last executing test programs:

1.253902069s ago: executing program 2 (id=6556):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x0)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000011700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000700000008000400050000000800010002000000240003"], 0x7c}}, 0x0)

1.253587551s ago: executing program 2 (id=6557):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0xc96df000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x144, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x118, 0x4, 0x0, 0x1, [{0x114, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x104, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_EXPRESSIONS={0xe4, 0xa, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0x1c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4}}}, {0x30, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SET_ID={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x68, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x5c, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0xb, 0x2, 0x1, 0x0, 'dynset\x00'}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0xfffb}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x1ff}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_LOG_PREFIX={0x9, 0x2, 0x1, 0x0, 'syz0\x00'}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x4}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x8}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x5}]}}}]}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SREG_KEY={0x8}]}}}]}]}], {0x14}}, 0x16c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x90, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x7a, 0x6, "f4af49cc12cbe37b7f08da9393b4ca704aebc691fa1437f9f322a61a9e7fb9eec5564cdde8bb5be0141ee22cbdf1f42583f5d80727f73346768ef2f28f5a566f0a820de4708aec594c753b4dd07328f82c86b39316d6a5d6158eacec44b037003fe59565fe935a5f2c677510f6273e006ab4312384f3"}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x120}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
r4 = socket(0x10, 0x400000000080803, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000340)=@ethtool_ringparam={0x4, 0x0, 0x1, 0xfffffffe, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}})
setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x29)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000240)=0xec, 0x4)

1.195277836s ago: executing program 2 (id=6558):
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x8000000000000003}, 0x18)
epoll_create(0x1)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000380)={0xc000101c})
sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4000891}, 0x20000000)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800004e251ed12bbd00f800", @ANYRESOCT=r2, @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x40040080}, 0x40d1)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000002c0)={0x0, 0xfffffffffffffcda, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES8=0x0, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r5, @ANYBLOB="0a00180003030303030300004c002380050005000f00000005001f000100000005001d0000000000050008000600000008000b00fdffffff01000e00010000000000030021000000080014005bffffff05000f00050000006d70cf74e8e46c8e08f24df430cfad3769084b1e9c86062485f107ecbac7948c081d4c74cb7b46cb73b930e655a527bf093caf46238e2bb1c28763214931b5d9fd960e746b395a8f53a499b0a012f4d8a188"], 0x74}, 0x1, 0x0, 0x0, 0x4080}, 0x40810)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008850}, 0x8d0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000040)={<r7=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r7, 0x0, r8, 0x0, 0x25a5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e00000009000000f413ffffff0300000048100000", @ANYBLOB="fd18a04c5c045e183e2a1a5089026434a7bbb5868733bd7969d48d4786e6f330de9d2577d5ac7b6d59dcfb3682c8e1a47141d14f24d075269c19dac2b397333f9e65e882e32be9572a87a2fc76abdc8e95b4efee1773b49b68e8e3c186880abf9c626303179f1021be37d7dfeb", @ANYRES8=r4, @ANYRES32=0x0, @ANYRES32, @ANYRES8=0x0], 0x50)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r9, 0x10f, 0x81, &(0x7f0000000080), 0x4)
sendmmsg$inet(r9, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r10)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0)

373.851267ms ago: executing program 1 (id=6590):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000), 0x4) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[], 0x84}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x8080)
close(r2) (async)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) (async)
listen(r3, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x2) (async)
r5 = socket$inet6(0xa, 0x802, 0x88)
setsockopt$inet6_udp_int(r5, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4)
sendto$inet6(r5, 0x0, 0x0, 0x40488c1, &(0x7f0000000180)={0xa, 0x4e23, 0x1001, @loopback, 0x4}, 0x1c) (async)
sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r7 = accept(r2, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) (async)
recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x28012, r8, 0x0) (async)
mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r8, 0x0) (async)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

322.203161ms ago: executing program 2 (id=6592):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x2f) (async)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) (async)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x40000c0) (async)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040)=@sco, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/116, 0x74}], 0x1, &(0x7f0000000500)=""/69, 0x45}, 0x10002) (async)
r2 = socket$inet6(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x40}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004010}, 0x4000000) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) (async)
sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000002c0)={0x1118, {{0x2, 0x4e21, @multicast2}}, 0x0, 0x2, [{{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e20, @empty}}]}, 0x190) (async)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180)={0x20004, 0x7}, 0x8)
close(r0)

319.970439ms ago: executing program 2 (id=6594):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x1, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x2c}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x14101, 0x0)
ioctl$RFKILL_IOC_MAX_SIZE(r3, 0x2, &(0x7f0000000080)=0x2)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0xda68c000)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4)
sendmsg$802154_dgram(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20044005}, 0x4000010)
read$rfkill(r4, &(0x7f00000000c0), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x6, 0x3, 0x0, 0x0, 0xa, 0xfffffffffffffffc}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r6)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000010c0)={'wpan0\x00', <r8=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x30, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x14, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040001}, 0xc040)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000100001000000030000000000040000000000000c000640000000000000000314000000030a010200000008020000000000000000000000000000000000000ad777651e45f0e31374e006dfedf410a2a7560b2962b4618ffb46e4b02547c0190ca0c48e5efb2454b405a387ffbc28bb1cb5064e7dc5f6a161e3c8a61fadbd99f5e06b5281f8069a45ce32a8a708ea535df679acf6b5aa2a4245efb6ed3687326b95d8cb594c9ecb3ffdf84f0cf4dc04123bcf3a592762aee02babe5d2a7f7579f6db2f74abff8ddb86f7bf69f9be5bc698024d330f9c708225d38d858a5cdd3efe549c8a73b214c6124a24ec927ee017bcfc274292d01d1a05e8a96e3cd0d9f27b283a61e4b00000000"], 0x5c}, 0x1, 0x1000000}, 0x24000880)
socket$inet_tcp(0x2, 0x1, 0x0)
r10 = socket$alg(0x26, 0x5, 0x0)
getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000100), &(0x7f0000000200)=0x4)
bind$alg(r10, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r11 = accept4(r10, 0x0, 0x0, 0x80800)
setsockopt$sock_int(r11, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4)
sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmmsg$unix(r11, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/223, 0xdf}], 0x1}}], 0x1, 0x42, 0x0)

308.757846ms ago: executing program 1 (id=6595):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001880)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x0, 0xfffffffd, 0x0, 0x4000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x10000000}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="170007000000000004000000ff", @ANYRESHEX=r0], 0x48)
bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r1, 0x0, 0x20000000}, 0x20)
socket(0x11, 0x800000003, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'})
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x558, 0x0, 0x0, 0x1a8, 0x3d8, 0x1a8, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x70}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz1\x00'}}]}, @TTL={0x28}}, {{@uncond, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={{0x40}}, @common=@ah={{0x30}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}, {{@ip={@multicast1, @private, 0x0, 0x0, 'pim6reg0\x00', 'erspan0\x00'}, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000090000008500000087000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000001100)=ANY=[@ANYBLOB="1800000000000000000000000000000071122a000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000840)={0x7, 0x18, '\x00', 0x1, &(0x7f00000005c0)=[0x0, 0x0, 0x0]})
r6 = accept4(r5, 0x0, 0x0, 0x80800)
sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40084}], 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000500"/28], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x17, 0x13, &(0x7f0000000640)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x4, 0x0, 0x9, 0x1, 0x4, 0x100, 0x4}], &(0x7f0000000700)='GPL\x00', 0x9, 0xf1, &(0x7f0000000740)=""/241, 0x40f00, 0xb, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x4, 0x8, 0x46}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b00)=[0xffffffffffffffff], &(0x7f0000000b40), 0x10, 0x2}, 0x94)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@nested={0x4, 0x4}]}, 0x18}}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000080), 0x4)
sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r8)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000600)=0x681, 0x4)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000240)=ANY=[@ANYBLOB="80010000100001000000000000000000ac1e0101000000000000000000000000ac14143700000000000000000000000000000001200000000a00000006000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414bb000000000000000000000000000000006c000000011414270000000000000000000000000000000002000000090000000000000007000000000000000000000000000000000000003000000000000000000000000100000000000010000000000000000000000000000000000400001000000000000000000000000000000000000000000000000000000000000000002abd7000000000000a0001060500000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004800020070636263286663727970742900"/307], 0x180}, 0x1, 0x0, 0x0, 0x20040050}, 0x2000c0c4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'})

234.19872ms ago: executing program 1 (id=6597):
r0 = socket$kcm(0x2, 0xd, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001)
getpeername(r0, &(0x7f0000000180)=@nl=@unspec, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x3, 'veth1_to_team\x00', {}, 0x5})

230.90294ms ago: executing program 2 (id=6598):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1)
setsockopt$sock_attach_bpf(r2, 0x6, 0x3, &(0x7f00000000c0), 0x4)
sendmsg$inet(r2, 0x0, 0x41)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'macsec0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r4, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840)
sendmsg(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000500)='%', 0x1}], 0x1}, 0x10000000)
close(r2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000280)='workqueue_activate_work\x00', r1}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r5], 0x20}}, 0x0)
r8 = socket(0x11, 0x800000003, 0x0)
r9 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600))
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=@newtaction={0xddc, 0x30, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [{0x38c, 0x1, [@m_skbmod={0x134, 0x18, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x431, 0x2, 0x7, 0x80, 0x2}, 0x1}}]}, {0xe2, 0x6, "21f3da006713f650a74379e54f87d36d61155771f2e36a0632395af2fc845ee0895f84d089f6d962211c2ea3afe3f3a47c29d71cd97f0ff4c9e9347d8369d46a004e7f3198d3866d4e470d8776fa937185afc5c9416f342977232a356421bff9eae6e439b860cb64e16a90731997eafa1d2466b22fbb700e2b505531afb5921415632c0839188e5b08878fc90ae5a767832600d43f289f4560c7143b71880ed8e2bd4715c7dbe9b028c467e41859c49899d56956295719c9110876e14b0d4a07c9570d99a705e8ddda567488e629b0f2c59a423b112f6920809947b7f57c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_sample={0xf4, 0xb, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7fff, 0x3, 0x2, 0x1, 0x1}}, @TCA_SAMPLE_TRUNC_SIZE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0xe, 0x20000000, 0x3, 0x8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffffffff}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x7ff, 0x2, 0x1, 0x10}}]}, {0x57, 0x6, "fd6ade7347f9613baa987da4c94f566b3ea2147832280900c971f016d303a705f8d8587e420f3818be8e98d5829c8a4c8f27ec0848dd0dba5726f636bf0b350698ed81b4d9f8379ae4528db870355dc7319b7f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_ct={0x114, 0x19, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "6d23b630fd00de047244f48208fd5faa"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "bd3a716498fe48d5f4e377ed9deaa868"}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_PARMS={0x18, 0x1, {0x4, 0x6, 0x1, 0x8, 0x2}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}]}, {0x8d, 0x6, "15502d45f8477b78cf9eec1b4af301a2db50b589f7f388b6750e7a9d02ec3e5d0d37647579c8088826e1019d7d5e83faa38363880207b637a3837e09a642a1ebc48e147c853262760703a9d473beeeabd2a4fb018ad6a2daeb30749811e8f362bfaa1c36934a5da5de4d48c81569bfa9bd354aff86fd39b1e2c4438651923a9c9bb3fecbdaa40d604d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x4c, 0x5, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0xc0}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}}]}, {0x6, 0x6, "2bd1"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x2d0, 0x1, [@m_skbmod={0x19c, 0x9, 0x0, 0x0, {{0xb}, {0x70, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x0, 0xffffffffdffffff9, 0xc00, 0x4}}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x9, 0x2, 0x1000000}, 0x7}}]}, {0x102, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ctinfo={0x130, 0xa, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xc}]}, {0xfc, 0x6, "8724e7a84bd7252e9acd7ef450b122bcfbd525ec29a8038d08ad731ae674b5459b8f2981bb651543da6b8a3382c818130e6619a4a533662d756e0f73e834c56656384870af481e9f91c59b1032a90e09b64d33f28550b7a25be3050575a17a9e1a13cf7a9fc48a76221252cce12e98d34e2a7a7645461189ebab807a8c17911c5591058ba287fad492866aee3371eaba63c8b5bf3fd806a8cdf17633d5e41482b6ef56f0cb625e7569b2c0daf6b0c555d875b8fc8a05d4ab593e5655ac24c738f7c5ebfc319a54a511d140eb134cbf4194b07575bcee6e4b336c74a549828d72763e26305ed097283ad963a62d51a425a6fa430ccf92ba7b"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}, {0x3a4, 0x1, [@m_connmark={0xf4, 0x18, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffff3cb, 0x7, 0x8, 0x8, 0x200}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xffffffff, 0xffffffffffffffff, 0x3, 0x4}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x5, 0x4, 0x3b07, 0x3ff}, 0x5}}]}, {0x6d, 0x6, "114659b40f5aaeb422a51563bcd68a8da207464ed93e0d253e9f56d8e216b4a02ec15d90c3a18b31c4d50f7c897b9cc9bd9810cbd4478c54ebcca1908a98412af1b4e8eb95ae810cba5c5f5cc9dd062107d0a0fe9a98acfa3d67fc8e8ae4ac3c2720bf9f2c6b4bc807"}, {0xc}, {0xc, 0x8, {0x0, 0x5}}}}, @m_connmark={0x170, 0x7, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10000, 0x8, 0x5, 0xfffff32c}, 0x15}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd48, 0x10001, 0x10000000, 0x80000001, 0x4}, 0x7eb5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x10, 0x8, 0x6, 0xb, 0x7f}, 0xfff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffff801, 0x3, 0xffffffffffffffff, 0x8, 0x9}, 0x1000}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x4, 0x1, 0x0, 0x7fffffff}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x80000001, 0x10000000, 0x9, 0x7ef}, 0x1a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xea5, 0x470, 0x8, 0xb, 0x6}, 0x8da0}}]}, {0x79, 0x6, "c1f720221682f4c67bfc6d6d022f98a162b21833fe578e5422f8b025715e8871c66bdc4f288e78ce8756ad6b1d31862d8f18db9b5230b3ea5b78c6be08cd1d924060253869886e9aac3628ed7a21f3f6c343caa26c8ca6556d2fb2a7a65c472a245c85dc63b4e03c9bded7f522d1e22954b8deb7d6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbmod={0x13c, 0xe, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x80000001, 0x10001, 0x8, 0x5, 0x52c6}, 0xb}}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0xc5, 0x6, "6ddef2a1ebcecd61eb18462a157e7f0f7e103321fd1f40e2b6af601243045e0864507bd8ff87a0acbe8303349ffab2136e51996cf60bdc14a0272f4154b64d0afc0ddfdf1d98e5a387c96690f82a25dd1fbe7d89299d458602b2c6e3733d14794df1eb93eb670249a898fd4ee3137290a50cc0dcca460b7b3a54aab53e8d9ccd24c38d9c97202e94a5d7c15981f30ac93dc0b36f9122df58b4c71079eadd124c37107ac37c3aa7af08a3877452fe61724ddeca26733638a8ea615132fd26f881f0"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, {0x4}, {0x16c, 0x1, [@m_csum={0x168, 0x1b, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2af4, 0x7, 0x0, 0x0, 0xfffffff9}, 0x59}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0xc, 0x5, 0x9, 0x7}, 0x43}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x40000000, 0x5, 0x8, 0x7}, 0x1b}}]}, {0xe5, 0x6, "3f4312ee549dac1e6559d8fdbaf6ff0984d11916d22cb81a6f99f408db0063a9abcd545252a57733735e479033392040fcd8e7cf011395c98c68c64f7446a1d75834402ed4bd8d1ea633565d10b626f9a5bdba770327ac4f9aec8926fd2f09f348ca641aa218a7fe4ca937d0e7c0ea32852fac4746ede35cd9c09988c079e8f45e11fd16554991619d6361f1368690de2278b9d8c0cc4c0f3a502e8c2ffdbc1364b42aae7704b9e38afaa1344999b329e79beed531af5e070f0f3547a13adf27cdb0ddfee68ae727a764c5b96e9b8729947b3ab1da67a934fb7b3393237a683028"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x258, 0x1, [@m_sample={0x12c, 0x16, 0x0, 0x0, {{0xb}, {0x7c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xffffffff, 0x7, 0x10000000, 0x1, 0x3}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1ff}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x800}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6d}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x41a, 0x5, 0x9, 0x4}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3aef, 0x1ff, 0x0, 0x8, 0x3}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xa}]}, {0x88, 0x6, "ff340384b824b280be2c23b59555018a76be7a34210a0d88cfcec0dfe4756cc95884c66bcb901bd1122f1e1d63a42e24a11fdb9920d6415b30f0296befc9373d528b0b88c88bb3d383c6ca0ee66ba49e96950a23d46556d11c81628b26563fc1ea889d3dbe7432128b8ac1d0651771b9d7fa218d0cacb6036d8e5548b789f40bc28148c1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_nat={0x128, 0x11, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x2, 0x8, 0xdd648a92, 0x101}, @broadcast, @multicast2, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3ff, 0xffff, 0x3, 0x1, 0x1}, @private=0xa010100, @empty, 0xff000000}}]}, {0xb0, 0x6, "839d71414bafb0c81f6c80f970a4a21dbcc7de58daf449b901450f91bcb3b63ce19f2c6518dc4bfb247c2f60bb836d328178fc81c777e2c0ce4ce3a9a2f80a9e9b46d9f718e2d03fd92fc211191ca34f79951e75999f6acfab4927152c70704890ad4df4bcd34d6bb18e8142155844bf22c9f1d166259ef4b8e9c3f13bcf726cb6443d00db722c84ad95cb679ca09706f0648fa61875cfa0435cb254e7787750b68c363dc031087af15319ad"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xddc}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000000000000104ff0000000000000000003b404b19af51c4d2a4474153f35b35a3278b913317ab8a9c5b0e70c97b8ebdf8ef522604c2b32e33e144fdcc0d9b63966efe5ad27e4fd2e96d873c14628463855b4c990696e93c24b2739a00278f6d43f0a21b9d0052b46aa07ba50e50442e439d1e00c40d32e9d3fa3b22573c1a72bf4995b6ac1a93d8a11f429cc29ad3f6b0f78827cea7a43471edb4ff91cd0d482c5f987fbd413e2ee7324dff38106ecbe6920e5677c72ac70a64a11cb0182b7e392e3dafcf803fb53007c23772814dcdb8457cb2e821032b3271fc4643fa70f3ca87be1794595ef0e3eed506f6b4e8", @ANYRES32=0x0, @ANYBLOB="200400000000000008001b0000000000"], 0x28}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff)

230.759424ms ago: executing program 1 (id=6599):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000240000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002214000000110001"], 0xd8}}, 0x0)

205.580808ms ago: executing program 1 (id=6601):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', <r2=>0x0})
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x2}, &(0x7f0000000140)=0x8)
sendto$packet(r1, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r7 = socket$caif_stream(0x25, 0x1, 0x1)
connect$caif(r7, &(0x7f0000000280)=@dbg={0x25, 0x9, 0xee}, 0x18)
bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r6, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
r9 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r9, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="0232cbb32b6a8c90a6f9288cfec08ae7c7dc7f14e848a71e9f761878d08139abd571f3abf3c308de353fd0784017055fab22e6709440487923179d717ebcad5489e4"], 0x3)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x30)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="53e00c050000000000000084", @ANYRES16=r11, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060003000000"], 0x30}}, 0x0)

135.225974ms ago: executing program 1 (id=6602):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r1, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00'}, 0x80)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="d4d1c9f82ff817fe25845570193fdfdb0000fb8808001b"], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}})
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

70.106324ms ago: executing program 0 (id=6604):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='westwood\x00', 0x9)
getsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f0000000040)) (async)
getsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f0000000040))

69.291207ms ago: executing program 0 (id=6605):
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@private2={0xfc, 0x2, '\x00', 0x4}, 0x2003}) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4c77b99cbb86dd60c6ea090000000000000100000000e01f00000000000000ff0200000000000000000000000000010001c204"], 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async)
r1 = socket(0x10, 0x800, 0x20009)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x3, 0xa, 0xb}], 0x10, 0x7ff}, 0x94) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r3, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0)
sendmmsg$alg(r1, &(0x7f0000006ac0), 0x6, 0x640400c0)
r4 = socket(0x6, 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES16=0x0, @ANYBLOB="0000000002120100500012800b000100627269646765000040000280080005000100000006002700020000000800010015000800050025000000000008000400000000000c002e00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000002200200029bd70207fdbdf2500000000f1cc484ffbc82561610c3d5ecee1491f8a649fe0bda7b3f620c4cfed098b93bea23e327c888e021e837acbad75aa78f08983d766b9cac6f8c6383433ac2f4f27b4ed8549c270ac59bcf72e852c73813effc7fb8b4184e186b2dbf82ced8157c69b07b2"], 0x14}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r7, &(0x7f0000000300)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000010c0)=@newqdisc={0x3bc, 0x24, 0xd0f, 0x470bd2d, 0x1100000, {0x60, 0x0, 0x0, r8, {0x0, 0xffff}, {0x10, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x210, 0x2, [@TCA_GRED_MAX_P={0x8, 0x4, 0x3}, @TCA_GRED_PARMS={0x38, 0x1, {0x3, 0x81, 0x0, 0x4, 0x5, 0x1, 0x9, 0xfff, 0x101, 0xd99, 0x13, 0x1e, 0xe, 0x0, 0x80000000, 0x3}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x8}, @TCA_GRED_PARMS={0x38, 0x1, {0x0, 0x6, 0x4c5f, 0xb, 0x3, 0xff, 0xb, 0x3, 0x3, 0x0, 0x2, 0x1a, 0x8b, 0x3, 0x5, 0x2}}, @TCA_GRED_PARMS={0x38, 0x1, {0xb, 0x2, 0x0, 0xa, 0xfe7, 0xfff, 0x3, 0x7, 0x0, 0x12, 0x11, 0x0, 0x20, 0xd6, 0x7fff, 0x2}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x4}, @TCA_GRED_PARMS={0x38, 0x1, {0x300, 0x5161, 0x0, 0xd, 0xa3da, 0x7, 0x7, 0x800, 0x96cdf6, 0x3, 0x1f, 0x16, 0xb, 0x1, 0x9e, 0x4}}, @TCA_GRED_DPS={0x10, 0x3, {0x1, 0xc, 0x0, 0x1}}]}}, @TCA_STAB={0x17c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x9, 0x2, 0x0, 0x0, 0x1, 0x8, 0x3}}, {0xa, 0x2, [0x7, 0x100, 0xffff]}}, {{0x1c, 0x1, {0x5, 0x4, 0x3, 0x80000001, 0x1, 0x6, 0xffff, 0x8}}, {0x14, 0x2, [0x1, 0x7ff, 0xe5a, 0x8, 0x7, 0xeb8, 0x3, 0xda6]}}, {{0x1c, 0x1, {0x4, 0x2, 0xa8b, 0xb, 0x2, 0x1, 0x5}}, {0x4}}, {{0x1c, 0x1, {0x7, 0xff, 0x4, 0x0, 0x1, 0x100, 0x5, 0x5}}, {0xe, 0x2, [0x86, 0x8001, 0x7ff, 0xfff7, 0x2]}}, {{0x1c, 0x1, {0x80, 0x1c, 0x400, 0x8fa, 0x0, 0x6, 0x2, 0x1}}, {0x6, 0x2, [0xa5]}}, {{0x1c, 0x1, {0xd, 0x7, 0x9000, 0x200, 0x0, 0x1, 0x80}}, {0x4}}, {{0x1c, 0x1, {0x5, 0x3, 0x9, 0x7, 0x2, 0xd500, 0x64, 0x3}}, {0xa, 0x2, [0x1000, 0x1, 0x201]}}, {{0x1c, 0x1, {0x3, 0xf6, 0x1, 0x1, 0x0, 0xffffffff, 0x1ff}}, {0x4}}, {{0x1c, 0x1, {0x2, 0x9, 0x0, 0x0, 0x2, 0x2, 0x0, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x7, 0x6, 0x0, 0x6, 0x2, 0x0, 0x2, 0x1}}, {0x6, 0x2, [0x9]}}]}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x2404c0c1}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000003327859f0a000000080000000000010604000000080000000100000f060000000400000001000000fffffff70030615f5f402e305f"], 0x0, 0x46, 0x0, 0x1}, 0x28) (async)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1e00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="6a58faae97be0aee752c15d8424bda7e80a2245af4032c2cc0a4f7f3337a5e1d68fd1d4cd963f516c2a53eb9d72649031e2125f5e0ff237f0a9c79e1fc3184f9c14b082780434d4eaae699befaf0ed0d67b6905a25f5bfb2614a41d288102255298d0e1257381090359c051c6f859c1ad47404e787285a7f20e8d143f9466040249fe60eeb6ffac3a46c2cad3a44235266437bb70000000000000000", @ANYRES64=0x0], 0x20)
sendmsg$nl_route_sched(r9, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002a00)=@newtaction={0x1160, 0x30, 0x1, 0x0, 0x0, {}, [{0x114c, 0x1, [@m_csum={0x1148, 0xa, 0x0, 0x0, {{0x9}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x95, 0x4ed5, 0x1, 0xffffffff, 0x6}, 0x73}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1f4, 0x2, 0x1, 0xf17}, 0x78}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5319, 0x0, 0x10000000, 0x5, 0x4}, 0x5e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x5, 0x4, 0x400000, 0x4}, 0x72}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x6, 0x4, 0x1, 0x7}, 0x59}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xe17, 0x7, 0x3, 0x6}, 0x5e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1ff, 0x0, 0x0, 0x7f, 0x1}, 0x12}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x4, 0x9, 0x80}, 0x67}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfff, 0x93a, 0x8, 0x6, 0x200}, 0x1b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80aa, 0x0, 0x10000000, 0xffffffff, 0xffffffff}, 0x5f}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x1160}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYRESOCT=r7], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x8}, 0x10}, 0x94) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)

68.388861ms ago: executing program 0 (id=6606):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendto$inet(r0, 0x0, 0x0, 0x20048880, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x30, r4, 0x1, 0x70bd2a, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBPORT={0x5, 0x3}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x30}, 0x1, 0x40030000000000}, 0x14)
sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, r4, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x20045050}, 0x20004800)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r7, 0x1, 0xff1f, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x26004808)

2.368997ms ago: executing program 0 (id=6607):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="c1a6d4a9680b50f9881e2b7147521b893f", 0x11}], 0x1, 0x0, 0xf00}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x8}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="a2", 0x1}], 0x1}}], 0x2, 0x8085)
shutdown(r0, 0x1)

2.081195ms ago: executing program 0 (id=6608):
r0 = socket$inet(0xa, 0x801, 0x84)
listen(r0, 0xfffffffd)
r1 = socket$inet(0xa, 0x801, 0x84)
listen(r1, 0xfffffffd)
r2 = socket$inet(0xa, 0x801, 0x84)
listen(r2, 0x8)
r3 = socket$inet(0xa, 0x801, 0x84)
listen(r3, 0x8)
r4 = socket$netlink(0x10, 0x3, 0x4)
socket$inet(0xa, 0x801, 0x84)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r5, &(0x7f0000000140)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4)
writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f890000002000feff0101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)

0s ago: executing program 0 (id=6609):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0600000004000000030000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000001c460992"], 0x48)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050002000000000000002e00000008000300", @ANYRES32, @ANYBLOB="0a00340002020202020200000a00060008021100000000000400440028000d01"], 0x68}}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10)
unshare(0x20400)
sendmmsg$inet6(r0, &(0x7f0000007080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x48800)

kernel console output (not intermixed with test programs):

be safe on all matching packets.
[  240.763113][T14952] __nla_validate_parse: 22 callbacks suppressed
[  240.763131][T14952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2825'.
[  240.775540][T14952] siw: device registration error -23
[  241.034354][T14956] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  242.200369][T15022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2846'.
[  242.257742][T15028] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2846'.
[  243.074762][T15045] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2850'.
[  243.077913][T15045] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2850'.
[  243.081069][T15045] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2850'.
[  243.085797][T15045] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2850'.
[  243.146947][T15050] netlink: 'syz.0.2853': attribute type 2 has an invalid length.
[  243.150849][T15050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2853'.
[  243.154138][T15050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2853'.
[  243.429348][T15071] netlink: 'syz.1.2858': attribute type 12 has an invalid length.
[  243.432095][T15071] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.2858'.
[  244.135923][T15134] netlink: 'syz.1.2877': attribute type 2 has an invalid length.
[  245.235607][T15195] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  245.426063][T15209] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  245.974998][T15234] __nla_validate_parse: 17 callbacks suppressed
[  245.975016][T15234] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2912'.
[  246.284572][T15249] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2917'.
[  246.393157][T15254] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2919'.
[  246.423008][T15257] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2920'.
[  246.553792][T15260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2921'.
[  246.557423][T15260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2921'.
[  246.560490][T15260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2921'.
[  246.564053][T15261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2921'.
[  246.567648][T15261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2921'.
[  246.877530][T15277] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2926'.
[  248.086112][T15329] netlink: 'syz.2.2944': attribute type 4 has an invalid length.
[  248.623553][T15346] netlink: 'syz.1.2951': attribute type 5 has an invalid length.
[  248.628122][T15346] geneve0: entered promiscuous mode
[  248.629859][T15346] geneve0: entered allmulticast mode
[  249.030540][T15370] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  249.903672][T15395] chnl_net:caif_netlink_parms(): no params data found
[  249.959595][T15404] tipc: Can't bind to reserved service type 2
[  250.919303][T15429] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  251.130659][T15452] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  251.165461][T15458] __nla_validate_parse: 14 callbacks suppressed
[  251.165472][T15458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2984'.
[  251.252367][T15471] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2988'.
[  251.310154][T15481] IPVS: set_ctl: invalid protocol: 26222 0.0.0.0:0
[  251.313772][T15481] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  251.313791][T15478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2990'.
[  251.453544][T15500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2996'.
[  251.504633][T15505] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2998'.
[  251.539837][T15511] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2999'.
[  251.772142][T15525] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20004
[  251.942459][T15535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3005'.
[  252.680281][T15558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3013'.
[  252.684158][T15558] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  252.687311][T15558] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  252.803605][T15562] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  252.806257][T15562] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  253.531904][T15567] netlink: 'syz.1.3016': attribute type 1 has an invalid length.
[  253.535462][T15567] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3016'.
[  253.604551][T15571] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3018'.
[  253.659280][T15575] netlink: 'syz.1.3017': attribute type 1 has an invalid length.
[  253.875486][T15595] can: request_module (can-proto-5) failed.
[  254.876082][T15649] netlink: 'syz.2.3038': attribute type 3 has an invalid length.
[  255.013970][T15669] netpci0: tun_chr_ioctl cmd 1074025681
[  255.076953][T15671] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  255.159328][T15676] tc_dump_action: action bad kind
[  255.373695][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  256.012572][T15732] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  256.136055][T15747] netlink: 'syz.1.3071': attribute type 1 has an invalid length.
[  256.216581][T15755] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check.
[  256.251385][T15760] netlink: 'syz.1.3074': attribute type 1 has an invalid length.
[  256.255018][T15760] netlink: 'syz.1.3074': attribute type 2 has an invalid length.
[  256.258199][T15760] netlink: 'syz.1.3074': attribute type 1 has an invalid length.
[  256.261105][T15760] netlink: 'syz.1.3074': attribute type 2 has an invalid length.
[  256.266246][T15760] __nla_validate_parse: 20 callbacks suppressed
[  256.266254][T15760] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3074'.
[  256.271270][T15760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3074'.
[  256.274373][T15760] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3074'.
[  256.277432][T15760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3074'.
[  256.280342][T15760] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3074'.
[  256.286926][T15760] netlink: 'syz.1.3074': attribute type 29 has an invalid length.
[  256.439251][T15782] vxcan1: entered allmulticast mode
[  256.441569][T15782] vxcan1: left allmulticast mode
[  256.618412][T15795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3085'.
[  256.769020][T15814] Bluetooth: MGMT ver 1.23
[  256.876296][T15825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3095'.
[  256.960182][T15837] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  256.963222][T15837] IPv6: NLM_F_CREATE should be set when creating new route
[  256.966414][T15837] IPv6: NLM_F_CREATE should be set when creating new route
[  256.972202][T15837] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3100'.
[  257.066142][T15853] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3105'.
[  257.070350][T15853] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3105'.
[  257.225184][T15873] tipc: Started in network mode
[  257.227016][T15873] tipc: Node identity 080211000001, cluster identity 4711
[  257.229450][T15873] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  257.435615][T15903] tc_dump_action: action bad kind
[  258.144020][T15952] netlink: 'syz.1.3137': attribute type 1 has an invalid length.
[  258.352769][   T24] tipc: Node number set to 134418688
[  258.801973][T15996] vxcan1: entered allmulticast mode
[  259.262214][T16027] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  259.265864][T16027] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  259.589482][T16047] validate_nla: 1 callbacks suppressed
[  259.589494][T16047] netlink: 'syz.0.3162': attribute type 1 has an invalid length.
[  260.652111][T16117] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003
[  261.379083][T16159] sctp: [Deprecated]: syz.1.3198 (pid 16159) Use of int in max_burst socket option deprecated.
[  261.379083][T16159] Use struct sctp_assoc_value instead
[  261.452577][T16161] __nla_validate_parse: 53 callbacks suppressed
[  261.452590][T16161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3199'.
[  261.516397][T16181] veth0_to_bridge: entered promiscuous mode
[  261.534479][T16179] veth0_to_bridge: left promiscuous mode
[  261.540675][T16178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3203'.
[  261.546061][T16178] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3203'.
[  261.763368][T16210] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  261.776151][T16210] can: request_module (can-proto-0) failed.
[  262.592056][T16227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3218'.
[  262.625182][T16234] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3219'.
[  262.632258][T16240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3220'.
[  262.641091][T16240] hsr_slave_0: left promiscuous mode
[  262.644564][T16240] hsr_slave_1: left promiscuous mode
[  262.676859][T16247] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3223'.
[  262.679823][T16247] openvswitch: netlink: Flow key attr not present in new flow.
[  262.687652][T16247] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3223'.
[  262.806151][T16257] ieee802154 phy0 wpan0: encryption failed: -22
[  262.808390][    T9] IPVS: starting estimator thread 0...
[  262.861903][T16254] netlink: 'syz.1.3225': attribute type 24 has an invalid length.
[  262.892008][T16267] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3228'.
[  262.895345][T16267] netlink: 'syz.1.3228': attribute type 1 has an invalid length.
[  262.898008][T16267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3228'.
[  262.911189][T16260] IPVS: using max 135 ests per chain, 324000 per kthread
[  263.034486][   T13] IPVS: stop unused estimator thread 0...
[  263.759110][T16292] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  265.495514][T16376] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  265.499218][T16376] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  265.584127][T16380] siw: device registration error -23
[  265.734828][T16393] netlink: 'syz.2.3269': attribute type 5 has an invalid length.
[  266.048882][T16411] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  267.246282][T16458] __nla_validate_parse: 14 callbacks suppressed
[  267.246299][T16458] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3289'.
[  267.293060][T16463] netlink: 'syz.0.3285': attribute type 5 has an invalid length.
[  267.300067][T16466] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3291'.
[  267.306631][T16466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3291'.
[  267.327133][T16466] syzkaller0: entered promiscuous mode
[  267.329046][T16466] syzkaller0: entered allmulticast mode
[  267.332840][T16466] netlink: 'syz.1.3291': attribute type 1 has an invalid length.
[  267.335352][T16466] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3291'.
[  267.402200][T16472] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3295'.
[  267.406284][T16472] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3295'.
[  267.409274][T16472] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3295'.
[  267.412279][T16472] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3295'.
[  268.015751][T16494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3302'.
[  268.103419][T16503] TCP: TCP_TX_DELAY enabled
[  268.176002][T16508] netlink: 'syz.0.3305': attribute type 5 has an invalid length.
[  268.350852][T16524] IPVS: Error connecting to the multicast addr
[  268.369246][T16527] netlink: 'syz.1.3311': attribute type 1 has an invalid length.
[  268.372347][T16527] netlink: 208 bytes leftover after parsing attributes in process `syz.1.3311'.
[  268.377016][T16527] netlink: 'syz.1.3311': attribute type 1 has an invalid length.
[  268.380856][T16527] netlink: 'syz.1.3311': attribute type 2 has an invalid length.
[  268.543679][T16550] netlink: 'syz.1.3317': attribute type 5 has an invalid length.
[  269.432573][T16608] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  272.418808][T16763] __nla_validate_parse: 11 callbacks suppressed
[  272.418828][T16763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3380'.
[  272.480371][T16766] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  272.483214][T16766] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  273.215563][T16784] IPVS: set_ctl: invalid protocol: 255 172.30.1.2:255
[  273.241113][T16788] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3386'.
[  273.244946][T16788] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3386'.
[  273.248024][T16788] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3386'.
[  273.251152][T16788] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3386'.
[  273.557227][T16814] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3395'.
[  273.733509][T16821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3397'.
[  273.737433][T16821] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3397'.
[  274.120291][T16823] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3398'.
[  274.336743][T16839] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  274.381656][T16843] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3405'.
[  274.770377][T16867] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  274.774751][T16867] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  275.114642][T16897] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  275.267971][T16921] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  275.305178][T16926] netlink: 'syz.1.3427': attribute type 1 has an invalid length.
[  275.333664][T16926] bond4: entered promiscuous mode
[  275.335533][T16926] bond4: entered allmulticast mode
[  275.337383][T16926] 8021q: adding VLAN 0 to HW filter on device bond4
[  275.343589][T16926] bridge16: entered promiscuous mode
[  275.345448][T16926] bridge16: entered allmulticast mode
[  275.347544][T16926] bond4: (slave bridge16): Enslaving as a backup interface with an up link
[  275.353495][T16927] bridge17: entered promiscuous mode
[  275.355457][T16927] bridge17: entered allmulticast mode
[  275.357512][T16927] bond4: (slave bridge17): Enslaving as a backup interface with a down link
[  275.441384][T16937] netlink: 'syz.0.3428': attribute type 1 has an invalid length.
[  275.445003][   T12] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  275.552845][   T12] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  276.396558][T16963] netlink: 'syz.0.3436': attribute type 39 has an invalid length.
[  276.399661][T16962] netlink: 'syz.0.3436': attribute type 39 has an invalid length.
[  276.469344][T16968] bond4: left promiscuous mode
[  276.471138][T16968] bridge16: left promiscuous mode
[  276.475898][T16968] bridge17: left promiscuous mode
[  276.477747][T16968] bond4: left allmulticast mode
[  276.479413][T16968] bridge16: left allmulticast mode
[  276.481177][T16968] bridge17: left allmulticast mode
[  276.888054][T16999] netlink: 'syz.1.3447': attribute type 1 has an invalid length.
[  276.922449][T17003] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  277.469238][T17028] __nla_validate_parse: 9 callbacks suppressed
[  277.469258][T17028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3454'.
[  277.498088][T17033] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  277.502864][T17032] IPVS: stopping backup sync thread 17033 ...
[  277.514627][T17032] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3455'.
[  277.517851][T17032] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3455'.
[  277.527792][T17037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3457'.
[  277.531457][T17037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3457'.
[  277.903463][T17056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3463'.
[  277.908857][T17056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3463'.
[  280.502734][    T9] page_pool_release_retry() stalled pool shutdown: id 15, 3329 inflight 180 sec
[  280.631532][T17072] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3469'.
[  280.716028][T17085] netlink: 134820 bytes leftover after parsing attributes in process `syz.0.3473'.
[  280.841775][T17095] netlink: 324 bytes leftover after parsing attributes in process `syz.1.3475'.
[  282.616587][T17143] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  282.653909][T17149] __nla_validate_parse: 2 callbacks suppressed
[  282.653925][T17149] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3491'.
[  282.720027][T17162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3496'.
[  282.767111][T17165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3497'.
[  282.812776][ T5854] Bluetooth: hci2: command 0x0405 tx timeout
[  283.622096][T17191] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3504'.
[  283.684239][T17198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3506'.
[  283.700538][T17207] netlink: 416 bytes leftover after parsing attributes in process `syz.2.3509'.
[  283.746029][T17215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3506'.
[  283.763557][T17213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3511'.
[  284.668606][T17255] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  285.473102][T17333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3526'.
[  285.576039][T17347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3530'.
[  285.610637][T17350] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  286.231320][T17368] netlink: 'syz.1.3536': attribute type 1 has an invalid length.
[  286.234083][T17368] netlink: 'syz.1.3536': attribute type 1 has an invalid length.
[  286.276760][T17368] netlink: 'syz.1.3536': attribute type 1 has an invalid length.
[  286.284871][T17368] 8021q: adding VLAN 0 to HW filter on device bond5
[  286.289232][T17368] bond5: (slave wlan0): Opening slave failed
[  286.460784][T17381] netlink: 'syz.2.3541': attribute type 6 has an invalid length.
[  286.464560][T17381] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  286.627882][T17392] IPVS: set_ctl: invalid protocol: 3 100.1.1.1:20000
[  286.761522][ T5854] Bluetooth: hci2: link tx timeout
[  286.763384][ T5854] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  287.321828][T17416] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  287.705042][T17455] __nla_validate_parse: 4 callbacks suppressed
[  287.705054][T17455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3564'.
[  288.822841][ T5854] Bluetooth: hci2: command 0x0405 tx timeout
[  289.275578][T17495] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3577'.
[  289.384140][T17497] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  289.387269][T17497] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  289.493917][T17522] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3586'.
[  289.561287][T17535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3590'.
[  289.616897][T17545] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3590'.
[  289.657429][T17548] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  289.680630][T17553] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3594'.
[  289.705918][T17556] IPVS: Error connecting to the multicast addr
[  289.761386][T17561] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3597'.
[  289.764609][T17561] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3597'.
[  289.767691][T17561] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3597'.
[  289.771242][T17561] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3597'.
[  290.017400][T17585] netlink: 'syz.1.3606': attribute type 5 has an invalid length.
[  290.128430][T17598] bond0: entered promiscuous mode
[  290.131373][T17598] bridge0: port 1(macvlan0) entered blocking state
[  290.134554][T17598] bridge0: port 1(macvlan0) entered disabled state
[  290.137311][T17598] macvlan0: entered allmulticast mode
[  290.139416][T17598] bond0: entered allmulticast mode
[  290.143885][T17598] macvlan0: entered promiscuous mode
[  290.402845][T17636] netlink: 'syz.0.3621': attribute type 13 has an invalid length.
[  290.405664][T17636] netlink: 'syz.0.3621': attribute type 17 has an invalid length.
[  290.419265][T17636] bridge0: port 1(macvlan0) entered blocking state
[  290.421716][T17636] bridge0: port 1(macvlan0) entered forwarding state
[  290.427919][T17636] 8021q: adding VLAN 0 to HW filter on device team0
[  290.432049][T17636] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  290.506916][T17638] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  290.583198][T17644] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  290.584643][T17648] IPVS: set_ctl: invalid protocol: 47 100.1.1.2:20003
[  292.495068][T17753] netlink: 'syz.0.3657': attribute type 4 has an invalid length.
[  293.536815][T17790] __nla_validate_parse: 13 callbacks suppressed
[  293.536829][T17790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3669'.
[  293.579766][T17793] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3670'.
[  294.086524][T17809] netlink: 'syz.1.3674': attribute type 1 has an invalid length.
[  294.089041][T17809] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3674'.
[  294.091835][T17809] netlink: 'syz.1.3674': attribute type 1 has an invalid length.
[  294.719052][T17852] netlink: 'syz.0.3687': attribute type 29 has an invalid length.
[  294.722356][T17852] netlink: 'syz.0.3687': attribute type 29 has an invalid length.
[  294.931078][T17859] netlink: 'syz.0.3690': attribute type 5 has an invalid length.
[  295.106058][T17862] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3692'.
[  295.109211][T17862] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3692'.
[  295.112448][T17862] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3692'.
[  295.117095][T17862] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3692'.
[  295.166321][T17869] ip6tnl0: entered promiscuous mode
[  295.175152][T17868] ip6tnl0: left promiscuous mode
[  295.250264][T17873] netlink: 'syz.0.3695': attribute type 303 has an invalid length.
[  295.254464][T17871] netlink: 'syz.0.3695': attribute type 303 has an invalid length.
[  295.397071][T17895] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  295.399524][T17895] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  296.184443][T17909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3705'.
[  296.241315][T17909] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3705'.
[  296.390582][T17927] macvlan0: left allmulticast mode
[  296.392600][T17927] bond0: left allmulticast mode
[  296.395178][T17927] macvlan0: left promiscuous mode
[  296.398042][T17927] bridge0: port 1(macvlan0) entered disabled state
[  296.431233][T17932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3714'.
[  296.435234][T17932] netlink: 'syz.0.3714': attribute type 20 has an invalid length.
[  296.440773][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  296.445606][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  296.450872][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  296.458284][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  296.496973][T17946] TC_ACT_REPEAT abuse ?
[  296.498708][T17946] TC_ACT_REPEAT abuse ?
[  296.500445][T17946] TC_ACT_REPEAT abuse ?
[  296.506420][T17943] TC_ACT_REPEAT abuse ?
[  296.507990][T17943] TC_ACT_REPEAT abuse ?
[  296.601412][T17957] siw: device registration error -23
[  296.758578][T17960] netlink: 'syz.1.3723': attribute type 21 has an invalid length.
[  297.094749][T18015] TC_ACT_REPEAT abuse ?
[  297.096230][    C0] TC_ACT_REPEAT abuse ?
[  297.687875][T18030] vxcan1: left allmulticast mode
[  298.042389][T18065] TC_ACT_REPEAT abuse ?
[  298.044050][    C0] TC_ACT_REPEAT abuse ?
[  298.114950][T18072] validate_nla: 2 callbacks suppressed
[  298.114960][T18072] netlink: 'syz.0.3755': attribute type 3 has an invalid length.
[  298.119529][T18072] netlink: 'syz.0.3755': attribute type 1 has an invalid length.
[  299.036872][T18099] TC_ACT_REPEAT abuse ?
[  299.064787][T18102] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  299.118880][T18102] __nla_validate_parse: 24 callbacks suppressed
[  299.118893][T18102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3767'.
[  299.152320][T18114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3769'.
[  299.426192][T18133] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3775'.
[  299.429392][T18133] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3775'.
[  299.897063][T18154] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  300.060293][T18165] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3786'.
[  300.816765][T18204] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3797'.
[  300.820977][T18203] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3797'.
[  301.012293][T18223] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  301.063806][T18224] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3804'.
[  301.484720][T18227] batadv_slave_1: entered promiscuous mode
[  301.500278][T18227] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3805'.
[  301.506452][T18226] batadv_slave_1: left promiscuous mode
[  301.646305][T18251] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3810'.
[  301.805244][T18268] net_ratelimit: 14 callbacks suppressed
[  301.805255][T18268] TC_ACT_REPEAT abuse ?
[  301.808791][    C0] TC_ACT_REPEAT abuse ?
[  301.869453][T18277] TC_ACT_REPEAT abuse ?
[  301.871606][    C1] TC_ACT_REPEAT abuse ?
[  301.886809][T18279] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  301.968476][T18287] bond0: left promiscuous mode
[  301.978109][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  301.983479][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  301.987106][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  301.991045][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  302.016052][T18292] netlink: 'syz.1.3822': attribute type 1 has an invalid length.
[  302.884866][T18311] bond4: (slave bridge16): Removing an active aggregator
[  302.887550][T18311] bond4: (slave bridge16): Releasing backup interface
[  302.889780][T18311] bond4: (slave bridge16): the permanent HWaddr of slave - f2:f0:3f:2f:d1:57 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  302.896155][T18311] bond4: (slave bridge17): Releasing backup interface
[  303.596326][T18326] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  304.014144][T18339] bond0: (slave rose0): Error: Device can not be enslaved while up
[  304.816083][T18360] vxcan2: entered promiscuous mode
[  304.816202][T18362] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  304.831534][T18357] __nla_validate_parse: 10 callbacks suppressed
[  304.831548][T18357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3837'.
[  305.110154][T18380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3844'.
[  305.150148][T18387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3845'.
[  305.310326][T18396] netlink: 'syz.1.3847': attribute type 13 has an invalid length.
[  305.437512][T18398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3848'.
[  305.464789][T18402] vxcan0: entered promiscuous mode
[  305.626031][T18411] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3851'.
[  305.643717][T18404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3850'.
[  305.656789][T18418] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  306.545774][T18434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3859'.
[  306.597168][T18438] netlink: 'syz.1.3860': attribute type 12 has an invalid length.
[  306.601232][T18438] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.3860'.
[  306.636789][T18441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3861'.
[  306.722566][T18450] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3864'.
[  306.969230][T18467] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  306.973996][T18467] openvswitch: netlink: Message has 8454 unknown bytes.
[  307.554929][T18494] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  307.563357][T18494] siw: device registration error -23
[  308.384684][T18523] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  308.387330][T18523] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  308.462888][T18526] netlink: 'syz.1.3884': attribute type 5 has an invalid length.
[  308.663929][T18530] (: renamed from bond0 (while UP)
[  309.067568][T18565] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  309.255943][T18595] vxcan1: entered allmulticast mode
[  309.257930][T18595] vxcan1: left allmulticast mode
[  309.338325][T18606] vxcan1: entered allmulticast mode
[  309.340463][T18606] vxcan1: left allmulticast mode
[  309.476959][T18627] netlink: 'syz.2.3898': attribute type 1 has an invalid length.
[  309.479835][T18627] netlink: 'syz.2.3898': attribute type 1 has an invalid length.
[  309.482714][T18627] netlink: 'syz.2.3898': attribute type 1 has an invalid length.
[  309.918279][T18689] __nla_validate_parse: 16 callbacks suppressed
[  309.918295][T18689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3904'.
[  310.018583][T18700] vxcan1: entered allmulticast mode
[  310.020629][T18700] vxcan1: left allmulticast mode
[  310.605576][T18779] vxcan1: entered allmulticast mode
[  310.607861][T18779] vxcan1: left allmulticast mode
[  310.757956][T18802] syzkaller1: entered promiscuous mode
[  310.760104][T18802] syzkaller1: entered allmulticast mode
[  310.832161][T18815] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3921'.
[  310.836121][T18815] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3921'.
[  310.839879][T18815] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3921'.
[  310.843237][T18815] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3921'.
[  310.847102][T18810] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3921'.
[  310.850738][T18810] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3921'.
[  310.860812][T18810] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3921'.
[  310.864051][T18810] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3921'.
[  310.935436][T18826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3923'.
[  311.028204][T18840] siw: device registration error -23
[  311.033406][T18840] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (1986356271)
[  311.037670][T18840] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  312.030883][T18967] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  313.768339][T19150] syzkaller0: entered promiscuous mode
[  313.770281][T19150] syzkaller0: entered allmulticast mode
[  314.354132][T19235] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  314.902987][ T5854] Bluetooth: hci2: command 0x0405 tx timeout
[  315.434474][T19330] __nla_validate_parse: 26 callbacks suppressed
[  315.434486][T19330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3985'.
[  315.752783][T19364] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3988'.
[  316.345955][T19421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3993'.
[  316.381432][T19436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3994'.
[  316.384897][T19436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3994'.
[  316.388271][T19436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3994'.
[  316.392697][T19436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3994'.
[  316.400855][T19436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3994'.
[  316.552344][T19455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3998'.
[  316.558640][T19455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3998'.
[  316.616700][T19473] IPv6: NLM_F_REPLACE set, but no existing node found!
[  316.619123][T19474] IPv6: NLM_F_REPLACE set, but no existing node found!
[  316.704912][T19483] syzkaller0: entered promiscuous mode
[  316.707037][T19483] syzkaller0: entered allmulticast mode
[  316.710020][T19483] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  316.718607][T19483] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  316.815397][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  317.540332][T19565] geneve3: entered promiscuous mode
[  317.544517][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  317.547604][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  317.552477][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  317.558888][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  317.609838][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  317.616315][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  317.622786][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  317.627915][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  317.650305][T19580] geneve3: left promiscuous mode
[  317.671748][T19585] syzkaller1: left promiscuous mode
[  317.674256][T19585] syzkaller1: left allmulticast mode
[  317.678966][T19588] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  317.684473][T19588] syzkaller0: entered promiscuous mode
[  317.686352][T19588] syzkaller0: entered allmulticast mode
[  317.719669][T19588] tipc: Resetting bearer <eth:syzkaller0>
[  317.937652][T19614] IPVS: persistence engine module ip_vs_pe_ not found
[  318.712706][ T5893] tipc: Node number set to 24339
[  320.433331][T19852] tipc: New replicast peer: 255.255.255.255
[  320.435649][T19852] tipc: Enabled bearer <udp:s>, priority 26
[  320.463222][T19858] __nla_validate_parse: 8 callbacks suppressed
[  320.463235][T19858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4041'.
[  320.751979][T19885] sctp: [Deprecated]: syz.0.4042 (pid 19885) Use of int in max_burst socket option deprecated.
[  320.751979][T19885] Use struct sctp_assoc_value instead
[  321.277630][T19930] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  321.309329][T19935] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4044'.
[  321.383936][T19942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4045'.
[  321.388537][T19942] tipc: Resetting bearer <eth:syzkaller0>
[  321.390873][T19942] syzkaller0: left promiscuous mode
[  321.392906][T19942] syzkaller0: left allmulticast mode
[  321.523656][T19970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4049'.
[  321.553398][    T9] tipc: Node number set to 3635489529
[  321.655932][T19999] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4053'.
[  321.658987][T19999] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4053'.
[  321.662239][T19999] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4053'.
[  321.666149][T19999] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4053'.
[  322.210354][T20066] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4058'.
[  322.213955][T20066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4058'.
[  322.538224][ T5851] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  322.541746][ T5851] CPU: 0 UID: 0 PID: 5851 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  322.541757][ T5851] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  322.541763][ T5851] Call Trace:
[  322.541766][ T5851]  <TASK>
[  322.541770][ T5851]  dump_stack_lvl+0x189/0x250
[  322.541784][ T5851]  ? __pfx_dump_stack_lvl+0x10/0x10
[  322.541793][ T5851]  ? __pfx__printk+0x10/0x10
[  322.541804][ T5851]  ? rcu_is_watching+0x15/0xb0
[  322.541813][ T5851]  dump_header+0xd3/0x480
[  322.541824][ T5851]  oom_kill_process+0x387/0x920
[  322.541833][ T5851]  out_of_memory+0xf09/0x12a0
[  322.541841][ T5851]  ? rcu_is_watching+0x15/0xb0
[  322.541848][ T5851]  ? __pfx_out_of_memory+0x10/0x10
[  322.541854][ T5851]  ? percpu_ref_put+0x19/0x180
[  322.541864][ T5851]  ? lock_release+0x4b/0x3e0
[  322.541876][ T5851]  mem_cgroup_out_of_memory+0x145/0x240
[  322.541884][ T5851]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  322.541893][ T5851]  ? _raw_spin_unlock+0x28/0x50
[  322.541902][ T5851]  ? memcg1_oom_prepare+0x37f/0x450
[  322.541912][ T5851]  try_charge_memcg+0xdff/0x1290
[  322.541921][ T5851]  ? rcu_is_watching+0x15/0xb0
[  322.541929][ T5851]  ? __pfx_try_charge_memcg+0x10/0x10
[  322.541938][ T5851]  ? rcu_needs_cpu+0xa1/0xb0
[  322.541944][ T5851]  ? xa_load+0x60/0x210
[  322.541951][ T5851]  ? rcu_is_watching+0x15/0xb0
[  322.541958][ T5851]  ? rcu_is_watching+0x15/0xb0
[  322.541964][ T5851]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  322.541973][ T5851]  charge_memcg+0x9f/0x180
[  322.541982][ T5851]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  322.541990][ T5851]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  322.542000][ T5851]  __read_swap_cache_async+0x28c/0x510
[  322.542009][ T5851]  swap_cluster_readahead+0x305/0x5f0
[  322.542017][ T5851]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  322.542025][ T5851]  ? rcu_is_watching+0x15/0xb0
[  322.542031][ T5851]  ? filemap_get_entry+0xad/0x2f0
[  322.542038][ T5851]  ? get_vma_policy+0x27c/0x3c0
[  322.542048][ T5851]  swapin_readahead+0x17d/0xb50
[  322.542055][ T5851]  ? __pfx_filemap_get_entry+0x10/0x10
[  322.542062][ T5851]  ? get_swap_device_info+0x1c/0x2b0
[  322.542069][ T5851]  ? rcu_is_watching+0x15/0xb0
[  322.542076][ T5851]  ? __pfx_swapin_readahead+0x10/0x10
[  322.542105][ T5851]  ? __filemap_get_folio+0x9a6/0xaf0
[  322.542113][ T5851]  ? swap_cache_get_folio+0xae/0x3b0
[  322.542120][ T5851]  do_swap_page+0x525/0x5ac0
[  322.542131][ T5851]  ? ___pte_offset_map+0x29/0x250
[  322.542140][ T5851]  ? lock_acquire+0x5f/0x360
[  322.542149][ T5851]  ? do_swap_page+0x184/0x5ac0
[  322.542156][ T5851]  ? __pfx_do_swap_page+0x10/0x10
[  322.542164][ T5851]  ? rcu_is_watching+0x15/0xb0
[  322.542170][ T5851]  ? __pfx_default_wake_function+0x10/0x10
[  322.542180][ T5851]  ? ___pte_offset_map+0x45/0x250
[  322.542188][ T5851]  ? ___pte_offset_map+0x1cf/0x250
[  322.542196][ T5851]  ? pte_offset_map_rw_nolock+0xea/0x160
[  322.542205][ T5851]  __handle_mm_fault+0xe55/0x5440
[  322.542216][ T5851]  ? __pfx___handle_mm_fault+0x10/0x10
[  322.542225][ T5851]  ? lock_release+0x4b/0x3e0
[  322.542235][ T5851]  ? rcu_is_watching+0x15/0xb0
[  322.542241][ T5851]  ? lock_vma_under_rcu+0xdf/0x3d0
[  322.542251][ T5851]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  322.542261][ T5851]  handle_mm_fault+0x40a/0x8e0
[  322.542271][ T5851]  do_user_addr_fault+0xa81/0x1390
[  322.542283][ T5851]  ? rcu_is_watching+0x15/0xb0
[  322.542289][ T5851]  ? trace_page_fault_user+0x84/0x1e0
[  322.542299][ T5851]  exc_page_fault+0x76/0xf0
[  322.542310][ T5851]  asm_exc_page_fault+0x26/0x30
[  322.542317][ T5851] RIP: 0033:0x7f5e231b6a10
[  322.542325][ T5851] Code: 48 8b 3c 25 00 03 00 00 e8 1d 13 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 e7 02 74 0b c3 66 2e 0f 1f 84 00 00 00 00 00 <64> 48 8b 04 25 10 00 00 00 8b 90 08 03 00 00 48 8d b8 08 03 00 00
[  322.542332][ T5851] RSP: 002b:00007ffea9cd3228 EFLAGS: 00010246
[  322.542340][ T5851] RAX: 0000000000000000 RBX: 0000000000001243 RCX: 00007f5e231c14a5
[  322.542345][ T5851] RDX: 00007ffea9cd3270 RSI: 0000000000000000 RDI: 0000000000000000
[  322.542350][ T5851] RBP: 00007ffea9cd32dc R08: 0000000000000000 R09: 0000000000000000
[  322.542354][ T5851] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388
[  322.542358][ T5851] R13: 00000000000927c0 R14: 000000000004e93c R15: 00007ffea9cd3330
[  322.542366][ T5851]  </TASK>
[  322.542369][ T5851] memory: usage 307200kB, limit 307200kB, failcnt 599
[  322.683625][ T5851] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0
[  322.686137][ T5851] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0
[  322.688794][ T5851] Memory cgroup stats for /syz1:
[  322.688847][ T5851] cache 0
[  322.691856][ T5851] rss 0
[  322.693105][ T5851] rss_huge 0
[  322.703635][ T5851] shmem 0
[  322.704621][ T5851] mapped_file 0
[  322.705752][ T5851] dirty 0
[  322.706743][ T5851] writeback 0
[  322.708046][ T5851] workingset_refault_anon 6
[  322.709740][ T5851] workingset_refault_file 0
[  322.711389][ T5851] swap 184320
[  322.715427][ T5851] swapcached 20480
[  322.716710][ T5851] pgpgin 134940
[  322.717899][ T5851] pgpgout 134935
[  322.719130][ T5851] pgfault 307773
[  322.723132][ T5851] pgmajfault 9
[  322.724504][ T5851] inactive_anon 8192
[  322.726253][ T5851] active_anon 12288
[  322.727516][ T5851] inactive_file 0
[  322.728737][ T5851] active_file 0
[  322.729897][ T5851] unevictable 0
[  322.731099][ T5851] hierarchical_memory_limit 314572800
[  322.747126][ T5851] hierarchical_memsw_limit 9223372036854771712
[  322.749198][ T5851] total_cache 0
[  322.750374][ T5851] total_rss 0
[  322.751497][ T5851] total_rss_huge 0
[  322.752839][ T5851] total_shmem 0
[  322.754014][ T5851] total_mapped_file 0
[  322.755350][ T5851] total_dirty 0
[  322.756530][ T5851] total_writeback 0
[  322.757814][ T5851] total_workingset_refault_anon 6
[  322.759496][ T5851] total_workingset_refault_file 0
[  322.761190][ T5851] total_swap 184320
[  322.762483][ T5851] total_swapcached 20480
[  322.765312][ T5851] total_pgpgin 134941
[  322.766686][ T5851] total_pgpgout 134936
[  322.768050][ T5851] total_pgfault 307775
[  322.769427][ T5851] total_pgmajfault 9
[  322.770728][ T5851] total_inactive_anon 8192
[  322.772209][ T5851] total_active_anon 12288
[  322.785348][ T5851] total_inactive_file 0
[  322.787008][ T5851] total_active_file 0
[  322.788410][ T5851] total_unevictable 0
[  322.789810][ T5851] anon_cost 0
[  322.790980][ T5851] file_cost 0
[  322.792142][ T5851] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.4056,pid=20038,uid=0
[  322.797115][ T5851] Memory cgroup out of memory: Killed process 20038 (syz.1.4056) total-vm:101888kB, anon-rss:1076kB, file-rss:22824kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  323.604831][T20208] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  324.020310][T20275] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  324.024107][T20275] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  324.030541][T20275] netlink: 'syz.1.4083': attribute type 16 has an invalid length.
[  324.036157][T20275] netlink: 'syz.1.4083': attribute type 17 has an invalid length.
[  324.039515][T20276] IPv6: NLM_F_REPLACE set, but no existing node found!
[  324.924410][T20355] netlink: 'syz.1.4092': attribute type 12 has an invalid length.
[  325.165634][T20396] netlink: 'syz.2.4101': attribute type 29 has an invalid length.
[  325.919813][T20475] __nla_validate_parse: 9 callbacks suppressed
[  325.919823][T20475] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4109'.
[  325.978070][T20485] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4110'.
[  326.015097][T20491] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  326.018653][T20491] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  326.596957][T20580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4128'.
[  326.655931][T20590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4128'.
[  327.189119][T20640] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4132'.
[  327.345009][T20664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4138'.
[  327.492425][T20690] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4140'.
[  327.501419][T20690] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4140'.
[  327.505522][T20690] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4140'.
[  327.509283][T20690] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4140'.
[  327.542075][T20693] netlink: 'syz.1.4144': attribute type 5 has an invalid length.
[  329.255721][T20858] sctp: [Deprecated]: syz.0.4152 (pid 20858) Use of int in max_burst socket option.
[  329.255721][T20858] Use struct sctp_assoc_value instead
[  329.903667][T20956] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  331.860106][T21069] __nla_validate_parse: 17 callbacks suppressed
[  331.860117][T21069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4184'.
[  331.919215][T21082] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4184'.
[  332.173754][T21106] nbd: nbd0 already in use
[  332.175576][T21106] block nbd0: NBD_DISCONNECT
[  332.177150][T21106] block nbd0: Send disconnect failed -32
[  332.191053][T21106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4186'.
[  332.244823][T21111] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  332.734076][T21195] netlink: 'syz.1.4199': attribute type 5 has an invalid length.
[  332.738068][T21195] tipc: Failed to remove unknown binding: 66,1,1/24339:725814509/725814511
[  332.741418][T21195] tipc: Failed to remove unknown binding: 66,1,1/24339:725814509/725814511
[  332.744298][T21195] tipc: Failed to remove unknown binding: 66,1,1/24339:725814509/725814511
[  332.968815][T21254] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  333.098030][T21278] syzkaller0: entered promiscuous mode
[  333.108914][T21278] syzkaller0: entered allmulticast mode
[  333.118162][T21278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4216'.
[  333.933643][T21349] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4222'.
[  333.937422][T21349] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4222'.
[  333.941365][T21349] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4222'.
[  333.945174][T21349] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4222'.
[  334.040832][T21361] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4228'.
[  334.262182][T21398] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4235'.
[  334.283645][T21405] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  335.511676][T21550] siw: device registration error -23
[  335.671876][T21577] syzkaller1: entered allmulticast mode
[  336.054736][T21605] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  336.299485][T21636] can: request_module (can-proto-0) failed.
[  337.335869][T21713] __nla_validate_parse: 13 callbacks suppressed
[  337.335880][T21713] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4285'.
[  337.422822][T21716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4286'.
[  337.537556][T21729] netlink: 'syz.1.4288': attribute type 12 has an invalid length.
[  337.630793][T21739] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  337.649261][T21742] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4292'.
[  337.853897][T21755] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  337.880832][T21757] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4299'.
[  338.255175][T21777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4304'.
[  338.523471][T21800] netlink: 'syz.1.4311': attribute type 1 has an invalid length.
[  338.541180][T21806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4314'.
[  338.565143][T21808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4315'.
[  339.304730][T21820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4319'.
[  339.354452][T21827] netlink: 'syz.1.4321': attribute type 21 has an invalid length.
[  339.387711][T21830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4322'.
[  339.614969][T21849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4329'.
[  340.118606][T21873] tipc: Enabled bearer <ib:caif0>, priority 14
[  340.552976][T21887] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  340.717455][T21918] IPVS: set_ctl: invalid protocol: 3 100.1.1.1:20000
[  340.892755][    T9] page_pool_release_retry() stalled pool shutdown: id 15, 3329 inflight 241 sec
[  341.055224][T21964] syzkaller1: left allmulticast mode
[  341.216588][T21988] netlink: 'syz.1.4363': attribute type 1 has an invalid length.
[  341.835528][T22038] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  342.806255][T22065] netlink: 'syz.0.4386': attribute type 11 has an invalid length.
[  342.809593][T22065] __nla_validate_parse: 9 callbacks suppressed
[  342.809604][T22065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4386'.
[  342.937497][T22069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4387'.
[  343.098830][T22081] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4389'.
[  343.175122][T22086] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.4391'.
[  343.180156][T22086] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  343.185376][T22086] syzkaller0: entered promiscuous mode
[  343.187667][T22086] syzkaller0: entered allmulticast mode
[  343.198989][T22086] tipc: Resetting bearer <eth:syzkaller0>
[  343.202271][T22085] tipc: Resetting bearer <eth:syzkaller0>
[  343.205835][T22085] tipc: Disabling bearer <eth:syzkaller0>
[  343.306030][T22088] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  343.675546][T22100] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4396'.
[  343.678610][T22100] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4396'.
[  343.681561][T22100] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4396'.
[  343.689796][T22100] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check.
[  343.804309][T22105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4397'.
[  344.351865][T22121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4404'.
[  344.358193][T22126] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  344.384051][T22134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4406'.
[  344.387513][T22134] netlink: 'syz.1.4406': attribute type 21 has an invalid length.
[  344.406655][T22138] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  344.604870][T22150] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  344.608654][T22150] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  344.611777][T22150] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  344.877048][T22163] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  344.929215][T22169] netlink: 'syz.0.4418': attribute type 1 has an invalid length.
[  344.931788][T22168] netlink: 'syz.0.4418': attribute type 1 has an invalid length.
[  345.939536][T22187] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  346.065808][T22192] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  346.068620][T22192] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  346.319210][T22207] netlink: 'syz.1.4429': attribute type 1 has an invalid length.
[  346.357306][T22209] netlink: 'syz.2.4432': attribute type 3 has an invalid length.
[  347.960211][T22250] __nla_validate_parse: 54 callbacks suppressed
[  347.960227][T22250] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4442'.
[  348.050276][T22263] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4446'.
[  348.104971][T22271] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  348.200357][T22276] 8021q: VLANs not supported on syzkaller1
[  348.958687][T22283] siw: device registration error -23
[  349.008749][T22292] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  349.096035][T22307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4459'.
[  349.155813][T22319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4463'.
[  349.238019][T22325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4465'.
[  349.343013][T22339] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4468'.
[  350.379542][T22419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4483'.
[  350.385178][T22419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4483'.
[  350.589169][T22447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4486'.
[  350.592149][T22447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4486'.
[  350.620378][T22452] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  350.661629][T22456] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  350.666808][T22456] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  350.858517][T22492] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  351.010316][T22519] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  351.075979][T22527] netlink: 'syz.0.4504': attribute type 4 has an invalid length.
[  351.253261][T22558] siw: device registration error -23
[  351.349594][T22572] tc_dump_action: action bad kind
[  351.540147][T22590] netlink: 'syz.1.4522': attribute type 4 has an invalid length.
[  351.544844][T22590] netlink: 'syz.1.4522': attribute type 8 has an invalid length.
[  352.269806][T22635] IPVS: set_ctl: invalid protocol: 41474 64.64.64.0:21
[  353.309906][   T33] audit: type=1107 audit(1755862521.261:9): pid=22696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='X&GHy5E]%[_úXzտlNg+-e1PN2IV_冏ũ`ET)1FfŤ򶋸TqKi,alÜ$	yTCTy=I-zhtR'
[  353.730018][T22731] __nla_validate_parse: 278 callbacks suppressed
[  353.730036][T22731] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4566'.
[  353.741448][T22731] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4566'.
[  353.801131][T22738] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4569'.
[  353.964217][T22761] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:0
[  353.980187][T22763] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4576'.
[  354.058569][T22765] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4577'.
[  354.065496][T22765] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4577'.
[  354.142519][T22782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4580'.
[  354.148128][T22783] netlink: 'syz.0.4581': attribute type 1 has an invalid length.
[  354.298089][T22787] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4582'.
[  356.366034][T22860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4600'.
[  356.621849][T22877] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4603'.
[  356.985975][T22916] netlink: 'syz.1.4615': attribute type 62 has an invalid length.
[  357.162588][T22928] netlink: 'syz.0.4619': attribute type 1 has an invalid length.
[  357.165508][T22928] netlink: 'syz.0.4619': attribute type 1 has an invalid length.
[  357.168690][T22928] netlink: 'syz.0.4619': attribute type 2 has an invalid length.
[  357.172054][T22928] netlink: 'syz.0.4619': attribute type 1 has an invalid length.
[  358.077348][T22945] vxcan1: entered allmulticast mode
[  358.083210][T22945] vxcan1: left allmulticast mode
[  358.197645][T22952] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  358.751647][T22977] __nla_validate_parse: 6 callbacks suppressed
[  358.751662][T22977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4634'.
[  358.797153][T22981] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4635'.
[  358.801041][T22981] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4635'.
[  358.804246][T22981] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4635'.
[  358.807450][T22981] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4635'.
[  358.838815][T22983] xt_socket: unknown flags 0x50
[  358.841963][T22983] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4636'.
[  358.845126][T22983] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4636'.
[  358.848189][T22983] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4636'.
[  358.851191][T22983] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4636'.
[  358.927209][T22989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4638'.
[  359.080451][T23006] netlink: 'syz.1.4643': attribute type 8 has an invalid length.
[  359.118717][T23013] netlink: 'syz.1.4646': attribute type 1 has an invalid length.
[  359.243464][T23025] IPVS: Scheduler module ip_vs_sip not found
[  359.295270][T23038] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  359.462388][T23057] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  360.217403][T23074] vlan1: entered promiscuous mode
[  360.219814][T23074] vlan1: entered allmulticast mode
[  360.222079][T23074] hsr_slave_1: entered allmulticast mode
[  360.317876][T23081] sctp: [Deprecated]: syz.1.4669 (pid 23081) Use of struct sctp_assoc_value in delayed_ack socket option.
[  360.317876][T23081] Use struct sctp_sack_info instead
[  360.354335][T23087] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  361.169268][T23099] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  361.920778][T23161] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  361.924797][T23161] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  362.059491][T23167] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  362.186715][T23189] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  362.296283][T23213] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  362.369103][T23224] netlink: 'syz.2.4719': attribute type 1 has an invalid length.
[  363.490278][T23261] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:0
[  364.059830][T23266] __nla_validate_parse: 33 callbacks suppressed
[  364.059843][T23266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4730'.
[  364.065516][T23266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4730'.
[  364.068495][T23266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4730'.
[  364.071548][T23266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4730'.
[  364.074561][T23266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4730'.
[  364.473589][T23285] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4736'.
[  364.478394][T23286] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4736'.
[  364.483860][T23286] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4736'.
[  364.674253][T23294] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4738'.
[  364.798406][T23304] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4741'.
[  365.050850][T23328] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  365.161518][T23352] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  365.205567][T23359] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  365.208980][T23359] gretap2: entered promiscuous mode
[  365.210880][T23359] gretap2: entered allmulticast mode
[  365.649049][T23383] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  366.051927][T23400] sctp: [Deprecated]: syz.2.4770 (pid 23400) Use of int in max_burst socket option deprecated.
[  366.051927][T23400] Use struct sctp_assoc_value instead
[  367.045045][T23452] netlink: 'syz.1.4786': attribute type 10 has an invalid length.
[  367.048681][T23452] team0: Cannot enslave team device to itself
[  368.066357][T23492] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  368.296820][T23506] netlink: 'syz.0.4799': attribute type 83 has an invalid length.
[  368.481141][T23514] netlink: 'syz.0.4800': attribute type 5 has an invalid length.
[  368.986835][T23520] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  369.133759][T23549] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  369.160045][T23552] __nla_validate_parse: 27 callbacks suppressed
[  369.160057][T23552] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4814'.
[  369.167689][T23552] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4814'.
[  369.191646][T23552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4814'.
[  369.210168][T23561] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4816'.
[  369.243038][T23569] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4819'.
[  369.265911][T23573] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4820'.
[  369.327312][T23579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4823'.
[  369.331321][T23579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4823'.
[  369.532190][T23601] ip6gre1: entered allmulticast mode
[  369.571764][T23606] netlink: 'syz.0.4830': attribute type 4 has an invalid length.
[  369.589101][T23606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4830'.
[  369.593256][T23606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4830'.
[  370.013619][T23619] openvswitch: netlink: Unknown key attributes 2
[  370.110046][T23623] syzkaller1: tun_chr_ioctl cmd 1074025677
[  370.112469][T23623] syzkaller1: linktype set to 778
[  370.488388][T23638] netlink: 'syz.0.4840': attribute type 1 has an invalid length.
[  370.510468][T23640] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  373.325247][T23755] gretap2: left promiscuous mode
[  373.327121][T23755] gretap2: left allmulticast mode
[  373.329077][T23755] ip6gre1: left allmulticast mode
[  373.371269][T23761] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  373.502365][T23776] netlink: 'syz.0.4885': attribute type 4 has an invalid length.
[  373.761004][   T33] audit: type=1800 audit(1755862541.711:10): pid=23796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4891" name="memory.events" dev="tmpfs" ino=7369 res=0 errno=0
[  373.770911][   T33] audit: type=1804 audit(1755862541.731:11): pid=23796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4891" name="/newroot/1436/memory.events" dev="tmpfs" ino=7369 res=1 errno=0
[  374.123898][T23824] netlink: 'syz.1.4902': attribute type 1 has an invalid length.
[  374.638487][T23835] netlink: 'syz.0.4907': attribute type 32 has an invalid length.
[  374.943779][T23862] __nla_validate_parse: 345 callbacks suppressed
[  374.943790][T23862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4916'.
[  375.035678][T23871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4919'.
[  375.187023][T23880] netlink: 'syz.1.4922': attribute type 4 has an invalid length.
[  375.190433][T23880] netlink: 14345 bytes leftover after parsing attributes in process `syz.1.4922'.
[  375.195338][T23880] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4922'.
[  375.270959][T23890] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  375.301083][T23892] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4927'.
[  375.304419][T23892] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4927'.
[  375.307295][T23892] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4927'.
[  375.310128][T23892] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4927'.
[  375.540554][T23900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4930'.
[  375.549531][T23900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4930'.
[  375.807034][T23930] netlink: 'syz.1.4939': attribute type 2 has an invalid length.
[  375.845956][T23932] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  376.835304][T23964] can: request_module (can-proto-5) failed.
[  376.853363][T23969] netlink: 'syz.2.4952': attribute type 12 has an invalid length.
[  376.856930][T23969] netlink: 'syz.2.4952': attribute type 12 has an invalid length.
[  377.051963][T23989] netlink: 'syz.0.4955': attribute type 1 has an invalid length.
[  377.883856][T23999] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  378.068797][T24015] openvswitch: netlink: Key type 251 is out of range max 32
[  378.270171][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  378.808015][T24052] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  378.811536][T24053] tipc: Resetting bearer <eth:syzkaller0>
[  378.825123][T24053] tipc: Disabling bearer <eth:syzkaller0>
[  379.781540][T24105] netlink: 'syz.2.4987': attribute type 5 has an invalid length.
[  379.966659][T24126] __nla_validate_parse: 23 callbacks suppressed
[  379.966671][T24126] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4994'.
[  380.056776][T24134] syzkaller1: entered promiscuous mode
[  380.059189][T24134] syzkaller1: entered allmulticast mode
[  380.063971][T24134] netlink: 'syz.0.4996': attribute type 16 has an invalid length.
[  380.066706][T24134] netlink: 'syz.0.4996': attribute type 17 has an invalid length.
[  380.077093][T24134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4996'.
[  380.115283][T24143] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4998'.
[  380.182954][T24151] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  380.244074][T24161] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  380.287483][T24166] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5006'.
[  380.519976][T24176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5009'.
[  380.574619][T24180] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  380.666613][T24194] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5015'.
[  381.079733][T24218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5022'.
[  381.164092][T24226] netlink: 'syz.0.5025': attribute type 12 has an invalid length.
[  381.167487][T24226] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.5025'.
[  381.374718][T24233] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  381.544789][T24236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5027'.
[  381.621719][T24244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5030'.
[  381.928073][T24290] netlink: 'syz.1.5045': attribute type 3 has an invalid length.
[  382.202500][T24318] netlink: 'syz.1.5054': attribute type 1 has an invalid length.
[  382.216071][T24318] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  382.220353][   T12] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  382.220658][T24318] 8021q: adding VLAN 0 to HW filter on device bond8
[  382.237599][T24318] bond8 (unregistering): (slave ip6gretap1): Removing an active aggregator
[  382.241177][T24318] bond8 (unregistering): (slave ip6gretap1): Releasing backup interface
[  382.246006][T24318] bond8 (unregistering): Released all slaves
[  382.331658][T24326] netlink: 'syz.0.5056': attribute type 1 has an invalid length.
[  382.334535][T24328] netlink: 'syz.0.5056': attribute type 1 has an invalid length.
[  383.334698][T24359] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  385.062171][T24392] __nla_validate_parse: 76 callbacks suppressed
[  385.062186][T24392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5074'.
[  385.131563][T24398] syzkaller0: entered promiscuous mode
[  385.139357][T24398] syzkaller0: entered allmulticast mode
[  385.211010][T24405] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  385.258640][T24407] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  385.382597][T24410] tipc: Resetting bearer <eth:syzkaller0>
[  386.036547][T24421] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  386.220761][T24446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5091'.
[  386.224897][T24446] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  386.337145][T24457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5094'.
[  386.348329][T24457] syzkaller0: left promiscuous mode
[  386.350241][T24457] syzkaller0: left allmulticast mode
[  386.352466][T24464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5096'.
[  386.399186][T24471] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  386.466342][T24476] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma?
[  386.568659][T24487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5104'.
[  386.574549][T24487] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5104'.
[  386.597839][T24489] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  386.669264][T24494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5107'.
[  386.669881][T24493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5107'.
[  386.805615][T24510] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  386.904766][T24516] trusted_key: syz.1.5116 sent an empty control message without MSG_MORE.
[  386.988294][T24521] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5118'.
[  386.992157][T24521] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5118'.
[  387.215507][T24526] openvswitch: netlink: IP tunnel dst address not specified
[  387.250523][T24531] netlink: 'syz.0.5121': attribute type 3 has an invalid length.
[  389.481913][T24674] nbd: illegal input index 65508
[  389.624284][T24693] syzkaller1: entered promiscuous mode
[  389.626201][T24693] syzkaller1: entered allmulticast mode
[  390.812566][T24788] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  390.816078][T24788] syzkaller0: entered promiscuous mode
[  390.818362][T24788] syzkaller0: entered allmulticast mode
[  390.870494][T24790] __nla_validate_parse: 79 callbacks suppressed
[  390.870508][T24790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5179'.
[  390.932251][T24800] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5183'.
[  391.927285][T24829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5194'.
[  391.952245][T24840] netlink: 212288 bytes leftover after parsing attributes in process `syz.1.5198'.
[  391.959870][T24839] delete_channel: no stack
[  392.014466][T24856] netlink: 'syz.0.5199': attribute type 5 has an invalid length.
[  392.019016][T24855] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5204'.
[  392.077199][T24859] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5203'.
[  392.174928][T24879] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.5212'.
[  392.178113][T24872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5211'.
[  392.214087][T24874] tipc: Resetting bearer <eth:syzkaller0>
[  392.264370][T24882] netlink: 'syz.0.5212': attribute type 1 has an invalid length.
[  393.033738][T24894] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5215'.
[  393.064035][T24892] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5214'.
[  393.091146][   T33] audit: type=1800 audit(1755862561.041:12): pid=24899 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5217" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=11678 res=0 errno=0
[  393.174792][T24907] siw: device registration error -23
[  394.029765][T24945] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  395.482204][T24988] geneve4: entered promiscuous mode
[  395.485029][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  395.488701][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  395.491701][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  395.494784][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  395.644731][T24993] netlink: 'syz.2.5246': attribute type 1 has an invalid length.
[  395.767412][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  396.587044][T25019] __nla_validate_parse: 14 callbacks suppressed
[  396.587055][T25019] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5254'.
[  396.600923][T25025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5256'.
[  396.617468][T25025] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5256'.
[  396.636690][T25033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5258'.
[  396.661522][T25029] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5257'.
[  396.700939][T25042] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5261'.
[  396.704081][T25042] netem: change failed
[  396.748132][T25049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5260'.
[  397.454676][T25053] vxcan1: entered allmulticast mode
[  397.504607][T25060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5266'.
[  397.510075][T25060] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5266'.
[  397.671526][T25084] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5273'.
[  397.779625][ T5878] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  397.787409][ T5878] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  397.795071][ T5878] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  397.802711][ T5878] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  398.711884][T25106] bond0 (unregistering): Released all slaves
[  398.746204][T25112] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  398.808854][T25123] veth1_to_bond: entered allmulticast mode
[  398.825535][T25123] veth1_to_bond: left allmulticast mode
[  398.910102][T25136] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  398.917444][T25136] rdma_op ffff88803a96d9f0 conn xmit_rdma 0000000000000000
[  399.614270][T25143] syz.2.5290: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  399.621684][T25143] CPU: 0 UID: 0 PID: 25143 Comm: syz.2.5290 Not tainted syzkaller #0 PREEMPT(full) 
[  399.621705][T25143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  399.621714][T25143] Call Trace:
[  399.621719][T25143]  <TASK>
[  399.621724][T25143]  dump_stack_lvl+0x189/0x250
[  399.621767][T25143]  ? __pfx_dump_stack_lvl+0x10/0x10
[  399.621783][T25143]  ? __pfx__printk+0x10/0x10
[  399.621799][T25143]  ? lock_release+0x4b/0x3e0
[  399.621819][T25143]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  399.621833][T25143]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  399.621846][T25143]  warn_alloc+0x214/0x310
[  399.621866][T25143]  ? __pfx_warn_alloc+0x10/0x10
[  399.621884][T25143]  ? __get_vm_area_node+0x28f/0x300
[  399.621900][T25143]  ? xskq_create+0xbf/0x170
[  399.621918][T25143]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  399.621941][T25143]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  399.621957][T25143]  ? xsk_setsockopt+0x502/0x8d0
[  399.621973][T25143]  ? __kasan_kmalloc+0x93/0xb0
[  399.621990][T25143]  vmalloc_user_noprof+0xad/0xf0
[  399.622006][T25143]  ? xskq_create+0xbf/0x170
[  399.622021][T25143]  xskq_create+0xbf/0x170
[  399.622046][T25143]  xsk_init_queue+0xb0/0x110
[  399.622062][T25143]  xsk_setsockopt+0x57b/0x8d0
[  399.622077][T25143]  ? __pfx_xsk_setsockopt+0x10/0x10
[  399.622092][T25143]  ? __pfx_aa_sk_perm+0x10/0x10
[  399.622109][T25143]  ? lock_release+0x4b/0x3e0
[  399.622125][T25143]  ? __se_sys_futex+0x36f/0x400
[  399.622139][T25143]  ? aa_sock_opt_perm+0xff/0x1b0
[  399.622150][T25143]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  399.622163][T25143]  ? __pfx_xsk_setsockopt+0x10/0x10
[  399.622177][T25143]  do_sock_setsockopt+0x17c/0x1b0
[  399.622191][T25143]  __x64_sys_setsockopt+0x13f/0x1b0
[  399.622204][T25143]  do_syscall_64+0xfa/0x3b0
[  399.622243][T25143]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.622256][T25143]  ? exc_page_fault+0x9f/0xf0
[  399.622271][T25143]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.622284][T25143] RIP: 0033:0x7f966af8ebe9
[  399.622297][T25143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  399.622309][T25143] RSP: 002b:00007f966bdfe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  399.622324][T25143] RAX: ffffffffffffffda RBX: 00007f966b1b6090 RCX: 00007f966af8ebe9
[  399.622334][T25143] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004
[  399.622341][T25143] RBP: 00007f966b011e19 R08: 0000000000000004 R09: 0000000000000000
[  399.622349][T25143] R10: 0000200000001780 R11: 0000000000000246 R12: 0000000000000000
[  399.622356][T25143] R13: 00007f966b1b6128 R14: 00007f966b1b6090 R15: 00007ffdb69d6378
[  399.622370][T25143]  </TASK>
[  399.622420][T25143] Mem-Info:
[  399.725135][T25143] active_anon:6014 inactive_anon:0 isolated_anon:0
[  399.725135][T25143]  active_file:1493 inactive_file:38201 isolated_file:0
[  399.725135][T25143]  unevictable:1768 dirty:121 writeback:0
[  399.725135][T25143]  slab_reclaimable:10736 slab_unreclaimable:83646
[  399.725135][T25143]  mapped:18313 shmem:2416 pagetables:977
[  399.725135][T25143]  sec_pagetables:0 bounce:0
[  399.725135][T25143]  kernel_misc_reclaimable:0
[  399.725135][T25143]  free:263653 free_pcp:17666 free_cma:0
[  399.743263][T25143] Node 0 active_anon:10828kB inactive_anon:0kB active_file:4044kB inactive_file:145300kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:32428kB dirty:264kB writeback:0kB shmem:4708kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6564kB pagetables:2352kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  399.760752][T25143] Node 1 active_anon:13228kB inactive_anon:0kB active_file:1928kB inactive_file:7504kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:40824kB dirty:220kB writeback:0kB shmem:4956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5028kB pagetables:1556kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  399.773059][T25143] Node 0 DMA free:14852kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:508kB local_pcp:124kB free_cma:0kB
[  399.783151][T25143] lowmem_reserve[]: 0 811 811 811 811
[  399.790406][T25143] Node 0 DMA32 free:146508kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10624kB inactive_anon:0kB active_file:4044kB inactive_file:145300kB unevictable:3536kB writepending:264kB present:1556484kB managed:830928kB mlocked:0kB bounce:0kB free_pcp:29708kB local_pcp:9068kB free_cma:0kB
[  399.801903][T25143] lowmem_reserve[]: 0 0 0 0 0
[  399.803684][T25143] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  399.806958][T25150] netlink: 'syz.1.5292': attribute type 1 has an invalid length.
[  399.814715][T25143] lowmem_reserve[]: 0 0 854 854 854
[  399.814742][T25143] Node 1 Normal free:434372kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13568kB inactive_anon:0kB active_file:1928kB inactive_file:7504kB unevictable:3536kB writepending:220kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:40600kB local_pcp:20632kB free_cma:0kB
[  399.814765][T25143] lowmem_reserve[]: 0 0 0 0 0
[  399.814779][T25143] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 2*128kB (U) 1*256kB (U) 2*512kB (U) 3*1024kB (U) 1*2048kB (M) 2*4096kB (U) = 14852kB
[  399.814831][T25143] Node 0 DMA32: 967*4kB (UME) 669*8kB (UME) 392*16kB (UME) 472*32kB (UM) 125*64kB (UME) 147*128kB (UME) 80*256kB (UM) 24*512kB (UME) 5*1024kB (UME) 5*2048kB (UM) 10*4096kB (UM) = 146500kB
[  399.814893][T25143] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  399.814951][T25143] Node 1 Normal: 403*4kB (ME) 603*8kB (UME) 
[  399.819430][T25150] netlink: 'syz.1.5292': attribute type 1 has an invalid length.
[  399.819642][T25143] 630*16kB 
[  399.836464][T25150] syzkaller1: entered promiscuous mode
[  399.843758][T25143] (UME) 296*32kB (UM) 261*64kB (UM) 138*128kB (UME) 53*256kB (UME) 10*512kB (UM) 9*1024kB (UM) 17*2048kB (UME) 76*4096kB (UM) = 434372kB
[  399.857611][T25150] syzkaller1: entered allmulticast mode
[  399.863039][T25143] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  399.863052][T25143] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  399.863058][T25143] 42115 total pagecache pages
[  399.863061][T25143] 5 pages in swap cache
[  399.863064][T25143] Free swap  = 124976kB
[  399.863068][T25143] Total swap = 124996kB
[  399.863072][T25143] 786301 pages RAM
[  399.863075][T25143] 0 pages HighMem/MovableOnly
[  399.863078][T25143] 241337 pages reserved
[  399.863081][T25143] 0 pages cma reserved
[  400.260113][T25199] delete_channel: no stack
[  400.369576][T25222] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  400.373336][T25222] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  400.376192][T25222] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  400.577690][T25259] openvswitch: netlink: Flow actions attr not present in new flow.
[  400.706940][T25268] vxcan0: entered promiscuous mode
[  400.744109][T25272] openvswitch: netlink: IP tunnel dst address not specified
[  400.979619][T25304] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  401.212889][ T3147] page_pool_release_retry() stalled pool shutdown: id 15, 3329 inflight 301 sec
[  401.309145][T25329] syzkaller1: entered promiscuous mode
[  401.311404][T25329] syzkaller1: entered allmulticast mode
[  402.130002][T25372] netlink: 'syz.1.5358': attribute type 4 has an invalid length.
[  402.478488][T25380] __nla_validate_parse: 35 callbacks suppressed
[  402.478502][T25380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5361'.
[  402.485879][T25380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5361'.
[  402.724234][T25395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5365'.
[  402.728144][T25395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5365'.
[  402.858902][T25399] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  402.865995][T25397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5366'.
[  403.015285][T25401] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5367'.
[  403.041495][T25403] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  403.117453][T25413] netlink: 'syz.0.5371': attribute type 16 has an invalid length.
[  403.120440][T25413] netlink: 'syz.0.5371': attribute type 3 has an invalid length.
[  403.123626][T25413] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.5371'.
[  403.144215][T25417] netlink: 'syz.0.5372': attribute type 11 has an invalid length.
[  403.167576][T25420] netlink: 'syz.0.5373': attribute type 14 has an invalid length.
[  403.179055][T25420] netlink: 'syz.0.5373': attribute type 14 has an invalid length.
[  404.307425][T25459] netlink: 'syz.0.5380': attribute type 1 has an invalid length.
[  404.534504][T25463] IPv6: NLM_F_CREATE should be specified when creating new route
[  404.572954][T25467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5384'.
[  405.107471][T25548] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5394'.
[  405.145583][T25556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5395'.
[  405.288856][T25575] tipc: Resetting bearer <eth:syzkaller0>
[  405.479369][T25593] syzkaller0: left promiscuous mode
[  405.481385][T25593] syzkaller0: left allmulticast mode
[  405.485580][T25593] geneve4: left promiscuous mode
[  406.099922][T25622] bond0: Unable to set peer notification delay as MII monitoring is disabled
[  406.104106][T25624] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  406.251849][T25629] netlink: 'syz.2.5422': attribute type 4 has an invalid length.
[  406.270275][T25633] netlink: 'syz.0.5423': attribute type 1 has an invalid length.
[  406.273120][T25633] netlink: 'syz.0.5423': attribute type 1 has an invalid length.
[  406.341648][T25643] netlink: 'syz.2.5426': attribute type 13 has an invalid length.
[  407.189703][T25654] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  407.236064][T25665] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  407.242207][T25665] netlink: 'syz.0.5433': attribute type 3 has an invalid length.
[  407.449235][T25676] netlink: 'syz.0.5437': attribute type 13 has an invalid length.
[  407.452524][T25676] netlink: 'syz.0.5437': attribute type 17 has an invalid length.
[  407.459556][T25676] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  407.537547][T25682] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  407.935086][T25712] netlink: 'syz.0.5448': attribute type 1 has an invalid length.
[  407.938479][T25712] __nla_validate_parse: 7 callbacks suppressed
[  407.938493][T25712] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5448'.
[  407.945206][T25712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5448'.
[  408.060052][T25715] netlink: 'syz.2.5449': attribute type 21 has an invalid length.
[  408.063555][T25715] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5449'.
[  408.227216][T25722] netlink: 'syz.2.5452': attribute type 1 has an invalid length.
[  408.229906][T25722] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5452'.
[  408.637212][T25743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5461'.
[  408.838094][T25750] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  408.842142][T25750] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  408.847620][T25750] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  408.851243][T25750] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  409.040253][T25764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5468'.
[  409.044414][T25764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5468'.
[  409.114807][T25768] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5470'.
[  409.240366][T25774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5472'.
[  409.269808][T25774] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  409.274401][T25774] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  409.280413][T25784] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  409.323409][T25788] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5477'.
[  409.382048][T25790] wireguard0: entered promiscuous mode
[  409.385892][T25790] wireguard0: entered allmulticast mode
[  409.544378][T25796] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  409.671498][T25815] team1: entered promiscuous mode
[  409.673588][T25815] team1: entered allmulticast mode
[  409.675656][T25815] 8021q: adding VLAN 0 to HW filter on device team1
[  409.689316][T25816] team2: entered promiscuous mode
[  409.691807][T25816] team2: entered allmulticast mode
[  409.695251][T25816] 8021q: adding VLAN 0 to HW filter on device team2
[  410.198670][T25854] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  411.139408][T25909] syzkaller0: entered promiscuous mode
[  411.141712][T25909] syzkaller0: entered allmulticast mode
[  411.241982][T25921] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  411.269103][T25929] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  411.944546][T25937] sctp: [Deprecated]: syz.0.5526 (pid 25937) Use of struct sctp_assoc_value in delayed_ack socket option.
[  411.944546][T25937] Use struct sctp_sack_info instead
[  411.982176][T25944] validate_nla: 11 callbacks suppressed
[  411.982184][T25944] netlink: 'syz.0.5528': attribute type 5 has an invalid length.
[  412.128574][T25952] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  412.219846][T25963] netlink: 'syz.1.5535': attribute type 1 has an invalid length.
[  412.233328][T25971] netlink: 'syz.2.5538': attribute type 1 has an invalid length.
[  412.260801][T25976] vlan0: entered promiscuous mode
[  412.262948][T25976] dummy0: entered promiscuous mode
[  412.309037][T25976] tipc: Resetting bearer <eth:syzkaller0>
[  412.366737][T25984] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  413.206316][T26019] __nla_validate_parse: 29 callbacks suppressed
[  413.206326][T26019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5555'.
[  413.325532][T26024] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5556'.
[  413.370959][T26028] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  413.393350][T26038] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5562'.
[  413.396816][T26039] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5562'.
[  413.495486][T26053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5567'.
[  413.499158][T26055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5568'.
[  413.506457][T26055] team1: left promiscuous mode
[  413.508325][T26055] team1: left allmulticast mode
[  413.511135][T26055] team2: left promiscuous mode
[  413.514315][T26055] team2: left allmulticast mode
[  413.549045][T26062] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5569'.
[  413.553901][T26064] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5567'.
[  413.559713][T26064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5567'.
[  413.612365][T26069] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  413.665227][T26074] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5573'.
[  414.312273][T26088] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  414.320724][T26083] syzkaller0: left promiscuous mode
[  414.323167][T26083] syzkaller0: left allmulticast mode
[  414.511938][T26111] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  414.878733][T26148] wireguard0: entered promiscuous mode
[  414.881079][T26148] wireguard0: entered allmulticast mode
[  415.538179][T26156] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  415.827811][T26193] netlink: 'syz.0.5612': attribute type 14 has an invalid length.
[  415.830544][T26193] netlink: 'syz.0.5612': attribute type 13 has an invalid length.
[  416.522865][T26274] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  417.451262][T26304] geneve2: entered promiscuous mode
[  417.454005][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  417.457445][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  417.461073][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  417.466251][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  418.245596][T26324] __nla_validate_parse: 30 callbacks suppressed
[  418.245611][T26324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5651'.
[  418.324330][T26331] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  418.351927][T26336] netlink: 27 bytes leftover after parsing attributes in process `syz.1.5653'.
[  418.356377][T26335] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5653'.
[  418.480586][T26352] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  418.538998][T26359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5662'.
[  418.595123][T26362] netlink: 'syz.0.5663': attribute type 1 has an invalid length.
[  418.598210][T26362] netlink: 'syz.0.5663': attribute type 1 has an invalid length.
[  418.679435][T26371] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5667'.
[  418.685667][T26371] openvswitch: netlink: Message has 4092 unknown bytes.
[  418.777317][T26382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5671'.
[  418.786222][T26390] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5671'.
[  418.835645][T26388] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5673'.
[  418.840847][T26389] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5673'.
[  418.950413][T26407] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  418.990512][T26409] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  418.994124][T26409] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  418.997087][T26409] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  419.017285][T26414] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5681'.
[  420.500693][T26514] siw: device registration error -23
[  420.606562][T26519] pimreg: entered allmulticast mode
[  420.888117][T26523] netlink: 'syz.2.5716': attribute type 26 has an invalid length.
[  421.316005][T26562] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  421.320173][T26563] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  421.324186][T26562] syzkaller0: entered promiscuous mode
[  421.326579][T26562] syzkaller0: entered allmulticast mode
[  421.334696][T26563] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  421.341383][T26562] tipc: Resetting bearer <eth:syzkaller0>
[  421.346111][T26561] tipc: Resetting bearer <eth:syzkaller0>
[  421.351167][T26561] tipc: Disabling bearer <eth:syzkaller0>
[  421.495449][T26587] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  421.622014][T26612] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  421.650018][T26615] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  422.650214][T26658] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  422.933421][T26687] veth0_to_team: entered allmulticast mode
[  423.143462][T26726] IPVS: Error connecting to the multicast addr
[  423.267697][T26744] netlink: 'syz.1.5783': attribute type 83 has an invalid length.
[  423.315943][T26744] __nla_validate_parse: 20 callbacks suppressed
[  423.315977][T26744] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5783'.
[  423.589584][T26762] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  424.159175][T26781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5792'.
[  424.510804][T26787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5794'.
[  424.996899][T26792] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  425.901985][T26800] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5798'.
[  425.905328][T26800] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5798'.
[  425.908724][T26800] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5798'.
[  425.912811][T26800] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5798'.
[  425.976739][T26810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5802'.
[  426.016409][ T5878] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  426.020684][ T5878] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  426.023682][ T5878] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  426.026546][ T5878] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  426.788120][T26819] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5804'.
[  426.791867][T26817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5803'.
[  426.808284][T26819] 8021q: adding VLAN 0 to HW filter on device bond0
[  426.811405][T26819] 8021q: adding VLAN 0 to HW filter on device team0
[  426.818276][T26821] nbd: must specify at least one socket
[  426.821695][T26819] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  426.847947][T26819] veth0_to_team: entered promiscuous mode
[  426.850185][T26819] veth0_to_team: entered allmulticast mode
[  426.911423][T26823] veth0_to_team: left allmulticast mode
[  426.920430][T26823] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  426.925025][T26823] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  426.931202][T26823] geneve2: left promiscuous mode
[  426.990435][T26844] netlink: 'syz.2.5814': attribute type 2 has an invalid length.
[  426.994653][T26844] netlink: 'syz.2.5814': attribute type 1 has an invalid length.
[  427.018195][T26849] netlink: 'syz.0.5813': attribute type 13 has an invalid length.
[  427.021027][T26849] netlink: 'syz.0.5813': attribute type 17 has an invalid length.
[  427.038582][T26849] 8021q: adding VLAN 0 to HW filter on device team0
[  427.043716][T26849] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  427.201452][T26860] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  428.779689][T26934] __nla_validate_parse: 14 callbacks suppressed
[  428.779704][T26934] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5842'.
[  428.888413][T26939] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5844'.
[  428.896059][T26939] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5844'.
[  428.899346][T26939] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5844'.
[  428.903242][T26939] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5844'.
[  428.906466][T26939] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5844'.
[  428.951632][T26944] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  428.978453][T26945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5846'.
[  429.025536][T26951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5849'.
[  429.085551][T26957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5849'.
[  429.161935][T26959] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  429.231396][T26967] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5853'.
[  429.896371][T26984] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  430.854372][T27052] netlink: 'syz.2.5877': attribute type 7 has an invalid length.
[  430.860452][T27052] netlink: 'syz.2.5877': attribute type 1 has an invalid length.
[  431.575132][T27090] netlink: 'syz.1.5887': attribute type 5 has an invalid length.
[  431.921616][T27118] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  431.964747][T27121] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20004
[  432.498980][T27154] netlink: 'syz.0.5906': attribute type 5 has an invalid length.
[  433.052514][T27172] veth0_to_team: left promiscuous mode
[  433.054771][T27172] veth0_to_team: left allmulticast mode
[  434.414594][T27249] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  434.878587][T27264] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  434.881133][T27264] IPv6: NLM_F_CREATE should be set when creating new route
[  435.225561][T27272] __nla_validate_parse: 24 callbacks suppressed
[  435.225571][T27272] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5944'.
[  435.232557][T27272] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5944'.
[  435.238212][T27272] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5944'.
[  435.328683][T27285] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5948'.
[  435.332495][T27285] unsupported nlmsg_type 40
[  435.696667][T27303] netlink: 160 bytes leftover after parsing attributes in process `syz.2.5954'.
[  437.045129][T27319] netlink: 'syz.1.5959': attribute type 1 has an invalid length.
[  437.048004][T27319] netlink: 172 bytes leftover after parsing attributes in process `syz.1.5959'.
[  437.081354][T27327] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5962'.
[  437.094750][T27327] nbd: socks must be embedded in a SOCK_ITEM attr
[  437.099883][T22593] block nbd64: NBD_DISCONNECT
[  437.103422][T27328] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5962'.
[  437.112388][T27328] nbd: device at index 64 is going down
[  437.313915][T27346] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5965'.
[  437.360717][T27352] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5966'.
[  437.404829][T27361] netlink: 'syz.2.5969': attribute type 2 has an invalid length.
[  438.366381][T27397] netlink: 'syz.2.5979': attribute type 1 has an invalid length.
[  438.786691][T27428] netlink: 'syz.0.5985': attribute type 5 has an invalid length.
[  439.694496][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  440.265417][T27514] __nla_validate_parse: 21 callbacks suppressed
[  440.265439][T27514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6014'.
[  440.310083][T27518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6015'.
[  440.314137][T27518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6015'.
[  440.420119][T27532] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6019'.
[  440.519292][T27534] netlink: 3620 bytes leftover after parsing attributes in process `syz.2.6017'.
[  440.608543][T27539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6020'.
[  440.898442][T27566] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6025'.
[  441.203023][T27593] vxcan1: left allmulticast mode
[  441.292973][T27598] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  441.424256][T27610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6037'.
[  441.428314][T27610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6037'.
[  441.522938][T27621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6041'.
[  442.072157][T27640] netlink: 'syz.1.6045': attribute type 1 has an invalid length.
[  443.308207][T27678] netlink: 'syz.2.6061': attribute type 4 has an invalid length.
[  443.313284][T27678] netlink: 'syz.2.6061': attribute type 4 has an invalid length.
[  443.900765][T27695] netlink: 'syz.1.6066': attribute type 9 has an invalid length.
[  444.208264][T27705] TC_ACT_REPEAT abuse ?
[  444.210290][    C1] TC_ACT_REPEAT abuse ?
[  444.212247][    C1] TC_ACT_REPEAT abuse ?
[  444.214180][    C1] TC_ACT_REPEAT abuse ?
[  444.216059][    C1] TC_ACT_REPEAT abuse ?
[  444.217995][    C1] TC_ACT_REPEAT abuse ?
[  444.219778][    C1] TC_ACT_REPEAT abuse ?
[  444.221634][    C1] TC_ACT_REPEAT abuse ?
[  444.223644][    C1] TC_ACT_REPEAT abuse ?
[  445.211014][T27743] netlink: 'syz.1.6078': attribute type 1 has an invalid length.
[  445.263584][T27743] bond8: entered promiscuous mode
[  445.265386][T27743] bond8: entered allmulticast mode
[  445.267472][T27743] 8021q: adding VLAN 0 to HW filter on device bond8
[  445.275233][T27743] bridge21: entered promiscuous mode
[  445.277178][T27743] bridge21: entered allmulticast mode
[  445.279286][T27743] bond8: (slave bridge21): Enslaving as a backup interface with an up link
[  445.528265][T27760] __nla_validate_parse: 8 callbacks suppressed
[  445.528279][T27760] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6082'.
[  446.178681][T27781] netlink: 'syz.2.6088': attribute type 1 has an invalid length.
[  446.302680][    C0] net_ratelimit: 36123 callbacks suppressed
[  446.302715][    C0] TC_ACT_REPEAT abuse ?
[  446.306155][    C0] TC_ACT_REPEAT abuse ?
[  446.307662][    C0] TC_ACT_REPEAT abuse ?
[  446.309301][    C0] TC_ACT_REPEAT abuse ?
[  446.310735][    C0] TC_ACT_REPEAT abuse ?
[  446.312218][    C0] TC_ACT_REPEAT abuse ?
[  446.313774][    C0] TC_ACT_REPEAT abuse ?
[  446.315226][    C0] TC_ACT_REPEAT abuse ?
[  446.316713][    C0] TC_ACT_REPEAT abuse ?
[  446.318179][    C0] TC_ACT_REPEAT abuse ?
[  447.246535][T27826] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6100'.
[  447.598475][T27838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6102'.
[  448.232526][T27853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6106'.
[  448.235834][T27853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6106'.
[  448.238783][T27853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6106'.
[  448.242464][T27853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6106'.
[  448.246012][T27853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6106'.
[  448.540654][T27866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6110'.
[  448.696123][T27868] tipc: Resetting bearer <eth:syzkaller0>
[  449.033562][T27872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6112'.
[  450.139878][T27925] bond8: left promiscuous mode
[  450.141751][T27925] bridge21: left promiscuous mode
[  450.144593][T27925] bond8: left allmulticast mode
[  450.146419][T27925] bridge21: left allmulticast mode
[  451.312704][    C0] net_ratelimit: 80558 callbacks suppressed
[  451.312719][    C0] TC_ACT_REPEAT abuse ?
[  451.316193][    C0] TC_ACT_REPEAT abuse ?
[  451.317682][    C0] TC_ACT_REPEAT abuse ?
[  451.319137][    C0] TC_ACT_REPEAT abuse ?
[  451.320608][    C0] TC_ACT_REPEAT abuse ?
[  451.322078][    C0] TC_ACT_REPEAT abuse ?
[  451.323616][    C0] TC_ACT_REPEAT abuse ?
[  451.325096][    C0] TC_ACT_REPEAT abuse ?
[  451.326534][    C0] TC_ACT_REPEAT abuse ?
[  451.327982][    C0] TC_ACT_REPEAT abuse ?
[  451.470813][T27958] __nla_validate_parse: 37 callbacks suppressed
[  451.470832][T27958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6135'.
[  451.477916][T27958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6135'.
[  451.570076][T27960] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6136'.
[  451.575431][T27960] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6136'.
[  451.579324][T27960] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6136'.
[  451.584423][T27960] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6136'.
[  452.077446][T27979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6141'.
[  452.084033][T27976] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6141'.
[  453.335441][T28020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6154'.
[  453.380764][T28026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6155'.
[  456.338192][T28046] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  456.478255][T28049] netlink: 'syz.1.6161': attribute type 13 has an invalid length.
[  456.481406][T28049] netlink: 'syz.1.6161': attribute type 17 has an invalid length.
[  456.514428][T28049] 8021q: adding VLAN 0 to HW filter on device bond0
[  456.517503][T28049] 8021q: adding VLAN 0 to HW filter on device team0
[  456.522108][T28049] net_ratelimit: 66394 callbacks suppressed
[  456.522114][T28049] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  456.596374][T28054] __nla_validate_parse: 4 callbacks suppressed
[  456.596387][T28054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6163'.
[  456.649014][T28067] IPVS: Error connecting to the multicast addr
[  456.684031][T28075] netlink: 'syz.0.6167': attribute type 1 has an invalid length.
[  456.686881][T28075] netlink: 'syz.0.6167': attribute type 2 has an invalid length.
[  456.689806][T28077] netlink: 'syz.0.6167': attribute type 1 has an invalid length.
[  456.692497][T28077] netlink: 'syz.0.6167': attribute type 2 has an invalid length.
[  456.697904][T28075] netlink: 'syz.0.6167': attribute type 1 has an invalid length.
[  456.700481][T28075] netlink: 'syz.0.6167': attribute type 2 has an invalid length.
[  456.761756][T28086] netlink: 428 bytes leftover after parsing attributes in process `syz.1.6172'.
[  456.764910][T28086] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6172'.
[  457.652267][T28095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6175'.
[  457.660692][T28095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6175'.
[  457.721228][T28101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6177'.
[  458.039382][T28120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6183'.
[  458.374254][T28147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6191'.
[  458.521234][T28156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6194'.
[  458.586751][T28163] netlink: 'syz.1.6196': attribute type 3 has an invalid length.
[  458.589544][T28163] netlink: 666 bytes leftover after parsing attributes in process `syz.1.6196'.
[  459.559638][T28212] IPVS: persistence engine module ip_vs_pe_ not found
[  459.786263][T28242] netlink: 'syz.0.6220': attribute type 178 has an invalid length.
[  459.876037][T28246] vxcan1: entered allmulticast mode
[  459.878208][T28246] vxcan1: left allmulticast mode
[  460.103768][T28259] vxcan1: entered allmulticast mode
[  460.105973][T28259] vxcan1: left allmulticast mode
[  460.623974][T28283] syzkaller1: entered promiscuous mode
[  460.626025][T28283] syzkaller1: entered allmulticast mode
[  460.633409][T28285] bridge_slave_0: default FDB implementation only supports local addresses
[  461.237585][T28369] bridge0: port 1(erspan0) entered blocking state
[  461.239989][T28369] bridge0: port 1(erspan0) entered disabled state
[  461.242409][T28369] erspan0: entered allmulticast mode
[  461.244971][T28369] erspan0: entered promiscuous mode
[  461.251144][T28369] erspan0: left allmulticast mode
[  461.253471][T28369] erspan0: left promiscuous mode
[  461.255498][T28369] bridge0: port 1(erspan0) entered disabled state
[  461.384234][T27184] page_pool_release_retry() stalled pool shutdown: id 15, 3329 inflight 361 sec
[  461.740401][T28391] __nla_validate_parse: 14 callbacks suppressed
[  461.740413][T28391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6263'.
[  462.634350][T28412] netlink: 'syz.1.6269': attribute type 5 has an invalid length.
[  462.702321][T28421] netlink: 'syz.1.6271': attribute type 29 has an invalid length.
[  462.708200][T28421] netlink: 'syz.1.6271': attribute type 29 has an invalid length.
[  462.711542][T28424] netlink: 'syz.1.6271': attribute type 29 has an invalid length.
[  462.715799][T28420] netlink: 500 bytes leftover after parsing attributes in process `syz.1.6271'.
[  462.766872][T28433] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6274'.
[  462.770946][T28433] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6274'.
[  462.806127][T28438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6275'.
[  462.809430][T28438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6275'.
[  462.837186][T28441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6276'.
[  462.857942][T28444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6277'.
[  462.878974][T28448] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  462.882439][T28448] syzkaller0: entered promiscuous mode
[  462.884478][T28448] syzkaller0: entered allmulticast mode
[  462.889476][T28448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6278'.
[  463.094077][T28473] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6285'.
[  463.097409][T28473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  463.824231][T28494] netlink: 'syz.0.6290': attribute type 2 has an invalid length.
[  463.888188][T28496] tipc: Resetting bearer <eth:syzkaller0>
[  463.892973][T28496] syzkaller0: left promiscuous mode
[  463.895769][T28496] syzkaller0: left allmulticast mode
[  463.958009][T28522] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  463.960991][T28522] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  463.964184][T28522] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  463.981310][T28522] tipc: Resetting bearer <eth:syzkaller0>
[  464.897038][T28548] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  464.900302][T28548] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  465.074757][T28574] netlink: 'syz.0.6312': attribute type 5 has an invalid length.
[  465.109122][T28583] openvswitch: netlink: Tunnel attr 226 out of range max 16
[  465.305756][T28588] netlink: 'syz.1.6315': attribute type 1 has an invalid length.
[  465.326546][T28597] netlink: 'syz.0.6318': attribute type 3 has an invalid length.
[  465.441560][T28611] batadv_slave_1: entered promiscuous mode
[  465.871077][T28631] netlink: 'syz.2.6328': attribute type 1 has an invalid length.
[  466.017134][T28649] openvswitch: netlink: Flow actions attr not present in new flow.
[  466.339605][T28674] netlink: 'syz.1.6342': attribute type 5 has an invalid length.
[  466.359254][T28676] dvmrp0: left allmulticast mode
[  466.361499][T28676] pimreg: left allmulticast mode
[  466.411367][T28677] lo speed is unknown, defaulting to 1000
[  466.414628][T28677] lo speed is unknown, defaulting to 1000
[  466.416976][T28677] lo speed is unknown, defaulting to 1000
[  466.457194][T28677] infiniband syz0: set down
[  466.458936][T27184] lo speed is unknown, defaulting to 1000
[  466.461057][T28677] infiniband syz0: added lo
[  466.468532][T28676] 8021q: adding VLAN 0 to HW filter on device team0
[  466.472504][T28676] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  466.478377][T27184] lo speed is unknown, defaulting to 1000
[  466.480678][T27184] syz0: Port: 1 Link ACTIVE
[  466.488539][T28677] RDS/IB: syz0: added
[  466.495954][T28677] smc: adding ib device syz0 with port count 1
[  466.499157][T28677] smc:    ib device syz0 port 1 has pnetid 
[  466.506004][   T24] lo speed is unknown, defaulting to 1000
[  466.508670][T28677] lo speed is unknown, defaulting to 1000
[  466.565010][T28677] lo speed is unknown, defaulting to 1000
[  466.605238][T28677] lo speed is unknown, defaulting to 1000
[  466.816756][T28698] lo speed is unknown, defaulting to 1000
[  467.014098][T28709] __nla_validate_parse: 26 callbacks suppressed
[  467.014113][T28709] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6351'.
[  467.737785][T28735] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6358'.
[  467.819630][T28741] lo speed is unknown, defaulting to 1000
[  468.577957][T28767] netlink: 'syz.1.6367': attribute type 1 has an invalid length.
[  468.698371][T28770] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  468.701960][T28770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6368'.
[  468.741135][T28774] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6369'.
[  468.745877][T28774] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6369'.
[  468.749153][T28774] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6369'.
[  468.753692][T28774] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6369'.
[  468.785574][T28783] lo speed is unknown, defaulting to 1000
[  468.925636][T28799] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6375'.
[  469.345165][T28807] netlink: 8080 bytes leftover after parsing attributes in process `syz.1.6377'.
[  469.395013][T28813] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6378'.
[  469.503915][T28824] netlink: 'syz.1.6381': attribute type 12 has an invalid length.
[  469.856663][T28839] IPVS: Error joining to the multicast group
[  469.860303][T28839] netlink: 'syz.0.6387': attribute type 15 has an invalid length.
[  469.954359][   T24] lo speed is unknown, defaulting to 1000
[  469.956723][   T24] syz0: Port: 1 Link DOWN
[  469.958370][   T24] lo speed is unknown, defaulting to 1000
[  470.777899][T28866] batadv_slave_1: left promiscuous mode
[  472.713753][T28919] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  472.895044][T28923] __nla_validate_parse: 8 callbacks suppressed
[  472.895062][T28923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6415'.
[  473.247168][T28946] netlink: 'syz.2.6421': attribute type 29 has an invalid length.
[  473.362025][T28951] batadv2: entered promiscuous mode
[  474.099048][T28958] IPVS: set_ctl: invalid protocol: 50 172.20.20.47:20002
[  474.103676][T28958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6425'.
[  474.987761][T28982] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  474.992260][T28982] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  474.995570][T28982] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  475.081737][T28988] lo speed is unknown, defaulting to 1000
[  475.090692][T28994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6435'.
[  475.095362][T28994] netlink: 'syz.0.6435': attribute type 1 has an invalid length.
[  475.104288][T28994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6435'.
[  475.174148][T28999] netlink: 'syz.2.6434': attribute type 32 has an invalid length.
[  475.178276][T28999] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6434'.
[  475.304846][T29021] openvswitch: netlink: Unknown key attributes 2
[  475.308897][T29020] openvswitch: netlink: Unknown key attributes 2
[  475.555073][T29031] lo speed is unknown, defaulting to 1000
[  476.345342][T29065] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6453'.
[  476.349057][T29065] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6453'.
[  476.354237][T29065] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6453'.
[  477.225883][T29098] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6462'.
[  477.561948][T29129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6472'.
[  477.600139][T29133] netlink: 'syz.1.6473': attribute type 10 has an invalid length.
[  478.187909][T29147] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6477'.
[  478.196373][T29147] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6477'.
[  478.257440][T29149] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6478'.
[  478.260558][T29149] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6478'.
[  478.264064][T29149] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6478'.
[  478.267133][T29149] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6478'.
[  478.315549][T29154] netlink: 'syz.0.6480': attribute type 1 has an invalid length.
[  478.738564][T29188] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6490'.
[  478.747721][T29185] netlink: 'syz.1.6489': attribute type 3 has an invalid length.
[  478.800786][T29195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6492'.
[  478.807538][T29195] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6492'.
[  478.811716][T29195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6492'.
[  479.187274][T29237] lo speed is unknown, defaulting to 1000
[  479.358519][T29255] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:0
[  479.750464][T29274] netlink: 'syz.0.6517': attribute type 1 has an invalid length.
[  479.878911][T29277] lo speed is unknown, defaulting to 1000
[  479.934339][T29284] siw: device registration error -23
[  480.216962][T29303] IPVS: Error connecting to the multicast addr
[  480.224833][T29304] IPVS: Error connecting to the multicast addr
[  480.251293][T29309] netlink: 'syz.0.6527': attribute type 13 has an invalid length.
[  480.311559][T29310] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_tx_wq": -EINTR
[  482.015159][T29420] netlink: 'syz.2.6558': attribute type 1 has an invalid length.
[  482.026809][T29422] netlink: 'syz.1.6559': attribute type 83 has an invalid length.
[  482.468325][T29467] lo: MTU too low for tipc bearer
[  482.470278][T29467] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  482.677592][T29501] vlan1: entered promiscuous mode
[  482.680390][T29501] macvtap0: entered promiscuous mode
Connection to localhost closed by remote host.
[  484.384668][   T12] tipc: Disabling bearer <eth:syzkaller0>
[  484.605546][   T12] bond8 (unregistering): (slave bridge21): Removing an active aggregator
[  484.609484][   T12] bond8 (unregistering): (slave bridge21): Releasing backup interface
[  484.815869][   T12] bond0 (unregistering): Released all slaves
[  484.822523][   T12] bond1 (unregistering): Released all slaves
[  484.827585][   T12] bond2 (unregistering): Released all slaves
[  484.831541][   T12] bond3 (unregistering): Released all slaves
[  484.836444][   T12] bond4 (unregistering): Released all slaves
[  484.841821][   T12] bond5 (unregistering): Released all slaves
[  484.849232][   T12] bond6 (unregistering): Released all slaves
[  484.855716][   T12] bond7 (unregistering): Released all slaves
[  484.860516][   T12] bond8 (unregistering): Released all slaves
[  484.936711][   T12] tipc: Left network mode
[  484.986207][   T12] IPVS: stopping backup sync thread 14226 ...
[  485.825429][   T12] pimreg (unregistering): left allmulticast mode
[  486.178178][   T12] ------------[ cut here ]------------
[  486.180627][   T12] WARNING: CPU: 0 PID: 12 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x7e/0x100
[  486.184929][   T12] Modules linked in:
[  486.186684][   T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  486.191428][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  486.195994][   T12] Workqueue: netns cleanup_net
[  486.198079][   T12] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  486.200512][   T12] Code: 78 1b df f7 4b 83 3c 2c 00 75 19 e8 1c b2 7b f7 49 81 fd f8 07 00 00 74 1d e8 0e b2 7b f7 49 83 c5 08 eb c9 e8 03 b2 7b f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  486.207702][   T12] RSP: 0018:ffffc900000f78b0 EFLAGS: 00010293
[  486.209790][   T12] RAX: ffffffff8a43f92d RBX: ffff888107444000 RCX: ffff88801c685640
[  486.212565][   T12] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: ffff8881074440b8
[  486.215790][   T12] RBP: ffffc900000f79b0 R08: ffffffff8fa38337 R09: 1ffffffff1f47066
[  486.218401][   T12] R10: dffffc0000000000 R11: fffffbfff1f47067 R12: ffff888107444000
[  486.221084][   T12] R13: 00000000000000b8 R14: ffff888111478000 R15: dffffc0000000000
[  486.224518][   T12] FS:  0000000000000000(0000) GS:ffff8880b861a000(0000) knlGS:0000000000000000
[  486.227566][   T12] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  486.230146][   T12] CR2: 00005582e33b5038 CR3: 000000000df36000 CR4: 00000000000006f0
[  486.233760][   T12] Call Trace:
[  486.235212][   T12]  <TASK>
[  486.236493][   T12]  ops_undo_list+0x49a/0x990
[  486.238479][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  486.240299][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[  486.242599][   T12]  cleanup_net+0x4c5/0x800
[  486.244650][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  486.246809][   T12]  ? rcu_is_watching+0x15/0xb0
[  486.248621][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  486.250694][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  486.253405][   T12]  process_scheduled_works+0xae1/0x17b0
[  486.255775][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  486.258340][   T12]  worker_thread+0x8a0/0xda0
[  486.260371][   T12]  kthread+0x711/0x8a0
[  486.262132][   T12]  ? __pfx_worker_thread+0x10/0x10
[  486.264470][   T12]  ? __pfx_kthread+0x10/0x10
[  486.265991][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  486.267675][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  486.269798][   T12]  ? __pfx_kthread+0x10/0x10
[  486.271849][   T12]  ret_from_fork+0x3fc/0x770
[  486.273992][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  486.276232][   T12]  ? __switch_to_asm+0x39/0x70
[  486.278362][   T12]  ? __switch_to_asm+0x33/0x70
[  486.280416][   T12]  ? __pfx_kthread+0x10/0x10
[  486.282421][   T12]  ret_from_fork_asm+0x1a/0x30
[  486.284733][   T12]  </TASK>
[  486.286070][   T12] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  486.289111][   T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  486.293079][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  486.297370][   T12] Workqueue: netns cleanup_net
[  486.299427][   T12] Call Trace:
[  486.300890][   T12]  <TASK>
[  486.302208][   T12]  dump_stack_lvl+0x99/0x250
[  486.304228][   T12]  ? __asan_memcpy+0x40/0x70
[  486.306217][   T12]  ? __pfx_dump_stack_lvl+0x10/0x10
[  486.308262][   T12]  ? __pfx__printk+0x10/0x10
[  486.309814][   T12]  vpanic+0x281/0x750
[  486.311158][   T12]  ? __pfx__printk+0x10/0x10
[  486.312705][   T12]  ? __pfx_vpanic+0x10/0x10
[  486.314233][   T12]  ? is_bpf_text_address+0x292/0x2b0
[  486.316012][   T12]  panic+0xb9/0xc0
[  486.317310][   T12]  ? __pfx_panic+0x10/0x10
[  486.318801][   T12]  __warn+0x31b/0x4b0
[  486.320150][   T12]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  486.321950][   T12]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  486.323739][   T12]  report_bug+0x2be/0x4f0
[  486.325187][   T12]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  486.326978][   T12]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  486.328798][   T12]  ? xfrm6_tunnel_net_exit+0x80/0x100
[  486.330565][   T12]  handle_bug+0x84/0x160
[  486.331984][   T12]  exc_invalid_op+0x1a/0x50
[  486.333507][   T12]  asm_exc_invalid_op+0x1a/0x20
[  486.335135][   T12] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  486.337146][   T12] Code: 78 1b df f7 4b 83 3c 2c 00 75 19 e8 1c b2 7b f7 49 81 fd f8 07 00 00 74 1d e8 0e b2 7b f7 49 83 c5 08 eb c9 e8 03 b2 7b f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  486.344172][   T12] RSP: 0018:ffffc900000f78b0 EFLAGS: 00010293
[  486.346533][   T12] RAX: ffffffff8a43f92d RBX: ffff888107444000 RCX: ffff88801c685640
[  486.349443][   T12] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: ffff8881074440b8
[  486.352555][   T12] RBP: ffffc900000f79b0 R08: ffffffff8fa38337 R09: 1ffffffff1f47066
[  486.355831][   T12] R10: dffffc0000000000 R11: fffffbfff1f47067 R12: ffff888107444000
[  486.358985][   T12] R13: 00000000000000b8 R14: ffff888111478000 R15: dffffc0000000000
[  486.362054][   T12]  ? xfrm6_tunnel_net_exit+0x7d/0x100
[  486.364333][   T12]  ops_undo_list+0x49a/0x990
[  486.366266][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  486.368385][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[  486.370518][   T12]  cleanup_net+0x4c5/0x800
[  486.372364][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  486.374230][   T12]  ? rcu_is_watching+0x15/0xb0
[  486.376039][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  486.378169][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  486.380419][   T12]  process_scheduled_works+0xae1/0x17b0
[  486.382274][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  486.384384][   T12]  worker_thread+0x8a0/0xda0
[  486.386047][   T12]  kthread+0x711/0x8a0
[  486.387733][   T12]  ? __pfx_worker_thread+0x10/0x10
[  486.389796][   T12]  ? __pfx_kthread+0x10/0x10
[  486.391423][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  486.393203][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  486.395350][   T12]  ? __pfx_kthread+0x10/0x10
[  486.397292][   T12]  ret_from_fork+0x3fc/0x770
[  486.398853][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  486.400614][   T12]  ? __switch_to_asm+0x39/0x70
[  486.402596][   T12]  ? __switch_to_asm+0x33/0x70
[  486.404595][   T12]  ? __pfx_kthread+0x10/0x10
[  486.406547][   T12]  ret_from_fork_asm+0x1a/0x30
[  486.408556][   T12]  </TASK>
[  486.410297][   T12] Kernel Offset: disabled
[  486.411757][   T12] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:37:34  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000055 RBX=0000000000000055 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000f7050
R8 =ffff888020608237 R9 =1ffff110040c1046 R10=dffffc0000000000 R11=ffffffff854f2040
R12=dffffc0000000000 R13=ffffffff99afb8da R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f20bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005582e33b5038 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=00323165692f3666 692f2e2f2f313230
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 00ff00ff00000000
XMM08=ff00000000000000 0000000000000000 XMM09=38656565692f366d 697377682f6d6973
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=84da921af2434700 RBX=ffffffff819683b8 RCX=84da921af2434700 RDX=0000000000000001
RSI=ffffffff8be33660 RDI=ffffffff819683b8 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa38330 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d5000
RIP=ffffffff8b79c3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffc66bc3000 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=00323165692f3666 692f2e2f2f313230
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 00ff00ff00000000
XMM08=ff00000000000000 0000000000000000 XMM09=38656565692f366d 697377682f6d6973
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
