last executing test programs:

2m23.589347399s ago: executing program 1 (id=828):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
socket(0x8, 0x3, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r4, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x44b, 0x70bd28, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1a009, 0x28806}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r7 = accept(r4, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003fbdb24578fd7425dafebfdca5b383a0166924d77f7ee0df7fc6b0ab3ddff8aabe51b6b8143f496c4eb3c723f1813737cf8e75c5e98db59da5823ad4990fb488172b249f505d97ff25e2f3d6e2336f4052c593bf1fdbccab65ccec2967303c3216db1bfb752955f841870abeadbbfa98d7acf0685d35f3a2c329f5dd599787ea4178cfbeab6907cbf2fe90bc2cb964bccfaf3e4e3ba08b4ff"], 0x84}}, 0x20000000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)={0x3c, r9, 0x1, 0x1000000, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x4b, 0x3, 0x3a1}]}]}]}, 0x3c}}, 0x0)
sendmsg$TIPC_NL_NAME_TABLE_GET(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r9, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8fed}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc0d0}, 0x20000004)
sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x20000010)

2m22.71925758s ago: executing program 1 (id=837):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
socket(0x8, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000080)={'veth1_virt_wifi\x00', {0x2, 0x4e20, @empty}})
accept(r3, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000000c0)=ANY=[], 0x84}}, 0x20000000)
sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x20000010)

2m21.850200893s ago: executing program 1 (id=840):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={<r4=>r0})
setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010101}, 0x10)
socket(0x8, 0x3, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r6, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
accept(r6, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)
sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x20000010)

2m20.9789947s ago: executing program 1 (id=844):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0xffffffea, 0x0}, 0x20040005) (async)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000) (async)
r2 = socket(0x10, 0x3, 0x0)
unshare(0x10a00) (async)
unshare(0x2c060000) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r3, 0x0) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x843, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async)
r5 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r5, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) (async)
r6 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r6) (async)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc083}, 0x2000400c) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), r2)
sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x18, r9, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24040044}, 0x800)
getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r10, @ANYBLOB="1748000040000200280012800a000100767863616e0000001800028014000100000000", @ANYRES32=r10], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r4, <r11=>0xffffffffffffffff}, 0x4)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r2, @ANYRES16=r11], 0x4c}}, 0x40000) (async)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfc)
recvmsg$can_bcm(r2, &(0x7f0000000100)={&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000200)=""/246, 0xf6}, {&(0x7f0000000300)=""/103, 0x67}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/183, 0xb7}, {&(0x7f0000001440)=""/157, 0x9d}, {&(0x7f0000001500)=""/178, 0xb2}, {&(0x7f00000015c0)=""/201, 0xc9}], 0x7, &(0x7f0000000000)=""/10, 0xa}, 0x2020)

2m20.889725371s ago: executing program 1 (id=845):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
unshare(0x6a040000)
socket(0x8, 0x3, 0x0)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x20, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x6}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x61}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r4, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x63, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207104e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x11, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @broadcast}}}], 0x50}, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_emit_ethernet(0x70, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
pipe(&(0x7f0000001140))
ioctl$int_in(r3, 0x5452, &(0x7f0000000080)=0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180700000000000000000000000000007110be000000000095"], &(0x7f0000000100)='GPL\x00', 0x4}, 0x94)
r6 = accept(r3, 0x0, 0x0)
write$bt_hci(0xffffffffffffffff, 0x0, 0x6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000c0000000100000000000007000000000200000001000005000000000a0000000100000000000000005f2e6130000000000061"], &(0x7f0000001540)=""/74, 0x48, 0x4a, 0x1}, 0x28)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)

2m20.025680681s ago: executing program 1 (id=850):
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711228000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
socket(0x8, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r5, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='sched_kthread_work_queue_work\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x4, 0x1c}]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x20000890}, 0x20004000)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
accept(r5, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)
sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x20000010)

2m5.007891587s ago: executing program 32 (id=850):
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711228000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
socket(0x8, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r5, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='sched_kthread_work_queue_work\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x4, 0x1c}]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x20000890}, 0x20004000)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
accept(r5, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)
sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x20000010)

2.760293626s ago: executing program 3 (id=1662):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000005)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='dctcp-reno\x00', 0xb)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000280)}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, r3, 0x91081000)
bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r1, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c)
socket$alg(0x26, 0x5, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e21, 0x5, @empty, 0x2}, 0x1c)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x89b1, 0x0)
r4 = socket$unix(0x1, 0x0, 0x0)
bind$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r4, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
shutdown(r1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
socket(0x8, 0x3, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)

2.34855569s ago: executing program 0 (id=1665):
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(0xffffffffffffffff, 0x9)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, 0x0, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000180)={0x100, 0x18, '\x00', 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0]})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd2c, 0x25dbdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x54)

2.347792775s ago: executing program 0 (id=1666):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000016000000ab0000007f00b33a328ad5c59c91000000000000c776a36f7ae8f2790e498ca0606ac7bf3151464c8d37d72e1cd81fd7b0c4a62939db643b62695597e8a627bcb72814fae259b835f3a41969ebdf7a7aa04c84b33b2adbf811a9ba4359fd81ce555704fb23ec46964da4ea06b6296b5ca07f244c7942dc26cf30e3c7e91fe4977e39dcda360106", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000002c0)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1e}, 0x94)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), 0xffffffffffffffff)
r3 = socket(0x8, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r5, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
accept$inet(r6, &(0x7f0000000180)={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000100), &(0x7f0000000540)=0x4)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000200)={0x0, 0x7}, &(0x7f0000000280)=0x8)
ioctl$SIOCSIFHWADDR(r7, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"})
r9 = openat$cgroup_ro(r4, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r9, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f0000000140))
r10 = accept(r5, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYRES16=r2, @ANYRES8=r10, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)
sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0xc000)

2.050567948s ago: executing program 2 (id=1672):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
r4 = socket(0x8, 0x3, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r6, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000080)=0x5, 0x4)
accept(r6, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)
sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x20000010)

1.90061482s ago: executing program 3 (id=1673):
socket$kcm(0x2, 0x200000000000001, 0x106) (async)
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x4e, 0x0, &(0x7f0000000100)="06ff03076844268cb89e14f008004ee0ffff00febabec41177fb86dd1402e000030c62079f4b4d2f87e5feca6aab055013f2325f1a3901050b038da1880b25181aa59d943be30043d50ea5a6b868", 0x0, 0x1a3, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xa2}, @generic={0x66}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94)
sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0xffffffea, 0x0}, 0x20040005)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
socket$kcm(0x10, 0x3, 0x10) (async)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000)

1.799323731s ago: executing program 3 (id=1674):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="080000000400000004000000070000000e000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, &(0x7f00000000c0)=0x700, &(0x7f0000000100)}, 0x20)
listen(0xffffffffffffffff, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
accept(0xffffffffffffffff, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)
sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x20000010)

1.430140499s ago: executing program 0 (id=1675):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
r4 = socket(0x8, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}, @IFLA_MACSEC_ES={0x5, 0xa, 0x1}]}}}]}, 0x44}}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000100)={0x360, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0xa}}}}, [@NL80211_ATTR_FRAME={0x337, 0x33, @mgmt_frame=@probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x3}, @device_a, @device_a, @random="47d90d1b4c70", {0xc, 0xb12}}, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x8c}, @val={0x2d, 0x1a, {0x2, 0x3, 0x2, 0x0, {0x1ff, 0x476, 0x0, 0x80, 0x0, 0x0, 0x1}, 0x8, 0x2, 0xf4}}, @void, [{0xdd, 0xf1, "f0bc2e8458ee39f8c1ffdb5478d8e2dd0ed50901f0d33f5bf760fb3f5a78b67881f9837018b9c6e086caab3de256043508beb3dadb8d9ddfc51702ba8926969cf218ccfda9641f3572db557a964f434825bcbc8cf0dd247d5ecf7996e564053a80eb682d04418e76d524f5269945cda92b54d37ccdc515064b7ef7d5d61f17bd7c45013ea5d397027f943b32182a3ab6bab0741b6f2831f71df56168192bc6f9f46c9d02cbc52bd82cf100de49992f1b27834908e30b01fef0976f50cdcd5b973bb6af5e114e84909301150c068a7a29727a2512d0db479d43a2ca94616f9a67d0c2f5f703d9c9b53b8ab07346b5e5ec00"}, {0xdd, 0xcd, "51e8257831c96b877e2ce31ffc48ccfed54cff8d4cce8c973303801a6ecbb8d8d0e95b0cf2231b510173d53a64265578f032061bc12a128a945f6d21695bba8e42e01f1166627a4fc3ffa80d5bdc9ca8eecb696c5b4491ee08f40d6f98b37c0e612d6698401fba3392463ce5910785aa296610e4c2b83bd1a9239d2a4fa705bcafc23a68f0dc54e045e700b7089180e8d91bdc6a6d78e947edf3e4072336de563d1e5c2cf44159a4b455df0ae4b238ca7964780a91ca573b74dbc94084090c852a57c3866a553c18b358432f4c"}, {0xdd, 0x4b, "8b0f27a52e4db61ce5d3d1f65edcbe02569c1c9444fe0107c95ef36fbb647eb5d36597f21962dc529ddc1fc40d2a827cce4ab3d6d087fb9f20dbc0e2beaf4ed1ae87c67d723089891a25ba"}, {0xdd, 0x20, "5d28adceded9421ab115379536abbdc1c9ad197094b8ef7cc10d8d7ad3f40ec1"}, {0xdd, 0xc1, "bde6cb8c1511f5a8e7a91a509f7a65257415ebc32cd9d1edf1a9bb0c822df26b5e3fd451b24be57f8b80fd2bc737d4fd9b2527981b73330c75234abb9b09767d68c10844bef89649609c1e24d3181d7676a3c1339b1a3736491c0975bc6c5c7677fba2826f33736d8390d61fef3387ba5c53cf074abceff3f89d04c6a13e28a79de1d6d90b603d9f79164a2ced3711c7b8cd99ab5f7cd55d80026f832015adefa015722326228d3bfd914e3c601a63d5ed9e9b287f311a310314ad1f2f7feddd04"}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x11}, 0x20000040)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r9 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r10=>0xffffffffffffffff})
r11 = epoll_create1(0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket(0x200000000000011, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
pselect6(0x73, &(0x7f00000001c0)={0x300}, 0x0, &(0x7f00000002c0)={0x3fe}, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r9, &(0x7f0000000000)={0xa0000001})
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000040)={0x2004})
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r8, 0x0)
r12 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r12, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
accept(r8, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)
sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x20000010)

1.180438556s ago: executing program 2 (id=1676):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$key(0xf, 0x3, 0x2)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x622, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5}, 0x50)
pipe(&(0x7f0000000600)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c)
pipe(&(0x7f0000000500)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f0000000140)="1053fdd212ecfe0480c5feb02720613a28a473e5bcf76a6b5001e61cfa60541031f276459d6656c50e95155fed4127da389aac009f021f3019b047d04dc02a6c2ad9d60114cc6c550c4f9f522e802bdd5bf7c62700d4ccce06d3", &(0x7f00000001c0)=@tcp=r4}, 0x20)
sendmsg$key(r1, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
socket(0x8, 0x3, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r7)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r8, 0x0)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r10 = accept(r8, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r10, @ANYRES16=r6, @ANYRESHEX], 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x20040811)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="040100001a00210a0000000000000000ac1414bb000000000000000000000000ac141427000000000000000000000000000000004e220000000000006c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000040000000000003c00000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000008d8d00000000000000000000000000000000000000000000ffffffff02000000390000000000000014000e00fe800000000000000000000000000017"], 0x104}}, 0x810)
r12 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'bond0\x00', <r13=>0x0})
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r14, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r13, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xe}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x7, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x20000010)

930.522343ms ago: executing program 3 (id=1677):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003c80)="f50cb6", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{0x0}], 0x1}}], 0x3, 0x8011)
recvmmsg(r0, &(0x7f000000a400)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001c80)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x10120, 0x0)
shutdown(r0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
socket(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @default]}, 0x48)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0x1, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0xfffffffffffffe5c, 0x2, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
shutdown(r4, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={<r9=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f00000000c0)={0x0, 0xa}, 0x8)
listen(r2, 0x80)
accept$netrom(r2, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)

560.262179ms ago: executing program 0 (id=1678):
r0 = socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000100)={0x1, [<r3=>0x0]}, &(0x7f0000000140)=0x8)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={r3, @in={{0x2, 0x4e21, @broadcast}}}, 0x84)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c0001041b0200000000000002000000", @ANYRES32=r2, @ANYBLOB="000014000a0001000180c2000000000008000f0001"], 0x30}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, 0x0, 0x0) (async, rerun: 64)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
socket(0x8, 0x3, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r8) (async)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) (async, rerun: 64)
listen(r9, 0x0) (rerun: 64)
r10 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r10, &(0x7f00000000c0)={0x2, 0x4e1c, @empty}, 0x10)
accept(r9, 0x0, 0x0) (async, rerun: 32)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) (rerun: 32)
sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x20000010)

559.677702ms ago: executing program 0 (id=1679):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x11, 0x3, 0x4000000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'ip6gretap0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)={0x100, 0x25, 0x0, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x8, 0xbe, 0x0, 0x0, @uid}, @generic="47df1cb7715c20dcf54f25c456000000000000000000", @generic="f95bfc12542492ba5c2a614c966a1f54496443d08f9d1c7a817b28ab4f64a1dda07fbde4b560194272f6d1a0bc7574a04c232bd38a3dfb7e39ac089c9999abddef6fb58eafdd9b3d0cb84a0b481e5235e4a2a88526d31c1128f330de5e8d8a36677904f1c9f1dbc4d13d336ee95efb2303e583d46cf9f68c942f45f43a81c1a6a4077637c11173fd3c84ac5465e756ab9893370a47245a8895bed35e81de", @typed={0x14, 0xd6, 0x0, 0x0, @ipv6=@local}, @nested={0x8, 0x149, 0x0, 0x1, [@nested={0x4, 0x8c}]}, @generic="0b18c5338e024ec1d6d5cac9d6a74dc13612269e16"]}, 0x100}], 0x1}, 0x20040051)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r4, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0)
close(r3)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000680)=@gcm_256={{0x304}, "bdf794fb17c277d7", "df0d4b522148ed5d6436af05bc5e65961f0e3e5e5fb21e33cde7758219ba0fe4", "2e44a9ab", "b6c21b179a6ccc82"}, 0x38)
close(0x3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))

480.440152ms ago: executing program 0 (id=1680):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)
close(0xffffffffffffffff)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000005001e"], 0x24}}, 0x0)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r8, 0x6, 0x2b, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(0xffffffffffffffff, 0x9)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r10, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)

300.563116ms ago: executing program 2 (id=1681):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
syz_genetlink_get_family_id$nl80211(0x0, r0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="deaa00000000000071101900000000009500080000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) (async)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r4, 0x6, 0x1f, &(0x7f0000000140)="15", 0x1) (async)
setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000080)=0x401, 0x4) (async)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r5 = accept(r1, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) (async)
sendmsg$can_j1939(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)="087ea2dfc163244d79860424f578b3b35640b9b5727f9915ef621778087eaa293be402da584b2feb815f", 0x2a}, 0x1, 0x0, 0x0, 0x24000000}, 0x14) (async)
recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) (async)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@getlink={0x28, 0x12, 0x1, 0x70bd3d, 0x0, {0x7}, [@IFLA_EXT_MASK={0x8, 0x35, 0x40}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r9=>0x0})
connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e24, 0x25, @remote, 0x401}, 0x1c) (async)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010004000000fbdbdf253900000008000300", @ANYRES32=r9, @ANYBLOB="0c005a800400008004000382"], 0x28}, 0x1, 0x0, 0x0, 0x4000801}, 0x10) (async)
sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010127bd7000ffdbdf25514d12d6dee45c5a00000008000300", @ANYRES32=r9, @ANYBLOB="0a000600ffffffffffff000005008a00010000000a000600ffffffffffff0000"], 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x1)

298.336815ms ago: executing program 2 (id=1682):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000100)={'gre0\x00', <r3=>0x0, 0x8000, 0x1, 0x2, 0x3, {{0x13, 0x4, 0x1, 0x6, 0x4c, 0x66, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, {[@timestamp_prespec={0x44, 0x34, 0x64, 0x3, 0xf, [{@rand_addr=0x64010102, 0x9}, {@empty, 0xfffffffe}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd}, {@multicast1, 0x80000000}, {@loopback, 0x8}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x7}]}, @noop]}}}}})
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x44, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async, rerun: 64)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x8, 0x3, 0xa50, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x9d8, 0xffffffff, 0xffffffff, 0x9d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x73, 0x0, 0x0, 0x45}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, [], [0x0, 0xffffffff, 0xff000000], 'wg1\x00', 'gre0\x00'}, 0x0, 0x888, 0x8b0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x7fff, 0x1}, {0x8, 0x3}, {0xfffff7ec, 0x1}, {0xfff, 0xbd3626e1c8b1df09}, {0x5, 0x2}, {0xb34c, 0x3}, {0x2}, {0xe48b, 0x2}, {0x101, 0x2}, {0x5, 0x2}, {0x5}], [{0x400}, {0x6, 0x8001}, {0x401, 0x40}, {0x7fff}, {0xffffc1b1, 0x32de}, {0xfff, 0x8}, {0x2, 0x9}, {0x1, 0xbbca}, {0x83, 0x1}, {0x5, 0x7}, {0x3}], 0x1, 0x7}, {[{0x9, 0x3}, {0x6, 0x3}, {0x4, 0x3}, {0x1, 0x2}, {0x9, 0x1}, {0xfffffffa}, {0x0, 0x2}, {0x80000000, 0x3}, {0x80000001}, {0x8001, 0x2}, {0xff, 0x3}], [{0x7, 0x5}, {0x3, 0x6b6}, {0x4, 0x400}, {0x3}, {0x4, 0xfff}, {0x3ff, 0xe5d7}, {0x6, 0x3ff}, {0xa78, 0xffffffff}, {0xa9e1, 0x3}, {0x8, 0x1000}, {0xc7, 0xf385}], 0x6, 0x3}, {[{0x101, 0x2}, {0x9}, {0x3, 0x3}, {0x2, 0x3}, {0x48}, {0x9, 0x2}, {0x1, 0x2}, {0x7, 0x2}, {0x9}, {0x7, 0x1}, {0x0, 0x3}], [{0xfffffffb, 0x5}, {0x8, 0xa17}, {0x80, 0x4}, {0x8}, {0x3, 0x7}, {0x5e18, 0x7}, {0x4, 0x101}, {0x7, 0xfff}, {0xd, 0x7f}, {0x2, 0x2}, {0xfb3, 0xa94}], 0xb, 0x4}, {[{0x8, 0x1}, {0x4, 0x2}, {0x4e, 0xc781c4f1f9c1fa4f}, {0x8, 0x1}, {0x4e5, 0x2}, {0x3, 0x3}, {0x6, 0x1}, {0x7, 0x1}, {0x5, 0x2}, {0xfff}, {0x4}], [{0x9, 0x8001}, {0xffff, 0x4}, {0x7fff, 0xf}, {0x66d, 0x9}, {0x92, 0xb}, {0x3, 0x6}, {0x7, 0xfff}, {0x1, 0xff}, {0x1, 0x1}, {0x0, 0x8}, {0x1, 0xff}], 0xa}, {[{0x5, 0x2}, {0x7a3, 0x2}, {0x1, 0x3}, {0x100, 0x3}, {0x40}, {0x8d, 0x1}, {0x8, 0x3}, {0x9, 0x3}, {0x8, 0x2}, {0x1, 0x1}, {0x7}], [{0x854f, 0x6b}, {0x7, 0x7}, {0x6, 0x80}, {0x3, 0xffc00000}, {0x7}, {0x3, 0x6}, {0x2, 0xf17}, {0x25, 0x401}, {0x200, 0x84b}, {0x7fff, 0x80}, {0x3, 0x1}], 0x4, 0x8}, {[{0xc3d, 0x147d12363fe5c40a}, {0x64, 0x1}, {0xf, 0x3}, {0x5, 0x1}, {0x7fffffff, 0x2}, {0x5}, {0x2af0, 0x2}, {0x1bd6, 0x2}, {0x1, 0x2}, {0x7, 0x1}, {0x7, 0x2}], [{0x92b, 0x1ff}, {0x1, 0xf458}, {0x5, 0x3}, {0x84, 0x1}, {0xe923, 0x7fff}, {0x4, 0xe}, {0x3, 0x6}, {0xad3f, 0x59f}, {0x4, 0xfffffffc}, {0x6}, {0x5, 0x6f}], 0x9}, {[{0x8}, {0x2f, 0x1}, {0x7, 0x1}, {0x0, 0x2}, {0x3, 0x3}, {0x0, 0x1}, {0x1, 0x3}, {0x8, 0x3}, {0x7}, {0x2}, {0x2, 0x3}], [{0x101, 0x80000000}, {0x1, 0x9}, {0x40, 0xff}, {0x4, 0x2}, {0x5, 0x6}, {0x2, 0x5}, {0x0, 0x3}, {0xe, 0x5}, {0x6, 0x1ff}, {0xc, 0x7}, {0x1, 0x4}], 0xb, 0x7}, {[{0x8c, 0x1}, {0xd}, {0x10000, 0x2}, {0x8, 0x2}, {0x3, 0x3}, {0x0, 0x3}, {0x1ff, 0x1}, {}, {0xc, 0x1}, {0xf0f}, {0xf629}], [{0x4, 0x5}, {0x35f7, 0x1}, {0x401, 0xf6}, {0x94, 0xd16}, {0x8, 0x5}, {0x35, 0x4929}, {0x8001, 0x5}, {0x1000, 0x9}, {0x9f, 0x65}, {0x9, 0x4}, {0x9, 0xf0a9}], 0x1, 0x4}, {[{0x9, 0x1}, {0x9, 0x2}, {0x7, 0x1}, {0x4, 0x4adbb8db8b6f3087}, {0x3}, {0x3, 0x3}, {0x7ff}, {0x7, 0x1}, {0x10000, 0x3}, {0x0, 0x2}, {0x80000000, 0x1}], [{0xf767, 0x8}, {0xc, 0x5}, {0x9, 0x8}, {0x6, 0xb23}, {0x101, 0x4}, {0xfffffff7, 0xb98}, {0x10001, 0x8f}, {0x9, 0xa83}, {0xd, 0x1}, {0x4, 0xe00}, {0x7, 0x444}], 0x6, 0x4}, {[{0x2, 0x3}, {0x2}, {0x26914786, 0x3}, {0x3}, {0xd7f, 0x1}, {0x7fffffff}, {0xf}, {0x4, 0x2}, {0x8, 0x1}, {0x4, 0x3}, {0xe, 0x1}], [{0xb59, 0x6}, {0x4, 0x70c063f5}, {0x2, 0xfffffffe}, {0x5, 0x6}, {0x10000, 0x872}, {0x6, 0x8}, {0xffff, 0x7}, {0x7, 0x4}, {0x6, 0x10}, {0xfff, 0xa}, {0x81, 0x4}], 0xb, 0x4}, {[{0x200, 0x1}, {0x2, 0x3}, {0xa, 0x1}, {0x3ff, 0x1}, {0x7}, {0x1, 0x2}, {0x6, 0x3}, {0x7}, {0x92, 0x3}, {0x6, 0x1}, {0x7fffffff, 0x2}], [{0x3, 0xbbb9}, {0x4, 0x400}, {0xdec, 0x9}, {0x7, 0x1d}, {0x0, 0x9a}, {0x1, 0x7}, {0x1, 0xf580}, {0x4, 0x9f}, {0x2, 0x4}, {0x5, 0x7}, {0xfff, 0x1}], 0x5, 0x7}], 0x4, 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xab0) (rerun: 64)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010)
pipe(&(0x7f00000045c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}) (async)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) (async)
vmsplice(r6, &(0x7f0000000380)=[{&(0x7f00000003c0)="ce9ada41c8f5", 0x6}], 0x1, 0x1) (async, rerun: 32)
r8 = socket$alg(0x26, 0x5, 0x0) (rerun: 32)
bind$alg(r8, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async, rerun: 64)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async, rerun: 64)
r9 = accept4(r8, 0x0, 0x0, 0x0)
splice(r5, 0x0, r9, 0x0, 0x2, 0xe)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) (async)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}}, 0x4010) (async, rerun: 64)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18007c070108000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) (rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r10}, 0x10) (async, rerun: 32)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 32)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
writev(r11, &(0x7f00000003c0)=[{&(0x7f0000000140)="2e9b5b00070ed3e03dd65193dfb6c575963f86dd606712e90032040003000000013e9c6d30ba44c068586dbd753c000000eaebfd2607", 0x36}, {&(0x7f0000000100)="b700"/12, 0xc}, {&(0x7f0000000040)}, {&(0x7f0000000040)="3de496b26cb156fc17de651bb0059979575c10b71057fbfd852720c6e5289eca40ab309686d254294c897675e9545fd0c4559f374d", 0x35}, {&(0x7f0000000440)="42569e24e088cf56a9bb2f2ad9cb95ec1c0bf4d6aa16b931209947fc55a13ccabe2774b4c08430f730e97576c072cad2d2fc782f45884ed5998c7cd3f2d2e7fb992e994dd2ccdf8e78182bb603f17fec26bbf743506dee0e121c25018347e315820defb195585ed4a08482fa5b982a989cbe", 0x72}, {&(0x7f0000000280)="da9e11b5cdcb2aa5a2928c2c7208a8cd9ff31b8700d7c0a2f59093f99db10f4eb6de4823036b570d3b4e49e3a7e82c2ceca1b8fe72840d8d2c95810bcd61a361d4d5ecb54356e5669cde20b2af4243be92b5533f5036e41a88fe0bb69f9d9a70f524a45d5bb4bd75bd416c4410c99aba391de283839032302c542e6a2b93f6dc5b6a17093b4d9c0cc66cd22f13030187632815cf48d2422a5c3407a1b72ed9d59258dbafeebd", 0xa6}, {0x0}, {&(0x7f0000000340)="2ce06e71ac3f5c5980c1b529901ac8307bbde18620b55c321ff60def4b31399bacb7540deeece3bc214b662648a021e8b6663fd356ac742a4ebe2b71ab853244d8c84ec68b8ae418d8a00b79b53efc736d3df53078ed62bd59f9c87c62", 0x5d}], 0x8) (async, rerun: 64)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) (async, rerun: 64)
bind$inet(r0, 0x0, 0x0) (async)
close(0x3)

239.832543ms ago: executing program 2 (id=1683):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e25}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000000000000010000840000000000000000020000000000000700000000000000060200"], 0x0, 0x3e}, 0x28)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x154, r7, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}, @NL80211_ATTR_VENDOR_DATA={0x6b, 0xc5, "469c81408138f4a546793a6cea9dc2e98ccd0bfe6d769bf64e4e8595c752545b54924e74c04ffba24a5f436685530d9c2ba856200b5d4c254e7e5db1006c131772dec824ade971d08064860047a7e2e72aa75500fcef62269e3b4b074dfb4b3489a05bb765fd5f"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7fff}, @NL80211_ATTR_VENDOR_DATA={0xa5, 0xc5, "7484e3c3b5da9b56412695a6b7a9649af6681d42f659953f656015ba4689170e99fb3b5186be6637e4cd484260ddfa392ab55184f8cc6c5b6f676d776253a4cda4d736853684574b01b3f23dd0d456aac11164042563f62159f7afcb7ebbfc5f83b9f2029ce9bb943c9462fc8d9f49302821037da38116dec5788e6944a13858a7a74f6a97438c097de23799ea5e3e9528933414bc2075a93a8d9302b408f7ba2b"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_DATA={0x9, 0xc5, "e55db19ee6"}]}, 0x154}, 0x1, 0x0, 0x0, 0x8800}, 0x8000)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r9, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x19}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8004)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r10, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)
close(0xffffffffffffffff)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r11 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r11, 0x6, 0x2b, 0x0, 0x0)
listen(0xffffffffffffffff, 0x9)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r13, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)

236.373284ms ago: executing program 2 (id=1684):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
r4 = socket(0x8, 0x3, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$tipc(r4, &(0x7f00000006c0)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x4, 0x4}}, 0x10, &(0x7f0000000580)=[{&(0x7f00000001c0)="f2f2f124594a75cd5e96587b4da6d77d957e42c0abd685acfca04e77a8558230fd4899480870fe6d8760ede138cd044452bef82e2c63d27880fd7534b84967ef70fbc40ee6186f30039b69dadde2818e14ca902bbfcaf40c7370eb8f33841a6fc03232af9b5603a37537bb505c5c0994c0eb5ed5ec62c0cd805aaa41fdfc1163e6dae7d2b53a66981da121bd755b1a39", 0x90}, {&(0x7f0000000280)="82b795422ea8e3070b287dc395220d04906935d343e7654dde7b44f59988dfddd73046027cc0565e8748020a274b9991c37d55807a737ad719f74626c882e4c3828aa6a84933ffc107caf2f6277a0fadf76aaa0efd70fdf6db38c8ab22a64a68461456853428771a3e9a3574876f5c39799fa21681880ff293578d7cd16de78bc7fbee63862a9618ab13a59e76b1f62a300c942b8909ee0e3a3070acbeb2a67c7e725fb447a5911615442047dd28b78b1a13e40af56a98d0f9ba2ca1008f62d478", 0xc1}, {&(0x7f0000000380)="39ef2f6065f51fdb558b8551c88b86a9dbe534d2d904c7f951831d0fe00a05e0ebdf9e442a8a03a7b4c1245f79acee5fa218c7a918be15d88d6de93f81830ee51b4cf654b0b1eed164a1ec1f4e892a1efe826c555601e55a5931daa3299889ba48ca7ce0d9f57494ad01931d2ef4b58b2cf07548be38ac4451c0c9a410e8deac75742a54413e816aa11a98e1a9b7cdc5d877672579a587c993a14e68df6c9e28665d4a2c89b57efdbb512091a353ec88cc194eddf00aa6d0838ddb5b89a35d858fbbd9c85f85e9ddade6ef477f3668583848645fc8d8e25cc3e7349db7fe", 0xde}, {&(0x7f0000000480)="284dcb58da3df350ce57f64693b7d9501ddb94bc64c702dfab481fabc67697deed7d7bcad8aebd94f280872dc2c2f63dd047abae0bcc9d70d3ce46fd9e1033a67b34ac7b2f86f8f7991c6517500972684ccc807df88e47f973b9528bdc7f67df9f8efc61612505488931f82599f23ee9b7b6d13193337ce52f3117df187e36926f6dfc88db1b551b8b63893f809c2c2f8086cc3d36fe09549860690990b5830c869bb646bb490f2b2ca89b594b4f77c91796e8ca9c58bb65f1dc1b993efafb6ebb7f734ef7681deca1a5ded2153fe20fcbaa29a8ceab18859a2ef7c2ea5669", 0xdf}], 0x4, &(0x7f00000005c0)="25f215ce1c1d1f9fd9de24d8f80a92f3bfa5abb26091a971d225dfb18c370a6b29bbce0ad7d2952b07620d21c9dd1e280421865f999a379e0a9c19ec02c737192ff2d94e713ce4c2be4dddf720eee011d257547f2b7b7d48831c264820d3e8f3be53a9434e66feff5391ca9a3d94896fdcecdb45ab9d159bd777055018f962e2c49d3f6c6fb0ffd36570e774d1777087b68e032694ab5daa444e782c2d18181bc6516e88086b80f9a365c2591cc642470050d46cd8399a44944560870ccec4b15740ddb3ca78f8d915f8ef579cd42fb4755b94d67c", 0xd5, 0x44040}, 0x20002014)
close(r5)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r6, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x8, 0x0, 0x0, 0x9}, 0xe)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000000000)=0x6, 0x4)
shutdown(r6, 0x1)
recvmmsg(r6, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0)
recvfrom(r6, 0x0, 0x0, 0x121, 0x0, 0x0)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r7, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
accept(r7, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)
sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x20000010)

746.181µs ago: executing program 3 (id=1685):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', <r1=>0x0})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, 0x0, 0x70f, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r0)

0s ago: executing program 3 (id=1686):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) (async)
listen(r0, 0x0) (async)
accept4(r0, 0x0, 0x0, 0x80800) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
unshare(0x6a040000)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async)
r4 = accept(r2, 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[], 0x6c}}, 0x0)

kernel console output (not intermixed with test programs):

5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.326524][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.330261][ T5839] bridge_slave_0: entered allmulticast mode
[   56.333383][ T5839] bridge_slave_0: entered promiscuous mode
[   56.338658][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.341241][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.344031][ T5839] bridge_slave_1: entered allmulticast mode
[   56.347305][ T5839] bridge_slave_1: entered promiscuous mode
[   56.379788][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   56.403666][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.417415][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.486094][ T5839] team0: Port device team_slave_0 added
[   56.504236][ T5839] team0: Port device team_slave_1 added
[   56.543667][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.546131][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.549286][ T5842] bridge_slave_0: entered allmulticast mode
[   56.552530][ T5842] bridge_slave_0: entered promiscuous mode
[   56.556392][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.559041][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.561557][ T5842] bridge_slave_1: entered allmulticast mode
[   56.564421][ T5842] bridge_slave_1: entered promiscuous mode
[   56.572522][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.575036][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.583727][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.615660][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.618342][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.626891][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.633713][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.640740][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.681875][ T5842] team0: Port device team_slave_0 added
[   56.688069][ T5842] team0: Port device team_slave_1 added
[   56.690642][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.693222][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.695784][ T5848] bridge_slave_0: entered allmulticast mode
[   56.699913][ T5848] bridge_slave_0: entered promiscuous mode
[   56.703606][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.705979][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.708531][ T5848] bridge_slave_1: entered allmulticast mode
[   56.712227][ T5848] bridge_slave_1: entered promiscuous mode
[   56.773271][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.775679][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.787395][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.795820][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.817640][ T5839] hsr_slave_0: entered promiscuous mode
[   56.820436][ T5839] hsr_slave_1: entered promiscuous mode
[   56.823901][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.826416][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.836002][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.842534][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.895535][ T5848] team0: Port device team_slave_0 added
[   56.901391][ T5848] team0: Port device team_slave_1 added
[   56.960509][ T5842] hsr_slave_0: entered promiscuous mode
[   56.964041][ T5842] hsr_slave_1: entered promiscuous mode
[   56.967753][ T5842] debugfs: 'hsr0' already exists in 'hsr'
[   56.970219][ T5842] Cannot create hsr debugfs directory
[   56.973115][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.975838][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.985462][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.999119][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.001474][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.011196][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.121283][ T5848] hsr_slave_0: entered promiscuous mode
[   57.124897][ T5848] hsr_slave_1: entered promiscuous mode
[   57.128098][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   57.130021][ T5848] Cannot create hsr debugfs directory
[   57.303618][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.329592][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.341335][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.347463][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.424863][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.435196][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.445411][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.460459][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.522643][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.529133][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.542170][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.549219][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.599646][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.626399][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   57.642298][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.645791][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.665405][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.668891][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.720605][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.765775][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   57.777857][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.782377][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.784824][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.796073][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.798666][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.825948][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   57.850280][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.853064][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.866016][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.869094][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.932994][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.969048][ T5843] Bluetooth: hci2: command tx timeout
[   57.971410][ T5843] Bluetooth: hci1: command tx timeout
[   57.971729][ T5845] Bluetooth: hci0: command tx timeout
[   58.002100][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.074616][ T5839] veth0_vlan: entered promiscuous mode
[   58.087208][ T5839] veth1_vlan: entered promiscuous mode
[   58.121088][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.134820][ T5839] veth0_macvtap: entered promiscuous mode
[   58.141173][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.150979][ T5839] veth1_macvtap: entered promiscuous mode
[   58.189815][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.202126][ T5842] veth0_vlan: entered promiscuous mode
[   58.216267][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.226415][ T5842] veth1_vlan: entered promiscuous mode
[   58.245729][ T5872] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.251791][ T5872] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.255445][ T5872] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.263690][ T5872] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.270173][ T5848] veth0_vlan: entered promiscuous mode
[   58.296859][ T5848] veth1_vlan: entered promiscuous mode
[   58.333033][ T5842] veth0_macvtap: entered promiscuous mode
[   58.362213][ T5842] veth1_macvtap: entered promiscuous mode
[   58.381635][ T5848] veth0_macvtap: entered promiscuous mode
[   58.406181][ T5848] veth1_macvtap: entered promiscuous mode
[   58.417936][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.421237][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.447450][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.460217][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.482156][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.506362][ T5866] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.511437][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.515809][ T5866] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.516934][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.525670][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.537437][ T5866] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.547806][ T5866] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.551720][ T5872] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.563768][ T5872] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.577462][ T5872] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.594998][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.598211][ T5872] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.698312][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.700998][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.751817][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.754410][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.755354][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.779940][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.828385][ T4997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.832341][ T4997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.965822][ T5919] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.086339][ T5924] netlink: 'syz.1.5': attribute type 1 has an invalid length.
[   59.472251][ T5940] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8'.
[   59.478358][ T5940] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8'.
[   59.482145][ T5940] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8'.
[   59.486252][ T5940] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8'.
[   59.629301][ T5950] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11'.
[   59.632860][ T5950] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11'.
[   59.637906][ T5950] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11'.
[   59.798503][ T5955] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13'.
[   59.802990][ T5955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13'.
[   59.806889][ T5955] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13'.
[   59.861884][ T5957] Zero length message leads to an empty skb
[   59.900401][ T5957] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.014183][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.019423][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.047416][   T55] Bluetooth: hci1: command tx timeout
[   60.049052][ T5845] Bluetooth: hci2: command tx timeout
[   60.056907][ T5845] Bluetooth: hci0: command tx timeout
[   60.089947][ T5961] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.097730][ T5961] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.183585][ T5961] syz.1.15 (5961) used greatest stack depth: 19864 bytes left
[   60.188148][ T5866] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.191912][ T5866] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.197550][ T5866] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.201516][ T5866] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.281777][ T5967] syzkaller1: entered promiscuous mode
[   60.284660][ T5967] syzkaller1: entered allmulticast mode
[   60.868493][ T5957] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.288624][ T5957] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.360623][ T5957] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.432067][ T5866] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.444630][ T5866] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.454957][ T5866] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.467008][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.503235][ T5979] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   61.558335][ T5981] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   62.054589][ T5998] netlink: 'syz.1.26': attribute type 15 has an invalid length.
[   62.127193][ T5845] Bluetooth: hci0: command tx timeout
[   62.127358][   T55] Bluetooth: hci2: command tx timeout
[   62.129706][ T5843] Bluetooth: hci1: command tx timeout
[   62.510579][ T6002] netlink: 'syz.2.27': attribute type 1 has an invalid length.
[   62.514188][ T6002] netlink: 'syz.2.27': attribute type 2 has an invalid length.
[   62.519089][ T6002] netlink: 'syz.2.27': attribute type 1 has an invalid length.
[   62.522513][ T6002] netlink: 'syz.2.27': attribute type 2 has an invalid length.
[   64.207236][ T5845] Bluetooth: hci0: command tx timeout
[   64.210134][ T5843] Bluetooth: hci1: command tx timeout
[   64.216867][ T5843] Bluetooth: hci2: command tx timeout
[   64.304704][ T6070] netlink: 'syz.0.46': attribute type 4 has an invalid length.
[   64.508902][ T6079] __nla_validate_parse: 44 callbacks suppressed
[   64.508916][ T6079] netlink: 36 bytes leftover after parsing attributes in process `syz.0.47'.
[   64.515281][ T6079] netlink: 16 bytes leftover after parsing attributes in process `syz.0.47'.
[   64.518981][ T6079] netlink: 36 bytes leftover after parsing attributes in process `syz.0.47'.
[   64.522325][ T6079] netlink: 36 bytes leftover after parsing attributes in process `syz.0.47'.
[   64.529405][ T6079] netlink: 'syz.0.47': attribute type 1 has an invalid length.
[   64.532710][ T6079] netlink: 224 bytes leftover after parsing attributes in process `syz.0.47'.
[   65.450409][ T6095] netlink: 'syz.0.51': attribute type 39 has an invalid length.
[   65.626488][ T6094] netlink: 36 bytes leftover after parsing attributes in process `syz.0.51'.
[   65.633852][ T6094] netlink: 16 bytes leftover after parsing attributes in process `syz.0.51'.
[   65.638446][ T6094] netlink: 36 bytes leftover after parsing attributes in process `syz.0.51'.
[   65.641525][ T6094] netlink: 36 bytes leftover after parsing attributes in process `syz.0.51'.
[   65.677588][ T6104] netlink: 'syz.1.53': attribute type 5 has an invalid length.
[   65.746104][ T6111] netlink: 28 bytes leftover after parsing attributes in process `syz.2.55'.
[   65.750948][ T6111] netlink: 'syz.2.55': attribute type 7 has an invalid length.
[   65.754702][ T6111] netlink: 'syz.2.55': attribute type 8 has an invalid length.
[   65.768735][ T6111] team0: entered promiscuous mode
[   65.771328][ T6111] team_slave_0: entered promiscuous mode
[   65.773545][ T6111] team_slave_1: entered promiscuous mode
[   65.777639][ T6111] bond0: entered promiscuous mode
[   65.779737][ T6111] bond_slave_0: entered promiscuous mode
[   65.782035][ T6111] bond_slave_1: entered promiscuous mode
[   65.785290][ T6111] team0: left promiscuous mode
[   65.787333][ T6111] team_slave_0: left promiscuous mode
[   65.789450][ T6111] team_slave_1: left promiscuous mode
[   65.792193][ T6111] bond0: left promiscuous mode
[   65.794836][ T6111] bond_slave_0: left promiscuous mode
[   65.799863][ T6111] bond_slave_1: left promiscuous mode
[   66.723803][ T6137] netlink: 'syz.1.61': attribute type 30 has an invalid length.
[   66.740881][ T6137] netlink: 'syz.1.61': attribute type 30 has an invalid length.
[   66.741168][ T5866] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   66.747719][ T5866] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   66.756390][ T5866] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   66.763288][ T5866] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   67.594165][ T6156] IPVS: Error connecting to the multicast addr
[   67.643252][ T6161] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   68.236306][ T5872] tipc: Subscription rejected, illegal request
[   68.578278][ T6181] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   68.587003][ T6181] netlink: 'syz.1.74': attribute type 4 has an invalid length.
[   68.743004][ T6192] syz.1.77 uses obsolete (PF_INET,SOCK_PACKET)
[   68.755202][ T6192] tipc: Started in network mode
[   68.758385][ T6192] tipc: Node identity fc0, cluster identity 4711
[   68.760688][ T6192] tipc: Node number set to 4032
[   69.626623][ T6214] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe
[   69.788550][ T6224] 8021q: adding VLAN 0 to HW filter on device bond1
[   69.850598][ T6224] netlink: 'syz.2.86': attribute type 2 has an invalid length.
[   69.854390][ T6224] __nla_validate_parse: 37 callbacks suppressed
[   69.854407][ T6224] netlink: 1184 bytes leftover after parsing attributes in process `syz.2.86'.
[   69.915191][ T6228] netlink: 36 bytes leftover after parsing attributes in process `syz.2.86'.
[   69.918587][ T6228] netlink: 16 bytes leftover after parsing attributes in process `syz.2.86'.
[   69.922220][ T6228] netlink: 36 bytes leftover after parsing attributes in process `syz.2.86'.
[   69.925597][ T6228] netlink: 36 bytes leftover after parsing attributes in process `syz.2.86'.
[   70.026110][ T6230] netlink: 64 bytes leftover after parsing attributes in process `syz.0.87'.
[   70.046139][ T6230] netlink: 64 bytes leftover after parsing attributes in process `syz.0.87'.
[   70.343715][ T6242] netlink: 36 bytes leftover after parsing attributes in process `syz.0.90'.
[   70.347411][ T6242] netlink: 16 bytes leftover after parsing attributes in process `syz.0.90'.
[   70.350616][ T6242] netlink: 36 bytes leftover after parsing attributes in process `syz.0.90'.
[   71.251714][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   72.050023][ T6293] netlink: 'syz.0.103': attribute type 4 has an invalid length.
[   73.084334][   T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[   73.087520][   T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[   73.090646][   T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[   73.094351][   T13] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[   73.865291][ T6319] trusted_key: syz.0.110 sent an empty control message without MSG_MORE.
[   73.944935][ T6323] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[   73.949165][ T6323] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[   75.413140][ T6354] tipc: Started in network mode
[   75.414766][ T6354] tipc: Node identity 128752044135, cluster identity 4711
[   75.417973][ T6354] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.447049][ T6354] syzkaller0: entered promiscuous mode
[   75.448942][ T6354] syzkaller0: entered allmulticast mode
[   75.451215][ T6354] tipc: Resetting bearer <eth:syzkaller0>
[   75.513222][ T6355] __nla_validate_parse: 36 callbacks suppressed
[   75.513242][ T6355] netlink: 36 bytes leftover after parsing attributes in process `syz.2.120'.
[   75.520206][ T6355] netlink: 16 bytes leftover after parsing attributes in process `syz.2.120'.
[   75.523645][ T6355] netlink: 36 bytes leftover after parsing attributes in process `syz.2.120'.
[   75.527875][ T6355] netlink: 36 bytes leftover after parsing attributes in process `syz.2.120'.
[   75.789905][ T6369] netlink: 36 bytes leftover after parsing attributes in process `syz.0.123'.
[   75.795801][ T6369] netlink: 16 bytes leftover after parsing attributes in process `syz.0.123'.
[   75.802265][ T6369] netlink: 36 bytes leftover after parsing attributes in process `syz.0.123'.
[   75.807398][ T6369] netlink: 36 bytes leftover after parsing attributes in process `syz.0.123'.
[   76.068318][ T6375] netlink: 36 bytes leftover after parsing attributes in process `syz.1.124'.
[   76.072263][ T6375] netlink: 16 bytes leftover after parsing attributes in process `syz.1.124'.
[   76.230342][ T6353] tipc: Resetting bearer <eth:syzkaller0>
[   76.521972][ T5909] tipc: Node number set to 1404195332
[   77.439534][ T6353] tipc: Disabling bearer <eth:syzkaller0>
[   77.772555][ T5909] IPVS: starting estimator thread 0...
[   77.775345][ T6414] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[   77.887078][ T6416] IPVS: using max 62 ests per chain, 148800 per kthread
[   78.062499][ T6427] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[   78.715928][ T6454] netlink: 'syz.0.141': attribute type 4 has an invalid length.
[   79.309202][ T6472] netlink: 'syz.2.146': attribute type 4 has an invalid length.
[   79.333940][ T6472] : renamed from bond0 (while UP)
[   79.563661][ T6472] bond0 (unregistering): Released all slaves
[   80.535523][ T6501] __nla_validate_parse: 23 callbacks suppressed
[   80.535542][ T6501] netlink: 36 bytes leftover after parsing attributes in process `syz.0.152'.
[   80.542226][ T6501] netlink: 16 bytes leftover after parsing attributes in process `syz.0.152'.
[   80.545583][ T6501] netlink: 36 bytes leftover after parsing attributes in process `syz.0.152'.
[   80.550378][ T6501] netlink: 36 bytes leftover after parsing attributes in process `syz.0.152'.
[   80.586558][ T6500] netlink: 32 bytes leftover after parsing attributes in process `syz.1.153'.
[   81.211900][ T6523] warning: `syz.2.158' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   81.488501][ T1269] cfg80211: failed to load regulatory.db
[   81.522667][ T6540] netlink: 24 bytes leftover after parsing attributes in process `syz.0.161'.
[   81.653552][ T6546] netlink: 36 bytes leftover after parsing attributes in process `syz.2.163'.
[   81.658178][ T6546] netlink: 16 bytes leftover after parsing attributes in process `syz.2.163'.
[   81.663388][ T6546] netlink: 36 bytes leftover after parsing attributes in process `syz.2.163'.
[   81.667148][ T6546] netlink: 36 bytes leftover after parsing attributes in process `syz.2.163'.
[   81.746287][ T6551] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.754993][ T6551] bond0: (slave rose0): Enslaving as an active interface with an up link
[   81.762724][ T6549] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   81.772430][ T6549] netlink: 'syz.1.164': attribute type 6 has an invalid length.
[   81.901072][ T6565] netlink: 'syz.2.168': attribute type 4 has an invalid length.
[   84.483886][ T6659] netlink: 'syz.1.191': attribute type 4 has an invalid length.
[   85.250179][ T6674] bridge_slave_0: left allmulticast mode
[   85.252812][ T6674] bridge_slave_0: left promiscuous mode
[   85.255101][ T6674] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.264129][ T6674] bridge_slave_1: left allmulticast mode
[   85.266223][ T6674] bridge_slave_1: left promiscuous mode
[   85.270374][ T6674] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.278350][ T6674] bond0: (slave bond_slave_0): Releasing backup interface
[   85.285180][ T6674] bond0: (slave bond_slave_1): Releasing backup interface
[   85.294295][ T6674] team0: Port device team_slave_0 removed
[   85.302396][ T6674] team0: Port device team_slave_1 removed
[   85.305223][ T6674] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   85.310092][ T6674] batman_adv: batadv0: Removing interface: batadv_slave_0
[   85.315287][ T6674] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   85.318808][ T6674] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.705907][ T6697] __nla_validate_parse: 39 callbacks suppressed
[   85.705945][ T6697] netlink: 36 bytes leftover after parsing attributes in process `syz.1.200'.
[   85.712136][ T6697] netlink: 16 bytes leftover after parsing attributes in process `syz.1.200'.
[   85.716110][ T6697] netlink: 36 bytes leftover after parsing attributes in process `syz.1.200'.
[   85.719956][ T6697] netlink: 36 bytes leftover after parsing attributes in process `syz.1.200'.
[   86.294605][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.201'.
[   86.294621][ T6700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.201'.
[   86.310263][ T6699] netlink: 44 bytes leftover after parsing attributes in process `syz.0.201'.
[   86.316296][ T6699] netlink: 43 bytes leftover after parsing attributes in process `syz.0.201'.
[   86.322839][ T6699] netlink: 43 bytes leftover after parsing attributes in process `syz.0.201'.
[   86.331928][ T6700] netlink: 44 bytes leftover after parsing attributes in process `syz.0.201'.
[   87.584872][ T6752] netlink: zone id is out of range
[   87.590982][ T6752] netlink: del zone limit has 8 unknown bytes
[   88.615779][ T6787] lo: entered allmulticast mode
[   88.641774][ T6786] lo: left allmulticast mode
[   89.014653][ T6816] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.058840][ T6820] vlan0: entered promiscuous mode
[   89.087957][ T6816] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.152875][ T6816] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.222293][ T6816] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.298148][ T5872] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.313988][ T5872] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.339877][ T5872] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.344185][ T5872] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.758252][ T6886] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   91.898559][ T6914] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   92.001813][ T6907] __nla_validate_parse: 35 callbacks suppressed
[   92.001827][ T6907] netlink: 36 bytes leftover after parsing attributes in process `syz.0.248'.
[   92.025296][ T6907] netlink: 16 bytes leftover after parsing attributes in process `syz.0.248'.
[   92.029880][ T6907] netlink: 36 bytes leftover after parsing attributes in process `syz.0.248'.
[   92.033099][ T6907] netlink: 36 bytes leftover after parsing attributes in process `syz.0.248'.
[   92.111600][ T6918] netlink: 36 bytes leftover after parsing attributes in process `syz.2.253'.
[   92.114868][ T6918] netlink: 16 bytes leftover after parsing attributes in process `syz.2.253'.
[   92.125568][ T6918] netlink: 36 bytes leftover after parsing attributes in process `syz.2.253'.
[   92.130196][ T6918] netlink: 36 bytes leftover after parsing attributes in process `syz.2.253'.
[   92.951498][ T6938] netlink: 36 bytes leftover after parsing attributes in process `syz.2.257'.
[   92.955761][ T6938] netlink: 16 bytes leftover after parsing attributes in process `syz.2.257'.
[   95.169648][ T6997] netlink: 'syz.1.271': attribute type 4 has an invalid length.
[   95.218617][ T6999] netlink: 'syz.1.272': attribute type 4 has an invalid length.
[   95.534520][ T7008] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   95.537322][ T7008] IPv6: NLM_F_CREATE should be set when creating new route
[   95.539838][ T7008] IPv6: NLM_F_CREATE should be set when creating new route
[   95.549625][ T7008] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   95.743996][ T7027] netlink: 'syz.1.279': attribute type 4 has an invalid length.
[   95.830767][ T7034] netlink: 'syz.1.280': attribute type 1 has an invalid length.
[   96.580874][ T7079] netlink: 'syz.1.286': attribute type 4 has an invalid length.
[   97.127035][ T7110] __nla_validate_parse: 42 callbacks suppressed
[   97.127049][ T7110] netlink: 36 bytes leftover after parsing attributes in process `syz.1.293'.
[   97.134491][ T7110] netlink: 16 bytes leftover after parsing attributes in process `syz.1.293'.
[   97.138479][ T7110] netlink: 36 bytes leftover after parsing attributes in process `syz.1.293'.
[   97.141377][ T7110] netlink: 36 bytes leftover after parsing attributes in process `syz.1.293'.
[   97.332344][ T7112] netlink: 'syz.2.294': attribute type 4 has an invalid length.
[   97.377007][ T7114] netlink: 40 bytes leftover after parsing attributes in process `syz.2.295'.
[   97.379920][ T7114] netlink: 48 bytes leftover after parsing attributes in process `syz.2.295'.
[   97.382884][ T7114] netlink: 48 bytes leftover after parsing attributes in process `syz.2.295'.
[   97.890714][ T7127] netlink: 36 bytes leftover after parsing attributes in process `syz.0.297'.
[   97.894572][ T7127] netlink: 16 bytes leftover after parsing attributes in process `syz.0.297'.
[   97.898855][ T7127] netlink: 36 bytes leftover after parsing attributes in process `syz.0.297'.
[   98.031862][ T7131] syz_tun: entered allmulticast mode
[   98.040167][ T7131] dvmrp8: entered allmulticast mode
[   98.805498][ T7129] syz_tun: left allmulticast mode
[   98.808685][ T7129] dvmrp8: left allmulticast mode
[   99.234153][ T7146] netlink: 'syz.2.303': attribute type 4 has an invalid length.
[  100.226430][ T7185] syzkaller0: entered promiscuous mode
[  100.235356][ T7185] syzkaller0: entered allmulticast mode
[  100.752657][ T7195] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  100.755371][ T7196] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  102.441823][ T7240] __nla_validate_parse: 31 callbacks suppressed
[  102.441846][ T7240] netlink: 36 bytes leftover after parsing attributes in process `syz.0.324'.
[  102.448616][ T7240] netlink: 16 bytes leftover after parsing attributes in process `syz.0.324'.
[  102.452017][ T7240] netlink: 36 bytes leftover after parsing attributes in process `syz.0.324'.
[  102.455167][ T7240] netlink: 36 bytes leftover after parsing attributes in process `syz.0.324'.
[  103.020862][ T7257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.328'.
[  103.265586][ T7272] netlink: 36 bytes leftover after parsing attributes in process `syz.2.332'.
[  103.273417][ T7272] netlink: 16 bytes leftover after parsing attributes in process `syz.2.332'.
[  103.276620][ T7272] netlink: 36 bytes leftover after parsing attributes in process `syz.2.332'.
[  103.284781][ T7272] netlink: 36 bytes leftover after parsing attributes in process `syz.2.332'.
[  104.031342][ T7286] netlink: 36 bytes leftover after parsing attributes in process `syz.1.335'.
[  106.144656][ T7342] vlan2: entered allmulticast mode
[  106.146480][ T7342] veth1: entered allmulticast mode
[  107.511329][ T7392] __nla_validate_parse: 48 callbacks suppressed
[  107.511342][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.364'.
[  108.306152][ T7400] netlink: 36 bytes leftover after parsing attributes in process `syz.0.366'.
[  108.310205][ T7400] netlink: 16 bytes leftover after parsing attributes in process `syz.0.366'.
[  108.313721][ T7400] netlink: 36 bytes leftover after parsing attributes in process `syz.0.366'.
[  108.317915][ T7400] netlink: 36 bytes leftover after parsing attributes in process `syz.0.366'.
[  108.362504][ T7402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.367'.
[  108.643733][ T7423] netlink: 36 bytes leftover after parsing attributes in process `syz.1.370'.
[  108.649296][ T7423] netlink: 16 bytes leftover after parsing attributes in process `syz.1.370'.
[  108.652276][ T7423] netlink: 36 bytes leftover after parsing attributes in process `syz.1.370'.
[  108.656333][ T7423] netlink: 36 bytes leftover after parsing attributes in process `syz.1.370'.
[  109.182099][ T7430] netlink: 'syz.0.373': attribute type 1 has an invalid length.
[  109.211415][ T7430] 8021q: adding VLAN 0 to HW filter on device bond1
[  109.229780][ T7430] bond1: (slave geneve2): making interface the new active one
[  109.234977][ T7430] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  109.350564][ T7434] netlink: zone id is out of range
[  109.507924][ T7442] netlink: 'syz.2.377': attribute type 4 has an invalid length.
[  109.707475][ T7442] bond0: entered promiscuous mode
[  109.709631][ T7442] bond0: entered allmulticast mode
[  109.712524][ T7442] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.793915][ T7442] bond0 (unregistering): Released all slaves
[  110.098469][ T7451] tipc: Invalid UDP bearer configuration
[  110.098503][ T7451] tipc: Enabling of bearer <udp:sy{> rejected, failed to enable media
[  111.284130][ T7475] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  111.290280][ T7475] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  111.294666][ T7475] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  111.872263][ T7489] netlink: 'syz.0.387': attribute type 4 has an invalid length.
[  111.880040][ T7489] : renamed from bond0 (while UP)
[  112.040354][ T7492] bond0 (unregistering): Released all slaves
[  112.766663][ T7524] __nla_validate_parse: 32 callbacks suppressed
[  112.769994][ T7524] netlink: 36 bytes leftover after parsing attributes in process `syz.2.396'.
[  112.774287][ T7524] netlink: 16 bytes leftover after parsing attributes in process `syz.2.396'.
[  112.780347][ T7524] netlink: 36 bytes leftover after parsing attributes in process `syz.2.396'.
[  112.783811][ T7524] netlink: 36 bytes leftover after parsing attributes in process `syz.2.396'.
[  112.802776][ T7528] netlink: 36 bytes leftover after parsing attributes in process `syz.0.397'.
[  112.810522][ T7528] netlink: 16 bytes leftover after parsing attributes in process `syz.0.397'.
[  112.817251][ T7528] netlink: 36 bytes leftover after parsing attributes in process `syz.0.397'.
[  112.823480][ T7528] netlink: 36 bytes leftover after parsing attributes in process `syz.0.397'.
[  112.827866][ T7526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.397'.
[  113.722632][ T7558] netlink: 48 bytes leftover after parsing attributes in process `syz.2.405'.
[  114.824707][ T7593] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  114.828805][ T7592] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  115.887339][ T7624] batadv_slave_1: entered promiscuous mode
[  115.950850][ T7623] batadv_slave_1: left promiscuous mode
[  116.081491][ T7635] netlink: 'syz.0.426': attribute type 83 has an invalid length.
[  116.712646][ T7653] syzkaller0: entered promiscuous mode
[  116.714666][ T7653] syzkaller0: entered allmulticast mode
[  116.717980][ T7653] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  117.717801][ T7684] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  117.828355][ T7690] __nla_validate_parse: 49 callbacks suppressed
[  117.828369][ T7690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.440'.
[  118.184393][ T7692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.441'.
[  118.572107][ T7707] netlink: 36 bytes leftover after parsing attributes in process `syz.1.445'.
[  118.575875][ T7707] netlink: 16 bytes leftover after parsing attributes in process `syz.1.445'.
[  118.580004][ T7707] netlink: 36 bytes leftover after parsing attributes in process `syz.1.445'.
[  118.583644][ T7707] netlink: 36 bytes leftover after parsing attributes in process `syz.1.445'.
[  119.332497][ T7725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.449'.
[  119.873797][ T7752] netlink: 36 bytes leftover after parsing attributes in process `syz.0.455'.
[  119.877031][ T7752] netlink: 16 bytes leftover after parsing attributes in process `syz.0.455'.
[  119.880857][ T7752] netlink: 36 bytes leftover after parsing attributes in process `syz.0.455'.
[  121.755665][ T7785] netlink: 'syz.1.466': attribute type 21 has an invalid length.
[  122.740754][ T7808] macvlan2: entered allmulticast mode
[  122.742812][ T7808] veth1_vlan: entered allmulticast mode
[  122.746195][ T7808] veth1_vlan: left allmulticast mode
[  122.839591][ T7812] tipc: Started in network mode
[  122.841639][ T7812] tipc: Node identity ac1414aa, cluster identity 4711
[  122.866021][ T7812] tipc: Enabled bearer <udp:s>, priority 10
[  122.877378][ T7812] __nla_validate_parse: 14 callbacks suppressed
[  122.877395][ T7812] netlink: 36 bytes leftover after parsing attributes in process `syz.0.473'.
[  122.883859][ T7812] netlink: 16 bytes leftover after parsing attributes in process `syz.0.473'.
[  122.888289][ T7812] netlink: 36 bytes leftover after parsing attributes in process `syz.0.473'.
[  122.891287][ T7812] netlink: 36 bytes leftover after parsing attributes in process `syz.0.473'.
[  122.903113][ T7814] netlink: 36 bytes leftover after parsing attributes in process `syz.1.472'.
[  122.907668][ T7814] netlink: 16 bytes leftover after parsing attributes in process `syz.1.472'.
[  122.911491][ T7814] netlink: 36 bytes leftover after parsing attributes in process `syz.1.472'.
[  122.914601][ T7814] netlink: 36 bytes leftover after parsing attributes in process `syz.1.472'.
[  123.034163][ T7818] netlink: 16 bytes leftover after parsing attributes in process `syz.0.475'.
[  123.037450][ T7818] netlink: 16 bytes leftover after parsing attributes in process `syz.0.475'.
[  123.206317][ T7829] openvswitch: netlink: Geneve opt len 30 is not a multiple of 4.
[  123.271964][ T7835] tipc: Can't bind to reserved service type 0
[  123.645292][ T7842] openvswitch: netlink: Flow key attr not present in new flow.
[  123.867298][    T9] tipc: Node number set to 2886997162
[  124.134158][ T7857] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:277
[  124.194978][ T7861] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.241299][ T7861] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.301973][ T7861] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.340933][ T7861] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.408065][ T5866] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.418494][ T5866] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.429843][ T5866] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.440483][ T5866] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  124.620456][ T7875] netlink: 'syz.0.492': attribute type 4 has an invalid length.
[  124.794768][ T7875] bond0 (unregistering): Released all slaves
[  125.558115][ T7894] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.610781][ T7894] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.711552][ T7894] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.770549][ T7894] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.410123][ T7921] netlink: 'syz.1.503': attribute type 4 has an invalid length.
[  127.414579][ T7921] : renamed from bond0
[  127.580570][ T7924] bond0 (unregistering): Released all slaves
[  127.621945][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.642966][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  127.652947][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  127.655599][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.443293][ T7951] __nla_validate_parse: 32 callbacks suppressed
[  128.443306][ T7951] netlink: 36 bytes leftover after parsing attributes in process `syz.1.508'.
[  128.448743][ T7951] netlink: 16 bytes leftover after parsing attributes in process `syz.1.508'.
[  128.451774][ T7951] netlink: 36 bytes leftover after parsing attributes in process `syz.1.508'.
[  128.455080][ T7951] netlink: 36 bytes leftover after parsing attributes in process `syz.1.508'.
[  128.601279][ T7953] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  128.605872][ T7953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.509'.
[  128.609460][ T7953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.509'.
[  128.793795][ T7960] netlink: 36 bytes leftover after parsing attributes in process `syz.0.510'.
[  128.798686][ T7960] netlink: 16 bytes leftover after parsing attributes in process `syz.0.510'.
[  128.801836][ T7960] netlink: 36 bytes leftover after parsing attributes in process `syz.0.510'.
[  128.805250][ T7960] netlink: 36 bytes leftover after parsing attributes in process `syz.0.510'.
[  128.818672][ T7962] Bluetooth: MGMT ver 1.23
[  130.003822][ T7996] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  131.219903][ T8038] netlink: 'syz.1.532': attribute type 1 has an invalid length.
[  133.761193][ T8088] __nla_validate_parse: 55 callbacks suppressed
[  133.761211][ T8088] netlink: 36 bytes leftover after parsing attributes in process `syz.0.546'.
[  133.835150][ T8094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.547'.
[  133.843134][ T8094] netlink: 16 bytes leftover after parsing attributes in process `syz.0.547'.
[  133.901956][ T8096] netlink: 'syz.2.548': attribute type 4 has an invalid length.
[  134.050062][ T8107] netlink: 36 bytes leftover after parsing attributes in process `syz.1.550'.
[  134.063097][ T8107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.550'.
[  134.069765][ T8107] netlink: 36 bytes leftover after parsing attributes in process `syz.1.550'.
[  134.073786][ T8107] netlink: 36 bytes leftover after parsing attributes in process `syz.1.550'.
[  149.726164][ T8123] can: request_module (can-proto-0) failed.
[  149.746417][ T8113] can: request_module (can-proto-0) failed.
[  149.782555][ T8130] netlink: 'syz.0.557': attribute type 4 has an invalid length.
[  149.804535][ T8132] netlink: 36 bytes leftover after parsing attributes in process `syz.1.553'.
[  149.810853][ T8132] netlink: 16 bytes leftover after parsing attributes in process `syz.1.553'.
[  149.815694][ T8132] netlink: 36 bytes leftover after parsing attributes in process `syz.1.553'.
[  149.819664][ T8132] netlink: 36 bytes leftover after parsing attributes in process `syz.1.553'.
[  149.866944][ T8134] netlink: 36 bytes leftover after parsing attributes in process `syz.2.556'.
[  149.871165][ T8134] netlink: 16 bytes leftover after parsing attributes in process `syz.2.556'.
[  149.874986][ T8134] netlink: 36 bytes leftover after parsing attributes in process `syz.2.556'.
[  149.878799][ T8134] netlink: 36 bytes leftover after parsing attributes in process `syz.2.556'.
[  149.935700][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.558'.
[  149.939178][ T8135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.558'.
[  150.703675][ T8152] netlink: 'syz.0.562': attribute type 1 has an invalid length.
[  150.810768][ T8160] syz_tun: entered allmulticast mode
[  151.581915][ T8160] syz_tun: left allmulticast mode
[  153.537291][ T8202] netlink: 'syz.1.577': attribute type 4 has an invalid length.
[  153.602733][ T8206] IPVS: set_ctl: invalid protocol: 4 224.0.0.1:20004
[  153.885017][ T8222] netlink: 'syz.1.583': attribute type 1 has an invalid length.
[  153.913639][ T8222] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.116198][ T8234] netlink: 'syz.0.586': attribute type 4 has an invalid length.
[  155.062999][ T8247] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  155.121065][ T8248] __nla_validate_parse: 54 callbacks suppressed
[  155.121078][ T8248] netlink: 36 bytes leftover after parsing attributes in process `syz.0.590'.
[  155.127745][ T8248] netlink: 16 bytes leftover after parsing attributes in process `syz.0.590'.
[  155.131727][ T8248] netlink: 36 bytes leftover after parsing attributes in process `syz.0.590'.
[  155.135756][ T8248] netlink: 36 bytes leftover after parsing attributes in process `syz.0.590'.
[  155.649139][ T8255] netlink: 'syz.1.592': attribute type 15 has an invalid length.
[  155.651662][ T8255] netlink: 24 bytes leftover after parsing attributes in process `syz.1.592'.
[  155.748097][ T8253] netlink: 36 bytes leftover after parsing attributes in process `syz.2.591'.
[  155.750997][ T8253] netlink: 16 bytes leftover after parsing attributes in process `syz.2.591'.
[  155.754636][ T8253] netlink: 36 bytes leftover after parsing attributes in process `syz.2.591'.
[  155.759184][ T8253] netlink: 36 bytes leftover after parsing attributes in process `syz.2.591'.
[  155.762852][ T8258] netlink: 36 bytes leftover after parsing attributes in process `syz.1.592'.
[  155.915140][ T8260] netlink: 'syz.0.593': attribute type 4 has an invalid length.
[  156.433219][ T8291] netlink: 'syz.0.599': attribute type 3 has an invalid length.
[  156.440287][ T8291] netlink: 'syz.0.599': attribute type 2 has an invalid length.
[  158.472645][ T8354] netlink: 'syz.1.612': attribute type 1 has an invalid length.
[  158.625870][ T8361] syzkaller1: entered promiscuous mode
[  158.629370][ T8361] syzkaller1: entered allmulticast mode
[  159.344261][ T8371] netlink: 'syz.0.616': attribute type 4 has an invalid length.
[  159.531299][ T8381] sctp: [Deprecated]: syz.0.619 (pid 8381) Use of int in maxseg socket option.
[  159.531299][ T8381] Use struct sctp_assoc_value instead
[  159.670913][ T8390] netlink: 'syz.0.621': attribute type 10 has an invalid length.
[  160.132937][ T8403] __nla_validate_parse: 60 callbacks suppressed
[  160.132950][ T8403] netlink: 36 bytes leftover after parsing attributes in process `syz.2.624'.
[  160.139118][ T8403] netlink: 16 bytes leftover after parsing attributes in process `syz.2.624'.
[  160.142647][ T8403] netlink: 36 bytes leftover after parsing attributes in process `syz.2.624'.
[  160.145949][ T8403] netlink: 36 bytes leftover after parsing attributes in process `syz.2.624'.
[  160.528526][ T8411] netlink: 36 bytes leftover after parsing attributes in process `syz.1.625'.
[  160.532659][ T8411] netlink: 16 bytes leftover after parsing attributes in process `syz.1.625'.
[  160.535683][ T8411] netlink: 36 bytes leftover after parsing attributes in process `syz.1.625'.
[  160.539846][ T8411] netlink: 36 bytes leftover after parsing attributes in process `syz.1.625'.
[  160.668925][ T8417] ip6gretap0: entered promiscuous mode
[  161.099701][ T8432] netlink: 36 bytes leftover after parsing attributes in process `syz.2.631'.
[  161.102746][ T8432] netlink: 16 bytes leftover after parsing attributes in process `syz.2.631'.
[  162.686887][ T5845] Bluetooth: hci2: command 0x0405 tx timeout
[  164.380707][ T8496] syz.0.648: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  164.393454][ T8496] CPU: 1 UID: 0 PID: 8496 Comm: syz.0.648 Not tainted syzkaller #0 PREEMPT(full) 
[  164.393476][ T8496] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  164.393485][ T8496] Call Trace:
[  164.393553][ T8496]  <TASK>
[  164.393566][ T8496]  dump_stack_lvl+0x189/0x250
[  164.393668][ T8496]  ? __pfx_dump_stack_lvl+0x10/0x10
[  164.393683][ T8496]  ? __pfx__printk+0x10/0x10
[  164.393700][ T8496]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  164.393719][ T8496]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  164.393735][ T8496]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  164.393753][ T8496]  warn_alloc+0x214/0x310
[  164.393779][ T8496]  ? __pfx_warn_alloc+0x10/0x10
[  164.393806][ T8496]  ? __get_vm_area_node+0x28f/0x300
[  164.393825][ T8496]  ? hash_ipportip_create+0x358/0xfe0
[  164.393848][ T8496]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  164.393929][ T8496]  ? do_syscall_64+0xfa/0x3b0
[  164.393970][ T8496]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  164.393994][ T8496]  ? rcu_is_watching+0x15/0xb0
[  164.394180][ T8496]  ? hash_ipportip_create+0x358/0xfe0
[  164.394202][ T8496]  ? hash_ipportip_create+0x358/0xfe0
[  164.394214][ T8496]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  164.394235][ T8496]  ? hash_ipportip_create+0x358/0xfe0
[  164.394250][ T8496]  ? hash_ipportip_create+0x2fe/0xfe0
[  164.394269][ T8496]  hash_ipportip_create+0x358/0xfe0
[  164.394299][ T8496]  ? __nla_parse+0x40/0x60
[  164.394313][ T8496]  ? __pfx_hash_ipportip_create+0x10/0x10
[  164.394330][ T8496]  ip_set_create+0xa97/0x1940
[  164.394351][ T8496]  ? ip_set_create+0x4a2/0x1940
[  164.394378][ T8496]  ? __pfx_ip_set_create+0x10/0x10
[  164.394415][ T8496]  nfnetlink_rcv_msg+0xb4d/0x1130
[  164.394436][ T8496]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  164.394463][ T8496]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  164.394476][ T8496]  ? kasan_save_free_info+0x46/0x50
[  164.394516][ T8496]  netlink_rcv_skb+0x208/0x470
[  164.394532][ T8496]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  164.394549][ T8496]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  164.394567][ T8496]  ? bpf_lsm_capable+0x9/0x20
[  164.394583][ T8496]  ? security_capable+0x7e/0x2e0
[  164.394662][ T8496]  nfnetlink_rcv+0x26a/0x2520
[  164.394681][ T8496]  ? __dev_queue_xmit+0x1d79/0x3b50
[  164.394705][ T8496]  ? __dev_queue_xmit+0x27b/0x3b50
[  164.394729][ T8496]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  164.394744][ T8496]  ? __pfx___dev_queue_xmit+0x10/0x10
[  164.394770][ T8496]  ? ref_tracker_free+0x63a/0x7d0
[  164.394789][ T8496]  ? __asan_memcpy+0x40/0x70
[  164.394804][ T8496]  ? __pfx_ref_tracker_free+0x10/0x10
[  164.394817][ T8496]  ? __skb_clone+0x63/0x7a0
[  164.394834][ T8496]  ? __skb_clone+0x483/0x7a0
[  164.394851][ T8496]  ? skb_clone+0x246/0x3a0
[  164.394869][ T8496]  ? __netlink_deliver_tap+0x807/0x850
[  164.394881][ T8496]  ? netlink_deliver_tap+0x2e/0x1b0
[  164.394898][ T8496]  ? netlink_deliver_tap+0x2e/0x1b0
[  164.394916][ T8496]  netlink_unicast+0x82f/0x9e0
[  164.394943][ T8496]  ? __pfx_netlink_unicast+0x10/0x10
[  164.394963][ T8496]  ? netlink_sendmsg+0x642/0xb30
[  164.394974][ T8496]  ? skb_put+0x11b/0x210
[  164.394990][ T8496]  netlink_sendmsg+0x805/0xb30
[  164.395010][ T8496]  ? __pfx_netlink_sendmsg+0x10/0x10
[  164.395027][ T8496]  ? aa_sock_msg_perm+0xf1/0x1d0
[  164.395042][ T8496]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  164.395057][ T8496]  ? __pfx_netlink_sendmsg+0x10/0x10
[  164.395070][ T8496]  __sock_sendmsg+0x21c/0x270
[  164.395092][ T8496]  ____sys_sendmsg+0x505/0x830
[  164.395113][ T8496]  ? __pfx_____sys_sendmsg+0x10/0x10
[  164.395135][ T8496]  ? import_iovec+0x74/0xa0
[  164.395155][ T8496]  ___sys_sendmsg+0x21f/0x2a0
[  164.395173][ T8496]  ? __pfx____sys_sendmsg+0x10/0x10
[  164.395215][ T8496]  ? __fget_files+0x2a/0x420
[  164.395227][ T8496]  ? __fget_files+0x3a0/0x420
[  164.395248][ T8496]  __x64_sys_sendmsg+0x19b/0x260
[  164.395265][ T8496]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  164.395303][ T8496]  ? rcu_is_watching+0x15/0xb0
[  164.395321][ T8496]  ? do_syscall_64+0xbe/0x3b0
[  164.395339][ T8496]  do_syscall_64+0xfa/0x3b0
[  164.395350][ T8496]  ? lockdep_hardirqs_on+0x9c/0x150
[  164.395363][ T8496]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.395376][ T8496]  ? exc_page_fault+0x9f/0xf0
[  164.395389][ T8496]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.395401][ T8496] RIP: 0033:0x7f402578ebe9
[  164.395416][ T8496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  164.395428][ T8496] RSP: 002b:00007f402652c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  164.395442][ T8496] RAX: ffffffffffffffda RBX: 00007f40259c6090 RCX: 00007f402578ebe9
[  164.395452][ T8496] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000087
[  164.395460][ T8496] RBP: 00007f4025811e19 R08: 0000000000000000 R09: 0000000000000000
[  164.395468][ T8496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  164.395476][ T8496] R13: 00007f40259c6128 R14: 00007f40259c6090 R15: 00007ffca314a9e8
[  164.395500][ T8496]  </TASK>
[  164.395506][ T8496] Mem-Info:
[  164.594827][ T8496] active_anon:5685 inactive_anon:0 isolated_anon:0
[  164.594827][ T8496]  active_file:1449 inactive_file:38261 isolated_file:0
[  164.594827][ T8496]  unevictable:1768 dirty:37 writeback:0
[  164.594827][ T8496]  slab_reclaimable:9954 slab_unreclaimable:53426
[  164.594827][ T8496]  mapped:18416 shmem:2444 pagetables:987
[  164.594827][ T8496]  sec_pagetables:0 bounce:0
[  164.594827][ T8496]  kernel_misc_reclaimable:0
[  164.594827][ T8496]  free:303480 free_pcp:14796 free_cma:0
[  164.610094][ T8496] Node 0 active_anon:13816kB inactive_anon:0kB active_file:4252kB inactive_file:58172kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:44156kB dirty:120kB writeback:0kB shmem:5056kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6240kB pagetables:2388kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  164.620872][ T8496] Node 1 active_anon:9060kB inactive_anon:0kB active_file:1544kB inactive_file:94872kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29508kB dirty:28kB writeback:0kB shmem:4720kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5980kB pagetables:1560kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  164.631154][ T8496] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  164.642562][ T8496] lowmem_reserve[]: 0 811 811 811 811
[  164.644463][ T8496] Node 0 DMA32 free:370760kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13816kB inactive_anon:0kB active_file:4252kB inactive_file:58172kB unevictable:3536kB writepending:120kB present:1556484kB managed:830884kB mlocked:0kB bounce:0kB free_pcp:24752kB local_pcp:19284kB free_cma:0kB
[  164.656015][ T8496] lowmem_reserve[]: 0 0 0 0 0
[  164.663016][ T8496] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  164.673137][ T8496] lowmem_reserve[]: 0 0 854 854 854
[  164.675150][ T8496] Node 1 Normal free:369308kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9060kB inactive_anon:0kB active_file:1544kB inactive_file:94872kB unevictable:3536kB writepending:28kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:34464kB local_pcp:16936kB free_cma:0kB
[  164.687053][ T8496] lowmem_reserve[]: 0 0 0 0 0
[  164.688707][ T8496] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  164.696482][ T8496] Node 0 DMA32: 632*4kB (ME) 645*8kB (UME) 89*16kB (UME) 174*32kB (UME) 91*64kB (UM) 56*128kB (UME) 22*256kB (UM) 11*512kB (UME) 8*1024kB (UM) 4*2048kB (M) 77*4096kB (M) = 370712kB
[  164.703354][ T8496] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  164.709999][ T8496] Node 1 Normal: 1237*4kB (UME) 485*8kB (UE) 352*16kB (UME) 163*32kB (UME) 75*64kB (UM) 12*128kB (UME) 11*256kB (UM) 7*512kB (UME) 5*1024kB (UM) 2*2048kB (ME) 80*4096kB (M) = 369308kB
[  164.716332][ T8496] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  164.720382][ T8496] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  164.724386][ T8496] 42154 total pagecache pages
[  164.726421][ T8496] 0 pages in swap cache
[  164.730076][ T8496] Free swap  = 124996kB
[  164.731922][ T8496] Total swap = 124996kB
[  164.733772][ T8496] 786301 pages RAM
[  164.735373][ T8496] 0 pages HighMem/MovableOnly
[  164.738187][ T8496] 241348 pages reserved
[  164.739789][ T8496] 0 pages cma reserved
[  164.805735][ T8506] netlink: 'syz.0.650': attribute type 1 has an invalid length.
[  164.810056][ T8506] netlink: 'syz.0.650': attribute type 1 has an invalid length.
[  165.156213][ T8530] __nla_validate_parse: 32 callbacks suppressed
[  165.156227][ T8530] netlink: 36 bytes leftover after parsing attributes in process `syz.0.657'.
[  165.162205][ T8530] netlink: 16 bytes leftover after parsing attributes in process `syz.0.657'.
[  165.165243][ T8530] netlink: 36 bytes leftover after parsing attributes in process `syz.0.657'.
[  165.171337][ T8530] netlink: 36 bytes leftover after parsing attributes in process `syz.0.657'.
[  165.533116][ T8540] netlink: 36 bytes leftover after parsing attributes in process `syz.2.661'.
[  165.536253][ T8540] netlink: 16 bytes leftover after parsing attributes in process `syz.2.661'.
[  165.540092][ T8540] netlink: 36 bytes leftover after parsing attributes in process `syz.2.661'.
[  165.543516][ T8540] netlink: 36 bytes leftover after parsing attributes in process `syz.2.661'.
[  166.150043][ T8548] netlink: 28 bytes leftover after parsing attributes in process `syz.1.663'.
[  167.028945][ T8563] netlink: 36 bytes leftover after parsing attributes in process `syz.2.664'.
[  167.838243][ T8572] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  167.844061][ T8572] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  167.920804][ T8577] batman_adv: batadv0: Removing interface: batadv_slave_1
[  169.359315][ T8621] netlink: 'syz.0.683': attribute type 10 has an invalid length.
[  169.370288][ T8621] 8021q: adding VLAN 0 to HW filter on device team0
[  169.374181][ T8621] : (slave team0): Enslaving as an active interface with an up link
[  170.393546][ T8654] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  170.454130][ T8654] __nla_validate_parse: 35 callbacks suppressed
[  170.454144][ T8654] netlink: 36 bytes leftover after parsing attributes in process `syz.0.691'.
[  170.460421][ T8654] netlink: 16 bytes leftover after parsing attributes in process `syz.0.691'.
[  170.463618][ T8654] netlink: 36 bytes leftover after parsing attributes in process `syz.0.691'.
[  170.468079][ T8654] netlink: 36 bytes leftover after parsing attributes in process `syz.0.691'.
[  170.580487][ T8657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.692'.
[  170.892643][ T8677] netlink: 36 bytes leftover after parsing attributes in process `syz.1.696'.
[  170.895965][ T8677] netlink: 16 bytes leftover after parsing attributes in process `syz.1.696'.
[  170.899422][ T8677] netlink: 36 bytes leftover after parsing attributes in process `syz.1.696'.
[  170.902504][ T8677] netlink: 36 bytes leftover after parsing attributes in process `syz.1.696'.
[  170.939796][ T8678] netlink: 36 bytes leftover after parsing attributes in process `syz.2.697'.
[  172.616449][ T8717] syzkaller1: entered promiscuous mode
[  172.618866][ T8717] syzkaller1: entered allmulticast mode
[  173.532383][ T8740] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  173.644795][ T8745] netlink: 'syz.1.715': attribute type 3 has an invalid length.
[  174.103718][ T8759] netlink: 'syz.2.718': attribute type 4 has an invalid length.
[  174.750688][ T8771] syz_tun: entered allmulticast mode
[  174.766387][ T8771] dvmrp8: entered allmulticast mode
[  175.099378][ T8788] netlink: 'syz.2.725': attribute type 4 has an invalid length.
[  175.506270][ T8769] syz_tun: left allmulticast mode
[  175.508409][ T8769] dvmrp8: left allmulticast mode
[  175.585641][ T8802] __nla_validate_parse: 54 callbacks suppressed
[  175.585659][ T8802] netlink: 44 bytes leftover after parsing attributes in process `syz.1.729'.
[  175.594449][ T8802] netlink: 43 bytes leftover after parsing attributes in process `syz.1.729'.
[  175.600201][ T8802] netlink: 'syz.1.729': attribute type 5 has an invalid length.
[  175.603695][ T8802] netlink: 43 bytes leftover after parsing attributes in process `syz.1.729'.
[  175.674506][ T8802] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  176.147692][ T8811] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  176.206229][ T8813] netlink: 36 bytes leftover after parsing attributes in process `syz.0.731'.
[  176.210708][ T8813] netlink: 16 bytes leftover after parsing attributes in process `syz.0.731'.
[  176.212200][   T36] tipc: Resetting bearer <eth:syzkaller0>
[  176.214382][ T8813] netlink: 36 bytes leftover after parsing attributes in process `syz.0.731'.
[  176.231706][ T8813] netlink: 36 bytes leftover after parsing attributes in process `syz.0.731'.
[  176.551985][ T8815] netlink: 36 bytes leftover after parsing attributes in process `syz.1.732'.
[  176.556070][ T8815] netlink: 16 bytes leftover after parsing attributes in process `syz.1.732'.
[  176.559582][ T8815] netlink: 36 bytes leftover after parsing attributes in process `syz.1.732'.
[  176.908884][ T8810] tipc: Resetting bearer <eth:syzkaller0>
[  178.240760][ T8810] tipc: Disabling bearer <eth:syzkaller0>
[  178.475274][ T5894] hid-generic 0005:0007:5505.0001: unknown main item tag 0x0
[  178.492830][ T5894] hid-generic 0005:0007:5505.0001: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa
[  178.609635][ T8848] netlink: 'syz.1.738': attribute type 4 has an invalid length.
[  178.878245][ T8859] batadv0: entered promiscuous mode
[  178.881152][ T8859] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  178.885085][ T8859] batadv0: left promiscuous mode
[  179.678838][ T8876] netlink: 'syz.1.746': attribute type 4 has an invalid length.
[  179.769808][ T8881] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  179.773042][ T5909] IPVS: starting estimator thread 0...
[  179.866993][ T8882] IPVS: using max 56 ests per chain, 134400 per kthread
[  180.735667][ T8904] __nla_validate_parse: 22 callbacks suppressed
[  180.735680][ T8904] netlink: 36 bytes leftover after parsing attributes in process `syz.1.752'.
[  180.742723][ T8904] netlink: 16 bytes leftover after parsing attributes in process `syz.1.752'.
[  180.749663][ T8904] netlink: 36 bytes leftover after parsing attributes in process `syz.1.752'.
[  180.753780][ T8904] netlink: 36 bytes leftover after parsing attributes in process `syz.1.752'.
[  180.799354][ T8911] netlink: 'syz.1.754': attribute type 4 has an invalid length.
[  180.863569][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  180.865677][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[  180.924050][ T8927] netlink: 36 bytes leftover after parsing attributes in process `syz.1.756'.
[  180.928079][ T8927] netlink: 16 bytes leftover after parsing attributes in process `syz.1.756'.
[  180.931884][ T8927] netlink: 36 bytes leftover after parsing attributes in process `syz.1.756'.
[  180.935624][ T8927] netlink: 36 bytes leftover after parsing attributes in process `syz.1.756'.
[  181.037750][ T8930] netlink: 36 bytes leftover after parsing attributes in process `syz.0.759'.
[  181.042010][ T8930] netlink: 16 bytes leftover after parsing attributes in process `syz.0.759'.
[  182.139314][ T8971] netlink: 'syz.2.770': attribute type 4 has an invalid length.
[  182.884081][ T8986] netlink: 'syz.0.774': attribute type 1 has an invalid length.
[  182.913079][ T8986] 8021q: adding VLAN 0 to HW filter on device bond9
[  182.928589][ T8986] 8021q: adding VLAN 0 to HW filter on device bond9
[  182.931751][ T8986] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address
[  182.937938][ T8986] bond9: (slave vxcan3): Error -95 calling set_mac_address
[  182.957452][ T8987] bond9: (slave bridge1): Enslaving as an active interface with a down link
[  183.489235][ T9003] team0: No ports can be present during mode change
[  183.491706][ T9002] team0: No ports can be present during mode change
[  185.153516][ T9045] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  185.163301][ T9045] ip6gretap0: entered allmulticast mode
[  185.170767][ T9045] tipc: Resetting bearer <eth:syzkaller0>
[  185.179778][ T9044] tipc: Disabling bearer <eth:syzkaller0>
[  185.909118][ T9076] __nla_validate_parse: 50 callbacks suppressed
[  185.909131][ T9076] netlink: 36 bytes leftover after parsing attributes in process `syz.2.795'.
[  185.914144][ T9076] netlink: 16 bytes leftover after parsing attributes in process `syz.2.795'.
[  185.917260][ T9076] netlink: 36 bytes leftover after parsing attributes in process `syz.2.795'.
[  185.920232][ T9076] netlink: 36 bytes leftover after parsing attributes in process `syz.2.795'.
[  186.693945][ T9097] netlink: 88 bytes leftover after parsing attributes in process `syz.0.800'.
[  186.723181][ T9099] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  187.365258][ T9117] netlink: 20 bytes leftover after parsing attributes in process `syz.1.804'.
[  187.544008][ T9125] netlink: 36 bytes leftover after parsing attributes in process `syz.1.804'.
[  187.547718][ T9125] netlink: 16 bytes leftover after parsing attributes in process `syz.1.804'.
[  187.551603][ T9125] netlink: 36 bytes leftover after parsing attributes in process `syz.1.804'.
[  187.554972][ T9125] netlink: 36 bytes leftover after parsing attributes in process `syz.1.804'.
[  187.599681][ T9127] netlink: 'syz.0.806': attribute type 4 has an invalid length.
[  188.381321][ T9152] netlink: 'syz.0.813': attribute type 4 has an invalid length.
[  189.212580][ T9111] Set syz1 is full, maxelem 65536 reached
[  190.927961][ T9209] __nla_validate_parse: 10 callbacks suppressed
[  190.927983][ T9209] netlink: 36 bytes leftover after parsing attributes in process `syz.1.824'.
[  190.933558][ T9209] netlink: 16 bytes leftover after parsing attributes in process `syz.1.824'.
[  190.938239][ T9209] netlink: 36 bytes leftover after parsing attributes in process `syz.1.824'.
[  190.942385][ T9209] netlink: 36 bytes leftover after parsing attributes in process `syz.1.824'.
[  190.994350][ T9211] netlink: 20 bytes leftover after parsing attributes in process `syz.2.825'.
[  191.000444][ T9211] netdevsim0: renamed from gre0 (while UP)
[  191.006494][ T9211] netdevsim0: entered promiscuous mode
[  191.252493][ T9217] netlink: 36 bytes leftover after parsing attributes in process `syz.2.826'.
[  191.256978][ T9217] netlink: 16 bytes leftover after parsing attributes in process `syz.2.826'.
[  191.261209][ T9217] netlink: 36 bytes leftover after parsing attributes in process `syz.2.826'.
[  191.265026][ T9217] netlink: 36 bytes leftover after parsing attributes in process `syz.2.826'.
[  191.624932][ T9219] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.632512][ T9219] netlink: 'syz.0.827': attribute type 1 has an invalid length.
[  191.636009][ T9219] netlink: 224 bytes leftover after parsing attributes in process `syz.0.827'.
[  191.787715][ T9224] tipc: Enabled bearer <eth:vlan0>, priority 18
[  192.171808][ T9241] netlink: 'syz.2.833': attribute type 4 has an invalid length.
[  192.383307][ T9255] bond0: Error: Cannot enslave bond to itself.
[  196.022999][ T9360] __nla_validate_parse: 37 callbacks suppressed
[  196.023013][ T9360] netlink: 36 bytes leftover after parsing attributes in process `syz.2.854'.
[  196.029511][ T9360] netlink: 16 bytes leftover after parsing attributes in process `syz.2.854'.
[  196.033526][ T9360] netlink: 36 bytes leftover after parsing attributes in process `syz.2.854'.
[  196.036572][ T9360] netlink: 36 bytes leftover after parsing attributes in process `syz.2.854'.
[  196.876849][ T9372] netlink: 36 bytes leftover after parsing attributes in process `syz.2.857'.
[  196.880776][ T9372] netlink: 16 bytes leftover after parsing attributes in process `syz.2.857'.
[  196.884546][ T9372] netlink: 36 bytes leftover after parsing attributes in process `syz.2.857'.
[  196.889201][ T9372] netlink: 36 bytes leftover after parsing attributes in process `syz.2.857'.
[  197.593924][ T9375] netlink: 36 bytes leftover after parsing attributes in process `syz.0.858'.
[  197.598432][ T9375] netlink: 16 bytes leftover after parsing attributes in process `syz.0.858'.
[  197.651916][ T9378] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received
[  197.890965][ T9387] netlink: 'syz.2.861': attribute type 12 has an invalid length.
[  198.905213][ T9404] netlink: 'syz.2.865': attribute type 4 has an invalid length.
[  199.068934][ T9411] netlink: 'syz.2.867': attribute type 5 has an invalid length.
[  199.319703][ T9414] batman_adv: batadv0: Adding interface: ip6gretap1
[  199.322134][ T9414] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.333972][ T9414] batman_adv: batadv0: Interface activated: ip6gretap1
[  202.334504][ T9465] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  202.642580][ T9470] __nla_validate_parse: 33 callbacks suppressed
[  202.642618][ T9470] netlink: 36 bytes leftover after parsing attributes in process `syz.2.880'.
[  202.648785][ T9470] netlink: 16 bytes leftover after parsing attributes in process `syz.2.880'.
[  202.651477][ T9470] netlink: 36 bytes leftover after parsing attributes in process `syz.2.880'.
[  202.654212][ T9470] netlink: 36 bytes leftover after parsing attributes in process `syz.2.880'.
[  203.529561][ T9486] ip6gretap1: entered promiscuous mode
[  203.637276][ T9488] netlink: 36 bytes leftover after parsing attributes in process `syz.2.885'.
[  203.641162][ T9488] netlink: 16 bytes leftover after parsing attributes in process `syz.2.885'.
[  203.644837][ T9488] netlink: 36 bytes leftover after parsing attributes in process `syz.2.885'.
[  203.650048][ T9488] netlink: 36 bytes leftover after parsing attributes in process `syz.2.885'.
[  204.599387][ T9511] netlink: 36 bytes leftover after parsing attributes in process `syz.2.888'.
[  204.602980][ T9511] netlink: 16 bytes leftover after parsing attributes in process `syz.2.888'.
[  205.422163][ T9524] sctp: [Deprecated]: syz.2.894 (pid 9524) Use of int in max_burst socket option.
[  205.422163][ T9524] Use struct sctp_assoc_value instead
[  206.563949][ T9556] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  206.713952][ T9563] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  208.503416][ T9594] __nla_validate_parse: 19 callbacks suppressed
[  208.503436][ T9594] netlink: 36 bytes leftover after parsing attributes in process `syz.0.910'.
[  208.509760][ T9594] netlink: 16 bytes leftover after parsing attributes in process `syz.0.910'.
[  208.513231][ T9594] netlink: 36 bytes leftover after parsing attributes in process `syz.0.910'.
[  208.516392][ T9594] netlink: 36 bytes leftover after parsing attributes in process `syz.0.910'.
[  208.529054][ T9597] netlink: 36 bytes leftover after parsing attributes in process `syz.2.907'.
[  208.532945][ T9597] netlink: 16 bytes leftover after parsing attributes in process `syz.2.907'.
[  208.536534][ T9597] netlink: 36 bytes leftover after parsing attributes in process `syz.2.907'.
[  208.541286][ T9597] netlink: 36 bytes leftover after parsing attributes in process `syz.2.907'.
[  208.558968][ T9599] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001
[  208.564400][ T9599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.911'.
[  208.665668][ T9602] netlink: 36 bytes leftover after parsing attributes in process `syz.0.912'.
[  209.279459][ T9604] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  209.335906][ T9605] netlink: 'syz.2.913': attribute type 6 has an invalid length.
[  209.461865][ T9607] IPVS: set_ctl: invalid protocol: 19 127.0.0.1:20002
[  209.704905][ T9616] netlink: 'syz.0.917': attribute type 1 has an invalid length.
[  210.490418][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  210.498573][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  210.504917][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  210.512271][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  210.516307][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  210.754402][ T9629] chnl_net:caif_netlink_parms(): no params data found
[  210.815549][ T9629] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.818383][ T9629] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.821027][ T9629] bridge_slave_0: entered allmulticast mode
[  210.824292][ T9629] bridge_slave_0: entered promiscuous mode
[  210.828323][ T9629] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.830867][ T9629] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.833515][ T9629] bridge_slave_1: entered allmulticast mode
[  210.837511][ T9629] bridge_slave_1: entered promiscuous mode
[  210.864323][ T9629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  210.870651][ T9629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  210.893748][ T9629] team0: Port device team_slave_0 added
[  210.898824][ T9629] team0: Port device team_slave_1 added
[  210.920777][ T9629] batman_adv: batadv0: Adding interface: batadv_slave_0
[  210.923291][ T9629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  210.932998][ T9629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  210.939161][ T9629] batman_adv: batadv0: Adding interface: batadv_slave_1
[  210.941855][ T9629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  210.951947][ T9629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  210.986581][ T9629] hsr_slave_0: entered promiscuous mode
[  210.989264][ T9629] hsr_slave_1: entered promiscuous mode
[  210.991652][ T9629] debugfs: 'hsr0' already exists in 'hsr'
[  210.993615][ T9629] Cannot create hsr debugfs directory
[  211.118624][ T9629] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  211.124935][ T9629] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  211.130778][ T9629] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  211.136419][ T9629] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  211.161823][ T9629] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.164394][ T9629] bridge0: port 2(bridge_slave_1) entered forwarding state
[  211.167359][ T9629] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.169799][ T9629] bridge0: port 1(bridge_slave_0) entered forwarding state
[  211.222046][ T9629] 8021q: adding VLAN 0 to HW filter on device bond0
[  211.233989][ T4997] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.237894][ T4997] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.255499][ T9629] 8021q: adding VLAN 0 to HW filter on device team0
[  211.267474][ T4997] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.270270][ T4997] bridge0: port 1(bridge_slave_0) entered forwarding state
[  211.280095][ T4997] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.282627][ T4997] bridge0: port 2(bridge_slave_1) entered forwarding state
[  211.450524][ T9629] 8021q: adding VLAN 0 to HW filter on device batadv0
[  211.482033][ T9629] veth0_vlan: entered promiscuous mode
[  211.488801][ T9629] veth1_vlan: entered promiscuous mode
[  211.508816][ T9629] veth0_macvtap: entered promiscuous mode
[  211.514581][ T9629] veth1_macvtap: entered promiscuous mode
[  211.528244][ T9629] batman_adv: batadv0: Interface activated: batadv_slave_0
[  211.542557][ T9629] batman_adv: batadv0: Interface activated: batadv_slave_1
[  211.551402][ T5872] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  211.559250][ T5872] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  211.570873][ T5872] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  211.581355][ T5872] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  211.675808][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.686744][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.722608][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.725889][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.913966][ T9669] netlink: 'syz.3.926': attribute type 1 has an invalid length.
[  211.917852][ T9669] netlink: 'syz.3.926': attribute type 2 has an invalid length.
[  211.921058][ T9669] netlink: 'syz.3.926': attribute type 8 has an invalid length.
[  212.617008][ T5843] Bluetooth: hci3: command tx timeout
[  213.794056][ T9696] __nla_validate_parse: 42 callbacks suppressed
[  213.794078][ T9696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.933'.
[  213.847962][ T9698] netlink: 28 bytes leftover after parsing attributes in process `syz.3.935'.
[  213.914983][ T9703] netlink: 36 bytes leftover after parsing attributes in process `syz.3.935'.
[  213.923647][ T9703] netlink: 16 bytes leftover after parsing attributes in process `syz.3.935'.
[  213.927872][ T9703] netlink: 36 bytes leftover after parsing attributes in process `syz.3.935'.
[  213.932145][ T9703] netlink: 36 bytes leftover after parsing attributes in process `syz.3.935'.
[  214.016223][ T9720] netlink: 272 bytes leftover after parsing attributes in process `syz.2.939'.
[  214.218651][ T9731] netlink: 44 bytes leftover after parsing attributes in process `syz.0.942'.
[  214.396279][ T9746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.944'.
[  214.435703][ T9741] netlink: 'syz.3.944': attribute type 8 has an invalid length.
[  214.543769][ T9751] netlink: 36 bytes leftover after parsing attributes in process `syz.0.946'.
[  214.686929][ T5843] Bluetooth: hci3: command tx timeout
[  216.767160][ T5843] Bluetooth: hci3: command tx timeout
[  218.194110][ T9840] veth1_macvtap: left promiscuous mode
[  218.196109][ T9840] macsec0: entered promiscuous mode
[  218.204886][ T9840] macsec0: entered allmulticast mode
[  218.225003][ T9840] veth1_macvtap: entered promiscuous mode
[  218.231293][ T9840] veth1_macvtap: entered allmulticast mode
[  218.237102][ T9840] macsec0: left promiscuous mode
[  218.239071][ T9840] macsec0: left allmulticast mode
[  218.240832][ T9840] veth1_macvtap: left allmulticast mode
[  218.846883][ T5843] Bluetooth: hci3: command tx timeout
[  219.119041][ T9858] __nla_validate_parse: 44 callbacks suppressed
[  219.119056][ T9858] netlink: 36 bytes leftover after parsing attributes in process `syz.3.970'.
[  219.124873][ T9858] netlink: 16 bytes leftover after parsing attributes in process `syz.3.970'.
[  219.128640][ T9858] netlink: 36 bytes leftover after parsing attributes in process `syz.3.970'.
[  219.131584][ T9858] netlink: 36 bytes leftover after parsing attributes in process `syz.3.970'.
[  219.451180][ T9866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.972'.
[  219.565100][ T5312] IPVS: starting estimator thread 0...
[  219.569722][ T9869] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  219.574673][ T9869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  219.668131][ T9870] IPVS: using max 64 ests per chain, 153600 per kthread
[  219.698594][ T9874] netlink: 36 bytes leftover after parsing attributes in process `syz.2.974'.
[  219.701918][ T9874] netlink: 16 bytes leftover after parsing attributes in process `syz.2.974'.
[  219.705841][ T9874] netlink: 36 bytes leftover after parsing attributes in process `syz.2.974'.
[  219.709954][ T9874] netlink: 36 bytes leftover after parsing attributes in process `syz.2.974'.
[  220.044967][ T9886] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.068603][ T9886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.978'.
[  221.220185][ T9918] sctp: [Deprecated]: syz.3.988 (pid 9918) Use of struct sctp_assoc_value in delayed_ack socket option.
[  221.220185][ T9918] Use struct sctp_sack_info instead
[  221.420616][   T47] hid-generic 0005:0007:5505.0002: unknown main item tag 0x0
[  221.429166][   T47] hid-generic 0005:0007:5505.0002: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa
[  222.164738][ T9941] vcan0: tx drop: invalid da for name 0xfffffffffffffffc
[  222.369046][ T9948] nbd: must specify a size in bytes for the device
[  223.836910][ T9972] netlink: 'syz.0.1001': attribute type 4 has an invalid length.
[  224.133262][ T9980] syzkaller1: entered promiscuous mode
[  224.135306][ T9980] syzkaller1: entered allmulticast mode
[  224.142468][ T9980] __nla_validate_parse: 37 callbacks suppressed
[  224.142482][ T9980] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1004'.
[  224.420650][ T9985] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1005'.
[  224.423827][ T9985] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1005'.
[  224.427826][ T9985] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1005'.
[  224.431670][ T9985] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1005'.
[  224.814380][ T9994] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  224.950132][T10000] tipc: Failed to remove unknown binding: 66,1,1/0:2225466225/2225466227
[  225.350636][T10021] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1014'.
[  225.354935][T10021] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1014'.
[  225.359695][T10021] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1014'.
[  225.365373][T10021] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1014'.
[  225.419828][T10026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1016'.
[  225.423631][T10024] netlink: get zone limit has 8 unknown bytes
[  225.440338][T10024] openvswitch: netlink: Missing key (keys=40, expected=80)
[  225.512080][T10029] netlink: 'syz.2.1017': attribute type 2 has an invalid length.
[  225.514573][T10031] can: request_module (can-proto-0) failed.
[  225.535435][T10029] k*: entered promiscuous mode
[  225.544962][T10029] netdevsim0: left promiscuous mode
[  225.574126][T10029] 8021q: adding VLAN 0 to HW filter on device 
[  225.581038][T10029] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  226.144870][T10057] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20000
[  226.895048][T10072] netlink: 'syz.2.1029': attribute type 4 has an invalid length.
[  229.698915][T10200] can: request_module (can-proto-0) failed.
[  229.883659][T10214] __nla_validate_parse: 298 callbacks suppressed
[  229.883677][T10214] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1065'.
[  229.886542][T10213] batadv1: entered promiscuous mode
[  229.890053][T10214] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1065'.
[  229.893581][T10213] batadv1: entered allmulticast mode
[  229.897504][T10214] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1065'.
[  229.902247][T10214] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1065'.
[  229.990817][T10217] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1066'.
[  229.994029][T10217] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1066'.
[  229.998515][T10217] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1066'.
[  231.072295][T10241] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1075'.
[  231.075451][T10241] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1075'.
[  231.088675][T10242] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1074'.
[  232.792185][T10279] openvswitch: netlink: Unknown nsh attribute 0
[  232.794578][T10279] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  233.654111][T10290] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  233.657109][T10290] IPv6: NLM_F_CREATE should be set when creating new route
[  233.659618][T10290] IPv6: NLM_F_CREATE should be set when creating new route
[  234.905530][T10319] __nla_validate_parse: 38 callbacks suppressed
[  234.905550][T10319] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1095'.
[  234.914915][T10319] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1095'.
[  234.921041][T10319] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1095'.
[  234.926097][T10319] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1095'.
[  235.330281][T10311] delete_channel: no stack
[  235.690683][T10325] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1097'.
[  235.696910][T10325] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1097'.
[  235.700914][T10325] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1097'.
[  235.704521][T10325] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1097'.
[  235.819744][T10327] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1098'.
[  235.822680][T10327] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1098'.
[  237.441081][T10383] netlink: 'syz.3.1110': attribute type 4 has an invalid length.
[  237.500913][T10385] can: request_module (can-proto-0) failed.
[  237.503921][T10385] openvswitch: netlink: IP tunnel dst address not specified
[  238.163341][T10408] netlink: 'syz.2.1118': attribute type 3 has an invalid length.
[  238.167456][T10408] netlink: 'syz.2.1118': attribute type 3 has an invalid length.
[  238.880894][T10416] xt_time: unknown flags 0xf4
[  238.898125][T10416] xt_time: unknown flags 0xf4
[  238.913274][T10416] xt_time: unknown flags 0xf4
[  239.965142][T10446] __nla_validate_parse: 37 callbacks suppressed
[  239.965162][T10446] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1126'.
[  239.971773][T10446] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1126'.
[  239.975398][T10446] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1126'.
[  239.979939][T10446] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1126'.
[  240.261714][T10448] tipc: Started in network mode
[  240.263536][T10448] tipc: Node identity 36323eecdc4f, cluster identity 4711
[  240.266156][T10448] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  240.270994][T10448] syzkaller0: entered promiscuous mode
[  240.272875][T10448] syzkaller0: entered allmulticast mode
[  240.298520][T10448] tipc: Resetting bearer <eth:syzkaller0>
[  240.301181][T10450] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1127'.
[  240.304591][T10450] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1127'.
[  240.313437][T10450] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1127'.
[  240.317814][T10450] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1127'.
[  240.852352][T10470] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1132'.
[  240.855962][T10470] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1132'.
[  241.070775][T10447] tipc: Resetting bearer <eth:syzkaller0>
[  241.084155][T10447] tipc: Disabling bearer <eth:syzkaller0>
[  241.116263][T10474] Can't find ip_set type hash
[  241.116263][T10474] 
[  243.679809][T10535] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  243.705442][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  243.712090][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  243.717992][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  243.722791][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  243.767667][T10550] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20002
[  244.823453][T10579] IPVS: set_ctl: invalid protocol: 221 255.255.255.255:20003
[  245.128642][T10587] netlink: 'syz.2.1162': attribute type 1 has an invalid length.
[  245.490921][T10606] __nla_validate_parse: 39 callbacks suppressed
[  245.490934][T10606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1168'.
[  245.500002][T10606] netlink: 'syz.2.1168': attribute type 3 has an invalid length.
[  245.749517][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1172'.
[  245.868365][T10623] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1171'.
[  245.871556][T10623] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1171'.
[  245.874661][T10623] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1171'.
[  245.878276][T10623] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1171'.
[  245.915302][T10625] netlink: 'syz.3.1173': attribute type 12 has an invalid length.
[  246.171310][T10636] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.174880][T10636] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.303788][T10636] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  246.325613][T10636] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  246.536277][   T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  246.543275][   T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  246.594547][T10643] Bluetooth: MGMT ver 1.23
[  246.630197][   T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  246.633946][   T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  246.656327][T10646] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1177'.
[  246.660534][T10646] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1177'.
[  246.664040][T10646] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1177'.
[  246.671748][T10646] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1177'.
[  249.648122][T10726] netlink: 'syz.0.1200': attribute type 1 has an invalid length.
[  250.234975][T10748] gretap2: entered promiscuous mode
[  250.241668][T10748] gretap2: entered allmulticast mode
[  250.735836][T10769] __nla_validate_parse: 40 callbacks suppressed
[  250.735855][T10769] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1211'.
[  250.742861][T10769] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1211'.
[  250.746130][T10769] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1211'.
[  250.751717][T10769] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1211'.
[  252.233828][T10795] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:0
[  252.241108][T10796] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:0
[  252.374798][T10803] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1221'.
[  252.379139][T10803] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1221'.
[  252.382924][T10803] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1221'.
[  252.388096][T10803] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1221'.
[  252.481140][T10805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1222'.
[  252.615299][T10817] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1226'.
[  269.703345][T10850] can: request_module (can-proto-0) failed.
[  269.709008][T10855] openvswitch: netlink: IP tunnel dst address not specified
[  269.743233][T10858] __nla_validate_parse: 15 callbacks suppressed
[  269.743254][T10858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1237'.
[  269.761806][T10855] can: request_module (can-proto-0) failed.
[  269.773913][T10857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1233'.
[  269.773912][T10855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1233'.
[  269.788199][T10855] openvswitch: netlink: Flow actions attr not present in new flow.
[  269.791648][T10857] openvswitch: netlink: Flow actions attr not present in new flow.
[  269.797692][T10850] can: request_module (can-proto-0) failed.
[  269.819739][T10857] can: request_module (can-proto-0) failed.
[  269.822427][T10857] openvswitch: netlink: IP tunnel dst address not specified
[  269.825021][T10850] openvswitch: netlink: IP tunnel dst address not specified
[  269.831310][T10855] can: request_module (can-proto-0) failed.
[  269.896129][T10854] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1236'.
[  269.899706][T10854] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1236'.
[  269.902627][T10854] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1236'.
[  269.906094][T10854] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1236'.
[  269.981689][T10879] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1240'.
[  269.984775][T10879] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1240'.
[  269.988842][T10879] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1240'.
[  271.129526][T10917] team0: entered promiscuous mode
[  271.132094][T10917] team_slave_0: entered promiscuous mode
[  271.134352][T10917] team_slave_1: entered promiscuous mode
[  271.137349][T10917] team0: entered allmulticast mode
[  271.139338][T10917] team_slave_0: entered allmulticast mode
[  271.141676][T10917] team_slave_1: entered allmulticast mode
[  271.224726][T10924] syzkaller1: entered promiscuous mode
[  271.228753][T10924] syzkaller1: entered allmulticast mode
[  272.631855][T10965] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  272.638721][T10966] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  272.961654][T10982] macvlan2: entered promiscuous mode
[  272.963595][T10982] macvlan2: entered allmulticast mode
[  272.966363][T10982] bond16: (slave macvlan2): Opening slave failed
[  273.203128][T11000] warn_alloc: 1 callbacks suppressed
[  273.203143][T11000] syz.2.1271: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  273.214543][T11000] CPU: 0 UID: 0 PID: 11000 Comm: syz.2.1271 Not tainted syzkaller #0 PREEMPT(full) 
[  273.214559][T11000] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  273.214565][T11000] Call Trace:
[  273.214570][T11000]  <TASK>
[  273.214575][T11000]  dump_stack_lvl+0x189/0x250
[  273.214592][T11000]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  273.214606][T11000]  ? __pfx_dump_stack_lvl+0x10/0x10
[  273.214615][T11000]  ? __pfx__printk+0x10/0x10
[  273.214627][T11000]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  273.214636][T11000]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  273.214648][T11000]  warn_alloc+0x214/0x310
[  273.214664][T11000]  ? __pfx_warn_alloc+0x10/0x10
[  273.214680][T11000]  ? __get_vm_area_node+0x28f/0x300
[  273.214691][T11000]  ? nf_tables_newset+0x132b/0x2530
[  273.214705][T11000]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  273.214727][T11000]  ? alloc_pages_mpol+0x3cd/0x4a0
[  273.214741][T11000]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  273.214754][T11000]  ? rcu_is_watching+0x15/0xb0
[  273.214762][T11000]  ? nf_tables_newset+0x132b/0x2530
[  273.214771][T11000]  ? nf_tables_newset+0x132b/0x2530
[  273.214779][T11000]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  273.214792][T11000]  ? nf_tables_newset+0x132b/0x2530
[  273.214802][T11000]  ? nft_table_lookup+0x211/0x230
[  273.214818][T11000]  ? nft_set_lookup+0x128/0x150
[  273.214831][T11000]  ? nft_hash_privsize+0xbf/0xf0
[  273.214841][T11000]  nf_tables_newset+0x132b/0x2530
[  273.214857][T11000]  ? __pfx_nf_tables_newset+0x10/0x10
[  273.214895][T11000]  ? __nla_parse+0x40/0x60
[  273.214906][T11000]  nfnetlink_rcv+0x1132/0x2520
[  273.214934][T11000]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  273.214953][T11000]  ? ref_tracker_free+0x63a/0x7d0
[  273.214977][T11000]  ? __netlink_deliver_tap+0x807/0x850
[  273.214986][T11000]  ? netlink_deliver_tap+0x2e/0x1b0
[  273.215002][T11000]  netlink_unicast+0x82f/0x9e0
[  273.215018][T11000]  ? __pfx_netlink_unicast+0x10/0x10
[  273.215030][T11000]  ? netlink_sendmsg+0x642/0xb30
[  273.215037][T11000]  ? skb_put+0x11b/0x210
[  273.215049][T11000]  netlink_sendmsg+0x805/0xb30
[  273.215061][T11000]  ? __pfx_netlink_sendmsg+0x10/0x10
[  273.215071][T11000]  ? aa_sock_msg_perm+0xf1/0x1d0
[  273.215081][T11000]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  273.215091][T11000]  ? __pfx_netlink_sendmsg+0x10/0x10
[  273.215099][T11000]  __sock_sendmsg+0x21c/0x270
[  273.215114][T11000]  ____sys_sendmsg+0x505/0x830
[  273.215128][T11000]  ? __pfx_____sys_sendmsg+0x10/0x10
[  273.215141][T11000]  ? import_iovec+0x74/0xa0
[  273.215154][T11000]  ___sys_sendmsg+0x21f/0x2a0
[  273.215165][T11000]  ? __pfx____sys_sendmsg+0x10/0x10
[  273.215191][T11000]  ? __fget_files+0x2a/0x420
[  273.215198][T11000]  ? __fget_files+0x3a0/0x420
[  273.215209][T11000]  __x64_sys_sendmsg+0x19b/0x260
[  273.215220][T11000]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  273.215233][T11000]  ? rcu_is_watching+0x15/0xb0
[  273.215243][T11000]  ? do_syscall_64+0xbe/0x3b0
[  273.215256][T11000]  do_syscall_64+0xfa/0x3b0
[  273.215289][T11000]  ? lockdep_hardirqs_on+0x9c/0x150
[  273.215313][T11000]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.215322][T11000]  ? exc_page_fault+0x9f/0xf0
[  273.215330][T11000]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.215338][T11000] RIP: 0033:0x7fe96838ebe9
[  273.215348][T11000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  273.215355][T11000] RSP: 002b:00007fe969151038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  273.215364][T11000] RAX: ffffffffffffffda RBX: 00007fe9685c6090 RCX: 00007fe96838ebe9
[  273.215369][T11000] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007
[  273.215374][T11000] RBP: 00007fe968411e19 R08: 0000000000000000 R09: 0000000000000000
[  273.215378][T11000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  273.215382][T11000] R13: 00007fe9685c6128 R14: 00007fe9685c6090 R15: 00007ffd7e9cf5a8
[  273.215395][T11000]  </TASK>
[  273.216334][T11000] Mem-Info:
[  273.373530][T11000] active_anon:5806 inactive_anon:0 isolated_anon:0
[  273.373530][T11000]  active_file:1449 inactive_file:38303 isolated_file:0
[  273.373530][T11000]  unevictable:1768 dirty:46 writeback:0
[  273.373530][T11000]  slab_reclaimable:10465 slab_unreclaimable:63690
[  273.373530][T11000]  mapped:24363 shmem:2413 pagetables:1022
[  273.373530][T11000]  sec_pagetables:0 bounce:0
[  273.373530][T11000]  kernel_misc_reclaimable:0
[  273.373530][T11000]  free:270937 free_pcp:19097 free_cma:0
[  273.390669][T11000] Node 0 active_anon:13916kB inactive_anon:0kB active_file:4252kB inactive_file:58252kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:50224kB dirty:112kB writeback:0kB shmem:4880kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6616kB pagetables:2400kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  273.402165][T11000] Node 1 active_anon:9308kB inactive_anon:0kB active_file:1544kB inactive_file:94960kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:47228kB dirty:72kB writeback:0kB shmem:4772kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6532kB pagetables:1688kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  273.413217][T11000] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  273.423407][T11000] lowmem_reserve[]: 0 811 811 811 811
[  273.425579][T11000] Node 0 DMA32 free:336356kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13916kB inactive_anon:0kB active_file:4252kB inactive_file:58252kB unevictable:3536kB writepending:112kB present:1556484kB managed:830884kB mlocked:0kB bounce:0kB free_pcp:44584kB local_pcp:29644kB free_cma:0kB
[  273.437083][T11000] lowmem_reserve[]: 0 0 0 0 0
[  273.439002][T11000] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  273.449485][T11000] lowmem_reserve[]: 0 0 854 854 854
[  273.451452][T11000] Node 1 Normal free:273540kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9308kB inactive_anon:0kB active_file:1544kB inactive_file:94960kB unevictable:3536kB writepending:72kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:32480kB local_pcp:17596kB free_cma:0kB
[  273.463103][T11000] lowmem_reserve[]: 0 0 0 0 0
[  273.465218][T11000] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  273.470014][T11000] Node 0 DMA32: 1*4kB (E) 19*8kB (UME) 40*16kB (UE) 351*32kB (UME) 66*64kB (UE) 17*128kB (UM) 2*256kB (UM) 10*512kB (UM) 11*1024kB (UME) 5*2048kB (ME) 71*4096kB (UM) = 336380kB
[  273.476326][T11000] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  273.489548][T11000] Node 1 Normal: 1*4kB (E) 17*8kB (UE) 153*16kB (UME) 91*32kB (UME) 30*64kB (UME) 15*128kB (ME) 10*256kB (UME) 3*512kB (ME) 4*1024kB (M) 3*2048kB (ME) 61*4096kB (M) = 273532kB
[  273.495893][T11000] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  273.499655][T11000] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  273.503558][T11000] 42165 total pagecache pages
[  273.505579][T11000] 0 pages in swap cache
[  273.507489][T11000] Free swap  = 124996kB
[  273.509039][T11000] Total swap = 124996kB
[  273.510731][T11000] 786301 pages RAM
[  273.512297][T11000] 0 pages HighMem/MovableOnly
[  273.514286][T11000] 241348 pages reserved
[  273.517996][T11000] 0 pages cma reserved
[  274.074598][T11017] macvlan0: entered promiscuous mode
[  274.078378][T11017] macvlan0: entered allmulticast mode
[  274.082044][T11017] bond13: (slave macvlan0): Opening slave failed
[  274.873514][T11047] __nla_validate_parse: 32 callbacks suppressed
[  274.873526][T11047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1282'.
[  274.901373][T11047] macvlan2: entered promiscuous mode
[  274.903628][T11047] macvlan2: entered allmulticast mode
[  274.907414][T11047] bond17: (slave macvlan2): Opening slave failed
[  275.050229][T11055] netlink: 'syz.2.1284': attribute type 10 has an invalid length.
[  275.055669][T11055] team0: left promiscuous mode
[  275.063983][T11055] team_slave_0: left promiscuous mode
[  275.065927][T11055] team_slave_1: left promiscuous mode
[  275.068053][T11055] team0: left allmulticast mode
[  275.069719][T11055] team_slave_0: left allmulticast mode
[  275.071522][T11055] team_slave_1: left allmulticast mode
[  275.079468][T11055] team0: Cannot enslave team device to itself
[  275.128586][T11062] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1286'.
[  275.175727][T11071] netlink: 'syz.0.1289': attribute type 1 has an invalid length.
[  275.201851][T11071] 8021q: adding VLAN 0 to HW filter on device bond14
[  275.218587][T11071] bond14: (slave wlan0): Enslaving as an active interface with a down link
[  275.230246][T11071] vlan0: entered allmulticast mode
[  275.232060][T11071] veth1: entered allmulticast mode
[  275.234334][T11071] bond14: (slave vlan0): Opening slave failed
[  275.329424][T11078] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1291'.
[  275.332744][T11078] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1291'.
[  275.336249][T11079] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1291'.
[  275.340081][T11079] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1291'.
[  275.345441][T11079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1291'.
[  275.345467][T11078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1291'.
[  275.352003][T11079] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1291'.
[  275.353217][T11078] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1291'.
[  275.362395][T11079] geneve4: entered promiscuous mode
[  275.364232][T11079] geneve4: entered allmulticast mode
[  275.368371][ T5872] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  275.372139][ T5872] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  275.373072][T11079] netlink: 'syz.0.1291': attribute type 29 has an invalid length.
[  275.375103][ T5872] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  275.377594][T11080] netlink: 'syz.0.1291': attribute type 29 has an invalid length.
[  275.383307][ T5872] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  280.236160][T11203] __nla_validate_parse: 35 callbacks suppressed
[  280.236173][T11203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1321'.
[  280.261642][T11203] macvlan2: entered promiscuous mode
[  280.263542][T11203] macvlan2: entered allmulticast mode
[  280.266017][T11203] bond3: (slave macvlan2): Opening slave failed
[  280.998504][T11232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1328'.
[  281.370888][T11247] netlink: 54 bytes leftover after parsing attributes in process `syz.3.1331'.
[  281.482681][T11253] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1333'.
[  281.486229][T11253] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1333'.
[  281.763978][T11274] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1335'.
[  281.767968][T11274] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1335'.
[  281.771129][T11274] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1335'.
[  281.774167][T11274] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1335'.
[  281.940303][T11284] netlink: 'syz.2.1341': attribute type 1 has an invalid length.
[  281.942936][T11284] netlink: 'syz.2.1341': attribute type 1 has an invalid length.
[  282.092810][T11288] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1342'.
[  283.350628][T11336] netlink: 'syz.0.1353': attribute type 29 has an invalid length.
[  283.355274][T11336] netlink: 'syz.0.1353': attribute type 29 has an invalid length.
[  283.361361][T11337] unsupported nla_type 58
[  285.583577][T11414] __nla_validate_parse: 271 callbacks suppressed
[  285.583591][T11414] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1371'.
[  285.590085][T11414] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1371'.
[  285.593418][T11414] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1371'.
[  285.597683][T11414] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1371'.
[  285.655718][T11415] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1372'.
[  285.659842][T11415] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1372'.
[  285.663527][T11415] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1372'.
[  285.667264][T11415] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1372'.
[  286.520335][T11433] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1376'.
[  286.523776][T11433] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1376'.
[  287.412749][T11447] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  287.415016][T11447] IPv6: NLM_F_CREATE should be set when creating new route
[  288.172665][T11460] syzkaller0: entered promiscuous mode
[  288.174989][T11460] syzkaller0: entered allmulticast mode
[  290.259673][T11525] netlink: 'syz.3.1403': attribute type 10 has an invalid length.
[  290.278481][T11525] team0: Port device dummy0 added
[  291.109974][T11536] __nla_validate_parse: 38 callbacks suppressed
[  291.109986][T11536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1406'.
[  291.135180][T11533] syzkaller1: entered allmulticast mode
[  291.184445][T11542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1407'.
[  291.226508][T11542] macvlan2: entered promiscuous mode
[  291.231236][T11542] macvlan2: entered allmulticast mode
[  291.233791][T11542] bond4: (slave macvlan2): Opening slave failed
[  291.366576][T11551] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1410'.
[  291.372843][T11551] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1410'.
[  291.376071][T11551] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1410'.
[  292.004903][T11558] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1413'.
[  292.011259][T11558] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1413'.
[  292.014267][T11558] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1413'.
[  292.017767][T11558] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1413'.
[  292.021217][T11558] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1413'.
[  292.055985][T11561] netlink: 'syz.2.1414': attribute type 13 has an invalid length.
[  293.051378][T11595] openvswitch: netlink: Unknown key attributes 2
[  294.136031][T11621] netlink: 'syz.3.1431': attribute type 13 has an invalid length.
[  294.247880][T11624] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  294.960444][T11632] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  294.970855][T11632] netlink: 'syz.0.1434': attribute type 1 has an invalid length.
[  296.093566][T11663] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.182095][T11663] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.263800][T11663] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.322571][T11663] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.390450][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  296.399779][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  296.413359][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  296.425458][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  296.934808][T11673] __nla_validate_parse: 150 callbacks suppressed
[  296.934820][T11673] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1444'.
[  296.940306][T11673] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1444'.
[  296.943554][T11673] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1444'.
[  296.946526][T11673] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1444'.
[  297.970563][T11702] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1449'.
[  297.973729][T11702] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1449'.
[  297.977100][T11702] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1449'.
[  297.980053][T11702] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1449'.
[  298.152842][T11705] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1452'.
[  298.156458][T11705] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1452'.
[  298.712588][T11713] Driver unsupported XDP return value 0 on prog  (id 417) dev N/A, expect packet loss!
[  298.892239][T11728] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.943619][T11728] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.992130][T11728] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.049217][T11728] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.105982][T11738] macvlan2: entered promiscuous mode
[  299.108767][T11738] macvlan2: entered allmulticast mode
[  299.112202][T11738] bond18: (slave macvlan2): Opening slave failed
[  299.138364][ T5715] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  299.146456][ T5715] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  299.160252][ T5715] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  299.173694][ T5866] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  300.228888][T11760] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  300.231188][T11760] IPv6: NLM_F_CREATE should be set when creating new route
[  300.233836][T11760] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  300.236132][T11760] IPv6: NLM_F_CREATE should be set when creating new route
[  300.986450][T11765] macvlan2: entered promiscuous mode
[  300.988651][T11765] macvlan2: entered allmulticast mode
[  300.991004][T11765] bond19: (slave macvlan2): Opening slave failed
[  301.954515][T11805] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  301.958523][T11805] syzkaller0: entered promiscuous mode
[  301.960374][T11805] syzkaller0: entered allmulticast mode
[  301.964161][T11805] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  302.669606][T11802] tipc: Resetting bearer <eth:syzkaller0>
[  302.684729][T11802] tipc: Disabling bearer <eth:syzkaller0>
[  302.781611][T11826] __nla_validate_parse: 31 callbacks suppressed
[  302.781624][T11826] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1484'.
[  303.608609][T11842] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1488'.
[  303.611719][T11842] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1488'.
[  303.614703][T11842] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1488'.
[  303.674695][T11844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1489'.
[  303.729401][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  303.771116][T11847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1490'.
[  303.790913][T11847] macvlan0: entered promiscuous mode
[  303.792645][T11847] macvlan0: entered allmulticast mode
[  303.794927][T11847] bond15: (slave macvlan0): Opening slave failed
[  303.985697][T11852] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1491'.
[  303.989141][T11852] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1491'.
[  303.992242][T11852] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1491'.
[  303.995291][T11852] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1491'.
[  304.742539][T11871] netlink: 'syz.0.1496': attribute type 15 has an invalid length.
[  306.690633][T11920] macvlan0: entered promiscuous mode
[  306.692460][T11920] macvlan0: entered allmulticast mode
[  306.694785][T11920] bond16: (slave macvlan0): Opening slave failed
[  307.672507][T11946] macvlan2: entered promiscuous mode
[  307.674766][T11946] macvlan2: entered allmulticast mode
[  307.684932][T11946] bond5: (slave macvlan2): Opening slave failed
[  308.700353][T11972] __nla_validate_parse: 33 callbacks suppressed
[  308.700366][T11972] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1522'.
[  308.705699][T11972] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1522'.
[  308.709658][T11972] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1522'.
[  308.712554][T11972] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1522'.
[  308.773800][T11975] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1523'.
[  308.780892][T11975] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1523'.
[  308.783835][T11975] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1523'.
[  308.787116][T11975] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1523'.
[  308.844501][T11984] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1525'.
[  308.872056][T11982] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1524'.
[  308.945104][T11988] macvlan2: entered promiscuous mode
[  308.947458][T11988] macvlan2: entered allmulticast mode
[  308.950506][T11988] bond20: (slave macvlan2): Opening slave failed
[  309.900494][T12004] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.950816][T12004] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.992012][T12004] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.040494][T12004] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.103063][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  310.113801][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  310.124987][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  310.135690][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  310.268388][T12014] macvlan2: entered promiscuous mode
[  310.270535][T12014] macvlan2: entered allmulticast mode
[  310.272938][T12014] bond21: (slave macvlan2): Opening slave failed
[  316.049463][T12081] __nla_validate_parse: 32 callbacks suppressed
[  316.049478][T12081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1550'.
[  316.469647][T12111] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1557'.
[  316.473012][T12111] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1557'.
[  316.476301][T12111] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1557'.
[  316.479998][T12111] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1557'.
[  317.104683][T12116] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1558'.
[  317.108744][T12116] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1558'.
[  317.111935][T12116] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1558'.
[  317.115245][T12116] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1558'.
[  317.333584][T12119] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1559'.
[  318.143472][T12139] tc_dump_action: action bad kind
[  318.291656][T12145] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input4
[  319.169818][T12171] macvlan2: entered promiscuous mode
[  319.171709][T12171] macvlan2: entered allmulticast mode
[  319.175020][T12171] bond6: (slave macvlan2): Opening slave failed
[  319.756165][T12184] netlink: 'syz.0.1574': attribute type 1 has an invalid length.
[  320.012726][T12187] tipc: Enabling of bearer <eth:gyzkaller0> rejected, failed to enable media
[  320.017722][T12187] team_slave_1: entered allmulticast mode
[  320.195791][T12196] netlink: 'syz.3.1578': attribute type 1 has an invalid length.
[  321.321870][T12217] __nla_validate_parse: 26 callbacks suppressed
[  321.321891][T12217] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1581'.
[  321.328340][T12217] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1581'.
[  321.331232][T12217] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1581'.
[  321.333936][T12217] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1581'.
[  321.339815][T12218] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1582'.
[  321.342605][T12218] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1582'.
[  321.345375][T12218] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1582'.
[  321.350156][T12218] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1582'.
[  321.450817][T12202] delete_channel: no stack
[  321.479852][T12220] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1583'.
[  321.729822][T12224] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1584'.
[  322.050288][T12231] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  322.343196][T12252] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  324.223220][T12291] netlink: 'syz.0.1603': attribute type 3 has an invalid length.
[  324.233373][T12291] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  324.237270][T12291] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  324.452626][T12300] bridge0: port 1(bridge_slave_0) entered disabled state
[  326.916165][T12357] __nla_validate_parse: 47 callbacks suppressed
[  326.916178][T12357] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1620'.
[  326.923043][T12357] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1620'.
[  326.925932][T12357] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1620'.
[  326.936268][T12357] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1620'.
[  327.138149][T12392] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1624'.
[  327.141332][T12392] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1624'.
[  327.144908][T12392] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1624'.
[  327.149274][T12392] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1624'.
[  327.213788][T12396] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1628'.
[  327.218533][T12396] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1628'.
[  328.998345][T12436] netlink: 'syz.0.1639': attribute type 4 has an invalid length.
[  331.292117][T12514] netlink: 'syz.2.1655': attribute type 1 has an invalid length.
[  331.558411][T12529] macvlan2: entered promiscuous mode
[  331.560241][T12529] macvlan2: entered allmulticast mode
[  331.562480][T12529] bond7: (slave macvlan2): Opening slave failed
[  331.639880][T12536] netlink: 'syz.3.1658': attribute type 1 has an invalid length.
[  331.639891][T12537] netlink: 'syz.3.1658': attribute type 1 has an invalid length.
[  331.970176][T12543] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  332.769947][T12558] __nla_validate_parse: 47 callbacks suppressed
[  332.769960][T12558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1664'.
[  332.819129][T12559] netlink: 'syz.2.1664': attribute type 4 has an invalid length.
[  332.902862][T12557] netlink: 'syz.2.1664': attribute type 4 has an invalid length.
[  333.049396][T12573] IPVS: set_ctl: invalid protocol: 41 255.255.255.255:20002
[  333.268780][T12586] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1672'.
[  333.272437][T12586] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1672'.
[  333.276163][T12586] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1672'.
[  333.280400][T12586] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1672'.
[  333.521641][T12593] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1674'.
[  333.524621][T12593] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1674'.
[  333.528321][T12593] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1674'.
[  333.531778][T12593] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1674'.
[  333.981720][T12597] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1675'.
[  334.275777][T12602] netlink: 'syz.2.1676': attribute type 4 has an invalid length.
[  335.326251][ T3038] 
[  335.327137][ T3038] ============================================
[  335.329148][ T3038] WARNING: possible recursive locking detected
[  335.331098][ T3038] syzkaller #0 Not tainted
[  335.332570][ T3038] --------------------------------------------
[  335.335914][ T3038] kworker/u9:3/3038 is trying to acquire lock:
[  335.338400][ T3038] ffffe8ffffc51258 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x73e/0xb80
[  335.342062][ T3038] 
[  335.342062][ T3038] but task is already holding lock:
[  335.344985][ T3038] ffffe8ffffc56b28 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80
[  335.348655][ T3038] 
[  335.348655][ T3038] other info that might help us debug this:
[  335.351758][ T3038]  Possible unsafe locking scenario:
[  335.351758][ T3038] 
[  335.354676][ T3038]        CPU0
[  335.355969][ T3038]        ----
[  335.357294][ T3038]   lock(&pd_list->lock);
[  335.359045][ T3038]   lock(&pd_list->lock);
[  335.360747][ T3038] 
[  335.360747][ T3038]  *** DEADLOCK ***
[  335.360747][ T3038] 
[  335.363982][ T3038]  May be due to missing lock nesting notation
[  335.363982][ T3038] 
[  335.367308][ T3038] 3 locks held by kworker/u9:3/3038:
[  335.369428][ T3038]  #0: ffff888106079148 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  335.373958][ T3038]  #1: ffffc90008a57bc0 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  335.377620][ T3038]  #2: ffffe8ffffc56b28 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80
[  335.380714][ T3038] 
[  335.380714][ T3038] stack backtrace:
[  335.382505][ T3038] CPU: 0 UID: 0 PID: 3038 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) 
[  335.382514][ T3038] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  335.382521][ T3038] Workqueue: pencrypt_parallel padata_parallel_worker
[  335.382544][ T3038] Call Trace:
[  335.382550][ T3038]  <TASK>
[  335.382556][ T3038]  dump_stack_lvl+0x189/0x250
[  335.382568][ T3038]  ? __pfx_dump_stack_lvl+0x10/0x10
[  335.382577][ T3038]  ? __pfx__printk+0x10/0x10
[  335.382589][ T3038]  ? print_lock_name+0xde/0x100
[  335.382599][ T3038]  print_deadlock_bug+0x28b/0x2a0
[  335.382610][ T3038]  validate_chain+0x1a3f/0x2140
[  335.382619][ T3038]  ? __queue_work+0x102/0xfb0
[  335.382628][ T3038]  ? look_up_lock_class+0x74/0x170
[  335.382638][ T3038]  ? register_lock_class+0x51/0x320
[  335.382650][ T3038]  ? __queue_work+0xc56/0xfb0
[  335.382658][ T3038]  __lock_acquire+0xab9/0xd20
[  335.382670][ T3038]  ? padata_do_serial+0x73e/0xb80
[  335.382679][ T3038]  lock_acquire+0x120/0x360
[  335.382690][ T3038]  ? padata_do_serial+0x73e/0xb80
[  335.382700][ T3038]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  335.382710][ T3038]  _raw_spin_lock+0x2e/0x40
[  335.382728][ T3038]  ? padata_do_serial+0x73e/0xb80
[  335.382737][ T3038]  padata_do_serial+0x73e/0xb80
[  335.382749][ T3038]  ? padata_parallel_worker+0x44/0x1d0
[  335.382759][ T3038]  padata_parallel_worker+0x75/0x1d0
[  335.382771][ T3038]  ? process_scheduled_works+0x9ef/0x17b0
[  335.382780][ T3038]  process_scheduled_works+0xae1/0x17b0
[  335.382792][ T3038]  ? __pfx_process_scheduled_works+0x10/0x10
[  335.382802][ T3038]  worker_thread+0x8a0/0xda0
[  335.382811][ T3038]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  335.382824][ T3038]  ? __kthread_parkme+0x7b/0x200
[  335.382834][ T3038]  kthread+0x711/0x8a0
[  335.382844][ T3038]  ? __pfx_worker_thread+0x10/0x10
[  335.382851][ T3038]  ? __pfx_kthread+0x10/0x10
[  335.382860][ T3038]  ? _raw_spin_unlock_irq+0x23/0x50
[  335.382871][ T3038]  ? lockdep_hardirqs_on+0x9c/0x150
[  335.382878][ T3038]  ? __pfx_kthread+0x10/0x10
[  335.382887][ T3038]  ret_from_fork+0x3fc/0x770
[  335.382897][ T3038]  ? __pfx_ret_from_fork+0x10/0x10
[  335.382905][ T3038]  ? __switch_to_asm+0x39/0x70
[  335.382914][ T3038]  ? __switch_to_asm+0x33/0x70
[  335.382923][ T3038]  ? __pfx_kthread+0x10/0x10
[  335.382932][ T3038]  ret_from_fork_asm+0x1a/0x30
[  335.382945][ T3038]  </TASK>

VM DIAGNOSIS:
17:45:29  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90008a570d0
R8 =ffff888020748237 R9 =1ffff110040e9046 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=ffffffff99b018db R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f473a574c40 CR3=0000000124c86000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007f473b2fd100 00007f473a797460 XMM05=00007f473a797478 00007f473a7974c0
XMM06=00007f473a7974b8 00007f473a7974b0 XMM07=00007f473a7974a8 00007f473a7974a0
XMM08=0000000000000000 00007f473a612ee7 XMM09=0000000000000000 00007f473a612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffffe8ffffc56b10 RCX=ffffffff8b7d1e5c RDX=0000000000000000
RSI=0000000000000004 RDI=ffffe8ffffc56b10 RBP=ffffc9000075f8d8 RSP=ffffc9000075f7e0
R8 =ffffe8ffffc56b13 R9 =1ffffd1ffff8ad62 R10=dffffc0000000000 R11=fffff91ffff8ad63
R12=1ffff920000ebf04 R13=0000000000000001 R14=ffffc9000075f840 R15=1ffffd1ffff8ad62
RIP=ffffffff8b7d1e4f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2ce35f CR3=0000000124c86000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=375d91ef81e8ca04 57ea3216bbadbd8b
XMM02=00c2904c375d91ef 81e8ca0457ea3216 XMM03=bbadbd8bbec754ea 9232cd6d9dae0f82
XMM04=00007f473b2fd100 00007f473a797460 XMM05=00007f473a797478 00007f473a7974c0
XMM06=00007f473a7974b8 00007f473a7974b0 XMM07=00007f473a7974a8 00007f473a7974a0
XMM08=0000000000000000 00007f473a612ee7 XMM09=0000000000000000 00007f473a612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
