783055][T16607] bond0: entered allmulticast mode
[  296.784798][T16607] team0: entered promiscuous mode
[  296.786496][T16607] team0: entered allmulticast mode
[  296.788243][T16607] dummy0: entered promiscuous mode
[  296.789961][T16607] dummy0: entered allmulticast mode
[  296.791977][T16607] nlmon0: entered promiscuous mode
[  296.793663][T16607] nlmon0: entered allmulticast mode
[  296.795442][T16607] caif0: entered promiscuous mode
[  296.797126][T16607] caif0: entered allmulticast mode
[  296.798876][T16607] vxcan0: entered promiscuous mode
[  296.800589][T16607] vxcan0: entered allmulticast mode
[  296.802474][T16607] vxcan1: entered promiscuous mode
[  296.804225][T16607] veth0: entered promiscuous mode
[  296.805909][T16607] veth0: entered allmulticast mode
[  296.807621][T16607] veth1: entered promiscuous mode
[  296.809302][T16607] veth1: entered allmulticast mode
[  296.813135][T16607] wg0: entered promiscuous mode
[  296.814742][T16607] wg0: entered allmulticast mode
[  296.816450][T16607] wg1: entered promiscuous mode
[  296.818078][T16607] wg1: entered allmulticast mode
[  296.819759][T16607] wg2: entered promiscuous mode
[  296.821778][T16607] wg2: entered allmulticast mode
[  296.823572][T16607] veth0_to_bridge: entered promiscuous mode
[  296.825537][T16607] veth0_to_bridge: entered allmulticast mode
[  296.827565][T16607] bridge_slave_0: entered promiscuous mode
[  296.829510][T16607] bridge_slave_0: entered allmulticast mode
[  296.831594][T16607] veth1_to_bridge: entered promiscuous mode
[  296.833578][T16607] veth1_to_bridge: entered allmulticast mode
[  296.835643][T16607] bridge_slave_1: entered promiscuous mode
[  296.837549][T16607] bridge_slave_1: entered allmulticast mode
[  296.839555][T16607] veth0_to_bond: entered promiscuous mode
[  296.841505][T16607] veth0_to_bond: entered allmulticast mode
[  296.843524][T16607] bond_slave_0: entered promiscuous mode
[  296.845398][T16607] bond_slave_0: entered allmulticast mode
[  296.847348][T16607] veth1_to_bond: entered promiscuous mode
[  296.849242][T16607] veth1_to_bond: entered allmulticast mode
[  296.851344][T16607] bond_slave_1: entered promiscuous mode
[  296.853189][T16607] bond_slave_1: entered allmulticast mode
[  296.855116][T16607] veth0_to_team: entered promiscuous mode
[  296.857026][T16607] veth0_to_team: entered allmulticast mode
[  296.859007][T16607] team_slave_0: entered promiscuous mode
[  296.860931][T16607] team_slave_0: entered allmulticast mode
[  296.862901][T16607] veth1_to_team: entered promiscuous mode
[  296.864746][T16607] veth1_to_team: entered allmulticast mode
[  296.866704][T16607] team_slave_1: entered promiscuous mode
[  296.868663][T16607] team_slave_1: entered allmulticast mode
[  296.870619][T16607] veth0_to_batadv: entered promiscuous mode
[  296.872668][T16607] veth0_to_batadv: entered allmulticast mode
[  296.874712][T16607] batadv_slave_0: entered promiscuous mode
[  296.876654][T16607] batadv_slave_0: entered allmulticast mode
[  296.878670][T16607] veth1_to_batadv: entered promiscuous mode
[  296.881351][T16607] veth1_to_batadv: entered allmulticast mode
[  296.883891][T16607] batadv_slave_1: entered promiscuous mode
[  296.886204][T16607] batadv_slave_1: entered allmulticast mode
[  296.888328][T16607] xfrm0: entered promiscuous mode
[  296.890208][T16607] xfrm0: entered allmulticast mode
[  296.892018][T16607] veth0_to_hsr: entered promiscuous mode
[  296.893859][T16607] veth0_to_hsr: entered allmulticast mode
[  296.895773][T16607] hsr_slave_0: entered allmulticast mode
[  296.897680][T16607] veth1_to_hsr: entered promiscuous mode
[  296.899522][T16607] veth1_to_hsr: entered allmulticast mode
[  296.901506][T16607] hsr_slave_1: entered allmulticast mode
[  296.903494][T16607] 0: entered promiscuous mode
[  296.905124][T16607] 0: entered allmulticast mode
[  296.906933][T16607] veth1_virt_wifi: entered promiscuous mode
[  296.909208][T16607] veth1_virt_wifi: entered allmulticast mode
[  296.911534][T16607] veth0_virt_wifi: entered promiscuous mode
[  296.913744][T16607] veth0_virt_wifi: entered allmulticast mode
[  296.915942][T16607] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  296.918331][T16607] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  296.921288][T16607] veth1_vlan: entered allmulticast mode
[  296.923307][T16607] veth0_vlan: entered allmulticast mode
[  296.925170][T16607] vlan1: entered promiscuous mode
[  296.926875][T16607] vlan1: entered allmulticast mode
[  296.928611][T16607] macvlan0: entered promiscuous mode
[  296.930414][T16607] macvlan0: entered allmulticast mode
[  296.932302][T16607] macvlan1: entered promiscuous mode
[  296.934231][T16607] macvlan1: entered allmulticast mode
[  296.936046][T16607] ipvlan0: entered promiscuous mode
[  296.937755][T16607] ipvlan0: entered allmulticast mode
[  296.939532][T16607] ipvlan1: entered promiscuous mode
[  296.941480][T16607] ipvlan1: entered allmulticast mode
[  296.943573][T16607] veth1_macvtap: entered promiscuous mode
[  296.945547][T16607] veth1_macvtap: entered allmulticast mode
[  296.947598][T16607] veth0_macvtap: entered allmulticast mode
[  296.949627][T16607] macvtap0: entered promiscuous mode
[  296.951559][T16607] macvtap0: entered allmulticast mode
[  296.953562][T16607] geneve0: entered promiscuous mode
[  296.955369][T16607] geneve0: entered allmulticast mode
[  296.957248][T16607] geneve1: entered promiscuous mode
[  296.959009][T16607] geneve1: entered allmulticast mode
[  296.960962][T16607] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  296.963466][T16607] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  296.965937][T16607] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  296.968286][T16607] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  296.970720][T16607] geneve2: entered promiscuous mode
[  296.972661][T16607] geneve2: entered allmulticast mode
[  296.974653][T16607] bond1: entered promiscuous mode
[  296.976408][T16607] bond1: entered allmulticast mode
[  296.978245][T16607] geneve3: entered promiscuous mode
[  296.980022][T16607] geneve3: entered allmulticast mode
[  296.981964][T16607] bridge1: entered promiscuous mode
[  296.983798][T16607] bridge1: entered allmulticast mode
[  296.985663][T16607] bridge2: entered promiscuous mode
[  296.987444][T16607] bridge2: entered allmulticast mode
[  296.989288][T16607] ip6erspan1: entered promiscuous mode
[  296.991252][T16607] ip6erspan1: entered allmulticast mode
[  296.993281][T16607] mac80211_hwsim hwsim10 wlan2: entered promiscuous mode
[  296.995695][T16607] mac80211_hwsim hwsim10 wlan2: entered allmulticast mode
[  296.998170][T16607] mac80211_hwsim hwsim11 wlan3: entered promiscuous mode
[  297.000545][T16607] mac80211_hwsim hwsim11 wlan3: entered allmulticast mode
[  297.003240][T16607] syztnl2: entered promiscuous mode
[  297.005044][T16607] syztnl2: entered allmulticast mode
[  297.006941][T16607] bridge3: entered promiscuous mode
[  297.008690][T16607] bridge3: entered allmulticast mode
[  297.010526][T16607] bond2: entered promiscuous mode
[  297.012325][T16607] bond2: entered allmulticast mode
[  297.014215][T16607] veth2: entered promiscuous mode
[  297.015957][T16607] veth2: entered allmulticast mode
[  297.017733][T16607] veth3: entered promiscuous mode
[  297.019484][T16607] veth3: entered allmulticast mode
[  297.021381][T16607] gre1: entered promiscuous mode
[  297.023116][T16607] gre1: entered allmulticast mode
[  297.024897][T16607] bond3: entered promiscuous mode
[  297.026618][T16607] bond3: entered allmulticast mode
[  297.028423][T16607] mac80211_hwsim hwsim16 wlan4: entered promiscuous mode
[  297.030686][T16607] mac80211_hwsim hwsim16 wlan4: entered allmulticast mode
[  297.033705][T16607] mac80211_hwsim hwsim17 wlan5: entered promiscuous mode
[  297.036108][T16607] mac80211_hwsim hwsim17 wlan5: entered allmulticast mode
[  297.038569][T16607] ieee802154 phy1 wpan1: entered promiscuous mode
[  297.040746][T16607] ieee802154 phy1 wpan1: entered allmulticast mode
[  297.043092][T16607] bond4: entered promiscuous mode
[  297.044795][T16607] bond4: entered allmulticast mode
[  297.046621][T16607] vti0: entered promiscuous mode
[  297.048308][T16607] vti0: entered allmulticast mode
[  297.050096][T16607] veth1_to_team.3: entered promiscuous mode
[  297.052460][T16607] veth1_to_team.3: entered allmulticast mode
[  297.054768][T16607] bond5: entered promiscuous mode
[  297.056542][T16607] bond5: entered allmulticast mode
[  297.058387][T16607] mac80211_hwsim hwsim18 wlan6: entered promiscuous mode
[  297.060735][T16607] mac80211_hwsim hwsim18 wlan6: entered allmulticast mode
[  297.063361][T16607] bridge4: entered promiscuous mode
[  297.065197][T16607] bridge4: entered allmulticast mode
[  297.067117][T16607] bond6: entered promiscuous mode
[  297.068876][T16607] bond6: entered allmulticast mode
[  297.070718][T16607] veth4: entered promiscuous mode
[  297.072514][T16607] veth4: entered allmulticast mode
[  297.074437][T16607] veth5: entered promiscuous mode
[  297.076195][T16607] veth5: entered allmulticast mode
[  297.078001][T16607] ip6tnl1: entered promiscuous mode
[  297.079739][T16607] ip6tnl1: entered allmulticast mode
[  297.081575][T16607] bridge5: entered promiscuous mode
[  297.083343][T16607] bridge5: entered allmulticast mode
[  297.085156][T16607] bond7: entered promiscuous mode
[  297.086905][T16607] bond7: entered allmulticast mode
[  297.088652][T16607] bridge6: entered promiscuous mode
[  297.090404][T16607] bridge6: entered allmulticast mode
[  297.092402][T16607] netdevsim netdevsim2 eth0: entered promiscuous mode
[  297.094716][T16607] netdevsim netdevsim2 eth0: entered allmulticast mode
[  297.097005][T16607] netdevsim netdevsim2 eth1: entered promiscuous mode
[  297.099132][T16607] netdevsim netdevsim2 eth1: entered allmulticast mode
[  297.101452][T16607] netdevsim netdevsim2 eth2: entered promiscuous mode
[  297.103752][T16607] netdevsim netdevsim2 eth2: entered allmulticast mode
[  297.106053][T16607] netdevsim netdevsim2 eth3: entered promiscuous mode
[  297.108300][T16607] netdevsim netdevsim2 eth3: entered allmulticast mode
[  297.110589][T16607] gre2: entered promiscuous mode
[  297.112345][T16607] gre2: entered allmulticast mode
[  297.114211][T16607] mac80211_hwsim hwsim23 wlan7: entered promiscuous mode
[  297.116525][T16607] mac80211_hwsim hwsim23 wlan7: entered allmulticast mode
[  297.118973][T16607] vlan0: entered promiscuous mode
[  297.121069][T16607] vlan0: entered allmulticast mode
[  297.122915][T16607] pimreg0: entered promiscuous mode
[  297.124668][T16607] pimreg0: entered allmulticast mode
[  297.126469][T16607] vxlan0: entered promiscuous mode
[  297.128207][T16607] vxlan0: entered allmulticast mode
[  297.451677][T16620] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2819'.
[  297.996792][T16629] Bluetooth: MGMT ver 1.23
[  298.101835][T16631] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2820'.
[  298.168900][T16634] netlink: 'syz.0.2821': attribute type 1 has an invalid length.
[  298.172271][T16634] bridge0: port 1(syz_tun) entered blocking state
[  298.174731][T16634] bridge0: port 1(syz_tun) entered disabled state
[  298.177143][T16634] syz_tun: entered allmulticast mode
[  298.180786][T16634] syz_tun: entered promiscuous mode
[  299.005845][T16656] IPVS: Error connecting to the multicast addr
[  299.036190][T16666] tipc: Started in network mode
[  299.037933][T16666] tipc: Node identity 1247d32f576a, cluster identity 4711
[  299.041084][T16666] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  299.048435][T16666] syzkaller0: entered promiscuous mode
[  299.050396][T16666] syzkaller0: entered allmulticast mode
[  299.056435][T16666] tipc: Resetting bearer <eth:syzkaller0>
[  299.060774][T16663] tipc: Resetting bearer <eth:syzkaller0>
[  299.069185][T16663] tipc: Disabling bearer <eth:syzkaller0>
[  299.114102][T16676] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  299.117554][T16676] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  299.177146][T16679] __nla_validate_parse: 6 callbacks suppressed
[  299.177164][T16679] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2835'.
[  299.251602][T16681] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2836'.
[  299.279754][T16685] netlink: 'syz.0.2837': attribute type 1 has an invalid length.
[  299.283072][T16685] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2837'.
[  299.389762][T16692] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2839'.
[  299.613378][T16697] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  300.083345][T16720] netlink: 'syz.1.2842': attribute type 5 has an invalid length.
[  300.110630][T16725] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2848'.
[  300.252939][T16731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2850'.
[  300.296445][T16738] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2851'.
[  300.818018][T16753] siw: device registration error -23
[  300.871549][T16755] syzkaller1: entered promiscuous mode
[  300.873543][T16755] syzkaller1: entered allmulticast mode
[  301.176872][T16758] netlink: 'syz.2.2856': attribute type 13 has an invalid length.
[  301.180427][T16758] netlink: 'syz.2.2856': attribute type 17 has an invalid length.
[  301.184221][T16758] lo: left promiscuous mode
[  301.186212][T16758] lo: left allmulticast mode
[  301.189472][T16758] tunl0: left promiscuous mode
[  301.191882][T16758] tunl0: left allmulticast mode
[  301.195168][T16758] gre0: left promiscuous mode
[  301.197188][T16758] gre0: left allmulticast mode
[  301.200794][T16758] gretap0: left promiscuous mode
[  301.203509][T16758] gretap0: left allmulticast mode
[  301.213012][T16758] erspan0: left promiscuous mode
[  301.215279][T16758] erspan0: left allmulticast mode
[  301.224670][T16758] ip_vti0: left promiscuous mode
[  301.227008][T16758] ip_vti0: left allmulticast mode
[  301.230206][T16758] ip6_vti0: left promiscuous mode
[  301.233010][T16758] ip6_vti0: left allmulticast mode
[  301.236527][T16758] sit0: left promiscuous mode
[  301.238721][T16758] sit0: left allmulticast mode
[  301.244311][T16758] ip6tnl0: left promiscuous mode
[  301.246486][T16758] ip6tnl0: left allmulticast mode
[  301.249884][T16758] ip6gre0: left promiscuous mode
[  301.252209][T16758] ip6gre0: left allmulticast mode
[  301.255818][T16758] ip6gretap0: left promiscuous mode
[  301.258080][T16758] ip6gretap0: left allmulticast mode
[  301.267124][T16758] bond0: left promiscuous mode
[  301.269161][T16758] bond0: left allmulticast mode
[  301.271840][T16758] 8021q: adding VLAN 0 to HW filter on device bond0
[  301.275435][T16758] team0: left promiscuous mode
[  301.277543][T16758] team0: left allmulticast mode
[  301.280110][T16758] 8021q: adding VLAN 0 to HW filter on device team0
[  301.372525][T16758] dummy0: left promiscuous mode
[  301.374230][T16758] dummy0: left allmulticast mode
[  301.376611][T16758] nlmon0: left promiscuous mode
[  301.378202][T16758] nlmon0: left allmulticast mode
[  301.380371][T16758] caif0: left promiscuous mode
[  301.382255][T16758] caif0: left allmulticast mode
[  301.383931][T16758] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  301.412364][T16761] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2857'.
[  301.784795][T16767] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  301.811463][T16767] syzkaller0: entered promiscuous mode
[  301.813347][T16767] syzkaller0: entered allmulticast mode
[  301.815585][T16767] tipc: Resetting bearer <eth:syzkaller0>
[  301.831843][T16766] tipc: Resetting bearer <eth:syzkaller0>
[  301.864581][T16766] tipc: Disabling bearer <eth:syzkaller0>
[  302.039008][T16776] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2863'.
[  302.042325][T16776] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2863'.
[  302.195567][T16779] vxcan0: left promiscuous mode
[  302.197989][T16779] vxcan0: left allmulticast mode
[  302.199818][T16779] vxcan1: left promiscuous mode
[  302.202124][T16779] veth0: left promiscuous mode
[  302.203790][T16779] veth0: left allmulticast mode
[  302.205567][T16779] veth1: left promiscuous mode
[  302.207611][T16779] veth1: left allmulticast mode
[  302.209486][T16779] wg0: left promiscuous mode
[  302.211263][T16779] wg0: left allmulticast mode
[  302.213009][T16779] wg1: left promiscuous mode
[  302.214639][T16779] wg1: left allmulticast mode
[  302.216428][T16779] wg2: left promiscuous mode
[  302.218081][T16779] wg2: left allmulticast mode
[  302.219905][T16779] veth0_to_bridge: left promiscuous mode
[  302.222309][T16779] veth0_to_bridge: left allmulticast mode
[  302.224372][T16779] bridge_slave_0: left promiscuous mode
[  302.226346][T16779] bridge_slave_0: left allmulticast mode
[  302.228403][T16779] veth1_to_bridge: left promiscuous mode
[  302.230430][T16779] veth1_to_bridge: left allmulticast mode
[  302.233479][T16779] bridge_slave_1: left promiscuous mode
[  302.235609][T16779] bridge_slave_1: left allmulticast mode
[  302.237575][T16779] veth0_to_bond: left promiscuous mode
[  302.239537][T16779] veth0_to_bond: left allmulticast mode
[  302.242007][T16779] bond_slave_0: left promiscuous mode
[  302.243890][T16779] bond_slave_0: left allmulticast mode
[  302.245925][T16779] veth1_to_bond: left promiscuous mode
[  302.247836][T16779] veth1_to_bond: left allmulticast mode
[  302.250959][T16779] bond_slave_1: left promiscuous mode
[  302.252822][T16779] bond_slave_1: left allmulticast mode
[  302.254707][T16779] veth0_to_team: left promiscuous mode
[  302.256641][T16779] veth0_to_team: left allmulticast mode
[  302.258607][T16779] team_slave_0: left promiscuous mode
[  302.261920][T16779] team_slave_0: left allmulticast mode
[  302.263904][T16779] team_slave_1: left promiscuous mode
[  302.265791][T16779] team_slave_1: left allmulticast mode
[  302.267639][T16779] veth0_to_batadv: left promiscuous mode
[  302.269535][T16779] veth0_to_batadv: left allmulticast mode
[  302.271630][T16779] batadv_slave_0: left promiscuous mode
[  302.273495][T16779] batadv_slave_0: left allmulticast mode
[  302.275440][T16779] veth1_to_batadv: left promiscuous mode
[  302.277418][T16779] veth1_to_batadv: left allmulticast mode
[  302.279431][T16779] batadv_slave_1: left promiscuous mode
[  302.282281][T16779] batadv_slave_1: left allmulticast mode
[  302.284476][T16779] xfrm0: left promiscuous mode
[  302.286409][T16779] xfrm0: left allmulticast mode
[  302.288236][T16779] veth0_to_hsr: left promiscuous mode
[  302.290180][T16779] veth0_to_hsr: left allmulticast mode
[  302.292614][T16779] veth1_to_hsr: left promiscuous mode
[  302.294504][T16779] veth1_to_hsr: left allmulticast mode
[  302.296461][T16779] 0: left promiscuous mode
[  302.298025][T16779] 0: left allmulticast mode
[  302.299638][T16779] hsr_slave_0: left allmulticast mode
[  302.303125][T16779] hsr_slave_1: left allmulticast mode
[  302.306116][T16779] veth1_virt_wifi: left promiscuous mode
[  302.308044][T16779] veth1_virt_wifi: left allmulticast mode
[  302.310051][T16779] veth0_virt_wifi: left promiscuous mode
[  302.312056][T16779] veth0_virt_wifi: left allmulticast mode
[  302.314834][T16779] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  302.317184][T16779] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[  302.319847][T16779] veth1_vlan: left allmulticast mode
[  302.322252][T16779] vlan1: left promiscuous mode
[  302.324469][T16779] vlan1: left allmulticast mode
[  302.326810][T16779] macvlan0: left promiscuous mode
[  302.328655][T16779] macvlan0: left allmulticast mode
[  302.330546][T16779] macvlan1: left promiscuous mode
[  302.334456][T16779] macvlan1: left allmulticast mode
[  302.336279][T16779] ipvlan0: left promiscuous mode
[  302.338027][T16779] ipvlan0: left allmulticast mode
[  302.339936][T16779] ipvlan1: left promiscuous mode
[  302.342088][T16779] ipvlan1: left allmulticast mode
[  302.343994][T16779] veth0_vlan: left allmulticast mode
[  302.346126][T16779] veth1_macvtap: left promiscuous mode
[  302.347975][T16779] veth1_macvtap: left allmulticast mode
[  302.349862][T16779] veth0_macvtap: left allmulticast mode
[  302.352089][T16779] macvtap0: left promiscuous mode
[  302.353906][T16779] macvtap0: left allmulticast mode
[  302.356069][T16779] geneve0: left promiscuous mode
[  302.360359][T16779] geneve0: left allmulticast mode
[  302.366974][T16779] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  302.369623][T16779] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  302.372035][T16779] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  302.374578][T16779] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  302.377001][T16779] geneve2: left promiscuous mode
[  302.378802][T16779] geneve2: left allmulticast mode
[  302.380691][T16779] bond1: left promiscuous mode
[  302.382825][T16779] bond1: left allmulticast mode
[  302.384791][T16779] geneve3: left promiscuous mode
[  302.386427][T16779] geneve3: left allmulticast mode
[  302.388155][T16779] bridge1: left promiscuous mode
[  302.389849][T16779] bridge1: left allmulticast mode
[  302.391729][T16779] bridge2: left promiscuous mode
[  302.393396][T16779] bridge2: left allmulticast mode
[  302.395195][T16779] ip6erspan1: left promiscuous mode
[  302.396961][T16779] ip6erspan1: left allmulticast mode
[  302.398820][T16779] mac80211_hwsim hwsim10 wlan2: left promiscuous mode
[  302.401496][T16779] mac80211_hwsim hwsim10 wlan2: left allmulticast mode
[  302.403967][T16779] mac80211_hwsim hwsim11 wlan3: left promiscuous mode
[  302.406493][T16779] mac80211_hwsim hwsim11 wlan3: left allmulticast mode
[  302.408857][T16779] syztnl2: left promiscuous mode
[  302.410564][T16779] syztnl2: left allmulticast mode
[  302.413320][T16779] bridge3: left promiscuous mode
[  302.415064][T16779] bridge3: left allmulticast mode
[  302.416844][T16779] bond2: left promiscuous mode
[  302.418470][T16779] bond2: left allmulticast mode
[  302.420221][T16779] veth2: left promiscuous mode
[  302.422272][T16779] veth2: left allmulticast mode
[  302.424217][T16779] veth3: left promiscuous mode
[  302.426029][T16779] veth3: left allmulticast mode
[  302.427773][T16779] gre1: left promiscuous mode
[  302.429446][T16779] gre1: left allmulticast mode
[  302.432725][T16779] bond3: left promiscuous mode
[  302.434587][T16779] bond3: left allmulticast mode
[  302.436474][T16779] mac80211_hwsim hwsim16 wlan4: left promiscuous mode
[  302.438937][T16779] mac80211_hwsim hwsim16 wlan4: left allmulticast mode
[  302.441872][T16779] mac80211_hwsim hwsim17 wlan5: left promiscuous mode
[  302.444272][T16779] mac80211_hwsim hwsim17 wlan5: left allmulticast mode
[  302.446776][T16779] ieee802154 phy1 wpan1: left promiscuous mode
[  302.448971][T16779] ieee802154 phy1 wpan1: left allmulticast mode
[  302.451235][T16779] bond4: left promiscuous mode
[  302.452927][T16779] bond4: left allmulticast mode
[  302.454579][T16779] vti0: left promiscuous mode
[  302.456231][T16779] vti0: left allmulticast mode
[  302.457860][T16779] veth1_to_team.3: left promiscuous mode
[  302.459795][T16779] veth1_to_team: left promiscuous mode
[  302.461941][T16779] veth1_to_team.3: left allmulticast mode
[  302.463952][T16779] veth1_to_team: left allmulticast mode
[  302.465953][T16779] bond5: left promiscuous mode
[  302.467630][T16779] bond5: left allmulticast mode
[  302.469323][T16779] mac80211_hwsim hwsim18 wlan6: left promiscuous mode
[  302.471770][T16779] mac80211_hwsim hwsim18 wlan6: left allmulticast mode
[  302.474119][T16779] bridge4: left promiscuous mode
[  302.475861][T16779] bridge4: left allmulticast mode
[  302.478076][T16779] bond6: left promiscuous mode
[  302.479837][T16779] bond6: left allmulticast mode
[  302.481569][T16779] veth4: left promiscuous mode
[  302.483193][T16779] veth4: left allmulticast mode
[  302.484917][T16779] veth5: left promiscuous mode
[  302.486542][T16779] veth5: left allmulticast mode
[  302.488186][T16779] ip6tnl1: left promiscuous mode
[  302.490342][T16779] ip6tnl1: left allmulticast mode
[  302.492320][T16779] bridge5: left promiscuous mode
[  302.494215][T16779] bridge5: left allmulticast mode
[  302.496079][T16779] bond7: left promiscuous mode
[  302.497817][T16779] bond7: left allmulticast mode
[  302.499520][T16779] bridge6: left promiscuous mode
[  302.501426][T16779] bridge6: left allmulticast mode
[  302.503309][T16779] netdevsim netdevsim2 eth0: left promiscuous mode
[  302.505783][T16779] netdevsim netdevsim2 eth0: left allmulticast mode
[  302.508087][T16779] netdevsim netdevsim2 eth1: left promiscuous mode
[  302.510297][T16779] netdevsim netdevsim2 eth1: left allmulticast mode
[  302.512827][T16779] netdevsim netdevsim2 eth2: left promiscuous mode
[  302.515065][T16779] netdevsim netdevsim2 eth2: left allmulticast mode
[  302.517468][T16779] netdevsim netdevsim2 eth3: left promiscuous mode
[  302.519784][T16779] netdevsim netdevsim2 eth3: left allmulticast mode
[  302.522220][T16779] gre2: left promiscuous mode
[  302.523985][T16779] gre2: left allmulticast mode
[  302.525895][T16779] mac80211_hwsim hwsim23 wlan7: left promiscuous mode
[  302.528148][T16779] mac80211_hwsim hwsim23 wlan7: left allmulticast mode
[  302.530502][T16779] vlan0: left promiscuous mode
[  302.532329][T16779] geneve1: left promiscuous mode
[  302.534148][T16779] vlan0: left allmulticast mode
[  302.535855][T16779] geneve1: left allmulticast mode
[  302.537636][T16779] pimreg0: left promiscuous mode
[  302.539361][T16779] pimreg0: left allmulticast mode
[  302.541208][T16779] vxlan0: left promiscuous mode
[  302.542958][T16779] vxlan0: left allmulticast mode
[  302.567343][T16797] syzkaller0: tun_chr_ioctl cmd 1074812117
[  303.212638][T16805] vxcan1: entered allmulticast mode
[  303.634857][T16841] netlink: 'syz.1.2879': attribute type 3 has an invalid length.
[  303.638320][T16842] netlink: 'syz.1.2879': attribute type 3 has an invalid length.
[  304.232405][T16885] netlink: 'syz.0.2890': attribute type 1 has an invalid length.
[  304.235688][T16885] netlink: 'syz.0.2890': attribute type 1 has an invalid length.
[  304.378446][T16894] netlink: 'syz.2.2892': attribute type 4 has an invalid length.
[  304.381439][T16894] netlink: 'syz.2.2892': attribute type 1 has an invalid length.
[  304.384103][T16894] netlink: 'syz.2.2892': attribute type 6 has an invalid length.
[  304.386790][T16894] netlink: 'syz.2.2892': attribute type 3 has an invalid length.
[  304.466292][T16904] __nla_validate_parse: 14 callbacks suppressed
[  304.466303][T16904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2896'.
[  304.471882][T16904] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  304.475965][T16904] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  304.523865][T16906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2897'.
[  304.580248][T16909] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2897'.
[  304.806901][T16911] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  306.180139][T16965] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2910'.
[  306.184938][T16966] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2910'.
[  306.280273][T16973] siw: device registration error -23
[  306.442428][T16990] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2915'.
[  306.445375][T16990] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2915'.
[  306.448220][T16990] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2915'.
[  306.455538][T16990] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2915'.
[  306.849750][T16998] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2917'.
[  306.944933][T17006] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  307.466102][T17053] netlink: 'syz.1.2931': attribute type 3 has an invalid length.
[  308.296165][T17084] syzkaller0: entered promiscuous mode
[  308.298033][T17084] syzkaller0: entered allmulticast mode
[  309.385279][T17123] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  309.579503][T17129] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  309.585050][T17129] __nla_validate_parse: 4 callbacks suppressed
[  309.585061][T17129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2952'.
[  310.305243][T17148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2958'.
[  310.485215][T17156] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2960'.
[  310.488835][T17156] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2960'.
[  310.492711][T17156] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2960'.
[  310.496423][T17156] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2960'.
[  310.641116][T17158] vxcan2: entered promiscuous mode
[  311.227814][T17178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2968'.
[  311.381000][T17182] nbd2: detected capacity change from 0 to 63
[  311.383528][T17186] block nbd2: NBD_DISCONNECT
[  311.385344][T17186] block nbd2: Disconnected due to user request.
[  311.387781][T17186] block nbd2: shutting down sockets
[  311.615494][T17201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2973'.
[  311.636379][T17203] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2974'.
[  311.651353][T17203] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2974'.
[  311.654937][T17203] IPVS: Unknown mcast interface: vcan0
[  311.715522][T17213] netlink: 'syz.0.2975': attribute type 13 has an invalid length.
[  311.718223][T17213] netlink: 'syz.0.2975': attribute type 17 has an invalid length.
[  311.743460][T17213] bridge0: port 1(syz_tun) entered blocking state
[  311.746356][T17213] bridge0: port 1(syz_tun) entered forwarding state
[  311.753453][T17213] 8021q: adding VLAN 0 to HW filter on device bond0
[  311.756498][T17213] 8021q: adding VLAN 0 to HW filter on device team0
[  311.760727][T17213] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  311.816015][   T33] audit: type=1107 audit(1755869726.537:2): pid=17221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='5[˶Xǳ:D"3:HQߦC=JDqLc1tH쾉ýcwU$`BÔX\mi1H|tii:SW'
[  311.849354][T17229] sctp: [Deprecated]: syz.2.2981 (pid 17229) Use of int in max_burst socket option deprecated.
[  311.849354][T17229] Use struct sctp_assoc_value instead
[  312.826412][T17270] geneve4: entered promiscuous mode
[  312.829166][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  312.832785][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  312.835894][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  312.838721][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  313.813716][T17336] 8021q: VLANs not supported on bond0
[  314.098489][T17349] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  314.141233][T17353] netlink: 'syz.0.3017': attribute type 14 has an invalid length.
[  314.143967][T17353] netlink: 'syz.0.3017': attribute type 13 has an invalid length.
[  314.809364][T17380] bridge0: port 1(batadv1) entered blocking state
[  314.812640][T17380] bridge0: port 1(batadv1) entered disabled state
[  314.815242][T17380] batadv1: entered allmulticast mode
[  314.818122][T17380] batadv1: entered promiscuous mode
[  315.321072][ T5740] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  315.325015][ T5740] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  315.550820][T17403] vxcan1: entered allmulticast mode
[  316.198667][T17434] __nla_validate_parse: 20 callbacks suppressed
[  316.198678][T17434] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3032'.
[  316.205615][T17435] batadv_slave_0: entered promiscuous mode
[  316.383126][T17445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3035'.
[  316.386341][T17445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3035'.
[  316.722584][T17454] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3038'.
[  316.858755][T17460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3041'.
[  316.916699][T17464] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3041'.
[  316.928914][T17464] geneve4: left promiscuous mode
[  316.934253][ T5740] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  316.939333][ T5740] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  316.944371][ T5740] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  316.947698][ T5740] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  317.695561][T17477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3046'.
[  317.718698][T17479] IPv6: sit1: Disabled Multicast RS
[  317.728273][T17479] netlink: 'syz.2.3047': attribute type 9 has an invalid length.
[  317.732671][T17479] netlink: 'syz.2.3047': attribute type 6 has an invalid length.
[  317.757045][T17481] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3048'.
[  317.777089][T17482] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3046'.
[  318.692913][T17501] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3053'.
[  319.079743][T17538] netlink: zone id is out of range
[  319.084252][T17538] netlink: zone id is out of range
[  319.086195][T17538] netlink: zone id is out of range
[  319.088035][T17538] netlink: get zone limit has 8 unknown bytes
[  319.094931][T17537] delete_channel: no stack
[  319.230278][T17540] bridge0: port 1(syz_tun) entered disabled state
[  319.251382][T17540] batadv_slave_0: left promiscuous mode
[  319.715849][T17564] unknown channel width for channel at 909000KHz?
[  319.718096][T17564] unknown channel width for channel at 909000KHz?
[  319.720327][T17564] unknown channel width for channel at 909000KHz?
[  319.898432][T17572] workqueue: Failed to create a rescuer kthread for wq "nfc55_nci_cmd_wq": -EINTR
[  320.125210][T17737] veth7: entered promiscuous mode
[  320.493137][T17811] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  320.497856][T17811] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  320.502813][T17812] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  320.507066][T17812] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  323.272925][T17914] lo: entered allmulticast mode
[  323.279757][T17914] dvmrp8: entered allmulticast mode
[  323.340099][T17915] netlink: 'syz.1.3114': attribute type 23 has an invalid length.
[  323.397422][T17913] lo: left allmulticast mode
[  323.399320][T17913] dvmrp8: left allmulticast mode
[  323.478343][T17925] __nla_validate_parse: 9 callbacks suppressed
[  323.478356][T17925] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3117'.
[  323.697857][T17941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3119'.
[  323.715984][T17942] syzkaller1: entered promiscuous mode
[  323.717989][T17942] syzkaller1: entered allmulticast mode
[  324.301895][T17944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3122'.
[  324.305483][T17944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3122'.
[  324.308691][T17944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3122'.
[  324.312807][T17944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3122'.
[  324.316020][T17944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3122'.
[  324.319471][T17944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3122'.
[  324.323662][T17944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3122'.
[  324.327231][T17944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3122'.
[  327.168193][T18027] netlink: 'syz.2.3143': attribute type 29 has an invalid length.
[  328.518169][T18090] __nla_validate_parse: 81 callbacks suppressed
[  328.518182][T18090] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3161'.
[  328.523526][T18090] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3161'.
[  328.526609][T18090] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3161'.
[  328.529525][T18090] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3161'.
[  328.844610][T18094] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3163'.
[  328.896944][T18101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3165'.
[  329.887013][T18130] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20001
[  330.297714][T18147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3177'.
[  330.700165][T18149] Bluetooth: MGMT ver 1.23
[  330.849489][T18173] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3184'.
[  331.002115][T18178] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  331.005817][T18178] syzkaller0: entered promiscuous mode
[  331.007979][T18178] syzkaller0: entered allmulticast mode
[  331.017199][T18178] tipc: Resetting bearer <eth:syzkaller0>
[  331.630379][T18183] netlink: 'syz.0.3187': attribute type 3 has an invalid length.
[  331.635163][T18183] netlink: 'syz.0.3187': attribute type 3 has an invalid length.
[  331.773842][T18176] tipc: Resetting bearer <eth:syzkaller0>
[  331.777066][T18176] tipc: Disabling bearer <eth:syzkaller0>
[  331.974014][T18189] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3189'.
[  331.978470][T18189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3189'.
[  331.982716][T18189] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  332.358870][ T5880] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  332.367776][ T5880] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[  332.375885][ T5880] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  332.493379][T18244] netlink: 'syz.0.3200': attribute type 6 has an invalid length.
[  332.540122][T18251] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  332.544909][T18251] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  333.662323][T18304] __nla_validate_parse: 3 callbacks suppressed
[  333.662336][T18304] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3215'.
[  333.667284][T18304] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3215'.
[  333.670175][T18304] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3215'.
[  333.674134][T18304] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3215'.
[  333.693720][T18307] netlink: 'syz.2.3218': attribute type 83 has an invalid length.
[  333.733249][T18309] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3219'.
[  333.794736][T18321] netlink: 'syz.2.3222': attribute type 3 has an invalid length.
[  333.797574][T18321] netlink: 666 bytes leftover after parsing attributes in process `syz.2.3222'.
[  333.858603][T18327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3223'.
[  333.915353][T18330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3223'.
[  335.742641][T18386] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3238'.
[  336.697517][T18414] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3245'.
[  338.996583][T18485] __nla_validate_parse: 3 callbacks suppressed
[  338.996595][T18485] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3264'.
[  339.054379][T18490] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3265'.
[  339.059902][T18490] netlink: 18956 bytes leftover after parsing attributes in process `syz.0.3265'.
[  339.083261][T18492] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3266'.
[  339.093612][T18494] syzkaller1: entered promiscuous mode
[  339.095605][T18494] syzkaller1: entered allmulticast mode
[  339.248620][T18499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3269'.
[  339.293626][T18504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3270'.
[  339.944204][T18510] sctp: [Deprecated]: syz.0.3271 (pid 18510) Use of struct sctp_assoc_value in delayed_ack socket option.
[  339.944204][T18510] Use struct sctp_sack_info instead
[  339.999892][T18513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3272'.
[  340.242261][T18547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3280'.
[  340.298171][T18560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3280'.
[  340.316037][T18558] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3283'.
[  341.110698][T18584] IPVS: length: 24 != 8
[  341.201642][T18592] netlink: 'syz.0.3293': attribute type 1 has an invalid length.
[  341.298540][ T5740] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  341.340759][ T5880] IPVS: starting estimator thread 0...
[  341.451039][T18628] IPVS: using max 136 ests per chain, 326400 per kthread
[  341.981058][T18640] netlink: 'syz.2.3302': attribute type 5 has an invalid length.
[  342.120293][T18644] IPVS: length: 4096 != 8
[  344.650815][T18712] __nla_validate_parse: 11 callbacks suppressed
[  344.650829][T18712] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3320'.
[  344.657546][T18712] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3320'.
[  344.660801][T18712] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3320'.
[  344.663895][T18712] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3320'.
[  344.667386][T18712] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3320'.
[  344.670759][T18712] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3320'.
[  344.674223][T18712] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3320'.
[  344.677213][T18712] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3320'.
[  344.680520][T18712] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3320'.
[  344.683633][T18712] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3320'.
[  344.810431][T18730] IPVS: Error connecting to the multicast addr
[  345.804233][T18757] openvswitch: netlink: Flow key attr not present in new flow.
[  346.503251][T18765] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  346.522949][T18767] netlink: 'syz.2.3337': attribute type 1 has an invalid length.
[  346.532110][T18767] bond8: entered promiscuous mode
[  346.533808][T18767] bond8: entered allmulticast mode
[  346.535684][T18767] 8021q: adding VLAN 0 to HW filter on device bond8
[  348.306480][T18828] netlink: 'syz.0.3351': attribute type 11 has an invalid length.
[  348.390109][T18842] vxcan1: left allmulticast mode
[  348.417890][T18846] netlink: 'syz.2.3357': attribute type 1 has an invalid length.
[  350.257901][T18885] __nla_validate_parse: 141 callbacks suppressed
[  350.257916][T18885] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3367'.
[  350.532871][T18895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3370'.
[  350.536253][T18895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3370'.
[  350.539742][T18895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3370'.
[  350.754835][T18915] netlink: 'syz.2.3374': attribute type 1 has an invalid length.
[  351.348888][T18951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3385'.
[  351.925837][T18972] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3389'.
[  351.928912][T18972] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3389'.
[  351.933631][T18972] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3389'.
[  351.936591][T18972] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3389'.
[  352.111821][T18982] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3391'.
[  352.437895][T19009] netlink: 'syz.1.3400': attribute type 2 has an invalid length.
[  352.440526][T19009] netlink: 'syz.1.3400': attribute type 1 has an invalid length.
[  352.580935][    C0] ==================================================================
[  352.584163][    C0] BUG: KASAN: use-after-free in rose_timer_expiry+0x471/0x4b0
[  352.586679][    C0] Read of size 2 at addr ffff88801babc42a by task swapper/0/0
[  352.589751][    C0] 
[  352.591028][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  352.591044][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  352.591051][    C0] Call Trace:
[  352.591057][    C0]  <IRQ>
[  352.591062][    C0]  dump_stack_lvl+0x189/0x250
[  352.591079][    C0]  ? rcu_is_watching+0x15/0xb0
[  352.591093][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  352.591105][    C0]  ? rcu_is_watching+0x15/0xb0
[  352.591116][    C0]  ? lock_release+0x4b/0x3e0
[  352.591134][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  352.591149][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[  352.591163][    C0]  print_report+0xca/0x240
[  352.591175][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  352.591218][    C0]  kasan_report+0x118/0x150
[  352.591236][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  352.591253][    C0]  rose_timer_expiry+0x471/0x4b0
[  352.591268][    C0]  call_timer_fn+0x17e/0x5f0
[  352.591285][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  352.591300][    C0]  ? call_timer_fn+0xbe/0x5f0
[  352.591314][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  352.591332][    C0]  ? rcu_is_watching+0x15/0xb0
[  352.591343][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  352.591358][    C0]  __run_timer_base+0x61a/0x860
[  352.591372][    C0]  ? ktime_get+0x3e/0x1f0
[  352.591387][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  352.591401][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  352.591420][    C0]  run_timer_softirq+0xb7/0x180
[  352.591435][    C0]  handle_softirqs+0x286/0x870
[  352.591448][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  352.591460][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  352.591473][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  352.591488][    C0]  __irq_exit_rcu+0xca/0x1f0
[  352.591500][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  352.591513][    C0]  irq_exit_rcu+0x9/0x30
[  352.591523][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  352.591540][    C0]  </IRQ>
[  352.591545][    C0]  <TASK>
[  352.591550][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  352.591563][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  352.591579][    C0] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 66 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  352.591590][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  352.591602][    C0] RAX: aa1408c6940f4200 RBX: ffffffff819683b8 RCX: aa1408c6940f4200
[  352.591611][    C0] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8
[  352.591620][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  352.591628][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa38330
[  352.591644][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  352.591653][    C0]  ? do_idle+0x1e8/0x510
[  352.591665][    C0]  ? do_idle+0x1e8/0x510
[  352.591676][    C0]  default_idle+0x13/0x20
[  352.591688][    C0]  default_idle_call+0x74/0xb0
[  352.591698][    C0]  do_idle+0x1e8/0x510
[  352.591711][    C0]  ? __pfx_do_idle+0x10/0x10
[  352.591725][    C0]  cpu_startup_entry+0x44/0x60
[  352.591736][    C0]  rest_init+0x2de/0x300
[  352.591750][    C0]  start_kernel+0x3a9/0x410
[  352.591766][    C0]  x86_64_start_reservations+0x24/0x30
[  352.591783][    C0]  x86_64_start_kernel+0x143/0x1c0
[  352.591799][    C0]  common_startup_64+0x13e/0x147
[  352.591819][    C0]  </TASK>
[  352.591823][    C0] 
[  352.698567][    C0] The buggy address belongs to the physical page:
[  352.700619][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x192 pfn:0x1babc
[  352.703513][    C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  352.705839][    C0] page_type: f0(buddy)
[  352.707155][    C0] raw: 00fff00000000000 ffffea00012ba088 ffffea0000a5e708 0000000000000000
[  352.709949][    C0] raw: 0000000000000192 0000000000000001 00000000f0000000 0000000000000000
[  352.712773][    C0] page dumped because: kasan: bad access detected
[  352.714856][    C0] page_owner tracks the page as freed
[  352.716815][    C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140cc2(GFP_HIGHUSER|__GFP_COMP), pid 18882, tgid 18881 (syz.2.3368), ts 350209516769, free_ts 350254117674
[  352.724003][    C0]  post_alloc_hook+0x240/0x2a0
[  352.725982][    C0]  get_page_from_freelist+0x21e4/0x22c0
[  352.727951][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[  352.730074][    C0]  alloc_pages_mpol+0x232/0x4a0
[  352.731710][    C0]  folio_alloc_mpol_noprof+0x39/0x70
[  352.733436][    C0]  shmem_alloc_and_add_folio+0x447/0xf60
[  352.735267][    C0]  shmem_get_folio_gfp+0x59d/0x1660
[  352.736943][    C0]  shmem_fault+0x179/0x390
[  352.738429][    C0]  __do_fault+0x138/0x390
[  352.739859][    C0]  __handle_mm_fault+0x1847/0x5440
[  352.741564][    C0]  handle_mm_fault+0x40a/0x8e0
[  352.743157][    C0]  __get_user_pages+0x1699/0x2ce0
[  352.744837][    C0]  __gup_longterm_locked+0x3dc/0x1660
[  352.746607][    C0]  pin_user_pages+0x9e/0xd0
[  352.748136][    C0]  xdp_umem_pin_pages+0x117/0x340
[  352.749805][    C0]  xdp_umem_create+0x677/0x8e0
[  352.751401][    C0] page last free pid 8017 tgid 8017 stack trace:
[  352.753481][    C0]  __free_frozen_pages+0xbc4/0xd30
[  352.755175][    C0]  __folio_put+0x21b/0x2c0
[  352.756692][    C0]  unpin_user_pages_dirty_lock+0x395/0x510
[  352.758622][    C0]  xdp_umem_release+0xdc/0x220
[  352.760236][    C0]  process_scheduled_works+0xae1/0x17b0
[  352.762061][    C0]  worker_thread+0x8a0/0xda0
[  352.763612][    C0]  kthread+0x711/0x8a0
[  352.764973][    C0]  ret_from_fork+0x3fc/0x770
[  352.766649][    C0]  ret_from_fork_asm+0x1a/0x30
[  352.768279][    C0] 
[  352.769081][    C0] Memory state around the buggy address:
[  352.770936][    C0]  ffff88801babc300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  352.773609][    C0]  ffff88801babc380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  352.776215][    C0] >ffff88801babc400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  352.778843][    C0]                                   ^
[  352.780632][    C0]  ffff88801babc480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  352.783317][    C0]  ffff88801babc500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  352.786076][    C0] ==================================================================
[  352.788997][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  352.791518][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  352.794709][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  352.798176][    C0] Call Trace:
[  352.799372][    C0]  <IRQ>
[  352.800403][    C0]  dump_stack_lvl+0x99/0x250
[  352.802037][    C0]  ? __asan_memcpy+0x40/0x70
[  352.803696][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  352.805503][    C0]  ? __pfx__printk+0x10/0x10
[  352.807136][    C0]  vpanic+0x281/0x750
[  352.808520][    C0]  ? __pfx_vpanic+0x10/0x10
[  352.810075][    C0]  ? ct_nmi_exit+0x14b/0x1d0
[  352.811686][    C0]  panic+0xb9/0xc0
[  352.812955][    C0]  ? __pfx_panic+0x10/0x10
[  352.814438][    C0]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  352.816458][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  352.818422][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  352.820084][    C0]  check_panic_on_warn+0x89/0xb0
[  352.821755][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  352.823456][    C0]  end_report+0x78/0x160
[  352.824872][    C0]  kasan_report+0x129/0x150
[  352.826392][    C0]  ? rose_timer_expiry+0x471/0x4b0
[  352.828094][    C0]  rose_timer_expiry+0x471/0x4b0
[  352.829742][    C0]  call_timer_fn+0x17e/0x5f0
[  352.831294][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  352.833085][    C0]  ? call_timer_fn+0xbe/0x5f0
[  352.834660][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  352.836372][    C0]  ? rcu_is_watching+0x15/0xb0
[  352.837953][    C0]  ? __pfx_rose_timer_expiry+0x10/0x10
[  352.839766][    C0]  __run_timer_base+0x61a/0x860
[  352.841398][    C0]  ? ktime_get+0x3e/0x1f0
[  352.842817][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  352.844657][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  352.846796][    C0]  run_timer_softirq+0xb7/0x180
[  352.848454][    C0]  handle_softirqs+0x286/0x870
[  352.850130][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  352.851799][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  352.853674][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  352.855496][    C0]  __irq_exit_rcu+0xca/0x1f0
[  352.857069][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  352.858885][    C0]  irq_exit_rcu+0x9/0x30
[  352.860349][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  352.862354][    C0]  </IRQ>
[  352.863390][    C0]  <TASK>
[  352.864406][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  352.866468][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  352.868447][    C0] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 66 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  352.875027][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  352.877118][    C0] RAX: aa1408c6940f4200 RBX: ffffffff819683b8 RCX: aa1408c6940f4200
[  352.879835][    C0] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8
[  352.882575][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  352.885314][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa38330
[  352.887940][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  352.890581][    C0]  ? do_idle+0x1e8/0x510
[  352.892087][    C0]  ? do_idle+0x1e8/0x510
[  352.893582][    C0]  default_idle+0x13/0x20
[  352.895072][    C0]  default_idle_call+0x74/0xb0
[  352.896759][    C0]  do_idle+0x1e8/0x510
[  352.898151][    C0]  ? __pfx_do_idle+0x10/0x10
[  352.899745][    C0]  cpu_startup_entry+0x44/0x60
[  352.901416][    C0]  rest_init+0x2de/0x300
[  352.902866][    C0]  start_kernel+0x3a9/0x410
[  352.904456][    C0]  x86_64_start_reservations+0x24/0x30
[  352.906526][    C0]  x86_64_start_kernel+0x143/0x1c0
[  352.908733][    C0]  common_startup_64+0x13e/0x147
[  352.910870][    C0]  </TASK>
[  352.912819][    C0] Kernel Offset: disabled
[  352.914324][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:36:07  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000077 RBX=0000000000000077 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000007470
R8 =ffff888020848237 R9 =1ffff11004109046 R10=dffffc0000000000 R11=ffffffff854f2040
R12=dffffc0000000000 R13=ffffffff99afb909 R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f20bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5831774c40 CR3=0000000112092000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000008010010
XMM02=00007f0d1cb87498 00007f0d1cb87470 XMM03=00007f0d1cb874a8 00007f0d1cb874a0
XMM04=00007f0d1d6ed100 00007f0d1cb87460 XMM05=00007f0d1cb87478 00007f0d1cb874c0
XMM06=00007f0d1cb874b8 00007f0d1cb874b0 XMM07=00007f0d1cb874a8 00007f0d1cb874a0
XMM08=0000000000000000 00007f0d1ca12ee7 XMM09=0000000000000000 00007f0d1ca12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffff8881000f8000 RCX=de8daaeea5fa7900 RDX=0000000000000000
RSI=ffffffff8b8a73e0 RDI=0000000000000000 RBP=ffffc90000177f20 RSP=ffffc90000177df8
R8 =ffffffff8fa38337 R9 =1ffffffff1f47066 R10=dffffc0000000000 R11=fffffbfff1f47067
R12=ffffffff8fa38330 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff887d5140 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f583251bd58 CR3=000000010d97e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000014 000000000003bf12
XMM02=0000000000000000 0001ffffffffffff XMM03=ffffdf0801900300 04880001880302b8
XMM04=0000000000000000 0000000000000000 XMM05=000055557a47abc0 000055557a47a810
XMM06=0000000000000000 0000000000000000 XMM07=c404840001840314 0400018003048c08
XMM08=0120801000088004 0100000608060601 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
