last executing test programs:

4.267579206s ago: executing program 0 (id=364):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)
close(0xffffffffffffffff)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r7, 0x6, 0x2b, 0x0, 0x0)
listen(0xffffffffffffffff, 0x9)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r8, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x40000000000000d, 0x2000, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r10, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32, @ANYBLOB="2d000e0080000000ffffffffffff080211000000080211000000000000000000000000006400000025030000000000000800"], 0x80}}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r12, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)

3.343433743s ago: executing program 0 (id=371):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f00000000c0)={'dvmrp1\x00'})
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb00182", 0xb}], 0x1}}], 0x1, 0x20008000)
r2 = socket$packet(0x11, 0x3, 0x300)
unshare(0x26020480)
r3 = socket$kcm(0x2d, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r4}, 0x18)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='br_fdb_external_learn_add\x00', r5}, 0x18)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
r7 = socket(0x2, 0x80805, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@typedef={0x1}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, 0x0, 0x3e}, 0x28)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r8=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000100)={<r9=>r8}, &(0x7f00000002c0)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value={r9, 0x1}, 0x8)
connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x0, 0x7ffe}, 0xc)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000540)=ANY=[@ANYRES32=r8, @ANYRES64=r3], 0x8)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r11, &(0x7f0000000380)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)

3.279741596s ago: executing program 2 (id=372):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x18, r4, 0x1, 0x0, 0x2, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0)
sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000ac0)={0x378, r4, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xb, @dev={0xfe, 0x80, '\x00', 0x38}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e26, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @remote, 0xa9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3a}}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00', 0x6d}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x40}}}}}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xeb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x95}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc62}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa391}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdf33}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x66}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffeffff}]}, @TIPC_NLA_MEDIA={0x140, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2d}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5b59ef3d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x378}, 0x1, 0x0, 0x0, 0x4000005}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
socket(0x8, 0x3, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r7)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r8, 0x0)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
accept(r8, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)
sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x20000010)

2.47088695s ago: executing program 0 (id=376):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newtaction={0xd4, 0x30, 0x1, 0x0, 0x0, {}, [{0xc0, 0x1, [@m_ct={0x74, 0x2, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0xc, 0x3, 0x35}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_LABELS={0x14, 0x7, "d415b9dde780a9ed9bbe2bc5a6064d41"}, @TCA_CT_MARK={0x8, 0x5, 0x7}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @rand_addr=0x64010101}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0xa}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xc, 0x762, 0x5, 0xc, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, 0x0, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) (async, rerun: 32)
socket(0x8, 0x3, 0x0) (async, rerun: 32)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5) (async)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) (async, rerun: 32)
listen(r6, 0x0) (rerun: 32)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async)
accept(r6, 0x0, 0x0) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)
sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x20000010)

2.469584472s ago: executing program 0 (id=377):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="01800000", @ANYRES16=r0, @ANYBLOB="01004020000000000000010000002400f28008000700", @ANYRESHEX=r0, @ANYRES16=r1], 0x38}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket$inet(0x2b, 0x801, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10)
ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
sendmmsg$inet(r2, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000300)="e2cd9d6d6a2b49ee0c916ed589b074de13e7a0bb082178d7dce418e282d56776fd36789208f821ec49d33999413b3abf1ab5867430798789238c2a88a942e21b5cff1c9935bd1820831e64561c66a2dfbd8e6e1a9f49c44ea4f5eb390887025915425bce8446f83608acb7054923d119b54a170e3508d2d440d53e", 0x7b}, {&(0x7f0000000540)="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", 0xfb}, {&(0x7f0000000180)="3b8a9b6531225104e59444d2", 0xc}, {&(0x7f0000000440)="003add8a7724792652dfa9572e39f3ee47c08a01f39be228025d4a37f6aa3f87e26fb247978714f38095e93037b2625348211237cea626ec444332c22f4055c14b827c363841dba068f12722b23baed323e778e7bba6556a5520e18c4d54ce605516e398fc665955844d40ed55bf3f369051125c2e1a3b4eae9c9a49a52c8137237b00365522f44495a1b7a8a0452693", 0x90}, {&(0x7f0000000640)="88a09e76c6f154ad7ffe63f33a8912768f04f707948f4158416a95657e4b9ad16b1278aba9c6b52a7174bbe6ec31783e768c9433d24fba6777ffdfde0b81ba8bb37df78536220838cc99fe4592a8ce776518ae295e1d51bcb8ff5ebe5f2b25a14a297596ff60b614ea27d6f57e03477549b61ab7", 0x74}, {&(0x7f00000006c0)="6c1d675fa05039431df8e67640135c0ff8cada4c9d490aad626abe8109fcc84c2198dbec95788f6a710b5cdae2e278c68d1f39e36a679d6cf32ced19be35224d160703057fbc3947c64740542299935c573ea5a536c68449b7435b8b366ca9187b6e8a0d453e5f1e5e0af634afc865847a3ffbe4c1c137376b8414333ae8", 0x7e}], 0x6, &(0x7f00000007c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x800}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4c}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x62}}, @ip_retopts={{0x90, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x57, [@empty]}, @lsrr={0x83, 0x7, 0xcb, [@multicast1]}, @cipso={0x86, 0x18, 0x3, [{0x0, 0x6, "73fb4738"}, {0x1, 0xc, "2de20ea0a17fd7029127"}]}, @ssrr={0x89, 0x7, 0x17, [@loopback]}, @timestamp_prespec={0x44, 0x3c, 0xd1, 0x3, 0x9, [{@loopback, 0xbda9}, {@local, 0x7ff}, {@local, 0x6}, {@multicast1, 0x400}, {@broadcast, 0xd20}, {@private=0xa010102, 0xa}, {@rand_addr=0x64010101, 0x100}]}, @cipso={0x86, 0x6, 0xffffffffffffffff}, @generic={0x9e, 0xe, "ca9580f716d23d6bba7a7479"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fffffff}}], 0x150}}, {{&(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000a00)="0a282f5e4eb5b1f25d380ae24a6f3a2a3b207f2cc0cfdf85fa66f9b486a0aabe8e09c87d3ca6d67f8c565a3791a8c47230e2f128e80d299d499331e2ec453d5ee3c6b66490110d559a325dd4faae7e27910204bc17ec4ebd50f542d95660c9b8d1e57067ffa314416dcb9b3ec29dd2570ef4d3634e217e3bf5ccb12dac8494b3a327d062de3305ff9acfb1094668552bfb", 0x91}, {&(0x7f0000000380)="7ab0825bffe72fd11192e65900459eedbfeae8e09fcbbf5a2b255a3d66e6", 0x1e}, {&(0x7f0000000940)="073564e829138ac4f7ccd71bc0b48afe616efafcb8c00b53adbf27bfca9357e962cb67d29ea9be1970be7315a5eb4187d4f9481d1acec3140fb9", 0x3a}], 0x3, &(0x7f0000000ac0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x24}, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x38}}], 0x2, 0x4085)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x40010, r4, 0x933b7000)
close(0x4)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000002000010000001c000180060001000200000008000700", @ANYRES32=0x0, @ANYBLOB="080006000300000006ec4d5f3c00a186010000008f335a6f0a7121b662c82170fb4d9b00000000080000fe000000"], 0x30}}, 0x0)
close(0xffffffffffffffff)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r8, 0x6, 0x2b, 0x0, 0x0)
listen(0xffffffffffffffff, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)

2.443339693s ago: executing program 2 (id=378):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
socket(0x8, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r5, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
accept(r5, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)
setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000080)={0x77359400}, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x20000010)

1.570482972s ago: executing program 0 (id=380):
syz_emit_ethernet(0x46, &(0x7f00000002c0)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x10, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x14}, @remote, {[@hopopts={0x2f, 0x1, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x69}]}]}}}}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)
close(0xffffffffffffffff)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r7, 0x6, 0x2b, 0x0, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r8)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0xc4, r9, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x90, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "bcc48e96fd671f92f6d256dea99e407b"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "714f5739c811af92c8afa689f522c0a0"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "52f1a96fffd701cff1426a6e39b199ec225627e9dda3b87869fa267581d92493"}, @NL802154_KEY_ATTR_ID={0x34, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1ff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xf289}]}]}, @NL802154_ATTR_SEC_KEY={0x20, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x2}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040035)
listen(0xffffffffffffffff, 0x9)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r11, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)

1.568136183s ago: executing program 2 (id=381):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
unshare(0x6a040000)
socket(0x8, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079106f00000000005500ffff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd9, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_emit_ethernet(0x70, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbba6bbbbbb86dd60e400ff003a3a00fe880000000000000000000000000000000000000102009078000000006000000000001100fc02000000000000000000000000000000000000000000000000ffffac14140017c1ff182e8079f392400000000010000000000000"], 0x0)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r5 = accept(r3, 0x0, 0x0)
write$bt_hci(0xffffffffffffffff, 0x0, 0x6)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
unshare(0x6a040000) (async)
socket(0x8, 0x3, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079106f00000000005500ffff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd9, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
close(r2) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) (async)
listen(r3, 0x0) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
syz_emit_ethernet(0x70, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbba6bbbbbb86dd60e400ff003a3a00fe880000000000000000000000000000000000000102009078000000006000000000001100fc02000000000000000000000000000000000000000000000000ffffac14140017c1ff182e8079f392400000000010000000000000"], 0x0) (async)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async)
accept(r3, 0x0, 0x0) (async)
write$bt_hci(0xffffffffffffffff, 0x0, 0x6) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, 0x0, 0x0) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) (async)

1.398963132s ago: executing program 2 (id=382):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x503, 0x70bd2a, 0x4, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x7f}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x81}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4804}, 0x800)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="ac000000000000000000000000000000850000006d000000850000007d0000009500000000000000b3c18ae03f75d805164dde77efd76d91de4d0279a74489d2409d3a5be9ee5a6599426ecfa53c0be1d135573c1ac06d4291ed1c080d4f"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xad, &(0x7f00000003c0)=""/173, 0x0, 0x48}, 0x94)
r4 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310)
setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001", @ANYRESOCT=r4, @ANYRES16=r3, @ANYRESOCT=r0, @ANYRESDEC=0x0], 0x110)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)={0xd4, r7, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xd}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0x88, 0xa8, @random="ecad53ed33fee732b3f51554673cf0358e688600260180ac8a40d052bc8cf642a745562c5665fa0a60a6733ff3917433f0ef1f475b6849baef52524ca3acba081e133176a387c123fc2d375a8e27211cb6e8260a51968964bdb5491fe49433875de1809a76421c5e79ff5a55f81e40fa5673f903b13963eb9125bbf418978b81a4d565b5"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x80000000}]}, 0xd4}}, 0x80)
r8 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x0, @loopback, @mcast2, 0x1, 0x7, 0x2, 0x8}})
close(r5)
sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r1)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x80000001}, 0x10)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x60, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9aba4801}, @CTA_TIMEOUT={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r11 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r11, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
listen(r11, 0x0)

1.210610952s ago: executing program 2 (id=383):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x8000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4810}, 0x10)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
r4 = socket(0x8, 0x3, 0x0)
recvmsg$unix(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/64, 0x40}, {&(0x7f00000000c0)=""/152, 0x98}, {&(0x7f0000000180)=""/140, 0x8c}, {&(0x7f0000000240)=""/247, 0xf7}], 0x4, &(0x7f0000000380)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}, 0x2000)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r7, 0x0)
sendmsg$key(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000480)={0x2, 0x16, 0x1, 0x7, 0x2f, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_spirange={0x2, 0x10, 0x4d6, 0x4d3}, @sadb_lifetime={0x4, 0x2, 0x40, 0x10000, 0x7, 0x1c2}, @sadb_ident={0x2, 0xb, 0xb, 0x0, 0x33b}, @sadb_x_nat_t_type={0x1, 0x14, 0xc}, @sadb_x_sec_ctx={0x1a, 0x18, 0xf, 0x0, 0xc6, "a3d8d15dc8af66178865e80434cb479e71817674be8c22959074a7f35d01f245a1a867e058d45aac4b3a06bdaea468a49c5a7dffeab6cb6a894b5f7c250e2a31f81d4af2f68f726d46e6fdaf6e0ed6ad9edbfedeadb4bd3784e3ecd47a54609f24ab02f01c024a8ce8b91c1602c8eb3de2e0a0f5aabde9894c065b20ce1d87528e55d0c1c4da32ceebc0e030bdbfc0c1649460e0b5042eceeb30ecd1a30b8a13e5981d5b67bbb29e89419ab8d45c66f1d53c360808126ae71ab1a7bed2eb8bd13879a71a0951"}, @sadb_x_filter={0x5, 0x1a, @in6=@dev={0xfe, 0x80, '\x00', 0x24}, @in6=@dev={0xfe, 0x80, '\x00', 0x34}, 0x26, 0x10}, @sadb_address={0x5, 0x5, 0x2b, 0x80, 0x0, @in6={0xa, 0x4e22, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}]}, 0x178}}, 0x40001)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
accept(r7, 0x0, 0x0)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x5e22, 0x8000, @local, 0x1}], 0x1c)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r12 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r12, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r14)

1.030711215s ago: executing program 1 (id=387):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, 0x0, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f00000005c0), 0x10)
recvmmsg(r2, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000340)=""/97, 0x38}], 0x2}, 0x7f}], 0x1, 0x10002, 0x0)
sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES16], 0x48}, 0x1, 0x0, 0x0, 0x8000010}, 0x20004801) (async)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) (async)
r4 = socket(0x8, 0x3, 0x0) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5) (async)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x1ff}, 0x1c)
listen(r6, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r8 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0xfffffffffffffe05)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r10}, 0x10) (async)
close(0x3) (async)
accept(r6, 0x0, 0x0)
r11 = socket(0x11, 0x3, 0x2)
setsockopt$packet_int(r11, 0x107, 0x8, &(0x7f00000001c0)=0x9, 0x4) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000100)=ANY=[@ANYRES8=r4, @ANYRESDEC=r11], 0x84}}, 0x20000000)

941.015181ms ago: executing program 1 (id=388):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
socket(0x8, 0x3, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
accept(r4, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000140)=ANY=[@ANYBLOB="84000000", @ANYRESOCT=r1, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}, 0x1, 0x0, 0x0, 0xc085}, 0x30000000)
syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x3f, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x20000010)

710.746947ms ago: executing program 0 (id=389):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
socket(0x8, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r5, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
accept(r5, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)
sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x20000010)

330.460325ms ago: executing program 2 (id=390):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01eb3ab91d4fd5b53e0fc70aab1e9494000000002fbc000073797a5f740000000900000005000200fc00"/57], 0x3c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'netpci0\x00'})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0xfff2, 0xffff}, {}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x9201}, @TCA_FLOW_XOR={0x8, 0x7, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404809c}, 0xc000)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, 0x0, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
socket(0x8, 0x3, 0x0)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r11)
r12 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
r13 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r13, 0x84, 0x80, &(0x7f0000000000)="0000040001000000", 0x8)
listen(r12, 0x0)
r14 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r14, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
accept(r12, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r10, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)

80.828682ms ago: executing program 1 (id=391):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r3, @ANYBLOB="000000000000000018100000", @ANYRES32=r4, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f0000000200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r5, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r2)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
socket(0x8, 0x3, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r8)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000080)={{{@in6, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000180)=0xe8)
ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f00000001c0)={0x3, @null, r10})
bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c)
listen(r9, 0x0)
r11 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
accept(r0, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x300008b1)
syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r6)
sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x20000010)

78.827131ms ago: executing program 1 (id=392):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendto$inet(r0, 0x0, 0x0, 0x20048880, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private0, 0x800005, 0x0, 0xff, 0xa, 0xe, 0x1}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r1, 0x8b32, &(0x7f0000000040))
unshare(0x24060400)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x3}}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="2600d630", @ANYRES16=r4, @ANYBLOB="01001fff0000000000000100000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x26004808)

582.849µs ago: executing program 1 (id=393):
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, 0x0, 0xf21, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x400c000) (async)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@o_path={0x0}, 0x18) (async)
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0xffffffea, 0x0}, 0x20040005) (async)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) (async)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff08000440000000810800084000000003200001"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0x8}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x3}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0x9b, 0x2}}}}]}, 0x44}}, 0x800)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00178018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000)

0s ago: executing program 1 (id=394):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x3a0af83a) (async)
shutdown(r0, 0x1)
listen(r0, 0x20)
poll(&(0x7f0000000040)=[{r0, 0x804f}], 0x1, 0x11ff) (async)
shutdown(r0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, r1) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00'}, 0x94) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x20, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x200, 0x10001, 0x1, 0x3, 0xc2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x27, 0xd, 0x0, &(0x7f0000000000)="f8ad48c5fce216efcc244f7f88", 0x0, 0x4400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff}) (async)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x22080042}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r2, 0x400, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x4000040) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001c00010028bd7000fcdbf29f07000000", @ANYRES32=r8, @ANYBLOB="0200260b0a000200aaaaaaaaaa2e0000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r10, &(0x7f0000000380)={0x2, 0x4e23, @remote}, 0x10) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r9}}]}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x5c, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0) (async)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000008440)={0x0, 0x0, &(0x7f0000008400)={&(0x7f0000008340)={0x38, r2, 0x9, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:crack_db_t:s0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
pipe(&(0x7f0000000040)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
write(r12, &(0x7f0000000340), 0x11000) (async)
writev(r12, &(0x7f0000000640)=[{&(0x7f0000000440)="ac", 0x1}], 0x1)
vmsplice(r11, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000000340)=0x9, 0x4)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:51971' (ED25519) to the list of known hosts.
syzkaller login: [   48.641337][ T5781] cgroup: Unknown subsys name 'net'
[   48.759000][ T5781] cgroup: Unknown subsys name 'cpuset'
[   48.767501][ T5781] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.778091][ T5781] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.221512][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.225399][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.228642][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.232094][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.235582][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.268799][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.273956][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.276886][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.280467][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.283281][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.349376][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.352417][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.356059][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.365532][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.368936][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.439245][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   55.546809][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.549483][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.552007][ T5849] bridge_slave_0: entered allmulticast mode
[   55.556546][ T5849] bridge_slave_0: entered promiscuous mode
[   55.573403][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.576207][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.578489][ T5849] bridge_slave_1: entered allmulticast mode
[   55.581507][ T5849] bridge_slave_1: entered promiscuous mode
[   55.618377][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.642875][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.686983][ T5849] team0: Port device team_slave_0 added
[   55.691243][ T5849] team0: Port device team_slave_1 added
[   55.723260][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.726564][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.736663][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.742203][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   55.757196][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.759748][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.768446][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.895304][ T5849] hsr_slave_0: entered promiscuous mode
[   55.898865][ T5849] hsr_slave_1: entered promiscuous mode
[   55.929414][ T5857] chnl_net:caif_netlink_parms(): no params data found
[   55.937357][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.940322][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.943243][ T5854] bridge_slave_0: entered allmulticast mode
[   55.947704][ T5854] bridge_slave_0: entered promiscuous mode
[   55.993516][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.997968][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.000852][ T5854] bridge_slave_1: entered allmulticast mode
[   56.005271][ T5854] bridge_slave_1: entered promiscuous mode
[   56.065329][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.084687][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.148915][ T5854] team0: Port device team_slave_0 added
[   56.179624][ T5854] team0: Port device team_slave_1 added
[   56.182480][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.185781][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.188731][ T5857] bridge_slave_0: entered allmulticast mode
[   56.192630][ T5857] bridge_slave_0: entered promiscuous mode
[   56.240279][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.243225][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.246656][ T5857] bridge_slave_1: entered allmulticast mode
[   56.250502][ T5857] bridge_slave_1: entered promiscuous mode
[   56.266240][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.269279][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.281199][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.320667][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.322938][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.332843][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.345965][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.361866][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.417009][ T5857] team0: Port device team_slave_0 added
[   56.427931][ T5857] team0: Port device team_slave_1 added
[   56.439828][ T5854] hsr_slave_0: entered promiscuous mode
[   56.443271][ T5854] hsr_slave_1: entered promiscuous mode
[   56.446324][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   56.448720][ T5854] Cannot create hsr debugfs directory
[   56.490437][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.493161][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.505217][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.517756][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.520649][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.529980][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.560467][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.568773][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.595889][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.617259][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.628661][ T5857] hsr_slave_0: entered promiscuous mode
[   56.631045][ T5857] hsr_slave_1: entered promiscuous mode
[   56.633235][ T5857] debugfs: 'hsr0' already exists in 'hsr'
[   56.636948][ T5857] Cannot create hsr debugfs directory
[   56.871554][ T5854] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.881549][ T5854] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.892736][ T5854] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.901490][ T5854] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.960300][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.966202][ T5857] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.973369][ T5857] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.988496][ T5857] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.998298][ T5857] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.026730][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   57.043000][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.045606][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.061513][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.064532][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.159978][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.179416][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   57.191670][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.194119][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.198551][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.200859][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.245499][ T5854] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   57.248835][ T5854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.273139][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.306598][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[   57.316943][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.319796][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.325267][ T5237] Bluetooth: hci1: command tx timeout
[   57.327456][ T5237] Bluetooth: hci0: command tx timeout
[   57.341926][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.344436][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.373835][ T5857] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   57.379669][ T5857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.395404][   T54] Bluetooth: hci2: command tx timeout
[   57.413481][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.477146][ T5849] veth0_vlan: entered promiscuous mode
[   57.495778][ T5849] veth1_vlan: entered promiscuous mode
[   57.507935][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.538513][ T5849] veth0_macvtap: entered promiscuous mode
[   57.550882][ T5849] veth1_macvtap: entered promiscuous mode
[   57.589748][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.593234][ T5854] veth0_vlan: entered promiscuous mode
[   57.599993][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.606741][ T5854] veth1_vlan: entered promiscuous mode
[   57.613193][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.632113][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.637514][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.641152][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.659662][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.694171][ T5854] veth0_macvtap: entered promiscuous mode
[   57.698672][ T5854] veth1_macvtap: entered promiscuous mode
[   57.727109][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.751227][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.773408][ T5857] veth0_vlan: entered promiscuous mode
[   57.788149][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.793290][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.802904][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.810661][ T5883] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.815211][ T5883] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.847449][ T5883] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.868353][ T5857] veth1_vlan: entered promiscuous mode
[   57.872129][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.880577][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.944288][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.946926][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.957759][ T5857] veth0_macvtap: entered promiscuous mode
[   57.987785][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.002551][ T5857] veth1_macvtap: entered promiscuous mode
[   58.016409][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.020148][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.025698][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.041501][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.087897][ T5883] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.091306][ T5883] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.095984][ T5883] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.099404][ T5883] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.261591][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.267166][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.381536][ T4569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.392337][ T4569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.430207][ T5931] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   58.475769][ T5297] udevd[5297]: worker [5851] terminated by signal 32 (Unknown signal 32)
[   58.482170][ T5297] udevd[5297]: worker [5851] failed while handling '/devices/virtual/block/loop2'
[   58.506811][ T5934] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4'.
[   58.509814][ T5934] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4'.
[   58.512704][ T5934] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4'.
[   58.640574][ T5933] Zero length message leads to an empty skb
[   58.787450][ T5945] syz.2.7 uses obsolete (PF_INET,SOCK_PACKET)
[   59.265334][ T5957] netlink: 'syz.1.9': attribute type 33 has an invalid length.
[   59.267955][ T5957] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9'.
[   59.280891][ T5957] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9'.
[   59.285600][ T5957] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9'.
[   59.290670][ T5957] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9'.
[   59.294944][ T5957] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9'.
[   59.384882][ T5959] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   59.394615][   T54] Bluetooth: hci0: command tx timeout
[   59.394752][ T5237] Bluetooth: hci1: command tx timeout
[   59.474837][ T5237] Bluetooth: hci2: command tx timeout
[   59.885478][ T5971] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12'.
[   59.888294][ T5971] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12'.
[   60.878955][ T5959] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.155266][ T5959] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.214679][ T5959] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.356500][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.389094][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.412892][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.441902][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.461225][ T6014] netlink: 'syz.0.22': attribute type 7 has an invalid length.
[   61.466386][ T6014] netlink: 'syz.0.22': attribute type 8 has an invalid length.
[   61.474669][ T5237] Bluetooth: hci1: command tx timeout
[   61.475803][   T54] Bluetooth: hci0: command tx timeout
[   61.480753][ T6014] team0: entered promiscuous mode
[   61.482559][ T6014] team_slave_0: entered promiscuous mode
[   61.486792][ T6014] team_slave_1: entered promiscuous mode
[   61.491701][ T6014] bond0: entered promiscuous mode
[   61.495443][ T6014] bond_slave_0: entered promiscuous mode
[   61.497479][ T6014] bond_slave_1: entered promiscuous mode
[   61.510345][ T6014] team0: left promiscuous mode
[   61.512455][ T6014] team_slave_0: left promiscuous mode
[   61.517420][ T6014] team_slave_1: left promiscuous mode
[   61.521390][ T6014] bond0: left promiscuous mode
[   61.524882][ T6014] bond_slave_0: left promiscuous mode
[   61.527029][ T6014] bond_slave_1: left promiscuous mode
[   61.529665][ T6020] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.555038][   T54] Bluetooth: hci2: command tx timeout
[   62.451294][ T6050] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.511245][ T6054] netlink: 'syz.2.34': attribute type 7 has an invalid length.
[   62.514359][ T6054] netlink: 'syz.2.34': attribute type 8 has an invalid length.
[   62.523496][ T6054] team0: entered promiscuous mode
[   62.527636][ T6054] team_slave_0: entered promiscuous mode
[   62.530155][ T6054] team_slave_1: entered promiscuous mode
[   62.533362][ T6054] bond0: entered promiscuous mode
[   62.536254][ T6054] bond_slave_0: entered promiscuous mode
[   62.539221][ T6054] bond_slave_1: entered promiscuous mode
[   62.542071][ T6054] team0: left promiscuous mode
[   62.543725][ T6054] team_slave_0: left promiscuous mode
[   62.545736][ T6054] team_slave_1: left promiscuous mode
[   62.548660][ T6054] bond0: left promiscuous mode
[   62.550189][ T6054] bond_slave_0: left promiscuous mode
[   62.552028][ T6054] bond_slave_1: left promiscuous mode
[   63.528781][ T6077] __nla_validate_parse: 38 callbacks suppressed
[   63.528797][ T6077] netlink: 28 bytes leftover after parsing attributes in process `syz.2.41'.
[   63.535273][ T6077] netlink: 'syz.2.41': attribute type 7 has an invalid length.
[   63.538140][ T6077] netlink: 'syz.2.41': attribute type 8 has an invalid length.
[   63.541792][ T6077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.41'.
[   63.554482][ T5237] Bluetooth: hci1: command tx timeout
[   63.557832][   T54] Bluetooth: hci0: command tx timeout
[   63.572739][ T6077] team0: entered promiscuous mode
[   63.576153][ T6077] team_slave_0: entered promiscuous mode
[   63.580254][ T6077] team_slave_1: entered promiscuous mode
[   63.584090][ T6077] bond0: entered promiscuous mode
[   63.586369][ T6077] bond_slave_0: entered promiscuous mode
[   63.588703][ T6077] bond_slave_1: entered promiscuous mode
[   63.592685][ T6077] team0: left promiscuous mode
[   63.596284][ T6077] team_slave_0: left promiscuous mode
[   63.599490][ T6077] team_slave_1: left promiscuous mode
[   63.602750][ T6077] bond0: left promiscuous mode
[   63.604982][ T6077] bond_slave_0: left promiscuous mode
[   63.612189][ T6077] bond_slave_1: left promiscuous mode
[   63.644127][ T5237] Bluetooth: hci2: command tx timeout
[   63.862169][ T6087] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   63.866264][ T6087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.44'.
[   63.870100][ T6087] netlink: 28 bytes leftover after parsing attributes in process `syz.0.44'.
[   63.874194][ T6087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.44'.
[   63.877887][ T6088] netlink: 36 bytes leftover after parsing attributes in process `syz.2.43'.
[   63.882557][ T6088] netlink: 16 bytes leftover after parsing attributes in process `syz.2.43'.
[   63.883193][ T6087] netlink: 28 bytes leftover after parsing attributes in process `syz.0.44'.
[   63.889708][ T6087] netlink: 'syz.0.44': attribute type 6 has an invalid length.
[   63.889737][ T6088] netlink: 36 bytes leftover after parsing attributes in process `syz.2.43'.
[   63.896456][ T6088] netlink: 36 bytes leftover after parsing attributes in process `syz.2.43'.
[   65.292996][ T6111] delete_channel: no stack
[   65.569759][ T6124] macvlan2: entered promiscuous mode
[   65.572312][ T6124] macvlan2: entered allmulticast mode
[   65.714014][ T5237] Bluetooth: hci2: command tx timeout
[   66.054281][ T6152] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.100648][ T6152] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.159746][ T6152] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.209549][ T6152] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.299027][ T5883] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.309792][ T5883] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.322875][ T5883] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.335494][ T5883] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.348926][ T6163] netlink: 'syz.2.63': attribute type 7 has an invalid length.
[   66.351519][ T6163] netlink: 'syz.2.63': attribute type 8 has an invalid length.
[   66.412576][ T6169] syz.2.65: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   66.422082][ T6169] CPU: 0 UID: 0 PID: 6169 Comm: syz.2.65 Not tainted syzkaller #0 PREEMPT(full) 
[   66.422098][ T6169] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   66.422104][ T6169] Call Trace:
[   66.422109][ T6169]  <TASK>
[   66.422115][ T6169]  dump_stack_lvl+0x189/0x250
[   66.422141][ T6169]  ? __pfx_dump_stack_lvl+0x10/0x10
[   66.422152][ T6169]  ? __pfx__printk+0x10/0x10
[   66.422165][ T6169]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   66.422177][ T6169]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   66.422187][ T6169]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   66.422197][ T6169]  warn_alloc+0x214/0x310
[   66.422222][ T6169]  ? __pfx_warn_alloc+0x10/0x10
[   66.422238][ T6169]  ? __get_vm_area_node+0x28f/0x300
[   66.422251][ T6169]  ? hash_netportnet_create+0x354/0xf90
[   66.422266][ T6169]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   66.422291][ T6169]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   66.422306][ T6169]  ? rcu_is_watching+0x15/0xb0
[   66.422317][ T6169]  ? hash_netportnet_create+0x354/0xf90
[   66.422325][ T6169]  ? hash_netportnet_create+0x354/0xf90
[   66.422333][ T6169]  __kvmalloc_node_noprof+0x3b8/0x5f0
[   66.422347][ T6169]  ? hash_netportnet_create+0x354/0xf90
[   66.422356][ T6169]  ? hash_netportnet_create+0x2fa/0xf90
[   66.422366][ T6169]  hash_netportnet_create+0x354/0xf90
[   66.422378][ T6169]  ? __nla_parse+0x40/0x60
[   66.422387][ T6169]  ? __pfx_hash_netportnet_create+0x10/0x10
[   66.422397][ T6169]  ip_set_create+0xa97/0x1940
[   66.422411][ T6169]  ? ip_set_create+0x4a2/0x1940
[   66.422466][ T6169]  ? __pfx_ip_set_create+0x10/0x10
[   66.422495][ T6169]  nfnetlink_rcv_msg+0xb4d/0x1130
[   66.422509][ T6169]  ? nfnetlink_rcv_msg+0x20d/0x1130
[   66.422529][ T6169]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   66.422539][ T6169]  ? kasan_save_free_info+0x46/0x50
[   66.422572][ T6169]  netlink_rcv_skb+0x208/0x470
[   66.422581][ T6169]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   66.422593][ T6169]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   66.422606][ T6169]  ? bpf_lsm_capable+0x9/0x20
[   66.422619][ T6169]  ? security_capable+0x7e/0x2e0
[   66.422636][ T6169]  nfnetlink_rcv+0x26a/0x2520
[   66.422650][ T6169]  ? __dev_queue_xmit+0x1d79/0x3b50
[   66.422667][ T6169]  ? __dev_queue_xmit+0x27b/0x3b50
[   66.422682][ T6169]  ? __pfx_nfnetlink_rcv+0x10/0x10
[   66.422693][ T6169]  ? __pfx___dev_queue_xmit+0x10/0x10
[   66.422709][ T6169]  ? ref_tracker_free+0x63a/0x7d0
[   66.422721][ T6169]  ? __asan_memcpy+0x40/0x70
[   66.422731][ T6169]  ? __pfx_ref_tracker_free+0x10/0x10
[   66.422741][ T6169]  ? __skb_clone+0x63/0x7a0
[   66.422754][ T6169]  ? __skb_clone+0x483/0x7a0
[   66.422766][ T6169]  ? skb_clone+0x246/0x3a0
[   66.422777][ T6169]  ? __netlink_deliver_tap+0x807/0x850
[   66.422785][ T6169]  ? netlink_deliver_tap+0x2e/0x1b0
[   66.422795][ T6169]  ? netlink_deliver_tap+0x2e/0x1b0
[   66.422820][ T6169]  netlink_unicast+0x82f/0x9e0
[   66.422839][ T6169]  ? __pfx_netlink_unicast+0x10/0x10
[   66.422851][ T6169]  ? netlink_sendmsg+0x642/0xb30
[   66.422858][ T6169]  ? skb_put+0x11b/0x210
[   66.422867][ T6169]  netlink_sendmsg+0x805/0xb30
[   66.422880][ T6169]  ? __pfx_netlink_sendmsg+0x10/0x10
[   66.422889][ T6169]  ? aa_sock_msg_perm+0xf1/0x1d0
[   66.422899][ T6169]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   66.422908][ T6169]  ? __pfx_netlink_sendmsg+0x10/0x10
[   66.422916][ T6169]  __sock_sendmsg+0x21c/0x270
[   66.422930][ T6169]  ____sys_sendmsg+0x505/0x830
[   66.422943][ T6169]  ? __pfx_____sys_sendmsg+0x10/0x10
[   66.422956][ T6169]  ? import_iovec+0x74/0xa0
[   66.422969][ T6169]  ___sys_sendmsg+0x21f/0x2a0
[   66.422982][ T6169]  ? __pfx____sys_sendmsg+0x10/0x10
[   66.423018][ T6169]  ? __fget_files+0x2a/0x420
[   66.423046][ T6169]  ? __fget_files+0x3a0/0x420
[   66.423064][ T6169]  __x64_sys_sendmsg+0x19b/0x260
[   66.423081][ T6169]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   66.423104][ T6169]  ? rcu_is_watching+0x15/0xb0
[   66.423120][ T6169]  ? do_syscall_64+0xbe/0x3b0
[   66.423140][ T6169]  do_syscall_64+0xfa/0x3b0
[   66.423152][ T6169]  ? lockdep_hardirqs_on+0x9c/0x150
[   66.423162][ T6169]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   66.423170][ T6169]  ? exc_page_fault+0x9f/0xf0
[   66.423178][ T6169]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   66.423186][ T6169] RIP: 0033:0x7efd3558ebe9
[   66.423195][ T6169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   66.423202][ T6169] RSP: 002b:00007efd363c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   66.423216][ T6169] RAX: ffffffffffffffda RBX: 00007efd357c5fa0 RCX: 00007efd3558ebe9
[   66.423222][ T6169] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005
[   66.423226][ T6169] RBP: 00007efd35611e19 R08: 0000000000000000 R09: 0000000000000000
[   66.423231][ T6169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   66.423235][ T6169] R13: 00007efd357c6038 R14: 00007efd357c5fa0 R15: 00007ffcd9885cb8
[   66.423247][ T6169]  </TASK>
[   66.423252][ T6169] Mem-Info:
[   66.589299][ T6182] syzkaller1: entered promiscuous mode
[   66.598811][ T6169] active_anon:4551 inactive_anon:0 isolated_anon:0
[   66.598811][ T6169]  active_file:1028 inactive_file:38225 isolated_file:0
[   66.598811][ T6169]  unevictable:1768 dirty:1399 writeback:0
[   66.598811][ T6169]  slab_reclaimable:10000 slab_unreclaimable:50728
[   66.598811][ T6169]  mapped:17950 shmem:2430 pagetables:908
[   66.598811][ T6169]  sec_pagetables:0 bounce:0
[   66.598811][ T6169]  kernel_misc_reclaimable:0
[   66.598811][ T6169]  free:303160 free_pcp:21175 free_cma:0
[   66.609537][ T6182] syzkaller1: entered allmulticast mode
[   66.610216][ T6169] Node 0 active_anon:10072kB inactive_anon:0kB active_file:512kB inactive_file:8780kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:42228kB dirty:4224kB writeback:0kB shmem:5024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5520kB pagetables:2152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   66.652261][ T6169] Node 1 active_anon:8140kB inactive_anon:0kB active_file:3600kB inactive_file:144120kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29608kB dirty:1372kB writeback:0kB shmem:4708kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6004kB pagetables:1520kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   66.665736][ T6169] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   66.680617][ T6169] lowmem_reserve[]: 0 811 811 811 811
[   66.682785][ T6169] Node 0 DMA32 free:435504kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10012kB inactive_anon:0kB active_file:512kB inactive_file:8780kB unevictable:3536kB writepending:4224kB present:1556484kB managed:830884kB mlocked:0kB bounce:0kB free_pcp:37056kB local_pcp:18156kB free_cma:0kB
[   66.696366][ T6169] lowmem_reserve[]: 0 0 0 0 0
[   66.698836][ T6169] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   66.711604][ T6169] lowmem_reserve[]: 0 0 854 854 854
[   66.714249][ T6169] Node 1 Normal free:302868kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8096kB inactive_anon:0kB active_file:3600kB inactive_file:144120kB unevictable:3536kB writepending:1372kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:48016kB local_pcp:19724kB free_cma:0kB
[   66.728241][ T6169] lowmem_reserve[]: 0 0 0 0 0
[   66.730680][ T6169] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   66.736309][ T6169] Node 0 DMA32: 570*4kB (UME) 313*8kB (ME) 134*16kB (ME) 117*32kB (UME) 50*64kB (UME) 10*128kB (UME) 6*256kB (UM) 4*512kB (M) 5*1024kB (M) 1*2048kB (U) 100*4096kB (M) = 435504kB
[   66.743079][ T6169] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   66.748962][ T6169] Node 1 Normal: 417*4kB (ME) 206*8kB (UME) 202*16kB (UM) 33*32kB (ME) 19*64kB (UME) 7*128kB (UME) 1*256kB (E) 2*512kB (M) 3*1024kB (ME) 3*2048kB (ME) 69*4096kB (M) = 302836kB
[   66.756838][ T6169] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   66.761270][ T6169] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   66.765401][ T6169] 41686 total pagecache pages
[   66.767139][ T6169] 0 pages in swap cache
[   66.768722][ T6169] Free swap  = 124996kB
[   66.770294][ T6169] Total swap = 124996kB
[   66.772082][ T6169] 786301 pages RAM
[   66.773632][ T6169] 0 pages HighMem/MovableOnly
[   66.775639][ T6169] 241348 pages reserved
[   66.777245][ T6169] 0 pages cma reserved
[   66.878108][ T6190] netlink: 'syz.2.69': attribute type 1 has an invalid length.
[   67.031081][ T6204] bridge_slave_0: left allmulticast mode
[   67.032986][ T6204] bridge_slave_0: left promiscuous mode
[   67.037384][ T6204] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.067584][ T6204] bridge_slave_1: left allmulticast mode
[   67.069911][ T6204] bridge_slave_1: left promiscuous mode
[   67.073294][ T6204] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.077897][ T6207] netlink: 'syz.2.73': attribute type 10 has an invalid length.
[   67.093211][ T6204] bond0: (slave bond_slave_0): Releasing backup interface
[   67.101826][ T6204] bond0: (slave bond_slave_1): Releasing backup interface
[   67.112821][ T6204] team0: Port device team_slave_0 removed
[   67.122117][ T6204] team0: Port device team_slave_1 removed
[   67.125716][ T6204] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   67.128998][ T6204] batman_adv: batadv0: Removing interface: batadv_slave_0
[   67.134668][ T6204] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   67.137333][ T6204] batman_adv: batadv0: Removing interface: batadv_slave_1
[   67.147132][ T6207] batman_adv: batadv0: Adding interface: virt_wifi0
[   67.149730][ T6207] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.161591][ T6207] batman_adv: batadv0: Interface activated: virt_wifi0
[   67.180581][ T6209] warning: `syz.2.73' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   68.928799][ T6234] netlink: 'syz.0.81': attribute type 12 has an invalid length.
[   69.042822][ T6239] __nla_validate_parse: 42 callbacks suppressed
[   69.042840][ T6239] netlink: 36 bytes leftover after parsing attributes in process `syz.2.82'.
[   69.049179][ T6239] netlink: 16 bytes leftover after parsing attributes in process `syz.2.82'.
[   69.053039][ T6239] netlink: 36 bytes leftover after parsing attributes in process `syz.2.82'.
[   69.058888][ T6239] netlink: 36 bytes leftover after parsing attributes in process `syz.2.82'.
[   69.063034][ T6240] netlink: 36 bytes leftover after parsing attributes in process `syz.0.83'.
[   69.067779][ T6240] netlink: 16 bytes leftover after parsing attributes in process `syz.0.83'.
[   69.071156][ T6240] netlink: 36 bytes leftover after parsing attributes in process `syz.0.83'.
[   69.076102][ T6240] netlink: 36 bytes leftover after parsing attributes in process `syz.0.83'.
[   70.003033][ T6253] netlink: 36 bytes leftover after parsing attributes in process `syz.0.86'.
[   70.007280][ T6253] netlink: 16 bytes leftover after parsing attributes in process `syz.0.86'.
[   71.157767][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.160188][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.802555][ T6285] sctp: [Deprecated]: syz.0.97 (pid 6285) Use of int in max_burst socket option.
[   71.802555][ T6285] Use struct sctp_assoc_value instead
[   71.809563][ T6286] sctp: [Deprecated]: syz.0.97 (pid 6286) Use of int in max_burst socket option.
[   71.809563][ T6286] Use struct sctp_assoc_value instead
[   72.746829][ T6314] netlink: 'syz.0.105': attribute type 4 has an invalid length.
[   72.760167][ T6314] : renamed from bond0 (while UP)
[   72.951344][ T6314] bond0 (unregistering): Released all slaves
[   74.147484][ T6365] __nla_validate_parse: 30 callbacks suppressed
[   74.147498][ T6365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.114'.
[   74.635825][ T6377] netlink: 36 bytes leftover after parsing attributes in process `syz.0.117'.
[   74.639166][ T6377] netlink: 16 bytes leftover after parsing attributes in process `syz.0.117'.
[   74.642247][ T6377] netlink: 36 bytes leftover after parsing attributes in process `syz.0.117'.
[   74.645271][ T6377] netlink: 36 bytes leftover after parsing attributes in process `syz.0.117'.
[   75.071669][ T6381] netlink: 36 bytes leftover after parsing attributes in process `syz.1.118'.
[   75.075477][ T6381] netlink: 16 bytes leftover after parsing attributes in process `syz.1.118'.
[   75.078931][ T6381] netlink: 36 bytes leftover after parsing attributes in process `syz.1.118'.
[   75.082209][ T6381] netlink: 36 bytes leftover after parsing attributes in process `syz.1.118'.
[   75.086399][ T6382] netlink: 36 bytes leftover after parsing attributes in process `syz.1.118'.
[   75.507617][ T6391] netlink: 'syz.2.121': attribute type 7 has an invalid length.
[   75.510376][ T6391] netlink: 'syz.2.121': attribute type 8 has an invalid length.
[   75.527077][ T6391] team0: entered promiscuous mode
[   75.529754][ T6391] bond0: entered promiscuous mode
[   75.532422][ T6391] team0: left promiscuous mode
[   75.535728][ T6391] bond0: left promiscuous mode
[   75.857918][ T6424] netlink: 'syz.0.129': attribute type 7 has an invalid length.
[   75.861073][ T6424] netlink: 'syz.0.129': attribute type 8 has an invalid length.
[   75.871387][ T6424] team0: entered promiscuous mode
[   75.873485][ T6424] team_slave_0: entered promiscuous mode
[   75.879305][ T6424] team_slave_1: entered promiscuous mode
[   75.884433][ T6424] : entered promiscuous mode
[   75.886403][ T6424] bond_slave_0: entered promiscuous mode
[   75.888819][ T6424] bond_slave_1: entered promiscuous mode
[   75.893718][ T6424] team0: left promiscuous mode
[   75.897544][ T6424] team_slave_0: left promiscuous mode
[   75.899925][ T6424] team_slave_1: left promiscuous mode
[   75.906350][ T6424] : left promiscuous mode
[   75.908061][ T6424] bond_slave_0: left promiscuous mode
[   75.910340][ T6424] bond_slave_1: left promiscuous mode
[   76.931366][ T6455] tipc: Invalid UDP bearer configuration
[   76.931399][ T6455] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   79.102982][ T6496] batadv1: entered promiscuous mode
[   79.105604][ T6496] batadv1: entered allmulticast mode
[   79.429853][ T6504] __nla_validate_parse: 51 callbacks suppressed
[   79.429867][ T6504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.153'.
[   79.594095][ T6514] netlink: 'syz.0.155': attribute type 6 has an invalid length.
[   79.661794][ T6525] netlink: 36 bytes leftover after parsing attributes in process `syz.2.157'.
[   79.665492][ T6525] netlink: 16 bytes leftover after parsing attributes in process `syz.2.157'.
[   79.668956][ T6525] netlink: 36 bytes leftover after parsing attributes in process `syz.2.157'.
[   79.672313][ T6525] netlink: 36 bytes leftover after parsing attributes in process `syz.2.157'.
[   79.751020][ T6533] netlink: 'syz.0.158': attribute type 1 has an invalid length.
[   79.776937][ T6529] bond0: (slave vcan1): The slave device specified does not support setting the MAC address
[   79.780149][ T6529] bond0: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[   79.786006][ T6529] bond0: (slave vcan1): making interface the new active one
[   79.788800][ T6529] bond0: (slave vcan1): Enslaving as an active interface with an up link
[   79.886513][ T6538] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   80.459066][ T6559] netlink: 24 bytes leftover after parsing attributes in process `syz.1.165'.
[   80.462287][ T6559] netlink: 24 bytes leftover after parsing attributes in process `syz.1.165'.
[   80.510947][ T6561] netlink: 32 bytes leftover after parsing attributes in process `syz.1.166'.
[   80.523255][ T6563] netlink: 36 bytes leftover after parsing attributes in process `syz.1.166'.
[   80.528885][ T6563] netlink: 16 bytes leftover after parsing attributes in process `syz.1.166'.
[   81.408112][  T125] cfg80211: failed to load regulatory.db
[   82.475957][ T6610] bond0: option xmit_hash_policy: invalid value (8)
[   83.604170][ T6631] netlink: 'syz.0.184': attribute type 7 has an invalid length.
[   83.607191][ T6631] netlink: 'syz.0.184': attribute type 8 has an invalid length.
[   83.618040][ T6631] team0: entered promiscuous mode
[   83.621434][ T6631] team_slave_0: entered promiscuous mode
[   83.623793][ T6631] team_slave_1: entered promiscuous mode
[   83.630211][ T6631] : entered promiscuous mode
[   83.632870][ T6631] bond_slave_0: entered promiscuous mode
[   83.635436][ T6631] bond_slave_1: entered promiscuous mode
[   83.638961][ T6631] team0: left promiscuous mode
[   83.640897][ T6631] team_slave_0: left promiscuous mode
[   83.643005][ T6631] team_slave_1: left promiscuous mode
[   83.647575][ T6631] : left promiscuous mode
[   83.649284][ T6631] bond_slave_0: left promiscuous mode
[   83.651250][ T6631] bond_slave_1: left promiscuous mode
[   83.906085][ T6648] netlink: 'syz.2.189': attribute type 3 has an invalid length.
[   84.839406][ T6654] __nla_validate_parse: 51 callbacks suppressed
[   84.839418][ T6654] netlink: 20 bytes leftover after parsing attributes in process `syz.0.191'.
[   84.848325][ T6654] netlink: 16 bytes leftover after parsing attributes in process `syz.0.191'.
[   84.851275][ T6654] netlink: 20 bytes leftover after parsing attributes in process `syz.0.191'.
[   84.854506][ T6654] netlink: 20 bytes leftover after parsing attributes in process `syz.0.191'.
[   84.909995][ T6663] tipc: Started in network mode
[   84.912777][ T6663] tipc: Node identity 4a4381a5b1c, cluster identity 4711
[   84.918846][ T6663] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.927544][ T6663] syzkaller0: entered promiscuous mode
[   84.930163][ T6663] syzkaller0: entered allmulticast mode
[   84.947208][ T6662] tipc: Resetting bearer <eth:syzkaller0>
[   84.956246][ T6662] tipc: Disabling bearer <eth:syzkaller0>
[   85.061160][ T6667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.195'.
[   85.158327][ T6673] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.220788][ T6673] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.280330][ T6673] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.341147][ T6673] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.348840][ T6682] IPVS: set_ctl: invalid protocol: 47 172.20.20.44:20001
[   85.438610][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.451315][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.464340][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.477659][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.610658][ T6688] netlink: 36 bytes leftover after parsing attributes in process `syz.2.199'.
[   85.616230][ T6688] netlink: 16 bytes leftover after parsing attributes in process `syz.2.199'.
[   85.619962][ T6688] netlink: 36 bytes leftover after parsing attributes in process `syz.2.199'.
[   85.624894][ T6688] netlink: 36 bytes leftover after parsing attributes in process `syz.2.199'.
[   85.686086][ T6684] netlink: 36 bytes leftover after parsing attributes in process `syz.0.198'.
[   86.455157][ T6702] Bluetooth: MGMT ver 1.23
[   86.488283][ T6705] netlink: 'syz.2.205': attribute type 4 has an invalid length.
[   86.493419][ T6705] : renamed from bond0 (while UP)
[   86.671455][ T6709] bond0 (unregistering): Released all slaves
[   87.319836][ T6718] netlink: 'syz.0.208': attribute type 1 has an invalid length.
[   87.322497][ T6718] netlink: 'syz.0.208': attribute type 1 has an invalid length.
[   87.326610][ T6718] netlink: 'syz.0.208': attribute type 1 has an invalid length.
[   87.506537][ T6728] netlink: 'syz.0.208': attribute type 1 has an invalid length.
[   89.028305][ T6773] netlink: 'syz.2.220': attribute type 16 has an invalid length.
[   89.825775][ T6783] netlink: 'syz.2.223': attribute type 7 has an invalid length.
[   89.830519][ T6783] netlink: 'syz.2.223': attribute type 8 has an invalid length.
[   89.837833][ T6783] team0: entered promiscuous mode
[   89.842232][ T6783] : entered promiscuous mode
[   89.850903][ T6783] team0: left promiscuous mode
[   89.855625][ T6783] : left promiscuous mode
[   89.930804][ T6786] __nla_validate_parse: 36 callbacks suppressed
[   89.930820][ T6786] netlink: 36 bytes leftover after parsing attributes in process `syz.1.224'.
[   89.937999][ T6786] netlink: 16 bytes leftover after parsing attributes in process `syz.1.224'.
[   89.941709][ T6786] netlink: 36 bytes leftover after parsing attributes in process `syz.1.224'.
[   89.949338][ T6786] netlink: 36 bytes leftover after parsing attributes in process `syz.1.224'.
[   90.075029][ T6788] netlink: 36 bytes leftover after parsing attributes in process `syz.2.225'.
[   90.078233][ T6788] netlink: 16 bytes leftover after parsing attributes in process `syz.2.225'.
[   90.081562][ T6788] netlink: 36 bytes leftover after parsing attributes in process `syz.2.225'.
[   90.086955][ T6788] netlink: 36 bytes leftover after parsing attributes in process `syz.2.225'.
[   90.690854][ T6797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.227'.
[   90.700980][ T6797] netlink: 36 bytes leftover after parsing attributes in process `syz.1.227'.
[   90.923579][ T6811] netlink: 'syz.0.231': attribute type 7 has an invalid length.
[   90.926638][ T6811] netlink: 'syz.0.231': attribute type 8 has an invalid length.
[   91.012980][ T6811] team0: entered promiscuous mode
[   91.016396][ T6811] team_slave_0: entered promiscuous mode
[   91.018802][ T6811] team_slave_1: entered promiscuous mode
[   91.026716][ T6811] : entered promiscuous mode
[   91.028699][ T6811] bond_slave_0: entered promiscuous mode
[   91.030935][ T6811] bond_slave_1: entered promiscuous mode
[   91.039168][ T6811] team0: left promiscuous mode
[   91.040916][ T6811] team_slave_0: left promiscuous mode
[   91.043353][ T6811] team_slave_1: left promiscuous mode
[   91.048520][ T6811] : left promiscuous mode
[   91.050327][ T6811] bond_slave_0: left promiscuous mode
[   91.052634][ T6811] bond_slave_1: left promiscuous mode
[   91.199023][ T6819] tipc: Started in network mode
[   91.201475][ T6819] tipc: Node identity fefdf14f3e6c, cluster identity 4711
[   91.207275][ T6819] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.210387][ T6819] syzkaller0: entered promiscuous mode
[   91.212433][ T6819] syzkaller0: entered allmulticast mode
[   91.222917][ T6819] tipc: Resetting bearer <eth:syzkaller0>
[   91.296873][ T6818] tipc: Resetting bearer <eth:syzkaller0>
[   91.306982][ T6818] tipc: Disabling bearer <eth:syzkaller0>
[   91.842227][ T6838] netlink: 'syz.1.239': attribute type 10 has an invalid length.
[   91.867429][ T6838] 8021q: adding VLAN 0 to HW filter on device team0
[   91.875797][ T6838] bond0: (slave team0): Enslaving as an active interface with an up link
[   91.883759][ T6838] netlink: 'syz.1.239': attribute type 1 has an invalid length.
[   93.004769][ T6863] netlink: 'syz.1.247': attribute type 2 has an invalid length.
[   93.203423][ T6866] netlink: 'syz.0.248': attribute type 1 has an invalid length.
[   95.165288][ T6903] __nla_validate_parse: 26 callbacks suppressed
[   95.165307][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.256'.
[   95.172648][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.256'.
[   95.579581][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.258'.
[   95.706986][ T6912] netlink: 36 bytes leftover after parsing attributes in process `syz.2.258'.
[   95.710538][ T6912] netlink: 16 bytes leftover after parsing attributes in process `syz.2.258'.
[   95.714636][ T6912] netlink: 36 bytes leftover after parsing attributes in process `syz.2.258'.
[   95.718880][ T6912] netlink: 36 bytes leftover after parsing attributes in process `syz.2.258'.
[   95.748850][ T6919] netlink: 36 bytes leftover after parsing attributes in process `syz.1.260'.
[   95.752182][ T6919] netlink: 16 bytes leftover after parsing attributes in process `syz.1.260'.
[   95.756374][ T6919] netlink: 36 bytes leftover after parsing attributes in process `syz.1.260'.
[   96.598913][ T6937] syz_tun: entered allmulticast mode
[   96.629233][ T6937] dvmrp8: entered allmulticast mode
[   96.638376][ T6936] syz_tun: left allmulticast mode
[   96.640605][ T6936] dvmrp8: left allmulticast mode
[   98.237905][ T6999] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma?
[   98.370068][ T7009] Bluetooth: MGMT ver 1.23
[   98.669512][ T7018] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.736554][ T7018] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.807400][ T7018] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.867677][ T7018] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.947715][ T5883] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.955994][ T5883] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.968270][ T5883] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.977923][ T5883] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.931242][ T7040] netlink: 'syz.2.286': attribute type 8 has an invalid length.
[   99.944373][ T7040] tipc: Failed to remove unknown binding: 66,1,1/0:1290143013/1290143015
[  100.292031][ T7047] __nla_validate_parse: 314 callbacks suppressed
[  100.292047][ T7047] netlink: 36 bytes leftover after parsing attributes in process `syz.1.288'.
[  100.297768][ T7047] netlink: 16 bytes leftover after parsing attributes in process `syz.1.288'.
[  100.300861][ T7047] netlink: 36 bytes leftover after parsing attributes in process `syz.1.288'.
[  100.303769][ T7047] netlink: 36 bytes leftover after parsing attributes in process `syz.1.288'.
[  101.094542][ T7064] netlink: 40 bytes leftover after parsing attributes in process `syz.1.294'.
[  101.098264][ T7064] netlink: 48 bytes leftover after parsing attributes in process `syz.1.294'.
[  101.102719][ T7064] netlink: 48 bytes leftover after parsing attributes in process `syz.1.294'.
[  101.356321][ T7078] netlink: 36 bytes leftover after parsing attributes in process `syz.1.297'.
[  101.359786][ T7078] netlink: 16 bytes leftover after parsing attributes in process `syz.1.297'.
[  101.363466][ T7078] netlink: 36 bytes leftover after parsing attributes in process `syz.1.297'.
[  101.795608][ T7085] macvlan2: entered promiscuous mode
[  101.797928][ T7085] macvlan2: entered allmulticast mode
[  101.801236][ T7085] bond0: (slave macvlan2): Opening slave failed
[  103.525467][ T7109] netlink: 'syz.0.307': attribute type 11 has an invalid length.
[  103.675867][ T7114] !: renamed from dummy0 (while UP)
[  105.413125][ T7226] Illegal XDP return value 2191854308 on prog  (id 108) dev syz_tun, expect packet loss!
[  105.521780][ T7228] __nla_validate_parse: 24 callbacks suppressed
[  105.521834][ T7228] netlink: 36 bytes leftover after parsing attributes in process `syz.1.309'.
[  105.528548][ T7228] netlink: 16 bytes leftover after parsing attributes in process `syz.1.309'.
[  105.531904][ T7228] netlink: 36 bytes leftover after parsing attributes in process `syz.1.309'.
[  105.535501][ T7228] netlink: 36 bytes leftover after parsing attributes in process `syz.1.309'.
[  105.539146][ T7234] netlink: 36 bytes leftover after parsing attributes in process `syz.0.310'.
[  105.542312][ T7234] netlink: 16 bytes leftover after parsing attributes in process `syz.0.310'.
[  105.545967][ T7234] netlink: 36 bytes leftover after parsing attributes in process `syz.0.310'.
[  105.604021][ T7236] netlink: 36 bytes leftover after parsing attributes in process `syz.2.313'.
[  105.607621][ T7236] netlink: 16 bytes leftover after parsing attributes in process `syz.2.313'.
[  105.611288][ T7236] netlink: 36 bytes leftover after parsing attributes in process `syz.2.313'.
[  106.330934][ T7251] netlink: 'syz.1.317': attribute type 9 has an invalid length.
[  106.359318][ T7248] netlink: 'syz.0.316': attribute type 2 has an invalid length.
[  106.405514][ T7248] : entered promiscuous mode
[  106.752126][ T7280] batadv1: entered promiscuous mode
[  106.858939][ T7281] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  106.862338][    T9] IPVS: starting estimator thread 0...
[  106.954150][ T7282] IPVS: using max 64 ests per chain, 153600 per kthread
[  109.159037][ T7321] netlink: 'syz.0.338': attribute type 1 has an invalid length.
[  110.008612][ T7378] sctp: [Deprecated]: syz.2.342 (pid 7378) Use of struct sctp_assoc_value in delayed_ack socket option.
[  110.008612][ T7378] Use struct sctp_sack_info instead
[  110.740336][ T7387] __nla_validate_parse: 32 callbacks suppressed
[  110.740353][ T7387] netlink: 36 bytes leftover after parsing attributes in process `syz.1.344'.
[  110.748534][ T7387] netlink: 16 bytes leftover after parsing attributes in process `syz.1.344'.
[  110.752730][ T7387] netlink: 36 bytes leftover after parsing attributes in process `syz.1.344'.
[  110.757768][ T7387] netlink: 36 bytes leftover after parsing attributes in process `syz.1.344'.
[  110.874544][ T7390] netlink: 36 bytes leftover after parsing attributes in process `syz.2.345'.
[  110.880091][ T7390] netlink: 16 bytes leftover after parsing attributes in process `syz.2.345'.
[  110.884272][ T7390] netlink: 36 bytes leftover after parsing attributes in process `syz.2.345'.
[  110.889200][ T7390] netlink: 36 bytes leftover after parsing attributes in process `syz.2.345'.
[  111.647523][ T7397] netlink: 36 bytes leftover after parsing attributes in process `syz.1.347'.
[  111.651405][ T7397] netlink: 16 bytes leftover after parsing attributes in process `syz.1.347'.
[  112.826148][ T7416] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.829462][ T7416] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.961411][ T7416] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  112.975184][ T7416] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.138487][ T5883] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.142192][ T5883] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.146010][ T5883] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.152598][ T5883] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  113.579762][ T7437] netlink: 'syz.1.359': attribute type 1 has an invalid length.
[  113.582621][ T7437] netlink: 'syz.1.359': attribute type 4 has an invalid length.
[  113.586851][ T7437] netlink: 'syz.1.359': attribute type 1 has an invalid length.
[  113.589807][ T7437] netlink: 'syz.1.359': attribute type 4 has an invalid length.
[  116.071650][ T7506] __nla_validate_parse: 56 callbacks suppressed
[  116.071672][ T7506] netlink: 36 bytes leftover after parsing attributes in process `syz.2.378'.
[  116.078426][ T7506] netlink: 16 bytes leftover after parsing attributes in process `syz.2.378'.
[  116.082189][ T7506] netlink: 36 bytes leftover after parsing attributes in process `syz.2.378'.
[  116.086303][ T7506] netlink: 36 bytes leftover after parsing attributes in process `syz.2.378'.
[  116.972266][ T7520] netlink: 36 bytes leftover after parsing attributes in process `syz.2.381'.
[  116.975824][ T7520] netlink: 16 bytes leftover after parsing attributes in process `syz.2.381'.
[  116.979055][ T7520] netlink: 36 bytes leftover after parsing attributes in process `syz.2.381'.
[  116.982201][ T7520] netlink: 36 bytes leftover after parsing attributes in process `syz.2.381'.
[  117.265842][ T7531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.385'.
[  117.330146][ T7537] netlink: 'syz.1.386': attribute type 3 has an invalid length.
[  117.806246][ T7553] netlink: 36 bytes leftover after parsing attributes in process `syz.0.389'.
[  118.419816][ T7562] netlink: 'syz.1.393': attribute type 1 has an invalid length.
[  118.486624][ T7571] lo: entered promiscuous mode
[  118.493811][ T7571] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  132.597194][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.599496][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  180.754114][ T5853] Bluetooth: hci0: command 0x0406 tx timeout
[  180.757279][ T5853] Bluetooth: hci1: command 0x0406 tx timeout
[  194.037339][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.041652][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  196.114850][ T7590] Bluetooth: hci2: command 0x0406 tx timeout
[  255.486648][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  255.489336][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  316.917041][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  316.919696][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  378.359823][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  378.362590][ T1363] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
17:42:24  Registers:
info registers vcpu 0

CPU#0
RAX=2468f690deed0800 RBX=ffffffff819683f8 RCX=2468f690deed0800 RDX=0000000000000001
RSI=ffffffff8d9b9d08 RDI=ffffffff8be33880 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa39230 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7a73f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055b51ff75000 CR3=0000000026510000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=75ae1e5e52c0a300 RBX=ffffffff819683f8 RCX=75ae1e5e52c0a300 RDX=0000000000000001
RSI=ffffffff8d9b9d08 RDI=ffffffff8be33880 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa39230 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d0000
RIP=ffffffff8b7a73f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007efe8533d440 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f4746b97d20
XMM02=048e080001000010 08060a016fc40008 XMM03=c010080018800338 10000180041a0800
XMM04=1c0800048e080001 00001008060a016f XMM05=0104808080a01000 0fffffffffffff04
XMM06=0100000008060601 60c0081000188004 XMM07=1c0800048e080001 00001008060a016f
XMM08=c010080018800338 10000180041a0800 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
