last executing test programs:

5.809903286s ago: executing program 1 (id=1531):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xa0}}, 0x0)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$inet6_sctp(0xa, 0x801, 0x84)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@ipv6_delroute={0x24, 0x19, 0x1, 0x70bd25, 0x25dfcbfb, {0xa, 0x14, 0x20, 0x0, 0xff, 0x2, 0xfe, 0xbc42246ecb709f30, 0x8ba1941754a13caa}, [@RTA_PRIORITY={0x8, 0x1e, 0x40006}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x44)
sendmmsg$inet(r8, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='K', 0x1}], 0x1}}], 0x2, 0x4000)
shutdown(r8, 0x1)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f0000000380)={0x0, 0x3, 0x5, 0x8, 0x8001, 0x1}, &(0x7f00000003c0)=0x14)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r10, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)

4.938787185s ago: executing program 1 (id=1537):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x301, 0x0, 0x2000000, {0x0, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0xa4, 0x5, 0xa, 0x3, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x21}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}], {0x14}}, 0x168}}, 0x0)

4.893267484s ago: executing program 1 (id=1538):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="020400090b00000000000000000000000200131f200000006dbd70000035000002000120000000000000000000000000020017003100000b0a00"], 0x58}}, 0x4)
unshare(0x6a040000)
socket(0x8, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_emit_ethernet(0x70, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60e400ff003a3a00fe880000000000000000000000000001ff02000000000000000000000000000102009078000000006000000000001100fc02000000000000000000000000000000000000000000000010ffffac14140017c1ff182e8079f39240"], 0x0)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r6 = accept(r4, 0x0, 0x0)
write$bt_hci(0xffffffffffffffff, 0x0, 0x6)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)

4.038554987s ago: executing program 1 (id=1550):
r0 = socket(0x2c, 0x3, 0x0)
r1 = socket(0x2c, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r1}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000580), &(0x7f0000000080)=@udp6=r0, 0x1}, 0x20)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000c40), 0x12)
bind$inet(r3, 0x0, 0x0)

1.560169089s ago: executing program 0 (id=1559):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_int(r0, 0x1, 0x34, &(0x7f0000000040), 0x4) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106) (rerun: 64)
sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0xffffffea, 0x0}, 0x20040005) (async)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x0) (async)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x25dfdbfe, {{@in=@multicast1=0xe0000002, @in=@remote, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x40000}, 0x0, 0x6e6bb9}}, 0xb8}}, 0x0) (async, rerun: 32)
close(r3) (rerun: 32)

1.457217543s ago: executing program 0 (id=1560):
r0 = getpid()
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8)
close(r2)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, r2, 0x0, 0x0, 0x0}, 0x30)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0xa, @empty, 0x3}, @in6={0xa, 0x4e21, 0x1, @empty, 0x4}], 0x38)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002740)=""/4090, 0xffa}, {&(0x7f0000000300)=""/130, 0x82}], 0x2}, 0x5}], 0x4000000000000bd, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r6 = socket(0x2, 0x800, 0xfffffffc)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x9)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000400)={0x0, 0x38, "ec2ab3294c462a2b6389fba6926f0291739803b12a576b8938437e6218edc00c23ee285cfd0d59413e88105c0d72a707232c20538eaf313d"}, &(0x7f0000000000)=0x40)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000040)=0x27)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f00000024c0)=ANY=[@ANYRES32=r9], 0x9)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f0000000180)={r9, 0x54e5, 0xd0e6}, 0x8)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}}, 0x14}}, 0x20004000)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="180000001000000000000000e5f3000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014e6ff00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.000615692s ago: executing program 1 (id=1561):
r0 = socket$kcm(0xa, 0x1, 0x106) (async, rerun: 64)
r1 = socket$netlink(0x10, 0x3, 0x10) (rerun: 64)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) (async, rerun: 64)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) (async, rerun: 64)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) (async, rerun: 32)
r3 = socket$nl_audit(0x10, 0x3, 0x9) (rerun: 32)
sendmsg$AUDIT_ADD_RULE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x3f3, 0x0, 0x0, 0x0, {0x10, 0x3fb}}, 0x420}}, 0x0) (async)
listen(r0, 0x101)
close(r0)

599.907982ms ago: executing program 0 (id=1562):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f0000000380)=@ethernet={0x0, @local}, 0x80, 0x0}}], 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_opts(r2, 0x29, 0x3b, 0x0, &(0x7f0000000000)=0x5f)
r3 = socket(0x0, 0x80805, 0x80000000)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$bt_hci(r4, 0x11e, 0x1, 0x0, &(0x7f0000000300))
syz_emit_ethernet(0x32, &(0x7f0000000200)=ANY=[@ANYRES8=r1], 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xe}}, 0x3ff}]}, &(0x7f0000000180)=0x10)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400088008"], 0x48}}, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005200), 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000003000510828bd7000fbdbdf25100000005e1eacfbc73f2a2ca0c9c1429b85de7695bba9b221b2de5610100447d444080048fb0391e18962b4dc9920cdc85e8b3afe69a5f33dd60459cb974fdb8d9100b14da0617f1dee3469d5aa670c09b9d2073aa3821c1e017e9a36b7dfc0ce6e0af67c3250f072ba0fdc24a3837db7e03db67d2cc6f2cc71517656cbc9cbc5e2da19482740ab5b7c3ad87c49c8057611c4813b45a24b10bff7b497981715d08071a804431720180ed8b997b8fe2cde7cb5ca821adb45c083ca8a5918db52509a0b935f53f3abd2b133c61bcfe234d8aa1c0a350cd0a6484f0958c981dc6e0a674dac8d3b2e"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x804)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r6, 0x8010661b, &(0x7f00000000c0))
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4ea2, @rand_addr=0x64010100}, 0x10)
setsockopt$inet_int(r8, 0x0, 0x1, &(0x7f00000002c0)=0x6d, 0x4)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x73)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="7c0000000001010200000000000000000500000228001540000000002c001080080003fa3f264000000002080002400000000f08000240000000010800014000000000080003400000000608001a40000010002c00188008000140fffffffa08000240ffff65e0080001400000000808000140000000050800024000", @ANYRES64=r5], 0x7c}, 0x1, 0x0, 0x0, 0x24044080}, 0xac609dec082597ab)
r11 = accept4(r10, 0x0, 0x0, 0x80000)
write(r11, &(0x7f0000000040)="cb", 0xfffffdef)
setsockopt$sock_int(r11, 0x1, 0x3c, &(0x7f0000000100)=0xfefffffc, 0x4)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="ad43f8fffffffbdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x8886}, 0x20004880)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000040)=0x2972, 0x4)

460.07719ms ago: executing program 0 (id=1563):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x207ffffe, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
listen(r1, 0x400004)
r2 = socket(0xa, 0x3, 0x3a)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', 0x0})
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r4 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, @remote, @empty, 0x7800, 0x80, 0xfffffffc, 0xdc67}})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000002c0)={'syztnl1\x00', 0x0})
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="7307000000000000072000000002060f060008000000000000000f000000000000000500000000000000c204000000f1010700000000000000c20400018001c2040000000800000082"], 0x48)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x0, 0x1c, 0x0, 0xfffffb81}, {0xef, 0x0, 0x1}, 0x0, 0x1}}, @TCA_TBF_PTAB={0x404, 0x3, [0x1, 0x0, 0x167, 0x6, 0x9, 0x7ff, 0x7, 0x1, 0x6, 0x13f, 0x5, 0x8, 0x10000, 0x1ff, 0x1, 0x1ff, 0x9, 0x8, 0x5, 0xb, 0x8, 0xd, 0x6, 0x9, 0x8, 0x7, 0x16, 0x8, 0x80, 0x7fff, 0x8, 0x400, 0x7, 0x6, 0x3, 0x16, 0xfffffc00, 0xfffffffe, 0xfff, 0x10, 0x3ff, 0x80, 0x8001, 0xaf, 0x800, 0xd, 0x6, 0x3, 0x7f, 0x0, 0x40000000, 0x97, 0x2, 0x4, 0x9, 0x5, 0x4, 0x8001, 0x4, 0x6, 0x1, 0x7, 0x7, 0x40, 0x0, 0x1000, 0x5a, 0x4, 0x6, 0x2, 0x4, 0x2, 0x5, 0x3, 0xc, 0x80000001, 0x7fff, 0x0, 0x2, 0x2, 0x7, 0x3, 0x1000, 0x0, 0x4, 0x9, 0xe, 0x3ff, 0x8, 0xd61, 0x5, 0x9, 0x6, 0x0, 0x5, 0x5, 0x0, 0x2, 0x2, 0x5, 0x5, 0x5, 0x80000000, 0x9, 0xe, 0xe5ea, 0x7, 0x73, 0x10001, 0x7, 0x8f1b, 0x3, 0x80000000, 0x602, 0xfffffffd, 0x3, 0x7, 0x80000000, 0xfffffff7, 0xfff, 0x4, 0x3, 0x7d, 0x3ff, 0x2, 0xffffff01, 0x1, 0x1, 0x8, 0xffffffff, 0x7fff, 0xfffffff8, 0x7f, 0x80, 0x2, 0x6, 0xa6e, 0x5, 0x1, 0x9, 0x3, 0xb, 0x9, 0x3, 0x30, 0x3, 0x3, 0x3, 0x9, 0x1, 0x101, 0x80, 0xda, 0x10001, 0x8, 0x3, 0x3, 0x0, 0x200040, 0xfffffff7, 0xc, 0x3, 0x4cdd072, 0x1, 0x9, 0x0, 0xffff301e, 0x90000, 0x0, 0x2, 0x0, 0x606, 0x6, 0x4, 0x1, 0x80000001, 0xfffffffc, 0xd40e, 0xfffffff7, 0x1, 0xd3f, 0xe48e, 0x3, 0x8, 0x3, 0x8, 0x77, 0xf, 0xeca, 0x8d, 0xe051, 0x6, 0x4, 0xab5, 0x3, 0xffffffbc, 0x8, 0x7, 0x16e8, 0x5, 0x8, 0xc, 0xffff, 0x8, 0x8000, 0x328, 0x5, 0x3, 0x515240d2, 0x1, 0x2, 0xe4, 0x4, 0xc1f5, 0x3, 0x9, 0x8, 0x3ff, 0x0, 0x11f, 0x8, 0xe8dd, 0x1, 0x8, 0x2, 0x8c, 0xffffffff, 0x9, 0x4, 0x46e, 0x7f, 0x0, 0x5, 0x1, 0x0, 0x5cd, 0x9, 0x277b, 0x3, 0x3, 0x5, 0x80000000, 0x80000000, 0x4, 0x0, 0x8, 0x8000, 0x100, 0x8000, 0x3, 0x1ff, 0x3069, 0xc, 0x400, 0x9, 0x400]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4815}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f0000000300)=ANY=[@ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {0x0, 0xea3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={0x0})
sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="008000000000ffff0c002b80080001d11485b55155c792f8bc092121adacd6b3c135a13fdbb80072f3d10609c255f72f07736cbc59f407ac6c68f7a0799682066038d600e9d97451211ef546000029deb00851b3da05c48a6c649d37b8af43c5ba8b0f4b67a2bf000100000000000000000000df913dd8ce667a43b5ab484af8836d3f3f97a8363cd1762249465e81fd38706ed14c85b6d27657e95e0318ca49fbdd6d75a67d42acea43c7d305f553557443174304119af90262894400cef1bf60", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)

356.331231ms ago: executing program 0 (id=1564):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f0000000380)=@ethernet={0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x80, 0x0}}], 0x1, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 32)
getsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, &(0x7f0000000000))
r3 = socket(0x5, 0x4, 0x7) (async)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$bt_hci(r4, 0x11e, 0x1, 0x0, &(0x7f0000000300))
syz_emit_ethernet(0x32, &(0x7f0000000200)=ANY=[@ANYRES8=r1], 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000640)=[@in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000240)=0x10) (async)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400088008"], 0x48}, 0x1, 0x0, 0x0, 0x44000004}, 0x0) (async)
sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000003000510828bd7000fbdbdf25100000005e1eacfbc73f2a2ca0c9c1429b85de7695bba9b221b2de5610100447d444080048fb0391e18962b4dc9920cdc85e8b3afe69a5f33dd60459cb974fdb8d9100b14da0617f1dee3469d5aa670c09b9d2073aa3821c1e017e9a36b7dfc0ce6e0af67c3250f072ba0fdc24a3837db7e03db67d2cc6f2cc71517656cbc9cbc5e2da19482740ab5b7c3ad87c49c8057611c4813b45a24b10bff7b497981715d08071a804431720180ed8b997b8fe2cde7cb5ca821adb45c083ca8a5918db52509a0b935f53f3abd2b133c61bcfe234d8aa1c0a350cd0a6484f0958c981dc6e0a674dac8d3b2e"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x804) (async)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r6, 0x8010661b, &(0x7f00000000c0))
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 32)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
setsockopt$inet_int(r8, 0x0, 0x1, &(0x7f00000002c0)=0x6d, 0x4) (async)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) (async)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x73) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="7c0000000001010200000000000000000500000228001540000000002c001080080003fa3f264000000002080002400000000f08000240000000010800014000000000080003400000000608001a40000010002c00188008000140fffffffa08000240ffff65e0080001400000000808000140000000050800024000"], 0x7c}, 0x1, 0x0, 0x0, 0x20000080}, 0xac609dec082597ef) (async, rerun: 64)
r11 = accept4(r10, 0x0, 0x0, 0x80000) (rerun: 64)
write(r11, &(0x7f0000000040)="cb", 0xfffffdef) (async)
setsockopt$sock_int(r11, 0x1, 0x3c, &(0x7f0000000100)=0xfefffffc, 0x4)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="ad43f8fffffffbdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x8886}, 0x20004880) (async, rerun: 64)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000040)=0x2972, 0x4) (rerun: 64)

297.385548ms ago: executing program 0 (id=1565):
r0 = socket$kcm(0xa, 0x1, 0x106)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r2=>0x0})
r3 = socket(0x10, 0x803, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r5, &(0x7f0000000940), 0x10)
listen(r5, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r6, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNSETLINK(r6, 0x400454cd, 0x325)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)
bind$vsock_stream(r7, &(0x7f0000000380)={0x28, 0x0, 0x2710, @my=0x1}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r8 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, 0x0, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000340)=0x1, 0x4)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @empty}, 0x80, 0x0}, 0x20000001)

295.270697ms ago: executing program 2 (id=1566):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "81628924896b6468", "c5fd9f0ab68befa29c28d683974dfcb4", "6eaceb57", "5baae9bd507b2cb5"}, 0x28)
shutdown(0xffffffffffffffff, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, 0x0, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket(0x1, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030c0000000000000000020000000900010073797a310000000030000000030a01020000000000000000020000400900030073797a32000000000400b6560900010073797a31000000000002000000000500000a"], 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x90)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYRES16=r5, @ANYRESHEX=r4, @ANYRESHEX, @ANYRESOCT=r1, @ANYRESHEX=r0, @ANYRESDEC=r6, @ANYRESOCT=r1], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x20004004)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r8)
sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="8b00de84", @ANYRES16=r9, @ANYBLOB="010028bd70000000000030000000400008803c00008024007800d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e227f007b0a32f50000000000001400020077673200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r10 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETMIFCNT_IN6(r10, 0x89e0, &(0x7f0000000140))
socket$nl_generic(0x10, 0x3, 0x10)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x6}, 0x1c)
listen(r0, 0x0)

240.470695ms ago: executing program 2 (id=1567):
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="89a000fe00000000691088000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r0 = socket$kcm(0xa, 0x1, 0x106)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000008c0)={0x24, r2, 0x78967656d0a78869, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x24}}, 0x4004000)
r3 = socket$netlink(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r3)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059)
close(r0)
sendfile(r0, r3, 0x0, 0xe78)

238.934673ms ago: executing program 2 (id=1568):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYBLOB="000000000000000000000000005033789fd291da", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/14], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="180000ea000000000000000000000000000000009121708e7438e07586ce668461937cb4635e9ded505e39544a9e9e1ba3d09572e1f5bc6736b4271fdaf4d4a1d06e0c10f61eaef387bb3d", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$AUDIT_GET(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000c40)={0x10, 0x3e8, 0x200, 0x70bd28, 0x25dfdc01}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={<r5=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r5, 0xfffffff9}, 0x8)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000140)=0x16, 0x4)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x5, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x12, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x24001844}, 0x0)
syz_genetlink_get_family_id$ieee802154(0x0, r7)
sendmsg$IEEE802154_START_REQ(r7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x18000}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0})

169.834357ms ago: executing program 2 (id=1569):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x2, 0x0, 0x2, 0xc, 0x0, 0x1, 0x25dfdbff, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @local}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}]}, 0x60}, 0x1, 0x7}, 0x0)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$kcm(0xa, 0x1, 0x106)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
recvfrom$rose(r3, &(0x7f0000000200)=""/199, 0xc7, 0x2102, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @bcast}, 0x1c)
sendmsg$kcm(r1, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059)
close(r1)

133.158655ms ago: executing program 1 (id=1570):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x7, {{0xa, 0x4e20, 0xe0, @mcast2, 0x138e}}, {{0xa, 0x4e21, 0x9, @private2, 0x4}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000002d00)={0x9, {{0xa, 0x4e23, 0x1000, @mcast2, 0x3}}, {{0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb0}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x8, {{0xa, 0x4e24, 0x5, @mcast2, 0x6d00}}, {{0xa, 0x4620, 0xfffffff8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}}, 0x108)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r4, 0x2)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$sock_buf(r6, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100))
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000007c0)=@framed={{}, [@map_val={0x18, 0x7, 0x2, 0x0, r5}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x5, 0x1, 0x0, r3}, @map_val={0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xd}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff)
getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000400)={<r10=>0x0, @local, @multicast2}, &(0x7f0000000440)=0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000480)={'batadv0\x00', <r11=>0x0})
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xd871021}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r9, @ANYBLOB="040027bd7000fddbdf2502000000280001805000068014000400fc02000000000000000000000000000114000400fe5e00000008000000000000000000aa050002000100000014000400fc02000000000000000000000000000108000700", @ANYRES32=r10, @ANYBLOB="280006800c00068008000700", @ANYRES32=r11, @ANYBLOB="080003000200000008000400ff000000"], 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000})
write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6)
clock_gettime(0x0, &(0x7f0000000200))
socket$inet_sctp(0x2, 0x1, 0x84)
ppoll(&(0x7f00000001c0)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)

132.534066ms ago: executing program 2 (id=1571):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x7e)
listen(r0, 0xfffffffc)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000300)={0x0, 0x3, 0x9, 0x405, 0x92a0, 0x2, 0x8, 0xe9, {<r1=>0x0, @in6={{0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x12}, 0x80000001}}, 0x4, 0x10, 0x8, 0xffffffff, 0x8001}}, &(0x7f0000000280)=0xb0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000480)={r1, @in={{0x2, 0x4e21, @empty}}, 0x4a1bed2a, 0xc, 0x0, 0x802, 0x2e, 0x0, 0x1}, &(0x7f00000003c0)=0x9c) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00d40e0d8800000000002000", @ANYRES32=0x0, @ANYBLOB="00010000e180000008001b000000"], 0x28}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0)
sendto$inet(r2, &(0x7f0000000400)="f981a68255f633fb2b5885ff00000000000000e32a3bdb70c539bff99e23a151bcc7c793cf0460098d265e3b65e9656529696e3b698974103ec758ba0803d713676a07631369ee097c948e1dc355ce", 0x4f, 0xc044, &(0x7f0000000180)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004040}, 0x44040) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80) (async)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x400100, 0x0)
close(r6) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r9) (async)
socket$unix(0x1, 0x1, 0x0)

0s ago: executing program 2 (id=1572):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="020400090b00000000000000000000000200131f200000006dbd70000035000002000120000000000000000000000000020017003100000b0a00"], 0x58}}, 0x4)
unshare(0x6a040000)
socket(0x8, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
socket$key(0xf, 0x3, 0x2)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
close(r3)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r6, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_emit_ethernet(0x70, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaa00aabbbbbbbbbbbb86dd60e400ff003a3a00fe880000000000000000000000000001ff02000000000000000000000000000102009078000000006000000000001100fc02000000000000000000000000000000000000000000000000ffffac14140017c1ff182e8079f39240"], 0x0)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r8 = accept(r6, 0x0, 0x0)
write$bt_hci(0xffffffffffffffff, 0x0, 0x6)
sendmsg$TEAM_CMD_OPTIONS_SET(r8, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:31424' (ED25519) to the list of known hosts.
syzkaller login: [   49.969010][ T5787] cgroup: Unknown subsys name 'net'
[   50.112459][ T5787] cgroup: Unknown subsys name 'cpuset'
[   50.116927][ T5787] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.967333][ T5787] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.373695][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.378878][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.381263][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.384071][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.386868][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.390140][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.393215][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.418113][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.421634][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.425154][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.426111][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.427410][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.433876][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.437003][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.440877][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.741686][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   56.778607][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   56.811014][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   56.935264][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.938530][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.941082][ T5849] bridge_slave_0: entered allmulticast mode
[   56.944307][ T5849] bridge_slave_0: entered promiscuous mode
[   56.968216][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.971189][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.973944][ T5843] bridge_slave_0: entered allmulticast mode
[   56.977314][ T5843] bridge_slave_0: entered promiscuous mode
[   56.981072][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.983652][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.986117][ T5843] bridge_slave_1: entered allmulticast mode
[   56.989605][ T5843] bridge_slave_1: entered promiscuous mode
[   56.993109][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.995614][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.999804][ T5849] bridge_slave_1: entered allmulticast mode
[   57.003034][ T5849] bridge_slave_1: entered promiscuous mode
[   57.014417][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.017103][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.020248][ T5847] bridge_slave_0: entered allmulticast mode
[   57.023284][ T5847] bridge_slave_0: entered promiscuous mode
[   57.027523][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.030552][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.033617][ T5847] bridge_slave_1: entered allmulticast mode
[   57.037330][ T5847] bridge_slave_1: entered promiscuous mode
[   57.064948][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.106583][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.112852][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.119605][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.125240][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.157086][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.205567][ T5843] team0: Port device team_slave_0 added
[   57.208758][ T5849] team0: Port device team_slave_0 added
[   57.213213][ T5847] team0: Port device team_slave_0 added
[   57.216832][ T5849] team0: Port device team_slave_1 added
[   57.221051][ T5843] team0: Port device team_slave_1 added
[   57.224180][ T5847] team0: Port device team_slave_1 added
[   57.275051][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.277219][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.287026][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.301762][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.303843][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.311737][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.315436][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.317653][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.326846][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.332140][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.334663][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.344552][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.348504][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.350943][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.360018][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.364760][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.367187][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.377342][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.445583][ T5843] hsr_slave_0: entered promiscuous mode
[   57.447934][ T5843] hsr_slave_1: entered promiscuous mode
[   57.455169][ T5847] hsr_slave_0: entered promiscuous mode
[   57.457535][ T5847] hsr_slave_1: entered promiscuous mode
[   57.460101][ T5847] debugfs: 'hsr0' already exists in 'hsr'
[   57.462534][ T5847] Cannot create hsr debugfs directory
[   57.487309][ T5849] hsr_slave_0: entered promiscuous mode
[   57.489691][ T5849] hsr_slave_1: entered promiscuous mode
[   57.491769][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   57.493485][ T5849] Cannot create hsr debugfs directory
[   57.771213][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.780533][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.786295][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.801425][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.845923][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.867128][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.876222][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.888239][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.952947][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.958202][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.970601][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.981473][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   58.043921][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.080917][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   58.095738][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.098104][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.105587][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.114281][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.116810][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.140666][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   58.168917][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.171196][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.183755][  T229] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.186474][  T229] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.202193][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.222505][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   58.238946][  T229] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.241232][  T229] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.245017][  T229] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.247730][  T229] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.343644][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.444587][ T5843] veth0_vlan: entered promiscuous mode
[   58.457938][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.464374][ T5843] veth1_vlan: entered promiscuous mode
[   58.470525][ T5845] Bluetooth: hci1: command tx timeout
[   58.470534][   T54] Bluetooth: hci0: command tx timeout
[   58.470821][   T54] Bluetooth: hci2: command tx timeout
[   58.494073][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.516639][ T5843] veth0_macvtap: entered promiscuous mode
[   58.525695][ T5843] veth1_macvtap: entered promiscuous mode
[   58.559692][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.581118][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.591516][ T5849] veth0_vlan: entered promiscuous mode
[   58.593910][ T5847] veth0_vlan: entered promiscuous mode
[   58.607114][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.612123][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.615736][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.627303][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.634446][ T5849] veth1_vlan: entered promiscuous mode
[   58.637656][ T5847] veth1_vlan: entered promiscuous mode
[   58.721093][ T5847] veth0_macvtap: entered promiscuous mode
[   58.736127][ T5847] veth1_macvtap: entered promiscuous mode
[   58.736422][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.742160][ T5849] veth0_macvtap: entered promiscuous mode
[   58.746604][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.751138][ T5849] veth1_macvtap: entered promiscuous mode
[   58.783662][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.784501][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.792846][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.797477][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.800468][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.807652][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.817209][ T5876] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.822132][ T5876] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.825622][ T5876] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.845744][ T5876] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.851095][ T5876] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.854684][ T5876] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.858179][ T5876] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.879574][ T5876] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.901064][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.990007][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.993139][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.033323][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.035796][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.063877][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.066388][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.090415][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.093997][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.188665][ T5919] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET)
[   59.451490][ T5944] netlink: 1 bytes leftover after parsing attributes in process `syz.2.11'.
[   59.661312][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13'.
[   59.670792][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13'.
[   59.678661][ T5956] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.548747][ T5851] Bluetooth: hci1: command tx timeout
[   60.550899][ T5851] Bluetooth: hci0: command tx timeout
[   60.553642][   T54] Bluetooth: hci2: command tx timeout
[   62.638320][   T54] Bluetooth: hci2: command tx timeout
[   62.640095][   T54] Bluetooth: hci0: command tx timeout
[   62.641794][   T54] Bluetooth: hci1: command tx timeout
[   62.855750][ T6007] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.895070][ T6007] netlink: 36 bytes leftover after parsing attributes in process `syz.2.18'.
[   62.897926][ T6007] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18'.
[   62.914064][ T6007] netlink: 36 bytes leftover after parsing attributes in process `syz.2.18'.
[   62.916954][ T6007] netlink: 36 bytes leftover after parsing attributes in process `syz.2.18'.
[   63.047945][ T6016] netlink: 20 bytes leftover after parsing attributes in process `syz.0.21'.
[   63.286627][ T6037] netlink: 224 bytes leftover after parsing attributes in process `syz.0.28'.
[   63.353787][ T6037] netlink: 'syz.0.28': attribute type 12 has an invalid length.
[   63.386299][ T6038] netlink: 'syz.0.28': attribute type 12 has an invalid length.
[   63.681413][ T6053] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.684580][ T6053] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.782942][ T6053] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.791011][ T6053] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.891906][ T5897] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.894993][ T5897] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.897797][ T5897] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.903358][ T5897] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   63.934683][ T6057] sctp: [Deprecated]: syz.2.32 (pid 6057) Use of int in max_burst socket option.
[   63.934683][ T6057] Use struct sctp_assoc_value instead
[   64.135886][ T6069] veth0_to_bond: mtu less than device minimum
[   64.303768][ T6078] netlink: 104 bytes leftover after parsing attributes in process `syz.2.35'.
[   64.459085][ T6053] syz.0.31 (6053) used greatest stack depth: 19864 bytes left
[   64.568145][ T6082] sctp: [Deprecated]: syz.0.36 (pid 6082) Use of struct sctp_assoc_value in delayed_ack socket option.
[   64.568145][ T6082] Use struct sctp_sack_info instead
[   64.718988][ T5851] Bluetooth: hci1: command tx timeout
[   64.721928][   T54] Bluetooth: hci0: command tx timeout
[   64.721955][ T5845] Bluetooth: hci2: command tx timeout
[   65.480349][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.41'.
[   65.484095][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.41'.
[   65.865848][ T6121] netlink: 36 bytes leftover after parsing attributes in process `syz.0.44'.
[   65.868754][ T6121] netlink: 16 bytes leftover after parsing attributes in process `syz.0.44'.
[   65.871531][ T6121] netlink: 36 bytes leftover after parsing attributes in process `syz.0.44'.
[   65.874791][ T6121] netlink: 36 bytes leftover after parsing attributes in process `syz.0.44'.
[   65.971250][ T5898] IPVS: starting estimator thread 0...
[   66.058497][ T6126] IPVS: using max 64 ests per chain, 153600 per kthread
[   66.069654][ T6129] netlink: 32 bytes leftover after parsing attributes in process `syz.1.48'.
[   66.154840][ T6130] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.157420][ T6130] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.181519][ T6131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.48'.
[   66.233364][ T6130] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[   66.241945][ T6130] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[   66.248065][ T6130] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.252279][ T6133] Zero length message leads to an empty skb
[   66.256483][ T6130] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.332494][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.337329][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.343452][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.346726][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.562882][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.565774][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.624420][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.632192][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.763368][ T5897] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.766861][ T5897] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.776033][ T5897] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.781152][ T5897] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.813221][ T6177] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.454937][ T6192] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.66'.
[   68.553345][ T6196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'.
[   69.003103][ T6219] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[   69.012276][ T6219] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[   70.283704][ T5898] IPVS: starting estimator thread 0...
[   70.378412][ T6261] IPVS: using max 64 ests per chain, 153600 per kthread
[   70.767704][ T6266] openvswitch: netlink: Flow key attr not present in new flow.
[   70.873319][ T6267] __nla_validate_parse: 9 callbacks suppressed
[   70.873332][ T6267] netlink: 20 bytes leftover after parsing attributes in process `syz.0.90'.
[   70.879748][ T6267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.90'.
[   70.897693][ T6267] bond1: entered promiscuous mode
[   70.901251][ T6267] bond1: entered allmulticast mode
[   70.904253][ T6267] 8021q: adding VLAN 0 to HW filter on device bond1
[   70.963240][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   70.966772][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.036782][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.93'.
[   71.041288][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.93'.
[   71.126162][ T6282] syzkaller1: entered promiscuous mode
[   71.128013][ T6282] syzkaller1: entered allmulticast mode
[   72.025435][ T6298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.100'.
[   72.030713][ T6298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.100'.
[   72.087577][ T6303] netlink: 'syz.1.101': attribute type 21 has an invalid length.
[   72.091656][ T6303] netlink: 'syz.1.101': attribute type 22 has an invalid length.
[   72.094256][ T6303] netlink: 'syz.1.101': attribute type 23 has an invalid length.
[   72.096702][ T6303] netlink: 'syz.1.101': attribute type 25 has an invalid length.
[   72.100217][ T6303] netlink: 'syz.1.101': attribute type 26 has an invalid length.
[   72.104315][ T6303] netlink: 16 bytes leftover after parsing attributes in process `syz.1.101'.
[   72.189331][ T5860] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   72.552992][ T6326] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[   72.556261][ T6326] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[   72.561178][ T6325] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[   72.564598][ T6325] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[   72.976844][ T6339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.108'.
[   72.979880][ T6339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.108'.
[   72.982685][ T6339] netlink: 'syz.1.108': attribute type 6 has an invalid length.
[   73.001166][ T6339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.108'.
[   73.462246][ T6362] Driver unsupported XDP return value 0 on prog  (id 33) dev N/A, expect packet loss!
[   73.620049][ T6368] unknown channel width for channel at 909000KHz?
[   73.622655][ T6368] unknown channel width for channel at 909000KHz?
[   74.526422][ T6386] syzkaller0: entered promiscuous mode
[   74.531119][ T6386] syzkaller0: entered allmulticast mode
[   74.893113][ T6414] bridge_slave_0: left allmulticast mode
[   74.895626][ T6414] bridge_slave_0: left promiscuous mode
[   74.900475][ T6414] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.906847][ T6414] bridge_slave_1: left allmulticast mode
[   74.909355][ T6414] bridge_slave_1: left promiscuous mode
[   74.911906][ T6414] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.918738][ T6414] bond0: (slave bond_slave_0): Releasing backup interface
[   74.924098][ T6414] bond0: (slave bond_slave_1): Releasing backup interface
[   74.928026][ T6414] team0: Port device team_slave_0 removed
[   74.931059][ T6414] team0: Port device team_slave_1 removed
[   74.933329][ T6414] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.936321][ T6414] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.897480][ T6440] netlink: 'syz.0.136': attribute type 1 has an invalid length.
[   75.909259][ T6440] __nla_validate_parse: 17 callbacks suppressed
[   75.909275][ T6440] netlink: 224 bytes leftover after parsing attributes in process `syz.0.136'.
[   76.627277][ T6471] netlink: 24 bytes leftover after parsing attributes in process `syz.0.145'.
[   77.129502][ T6501] Bluetooth: MGMT ver 1.23
[   77.256886][ T6512] netlink: 36 bytes leftover after parsing attributes in process `syz.0.154'.
[   77.261941][ T6512] netlink: 16 bytes leftover after parsing attributes in process `syz.0.154'.
[   77.264645][ T6512] netlink: 36 bytes leftover after parsing attributes in process `syz.0.154'.
[   77.267416][ T6512] netlink: 36 bytes leftover after parsing attributes in process `syz.0.154'.
[   78.141828][ T6561] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.261440][ T6568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.162'.
[   78.767541][ T6571] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[   79.379987][ T6586] netlink: 16 bytes leftover after parsing attributes in process `syz.2.168'.
[   79.625177][ T6590] netlink: 32 bytes leftover after parsing attributes in process `syz.1.169'.
[   80.048083][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.174'.
[   80.199757][ T6615] bond1: left promiscuous mode
[   80.201334][ T6615] bond1: left allmulticast mode
[   80.987459][ T6638] __nla_validate_parse: 4 callbacks suppressed
[   80.987471][ T6638] netlink: 104 bytes leftover after parsing attributes in process `syz.1.181'.
[   81.021780][ T6640] netlink: 60 bytes leftover after parsing attributes in process `syz.1.182'.
[   81.024899][ T6640] netlink: 60 bytes leftover after parsing attributes in process `syz.1.182'.
[   81.027994][ T6640] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.189780][   T24] cfg80211: failed to load regulatory.db
[   81.335662][ T6656] netlink: 104 bytes leftover after parsing attributes in process `syz.1.188'.
[   81.831376][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.197'.
[   81.835870][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.197'.
[   82.067678][ T6706] netlink: 52 bytes leftover after parsing attributes in process `syz.2.201'.
[   82.088481][ T6706] netlink: 'syz.2.201': attribute type 1 has an invalid length.
[   82.091523][ T6705] netlink: 52 bytes leftover after parsing attributes in process `syz.2.201'.
[   82.097935][ T6705] netlink: 'syz.2.201': attribute type 1 has an invalid length.
[   82.111372][ T6707] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.115853][ T6706] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.171401][ T6711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.203'.
[   82.246463][ T6717] vxcan1: entered allmulticast mode
[   82.253601][ T6717] vxcan1: left allmulticast mode
[   82.259593][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.207'.
[   82.325785][ T6717] raw_sendmsg: syz.2.206 forgot to set AF_INET. Fix it!
[   82.396027][ T6730] ieee802154 phy0 wpan0: encryption failed: -22
[   83.242430][ T6744] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   83.439031][ T6762] openvswitch: netlink: Key type 4112 is out of range max 32
[   85.566508][ T6836] netlink: 'syz.0.239': attribute type 9 has an invalid length.
[   85.577836][ T6836] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[   85.581969][ T6836] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   85.932529][ T6864] netlink: 'syz.2.248': attribute type 7 has an invalid length.
[   85.935864][ T6864] netlink: 'syz.2.248': attribute type 8 has an invalid length.
[   86.066739][ T6874] netlink: 'syz.2.252': attribute type 2 has an invalid length.
[   86.069622][ T6874] netlink: 'syz.2.252': attribute type 1 has an invalid length.
[   86.738192][ T6916] IPVS: set_ctl: invalid protocol: 175 172.20.20.170:20003
[   86.924996][ T6924] __nla_validate_parse: 23 callbacks suppressed
[   86.925009][ T6924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.268'.
[   86.930637][ T6924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.268'.
[   87.331332][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.273'.
[   87.340464][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.273'.
[   87.520793][ T6947] netlink: 36 bytes leftover after parsing attributes in process `syz.1.275'.
[   87.523542][ T6947] netlink: 16 bytes leftover after parsing attributes in process `syz.1.275'.
[   87.526374][ T6947] netlink: 36 bytes leftover after parsing attributes in process `syz.1.275'.
[   87.529407][ T6947] netlink: 36 bytes leftover after parsing attributes in process `syz.1.275'.
[   87.837359][ T6965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.280'.
[   87.953748][ T6965] netlink: 'syz.2.280': attribute type 10 has an invalid length.
[   87.959539][ T6965] team0: Device ipvlan1 failed to register rx_handler
[   89.781192][ T7005] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[   90.172265][ T7028] netlink: 36 bytes leftover after parsing attributes in process `syz.0.292'.
[   90.302338][ T7041] syzkaller1: entered promiscuous mode
[   90.304278][ T7041] syzkaller1: entered allmulticast mode
[   91.116473][ T7065] bond0: option fail_over_mac: unable to set because the bond device has slaves
[   91.202543][ T7070] vlan2: entered allmulticast mode
[   91.204792][ T7070] erspan0: entered allmulticast mode
[   92.235713][ T7098] __nla_validate_parse: 3 callbacks suppressed
[   92.235732][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.312'.
[   92.386191][ T7111] netlink: 9 bytes leftover after parsing attributes in process `syz.1.318'.
[   92.392301][ T7111] gretap0: entered promiscuous mode
[   92.455219][ T7113] netlink: 40 bytes leftover after parsing attributes in process `syz.2.317'.
[   92.669498][ T7129] netlink: 36 bytes leftover after parsing attributes in process `syz.0.323'.
[   92.673209][ T7129] netlink: 16 bytes leftover after parsing attributes in process `syz.0.323'.
[   92.676551][ T7129] netlink: 36 bytes leftover after parsing attributes in process `syz.0.323'.
[   92.682448][ T7129] netlink: 36 bytes leftover after parsing attributes in process `syz.0.323'.
[   93.551136][ T7142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.328'.
[   93.555152][ T7142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.328'.
[   93.558485][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.328'.
[   93.918899][ T7160] batman_adv: batadv0: Adding interface: dummy0
[   93.921193][ T7160] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   93.931000][ T7160] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[   94.624175][ T7182] bond0: default FDB implementation only supports local addresses
[   94.734952][ T7187] netlink: 'syz.2.343': attribute type 20 has an invalid length.
[   94.745802][ T7189] netlink: 'syz.2.343': attribute type 20 has an invalid length.
[   96.405291][ T7235] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[   96.517233][ T7244] netlink: 'syz.0.358': attribute type 28 has an invalid length.
[   96.668081][ T7250] netlink: 'syz.0.361': attribute type 15 has an invalid length.
[   96.785957][ T7260] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[   96.789577][ T7260] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[   97.542272][ T7291] __nla_validate_parse: 11 callbacks suppressed
[   97.542290][ T7291] netlink: 44 bytes leftover after parsing attributes in process `syz.0.372'.
[   97.587869][ T7293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.373'.
[   97.594251][ T7293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.373'.
[   97.651920][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.375'.
[   97.654651][ T7297] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1550) !
[   97.846131][ T7309] netlink: 'syz.1.376': attribute type 30 has an invalid length.
[   98.033482][ T7329] veth0_to_batadv: mtu less than device minimum
[   98.036341][ T7330] veth0_to_batadv: mtu less than device minimum
[   98.736977][ T7386] netlink: 256 bytes leftover after parsing attributes in process `syz.0.381'.
[   99.672910][ T7407] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[   99.678382][ T7407] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[   99.760017][ T7409] gretap0: left promiscuous mode
[   99.851181][ T7429] tipc: Started in network mode
[   99.853340][ T7429] tipc: Node identity d642546f3f73, cluster identity 4711
[   99.856572][ T7429] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.860175][ T7429] syzkaller0: entered promiscuous mode
[   99.862500][ T7429] syzkaller0: entered allmulticast mode
[   99.890625][ T7429] tipc: Resetting bearer <eth:syzkaller0>
[   99.896667][ T7428] tipc: Resetting bearer <eth:syzkaller0>
[   99.907024][ T7428] tipc: Disabling bearer <eth:syzkaller0>
[  100.074644][ T7444] batman_adv: batadv0: Adding interface: dummy0
[  100.076768][ T7444] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.085835][ T7444] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  100.200474][ T7449] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  100.204164][ T7449] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  100.314144][ T7459] syzkaller0: entered promiscuous mode
[  100.316076][ T7459] syzkaller0: entered allmulticast mode
[  100.611851][ T7473] netlink: 24 bytes leftover after parsing attributes in process `syz.0.400'.
[  100.622781][ T7473] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.651816][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.402'.
[  100.668947][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.401'.
[  100.674870][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.401'.
[  100.681018][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.401'.
[  100.684746][ T7475] netlink: 'syz.0.402': attribute type 12 has an invalid length.
[  101.548936][ T7517] tc_dump_action: action bad kind
[  101.623438][ T7521] netlink: 'syz.1.415': attribute type 10 has an invalid length.
[  101.626721][ T7521] bridge0: port 1(team0) entered blocking state
[  101.632153][ T7521] bridge0: port 1(team0) entered disabled state
[  101.635144][ T7521] team0: entered allmulticast mode
[  101.639698][ T7521] team0: entered promiscuous mode
[  101.986263][ T7557] netlink: 'syz.1.422': attribute type 2 has an invalid length.
[  102.002319][ T7557] ave_0: entered promiscuous mode
[  102.482296][ T7604] block nbd0: server does not support multiple connections per device.
[  102.490579][ T7604] block nbd0: shutting down sockets
[  102.557101][ T7610] netlink: 'syz.2.432': attribute type 1 has an invalid length.
[  102.685563][ T7630] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.690082][ T7629] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.693396][ T7629] __nla_validate_parse: 14 callbacks suppressed
[  102.693404][ T7629] netlink: 28 bytes leftover after parsing attributes in process `syz.1.436'.
[  102.847290][ T7639] netlink: 60 bytes leftover after parsing attributes in process `syz.0.438'.
[  102.850800][ T7637] netlink: 60 bytes leftover after parsing attributes in process `syz.0.438'.
[  103.548811][ T7656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.443'.
[  103.552339][ T7656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.443'.
[  103.726306][ T7674] netlink: 'syz.2.448': attribute type 1 has an invalid length.
[  103.789952][ T7677] netlink: 'syz.0.447': attribute type 2 has an invalid length.
[  103.803164][ T7679] netlink: 96 bytes leftover after parsing attributes in process `syz.2.449'.
[  103.920726][ T7698] netlink: 104 bytes leftover after parsing attributes in process `syz.1.453'.
[  103.924740][ T7697] netlink: 104 bytes leftover after parsing attributes in process `syz.1.453'.
[  103.943976][ T7695] : renamed from veth0_to_bond
[  104.150376][ T7715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'.
[  104.416104][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'.
[  105.542701][ T7750] netlink: 'syz.2.467': attribute type 1 has an invalid length.
[  106.279745][ T7773] netlink: 'syz.0.474': attribute type 1 has an invalid length.
[  107.609162][ T7818] netlink: 'syz.0.484': attribute type 13 has an invalid length.
[  107.611606][ T7818] netlink: 'syz.0.484': attribute type 11 has an invalid length.
[  107.826764][ T7836] __nla_validate_parse: 14 callbacks suppressed
[  107.826776][ T7836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.488'.
[  107.951478][ T7843] vxcan1: entered allmulticast mode
[  108.029414][ T7843] vxcan1: left allmulticast mode
[  108.228024][ T7865] netlink: 28 bytes leftover after parsing attributes in process `syz.2.499'.
[  108.231838][ T7865] netem: change failed
[  108.263310][ T7868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.500'.
[  108.267551][ T7868] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  108.271466][ T7868] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.274748][ T7868] netlink: 112 bytes leftover after parsing attributes in process `syz.2.500'.
[  108.557434][ T7884] netlink: 20 bytes leftover after parsing attributes in process `syz.2.505'.
[  108.785892][ T7900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.510'.
[  108.790983][ T7900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.510'.
[  108.897265][ T7909] IPVS: length: 133 != 8
[  108.943853][ T7913] netlink: 48 bytes leftover after parsing attributes in process `syz.2.515'.
[  109.168579][ T7927] warning: `syz.1.519' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  109.394003][ T7951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.525'.
[  109.663247][ T7966] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  109.796489][ T7973] netlink: 104 bytes leftover after parsing attributes in process `syz.1.532'.
[  110.177054][ T7994] netlink: 'syz.0.538': attribute type 5 has an invalid length.
[  110.190660][   T24] IPVS: starting estimator thread 0...
[  110.194672][ T7994] ieee802154 phy0 wpan0: encryption failed: -22
[  110.308832][ T7997] IPVS: using max 64 ests per chain, 153600 per kthread
[  111.587315][ T8149] macsec2: entered promiscuous mode
[  111.589422][ T8149] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  111.591901][ T8149] macsec2: entered allmulticast mode
[  111.594033][ T8149] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  112.236363][ T8165] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  112.241099][ T8165] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  112.385693][ T8169] vxcan1: entered allmulticast mode
[  112.388595][ T8169] vxcan1: left allmulticast mode
[  112.504836][ T8176] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.837431][ T8199] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input4
[  113.106340][ T8215] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  113.986556][ T8257] tipc: Started in network mode
[  113.991047][ T8257] tipc: Node identity ac1414aa, cluster identity 4711
[  113.996622][ T8257] tipc: Enabled bearer <udp:s>, priority 10
[  114.106699][ T8264] netlink: 'syz.1.613': attribute type 10 has an invalid length.
[  114.414285][ T8269] __nla_validate_parse: 23 callbacks suppressed
[  114.414297][ T8269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.615'.
[  114.446893][ T8272] netlink: 56 bytes leftover after parsing attributes in process `syz.0.616'.
[  114.453932][ T8272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.616'.
[  114.597266][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.618'.
[  114.608841][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.618'.
[  114.816006][ T8295] mac80211_hwsim hwsim4 wlan0: left allmulticast mode
[  114.819112][ T8295] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  114.824903][ T8295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.622'.
[  114.910851][ T8299] bridge_slave_0: left allmulticast mode
[  114.913205][ T8299] bridge_slave_0: left promiscuous mode
[  114.915745][ T8299] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.931692][ T8299] bridge_slave_1: left allmulticast mode
[  114.934615][ T8299] bridge_slave_1: left promiscuous mode
[  114.937509][ T8299] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.949659][ T8299] bond0: (slave bond_slave_0): Releasing backup interface
[  114.956085][ T8299] bond0: (slave bond_slave_1): Releasing backup interface
[  114.964964][ T8299] team0: Port device team_slave_0 removed
[  114.969777][ T8299] team0: Port device team_slave_1 removed
[  114.972526][ T8299] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.976178][ T8299] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.109796][   T24] tipc: Node number set to 2886997162
[  115.490661][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.632'.
[  115.494237][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.632'.
[  115.616706][ T8340] netlink: 'syz.0.633': attribute type 1 has an invalid length.
[  115.620040][ T8340] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  116.618673][   T33] audit: type=1800 audit(1757694985.486:2): pid=8406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.652" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1215 res=0 errno=0
[  116.668776][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.653'.
[  116.673981][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.653'.
[  116.741844][ T8418] tipc: Started in network mode
[  116.744913][ T8418] tipc: Node identity 9ecdf991ab09, cluster identity 4711
[  116.747414][ T8418] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.752681][ T8418] syzkaller0: entered promiscuous mode
[  116.754571][ T8418] syzkaller0: entered allmulticast mode
[  116.767913][ T8418] tipc: Resetting bearer <eth:syzkaller0>
[  116.776623][ T8417] tipc: Resetting bearer <eth:syzkaller0>
[  116.786282][ T8417] tipc: Disabling bearer <eth:syzkaller0>
[  117.131453][ T8439] vlan0: entered allmulticast mode
[  117.289629][ T8442] netlink: 'syz.1.664': attribute type 12 has an invalid length.
[  117.350276][ T8443] netlink: 'syz.1.664': attribute type 10 has an invalid length.
[  118.217935][ T8466] Unsupported ieee802154 address type: 0
[  118.770050][ T8497] netlink: 'syz.2.679': attribute type 10 has an invalid length.
[  118.775327][ T8497] team0: Device ipvlan1 failed to register rx_handler
[  119.576839][ T8512] __nla_validate_parse: 8 callbacks suppressed
[  119.576852][ T8512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.683'.
[  119.582919][ T8512] openvswitch: netlink: Flow actions attr not present in new flow.
[  119.592598][ T8512] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  119.595255][ T8512] syzkaller0: entered promiscuous mode
[  119.597221][ T8512] syzkaller0: entered allmulticast mode
[  119.663007][ T8512] tipc: Resetting bearer <eth:syzkaller0>
[  119.680658][ T8511] tipc: Resetting bearer <eth:syzkaller0>
[  119.692125][ T8511] tipc: Disabling bearer <eth:syzkaller0>
[  119.944512][ T8526] netlink: 36 bytes leftover after parsing attributes in process `syz.2.686'.
[  119.948477][ T8526] netlink: 16 bytes leftover after parsing attributes in process `syz.2.686'.
[  119.951869][ T8526] netlink: 36 bytes leftover after parsing attributes in process `syz.2.686'.
[  119.955390][ T8526] netlink: 36 bytes leftover after parsing attributes in process `syz.2.686'.
[  120.541610][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.692'.
[  120.544507][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.692'.
[  120.700928][ T8555] netlink: 64 bytes leftover after parsing attributes in process `syz.2.697'.
[  120.874786][ T8566] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  120.878085][ T8566] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  121.605728][ T8576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.703'.
[  121.609322][ T8576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.703'.
[  122.906963][ T8634] netlink: 'syz.0.720': attribute type 11 has an invalid length.
[  122.917442][ T8635] netlink: 'syz.2.719': attribute type 10 has an invalid length.
[  122.930955][ T8635] team0: Device ipvlan1 failed to register rx_handler
[  124.330137][ T8686] netlink: 'syz.0.736': attribute type 1 has an invalid length.
[  124.346058][ T8686] 8021q: adding VLAN 0 to HW filter on device bond2
[  124.359535][ T8686] bond2: (slave gretap2): making interface the new active one
[  124.363531][ T8686] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  124.531335][ T8694] vxcan1: entered allmulticast mode
[  124.534823][ T8694] vxcan1: left allmulticast mode
[  124.760439][ T8703] netlink: 'syz.2.742': attribute type 1 has an invalid length.
[  124.763444][ T8703] netlink: 'syz.2.742': attribute type 1 has an invalid length.
[  125.766652][ T8718] __nla_validate_parse: 12 callbacks suppressed
[  125.766672][ T8718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.746'.
[  126.382025][ T8724] bridge: RTM_NEWNEIGH with invalid ether address
[  126.385108][ T8724] netlink: 104 bytes leftover after parsing attributes in process `syz.1.749'.
[  126.515160][ T8731] netlink: 32 bytes leftover after parsing attributes in process `syz.0.751'.
[  126.591836][ T8741] netlink: 128 bytes leftover after parsing attributes in process `syz.1.754'.
[  126.595385][ T8741] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  126.612582][ T8747] netlink: 36 bytes leftover after parsing attributes in process `syz.2.753'.
[  126.615456][ T8747] netlink: 16 bytes leftover after parsing attributes in process `syz.2.753'.
[  126.632637][ T8747] netlink: 36 bytes leftover after parsing attributes in process `syz.2.753'.
[  126.645730][ T8747] netlink: 36 bytes leftover after parsing attributes in process `syz.2.753'.
[  126.651157][ T8747] netlink: 20 bytes leftover after parsing attributes in process `syz.2.753'.
[  127.441994][ T8768] IPVS: set_ctl: invalid protocol: 1 172.30.1.3:20002
[  127.855990][ T8787] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  128.088117][ T8802] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.769'.
[  128.097120][ T8802] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  128.101709][ T8802] openvswitch: netlink: Duplicate key (type 0).
[  131.764821][ T8945] __nla_validate_parse: 11 callbacks suppressed
[  131.764836][ T8945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.809'.
[  132.077351][ T8949] netlink: 24 bytes leftover after parsing attributes in process `syz.0.810'.
[  132.081258][ T8949] netlink: 24 bytes leftover after parsing attributes in process `syz.0.810'.
[  132.084435][ T8949] netlink: 24 bytes leftover after parsing attributes in process `syz.0.810'.
[  132.087401][ T8949] netlink: 24 bytes leftover after parsing attributes in process `syz.0.810'.
[  132.090544][ T8949] netlink: 24 bytes leftover after parsing attributes in process `syz.0.810'.
[  132.093506][ T8949] netlink: 24 bytes leftover after parsing attributes in process `syz.0.810'.
[  132.096497][ T8949] netlink: 24 bytes leftover after parsing attributes in process `syz.0.810'.
[  132.100323][ T8949] netlink: 24 bytes leftover after parsing attributes in process `syz.0.810'.
[  132.103259][ T8949] netlink: 24 bytes leftover after parsing attributes in process `syz.0.810'.
[  132.393749][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.396245][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.470694][   T34] wlan0: Trigger new scan to find an IBSS to join
[  133.190341][ T8987] sctp: [Deprecated]: syz.1.819 (pid 8987) Use of struct sctp_assoc_value in delayed_ack socket option.
[  133.190341][ T8987] Use struct sctp_sack_info instead
[  133.316821][ T8990] netlink: 'syz.2.820': attribute type 2 has an invalid length.
[  133.321579][ T8990] netlink: 'syz.2.820': attribute type 1 has an invalid length.
[  133.390471][ T8994] vxcan1: entered allmulticast mode
[  133.392637][ T8994] vxcan1: left allmulticast mode
[  134.130738][ T9008] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.134537][ T9008] syzkaller0: entered promiscuous mode
[  134.136892][ T9008] syzkaller0: entered allmulticast mode
[  134.154991][ T9008] tipc: Resetting bearer <eth:syzkaller0>
[  134.159968][ T9007] tipc: Resetting bearer <eth:syzkaller0>
[  134.174678][ T9007] tipc: Disabling bearer <eth:syzkaller0>
[  134.417058][ T9015] netlink: 'syz.1.828': attribute type 10 has an invalid length.
[  135.294217][ T9052] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  135.300100][ T9052] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  135.366041][ T9057] syzkaller1: entered promiscuous mode
[  135.367926][ T9057] syzkaller1: entered allmulticast mode
[  135.431827][ T1119] wlan0: Trigger new scan to find an IBSS to join
[  135.795650][ T9083] IPVS: set_ctl: invalid protocol: 73 172.20.20.29:20002
[  135.842342][ T9085] vxcan1: entered allmulticast mode
[  135.844288][ T9085] vxcan1: left allmulticast mode
[  136.348749][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.861747][ T9126] netlink: 'syz.2.863': attribute type 5 has an invalid length.
[  137.710887][ T9158] __nla_validate_parse: 31 callbacks suppressed
[  137.710900][ T9158] netlink: 36 bytes leftover after parsing attributes in process `syz.0.872'.
[  137.717070][ T9158] netlink: 16 bytes leftover after parsing attributes in process `syz.0.872'.
[  137.724313][ T9158] netlink: 36 bytes leftover after parsing attributes in process `syz.0.872'.
[  137.728033][ T9158] netlink: 36 bytes leftover after parsing attributes in process `syz.0.872'.
[  137.869730][ T9161] nbd0: detected capacity change from 0 to 549764202496
[  137.934774][   T55] block nbd0: Receive control failed (result -104)
[  138.086384][ T9172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  139.388176][ T9200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.883'.
[  139.543325][ T9207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.885'.
[  139.925935][ T9209] netlink: 104 bytes leftover after parsing attributes in process `syz.0.886'.
[  139.963258][ T9219] netlink: 32 bytes leftover after parsing attributes in process `syz.2.888'.
[  140.458239][ T9238] netlink: 'syz.1.895': attribute type 10 has an invalid length.
[  141.366415][ T9252] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.372076][ T9252] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  141.417912][ T9255] vxcan1: entered allmulticast mode
[  141.564639][ T9265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.901'.
[  141.571910][ T9265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.901'.
[  142.097705][ T9252] syz.1.898 (9252) used greatest stack depth: 19544 bytes left
[  142.780405][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.911'.
[  142.783911][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.911'.
[  142.827514][ T9313] netlink: 16 bytes leftover after parsing attributes in process `syz.0.912'.
[  142.831886][ T9313] netlink: 16 bytes leftover after parsing attributes in process `syz.0.912'.
[  142.841230][ T9313] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  142.845578][ T9314] netlink: 36 bytes leftover after parsing attributes in process `syz.2.910'.
[  142.850308][ T9314] netlink: 16 bytes leftover after parsing attributes in process `syz.2.910'.
[  142.855178][ T9314] netlink: 36 bytes leftover after parsing attributes in process `syz.2.910'.
[  142.859615][ T9314] netlink: 36 bytes leftover after parsing attributes in process `syz.2.910'.
[  142.900976][ T9315] netlink: 48 bytes leftover after parsing attributes in process `syz.0.912'.
[  143.164124][ T9322] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  143.167609][ T9322] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  143.596186][ T9325] netlink: 56 bytes leftover after parsing attributes in process `syz.2.916'.
[  143.602001][ T9325] netlink: 'syz.2.916': attribute type 3 has an invalid length.
[  143.606472][ T9325] netlink: 'syz.2.916': attribute type 2 has an invalid length.
[  144.024787][ T9347] vxcan1: entered allmulticast mode
[  144.026725][ T9347] vxcan1: left allmulticast mode
[  144.833899][ T9388] netlink: 'syz.2.935': attribute type 29 has an invalid length.
[  144.955681][ T9395] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.780363][ T9417] vxcan1: left allmulticast mode
[  146.434223][ T9441] netlink: 'syz.0.951': attribute type 1 has an invalid length.
[  146.436937][ T9441] nbd: error processing sock list
[  146.445899][ T9441] block nbd1: shutting down sockets
[  146.930052][ T9451] lo speed is unknown, defaulting to 1000
[  146.932512][ T9451] lo speed is unknown, defaulting to 1000
[  146.936583][ T9451] lo speed is unknown, defaulting to 1000
[  146.943596][ T9451] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  146.956112][ T9451] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  146.983626][ T9451] lo speed is unknown, defaulting to 1000
[  146.989638][ T9451] lo speed is unknown, defaulting to 1000
[  146.993830][ T9451] lo speed is unknown, defaulting to 1000
[  147.941047][ T9471] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  148.415175][ T9489] lo speed is unknown, defaulting to 1000
[  148.424319][ T9488] lo speed is unknown, defaulting to 1000
[  148.863881][ T9502] __nla_validate_parse: 12 callbacks suppressed
[  148.863893][ T9502] netlink: 28 bytes leftover after parsing attributes in process `syz.2.966'.
[  148.870686][ T9502] openvswitch: netlink: Flow key attr not present in new flow.
[  149.017927][ T9512] netlink: 104 bytes leftover after parsing attributes in process `syz.0.970'.
[  149.582411][ T9514] netlink: 'syz.1.971': attribute type 4 has an invalid length.
[  149.691544][ T9516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.971'.
[  149.695134][ T9516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.971'.
[  149.935025][ T9526] netlink: 104 bytes leftover after parsing attributes in process `syz.0.974'.
[  150.227140][ T9561] lo speed is unknown, defaulting to 1000
[  150.436516][ T9570] IPv6: NLM_F_CREATE should be specified when creating new route
[  150.567378][ T9583] netlink: 44 bytes leftover after parsing attributes in process `syz.0.989'.
[  150.663401][ T9586] nbd: must specify a size in bytes for the device
[  150.668030][ T9586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.990'.
[  150.754725][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.992'.
[  150.757770][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.992'.
[  150.794596][ T9598] sctp: [Deprecated]: syz.0.993 (pid 9598) Use of int in maxseg socket option.
[  150.794596][ T9598] Use struct sctp_assoc_value instead
[  151.020326][ T9611] netlink: 104 bytes leftover after parsing attributes in process `syz.2.996'.
[  151.311180][ T9636] lo speed is unknown, defaulting to 1000
[  152.627216][ T9680] netlink: 'syz.1.1013': attribute type 10 has an invalid length.
[  153.087762][ T9692] sctp: [Deprecated]: syz.2.1016 (pid 9692) Use of int in max_burst socket option.
[  153.087762][ T9692] Use struct sctp_assoc_value instead
[  153.183767][ T9695] 8021q: adding VLAN 0 to HW filter on device bond3
[  153.187604][ T9695] bond0: (slave bond3): Enslaving as an active interface with an up link
[  153.246562][ T9705] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  153.465362][ T9733] vxcan1: entered allmulticast mode
[  153.467125][ T9733] vxcan1: left allmulticast mode
[  154.242229][ T9757] __nla_validate_parse: 3 callbacks suppressed
[  154.242241][ T9757] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1034'.
[  154.411286][ T9770] lo speed is unknown, defaulting to 1000
[  154.456733][ T9774] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1039'.
[  154.460507][ T9774] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1039'.
[  154.463453][ T9774] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1039'.
[  154.466425][ T9774] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1039'.
[  154.713989][ T9790] xt_l2tp: unknown flags: 51
[  154.865003][ T9797] syzkaller0: entered promiscuous mode
[  154.866810][ T9797] syzkaller0: entered allmulticast mode
[  155.311854][ T9802] netlink: 'syz.2.1046': attribute type 10 has an invalid length.
[  155.873151][ T9802] team0: Device ipvlan1 failed to register rx_handler
[  155.955237][ T9811] netlink: 'syz.0.1051': attribute type 5 has an invalid length.
[  155.957819][ T9811] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1051'.
[  156.005365][ T9814] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1050'.
[  156.010877][ T9814] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1050'.
[  156.016840][ T9814] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1050'.
[  156.025188][ T9814] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1050'.
[  156.130078][ T9820] netlink: 'syz.2.1055': attribute type 4 has an invalid length.
[  156.131919][ T9821] netlink: 'syz.2.1055': attribute type 4 has an invalid length.
[  156.142883][  T793] lo speed is unknown, defaulting to 1000
[  156.145238][  T793] syz2: Port: 1 Link ACTIVE
[  156.297728][ T9827] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  156.303119][  T793] lo speed is unknown, defaulting to 1000
[  156.305177][  T793] syz2: Port: 1 Link DOWN
[  156.802701][ T9829] netlink: 'syz.1.1057': attribute type 1 has an invalid length.
[  157.035188][ T9844] openvswitch: netlink: IP tunnel attribute has 105 unknown bytes.
[  157.087300][ T9844] bridge_slave_1: left allmulticast mode
[  157.089288][ T9844] bridge_slave_1: left promiscuous mode
[  157.091183][ T9844] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.096243][ T9844] bridge_slave_0: left promiscuous mode
[  157.098196][ T9844] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.231187][ T9846] lo speed is unknown, defaulting to 1000
[  157.382385][ T9854] lo speed is unknown, defaulting to 1000
[  157.472103][ T9858] lo speed is unknown, defaulting to 1000
[  157.723683][ T9871] netlink: 'syz.0.1070': attribute type 1 has an invalid length.
[  157.791527][ T9878] netlink: 'syz.0.1072': attribute type 28 has an invalid length.
[  158.068551][ T5845] Bluetooth: hci0: command tx timeout
[  158.186594][ T9900] lo speed is unknown, defaulting to 1000
[  159.251344][ T9924] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[  159.397982][ T9927] lo speed is unknown, defaulting to 1000
[  159.544904][ T9933] __nla_validate_parse: 17 callbacks suppressed
[  159.544920][ T9933] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1086'.
[  159.552969][ T9927] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1086'.
[  159.555948][ T9927] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1086'.
[  159.560679][ T9927] netlink: 'syz.2.1086': attribute type 6 has an invalid length.
[  159.563200][ T9927] netlink: 'syz.2.1086': attribute type 5 has an invalid length.
[  159.565670][ T9927] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1086'.
[  159.570863][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1086'.
[  160.541500][ T9961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1092'.
[  160.551098][ T9961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1092'.
[  160.583109][ T9965] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1094'.
[  160.619851][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1095'.
[  160.624073][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1095'.
[  160.755805][ T9976] lo speed is unknown, defaulting to 1000
[  160.834171][ T9984] netlink: 'syz.0.1101': attribute type 1 has an invalid length.
[  160.837581][ T9984] netlink: 'syz.0.1101': attribute type 11 has an invalid length.
[  160.939329][   T56] block nbd1: Receive control failed (result -104)
[  160.987773][T10000] lo speed is unknown, defaulting to 1000
[  161.685372][T10017] lo speed is unknown, defaulting to 1000
[  162.197382][T10043] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  162.733124][T10045] syzkaller1: entered promiscuous mode
[  162.734864][T10045] syzkaller1: entered allmulticast mode
[  163.107392][T10097] vxcan1: entered allmulticast mode
[  163.110037][T10098] vxcan1: left allmulticast mode
[  163.133366][T10093] lo speed is unknown, defaulting to 1000
[  164.622488][T10157] lo speed is unknown, defaulting to 1000
[  164.722851][T10162] __nla_validate_parse: 12 callbacks suppressed
[  164.722865][T10162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1144'.
[  164.727771][T10162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1144'.
[  164.857430][T10167] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1146'.
[  165.095618][T10193] vxcan1: entered allmulticast mode
[  165.097925][T10193] vxcan1: left allmulticast mode
[  165.598069][T10204] netlink: 'syz.0.1154': attribute type 10 has an invalid length.
[  165.603750][T10204] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  165.754581][T10202] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1154'.
[  165.925906][T10216] lo speed is unknown, defaulting to 1000
[  165.970507][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1158'.
[  166.027628][T10218] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1158'.
[  166.031681][T10218] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1158'.
[  166.034542][T10218] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1158'.
[  166.037427][T10218] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1158'.
[  166.303105][T10221] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1159'.
[  167.614356][T10260] netlink: 'syz.1.1172': attribute type 1 has an invalid length.
[  167.619063][T10260] netlink: 'syz.1.1172': attribute type 2 has an invalid length.
[  167.754755][T10266] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  167.757839][T10266] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  168.239249][   T60] block nbd0: Possible stuck request ffff8880210c8000: control (read@0,4096B). Runtime 30 seconds
[  168.525191][T10288] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  168.529494][T10288] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  170.311952][T10321] __nla_validate_parse: 16 callbacks suppressed
[  170.311971][T10321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1188'.
[  170.614503][T10331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1191'.
[  170.617621][T10331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1191'.
[  170.662761][T10331] veth0_to_bridge: entered promiscuous mode
[  170.665687][T10331] veth0_to_bridge: left promiscuous mode
[  170.794609][T10338] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1192'.
[  170.797969][T10338] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1192'.
[  170.802531][T10338] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1192'.
[  170.805948][T10338] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1192'.
[  171.232322][T10352] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  171.281012][T10356] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1198'.
[  171.284093][T10356] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1198'.
[  171.287326][T10357] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1198'.
[  171.324110][T10359] macvtap1: entered allmulticast mode
[  171.326056][T10359] veth0_macvtap: entered allmulticast mode
[  171.697027][T10383] lo speed is unknown, defaulting to 1000
[  172.595078][T10407] lo speed is unknown, defaulting to 1000
[  172.997107][T10428] syzkaller0: entered promiscuous mode
[  172.999346][T10428] syzkaller0: entered allmulticast mode
[  174.018858][T10432] veth0_macvtap: left allmulticast mode
[  174.131988][T10464] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  174.427745][T10498] lo speed is unknown, defaulting to 1000
[  174.428061][T10501] xt_time: invalid argument - start or stop time greater than 23:59:59
[  174.639174][T10513] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  174.643320][T10513] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  175.363893][T10531] __nla_validate_parse: 13 callbacks suppressed
[  175.363909][T10531] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1244'.
[  175.659724][T10548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1249'.
[  175.662692][T10548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1249'.
[  176.103039][T10550] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  176.360672][T10559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1252'.
[  176.401167][T10559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1252'.
[  176.404382][T10559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1252'.
[  176.872900][T10586] lo speed is unknown, defaulting to 1000
[  177.019774][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1263'.
[  177.022849][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1263'.
[  177.060771][T10599] syzkaller1: entered promiscuous mode
[  177.062769][T10599] syzkaller1: entered allmulticast mode
[  177.295871][T10605] syzkaller1: entered promiscuous mode
[  177.298165][T10605] syzkaller1: entered allmulticast mode
[  177.310816][T10605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1267'.
[  177.315008][T10605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1267'.
[  177.437135][T10615] netlink: 'syz.2.1270': attribute type 18 has an invalid length.
[  177.505401][T10623] pim6reg: entered allmulticast mode
[  177.512462][T10624] pim6reg: left allmulticast mode
[  177.705965][T10650] netlink: 'syz.1.1277': attribute type 1 has an invalid length.
[  177.759556][T10650] 8021q: adding VLAN 0 to HW filter on device bond3
[  177.810157][T10661] vxcan1: entered allmulticast mode
[  177.815116][T10661] vxcan1: left allmulticast mode
[  177.963242][T10685] IPv6: sit1: Disabled Multicast RS
[  178.052550][T10695] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  178.056105][T10695] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  178.842285][T10698] lo speed is unknown, defaulting to 1000
[  179.763101][T10735] vxcan1: entered allmulticast mode
[  179.765527][T10735] vxcan1: left allmulticast mode
[  179.888544][T10733] block nbd2: server does not support multiple connections per device.
[  179.892916][T10733] block nbd2: shutting down sockets
[  179.941408][T10742] netlink: 'syz.2.1302': attribute type 1 has an invalid length.
[  179.970729][T10739] lo speed is unknown, defaulting to 1000
[  180.154117][T10761] dvmrp1: tun_chr_ioctl cmd 1074025677
[  180.156108][T10761] dvmrp1: linktype set to 805
[  180.251927][T10765] 8021q: VLANs not supported on lo
[  180.302410][T10768] netlink: 'syz.1.1311': attribute type 6 has an invalid length.
[  180.551664][ T5851] Bluetooth: hci0: command 0x0406 tx timeout
[  180.551751][ T5852] Bluetooth: hci2: command 0x0406 tx timeout
[  181.056181][T10793] __nla_validate_parse: 12 callbacks suppressed
[  181.056275][T10793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1318'.
[  181.124549][T10797] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1317'.
[  181.128170][T10797] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1317'.
[  181.131867][T10797] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1317'.
[  181.135179][T10797] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1317'.
[  181.140981][T10797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1317'.
[  181.144218][T10797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1317'.
[  181.147628][T10797] netlink: 'syz.0.1317': attribute type 12 has an invalid length.
[  181.162773][T10799] tun0: tun_chr_ioctl cmd 1074025675
[  181.165058][T10799] tun0: persist enabled
[  181.166963][T10799] tun0: tun_chr_ioctl cmd 1074025675
[  181.169010][T10799] tun0: persist enabled
[  181.692583][T10811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1324'.
[  181.695655][T10811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1324'.
[  181.850478][T10821] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1327'.
[  182.093530][T10844] lo speed is unknown, defaulting to 1000
[  182.578204][ T5845] Bluetooth: hci1: link tx timeout
[  182.580602][ T5845] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  183.328994][T10900] lo speed is unknown, defaulting to 1000
[  183.681523][T10908] netlink: 'syz.1.1348': attribute type 1 has an invalid length.
[  183.873127][T10922] syzkaller0: entered promiscuous mode
[  183.875560][T10922] syzkaller0: entered allmulticast mode
[  184.387012][T10940] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  184.629501][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  185.182468][T10959] vxcan1: entered allmulticast mode
[  185.184610][T10959] vxcan1: left allmulticast mode
[  186.150218][T10987] __nla_validate_parse: 15 callbacks suppressed
[  186.150230][T10987] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1368'.
[  186.287993][T10999] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1371'.
[  186.323307][T11002] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  186.573344][T11023] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  186.617372][T11027] netlink: 'syz.2.1379': attribute type 2 has an invalid length.
[  186.816162][T11048] netlink: 'syz.2.1384': attribute type 1 has an invalid length.
[  186.857807][T11048] bond1 (unregistering): Released all slaves
[  186.909692][T11056] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1387'.
[  186.945737][T11057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1386'.
[  186.970314][T11058] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1387'.
[  186.973627][T11058] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1387'.
[  186.976496][T11058] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1387'.
[  186.983775][T11058] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1387'.
[  187.205846][T11067] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1390'.
[  187.571714][T11077] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  187.575564][T11077] syzkaller0: entered promiscuous mode
[  187.577726][T11077] syzkaller0: entered allmulticast mode
[  187.587526][T11077] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1393'.
[  187.593332][T11077] tipc: Resetting bearer <eth:syzkaller0>
[  187.598980][T11076] tipc: Resetting bearer <eth:syzkaller0>
[  187.613295][T11076] tipc: Disabling bearer <eth:syzkaller0>
[  187.688445][T11079] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  187.692181][T11079] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  189.105461][T11130] lo speed is unknown, defaulting to 1000
[  190.032570][T11152] lo speed is unknown, defaulting to 1000
[  190.602735][T11190] tipc: Can't bind to reserved service type 0
[  190.683848][T11192] lo speed is unknown, defaulting to 1000
[  190.912180][T11198] lo speed is unknown, defaulting to 1000
[  191.267316][T11209] lo speed is unknown, defaulting to 1000
[  191.445134][T11218] can: request_module (can-proto-0) failed.
[  191.450419][T11218] __nla_validate_parse: 2 callbacks suppressed
[  191.450428][T11218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1434'.
[  191.526649][T11221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1435'.
[  191.532139][T11221] netlink: 'syz.0.1435': attribute type 11 has an invalid length.
[  191.537814][T11221] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1435'.
[  191.544539][T11221] netlink: 'syz.0.1435': attribute type 11 has an invalid length.
[  192.149886][T11239] lo speed is unknown, defaulting to 1000
[  192.712121][T11256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1444'.
[  192.887673][T11263] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1447'.
[  192.891607][T11263] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1447'.
[  192.895477][T11263] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1447'.
[  192.899303][T11263] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1447'.
[  193.279705][T11267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1448'.
[  193.282596][T11267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1448'.
[  193.591826][T11278] lo speed is unknown, defaulting to 1000
[  193.767660][T11281] lo speed is unknown, defaulting to 1000
[  193.832370][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  193.835299][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  194.226679][T11292] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  194.631946][T11305] netlink: 'syz.1.1459': attribute type 10 has an invalid length.
[  194.651433][T11305] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  194.659413][T11305] bond0: (slave lo): Enslaving as an active interface with an up link
[  195.096630][T11323] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  196.014168][T11332] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  196.017546][T11332] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  196.695918][T11359] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  197.636566][T11390] netlink: 'syz.2.1480': attribute type 7 has an invalid length.
[  197.698705][T11392] __nla_validate_parse: 1 callbacks suppressed
[  197.698716][T11392] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1481'.
[  197.721678][T11397] vxcan1: entered allmulticast mode
[  197.723798][T11397] vxcan1: left allmulticast mode
[  197.827426][T11409] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  197.878986][T11411] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1487'.
[  197.880019][T11414] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1486'.
[  197.927305][T11416] lo speed is unknown, defaulting to 1000
[  198.063953][T11416] netlink: 'syz.1.1489': attribute type 2 has an invalid length.
[  198.312901][   T60] block nbd0: Possible stuck request ffff8880210c8000: control (read@0,4096B). Runtime 60 seconds
[  198.761723][T11426] netlink: 'syz.2.1491': attribute type 7 has an invalid length.
[  198.769713][T11426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1491'.
[  198.782000][T11426] netlink: 'syz.2.1491': attribute type 7 has an invalid length.
[  198.788456][T11426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1491'.
[  198.805037][T11426] netlink: 'syz.2.1491': attribute type 7 has an invalid length.
[  198.807504][T11426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1491'.
[  198.820290][T11426] netlink: 'syz.2.1491': attribute type 7 has an invalid length.
[  198.822684][T11426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1491'.
[  198.836256][T11426] netlink: 'syz.2.1491': attribute type 7 has an invalid length.
[  198.842221][T11427] netlink: 'syz.2.1491': attribute type 3 has an invalid length.
[  198.844714][T11427] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1491'.
[  198.852300][T11426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1491'.
[  198.922558][T11433] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  198.925582][T11433] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  199.179649][T11461] veth5: entered promiscuous mode
[  199.972124][T11482] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1505'.
[  200.058590][T11486] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  201.934404][T11529] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  201.954304][T11534] lo speed is unknown, defaulting to 1000
[  202.773406][T11543] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  203.163942][T11580] __nla_validate_parse: 21 callbacks suppressed
[  203.163953][T11580] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1532'.
[  203.219246][T11583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1533'.
[  204.032644][T11603] lo speed is unknown, defaulting to 1000
[  204.090202][T11611] vxcan1: entered allmulticast mode
[  204.092869][T11611] vxcan1: left allmulticast mode
[  204.171151][T11614] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1538'.
[  204.174242][T11614] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1538'.
[  204.177223][T11614] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1538'.
[  204.182476][T11614] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1538'.
[  204.371529][T11628] lo speed is unknown, defaulting to 1000
[  204.694402][T11639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1548'.
[  204.697313][T11639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1548'.
[  205.190408][T11646] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1551'.
[  206.280946][T11672] syzkaller1: entered promiscuous mode
[  206.283194][T11672] syzkaller1: entered allmulticast mode
[  207.353975][T11683] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  207.405358][T11683] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1559'.
[  207.988829][ T5296] udevd[5296]: worker [5846] /devices/virtual/block/nbd0 is taking a long time
[  208.501805][T11725] sch_tbf: burst 240 is lower than device lo mtu (1550) !
[  208.511925][T11725] __nla_validate_parse: 33 callbacks suppressed
[  208.511934][T11725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1563'.
[  208.619848][T11741] dvmrp1: tun_chr_ioctl cmd 1074025677
[  208.623219][T11741] dvmrp1: linktype set to 805
[  208.679586][T11750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1565'.
[  208.932811][T11769] lo speed is unknown, defaulting to 1000
[  208.967255][T11771] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  208.972067][T11771] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  208.976076][T11771] CPU: 0 UID: 0 PID: 11771 Comm: syz.2.1572 Not tainted syzkaller #0 PREEMPT(full) 
[  208.980135][T11771] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  208.984141][T11771] RIP: 0010:__xfrm_state_insert+0x1011/0x1450
[  208.986493][T11771] Code: 18 00 74 08 4c 89 ef e8 bd c2 01 f8 4d 89 65 00 41 80 3c 1e 00 74 08 48 89 ef e8 ba c1 01 f8 4c 8b 75 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 91 c2 01 f8 4d 89 2e 41 80 3c 1f 00
[  208.993959][T11771] RSP: 0018:ffffc90006aa7130 EFLAGS: 00010246
[  208.996403][T11771] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000
[  208.999579][T11771] RDX: ffffc9002182f000 RSI: 000000000000040f RDI: 0000000000000410
[  209.002603][T11771] RBP: ffff888024b95fb0 R08: ffff8880245c0000 R09: 0000000000000002
[  209.005685][T11771] R10: 000000000000000a R11: 0000000000000002 R12: ffff888024b94da8
[  209.008710][T11771] R13: ffff888024b95fa8 R14: 0000000000000000 R15: 1ffff110049729b6
[  209.011964][T11771] FS:  00007f45460c06c0(0000) GS:ffff8880b8618000(0000) knlGS:0000000000000000
[  209.015342][T11771] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  209.017836][T11771] CR2: 00007f45460bffc8 CR3: 000000011b1da000 CR4: 00000000000006f0
[  209.020859][T11771] Call Trace:
[  209.022151][T11771]  <TASK>
[  209.023294][T11771]  xfrm_state_add+0x564/0xc40
[  209.025159][T11771]  xfrm_add_sa+0x35a1/0x4070
[  209.027054][T11771]  ? __pfx_xfrm_add_sa+0x10/0x10
[  209.029027][T11771]  ? apparmor_capable+0x137/0x1b0
[  209.031003][T11771]  ? __nla_parse+0x40/0x60
[  209.032743][T11771]  xfrm_user_rcv_msg+0x7a3/0xab0
[  209.034684][T11771]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  209.036808][T11771]  ? __pfx___mutex_trylock_common+0x10/0x10
[  209.039211][T11771]  ? rcu_is_watching+0x15/0xb0
[  209.041167][T11771]  ? trace_contention_end+0x39/0x120
[  209.043263][T11771]  ? __mutex_lock+0x335/0x1350
[  209.045173][T11771]  netlink_rcv_skb+0x208/0x470
[  209.047132][T11771]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  209.049323][T11771]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  209.051314][T11771]  ? netlink_deliver_tap+0x2e/0x1b0
[  209.053390][T11771]  ? netlink_deliver_tap+0x2e/0x1b0
[  209.055477][T11771]  xfrm_netlink_rcv+0x79/0x90
[  209.057357][T11771]  netlink_unicast+0x82f/0x9e0
[  209.059254][T11771]  ? __pfx_netlink_unicast+0x10/0x10
[  209.061331][T11771]  ? netlink_sendmsg+0x642/0xb30
[  209.063298][T11771]  ? skb_put+0x11b/0x210
[  209.064996][T11771]  netlink_sendmsg+0x805/0xb30
[  209.066834][T11771]  ? __pfx_netlink_sendmsg+0x10/0x10
[  209.068864][T11771]  ? aa_sock_msg_perm+0xf1/0x1d0
[  209.070816][T11771]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  209.072915][T11771]  ? __pfx_netlink_sendmsg+0x10/0x10
[  209.074963][T11771]  __sock_sendmsg+0x21c/0x270
[  209.076823][T11771]  ____sys_sendmsg+0x505/0x830
[  209.078730][T11771]  ? __pfx_____sys_sendmsg+0x10/0x10
[  209.080816][T11771]  ? import_iovec+0x74/0xa0
[  209.082623][T11771]  ___sys_sendmsg+0x21f/0x2a0
[  209.084460][T11771]  ? __pfx____sys_sendmsg+0x10/0x10
[  209.086574][T11771]  ? __fget_files+0x2a/0x420
[  209.088425][T11771]  ? __fget_files+0x3a0/0x420
[  209.090317][T11771]  __x64_sys_sendmsg+0x19b/0x260
[  209.092253][T11771]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  209.094350][T11771]  ? rcu_is_watching+0x15/0xb0
[  209.096280][T11771]  ? do_syscall_64+0xbe/0x3b0
[  209.098099][T11771]  do_syscall_64+0xfa/0x3b0
[  209.099864][T11771]  ? lockdep_hardirqs_on+0x9c/0x150
[  209.101881][T11771]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.104258][T11771]  ? exc_page_fault+0x9f/0xf0
[  209.106157][T11771]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.108500][T11771] RIP: 0033:0x7f454518eba9
[  209.110315][T11771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  209.117815][T11771] RSP: 002b:00007f45460c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  209.121010][T11771] RAX: ffffffffffffffda RBX: 00007f45453d6090 RCX: 00007f454518eba9
[  209.123862][T11771] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  209.126988][T11771] RBP: 00007f4545211e19 R08: 0000000000000000 R09: 0000000000000000
[  209.130139][T11771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  209.133241][T11771] R13: 00007f45453d6128 R14: 00007f45453d6090 R15: 00007ffd8eab42d8
[  209.136370][T11771]  </TASK>
[  209.137748][T11771] Modules linked in:
[  209.139582][T11771] ---[ end trace 0000000000000000 ]---
[  209.141674][T11771] RIP: 0010:__xfrm_state_insert+0x1011/0x1450
[  209.144051][T11771] Code: 18 00 74 08 4c 89 ef e8 bd c2 01 f8 4d 89 65 00 41 80 3c 1e 00 74 08 48 89 ef e8 ba c1 01 f8 4c 8b 75 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 91 c2 01 f8 4d 89 2e 41 80 3c 1f 00
[  209.151712][T11771] RSP: 0018:ffffc90006aa7130 EFLAGS: 00010246
[  209.154129][T11771] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000
[  209.157369][T11771] RDX: ffffc9002182f000 RSI: 000000000000040f RDI: 0000000000000410
[  209.160666][T11771] RBP: ffff888024b95fb0 R08: ffff8880245c0000 R09: 0000000000000002
[  209.163780][T11771] R10: 000000000000000a R11: 0000000000000002 R12: ffff888024b94da8
[  209.166956][T11771] R13: ffff888024b95fa8 R14: 0000000000000000 R15: 1ffff110049729b6
[  209.170213][T11771] FS:  00007f45460c06c0(0000) GS:ffff8880b8618000(0000) knlGS:0000000000000000
[  209.173733][T11771] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  209.175839][T11771] CR2: 00007f45460bffc8 CR3: 000000011b1da000 CR4: 00000000000006f0
[  209.178432][T11771] Kernel panic - not syncing: Fatal exception in interrupt
[  209.181496][T11771] Kernel Offset: disabled
[  209.182928][T11771] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:37:57  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000000d RBX=000000000000000d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001023 RDI=0000000000001024 RBP=00000000000003f8 RSP=ffffc90006aa6970
R8 =ffff88801fe70237 R9 =1ffff11003fce046 R10=dffffc0000000000 R11=ffffffff854f4700
R12=dffffc0000000000 R13=ffffffff99afd91d R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f477c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f45460c06c0 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f45460bffc8 CR3=000000011b1da000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f45453a7498 00007f45453a7470 XMM03=00007f45453a74a8 00007f45453a74a0
XMM04=00007f4545f0d100 00007f45453a7460 XMM05=00007f45453a7478 00007f45453a74c0
XMM06=00007f45453a74b8 00007f45453a74b0 XMM07=00007f45453a74a8 00007f45453a74a0
XMM08=0000000000000000 00007f4545212ee7 XMM09=0000000000000000 00007f4545212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=dbe7b92f74afbf00 RBX=ffffffff819683f8 RCX=dbe7b92f74afbf00 RDX=0000000000000001
RSI=ffffffff8be33860 RDI=ffffffff819683f8 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa39830 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff8b7a03f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c362593 CR3=0000000118a3e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f4545212e53
XMM06=0000000000000000 00007f4545212e4d XMM07=0000000000000000 00007f4545212e61
XMM08=0000000000000000 00007f4545212ee7 XMM09=0000000000000000 00007f4545212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
