last executing test programs:

1.309205277s ago: executing program 2 (id=1165):
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000300)={@multicast1, @loopback, <r0=>0x0}, &(0x7f0000000340)=0xc) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async)
sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
recvmsg(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/243, 0x11000}], 0x1}, 0x142)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x8, 0x88e7, 0x3, 0x0, 0x1, 0x5f78, '\x00', r0, 0xffffffffffffffff, 0x0, 0x5, 0x2, 0xa}, 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x14, '\x00', r0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r2, 0x0, 0x3}, 0x18) (async)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r3, &(0x7f0000000d40)=[{{&(0x7f0000000380)=@in={0x2, 0x4e24, @local}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2c000011)

1.240432366s ago: executing program 0 (id=1166):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fc", 0x39}], 0x1}, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000080))
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
sendmmsg(r1, &(0x7f00000001c0)=[{{&(0x7f0000000400)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xbe}, 0x80, &(0x7f0000000140)=[{&(0x7f00000015c0)="4ecf927f9e5352c35122f60725473aa3c7153d7c35577d07f654d13c6f887258f7684ccbdb2069e48bf0332bda96330362cff8f8b1b7be745877087160d205ba5c98773c301d655b4215f501740629720d042942129ea2acd2ab7422b637f425dc1525be608df0bdb170afd1cd1b6c84d20ead161c0c7ecb644e245f5d6a6e6e7e8e2666472273e0f8a44078dffdee453de20a70481f45504b497df0d4d191cbf4b5db1cc3825f75a057fbec67a78d323b7f64a0a9b5aa6dd7fe839f8202e1ae8754aceabeb7d86600b2ac9c2bdeb30c7ed35ef5f0005b3ef9f2801ecb3f9ca946a17a8ae81fda989931cf11e4ecc1c558e279e7e7b6e26c21968f037624cb2df7507edcbbcb22fb2a0d9c0601e3e19852e4de8ba6967d875c03a80b00485fd35f93a9eb7463deac2ba30c1bdaec08350fcd7f8d75fa2aaea41d8e18e4c3666432bcc0cb204e9d92e3c352d93978abfa6c4fcc7b0388a7b0619bcbbf5e2a013f582f67c5e1c04e3f335f6d6cb69ebe772f537c9914e87cf02e04f3859c96cd3deb6588f71a9dfba4af863894fcaf65b5532838490e99c84a11156cc6e9e017809084c973dedcf48ed3c1472572e5a0cad2bdb3b291e4c6697ea0400683d46d85000adcd3de02264148f96e8c0d4bed90633f04454f3ee4592889d44124d7cab093c0962fc5b07359966f25b5e2998a78b7d880c3d3a41e35801852f95b3809e3d7970554ebfd39836cbf52922ac933db74b41e3d978faf4ffa2c505c47ab48a8e4447eaf8d91115ab019a62e16d5230fc3d1255f6557173b1e8d797b56d2acfcff867ac50fa94fff7e0ffb844b0e56cd3266f6192275e5f103c737398908caf9cafece6bcf564cf9d257a3f00698cdc85496ab9d1d5fc84494059cddf428f6b5df7b1f58ba7dcc08e16130ce1bcf9a300de35d3aaed811541cb8f79966016ac24ecb64696773f40a600617e0cd12522485b9c7db128088c63948e4fe5c660b7de0f87c133f82a277da2d710d22ef584094ad21f9e05dce8b8f6c59cbf67bb96b1f89a64b67c31fdcfe6902b33e131c08939e30df4f0b01bea2135ffa8773647f2e92f44445321abf8d7b04baa1e96b45623b38ae09966a1182ef5ed4940b78bb30209eddf470f6af02a7c87c3bfab7c77c423a6eafe8d00a4d3037716db27f69b13e5b0e7e3fefb06cee9f5e67179705df796d627cf21670950e1371a8173b4e1db143b1e444710fff9fce381c6ba01cdea98a75024cdda8fc7b62a438656c2d5cfd822000fc0bf4e7a12176c9fc5e06835f089553e42c7026707914918233cceccdaf7e884c6bf5176e92311111fbd7111b4667f20f2456a62bc5750ace52ab53ec7fa89c60c0bc26a7b49a9c1add3ad15d9291fcbc73d07cceb30ea4f02c44a61ca43b96dc017e11c701557b5c310c9358d3b4e42f0d30f16a30ec935593ac8d5c110fbb4399d580ea38d2e0283e373de14486280c9c985fcd82878e0f6e6b503f0f16b130d7b30af07c6b1f829cdbfa3465ee1bd8c91f38d6e8ed5306ab4a881372ff1f2341667a73e61a0bf82b364231012fb29d756fc8bfe7fb9671fb6f9de4cd595fb576822fe7a13d3bdcf2af033ceedb4194946c3c50fc15e4641485615c58170713a78dc2a2a979795c752ffe815de87717372a82601c774976f95e8cfe25183fa2e3ab8021f4c522e84f6633e2e6d2f46e3e6ebc4fa71b39dc0bc6d6e08715bd3f08f7ad4a1ccc0ed897a642ff899d0865a554c2c285a9c393d0bdb5f0b54c0ec8c45431ac9ccfde3e203a2704575214a8301e3708616756e61f7fd7f8c13b27d93a6e37084bfdfee67918665438238f440ad31d64e89439eca51e30baf58408ca8376c6d1dba577e74f02187138f07380bb671f64bc73e7d8eebb65a080cdb23bb4c8883b8927016f0e3ee9b8f2c20b20e1e479d96d6d8e707859c936754661cd5c03ebcd7989e401b65dabd593d7efcac7f8728ebc3549b39723d0a219e34b3743971304cc37109b2c90c89bca0800d71ef4befa13162cf9c5266d5a8fdc2866c8a41921bf848fe07bd8d7fa60a10a551378ba93929ddc5d376d177794cb16657d3d0e8a88c387d9f8e96f605589629ae8047210ee55327a05f4a4c41f8a9914598cf6e3394ea62199531dbe8609313b39eac4abc02e51120b0d07d783df9e7f9d478cc939737952bd309b1d60b44b4c2fe19afd7e55cc5091cd05e5fdd5845001307bd2fe85af1626767bc24bf1407b9b004479e07f95a42cf61fbdaccecc75ffcc2f20ba38d018e58214385565fdc06ba632b9271c7c941c9b9bfac8ae05a4f661ceb2ac4e96cca7b53b0dbc9e52fd65bcd16d550898526d069dbbeb4407c77dd2e9effadbb8e68e9258369035bc15577c6dfcf21f3ebce6b4a43a9be92b413d9867a4151f0f572f07586f89427a9ed69063011c55f58a5018bca553c05780d843605bd1ce79cf0d3aa90652d55fabd2ba8d0aa06c289b5f5a45c8785c9c0928aaa71c8968b1a7aa037602ad97a2d03fdbed125a82c49f80255142d6c5ab15e7ba0cb971e316a1783fefeea9774edcee5a9734e5734f8518931122331ef35343dd2bb7c98d2e64f7d3cc8f83053a29a5c3f3007bc11880d4dc67310f59ba05d0ccace148bebeb5de54fa760fc077fc9336d59088101eef98bc7ad5747d3f382ea3af7db62502f6ad82f0d31e57f2107813c6b647e53a3bead86f3192c569d6742c8eac13ccf0e8558577d5ab5ec5c22e9d36a663e1b4a6a2f333d803427071dde0b7f723f38f4dfacf6d96fda60a0d25b771d512a38f87b1f93eceb6eb10d7a1c15edd8a0157abe8fbed507c428a1e794ad11c911b8111f2dddcc3ea9e0da343e6bf5a42b107552c27f610d07834bafee6a5bb32b56177ce185e06dfd6fe6a7458fdac96ea634078571fb2e3e01bbf8ea14e9f574d404d0e90b683bac0ddcb1afce51ff86c4c486f88f466ac96b9db58b6ed190dfb0733589c98ec1a1c1994b69ba72d4e21e3b2d4f19aed3a4095f3f095786d0f9ad0cac2e52b7e56ae4014441f000f030263dc2033dada89bfc96f19c8a02ed3837694c3b368eda8a2a8f441f3e5c43cf7fc61b2669aba22d24104d6b8a56e2ca8711cde744323a478d4c48f5dbdf0de33f99928b62c883e0002dc171099de14a088abe995c93545034b006ff46a1e24a870373ded06fb6d09e87593722fb3e62253c5b185b6d995830a08f06239cbf849010fa44a136df8a6b4641fb0e2b17a806dee0ad06191fafcb97252668bbada420d917f2687e7495974d4fad8591a028b74b45935fd73723a61f302eefc1f6dd11d4e88b89708591a6caf86a806858c2008aba2b5506cc348a0e18600d27782bfa3b237cf9f4683bced5870a4ae02b013c164d7263371b3e6567cadfc4fe950253b4909b2d4d5f5a48b2e6edc54e58253877b7031560ef97d120c4c44806abb01e76e689043ebf2e3cb4db735f361865477d13e1997aa14dcd812d18399ee2cea5d4f70d9eb52e41b7567fb64ed4601fd239156a28ca0057d38317fc78e50041796362ed969e78d3813c41435abb1035fe45b0fac1e99c1d6df5da1221f4280d60aa94b295b62375a4638a527089cadacefa303d72316b069179244d6a706a509ce67bd77675f38050adf2ac43b9d5e69c9bf8abef53dd25930159658b5e41b5a375daf478579b6fd59da3dd30b8d3beee20f2b647c82a766bdaf9545024936947634d399c521e4f8039ec82bbb052de33671ca95d57e1c812662b16e5144ec14543abcf7d81751cea5e41dfc9ba637917349d9bf368e96d370a52b53fc4c52cf9bf604649802a4b2596bc33a5e8d65c334400b017c5e080c7881e85f6242836a064bc2d806d2eaaad0c8a749f0a988fdb420359c5742002530ba87fb74f14864da44c5307d165fcfed52fa20f661d37bab5aea97c61189362c54b7fafae7a9ffc096c1a967406b03dab61547904beaf1f3e81e8e4d00da0b1fd5956317e7d0a645185a2f606217b3452fa2deb5bba72db5b7fd87adac62840579d394e25f46cea007ad91b96247bbcec488c60c9b066f1fe8e266201afcc005493c779f03d73cfd875a3ed275285bcadc6078f67dc9a3828004352ac01e9d6a560453e696473b74b698517d1ed89056213a0a8853d060c8ad6fb96b4b51b3c1a7d31a1b087754dffb0271c78fa80282f64e32d9886d5a7b3eab54d05c4b4493df6b95b2e14c08756c0faa47001af564e9269661135645cede71f649b9b841267dc5f73241cfc446bed20a724ce78c549e96dbe1f744d0e04a761b3e779372dc39977a8ab162bbea14ea2d82b9f55583e38aab5b813b20d0feaf59537c1d4415ac39af36bd36484164c20ae1311b50731a3a83a919e5f4389cbbe6cf66e050e4c5f7302fbad23e63e491666e3be475481aaf7e46e6bf2a29b0b3cb2a7b38271870e7a8098d7210186b113ec8587542f8aa7045144cafc7e0005e7e5582de40ed0fb3077f9b86980b3ff86c9463c5287d941a40f044ff11faff748d8f507809a6ec7af0eea4ae07be77f5f4322148aa8dff7bdea856f65a640b607ef36ef566b2183c517b0f1de38e4ed77176b4544ee25b0b279adfc4837a4002e52963814058155777db4d27aa7f8ad64a0d9b885e254479609d6ad3420e207d0898081f58317ff2932733c7e0c6e4ae0f1de329ecde9f74f508ef7597fbf515678b8ac56ed76c42ededdeeb426c93d7b62b3e26ed0dbdf52a59bfbaeb687700194ce2574c0afa16ae74f17ebf38fdcc39fc2f35cda2dee5ed9203367e984e7b5878f87110ca0014a965efe67fc0eb591b0c967e13dd2eb877f3f37f66f936f95f3ea36494188e0d882de5f3f5df3a30bfe06d35237090ee69c326c93c4f08c7a518f6e8cba15029fda03613a018a7902eefd60c47ce2fb3868cf513cef0a0de150f2fe14df4ca771be27f93f4e1bf4a32f31ccac042129132ce45b39f63938302319452bfa4e7aff1bde11b393912927f0301f4d8629320e0cbabaeef58ee4441955f4f4906f95f956815beb33e10914597410ba24f7fb1cb1c948e421f72397e6b6827bccc493426d654f8eb040aa05c67a6802957fd03a3004323ba20de8a2170e4804d6bd2b4286b288301a93a817266346eabeaa1d6f7a6b9c25f09ae190bb090a2110739596f9ff5be2092837cfd116e4ef4f454ab702aa110b77e7045ad9729da93bf17deee352a3cc0cabc41da915af4d7af5212b6a212d92c919a21ff25c1bd1ae967c01d2496652d20e16f36e1fd6c31e550ce70e45f603d50cc73baaa28fe25b7b5d7bc14fe062c3902dfa76d8472daf765108b68914674f5403da0b5d25cb7d0f61a10ce54ddbfdf5bff1866f7bccf53bf279f36bcf31638ae9f22d07c0b9bc5dc830f8479b36c674de37663dd0add4982d707ec5f7023be9f8f85b38da7bdbb8bd02cdb39771d91f7e4af32c0b70a18d771cf069bd7722b06efc9c0e9e7d93faf74def127eea345f62998bdf843a592e53252923f6a912126431a7b868c9f2bdd34fd2b6d9a8843b8bd37eed97c80b17b2f615f148db915a7ea0888d6dc25613741994f16e37d4a562670ecbd17e751b54137adf016a438cbd58dbce8a6ffd2c60186a820d211295ed31e2f5a8e60f9ce5553205a15fe7b9b39e72e520e3631fafa3460cadf2129aae77f51283cdb536f2dcbb09364006333611d4ad2198a6904ee3d715c8726af25ff1e0deaf6cd47be60de3797902dc8a601180e4fc25e1f7dbdc7d6495d0bbdc9dd8ff9dcc3d9ca78630f049848a30d4662f2", 0x1000}, {&(0x7f000001b640)="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", 0x1000}], 0x2, &(0x7f000001c640)=ANY=[@ANYBLOB="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"], 0x1140}}], 0x1, 0x20000000) (async, rerun: 64)
r2 = socket$rds(0x15, 0x5, 0x0) (rerun: 64)
bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) (async)
r4 = socket(0x10, 0x80002, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0)
sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0)

1.230315011s ago: executing program 0 (id=1167):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x45, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48840}, 0x4048004)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x80040005, 0x0, 0x0, 0x40f00, 0x18}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8b2a, &(0x7f0000000040))
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)

1.160374539s ago: executing program 0 (id=1168):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x1d}, 0x2c)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7e}, {@private=0xa010102, 0x4e20, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44)
sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000940)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r7, 0x5f501}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004)
sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000240)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @dev={0xac, 0x14, 0x14, 0x2f}}}}], 0x20}}], 0x1, 0x80)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000400)=ANY=[@ANYBLOB="6a617400000000000000000000000000000000000000100000000000001fe51c000700040000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000afc4a9d07ecec09d376c85a8b0b857642fa2598ab10e826c645d163afb5b4f7d451c0f187e83332abcea1ae052b6f429efe3c781a246de13c129015e443da3f9c614878aa48529a301249ac586d7463de30bdf4d817429ca959c92ae624420b0d417c5be053f7e4a964dcf1ee843b1b12450"], 0x68)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x80005, 0x3)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
shutdown(r9, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x4)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c000000e0000c3d1ffc237d8f15e6a9410707fc5838dc65f9", @ANYRES16=r12, @ANYBLOB="01000000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040810}, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(r10, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="24010000", @ANYRES16=r12, @ANYBLOB="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"], 0x124}}, 0x4000)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="000125bd7000fddbdf254c00000008000300000000000f00a9007365636f6e646e616d650000"], 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x40000)
close(0xffffffffffffffff)

500.501704ms ago: executing program 1 (id=1171):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @local, 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r0, 0x1)
sendmmsg$inet(r0, &(0x7f0000001a40)=[{{&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000400)="4476c8fd8f9b3cfbc282b3839c95c8f7b9f49b03bb5c64590e2cf12fc48e57636f0b38b884e284de18b29fcb1aeafb3e050c33621ef68f5a4265b9ca9a03a8acf91b111ee1d9e7f3c67375e2d0800781d1687778288147c6063c68491920ab85d42a0f2377f2f594789297ed535b255099e9e6c46ddb935ab8716cecd25e26981c75bbf8053637abd27312859636d5a1c20e79d401a9184bfc72e43ee19d5923ef3ba7ddd4d287cbc08e4e1330c5c6b84bb88c9bcdc8aab8bfbe72803b2d9feae9cc5aba161439ad6d0d62bf720afa4dfec3344b632373d8ff2bdd03a49b522075338fe09d57395d02c52a066fce", 0xee}, {&(0x7f0000000580)="fbe0bf559ade93faad02ccd575426bd6ea864884164addec1b32f3ae53618c060ad7611e28eb8074736ccd3a7f19ad6e6e6e24eba6aea01dc7f5fbc693b977677d4d1b6420b10b02a5bd7058d6e8db2a62c53162090b72e58ac14b5b278ad6d4d6fee849bbffddb3a94685701560c1d5acdfa9e865624900d476a9e481ce2ad66d988bdb58baabc02f4b5e43d736", 0x8e}, {&(0x7f0000000640)="a0f5b4440901db8957431be8bc2ea356e693e8285568513ca7bb0f2485bb682f21437e65196c9224d0723ca0bff5a22ef47810433c6ce6145e1d9b6b416c4c0f3999dbcca940ba8ea9708d193ab38df82a284e1cb8f636310407e0150e5f728897cce80d1fe8e2bd4f094bbd712878b7cad9088b0ade39c1acb3ac1fcd612d3513040d21b75670dacee44d42f3d45b75e79938a9bc98f988154141", 0x9b}], 0x3, &(0x7f00000008c0)=[@ip_retopts={{0x5c, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0xe, [@empty, @local, @remote, @rand_addr=0x64010101]}, @noop, @ssrr={0x89, 0xf, 0x36, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @rr={0x7, 0x1f, 0x23, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast2, @loopback, @empty, @rand_addr=0x64010102, @multicast2]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x88, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x44, 0xa7, 0x3, 0x9, [{@local, 0x7f}, {@multicast1, 0x2ca}, {@multicast2, 0x4}, {@multicast1, 0x32f8800}, {@loopback, 0x6}, {@loopback, 0x67423195}, {@remote, 0x7}, {@private=0xa010101, 0x5}]}, @rr={0x7, 0x17, 0x46, [@multicast1, @multicast2, @remote, @rand_addr=0x64010101, @multicast1]}, @noop, @timestamp_prespec={0x44, 0x14, 0x9, 0x3, 0x1, [{@rand_addr=0x64010102, 0x2}, {@local, 0x7}]}, @end, @ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @rand_addr=0x64010100}}}], 0x138}}, {{&(0x7f0000000380)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000a40)="a61ca7e8afeebad687125a5529e82a4ace91ca1970b735fa7897a44fdd2f61235f83454a3a52f61af743f648e2868ea5e37a6b810801852cceb9a24389179a8e7203b5fd24732511e02fa0e60760d722443a2e0d37f10767c89ab78eecb3a08fdd6d99831ef95adc8f4f9f480c28d3ab8cfbf810f7e0b024849febcab875b515cc89ccd6963ffbb25af9412b0a22d748a874cfcbe0e48942dd651b96fea8d9f3a029ae15e5ae14cb1ff7f9b936e1c302aaba9efcbae17d1e3203963659fcfac91bd3d7abbc7f39229cd5a3", 0xcb}, {&(0x7f0000000b40)="fb3d03e2efd2d61244a1de532b0ae8a3bc0e41da63015d9205a139c6d7a3c8f50e7eda256a12e3dbdfb484804058710bf3451c1bd4c33e6ed20ed4ceae13f8f841f63dfd474d44f776061210d1e722825b5309836b4f09b9de3a11aa4148482073f6e981c79bd19fdb50f78046f5bc38a634feceb36499a35f64cbb40cfdf31c13fa9d602a8e77b9bf76a39c4b7a0a06538e914a6564d96d5a6a9baf1640b2814ee144ca49d2ee0bc429ce449a5bcc37b310caf836702cc734ed569fe08a1b82d67e0c82", 0xc4}], 0x2, &(0x7f0000000c40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x3b}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x58}}, {{&(0x7f0000000cc0)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000000e80)=[{&(0x7f0000000d00)="12582842d2db18d461a5f3b887c5a745be296c87ef71c1d05d6751f16eff9d2cfae218fc474db69a1c1778c1e51af74db64b28b059544590b758780fb496d40f4ff52b6848f2a38a07f52110381d31068ed5e079a61a34110a39a8061f63459431310fb3f55dba8efbea7613854bf2752f828bdfd0cafec31a81dff223f32361e0cc5076b5396a393718323ba6c20db5e76745496f962abafda095a30785", 0x9e}, {&(0x7f0000000dc0)="7e9309123f3161aa0a9c9237f3057f44f1dfb1650622955a661450082759", 0x1e}, {&(0x7f0000000e00)="1324f2dd2bc22767e4736dec2aa5c22545d63a96d5532687e6e0ce878e13de28406a2c5d553f176b780632e949578deac516bdf41ff54f06f765b3aa9c6b605b01ff9b6fac492b16277b7cf643d6e641d6d4963bec702f5d7c163c62876c7abd30bf0cf44c4637cb2f", 0x69}], 0x3, &(0x7f0000000ec0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xff}}, @ip_retopts={{0x64, 0x0, 0x7, {[@timestamp_addr={0x44, 0x34, 0x72, 0x1, 0x9, [{@multicast2, 0xfe7f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@remote, 0x7}, {@empty=0x2000000, 0x8}, {@remote, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf}]}, @end, @timestamp_addr={0x44, 0x1c, 0x5a, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0x3d}, 0x2}, {@empty, 0x3}, {@remote, 0xfffffffc}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x11b}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @multicast1}}}], 0x108}}], 0x3, 0x4)

499.966011ms ago: executing program 1 (id=1172):
socket$igmp(0x2, 0x3, 0x2) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket$inet6(0xa, 0x2, 0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1d, 0x6, &(0x7f0000000500)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x27}, 0x94) (async)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) (async)
setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) (async)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async)
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x80)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000000206010200"/19], 0x4c}}, 0x0) (async)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x30, 0x61, 0x61, 0x4f]}}, &(0x7f00000001c0)=""/199, 0x1e, 0xc7, 0x1, 0x3, 0x10000}, 0x28) (async)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)})
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async)
write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6) (async)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) (async)
setsockopt$sock_attach_bpf(r5, 0x6, 0xd, &(0x7f0000000000), 0x4) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)="5490", 0x2}], 0x1}, 0x4048841) (async)
recvmsg(r6, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
recvmsg(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/48, 0x30}], 0x1}, 0x40012146) (async)
setsockopt$sock_attach_bpf(r5, 0x1, 0x24, &(0x7f0000000000), 0x4) (async)
write(r3, &(0x7f0000000340)="ad4add7b05aa7618a9a6ca4ca0e606e6d7f26dd535c8e8d3e2c679285c6483da3d265ba2865c3891685846261c2611bd61f009cb159aafcd1f7b7d70cc8300dc6c4bfd3dff0a642b6d5bba1bd995597ac53cbbc238c1fc535c59c259b7e95745959beaa36b15d34ffe2eceb58857924b0d811d0d799b265f6f6ede5317a8d3cbdd771078913476167c094bc2e0c0f6fc35186e165a1e3dea326deffd", 0x9c) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) (async)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

429.758507ms ago: executing program 1 (id=1173):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
mmap(&(0x7f0000868000/0x3000)=nil, 0x3000, 0x100000c, 0x13, r1, 0x5450b000)
mmap(&(0x7f0000867000/0x3000)=nil, 0x3000, 0x4, 0x50, r1, 0xe9e28000)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000480)={0x8, 0x6, 0x9, 0x2}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0x6b, 0x4c, &(0x7f00000000c0)="efcc14b2819d6160da7e6665c0e903ab788a32ef342edd2876a07a0ad8bafbc63ce2680656e061b884108889477f9b505cb3cbef0f484cbb739086a7cf5dbe7eaa6cf560d7a81a2351f716106ef51f6d27e78ce58169237e68f62eadcd7e196bfe29bb1e6999459b1e581f", &(0x7f0000000180)=""/76, 0x2, 0x0, 0xb7, 0xf5, &(0x7f0000000240)="8cdb57f98b15dc02d6582718af089d4b306b6ab007706be3429412a1d36d225f92850d6311ae5c0459bbf9694d722618873ba3ddd8132804d8d7a707c221f09a545cd619b0eda7bb7f24edf88960fa8bb6943c0492c32fd4c91fc27bfb11a52bfa7db47d906f6e256bb3057e98c2f8680a5121669f174b7db9493f5f2f5f6f14eb969bb48d0e31cd280e83524b108708767ed67eca7e394d1578de7fbbdde43a99b57642f87b916c9f86cb61d431b95e1dac7697bcc485", &(0x7f0000000300)="d9dee62bedc85944f65154f1d206d1ca34d4a98076a5e80994f805c23f01cca0952de96cf7a6813e702cc999fc833f5e90d90b33433f86dfbd7c019169d065bc6540d85708ec8733f924e3d6d00784d98d142eb26159baa8c0c4b5b9867baaa593b311afd43dc93fa34095948e60f1ea109e8bcc4e079486250567edc4c43705b8e7ac110f9f49a7810a7c614d164957a4b419de551f24a0496600d09ce9a074206abd00d106c4c9b4c441431e9c0da636166cfb1d4506b28a61df2d08d3e282e04ed0714d8d2c4c23b1a9269a9a99ed2f3ef4a16944be272ef2a3b0c3e60614c0f4d33129ba95981bf46fc9820aa67905d2f1a198", 0xc, 0x0, 0x18000}, 0x50)
close(r0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @empty, 0x1}, 0x1c)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10)
sendmsg$inet(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f00000002c0)=r4}, 0x20)
sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)
recvmsg$unix(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r10, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r12)
sendmsg$NL80211_CMD_REQ_SET_REG(r12, &(0x7f0000000380)={0x0, 0xfffffe30, &(0x7f0000000340)={&(0x7f0000000200)={0x1c, r13, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x0, 0x21, 'bb\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x200040c0)
sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="203005000000000014002b8008000100", @ANYRES32=r9, @ANYBLOB="e620ac6d", @ANYRES32=r9, @ANYBLOB="08001b"], 0x3c}}, 0x4040080)
listen(r3, 0x1)
socket$inet_mptcp(0x2, 0x1, 0x106)

429.064673ms ago: executing program 2 (id=1174):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
close(0xffffffffffffffff)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fe14000004000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x4, 0x6}, 0x48)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, &(0x7f0000000200), &(0x7f0000000240)=@udp=r4, 0x1}, 0x20)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r5, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x11, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x71}, {}, {}, [@map_idx_val={0x18, 0xd, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0xffffffff, 0x9b, &(0x7f0000000540)=""/155, 0x41100, 0x9, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x0, 0xb, 0x5, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000a40)=[0xffffffffffffffff, r2, r3, r5, 0x1, r6], &(0x7f0000000a80)=[{0x2, 0x5, 0x3, 0x9}, {0x1, 0x5, 0x5, 0x8}, {0x0, 0x4, 0x0, 0x2}, {0x5, 0x4, 0xd, 0x7}, {0x1, 0x1, 0x1, 0x4}, {0x1, 0x4, 0x8, 0x7}, {0x1, 0x3, 0x7, 0x7473c54b6a76baf8}], 0x10, 0xfffffffe}, 0x94)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010101}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x401, 0x3d3, 0x3, 0x3ff, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r8 = socket(0x10, 0x80003, 0x0)
sendmsg$nl_route_sched(r8, 0x0, 0x0)
getsockname$packet(r8, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711236000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmmsg$alg(r1, &(0x7f0000001040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}], 0x1, 0xc8d1)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x8, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x5, 0x3, 0x3, 0x1, 0xfffffffa, 0x1, 0x6, 0x9, 0x4, 0x5, 0x5, 0x100000, 0x762, 0xffffffff, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0xa, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0xf, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xd, 0x5, 0x20006, 0x5, 0x2, 0x400000b, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x9, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

370.122869ms ago: executing program 1 (id=1175):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', <r0=>0x0}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r1, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5}, 0x48)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)
sendmmsg$inet6(r2, &(0x7f00000008c0)=[{{&(0x7f0000000600)={0xa, 0x4e24, 0x8, @private2, 0x988}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000640)="5e89f617007cf9bbf4884e7bc29242d3a7d8a62384bbcc6db343f1406843881b18bbf8d0bf720e8484f8be19bdc9949bc3f5cb304bcbb7e586979fa3ddf26e0d0beade4a4f78026801f93a6a49241219709e9f5b17c3e383a0ec0c9c4f4abffa244519d41c392ec3b4f92f180228c6cad1a111c4e41d17826c705084", 0x7c}, {&(0x7f00000006c0)="cd9e53472efd7ada42fb41fe40fd1bc4cb9f96992eab5cfe1ad1abd2cfcd20189daace143c0dd02b7637a8cb55b638654043104a8a11801a9b1c5c1a3370f79b106ee4cfb801d68cf1932243478c30a43aa66c0f704dc2099329039f8c57661e97ad43a9dc9ab535ba145828a8e48b9804d887d7328df98a3c8a6cc61217c04a00ba3a1bb5d16e686d8c9a671c7dab5f5533038b9c22438ac3916f010dabc01afa856950d2bdda9878dfeeafb56c43d96dd9a8f89e0493e7724917fdc795f876a26d54d86a98ccfde420522becd65c7a22c9", 0xd2}, {&(0x7f00000007c0)="787e826d2731e9f709b345fad56889", 0xf}, {&(0x7f0000000800)="69c45ad71d37e89e08275c83e30dbf155ff3e5efd703ba4ac10c7cdede392e19f7e0f2a8f86c568ea6605c6c8f1238f575fefcc1828ea0d517e5e94e6c75cbab9b18caac824b8d65ae8f43f82f0b1e2cd34494ba71ce1629", 0x58}], 0x4}}], 0x1, 0x408c0)
ioctl$FS_IOC_GETFSUUID(r3, 0x80111500, &(0x7f0000006380))
r4 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c9, &(0x7f0000000100))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000000000000000000021300000000"], 0x0, 0x1a, 0x0, 0x1}, 0x28)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x20}, 0x18)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x8000)
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@link_local={0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp_prespec={0x44, 0x4, 0x15, 0x3, 0xd}]}}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)
sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@multicast1}, 0x0, @in6=@empty, 0x0, 0x4, 0x0, 0x7}]}]}, 0xfc}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94)
syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r2)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r11=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x70bd2b, 0x25dfdbfe, {0xa, 0x8, 0x80, 0x0, r11}, [@IFA_FLAGS={0x8, 0x8, 0x4e0}, @IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, 0x34}, 0x1, 0x2}, 0x10)

368.461431ms ago: executing program 2 (id=1176):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000040)='\x00', 0x1)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r1, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r2, 0x6, 0x9, &(0x7f0000000000)=0x2000, 0x4)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async)
socket$rxrpc(0x21, 0x2, 0x2) (async)
setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000040)='\x00', 0x1) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r1, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
setsockopt$inet_tcp_int(r2, 0x6, 0x9, &(0x7f0000000000)=0x2000, 0x4) (async)

362.692386ms ago: executing program 1 (id=1177):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unshare(0x62040200) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0) (async)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) (async, rerun: 64)
listen(r1, 0x0) (async, rerun: 64)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async, rerun: 32)
r3 = accept(r1, 0x0, 0x0) (rerun: 32)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async)
pipe(&(0x7f0000000100)) (async)
socket(0x1d, 0x2, 0x6) (async)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async)
sendmmsg$inet6(r4, &(0x7f0000006880)=[{{&(0x7f0000000500)={0xa, 0x4e21, 0x8d8, @loopback, 0x2}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000540)="f938a288dce39a4c99ada446462735aa025d84b3fcbda608ff3b305a35122695440c65e86db851038b5a20dcd4f611d4ca8bc5154babc2b397212e3a73e9c0dd49bdca0777afcc7d00c0c0105511ccd1fa34262116f618dcaf7b33eb9446a3", 0x5f}, {0x0}, {0x0}], 0x3}}], 0x1, 0x100)
pselect6(0x40, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x100000000000, 0x8, 0x4, 0x14}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0)

310.229219ms ago: executing program 2 (id=1178):
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) (async)
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x8, 0x4, 0x4009, 0xa, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value=0x3f000000}, 0x48) (async)
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="011700000000000000000200000008000300", @ANYRES32=0x0, @ANYBLOB="0800020000000000"], 0x24}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) (async)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xa8, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x35, 0x9}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1dd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x206}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x9e64cda}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1ff}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x5c8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffffb}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0xa8}, 0x1, 0x0, 0x0, 0x4008400}, 0x4800)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080), 0x4)
sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (async)
close(r5) (async)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000100080c10000000000000000000", 0x58}], 0x1)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000002400ffffffff0000800000001100000004002f80"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f0000000040)) (async)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) (async)
r9 = accept4(r8, 0x0, 0x0, 0x800)
syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r9)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="00000000c0b37649c716334303249a25268c6345dadac4c8329657aa8d7a60f87cca43ab598933fde535b84e63e89806a5db6deac4064661a8273783", @ANYRES16=r11, @ANYRES16=r9, @ANYRES32=0x0, @ANYBLOB="a739dfe54ad994fa18c27526b51001fb4f778791377c"], 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000054)

307.239126ms ago: executing program 0 (id=1179):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @local, 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r0, 0x1)
sendmmsg$inet(r0, &(0x7f0000001a40)=[{{&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000400)="4476c8fd8f9b3cfbc282b3839c95c8f7b9f49b03bb5c64590e2cf12fc48e57636f0b38b884e284de18b29fcb1aeafb3e050c33621ef68f5a4265b9ca9a03a8acf91b111ee1d9e7f3c67375e2d0800781d1687778288147c6063c68491920ab85d42a0f2377f2f594789297ed535b255099e9e6c46ddb935ab8716cecd25e26981c75bbf8053637abd27312859636d5a1c20e79d401a9184bfc72e43ee19d5923ef3ba7ddd4d287cbc08e4e1330c5c6b84bb88c9bcdc8aab8bfbe72803b2d9feae9cc5aba161439ad6d0d62bf720afa4dfec3344b632373d8ff2bdd03a49b522075338fe09d57395d02c52a066fce", 0xee}, {&(0x7f0000000580)="fbe0bf559ade93faad02ccd575426bd6ea864884164addec1b32f3ae53618c060ad7611e28eb8074736ccd3a7f19ad6e6e6e24eba6aea01dc7f5fbc693b977677d4d1b6420b10b02a5bd7058d6e8db2a62c53162090b72e58ac14b5b278ad6d4d6fee849bbffddb3a94685701560c1d5acdfa9e865624900d476a9e481ce2ad66d988bdb58baabc02f4b5e43d736", 0x8e}, {&(0x7f0000000640)="a0f5b4440901db8957431be8bc2ea356e693e8285568513ca7bb0f2485bb682f21437e65196c9224d0723ca0bff5a22ef47810433c6ce6145e1d9b6b416c4c0f3999dbcca940ba8ea9708d193ab38df82a284e1cb8f636310407e0150e5f728897cce80d1fe8e2bd4f094bbd712878b7cad9088b0ade39c1acb3ac1fcd612d3513040d21b75670dacee44d42f3d45b75e79938a9bc98f988154141", 0x9b}], 0x3, &(0x7f00000008c0)=[@ip_retopts={{0x5c, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0xe, [@empty, @local, @remote, @rand_addr=0x64010101]}, @noop, @ssrr={0x89, 0xf, 0x36, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @rr={0x7, 0x1f, 0x23, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast2, @loopback, @empty, @rand_addr=0x64010102, @multicast2]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x88, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x44, 0xa7, 0x3, 0x9, [{@local, 0x7f}, {@multicast1, 0x2ca}, {@multicast2, 0x4}, {@multicast1, 0x32f8800}, {@loopback, 0x6}, {@loopback, 0x67423195}, {@remote, 0x7}, {@private=0xa010101, 0x5}]}, @rr={0x7, 0x17, 0x46, [@multicast1, @multicast2, @remote, @rand_addr=0x64010101, @multicast1]}, @noop, @timestamp_prespec={0x44, 0x14, 0x9, 0x3, 0x1, [{@rand_addr=0x64010102, 0x2}, {@local, 0x7}]}, @end, @ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @rand_addr=0x64010100}}}], 0x138}}, {{&(0x7f0000000380)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000a40)="a61ca7e8afeebad687125a5529e82a4ace91ca1970b735fa7897a44fdd2f61235f83454a3a52f61af743f648e2868ea5e37a6b810801852cceb9a24389179a8e7203b5fd24732511e02fa0e60760d722443a2e0d37f10767c89ab78eecb3a08fdd6d99831ef95adc8f4f9f480c28d3ab8cfbf810f7e0b024849febcab875b515cc89ccd6963ffbb25af9412b0a22d748a874cfcbe0e48942dd651b96fea8d9f3a029ae15e5ae14cb1ff7f9b936e1c302aaba9efcbae17d1e3203963659fcfac91bd3d7abbc7f39229cd5a3", 0xcb}, {&(0x7f0000000b40)="fb3d03e2efd2d61244a1de532b0ae8a3bc0e41da63015d9205a139c6d7a3c8f50e7eda256a12e3dbdfb484804058710bf3451c1bd4c33e6ed20ed4ceae13f8f841f63dfd474d44f776061210d1e722825b5309836b4f09b9de3a11aa4148482073f6e981c79bd19fdb50f78046f5bc38a634feceb36499a35f64cbb40cfdf31c13fa9d602a8e77b9bf76a39c4b7a0a06538e914a6564d96d5a6a9baf1640b2814ee144ca49d2ee0bc429ce449a5bcc37b310caf836702cc734ed569fe08a1b82d67e0c82", 0xc4}], 0x2, &(0x7f0000000c40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x3b}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x58}}, {{&(0x7f0000000cc0)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000000e80)=[{&(0x7f0000000d00)="12582842d2db18d461a5f3b887c5a745be296c87ef71c1d05d6751f16eff9d2cfae218fc474db69a1c1778c1e51af74db64b28b059544590b758780fb496d40f4ff52b6848f2a38a07f52110381d31068ed5e079a61a34110a39a8061f63459431310fb3f55dba8efbea7613854bf2752f828bdfd0cafec31a81dff223f32361e0cc5076b5396a393718323ba6c20db5e76745496f962abafda095a30785", 0x9e}, {&(0x7f0000000dc0)="7e9309123f3161aa0a9c9237f3057f44f1dfb1650622955a661450082759", 0x1e}, {&(0x7f0000000e00)="1324f2dd2bc22767e4736dec2aa5c22545d63a96d5532687e6e0ce878e13de28406a2c5d553f176b780632e949578deac516bdf41ff54f06f765b3aa9c6b605b01ff9b6fac492b16277b7cf643d6e641d6d4963bec702f5d7c163c62876c7abd30bf0cf44c4637cb2f", 0x69}], 0x3, &(0x7f0000000ec0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xff}}, @ip_retopts={{0x64, 0x0, 0x7, {[@timestamp_addr={0x44, 0x34, 0x72, 0x1, 0x9, [{@multicast2, 0xfe7f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@remote, 0x7}, {@empty=0x84000000, 0x8}, {@remote, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf}]}, @end, @timestamp_addr={0x44, 0x1c, 0x5a, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0x3d}, 0x2}, {@empty, 0x3}, {@remote, 0xfffffffc}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x11b}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @multicast1}}}], 0x108}}], 0x3, 0x4)

215.426655ms ago: executing program 0 (id=1180):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18)
socket$kcm(0x2, 0x1, 0x84) (async)
socket$kcm(0x2, 0x1, 0x84)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
socket$inet6(0xa, 0x5, 0x0)
r4 = accept(r2, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="d4d9dfdb6510fba808001b"], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000060a0b0400000000000000000200000018000480140001800a0001007265646972000000040002800900010073797a30000000000900020073"], 0x6c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)={0x20, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa, 0x2, {0x5, 0x2}}]}, 0x20}}, 0x20000014)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000240)=0x101, 0x4)
connect$unix(r4, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
r7 = socket(0x2, 0x5, 0x0)
sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="f9", 0x1}], 0x1, 0x0, 0x0, 0x80020}], 0x1, 0x40c0) (async)
sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="f9", 0x1}], 0x1, 0x0, 0x0, 0x80020}], 0x1, 0x40c0)
sendmmsg$inet_sctp(r7, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0}], 0x1, &(0x7f0000000140)=ANY=[], 0x30}], 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xb3898a58af3ef807, 0x0) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xb3898a58af3ef807, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)

200.683523ms ago: executing program 1 (id=1181):
r0 = socket(0x40000000015, 0x5, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="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", @ANYRESOCT=r4, @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0x40840}, 0x2404c810)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'rose0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r10}, 0x18)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@cgroup=r9, r10, 0x2b, 0x20}, 0x20)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r8], 0x20}}, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x81, 0x8d70, 0x5, 0x0, 0x1, 0x7, '\x00', r8, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000001480)="bd8ce4c393994a942c43279b707073e88a4922e74fcf23aaf10a60aa213be80120a843e136b95d9fa17ce81836049805eef28b50f9828174bac8e152693bb4cea1e5878d91efb114b3617a7c05486a57fc49d6f787c824c00b718ba24795696ac24108ebbfbe545e5708b6b6d092e6a422dc254eb3ccde9c848e28c2323659d0a19736f9281f707fa254b968", &(0x7f0000000280)=""/81, &(0x7f0000001540)="87deca53c6f3ad7e7e7b27790d11c22e4be6fc645e59c7e51b1f47c489f75849c1e96e17402091673c0979dd2c78bdbdafe16c333639a4e42f32bbda526db987b71c898b632d550d71b45590e79c76bcf1507e99e26e7bb8a03ff62afccb46a6a88f99788300a69f618fe25db16289b1749dc4d003e7765dfd7b4fc6505f4027df64dd25afebdda4c96969277270737c53bca059109cf33b66138dc5c296f6acf63727fe6b892e8344", &(0x7f0000000340)="2e58a7daa4811bbb0c2f23803ad2e4988210778c3e590501fdd70c834c71a71f5567d32ad4bc5e6be71b81e6d79c1cddd45bc29e6af1cf1dd07eeb0c0795e6ef2797f4d7482d98edd1bfd0fa971943970390c31e7b877a3d98ad9116fbd8e69f", 0xd3a, r11, 0x4}, 0x38)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0)

200.28458ms ago: executing program 2 (id=1182):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @empty, 0x1}, 0x1c)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x22c, r3, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffff01}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0xd0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb0ac}]}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5f44}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xea84}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5d9b}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xcb}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x775d}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000000000000000}]}]}, 0x22c}}, 0x4008000)
listen(r1, 0x1)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000140)=0x7, 0x4)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r5 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0xfffffdef}}, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
close(r0) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @empty, 0x1}, 0x1c) (async)
socket(0x10, 0x2, 0x0) (async)
write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) (async)
recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x22c, r3, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffff01}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0xd0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb0ac}]}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5f44}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xea84}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5d9b}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xcb}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x775d}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000000000000000}]}]}, 0x22c}}, 0x4008000) (async)
listen(r1, 0x1) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000140)=0x7, 0x4) (async)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async)
accept(r0, 0x0, 0x0) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0xfffffdef}}, 0x1) (async)

59.989722ms ago: executing program 0 (id=1183):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18)
socket$kcm(0x2, 0x1, 0x84)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
close(0xffffffffffffffff)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="500100001000130400000000fadbdf25fe800000000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffff000000060000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000008000000000000000000000000000000000000000000000000000010a000000000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000004000000025cac5216d1c8af0a976902918bf448c5d9f5459"], 0x150}}, 0x4000080)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @empty, 0x4}, 0x1c)
r4 = socket$inet6(0xa, 0x5, 0x0)
r5 = accept(r2, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000010800"/20, @ANYRES32=r4, @ANYBLOB="d4a808001b000010000000900a88278dea062f1aa15b06bff91fcb820c89aae104c7981d852367cd72842eb2ac2b4b7ea358555de96e33f89334c8d96d0f37f053402bd4b9da7840555ce04e8f185cec976c60a0374728075097587b23a4cae04252eab44bfaabc4ab515eb11dd43fa887122ec191b4e33723955364aad4d9256f21c3e0e10e2c680035f67064d58dcc13e41f77198df55b620371acb66b068fbf8abbf6def772ee6ad21d523a26132db82e65796faa25c2c96ae0f1da6ae1eb1a092aec0c3063016a596809bcf3d0cad5941c1173081f2966802513c641825428a7ddaba68fe5399fe5f540ff04b506eaf6b849e9bcd85e"], 0x28}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0)
connect$unix(r5, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e)
r6 = socket(0x2, 0x5, 0x0)
sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="f9", 0x1}], 0x1, 0x0, 0x0, 0x80020}], 0x1, 0x40c0)
sendmmsg$inet_sctp(r6, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0}], 0x1, &(0x7f0000000140)=ANY=[], 0x30}], 0x1, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)

0s ago: executing program 2 (id=1184):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28)
r3 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102})
syz_extract_tcp_res(&(0x7f0000000140)={0x41424344, <r4=>0x41424344}, 0x400, 0x8)
syz_extract_tcp_res$synack(&(0x7f0000000180)={<r5=>0x41424344}, 0x1, 0x0)
write$tun(r3, &(0x7f0000000280)={@val={0x0, 0x18}, @val={0x1, 0x80, 0x5, 0xfe4, 0x5, 0x69b}, @ipv6=@tcp={0xd, 0x6, "09e82e", 0x118, 0x6, 0x1, @mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, {[@dstopts={0x29, 0x9, '\x00', [@calipso={0x7, 0x40, {0x2, 0xe, 0x8, 0x2, [0x6, 0x9, 0x1, 0x5, 0x2, 0x2, 0x1]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], {{0x4e23, 0x4e23, r4, r5, 0x1, 0x0, 0x10, 0xca, 0x3, 0x0, 0xf2f, {[@timestamp={0x8, 0xa, 0xfffffffa, 0x6}, @sack_perm={0x4, 0x2}, @generic={0x0, 0xa, "6f60f0d5103bab7a"}, @window={0x3, 0x3, 0x81}, @fastopen={0x22, 0xd, "817fa9336dea59775ca6bf"}, @mss={0x2, 0x4, 0xe26}, @nop]}}, {"8ea4a591a1af3cd06990d58019334303b6b6e5674eda1f8a4bf69ccdf2e0714f189250cd98b0002c5294e73a90f85f0864fed5bb2ff5240f929cf25e6043b6179666ca9acee7ca536dcc5e2660c9c6ce3ddba657e4028c68b2d3a5eafc322fc0be9a70f902f8580aba4426030b23aaf6ea93c4d5376e33233c7b2a16aca41a5a"}}}}}, 0x14e)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000200)={r7})
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0)
writev(r9, &(0x7f0000003500)=[{&(0x7f00000035c0)="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", 0x102}], 0x1)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, r9}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r8, r10, 0x2, 0x2}, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:50445' (ED25519) to the list of known hosts.
syzkaller login: [   48.317112][ T5768] cgroup: Unknown subsys name 'net'
[   48.424330][ T5768] cgroup: Unknown subsys name 'cpuset'
[   48.429149][ T5768] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.761825][ T5768] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.498834][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.502611][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.505784][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.509420][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.512323][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.518208][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.524493][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.529586][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.534640][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.539026][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.551220][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.557529][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.561024][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.565515][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.568944][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.752047][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   53.829059][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   53.915587][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.918815][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.922319][ T5831] bridge_slave_0: entered allmulticast mode
[   53.925173][ T5831] bridge_slave_0: entered promiscuous mode
[   53.949284][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.952402][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.955151][ T5831] bridge_slave_1: entered allmulticast mode
[   53.958892][ T5831] bridge_slave_1: entered promiscuous mode
[   54.027403][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.035927][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.039253][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.043405][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.045736][ T5827] bridge_slave_0: entered allmulticast mode
[   54.048412][ T5827] bridge_slave_0: entered promiscuous mode
[   54.066666][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.069024][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.072022][ T5827] bridge_slave_1: entered allmulticast mode
[   54.074675][ T5827] bridge_slave_1: entered promiscuous mode
[   54.078698][ T5831] team0: Port device team_slave_0 added
[   54.092214][ T5831] team0: Port device team_slave_1 added
[   54.114768][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   54.129665][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.138634][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.141733][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.150585][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.155785][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.164204][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.166466][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.174971][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.213457][ T5827] team0: Port device team_slave_0 added
[   54.247512][ T5827] team0: Port device team_slave_1 added
[   54.272294][ T5831] hsr_slave_0: entered promiscuous mode
[   54.274676][ T5831] hsr_slave_1: entered promiscuous mode
[   54.346099][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.348959][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.359892][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.364739][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.367303][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.370337][ T5836] bridge_slave_0: entered allmulticast mode
[   54.374587][ T5836] bridge_slave_0: entered promiscuous mode
[   54.377782][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.380169][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.382869][ T5836] bridge_slave_1: entered allmulticast mode
[   54.385737][ T5836] bridge_slave_1: entered promiscuous mode
[   54.402232][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.405198][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.417438][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.444017][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.449142][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.518070][ T5836] team0: Port device team_slave_0 added
[   54.526815][ T5827] hsr_slave_0: entered promiscuous mode
[   54.529916][ T5827] hsr_slave_1: entered promiscuous mode
[   54.533260][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.536551][ T5827] Cannot create hsr debugfs directory
[   54.547070][ T5836] team0: Port device team_slave_1 added
[   54.589921][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.592708][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.601830][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.614873][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.617258][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.627652][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.716648][ T5836] hsr_slave_0: entered promiscuous mode
[   54.719753][ T5836] hsr_slave_1: entered promiscuous mode
[   54.723464][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.726251][ T5836] Cannot create hsr debugfs directory
[   54.740066][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.764197][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.795544][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.819272][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.899737][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.904822][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.920237][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.932013][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.983675][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.993909][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.999347][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.013088][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.019815][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.045472][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   55.054017][  T246] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.056360][  T246] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.071712][  T246] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.074139][  T246] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.121960][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.126499][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.133271][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.169728][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   55.180301][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   55.191681][ T3628] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.194785][ T3628] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.211107][ T3628] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.213486][ T3628] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.234553][ T3628] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.236875][ T3628] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.240138][ T3628] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.242542][ T3628] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.280080][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.317359][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   55.357041][ T5831] veth0_vlan: entered promiscuous mode
[   55.372623][ T5831] veth1_vlan: entered promiscuous mode
[   55.390123][ T5831] veth0_macvtap: entered promiscuous mode
[   55.395032][ T5831] veth1_macvtap: entered promiscuous mode
[   55.404655][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.410809][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.414562][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.417367][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.420114][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.424907][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.519287][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.526474][ T3628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.529770][ T3628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.537455][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.551246][ T5835] Bluetooth: hci1: command tx timeout
[   55.551622][   T54] Bluetooth: hci0: command tx timeout
[   55.611787][ T3628] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.615878][ T3628] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.619768][ T5836] veth0_vlan: entered promiscuous mode
[   55.632109][   T54] Bluetooth: hci2: command tx timeout
[   55.643876][ T5827] veth0_vlan: entered promiscuous mode
[   55.662617][ T5836] veth1_vlan: entered promiscuous mode
[   55.669664][ T5827] veth1_vlan: entered promiscuous mode
[   55.675366][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.734730][ T5836] veth0_macvtap: entered promiscuous mode
[   55.742368][ T5827] veth0_macvtap: entered promiscuous mode
[   55.749819][ T5827] veth1_macvtap: entered promiscuous mode
[   55.760020][ T5836] veth1_macvtap: entered promiscuous mode
[   55.777146][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.791816][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.795044][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.816310][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.825431][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.828864][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.833361][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.836582][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.844658][ T5895] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET)
[   55.857332][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.861562][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.865000][ T5827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.868306][ T5827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.064201][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.070659][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.092601][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.095811][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.132292][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.135187][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.147117][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.153236][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.241706][ T5903] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.293933][ T5908] syzkaller1: entered promiscuous mode
[   56.295904][ T5908] syzkaller1: entered allmulticast mode
[   56.326632][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.330001][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.383319][ T5908] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   56.391620][ T5908] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   56.438446][ T5908] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   56.443944][ T5908] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   56.447723][ T5908] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   56.451848][ T5908] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   56.649477][ T5917] netlink: 'syz.0.7': attribute type 1 has an invalid length.
[   56.725283][ T5917] veth3: entered promiscuous mode
[   56.727655][ T5917] bridge0: port 3(veth3) entered blocking state
[   56.730109][ T5917] bridge0: port 3(veth3) entered disabled state
[   56.733172][ T5917] veth3: entered allmulticast mode
[   56.747908][ T5917] erspan0: entered allmulticast mode
[   56.755929][ T5917] netlink: 'syz.0.7': attribute type 33 has an invalid length.
[   56.758944][ T5917] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7'.
[   56.837987][ T5924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'.
[   56.843200][ T5924] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   56.846321][ T5924] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   57.026989][ T5929] netlink: 207084 bytes leftover after parsing attributes in process `syz.1.9'.
[   57.089098][ T5931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10'.
[   57.342858][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'.
[   57.351343][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'.
[   57.631158][   T54] Bluetooth: hci0: command tx timeout
[   57.631520][ T5835] Bluetooth: hci1: command tx timeout
[   57.720694][ T5835] Bluetooth: hci2: command tx timeout
[   58.286153][ T5962] pim6reg1: entered promiscuous mode
[   58.288415][ T5962] pim6reg1: entered allmulticast mode
[   58.292825][ T5962] netlink: 'syz.1.18': attribute type 1 has an invalid length.
[   58.296055][ T5962] netlink: 224 bytes leftover after parsing attributes in process `syz.1.18'.
[   58.313189][ T5962] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18'.
[   58.322206][ T5963] netlink: 48 bytes leftover after parsing attributes in process `syz.0.17'.
[   58.353904][ T5962] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18'.
[   58.882903][ T6003] warning: `syz.2.29' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.044016][ T6008] tipc: Started in network mode
[   59.045865][ T6008] tipc: Node identity 1a989300facd, cluster identity 4711
[   59.050715][ T6008] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.095453][ T6008] syzkaller0: entered promiscuous mode
[   59.099154][ T6008] syzkaller0: entered allmulticast mode
[   59.101805][ T6008] tipc: Resetting bearer <eth:syzkaller0>
[   59.287211][  T246] tipc: Resetting bearer <eth:syzkaller0>
[   59.290128][ T6007] tipc: Resetting bearer <eth:syzkaller0>
[   59.362857][ T6019] Bluetooth: MGMT ver 1.23
[   59.714136][   T54] Bluetooth: hci0: command tx timeout
[   59.717164][ T5835] Bluetooth: hci1: command tx timeout
[   59.791911][ T5835] Bluetooth: hci2: command tx timeout
[   60.029965][ T6007] tipc: Disabling bearer <eth:syzkaller0>
[   60.117538][ T6034] Cannot find add_set index 0 as target
[   60.225514][   T33] audit: type=1804 audit(1752530933.585:2): pid=6042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.42" name="/newroot/12/cgroup.controllers" dev="tmpfs" ino=80 res=1 errno=0
[   60.241111][   T33] audit: type=1800 audit(1752530933.585:3): pid=6042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.42" name="cgroup.controllers" dev="tmpfs" ino=80 res=0 errno=0
[   60.755089][ T6080] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.758602][ T6080] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.841129][ T6080] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.846880][ T6080] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.900266][ T6080] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.904545][ T6080] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.907519][ T6080] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.912156][ T6080] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   61.533515][ T6080] syz.1.53 (6080) used greatest stack depth: 19928 bytes left
[   61.672244][ T6107] can: request_module (can-proto-5) failed.
[   61.790659][   T54] Bluetooth: hci0: command tx timeout
[   61.793095][ T5835] Bluetooth: hci1: command tx timeout
[   61.870509][   T54] Bluetooth: hci2: command tx timeout
[   63.808066][ T6175] __nla_validate_parse: 20 callbacks suppressed
[   63.808084][ T6175] netlink: 428 bytes leftover after parsing attributes in process `syz.0.84'.
[   64.783447][ T6208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'.
[   64.799958][ T6214] Cannot find set identified by id 0 to match
[   64.849246][ T6214] bridge0: entered allmulticast mode
[   64.863475][ T6218] netlink: 108 bytes leftover after parsing attributes in process `syz.0.96'.
[   64.876053][ T6218] netlink: 108 bytes leftover after parsing attributes in process `syz.0.96'.
[   64.884437][ T6218] netlink: 84 bytes leftover after parsing attributes in process `syz.0.96'.
[   65.233658][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.103'.
[   65.448317][   T10] cfg80211: failed to load regulatory.db
[   65.473299][ T6264] netlink: 16 bytes leftover after parsing attributes in process `syz.0.105'.
[   65.476862][ T6264] netlink: 16 bytes leftover after parsing attributes in process `syz.0.105'.
[   65.622693][ T6270] netlink: 240 bytes leftover after parsing attributes in process `syz.2.107'.
[   65.626071][ T6270] netlink: 48 bytes leftover after parsing attributes in process `syz.2.107'.
[   66.301366][ T6282] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.305191][ T6282] netlink: 'syz.0.111': attribute type 1 has an invalid length.
[   66.307830][ T6282] Zero length message leads to an empty skb
[   66.518685][ T6291] netlink: 'syz.2.114': attribute type 10 has an invalid length.
[   66.528626][ T6291] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   67.309629][ T6302] syzkaller0: entered promiscuous mode
[   67.312218][ T6302] syzkaller0: entered allmulticast mode
[   67.400170][ T6302] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.403730][ T6302] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.536424][ T6302] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.562960][ T6302] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.683967][ T6302] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.687532][ T6302] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.692387][ T6302] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.696062][ T6302] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.743959][ T6306] tap0: tun_chr_ioctl cmd 1074025677
[   67.746091][ T6306] tap0: linktype set to 0
[   67.901931][ T6311] netlink: 'syz.1.120': attribute type 12 has an invalid length.
[   68.278132][ T6337] netlink: 'syz.1.129': attribute type 1 has an invalid length.
[   68.307166][ T6337] 8021q: adding VLAN 0 to HW filter on device bond1
[   68.529386][ T6357] IPVS: set_ctl: invalid protocol: 0 172.30.1.3:20002
[   69.900298][ T6394] __nla_validate_parse: 10 callbacks suppressed
[   69.900313][ T6394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.146'.
[   69.918041][ T6394] netlink: 'syz.2.146': attribute type 1 has an invalid length.
[   69.921389][ T6394] netlink: 204 bytes leftover after parsing attributes in process `syz.2.146'.
[   69.924446][ T6394] netlink: 'syz.2.146': attribute type 1 has an invalid length.
[   69.998758][   T33] audit: type=1800 audit(1752530943.355:4): pid=6404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.149" name="blkio.bfq.time_recursive" dev="tmpfs" ino=256 res=0 errno=0
[   70.032545][ T6404] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) !
[   70.076573][ T6409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.150'.
[   70.134953][ T6420] netlink: 20 bytes leftover after parsing attributes in process `syz.2.150'.
[   70.162386][ T6409] team0 (unregistering): Port device team_slave_0 removed
[   70.166265][ T6409] team0 (unregistering): Port device team_slave_1 removed
[   70.249300][ T6420] 8021q: adding VLAN 0 to HW filter on device bond1
[   70.257760][ T6420] bond0: (slave bond1): Enslaving as an active interface with an up link
[   70.416029][ T6423] netlink: 36 bytes leftover after parsing attributes in process `syz.2.152'.
[   70.419120][ T6423] netlink: 16 bytes leftover after parsing attributes in process `syz.2.152'.
[   70.422509][ T6423] netlink: 36 bytes leftover after parsing attributes in process `syz.2.152'.
[   70.425902][ T6423] netlink: 36 bytes leftover after parsing attributes in process `syz.2.152'.
[   71.013096][ T6427] netlink: 152 bytes leftover after parsing attributes in process `syz.1.153'.
[   71.074710][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.076914][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.092573][ T6432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'.
[   71.352901][ T6450] netlink: 'syz.0.160': attribute type 10 has an invalid length.
[   71.357407][ T6450] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.369638][ T6450] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.375503][ T6450] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.379130][ T6450] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.418587][ T6450] team0: Port device geneve0 added
[   71.844736][ T6476] sctp: [Deprecated]: syz.0.169 (pid 6476) Use of struct sctp_assoc_value in delayed_ack socket option.
[   71.844736][ T6476] Use struct sctp_sack_info instead
[   71.900869][ T6480] ieee802154 phy0 wpan0: encryption failed: -22
[   73.523188][ T6546] nbd: must specify a size in bytes for the device
[   74.800326][ T6603] netlink: 'syz.2.202': attribute type 5 has an invalid length.
[   75.164733][ T6610] netlink: 'syz.0.205': attribute type 7 has an invalid length.
[   75.167431][ T6610] netlink: 'syz.0.205': attribute type 3 has an invalid length.
[   75.170089][ T6610] __nla_validate_parse: 5 callbacks suppressed
[   75.170098][ T6610] netlink: 224 bytes leftover after parsing attributes in process `syz.0.205'.
[   75.984406][ T6635] netlink: 36 bytes leftover after parsing attributes in process `syz.2.211'.
[   76.057457][ T6639] netlink: 64 bytes leftover after parsing attributes in process `syz.2.212'.
[   76.061491][ T6639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.212'.
[   76.101383][ T6641] netlink: 56 bytes leftover after parsing attributes in process `syz.0.213'.
[   76.599569][ T6652] xt_l2tp: invalid flags combination: 4
[   76.860048][ T6669] netlink: 14 bytes leftover after parsing attributes in process `syz.1.222'.
[   76.924420][ T6669] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   76.929290][ T6669] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   76.933662][ T6669] bond0 (unregistering): Released all slaves
[   79.123517][ T6729] netlink: 'syz.2.238': attribute type 1 has an invalid length.
[   79.144059][ T6729] 8021q: adding VLAN 0 to HW filter on device bond2
[   79.166515][ T6729] 8021q: adding VLAN 0 to HW filter on device bond2
[   79.169435][ T6729] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   79.175569][ T6729] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   79.203798][ T6734] netlink: 84 bytes leftover after parsing attributes in process `syz.1.241'.
[   79.209151][ T6734] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.212749][ T6734] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.215517][ T6734] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.218329][ T6734] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.222909][ T6734] netlink: 84 bytes leftover after parsing attributes in process `syz.1.241'.
[   79.223143][ T6736] netlink: 56 bytes leftover after parsing attributes in process `syz.0.242'.
[   79.241311][ T6737] gretap1: entered promiscuous mode
[   79.249935][ T6737] bond2: (slave gretap1): making interface the new active one
[   79.253905][ T6737] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   79.264984][ T6729] macvlan3: entered promiscuous mode
[   79.266801][ T6729] macvlan3: entered allmulticast mode
[   79.268904][ T6729] bond2: entered promiscuous mode
[   79.285923][ T6729] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   79.293834][ T6729] bond2: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1
[   79.298966][ T6729] bond2: left promiscuous mode
[   79.369622][ T6744] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.372279][ T6744] bridge0: port 3(bond0) entered blocking state
[   79.374443][ T6744] bridge0: port 3(bond0) entered disabled state
[   79.379598][ T6744] bond0: entered allmulticast mode
[   79.383312][ T6744] bond0: entered promiscuous mode
[   79.388181][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.243'.
[   81.247387][ T6802] macsec1: entered allmulticast mode
[   81.249719][ T6802] macsec0: entered allmulticast mode
[   81.491685][ T6823] __nla_validate_parse: 3 callbacks suppressed
[   81.491699][ T6823] netlink: 52 bytes leftover after parsing attributes in process `syz.1.265'.
[   81.506506][ T6823] veth1_to_bond: entered promiscuous mode
[   81.509029][ T6823] veth1_to_bond: entered allmulticast mode
[   82.439416][ T6841] tipc: Started in network mode
[   82.441619][ T6841] tipc: Node identity e2f829edbb0e, cluster identity 4711
[   82.445273][ T6841] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.449322][ T6841] D: renamed from syzkaller0
[   82.456081][ T6841] tipc: Disabling bearer <eth:syzkaller0>
[   82.937199][ T6850] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[   83.722859][ T6883] netlink: 'syz.1.284': attribute type 1 has an invalid length.
[   83.887923][ T6889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.286'.
[   84.604486][ T6897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.287'.
[   84.607441][ T6897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.287'.
[   84.612831][ T6897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.287'.
[   84.774942][ T6904] netlink: 44 bytes leftover after parsing attributes in process `syz.1.289'.
[   84.955252][ T6916] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.959650][ T6916] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.963115][ T6916] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.966315][ T6916] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.973666][ T6916] macsec0: left allmulticast mode
[   85.211113][ T6928] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[   85.552667][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[   85.710570][ T6962] netlink: 36 bytes leftover after parsing attributes in process `syz.0.307'.
[   85.713793][ T6962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.307'.
[   85.716782][ T6962] netlink: 36 bytes leftover after parsing attributes in process `syz.0.307'.
[   85.719865][ T6962] netlink: 36 bytes leftover after parsing attributes in process `syz.0.307'.
[   85.810794][ T6968] smc: net device bond0 applied user defined pnetid SYZ
[   85.813937][ T6966] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   85.816576][ T6966] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   85.822902][ T6968] xt_TCPMSS: Only works on TCP SYN packets
[   85.966607][ T6975] netlink: 'syz.0.312': attribute type 303 has an invalid length.
[   85.973080][ T6975] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   85.976121][ T6975] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   86.833859][ T6987] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   86.904217][ T7000] __nla_validate_parse: 5 callbacks suppressed
[   86.904231][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.315'.
[   86.965829][ T6992] netlink: 'syz.1.315': attribute type 10 has an invalid length.
[   86.986091][ T7000] team0 (unregistering): Port device team_slave_0 removed
[   86.991184][ T7000] team0 (unregistering): Port device team_slave_1 removed
[   87.023574][ T7002] netlink: 36 bytes leftover after parsing attributes in process `syz.0.317'.
[   87.027546][ T7002] netlink: 16 bytes leftover after parsing attributes in process `syz.0.317'.
[   87.031827][ T7002] netlink: 36 bytes leftover after parsing attributes in process `syz.0.317'.
[   87.035966][ T7002] netlink: 36 bytes leftover after parsing attributes in process `syz.0.317'.
[   87.273053][ T7020] wireguard0: entered promiscuous mode
[   87.275001][ T7020] wireguard0: entered allmulticast mode
[   87.280250][ T7020] netlink: 'syz.1.322': attribute type 1 has an invalid length.
[   87.899845][ T7036] syzkaller0: entered promiscuous mode
[   87.902189][ T7036] syzkaller0: entered allmulticast mode
[   88.736266][ T7047] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   89.087652][ T7072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.333'.
[   89.110220][ T7072] netlink: 264 bytes leftover after parsing attributes in process `syz.2.333'.
[   90.099818][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.342'.
[   91.883337][ T7150] Cannot find set identified by id 1 to match
[   92.858415][ T7173] netlink: 'syz.0.365': attribute type 1 has an invalid length.
[   92.953155][ T7180] sch_tbf: peakrate 5120 is lower than or equals to rate 32767 !
[   93.016136][ T7187] Bluetooth: MGMT ver 1.23
[   93.066316][ T7195] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   93.075715][ T7197] netlink: 56 bytes leftover after parsing attributes in process `syz.0.373'.
[   93.133145][ T7195] batadv_slave_0: entered promiscuous mode
[   93.136039][ T7195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.372'.
[   93.219322][ T7201] netlink: 16 bytes leftover after parsing attributes in process `syz.1.374'.
[   93.223196][ T7201] netlink: 16 bytes leftover after parsing attributes in process `syz.1.374'.
[   93.312264][ T7206] netlink: 'syz.1.376': attribute type 1 has an invalid length.
[   94.712249][ T7245] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   94.777241][ T7247] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   94.793466][ T7247] netlink: 'syz.1.390': attribute type 11 has an invalid length.
[   94.935930][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.394'.
[   94.939216][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.394'.
[   94.944130][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.394'.
[   94.948713][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.394'.
[   94.953422][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.394'.
[   95.751609][ T7278] netlink: 'syz.2.400': attribute type 2 has an invalid length.
[   95.911120][ T7295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.401'.
[   96.657155][ T7311] veth0: entered promiscuous mode
[   96.665948][ T7310] veth0: left promiscuous mode
[   96.980620][ T7329] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.987588][ T7329] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.993235][ T7329] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   96.997142][ T7329] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   97.043055][ T7337] bridge_slave_0: left allmulticast mode
[   97.046307][ T7337] bridge_slave_0: left promiscuous mode
[   97.048885][ T7337] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.056693][ T7337] bridge_slave_1: left allmulticast mode
[   97.059145][ T7337] bridge_slave_1: left promiscuous mode
[   97.062436][ T7337] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.068882][ T7337] bond0: (slave bond_slave_0): Releasing backup interface
[   97.074542][ T7337] bond0: (slave bond_slave_1): Releasing backup interface
[   97.081535][ T7337] team0: Port device team_slave_0 removed
[   97.086061][ T7337] team0: Port device team_slave_1 removed
[   97.088974][ T7337] batman_adv: batadv0: Removing interface: batadv_slave_0
[   97.093932][ T7337] batman_adv: batadv0: Removing interface: batadv_slave_1
[   97.113381][ T7337] team0: Port device geneve0 removed
[   97.120369][ T7337] veth3: left allmulticast mode
[   97.123531][ T7337] bridge0: port 3(veth3) entered disabled state
[   97.647422][ T7350] xt_TPROXY: Can be used only with -p tcp or -p udp
[   98.723678][ T7391] __nla_validate_parse: 8 callbacks suppressed
[   98.723694][ T7391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.429'.
[   98.733072][ T7391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.429'.
[   99.377302][ T7437] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.442'.
[   99.407188][ T7436] netlink: 'syz.2.442': attribute type 13 has an invalid length.
[   99.628697][ T7455] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.448'.
[   99.722146][ T7458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.449'.
[  101.653253][ T7493] netlink: 24 bytes leftover after parsing attributes in process `syz.2.459'.
[  102.805785][ T5278] udevd[5278]: worker [5832] terminated by signal 33 (Unknown signal 33)
[  102.809891][ T5278] udevd[5278]: worker [5832] failed while handling '/devices/virtual/block/loop0'
[  102.823334][ T7523] netlink: 'syz.2.463': attribute type 10 has an invalid length.
[  102.826175][ T7523] netlink: 20 bytes leftover after parsing attributes in process `syz.2.463'.
[  102.837061][ T7523] batman_adv: batadv0: Adding interface: virt_wifi0
[  102.839705][ T7523] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  102.852234][ T7523] batman_adv: batadv0: Interface activated: virt_wifi0
[  103.237008][ T7547] veth0: entered promiscuous mode
[  103.278287][ T7546] veth0: left promiscuous mode
[  103.322682][ T7553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.474'.
[  103.547326][ T7570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.478'.
[  104.421102][ T7589] netlink: 'syz.2.484': attribute type 1 has an invalid length.
[  104.456653][ T7589] bond3: (slave gretap2): making interface the new active one
[  104.460278][ T7589] bond3: (slave gretap2): Enslaving as an active interface with an up link
[  104.730839][ T7621] netlink: 28 bytes leftover after parsing attributes in process `syz.2.492'.
[  105.348046][ T7629] syzkaller0: entered promiscuous mode
[  105.349842][ T7629] syzkaller0: entered allmulticast mode
[  106.304712][ T7645] netlink: 20 bytes leftover after parsing attributes in process `syz.1.500'.
[  107.756152][ T7696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.517'.
[  107.759909][ T7696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.517'.
[  108.363066][ T7717] netlink: 'syz.2.524': attribute type 29 has an invalid length.
[  108.366057][ T7717] netlink: 'syz.2.524': attribute type 29 has an invalid length.
[  109.780213][ T7731] netlink: 280 bytes leftover after parsing attributes in process `syz.1.529'.
[  109.906943][ T7756] netlink: 116 bytes leftover after parsing attributes in process `syz.1.537'.
[  110.007607][ T7770] sch_tbf: burst 19864 is lower than device lo mtu (65550) !
[  110.120677][ T7776] Cannot find add_set index 3 as target
[  110.217499][ T7783] delete_channel: no stack
[  110.282777][ T7789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.547'.
[  110.852270][ T7801] Cannot find add_set index 0 as target
[  110.906350][ T7801] xt_CT: No such helper "syz0"
[  110.995313][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.552'.
[  110.998981][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.552'.
[  111.114704][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.552'.
[  111.118083][ T7807] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  111.121833][ T7807] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  111.297141][ T7811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.553'.
[  111.299992][ T7811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.553'.
[  111.307045][ T7811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.553'.
[  111.319019][ T7811] bridge3: the hash_elasticity option has been deprecated and is always 16
[  111.834102][ T7820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.556'.
[  113.138152][ T7892] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  114.954403][ T7949] __nla_validate_parse: 11 callbacks suppressed
[  114.954418][ T7949] netlink: 56 bytes leftover after parsing attributes in process `syz.2.591'.
[  114.965231][ T7949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.591'.
[  114.980756][ T7951] xt_l2tp: v2 doesn't support IP mode
[  115.894438][ T7970] netlink: 16 bytes leftover after parsing attributes in process `syz.1.597'.
[  115.986206][ T7979] netlink: 16 bytes leftover after parsing attributes in process `syz.0.596'.
[  117.206264][ T8038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.612'.
[  117.209423][ T8038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.612'.
[  117.300054][ T8048] netlink: 'syz.1.615': attribute type 21 has an invalid length.
[  117.308589][ T8048] netlink: 128 bytes leftover after parsing attributes in process `syz.1.615'.
[  117.318947][ T8048] netlink: 3 bytes leftover after parsing attributes in process `syz.1.615'.
[  117.323722][ T8048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.615'.
[  117.894333][ T8056] netlink: 'syz.2.617': attribute type 1 has an invalid length.
[  118.477708][   T10] IPVS: starting estimator thread 0...
[  118.529020][ T8087] pim6reg1: entered promiscuous mode
[  118.531000][ T8087] pim6reg1: entered allmulticast mode
[  118.561652][ T8084] IPVS: using max 79 ests per chain, 189600 per kthread
[  118.774242][ T8107] bridge_slave_1: left allmulticast mode
[  118.776861][ T8107] bridge_slave_1: left promiscuous mode
[  118.780246][ T8107] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.789765][ T8107] bridge_slave_0: left allmulticast mode
[  118.792654][ T8107] bridge_slave_0: left promiscuous mode
[  118.796413][ T8107] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.853967][ T8113] netlink: 24 bytes leftover after parsing attributes in process `syz.1.628'.
[  119.365071][ T8143] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  119.368271][ T8143] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  119.863443][ T8146] syzkaller1: entered promiscuous mode
[  119.865331][ T8146] syzkaller1: entered allmulticast mode
[  119.868081][ T8146] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  120.343102][ T8165] __nla_validate_parse: 4 callbacks suppressed
[  120.343118][ T8165] netlink: 24 bytes leftover after parsing attributes in process `syz.0.644'.
[  120.349716][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.644'.
[  120.355975][ T8165] netlink: 'syz.0.644': attribute type 5 has an invalid length.
[  120.813987][ T8185] netlink: 80 bytes leftover after parsing attributes in process `syz.2.650'.
[  120.818106][ T8185] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  120.888575][ T8193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.652'.
[  120.893929][ T8193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.652'.
[  120.972079][ T8198] netlink: 60 bytes leftover after parsing attributes in process `syz.2.654'.
[  120.975894][ T8198] netlink: 60 bytes leftover after parsing attributes in process `syz.2.654'.
[  121.117464][ T8210] netlink: 56 bytes leftover after parsing attributes in process `syz.1.658'.
[  121.976956][ T8219] bridge_slave_0: default FDB implementation only supports local addresses
[  122.063129][ T8225] netlink: 56 bytes leftover after parsing attributes in process `syz.1.662'.
[  122.817296][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.663'.
[  124.573590][ T8273] netlink: 'syz.2.676': attribute type 21 has an invalid length.
[  124.573982][ T8274] netlink: 'syz.2.676': attribute type 21 has an invalid length.
[  124.576556][ T8273] netlink: 'syz.2.676': attribute type 1 has an invalid length.
[  124.582689][ T8274] netlink: 'syz.2.676': attribute type 1 has an invalid length.
[  124.691779][ T8284] netlink: 'syz.0.680': attribute type 83 has an invalid length.
[  124.828952][ T8286] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  125.060088][ T8307] macsec0: entered promiscuous mode
[  125.074694][ T8307] macsec0 (unregistering): left promiscuous mode
[  125.994083][ T8325] netlink: 'syz.0.689': attribute type 4 has an invalid length.
[  126.287861][ T8355] __nla_validate_parse: 12 callbacks suppressed
[  126.287872][ T8355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.695'.
[  126.294113][ T8355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.695'.
[  126.379303][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.699'.
[  126.397763][ T8375] netlink: 104 bytes leftover after parsing attributes in process `syz.2.701'.
[  126.405208][ T8377] netlink: 24 bytes leftover after parsing attributes in process `syz.1.702'.
[  126.408052][ T8377] netlink: 24 bytes leftover after parsing attributes in process `syz.1.702'.
[  126.455609][ T8381] netlink: 'syz.0.697': attribute type 2 has an invalid length.
[  126.481845][ T8377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.702'.
[  126.527149][ T8383] netlink: 'syz.1.704': attribute type 1 has an invalid length.
[  126.762924][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.708'.
[  126.766272][ T8394] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  126.769705][ T8394] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  127.250956][ T8396] netlink: 104 bytes leftover after parsing attributes in process `syz.0.709'.
[  127.528917][ T8405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.713'.
[  131.375990][ T8515] __nla_validate_parse: 9 callbacks suppressed
[  131.376000][ T8515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.745'.
[  131.386123][ T8515] ipvlan2: entered promiscuous mode
[  131.389290][ T8515] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  131.456036][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.745'.
[  131.525305][ T8520] netlink: 16 bytes leftover after parsing attributes in process `syz.1.746'.
[  131.529167][ T8520] netlink: 16 bytes leftover after parsing attributes in process `syz.1.746'.
[  132.241887][ T8525] syz_tun: entered promiscuous mode
[  132.243623][ T8525] syz_tun: entered allmulticast mode
[  132.247149][ T8525] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  132.499630][ T8556] netlink: 56 bytes leftover after parsing attributes in process `syz.2.757'.
[  132.513317][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.515395][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.532698][   T33] audit: type=1800 audit(1752531005.895:5): pid=8557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.756" name="memory.events" dev="tmpfs" ino=1405 res=0 errno=0
[  133.514039][ T8582] sctp: [Deprecated]: syz.0.765 (pid 8582) Use of struct sctp_assoc_value in delayed_ack socket option.
[  133.514039][ T8582] Use struct sctp_sack_info instead
[  134.009132][ T8601] netlink: 36 bytes leftover after parsing attributes in process `syz.2.769'.
[  134.012436][ T8601] netlink: 16 bytes leftover after parsing attributes in process `syz.2.769'.
[  134.015228][ T8601] netlink: 36 bytes leftover after parsing attributes in process `syz.2.769'.
[  134.018139][ T8601] netlink: 36 bytes leftover after parsing attributes in process `syz.2.769'.
[  134.067813][ T8607] netlink: 16 bytes leftover after parsing attributes in process `syz.2.771'.
[  134.465391][ T8642] x_tables: duplicate underflow at hook 1
[  135.468415][ T8672] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  136.755926][ T8695] __nla_validate_parse: 5 callbacks suppressed
[  136.755943][ T8695] netlink: 20 bytes leftover after parsing attributes in process `syz.1.800'.
[  136.755945][ T8697] netlink: 20 bytes leftover after parsing attributes in process `syz.1.800'.
[  136.760733][ T8697] bridge_slave_0: left allmulticast mode
[  136.768600][ T8697] bridge_slave_0: left promiscuous mode
[  136.773826][ T8697] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.778717][ T8697] bridge_slave_1: left allmulticast mode
[  136.781152][ T8697] bridge_slave_1: left promiscuous mode
[  136.783647][ T8697] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.789587][ T8697] batman_adv: batadv0: Removing interface: batadv_slave_0
[  136.795507][ T8697] batman_adv: batadv0: Removing interface: batadv_slave_1
[  136.799013][ T8697] bond0: left allmulticast mode
[  136.801429][ T8697] bond0: left promiscuous mode
[  136.803679][ T8697] bridge0: port 3(bond0) entered disabled state
[  138.356987][ T8739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.815'.
[  138.376718][ T8739] netlink: 264 bytes leftover after parsing attributes in process `syz.2.815'.
[  138.477562][ T8744] netlink: 16 bytes leftover after parsing attributes in process `syz.1.817'.
[  138.482260][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.817'.
[  138.542970][ T8749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.817'.
[  138.563232][ T8749] netlink: 264 bytes leftover after parsing attributes in process `syz.1.817'.
[  138.790260][ T8759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.818'.
[  138.794167][ T8759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.818'.
[  139.051800][ T8763] bond1 (unregistering): Released all slaves
[  139.352001][ T8775] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  140.867313][ T8843] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  141.415675][   T10] IPVS: starting estimator thread 0...
[  141.500558][ T8873] IPVS: using max 79 ests per chain, 189600 per kthread
[  141.592547][ T8882] batadv_slave_1: entered promiscuous mode
[  141.973724][ T8888] __nla_validate_parse: 21 callbacks suppressed
[  141.973887][ T8888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.864'.
[  141.981249][ T8888] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  141.985126][ T8888] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  142.259950][ T8901] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20003
[  142.425644][ T8883] batadv_slave_1: left promiscuous mode
[  143.129345][ T8925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.873'.
[  144.112354][ T8955] netlink: 'syz.1.880': attribute type 1 has an invalid length.
[  144.115617][ T8955] netlink: 224 bytes leftover after parsing attributes in process `syz.1.880'.
[  144.694303][ T8962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.882'.
[  144.984903][ T8969] syzkaller1: entered promiscuous mode
[  144.986666][ T8969] syzkaller1: entered allmulticast mode
[  145.101315][ T8973] netlink: 16 bytes leftover after parsing attributes in process `syz.1.884'.
[  145.212768][ T8977] netlink: 'syz.1.886': attribute type 29 has an invalid length.
[  145.374935][ T8985] netlink: 32 bytes leftover after parsing attributes in process `syz.1.887'.
[  145.495140][ T8994] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  145.592085][ T9003] nbd: must specify a device to reconfigure
[  147.036753][ T9032] wireguard1: entered promiscuous mode
[  147.039142][ T9032] wireguard1: entered allmulticast mode
[  147.119878][ T9040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.902'.
[  147.217955][ T9048] netlink: 56 bytes leftover after parsing attributes in process `syz.1.904'.
[  147.443243][ T9059] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  147.478456][ T9070] netlink: 24 bytes leftover after parsing attributes in process `syz.0.910'.
[  147.497453][ T9070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.910'.
[  147.508125][ T9070] netlink: 264 bytes leftover after parsing attributes in process `syz.0.910'.
[  148.478450][ T9113] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2
[  148.482276][ T9113] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0
[  148.855501][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.924'.
[  149.344089][ T9127] vlan2: entered allmulticast mode
[  149.346285][ T9127] bridge_slave_0: entered allmulticast mode
[  150.013460][ T9167] netlink: 'syz.0.938': attribute type 11 has an invalid length.
[  150.946667][ T9204] netlink: 312 bytes leftover after parsing attributes in process `syz.2.947'.
[  151.838680][ T9242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.956'.
[  151.862015][ T9242] netlink: 264 bytes leftover after parsing attributes in process `syz.0.956'.
[  151.939521][ T9248] ipt_REJECT: TCP_RESET invalid for non-tcp
[  151.941544][ T9250] netlink: 'syz.0.960': attribute type 11 has an invalid length.
[  152.083584][ T9262] xt_CT: You must specify a L4 protocol and not use inversions on it
[  153.265084][ T9298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.974'.
[  153.273841][ T9298] netlink: 'syz.1.974': attribute type 14 has an invalid length.
[  153.284400][ T9298] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  153.287901][ T9298] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  153.291226][ T9298] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  153.294216][ T9298] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  153.298931][ T9298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.974'.
[  153.302331][ T9298] netlink: 'syz.1.974': attribute type 14 has an invalid length.
[  153.326670][ T9306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.971'.
[  154.318542][ T9324] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  154.383886][ T9328] netlink: 128 bytes leftover after parsing attributes in process `syz.0.982'.
[  154.440031][ T9329] netlink: 16 bytes leftover after parsing attributes in process `syz.1.983'.
[  154.445332][ T9329] netlink: 20 bytes leftover after parsing attributes in process `syz.1.983'.
[  154.483900][ T9329] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  154.487820][ T9329] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  154.494279][ T9329] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  154.497791][ T9329] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  154.501780][ T9329] geneve2: entered allmulticast mode
[  154.528237][ T6416] IPVS: starting estimator thread 0...
[  154.649807][ T9333] IPVS: using max 78 ests per chain, 187200 per kthread
[  154.789830][ T9350] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.905412][ T9354] netlink: 'syz.0.988': attribute type 84 has an invalid length.
[  155.513135][ T9359] openvswitch: netlink: Message has 4 unknown bytes.
[  155.516665][ T9359] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  155.767403][ T9375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.997'.
[  155.770254][ T9375] netlink: 16 bytes leftover after parsing attributes in process `syz.2.997'.
[  156.613466][ T9395] netlink: 'syz.0.1002': attribute type 14 has an invalid length.
[  156.699932][ T9404] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1003'.
[  156.797681][ T9404] dvmrp8: entered allmulticast mode
[  156.803706][ T9402] dvmrp8: left allmulticast mode
[  156.920964][ T9415] netlink: 'syz.2.1006': attribute type 1 has an invalid length.
[  156.924378][ T9415] netlink: 'syz.2.1006': attribute type 2 has an invalid length.
[  156.927405][ T9415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1006'.
[  158.326167][ T9461] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1020'.
[  158.876577][ T9463] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  159.186185][ T9488] Cannot find del_set index 2 as target
[  159.278825][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1027'.
[  159.298748][ T9489] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1027'.
[  159.302799][ T9489] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1027'.
[  159.537925][ T9501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1029'.
[  159.541407][ T9501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1029'.
[  159.545825][ T9501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1029'.
[  159.993368][ T9507] erspan1: entered promiscuous mode
[  159.996151][ T9507] erspan1: entered allmulticast mode
[  160.067672][ T9511] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.127351][ T9514] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  160.294659][ T9516] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  160.480789][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1035'.
[  160.483858][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1035'.
[  160.488553][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1035'.
[  160.906210][ T9527] tc_dump_action: action bad kind
[  161.209379][   T33] audit: type=1107 audit(1752531034.565:6): pid=9539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='u[&[_Y'
[  161.861994][ T9563] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  162.181813][ T9586] netlink: 'syz.2.1058': attribute type 2 has an invalid length.
[  162.185185][ T9586] netlink: 'syz.2.1058': attribute type 1 has an invalid length.
[  162.190557][   T54] Bluetooth: hci0: command tx timeout
[  162.539648][ T9601] netlink: 'syz.1.1064': attribute type 8 has an invalid length.
[  162.900928][ T9636] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 49651 - 0
[  162.903968][ T9636] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 49651 - 0
[  162.906947][ T9636] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 49651 - 0
[  162.909895][ T9636] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 49651 - 0
[  162.913949][ T9636] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 52594 - 0
[  162.917245][ T9636] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 52594 - 0
[  162.920228][ T9636] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 52594 - 0
[  162.923452][ T9636] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 52594 - 0
[  162.926666][ T9636] geneve2: entered promiscuous mode
[  162.928568][ T9636] geneve2: entered allmulticast mode
[  162.934597][  T246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.937630][  T246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.943886][ T9636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  163.455084][ T9650] __nla_validate_parse: 7 callbacks suppressed
[  163.455121][ T9650] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1078'.
[  164.555609][ T9691] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1087'.
[  164.568994][ T9691] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1087'.
[  164.696795][ T9701] netlink: 'syz.2.1089': attribute type 1 has an invalid length.
[  165.486249][ T9721] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1096'.
[  165.513671][ T9724] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  165.596898][ T9733] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1099'.
[  165.615741][ T9733] syzkaller0: entered promiscuous mode
[  165.618188][ T9733] syzkaller0: entered allmulticast mode
[  165.843869][ T9738] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072284733443)
[  165.847663][ T9738] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647
[  165.852506][ T9738] netlink: 'syz.2.1101': attribute type 21 has an invalid length.
[  165.855097][ T9738] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1101'.
[  165.895296][ T9741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1102'.
[  165.972875][ T9745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1104'.
[  166.030711][ T9747] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1105'.
[  166.036690][ T9747] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1105'.
[  166.462726][ T9777] xt_socket: unknown flags 0xfc
[  166.468486][ T9777] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  166.537422][ T9785] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  167.357141][ T9816] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  167.361423][ T9816] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  167.365307][ T9816] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  167.368988][ T9816] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  167.377215][ T9816] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.381193][ T9816] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.384697][ T9816] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  167.387942][ T9816] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  168.715841][ T9840] __nla_validate_parse: 6 callbacks suppressed
[  168.715859][ T9840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1131'.
[  168.818114][ T9844] netlink: 'syz.2.1132': attribute type 3 has an invalid length.
[  169.166692][ T9854] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1135'.
[  169.169168][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1135'.
[  169.176002][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1135'.
[  169.248376][ T9858] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 52594 - 0
[  169.256435][ T9858] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 52594 - 0
[  169.259358][ T9858] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 52594 - 0
[  169.263778][ T9858] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 52594 - 0
[  169.268839][ T9858] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 49651 - 0
[  169.283837][ T9858] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 49651 - 0
[  169.287103][ T9858] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 49651 - 0
[  169.290282][ T9858] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 49651 - 0
[  169.328275][ T9862] pim6reg1: entered promiscuous mode
[  169.330148][ T9862] pim6reg1: entered allmulticast mode
[  169.616545][ T9876] IPVS: length: 187 != 8
[  169.871537][ T9895] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  169.875160][ T9895] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  170.043011][ T9901] netlink: 143184 bytes leftover after parsing attributes in process `syz.0.1148'.
[  170.122782][ T9905] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1150'.
[  170.757983][ T9923] netlink: 452 bytes leftover after parsing attributes in process `syz.2.1156'.
[  170.830801][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1155'.
[  170.834274][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1155'.
[  170.854789][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1155'.
[  171.948130][ T9966] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  171.951260][ T9966] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  171.954004][ T9966] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  171.957273][ T9966] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  171.960737][ T9966] geneve3: entered promiscuous mode
[  172.672737][ T9986] veth1_to_bond: left promiscuous mode
[  172.674834][ T9986] veth1_to_bond: left allmulticast mode
[  172.677212][ T9986] batadv_slave_0: left promiscuous mode
[  172.683578][ T9986] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  172.686579][ T9986] wireguard0: left promiscuous mode
[  172.688397][ T9986] wireguard0: left allmulticast mode
[  172.691388][ T9986] wireguard1: left promiscuous mode
[  172.693298][ T9986] wireguard1: left allmulticast mode
[  172.695721][ T9986] geneve2: left allmulticast mode
[  173.148120][T10027] netlink: 'syz.2.1184': attribute type 10 has an invalid length.
[  173.155926][T10027] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  173.254698][ T5836] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  173.259671][ T5836] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  173.263994][ T5836] CPU: 1 UID: 0 PID: 5836 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  173.268379][ T5836] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  173.271552][ T5836] RIP: 0010:klist_remove+0x14a/0x340
[  173.273356][ T5836] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 89 50 be f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 6a 50 be f6 49 8b 44 24 58 48 89 44 24 08
[  173.279858][ T5836] RSP: 0018:ffffc9000363f840 EFLAGS: 00010202
[  173.282321][ T5836] RAX: 000000000000000b RBX: ffff8881071c5640 RCX: 0000000000000000
[  173.285513][ T5836] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  173.288766][ T5836] RBP: ffffc9000363f928 R08: ffffffff8f8872c3 R09: 1ffffffff1f10e58
[  173.292074][ T5836] R10: dffffc0000000000 R11: fffffbfff1f10e59 R12: 0000000000000000
[  173.295317][ T5836] R13: 1ffff11005063a0c R14: ffff88802831d060 R15: dffffc0000000000
[  173.298600][ T5836] FS:  0000555557056500(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  173.302357][ T5836] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  173.305049][ T5836] CR2: 00007f3eb5ce7d60 CR3: 0000000028f4c000 CR4: 00000000000006f0
[  173.308341][ T5836] Call Trace:
[  173.309725][ T5836]  <TASK>
[  173.310928][ T5836]  ? __pfx_klist_remove+0x10/0x10
[  173.312955][ T5836]  ? __pfx_kobject_move+0x10/0x10
[  173.315036][ T5836]  ? get_device_parent+0x366/0x3a0
[  173.317068][ T5836]  device_move+0x193/0x700
[  173.318933][ T5836]  hci_conn_del_sysfs+0xb8/0x170
[  173.320951][ T5836]  hci_conn_del+0x8ff/0xcb0
[  173.322871][ T5836]  hci_conn_hash_flush+0x191/0x230
[  173.324985][ T5836]  hci_dev_close_sync+0xaef/0x1330
[  173.326885][ T5836]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  173.329171][ T5836]  ? up_write+0x1c4/0x420
[  173.330948][ T5836]  hci_unregister_dev+0x21a/0x510
[  173.332919][ T5836]  vhci_release+0x80/0xd0
[  173.334719][ T5836]  ? __pfx_vhci_release+0x10/0x10
[  173.336796][ T5836]  __fput+0x44c/0xa70
[  173.338425][ T5836]  task_work_run+0x1d4/0x260
[  173.339974][ T5836]  ? __pfx_task_work_run+0x10/0x10
[  173.341785][ T5836]  ? kmem_cache_free+0x18f/0x400
[  173.343829][ T5836]  do_exit+0x6b5/0x22e0
[  173.345546][ T5836]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  173.347453][ T5836]  ? __pfx_do_exit+0x10/0x10
[  173.348945][ T5836]  ? _raw_spin_unlock_irq+0x23/0x50
[  173.350653][ T5836]  ? lockdep_hardirqs_on+0x9c/0x150
[  173.352394][ T5836]  do_group_exit+0x21c/0x2d0
[  173.354337][ T5836]  __x64_sys_exit_group+0x3f/0x40
[  173.356437][ T5836]  x64_sys_call+0x21ba/0x21c0
[  173.358380][ T5836]  do_syscall_64+0xfa/0x3b0
[  173.360005][ T5836]  ? lockdep_hardirqs_on+0x9c/0x150
[  173.362124][ T5836]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.364596][ T5836]  ? exc_page_fault+0x9f/0xf0
[  173.366546][ T5836]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.369003][ T5836] RIP: 0033:0x7f3eb4f8e929
[  173.370913][ T5836] Code: Unable to access opcode bytes at 0x7f3eb4f8e8ff.
[  173.373806][ T5836] RSP: 002b:00007ffe7b28fdb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  173.377256][ T5836] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3eb4f8e929
[  173.380260][ T5836] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
[  173.383445][ T5836] RBP: 00007f3eb4febad8 R08: 00007ffe7b28db57 R09: 00000000000927c0
[  173.386707][ T5836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  173.390042][ T5836] R13: 00000000000927c0 R14: 0000000000000000 R15: 00007ffe7b290650
[  173.393306][ T5836]  </TASK>
[  173.394623][ T5836] Modules linked in:
[  173.397756][ T5836] ---[ end trace 0000000000000000 ]---
[  173.401919][ T5836] RIP: 0010:klist_remove+0x14a/0x340
[  173.404206][ T5836] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 89 50 be f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 6a 50 be f6 49 8b 44 24 58 48 89 44 24 08
[  173.412114][ T5836] RSP: 0018:ffffc9000363f840 EFLAGS: 00010202
[  173.414564][ T5836] RAX: 000000000000000b RBX: ffff8881071c5640 RCX: 0000000000000000
[  173.417833][ T5836] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  173.421381][ T5836] RBP: ffffc9000363f928 R08: ffffffff8f8872c3 R09: 1ffffffff1f10e58
[  173.424838][ T5836] R10: dffffc0000000000 R11: fffffbfff1f10e59 R12: 0000000000000000
[  173.428256][ T5836] R13: 1ffff11005063a0c R14: ffff88802831d060 R15: dffffc0000000000
[  173.431618][ T5836] FS:  0000555557056500(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  173.435462][ T5836] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  173.438356][ T5836] CR2: 00007f3eb5ce7d60 CR3: 000000010f5de000 CR4: 00000000000006f0
[  173.442321][ T5836] Kernel panic - not syncing: Fatal exception
[  173.445648][ T5836] Kernel Offset: disabled
[  173.447481][ T5836] Rebooting in 86400 seconds..

VM DIAGNOSIS:
22:10:46  Registers:
info registers vcpu 0

CPU#0
RAX=124e97d3ec4c2500 RBX=ffffffff81976c78 RCX=124e97d3ec4c2500 RDX=0000000000000001
RSI=ffffffff8be29da0 RDI=ffffffff81976c78 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1f3f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6f34d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000080 CR3=000000011d162000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000003172 656c6c616b7a7973
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0163300cec2a091a ebe16adaf1e06ac9 XMM09=0000000000000000 00007fceaac11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000363f070
R8 =ffff888020848237 R9 =1ffff11004109046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98c7 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555557056500 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3eb5ce7d60 CR3=0000000028f4c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000001b1cbc5c 0000000000000031 XMM01=0100000000000100 0000000000000000
XMM02=65626d6520002e74 736f686c61636f6c XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffff00 0000000000000000 XMM05=0200000000000000 00000000000080fe
XMM06=0200000000000000 00000000000080fe XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
