last executing test programs:

2.745602529s ago: executing program 2 (id=1423):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x24, &(0x7f0000000340)=0x7e, 0x4)
listen(r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="911e020000000000"], 0x20}}, 0x8810)
r2 = socket$kcm(0x10, 0x3, 0x10)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0xfff}, 0x8)
sendto$inet6(r3, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xa}, 0x1c)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, 0x0, &(0x7f0000000200))
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r6)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0xfffffffffffffea1, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYRESOCT=r4], 0x30}}, 0x0)
r7 = socket$kcm(0x10, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r8=>0xffffffffffffffff})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r10=>0x0})
recvfrom$ax25(r6, &(0x7f0000000140)=""/29, 0x1d, 0x10000, &(0x7f0000000400)={{0x3, @bcast, 0x1}, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r11, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="f166fbffffff00c75b00000013000000efff0200000000000000000005027ef88b8c8c7d7fab9d87fe9e63b13e9eb7a4d8973fa13604ade490dfc9f2442841206d0cb8b41eb7ffcd62a39664c75c01d5159c6ffe0c8db14ce54d65f616b8106c0e62ba72038fa8fb46d7f42664a240c35317f0dcbb8fd5ea6cc8f7b5020338889de2d90d", @ANYRES32=r10, @ANYBLOB="04001300060012000400000006001000fa0000000a000600ffffffffffff00000500130100000000"], 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)
sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
socket$unix(0x1, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)

1.833661748s ago: executing program 2 (id=1429):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000300)={<r1=>0x0, 0x4}, &(0x7f0000000340)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000003c0)={r1, @in={{0x2, 0x4e21, @multicast1}}, 0x241, 0x7ff, 0x6, 0x8001, 0x66}, &(0x7f0000000480)=0x98)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0x90, 0x4) (async, rerun: 64)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) (async, rerun: 64)
r2 = socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(0xffffffffffffffff, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000308010300000000000000000000000005000300060000001400048004000540"], 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async, rerun: 32)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async, rerun: 32)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async, rerun: 32)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "69d44c6d56b4edd0", "753d5bf3c28039183f03f9b8c13075d3", "9f80653e", "6241342282a2646b"}, 0x28) (async, rerun: 64)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r4) (async, rerun: 64)
mmap(&(0x7f0000782000/0x3000)=nil, 0x3000, 0x100000a, 0x12170, 0xffffffffffffffff, 0xffffe000) (async)
connect$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x9, 0x0}, 0xffff}, 0xfffffffffffffe2c)
shutdown(r4, 0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f00000009c0)={<r5=>0x0, 0x9f39, 0x7, 0x1})
ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001240)={r5, "38f49bfe7d546fc4bdb509c176cf4e40"})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0xac22919ed1c3d0c8}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x8, 0x1f, 0xb, 0x14, 0x5}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async)
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000600)=0x6) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, 0x0, &(0x7f0000000100)) (async)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x72, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1ff}}}, &(0x7f0000000200)=0x84) (async)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

1.760175916s ago: executing program 2 (id=1430):
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000006c0)=ANY=[@ANYRES16=r0, @ANYRES64=r0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb0000080003"], 0x68}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000000), 0x4)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r4=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r4, @ANYBLOB="7240146c00000000340012800c0001006d6163766c616e0024"], 0x54}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x70bd27, 0x10, {{@in=@remote, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x60}, {0x9, 0x0, 0x7, 0xc, 0x8, 0x1000000}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x32}, 0x0, @in=@multicast1, 0xfffffffd}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in6=@loopback, 0x0, 0x0, 0x1, 0x0, 0x800}]}]}, 0x13c}}, 0x20004040)
syz_emit_ethernet(0x4e, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffff0081608f0a39e9afd817e1880d7dd16d000000000086dd6000080000183afffe8000000000000000000000000000bbff02000000000000000000000000000188009011e36b7000fe8000000000000000000000000000bb"], 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f00000012c0)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff020}, {0x6, 0x0, 0x4}]}, 0x10)
write$tun(r6, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r6, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, 0x0, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f00000001c0)={0x1, 0x2000000000000002, 0x67, &(0x7f0000000300)=""/103})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b000000dd000000000000000005001900000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000080000ac0000000007000010850000002700000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r10, 0x0, 0xe, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b004e"], 0x24}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94)
setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x77f45bb99217680f}, "ba9508fb307528e2", "727577480b23e0463b1795d0e3038b20", "61eab8ad", "15f715a53c7cdbe5"}, 0x28)

1.758934728s ago: executing program 2 (id=1431):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socket(0x2, 0x3, 0xff)
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x4}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x4000000)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002d00010026bdf000fcdbdf25040000000400190008000c"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50)
socket$inet_udp(0x2, 0x2, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x800000}}, @IFA_FLAGS={0x4, 0x8, 0x195}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000011}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000100))

1.119110969s ago: executing program 0 (id=1440):
openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
socket$inet6_udplite(0xa, 0x2, 0x88)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xa0040, 0x0)
unshare(0x22020400)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x2e9ae5db, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x2, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed8, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x8000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x8, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x2, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000200), 0x4)

1.030536507s ago: executing program 1 (id=1441):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
listen(r0, 0x400004) (async)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x4, 0x2]}})
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
socket(0x10, 0x2, 0x0) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) (async)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffc, @loopback, 0xfffffffa}, 0x1c) (async)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="7307000000000000072000000002060f060008000000000000000f000000000000000500000000000000c204000000f1010700000000000000c20400018001c2040000000800000082"], 0x48) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000040)={0x14, 0x4, 0xa, 0x101, 0x70bd28, 0x25dfdbff, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x2004d805}, 0x8000) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {}, {0xfffffffc}, {}, {}, {0xfffff6f6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0xea3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {0xfffffffd}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xe6c}}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000680), r6) (async)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r9, 0x28, 0x8, &(0x7f0000000100)=0xffffffff00040000, 0x112) (async, rerun: 64)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}}, 0x0) (async, rerun: 64)
socket$inet6(0xa, 0x2, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x4e, 0x0, 0x8}, 0x28) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

1.02829316s ago: executing program 1 (id=1442):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x18)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
listen(r3, 0x0)
shutdown(r3, 0x0)

930.122504ms ago: executing program 1 (id=1443):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0xffffffffffffffff)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
unshare(0x6a040000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$alg(0x26, 0x5, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x1)
writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000001c0))
bind$alg(r2, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x51)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r4 = accept4(r2, 0x0, 0x0, 0x0)
sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x202}], 0x18}, 0x0)
sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r4, &(0x7f0000002180), 0x0, 0x10040, 0x0)

840.351207ms ago: executing program 2 (id=1444):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}], 0x10) (async, rerun: 64)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) (async, rerun: 64)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0xfa9, @private1, 0x9}], 0x2c) (async, rerun: 64)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async, rerun: 64)
listen(r0, 0x0) (async)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async, rerun: 64)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, 0x0, 0x40081}, 0x4005)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x98}, 0x1c)
bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0xd1, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x8}, 0x1c) (async)
listen(r2, 0x200204) (async)
r4 = socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)

840.008977ms ago: executing program 2 (id=1445):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x16c, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x0, 0xfff3}, {0x0, 0xb}}}, 0x16c}, 0x1, 0x0, 0x0, 0x884}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000007c0)="c1188e99b95d02ff4284860186dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0xb, @loopback, 0x9}, 0x1c)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
r5 = socket(0x29, 0x6, 0x4d)
sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x50)
write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)
listen(r4, 0xfffffffc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x7, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
close(r0)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000180)=0x4e5, 0x4)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="020000000008001b000000002016a5932aa885bf80087a71d694c41fe65f716e19a0dd5a095256979c2169187818d1cb8ecb2cb2995ee281a448fa9d48a90c47412b87beff000000"], 0x28}}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x400c2}, 0x80c0)
sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001000000000015e55c919500000000000a1400000011000100"], 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
socket$inet(0x2, 0x1, 0x100)

659.261401ms ago: executing program 1 (id=1446):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00'}, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000070000000800000022"], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@udp=r2, 0x2}, 0x20)
sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x18)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={0xffffffffffffffff}, 0x4)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000002400)={0x0, 0x2, {0x6, @struct={0x796, 0x8000}, 0x0, 0x3a, 0x4, 0x0, 0x1, 0x1, 0x418, @usage=0xe, 0x20000000, 0x1, [0x10001, 0x101, 0x4, 0x4, 0x1]}, {0xa5a, @struct={0x7, 0x7}, 0x0, 0x4, 0xf8b5, 0x5, 0x1, 0x9c76, 0x40, @usage=0x6, 0x7, 0x9, [0x3, 0xfffffffffffffffa, 0x3, 0x4, 0x40, 0x7]}, {0x40, @struct={0x5, 0x4}, 0x0, 0x158, 0x7f, 0x5, 0x3d6963ee, 0x5, 0xa8, @struct={0x7, 0x630b}, 0x6, 0xc, [0x2, 0x2, 0x4, 0x80, 0x5, 0x32eb7448]}, {0x8000000000000000, 0xf1, 0x1}})
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x44}, 0x28)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
sendmsg$kcm(r5, &(0x7f0000001680)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000080)="ac92f8493643f78f0f6b583cc89ad7e81304fd06603245006730822b9550606739003584e70bf6513153e282d72243fd33458219512af623aa68687c846efbb8f9bc41e60a6a0e0173760bc08f370dd8b4700cc1a31291c4daa61e2e8aa8b5d5094c9e136f40acbe78f357783b94c0ac51d9048655e056e686", 0x79}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000001380)=ANY=[@ANYBLOB="480000000000000084000000ff010000d5347b650d030a69b99e7d2008fa73f51b2b9e2f4dc401f7b88ead719ed18d716686eb605282e427da08d1816b8effc47bdcc3fcaf890000c80000000000000008010000000400002fdfa56df61846acce5d364b3a335f960637d69e3fffc4ad7761e2d2c3c7b26138723174dda52ce94e3c05ce5d972fa28b5f02247800f0e3d0d16abfe8b47452d18452be212f9e7420167d48ad0f5ed2070fe28ff81a269a8114231de95703238b086dd1b77dc8dcecd83717efcada86a6f7dcfa6990a8d8e5c72c2987e21adc178039d0170ee3bc55ea6c00e5f21a6c887f8aab2f0aa420c2af218709b791f492ed34e0100fa9825001762e2ed9af79edb1cde7f6f62ec8c80000000000000004010000ff000000be410b9a6ba0ae80dce450a61d3576ffaa1711f26c3ee44e82d04c2a06581a6e11e1e0f1e287cd8a889a5535bdc77e6ec0707cfe2c67c69ae546b7074996f69cea86c67c52b446bf0c5bbafd60f1524996099d11d8c0ca279f7d927daa13b53e878a260872fa7d28f4dc53e4ccf2c1601dd0764411422d0ec9659e59a9ae2b934550d80473a6016650015bdbf6737dad38765300a91e340232ad38240bc28a5516ccfce745edb5142413bd0709f6073ee8a6b5d0ca000000a0000000000000008400000006000000ee3eeea9ee9c0a4c42ed1487a6b547cfa90775c3c31fe00a27f3a6dc1f980abaeb6a26cf847387d9c33688dfd0b7949517ef46a66c72b8d5899e495b0c007b1d82e7da1a067545801688e5f0c795b22ee261227ba51682446da8cb07673cc6df183aaccb7f4041950316c29d0301c5791ebe4fc4a06d559c05f6293e45ac3bca9370fca21c65d8def9c400000000000050000000000000001201000083ffffff2734f5e18f36626df45cb250a81a32e1bb3e1dbaa931adf8d7b7363f19d47a10cc0b9a5b623e441e74a687f7d947c57cd12dd3444161565938271e1649000000"], 0x2c8}, 0x800)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10)

578.208804ms ago: executing program 1 (id=1447):
r0 = socket$inet6(0xa, 0xa, 0x80000000) (async)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={<r1=>0x0, 0x4, 0x30}, &(0x7f0000000040)=0xc)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000080)={<r2=>r1, @in6={{0xa, 0x4e23, 0x0, @mcast1, 0x5}}, [0x2d89, 0x40, 0x9, 0x2, 0x5, 0x3, 0x800, 0x0, 0x0, 0x479, 0xfffffffffffffff9, 0x6a, 0xaa4, 0x0, 0x4]}, &(0x7f0000000180)=0x100) (async)
r3 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0xc00) (async)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xe8)
ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000340)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r5}) (async)
syz_extract_tcp_res$synack(&(0x7f0000000380)={0x41424344, <r6=>0x41424344}, 0x1, 0x0)
syz_extract_tcp_res$synack(&(0x7f00000003c0)={0x41424344, <r7=>0x41424344}, 0x1, 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000400)={@void, @val={0x2, 0x3, 0x8001, 0x5, 0x8, 0x1}, @ipv4=@tcp={{0x37, 0x4, 0x2, 0x8, 0x1e3, 0x67, 0x0, 0x9, 0x6, 0x0, @broadcast, @multicast1, {[@timestamp={0x44, 0x18, 0xdc, 0x0, 0x2, [0xfffffe01, 0x800, 0x4, 0x9, 0xcf]}, @timestamp_prespec={0x44, 0x4c, 0x6a, 0x3, 0x0, [{@private=0xa010100, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0xff}, {@local, 0x2}, {@broadcast, 0x86a}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x3}, {@broadcast, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x2ee5}, {@broadcast, 0x1}, {@multicast1, 0x2}]}, @end, @ssrr={0x89, 0xb, 0x7e, [@remote, @remote]}, @ssrr={0x89, 0x1b, 0x7, [@empty, @broadcast, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @local]}, @timestamp_addr={0x44, 0x1c, 0xd4, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@rand_addr=0x64010102, 0xfffffffa}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3ff}]}, @timestamp_prespec={0x44, 0x14, 0x89, 0x3, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x401}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x3}]}, @timestamp_addr={0x44, 0xc, 0x8e, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x25}, 0x194e3b2a}]}]}}, {{0x4e22, 0x4e23, r6, r7, 0x0, 0x0, 0xe, 0x1, 0xd, 0x0, 0x4, {[@fastopen={0x22, 0x5, "a8d4bc"}, @mptcp=@mp_fclose={0x1e, 0xc, 0x1, 0x0, 0x32}, @sack_perm={0x4, 0x2}, @eol, @generic={0x8, 0xe, "479eb1ff425c10348a354daa"}]}}, {"0da26743ba7a189281c2b77b310d59cf8468e291bb113d6766af5695f7eadc3cef4bf7720d9b61d95116ce0a5db17d6de12488d3893917dab5d87e3a5bd120e216b3def0a75011b6bc1973b382c5498a9fba453f3787156674197b5a07ecc35084fdffff56ef54123e09341c129dee69c933aa918f45e6c003457e0d4022c885de482160f47e94551aa22c3cbca90278452ff0cbbba3668453bfcb814611a4e172cbe38044b6f2813ea92cadc0342859bf21bad6e161a7a9df1bef75e335c62336b85a489fc8c54b9a6e75c892ed9a"}}}}, 0x1ed) (async)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000600)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d, r4})
ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000000640))
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000680)={0xffff3255, 0x5, 0x6ad, 0x7, 0x8}) (async)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000700)={0x23c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xd5, 0xa8, @random="b5720225fbd63e65e80e1751bb47445f1074900cd7435c13413f0881a0e6be17f69e4285dd3702d8c5bf3d0880036d8adf1b907075d8a1c53895a2d606c748532de3c110537b9cb2f334615a7537fbdad09991028474317a4369cf67af28a3cefbea0d76b6b0b8af8b222fb587f4e76485efe770144fabfb8032a6e550211c0ff5a848c50c55d49b3260040dc022248af1ea23cfcab2c4ea0c4c15fd2e2b29ac621eb199e59ddc56d80d455cd0d229317228eeca6384819f3fdbb99a34b59560b40af4a6030869900181e7e7f5ada895a0"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe2, 0xa8, @random="bded9255d78bfd973c85d7c2cb59677119b27a98bc42dcd58d6df6cf6e601d28b37bf4af1589898d92decc9e064f8b03b118674eddb57c23bf2b55969101db63868d82720384c2c69137c51db80745f59e708e68adc2c716afe9643709d108cd3f509bd5d2220ccb1e883ad73991c7f93b1f8620d08f0734c86c63b6064f0e68b66b4af542abee5f5106213f6c6fc7ff84ffb82834d1b308f054a8e14913034c47ebd9492f63c7a330f5c1880b205bd00f6f110d2a44b45958b097380d7004f67bd2447f5642ca241027916d0458fce5ae5e843b77f237c435a688f9265e"}]}, 0x23c}, 0x1, 0x0, 0x0, 0x4000001}, 0x400d4)
ioctl$SIOCAX25DELUID(r3, 0x89e2, &(0x7f00000009c0)={0x3, @default, r5}) (async)
r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_SIOCBRADDBR(r8, 0x89a0, &(0x7f0000000a00)='gre0\x00') (async)
ioctl$sock_SIOCDELRT(r8, 0x890c, &(0x7f0000000a80)={0x0, @sco, @qipcrtr={0x2a, 0x1}, @xdp={0x2c, 0x0, r4, 0x31}, 0xef8, 0x0, 0x0, 0x0, 0xd, &(0x7f0000000a40)='pimreg\x00', 0xe, 0x360f, 0x8}) (async)
syz_extract_tcp_res(&(0x7f0000000b00), 0x1, 0xc) (async)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000b40)={r1, 0x9}, 0x8) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000b80), r0) (async)
setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, &(0x7f0000000bc0)=0xfc, 0x4) (async)
r10 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_int(r10, 0x29, 0x48, &(0x7f0000000c00)=0x8, 0x4) (async)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000c40)={<r11=>r2, 0xf}, &(0x7f0000000c80)=0x8)
setsockopt$inet_sctp6_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f0000000cc0)={r11, 0x200, 0x1, 0x5}, 0x10) (async)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000d00)={r11, 0x6, 0x2, [0x5, 0x4]}, 0xc) (async)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000dc0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x608, 0x468, 0x0, 0x0, 0x2a0, 0x2a0, 0x538, 0x538, 0x538, 0x538, 0x538, 0x6, &(0x7f0000000d40), {[{{@ipv6={@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffffff, 0xff000000, 0xff000000], [0xff, 0xff000000, 0xffffff00, 0xffffffff], 'syzkaller0\x00', 'bond_slave_1\x00', {0xff}, {0xff}, 0x29, 0x0, 0x3, 0x40}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x6, 0x2, 0x1, [0xc, 0x4, 0xc000, 0x6, 0x1, 0x9, 0x7, 0xfff7, 0x7, 0x6, 0x0, 0x10, 0xf, 0xa, 0x8, 0x8], 0x4}}, @inet=@rpfilter={{0x28}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x81}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@dst={{0x48}, {0x10000, 0x4, 0x1, [0xb53f, 0x5, 0xfff, 0x0, 0x4, 0x411, 0xaf4, 0x344, 0xe, 0x7, 0xfffa, 0x2, 0xfff0, 0xfffc, 0xfffc, 0xffff], 0xf}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@private0, 0x1b, 0x29, 0x9}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, [0xffffffff, 0xffffffff], [0xffffffff, 0xff000000, 0xffffffff, 0xff000000], 'geneve0\x00', 'macvtap0\x00', {0xff}, {0xff}, 0x3a, 0x3, 0x2, 0x40}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7ff, 0x6, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x0, 0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x668)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x28, r12, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x86}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xfa}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x40001)

518.112992ms ago: executing program 1 (id=1448):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
close(r1)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syz_tun\x00', <r3=>0x0})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000200000000000000000000000850000004100000095000000000000004be98911ed5a3cf4451d51e400827eef4df9eb3fd52b8f0a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868562f04005972b6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e28a1a97b2c8c56a3f15b2f7a9b7ae2cf52d08555d3c3315e95095217bff8c9441a45fd00000000000000979ed4e35d21d13d428af521c553b9420385390207dc1634aee0244045e5c380e6090329d37b29a56c16d5c7bee160b91246bd2c205047bd92581165c774b1fd46072c161f1d33e6d5c1a5db7a714e3ed5468408f279bd9f98ec3c5ffd79cd37810f03000000b65d147fa05253a600adfb03775847b220369339529d434f3190c81c3dd501a780cfaaaa916c8a33ee4b52d18e160428893f33d206d3a7195e7f69c831099bdc940000aa2c2e61509bf6c58b100000000000000000000000005e3210346531c1eb14fbec6eb35d6f3e3853512c6bf186bd8b75d17aeeaa07"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x54, '\x00', 0x0, @xdp}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r3, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xd81, &(0x7f0000001c80)={@local, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x9, 0x6, "3d8cd2", 0xd4b, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2={0xfc, 0x2, '\x00', 0x1}, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xaf2, 0x3, [], "5246a16dfe4683f1150c14faba43e1e8156dbe35e2cedd016a9a7b6a8878170fbeacd414c80a57fee2fccf03942e4266913a8c606c22982c7638f5b4e19eacc02b0930a52df28c2fed91088b41e74b137437aad7a0543d64ce5743ed532f85664b37875e8f7b6a383cbf26a817b4b45f5bf3d67d8e9f48bfe9d47a22b32dde3995d3078a7c7a9164e66a8a0ff31fc80fbb190fe3ba60bc277cfa2eaa92f43212681298bd60823f482e4507771da81a66f9b03571db4c8b691e7b3c961088b8f4bd91a25330ddfb1ce2fc5bda0d4138c3b988911016985ee98ff5df5a0fbc979ddf8f1f95378a147e8db0a077c7981792bc8c6266c7aee4685c01b1e7d38732e6a19c75600b1818d48267b5385232f5a5c645e0c85bce11bd67f291a4f4762ee3e9a71138d1bdc0796e0e41a010705f411b57364d6dc6deb0bd6c5534a3c8dff4dfd3679142eb1e62c017785fdeea614719c93e7bca925c1495691b53aff15db1704796f1cc3647daf74b48515f4c471f66e10fa0cc6817ec2fa3856950434d2a4bf0491fba8e360c43a573048a27ecbb9dfee8ee0610274f56aa653a78ca31a01587b5920df553c1073a49f80f53a4a1a5e209fe89965f9ad1a31c2d1d86521c1707e2916eae0e60266d1b182df206045cf3bbb2c3d022710d4eb3a41fbf607b2c03c1d7826d7ae62c9ff8d7d4a4a5260d2efa4337a7e1b161b5f461e0e464ab63d93ee2cfaaa6e645d188820b6db3631984de305fd2f6619064469a4468fb6715d1df9042dbf7075e362f740ba19674eec721ffe53a3063216c98d1bd649ade63626539662bf889782a683482a2740a4aebc609bb747655d63549555b1de5b48dbb363cc24e847120aa63d69790d9731f2e7d78bfaa38b27573b5d0ca765b06cb3af5d7aa2467fae9ffa71a9793aadf65d751b54152bbac45395a55a336e718c4cea416e0934014e15f35a721c4dea6d7bf5f55e64b5a21194b279d2795baf0d92c40997af4cf9c59f84c34e2d2e5ad10ee847030b76ef835a08fce450c2b9cd7637d382d543409dc975da6c3e8ce1c953be77c373f94f6e15a498acb06b70d39a5ec5bc577f010f6682c120afb4a5d5c984a192e5b13c5618168980bc46171f4bbd80f0d5aeed85deb3e54dc7d2cb4efa7e2f628a0c486fd3d903f30a23f75030d5d588afab8be14c1e35f6ad5f6566bc5c92de84a94548a2a123cbbb58916a7bf4cd121d449f8bc8c6d9b8851c3abf96e83920bd30bec63b24e584cc673c31b30664f368024a7c0b713c64029b7775e0287639e88d524673f334be3778789b2cd6894a160b47cc3bd983940057d01e1024a6ea93da8d57efdb2e5987f754eed6eb12c8c2e26526c619d86ea6fb420d1e8cd0d0291e1fe40df629d782ffd309e590d3eff67c3b29da8a51af632c7c99ac052844854a48ab441d2d671f588e4a44acef5728b019c302b5258de70a85cf043a475f12511c2b4139549985c1762643e29b9c83cbb3a327c9a968b12c8bd64b06e9bdf30ccfc2711905e133cf859b8b17e6463a387f126f51564e3d6c94ca3fe5194006cab19730823c444ce805a2fa9a798d88e30d92612ac1ea96f18a29b85efaba31835d95c0227b20483b8d97cd9fec66d02db6a22932759fae23a618a3c304c8967e445135889d12bdb081ad9c33ced8f97124e4fd073b6ed5881d17478d6240917b58ab20d12f35625b90bbd173f0cbc2daec980e1d3497572f3957d6be671d6c5e09cc5223267fc4575805ac7c07732698ccafee7faf930220f6208f00e4f91bb1308ebf8fe4851de4a8b973fd63318896986e9eae9f49a509b60a403a0b540ccac1ae757c97aee9860818930dc1e6ac1c26bbb0048771c7e092850e8ae5a703634f0dac24bdfa2b6aea021e2e89bf01439a89384b85446e2598d959f2eb6a4f899694b6f80e16b9be402f28f59170bf07ca2829f1b2dc08e2cdcf27ac3d6f4ec53925b8eabb7e20be10d5e7395fc0692f093c59b56032f3138a8805ecf27673289d9a8b2d257fc39573d6fe895ba474225f806f7b8f3a6223173e0a2f0243823eb9d78620c2f6b776e2891c14af7f9521072171fa89b4519d0b37941aa4adfc819127bce3a200fe8360ec5e4bb1df1fa6ca153d9e87391b3bdd382e22a5f00078ef40a3132dd70b8acc12f7184b0af4537d7c683313e4ecfdf2c8ee1ae8070c05fe7839ccf8273109f89cf552f2de4661f187c84ddb3e9a2b8316a563edfb04bbf034a1d9dc0a719afa8815e27aec234e9d2997fdc411269804960736731f0949feeea655b2a4acfc6fdd86494a041a594ca949ec85e5113f7d54596054b3c1db231b618e9b489d8f1901b1c338b13af26860ff52436c9abc946becc0e752dd38e18a555f96a40288af05affc332caef23afcebd17b62ec586fb3bc07c9627f25c99002abcfcc2277c611d883bc9b269fd11af2480b69f831a09ae806ced0f2f2b6c743ed2ad1efdf34d8c7707174dbb323ba6a22834034a49c04bf5314584d53f7ffadcaa134e99ce9697bed0baf61355dec47de82035f18a213a05958dc764d0e9e4d877886407da9d43cdee6aad1f89dfc957e544f467a51cf5b5c606f2c503e43aaeecdaf95f2213f82bcd70493c16bdea4416cee3b67bb79890adb869d53dd4cb98c82d1f5cf4188837a67fba5a1a89d8d35af67ae5306a017919d56ceec07c215d19b6f7b195800622b46f0cff886e31fe90063293004179ca77a4c248a000485ad4c6ed784bea28a668fe8a677b229c5daa3f4c99b6209088b5682b64586e1e4f9e825113c8788a95d78886a495df391c577c8bef046edbe05e2fb506fb58a05bdc63c28091787d447d738000c2f107cb4101de56a673ac5b9f6f49d694daee78fa256e5b87b8a8e1b07888a9cd4676b2d051367f0cae3988e309dee2b0cd41d0ad5397a41a1be284fd8ee0d7d6e7098d74bca235ba53deed18cd33c63105ad0377f52c2a766b01b0d3b8005f6656be23217d8db633a5f6238ace77d83120ef1c2286868f78ab281d415cfea1ad0357fcd716fcff8883f936b716401a419e25a855ce07196effc030a7fe3c8c073c01ff100259b0e300d7440264bbcc02d28bcfbf371fe23c829fa17839d8ab1a3a80249be6306dc1ac5e8fd8589329556588f888f40e13978e842428f70ebf2eec0de7adf09649e80e0e90e014a539d54cf723d0e1547c7f1f8b0f6c71dfdb8d0a4dc592a60f8bc64f458bbaab460e1868470135812a68470072708e6a5e6c856398052f29ebf456c3792577d76be443ce7032af9378b2e1293675519672dbf460f2c2874cd7b2aec99c4f720dbd0b444b25db3a92ba958246cbe60565886502d8a8d6387b3f76ebc26032f5578e40de6033693770165b4cca64c6de81e1cdb7f59dd73d587810b0b2b1beab08c0ce8b91dccf843b1dd69ccc51e7a16435c9f90af50bec4a35ad3664b587379ac33f7042ebedd909627cc3dc2ba5b44ba1d189ed17a19da2ee9b9ad5134d59e20f1680e5d24852ba4325854ae3040f93b2aeb22e39e2ee02da3f7e98089ef995e6cf3c5049269ea5a22bcaee30c200ed132ea7064b8729027555bef8e902b32fb980dcd565228c7f1f5b76eff6ad8a4412c130b5c6f140821be089d78828d9b9ceb6dba4b23788803cb36de15850aefe7b00c47ceac8af3b827d21bd0995a4069d6e3495bbcf2549cd682a2b0e1ac2f30e80fd4c1667dd18e960092fa16a554f3b1d40f050a3fba7d6c72f94a310aa7e015c86551303ba6def230a865247cfbc63919bf8c64b2ad5fc932c9337af4d8be097b6941e508b2670d8297aba69b5d42b67cfa70e6d001975ab183814883f37f929952f650d6b67bf9521ba00b6732c24d2f179093a2823326746c3f254a95883bc1ad7e2a95e4ebacca87f819b1a4fadf44cd8d68eb0f51c483e3ec9b09c3621ed0c3d505a29f755852ba13233"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [], "26522e23d654ee0993028b9863a5ce45be96553e3038406252a7ff150434692fad2f528c92370cd3cec3e2cf5b0614ad6755907c306e003ea5088e892585ddbb4752d01918d4fa0bf341d111a5e478c5c423444398efffd2458015ec43caad0167459a541f454cc62a48ecf5d58302f2f4462aeaf89447ca9322e9f29d41a2ddc78f7c1f903068a938a36e700b06eb7c9af9e12b6bb3c743e4962756ee8cd564022a0fb11955db45fb5e2bdaf1d83355b6df8235e8bf9bcf863323e8839b53b382c0d01331405c5493be4580700597f1e668da026e77b35368dd7243389c183a5ca7db6fd59a13cb97a41b72cbaebb44"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x6, 0x0], "69fcad2a513da2661eaa53a1624134f96d86077b5349bd5eec76836cd6fdf614808eb87b0ab45443524433ef6abc66618d1660d5541383"}, {0x8, 0x88be, 0x4, {{0x9, 0x1, 0x4, 0x3, 0x0, 0x1, 0x2}, 0x1, {0x6c5}}}, {0x8, 0x22eb, 0x1, {{0x1, 0x2, 0x67, 0x1, 0x0, 0x0, 0x6, 0x3c}, 0x2, {0x9, 0x5, 0x0, 0x11, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x0, "d0bbfc61e628b7388f5df6203b822aec76cee11c0390f702d50fd14442affe0b7f465e1681f17b98653f105fdd26cf9c6a6fcd2f1b982df18ec94c22640cb13a933f02a5e40537260d346343024e8671f97abec6bb421f92224991f981148d1ef231270bd7d31d82e955dcd696d92403fce2579815394f83b281a7a72aacec10cb40569dca0e2a5f20ab0e1521bc2343cf3cbf14128ad8363e571b0d25f7946334fe1728c0763cd30ab1fced8d7b7cf6bf84baf1422d2b12fa9fd2df437b63c95c034be68ec8e24e208b80055611f4e68ffd0d55ceed79f529f3148a9ba45ec0da45456a248b3c27475d"}}}}}}}, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4)
sendto$inet(r0, &(0x7f0000000200)="0c268aae7f1f1241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0xffffffffffffffe3, 0x20048041, 0x0, 0x0)
recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104)

249.495147ms ago: executing program 0 (id=1449):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_getlink={0x28, 0x12, 0x301, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x8a6b, 0x11530}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xffffff80}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000c78118f564c6aa3800"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x4e, &(0x7f0000000740)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @local, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4}]}}}}}}}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fcdbdf2503000000400001802c0004021400010002000000ac14142f000000000000000014000200020000000000000000000000000000000d0001007564703a73797a3200000000257ef7d387b1093443fc"], 0x54}}, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r8=>0x0})
connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10)
sendmsg$can_bcm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x1, 0x90, 0x80000, {0x77359400}, {}, {}, 0x1, @can={{}, 0x40, 0x1, 0x0, 0x0, "ce2a4fa7a0aa108b"}}, 0x48}}, 0x40884)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r9 = accept4(r6, 0x0, 0x0, 0x800)
ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000380))
sendmmsg$alg(r9, &(0x7f0000001cc0)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0f9c4d6bfa8c2a0c2e1abf3f3ee6a0b3", 0x10}], 0x1, 0x0, 0x0, 0x20008000}], 0x1, 0x2000c085)
recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x54, r5, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e22, @broadcast}}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000200)={&(0x7f0000000080)=""/29, 0x1d, 0x4, 0x7})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1, 0x0, 0x0, 0x44100}, 0x0)

180.248466ms ago: executing program 0 (id=1450):
connect$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0)
r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
sendfile(r2, r1, 0x0, 0xf2)

178.433749ms ago: executing program 0 (id=1451):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x8c4, 0x0, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) (async)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0}, 0x90) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r1}, 0x20) (async)
sendmmsg$inet6(r1, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x1, &(0x7f0000000480), 0x14}}], 0x400, 0x10) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
pwrite64(r4, &(0x7f0000000080)="28f84070f5181177967bc17f78386937d53addb111b6361941763982e1973a0c0af300a98e0ee4f6ee3d146a08aeba6185e5a0012d2420a6fabb5bacf3bb6335c51b6f390ae6770ee5d2c2923f482c0df4ed5ce98727f7c68f7604682b8c0ae33d04a606a1703be8c8a90f75d92aad34ce8a900592c4f66446cf4517d491709bba3f7e3e5ae0159eadc8b3f001e3f5bb496168c48840a03f67d9a8c13b81d8a2947ff2ee72386b31d3a285b27d1bcb269ee7896ebbd5391ae9ca9befd15f8a2405554770bc5a8a96d93b83521b27bce0e95612560fae6199", 0xd8, 0x8000) (async)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r4, 0xfffffffc) (async)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r9, @ANYBLOB="ec87ef0f0000bd3c4f31aae2c564ce1a155ea1f87ecf772b77de8f26f0ad89b3f4be388e231aed67058f49a9947dc1f9a70fc87ff429e6d58528"], 0x18}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r7, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0)

110.101762ms ago: executing program 0 (id=1452):
r0 = socket(0x23, 0x80805, 0x0)
listen(r0, 0x0) (async, rerun: 32)
poll(&(0x7f0000000000)=[{r0, 0x9081}], 0x1, 0x2) (async, rerun: 32)
r1 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) (async)
r2 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r2, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x24004059)
close(r2) (async)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)

0s ago: executing program 0 (id=1453):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
read(0xffffffffffffffff, 0x0, 0x0)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
syz_emit_ethernet(0x6a, &(0x7f0000000300)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x5c, 0x65, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x3, 0x0, 0x0, 0x6, 0x1f, {0x10, 0x4, 0x3, 0x3a, 0x7ff, 0x68, 0x1ce2, 0xd9, 0x32, 0xe5c, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x36}, {[@timestamp={0x44, 0x18, 0x3e, 0x0, 0xc, [0x101, 0x6, 0x4, 0x1, 0x3e]}, @lsrr={0x83, 0x13, 0xc0, [@broadcast, @remote, @local, @dev={0xac, 0x14, 0x14, 0x16}]}]}}}}}}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000002000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000006c0)={'wlan0\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COOKIE={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x10004080}, 0x40000)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x13, r9, 0x0)
socket$inet(0x2, 0x2, 0x1)
close(0x3)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:64678' (ED25519) to the list of known hosts.
syzkaller login: [   56.090323][ T5830] cgroup: Unknown subsys name 'net'
[   56.192853][ T5830] cgroup: Unknown subsys name 'cpuset'
[   56.197162][ T5830] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.117738][ T5830] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.857320][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.862365][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.865358][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.868430][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.871415][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.886566][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.890166][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.893098][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.895884][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.898762][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.985048][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.989177][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.992696][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.996837][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.000399][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.216419][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   63.334417][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   63.415046][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.417717][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.421657][ T5848] bridge_slave_0: entered allmulticast mode
[   63.424570][ T5848] bridge_slave_0: entered promiscuous mode
[   63.432172][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.434485][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.436816][ T5848] bridge_slave_1: entered allmulticast mode
[   63.440027][ T5848] bridge_slave_1: entered promiscuous mode
[   63.462938][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   63.504265][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.506659][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.509275][ T5844] bridge_slave_0: entered allmulticast mode
[   63.512059][ T5844] bridge_slave_0: entered promiscuous mode
[   63.518533][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.530637][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.534401][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.537231][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.540570][ T5844] bridge_slave_1: entered allmulticast mode
[   63.544191][ T5844] bridge_slave_1: entered promiscuous mode
[   63.618260][ T5848] team0: Port device team_slave_0 added
[   63.622976][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.627833][ T5848] team0: Port device team_slave_1 added
[   63.642344][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.689310][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.691703][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.700387][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.704743][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.707745][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.710989][ T5851] bridge_slave_0: entered allmulticast mode
[   63.714937][ T5851] bridge_slave_0: entered promiscuous mode
[   63.734574][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.737449][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.749336][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.753953][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.757229][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.760383][ T5851] bridge_slave_1: entered allmulticast mode
[   63.764303][ T5851] bridge_slave_1: entered promiscuous mode
[   63.770795][ T5844] team0: Port device team_slave_0 added
[   63.802590][ T5844] team0: Port device team_slave_1 added
[   63.830317][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.862160][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.872211][ T5848] hsr_slave_0: entered promiscuous mode
[   63.875644][ T5848] hsr_slave_1: entered promiscuous mode
[   63.880646][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.883405][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.893368][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.920499][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.923369][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   63.934109][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.946874][ T5851] team0: Port device team_slave_0 added
[   63.964562][ T5851] team0: Port device team_slave_1 added
[   64.056097][ T5844] hsr_slave_0: entered promiscuous mode
[   64.059934][ T5844] hsr_slave_1: entered promiscuous mode
[   64.062903][ T5844] debugfs: 'hsr0' already exists in 'hsr'
[   64.065281][ T5844] Cannot create hsr debugfs directory
[   64.068166][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.072336][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.082899][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.102149][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.105022][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   64.115584][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.182114][ T5851] hsr_slave_0: entered promiscuous mode
[   64.185452][ T5851] hsr_slave_1: entered promiscuous mode
[   64.188393][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   64.191318][ T5851] Cannot create hsr debugfs directory
[   64.427902][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.438442][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.452478][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.460150][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.511851][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.517954][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.536566][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.542475][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.607004][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.614238][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.620361][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.640251][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.682147][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.710104][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   64.724672][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.727083][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.741297][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.743677][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.751047][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.800464][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   64.818330][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.821370][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.843219][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.846246][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.870236][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.899236][   T54] Bluetooth: hci0: command tx timeout
[   64.910300][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   64.922860][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.925161][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.941184][   T39] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.943796][   T39] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.978788][   T54] Bluetooth: hci1: command tx timeout
[   65.060652][   T54] Bluetooth: hci2: command tx timeout
[   65.074919][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.135895][ T5848] veth0_vlan: entered promiscuous mode
[   65.148429][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.163631][ T5848] veth1_vlan: entered promiscuous mode
[   65.222678][ T5848] veth0_macvtap: entered promiscuous mode
[   65.231960][ T5844] veth0_vlan: entered promiscuous mode
[   65.241713][ T5848] veth1_macvtap: entered promiscuous mode
[   65.257190][ T5844] veth1_vlan: entered promiscuous mode
[   65.282980][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.289339][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.307013][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.326823][ T5674] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.339772][ T5674] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.343357][ T5674] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.346969][ T5674] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.395087][ T5844] veth0_macvtap: entered promiscuous mode
[   65.418357][ T5844] veth1_macvtap: entered promiscuous mode
[   65.477643][ T5851] veth0_vlan: entered promiscuous mode
[   65.487675][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.500231][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.506697][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.511414][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.527820][ T5851] veth1_vlan: entered promiscuous mode
[   65.536577][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.541034][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.565633][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.569918][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.619253][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.630345][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.655333][ T5851] veth0_macvtap: entered promiscuous mode
[   65.667738][ T5851] veth1_macvtap: entered promiscuous mode
[   65.681302][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.715233][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.725775][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.737704][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.753610][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.775992][ T5892] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.783994][ T5892] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.787780][ T5892] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.814091][ T5892] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.821057][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.824872][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.909227][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.916935][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.957440][ T5047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.960843][ T5047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.187065][ T5925] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received
[   66.666994][ T5942] TCP: tcp_parse_options: Illegal window scaling value 104 > 14 received
[   66.852722][ T5951] syz.1.10 uses obsolete (PF_INET,SOCK_PACKET)
[   66.926051][ T5951] syz.1.10 (5951) used greatest stack depth: 19480 bytes left
[   66.969419][   T33] audit: type=1800 audit(1758972152.606:2): pid=5955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.11" name="memory.events" dev="tmpfs" ino=45 res=0 errno=0
[   66.982833][   T54] Bluetooth: hci0: command tx timeout
[   67.059637][   T54] Bluetooth: hci1: command tx timeout
[   67.139073][   T54] Bluetooth: hci2: command tx timeout
[   67.245906][ T5975] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14'.
[   67.282786][ T5975] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.407343][ T5980] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.469327][ T5982] netlink: 'syz.2.17': attribute type 11 has an invalid length.
[   67.472593][ T5982] netlink: 244 bytes leftover after parsing attributes in process `syz.2.17'.
[   67.655141][ T5987] netlink: zone id is out of range
[   67.657854][ T5987] netlink: zone id is out of range
[   67.660216][ T5987] netlink: zone id is out of range
[   67.662766][ T5987] netlink: set zone limit has 8 unknown bytes
[   67.735668][ T5991] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20'.
[   68.067588][ T6003] netlink: 48 bytes leftover after parsing attributes in process `syz.2.23'.
[   68.071573][ T6003] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23'.
[   68.074589][ T6003] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23'.
[   68.650623][ T6006] netlink: 244 bytes leftover after parsing attributes in process `syz.2.24'.
[   69.058842][   T54] Bluetooth: hci0: command tx timeout
[   69.139685][   T54] Bluetooth: hci1: command tx timeout
[   69.218925][   T54] Bluetooth: hci2: command tx timeout
[   69.704532][ T6050] netlink: 'syz.2.35': attribute type 10 has an invalid length.
[   69.708907][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.713200][ T6050] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.725942][ T6050] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.728456][ T6050] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.731717][ T6050] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.734742][ T6050] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.743842][ T6050] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   69.747959][ T6050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.35'.
[   69.751193][ T6050] bridge_slave_1: left allmulticast mode
[   69.754350][ T6050] bridge_slave_1: left promiscuous mode
[   69.756314][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.763564][ T6050] bridge_slave_0: left allmulticast mode
[   69.765426][ T6050] bridge_slave_0: left promiscuous mode
[   69.767371][ T6050] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.800501][ T6050] bond0: (slave bridge0): Releasing backup interface
[   69.825091][ T6056] netlink: set zone limit has 8 unknown bytes
[   69.985710][ T6054] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[   69.992938][ T6054] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[   70.000473][ T6054] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.007357][ T6054] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.110611][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.41'.
[   70.115537][ T5892] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.162981][ T6072] syzkaller0: entered promiscuous mode
[   70.164845][ T6072] syzkaller0: entered allmulticast mode
[   70.175741][ T5892] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.180905][ T5892] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.186720][ T5892] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.140194][   T54] Bluetooth: hci0: command tx timeout
[   71.155303][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.157632][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.220914][   T54] Bluetooth: hci1: command tx timeout
[   71.315532][   T54] Bluetooth: hci2: command tx timeout
[   71.324187][ T6101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.47'.
[   71.382776][ T6101] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.392242][ T6101] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.565342][ T6103] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.568879][ T6103] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.604198][ T6111] netlink: set zone limit has 8 unknown bytes
[   71.671828][ T6113] Zero length message leads to an empty skb
[   71.696664][ T6103] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.712914][ T6103] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.891947][ T5674] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.903495][ T5674] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.916885][ T5674] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.927737][ T5674] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   72.004449][ T6119] syzkaller1: entered promiscuous mode
[   72.009768][ T6119] syzkaller1: entered allmulticast mode
[   72.150473][ T5891] IPVS: starting estimator thread 0...
[   72.218288][ T6134] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   72.226933][ T6137] ieee802154 phy0 wpan0: encryption failed: -22
[   72.238819][ T6133] IPVS: using max 45 ests per chain, 108000 per kthread
[   72.474183][ T6158] sit0: entered promiscuous mode
[   72.481821][ T6158] netlink: 'syz.0.67': attribute type 1 has an invalid length.
[   72.484364][ T6158] __nla_validate_parse: 2 callbacks suppressed
[   72.484373][ T6158] netlink: 1 bytes leftover after parsing attributes in process `syz.0.67'.
[   72.700370][ T6177] netlink: 240 bytes leftover after parsing attributes in process `syz.1.68'.
[   72.986519][ T6183] netlink: 12 bytes leftover after parsing attributes in process `syz.1.72'.
[   73.044545][ T6185] netlink: 28 bytes leftover after parsing attributes in process `syz.2.73'.
[   73.085703][ T6190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.74'.
[   73.600790][ T6200] warning: `syz.0.76' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   74.044474][ T6208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   74.050685][ T6208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   74.054964][ T6208] bond0 (unregistering): Released all slaves
[   74.312853][ T6231] syzkaller0: entered promiscuous mode
[   74.314606][ T6231] syzkaller0: entered allmulticast mode
[   75.339365][ T6253] netlink: 11 bytes leftover after parsing attributes in process `syz.0.88'.
[   75.342979][ T6253] netlink: 11 bytes leftover after parsing attributes in process `syz.0.88'.
[   75.348164][ T6253] netlink: 11 bytes leftover after parsing attributes in process `syz.0.88'.
[   75.351948][ T6253] netlink: 11 bytes leftover after parsing attributes in process `syz.0.88'.
[   75.358182][ T6253] xt_policy: too many policy elements
[   75.461642][ T6266] sctp: [Deprecated]: syz.0.90 (pid 6266) Use of struct sctp_assoc_value in delayed_ack socket option.
[   75.461642][ T6266] Use struct sctp_sack_info instead
[   76.264330][ T6279] netlink: 36 bytes leftover after parsing attributes in process `syz.1.94'.
[   76.352149][ T6289] ieee802154 phy0 wpan0: encryption failed: -22
[   76.481322][ T6300] syzkaller0: entered promiscuous mode
[   76.483614][ T6300] syzkaller0: entered allmulticast mode
[   77.763270][ T6345] __nla_validate_parse: 10 callbacks suppressed
[   77.763288][ T6345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.110'.
[   77.772471][ T6345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.110'.
[   77.792758][ T6348] netlink: 24 bytes leftover after parsing attributes in process `syz.0.111'.
[   78.470865][ T6369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.116'.
[   79.696941][ T6400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.124'.
[   79.849092][ T6404] syzkaller0: entered promiscuous mode
[   79.851773][ T6404] syzkaller0: entered allmulticast mode
[   79.857422][ T6407] sit0: left promiscuous mode
[   79.882250][ T6407] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   80.411678][ T6423] netlink: 36 bytes leftover after parsing attributes in process `syz.0.130'.
[   80.415402][ T6423] netlink: 40 bytes leftover after parsing attributes in process `syz.0.130'.
[   80.419759][ T6423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.130'.
[   81.074755][ T6439] netlink: 48 bytes leftover after parsing attributes in process `syz.2.134'.
[   81.093728][ T6439] netlink: 48 bytes leftover after parsing attributes in process `syz.2.134'.
[   81.177803][ T6443] tipc: Started in network mode
[   81.180043][ T6443] tipc: Node identity ac14142f, cluster identity 4711
[   81.183840][ T6443] tipc: New replicast peer: 0.0.0.0
[   81.186017][ T6443] tipc: Enabled bearer <udp:syz2>, priority 10
[   81.191662][ T6443] tipc: New replicast peer: 255.255.255.255
[   81.379673][   T51] cfg80211: failed to load regulatory.db
[   81.583024][ T6477] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   81.585601][ T6477] IPv6: NLM_F_CREATE should be set when creating new route
[   82.181006][   T51] tipc: Node number set to 2886997039
[   82.291204][ T6498] netlink: 'syz.2.152': attribute type 10 has an invalid length.
[   82.483652][ T6515] batman_adv: batadv0: Removing interface: batadv_slave_0
[   82.487450][ T6515] batman_adv: batadv0: Removing interface: batadv_slave_1
[   82.611948][ T6517] batadv_slave_0: entered promiscuous mode
[   83.373221][ T6535] __nla_validate_parse: 5 callbacks suppressed
[   83.373271][ T6535] netlink: 36 bytes leftover after parsing attributes in process `syz.2.163'.
[   83.378396][ T6535] netlink: 40 bytes leftover after parsing attributes in process `syz.2.163'.
[   83.382880][ T6535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.163'.
[   83.766142][ T6545] netlink: 36 bytes leftover after parsing attributes in process `syz.1.166'.
[   83.769204][ T6545] netlink: 16 bytes leftover after parsing attributes in process `syz.1.166'.
[   83.772516][ T6545] netlink: 36 bytes leftover after parsing attributes in process `syz.1.166'.
[   83.775344][ T6545] netlink: 36 bytes leftover after parsing attributes in process `syz.1.166'.
[   83.817345][ T6545] netlink: 'syz.1.166': attribute type 1 has an invalid length.
[   84.455407][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.169'.
[   84.559085][ T6566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.170'.
[   84.622992][ T6569] netlink: 36 bytes leftover after parsing attributes in process `syz.0.171'.
[   85.013243][ T6591] syzkaller1: entered promiscuous mode
[   85.015115][ T6591] syzkaller1: entered allmulticast mode
[   86.095993][ T6609] netlink: 'syz.0.185': attribute type 10 has an invalid length.
[   86.121682][ T6609] veth0_vlan: left promiscuous mode
[   86.125685][ T6609] veth0_vlan: entered promiscuous mode
[   86.131772][ T6609] team0: Device veth0_vlan failed to register rx_handler
[   86.231757][ T6613] netlink: set zone limit has 8 unknown bytes
[   86.474606][ T6639] pimreg: entered allmulticast mode
[   87.624419][ T6682] batadv_slave_0: left promiscuous mode
[   87.915146][ T6697] netlink: 'syz.1.210': attribute type 14 has an invalid length.
[   87.929027][ T6697] IPv6: NLM_F_REPLACE set, but no existing node found!
[   88.139399][ T6706] netlink: 'syz.0.213': attribute type 4 has an invalid length.
[   88.397733][ T6713] netlink: 'syz.0.215': attribute type 21 has an invalid length.
[   88.536425][ T6713] __nla_validate_parse: 9 callbacks suppressed
[   88.536438][ T6713] netlink: 132 bytes leftover after parsing attributes in process `syz.0.215'.
[   88.555496][ T6713] netlink: 'syz.0.215': attribute type 1 has an invalid length.
[   88.653482][ T6724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.216'.
[   88.839900][ T6736] netlink: 36 bytes leftover after parsing attributes in process `syz.1.219'.
[   88.888306][ T6736] netlink: 16 bytes leftover after parsing attributes in process `syz.1.219'.
[   88.891682][ T6736] netlink: 36 bytes leftover after parsing attributes in process `syz.1.219'.
[   88.894732][ T6736] netlink: 36 bytes leftover after parsing attributes in process `syz.1.219'.
[   88.964645][ T6751] netlink: 16 bytes leftover after parsing attributes in process `syz.2.224'.
[   88.978497][ T6751] netlink: 'syz.2.224': attribute type 8 has an invalid length.
[   89.903063][ T6766] netlink: 20 bytes leftover after parsing attributes in process `syz.2.228'.
[   90.067054][ T6775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.231'.
[   90.182096][ T6779] netlink: 36 bytes leftover after parsing attributes in process `syz.0.233'.
[   90.769986][ T6789] netlink: set zone limit has 8 unknown bytes
[   91.339568][ T6813] netlink: set zone limit has 8 unknown bytes
[   91.391997][ T6818] netlink: 'syz.1.245': attribute type 10 has an invalid length.
[   91.395980][ T6818] bridge_slave_1: left allmulticast mode
[   91.398420][ T6818] bridge_slave_1: left promiscuous mode
[   91.401994][ T6818] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.407492][ T6818] bridge_slave_0: left allmulticast mode
[   91.410357][ T6818] bridge_slave_0: left promiscuous mode
[   91.412958][ T6818] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.496099][ T6816] tipc: Started in network mode
[   91.498262][ T6816] tipc: Node identity fac54f4cb03d, cluster identity 4711
[   91.501986][ T6816] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   91.507300][ T6816] syzkaller0: entered promiscuous mode
[   91.510066][ T6816] syzkaller0: entered allmulticast mode
[   91.520673][ T6816] tipc: Resetting bearer <eth:syzkaller0>
[   92.212452][ T6815] tipc: Resetting bearer <eth:syzkaller0>
[   92.222200][ T6815] tipc: Disabling bearer <eth:syzkaller0>
[   92.376618][ T6844] netlink: set zone limit has 8 unknown bytes
[   93.057221][ T6901] syzkaller0: entered promiscuous mode
[   93.059759][ T6901] syzkaller0: entered allmulticast mode
[   93.251233][ T6910] netlink: 'syz.2.264': attribute type 16 has an invalid length.
[   93.254442][ T6910] netlink: 'syz.2.264': attribute type 17 has an invalid length.
[   93.260966][ T6910] IPv6: NLM_F_REPLACE set, but no existing node found!
[   93.355395][ T5895] IPVS: starting estimator thread 0...
[   93.448798][ T6914] IPVS: using max 46 ests per chain, 110400 per kthread
[   94.278078][ T6931] sctp: [Deprecated]: syz.2.270 (pid 6931) Use of int in maxseg socket option.
[   94.278078][ T6931] Use struct sctp_assoc_value instead
[   94.355930][ T6955] bond_slave_1: mtu less than device minimum
[   94.456003][ T6948] __nla_validate_parse: 8 callbacks suppressed
[   94.456019][ T6948] netlink: 36 bytes leftover after parsing attributes in process `syz.1.274'.
[   94.462819][ T6948] netlink: 40 bytes leftover after parsing attributes in process `syz.1.274'.
[   94.466470][ T6948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.274'.
[   94.474006][ T6957] netlink: 36 bytes leftover after parsing attributes in process `syz.2.277'.
[   94.477218][ T6957] netlink: 40 bytes leftover after parsing attributes in process `syz.2.277'.
[   94.480527][ T6957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.277'.
[   94.602011][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.282'.
[   94.604843][ T6976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.282'.
[   94.667961][ T6985] netlink: 20 bytes leftover after parsing attributes in process `syz.0.284'.
[   94.731543][ T6985] Bluetooth: MGMT ver 1.23
[   94.734508][ T6985] netlink: 40 bytes leftover after parsing attributes in process `syz.0.284'.
[   95.610400][ T7049] sctp: [Deprecated]: syz.0.298 (pid 7049) Use of int in max_burst socket option deprecated.
[   95.610400][ T7049] Use struct sctp_assoc_value instead
[   95.617598][ T7049] sctp: [Deprecated]: syz.0.298 (pid 7049) Use of int in max_burst socket option deprecated.
[   95.617598][ T7049] Use struct sctp_assoc_value instead
[   95.765613][ T7063] sctp: [Deprecated]: syz.2.301 (pid 7063) Use of int in maxseg socket option.
[   95.765613][ T7063] Use struct sctp_assoc_value instead
[   95.969547][ T7082] 8021q: VLANs not supported on xfrm0
[   97.021236][ T7143] netlink: 'syz.1.327': attribute type 23 has an invalid length.
[   97.047143][ T7143] wlan1 speed is unknown, defaulting to 1000
[   97.051386][ T7143] wlan1 speed is unknown, defaulting to 1000
[   97.056923][ T7143] wlan1 speed is unknown, defaulting to 1000
[   97.067456][ T7143] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   97.077688][ T7143] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   97.112913][ T7143] wlan1 speed is unknown, defaulting to 1000
[   97.124147][ T7143] wlan1 speed is unknown, defaulting to 1000
[   97.129743][ T7143] wlan1 speed is unknown, defaulting to 1000
[   98.281716][ T7172] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   98.537450][ T7183] wlan1 speed is unknown, defaulting to 1000
[   99.004377][ T7205] netlink: 'syz.1.342': attribute type 1 has an invalid length.
[   99.660192][ T7245] bridge_slave_0: left allmulticast mode
[   99.662695][ T7245] bridge_slave_0: left promiscuous mode
[   99.665289][ T7245] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.672312][ T7245] bridge_slave_1: left allmulticast mode
[   99.674743][ T7245] bridge_slave_1: left promiscuous mode
[   99.677311][ T7245] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.689199][ T7245] bond0: (slave bond_slave_0): Releasing backup interface
[   99.696011][ T7245] bond0: (slave bond_slave_1): Releasing backup interface
[   99.711815][ T7252] __nla_validate_parse: 14 callbacks suppressed
[   99.711827][ T7252] netlink: 36 bytes leftover after parsing attributes in process `syz.2.351'.
[   99.713583][ T7245] team0: Port device team_slave_0 removed
[   99.713988][ T7252] netlink: 40 bytes leftover after parsing attributes in process `syz.2.351'.
[   99.724183][ T7252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.351'.
[   99.727094][ T7245] team0: Port device team_slave_1 removed
[   99.732286][ T7245] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.736685][ T7245] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.743933][ T7245] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.747213][ T7245] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.754557][ T7245] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   99.774814][ T7245] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   99.783108][ T7245] netlink: 28 bytes leftover after parsing attributes in process `syz.0.350'.
[  100.500960][ T7269] wlan1 speed is unknown, defaulting to 1000
[  100.813382][ T7281] netlink: 'syz.2.358': attribute type 10 has an invalid length.
[  100.816867][ T7281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.358'.
[  100.874321][ T7283] netlink: 'syz.0.359': attribute type 1 has an invalid length.
[  101.086494][ T7297] netlink: 48 bytes leftover after parsing attributes in process `syz.1.360'.
[  101.869700][ T7307] netlink: 'syz.2.362': attribute type 16 has an invalid length.
[  101.872835][ T7307] netlink: 'syz.2.362': attribute type 17 has an invalid length.
[  101.877864][ T7307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.362'.
[  101.885518][ T7307] IPv6: NLM_F_REPLACE set, but no existing node found!
[  101.907795][ T7314] veth1_to_bond: entered allmulticast mode
[  101.914258][ T7314] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  101.965621][ T7323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.367'.
[  102.419402][ T7350] netlink: 36 bytes leftover after parsing attributes in process `syz.0.371'.
[  102.423424][ T7350] netlink: 16 bytes leftover after parsing attributes in process `syz.0.371'.
[  102.592005][ T7358] lo speed is unknown, defaulting to 1000
[  102.596897][ T7358] lo speed is unknown, defaulting to 1000
[  102.601223][ T7358] lo speed is unknown, defaulting to 1000
[  102.766999][ T7358] infiniband syz0: set active
[  102.769645][ T5895] lo speed is unknown, defaulting to 1000
[  102.771737][ T7358] infiniband syz0: added lo
[  102.805465][ T7358] RDS/IB: syz0: added
[  102.813453][ T7358] lo speed is unknown, defaulting to 1000
[  102.980595][ T7358] lo speed is unknown, defaulting to 1000
[  103.139444][ T7358] lo speed is unknown, defaulting to 1000
[  103.228085][ T7366] wlan1 speed is unknown, defaulting to 1000
[  103.264841][ T7358] lo speed is unknown, defaulting to 1000
[  103.506687][ T7375] tipc: New replicast peer: 0.0.0.0
[  103.514086][ T7375] tipc: Enabled bearer <udp:syz2>, priority 10
[  103.519066][ T7374] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  104.000158][ T7413] sctp: [Deprecated]: syz.0.386 (pid 7413) Use of int in max_burst socket option deprecated.
[  104.000158][ T7413] Use struct sctp_assoc_value instead
[  104.058968][   T33] audit: type=1804 audit(1758972189.696:3): pid=7407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.385" name="/newroot/114/cgroup.controllers" dev="tmpfs" ino=599 res=1 errno=0
[  104.068897][   T33] audit: type=1800 audit(1758972189.696:4): pid=7407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.385" name="cgroup.controllers" dev="tmpfs" ino=599 res=0 errno=0
[  104.157807][ T7417] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.162575][ T7417] syzkaller0: entered promiscuous mode
[  104.164931][ T7417] syzkaller0: entered allmulticast mode
[  104.185024][ T7418] tipc: Resetting bearer <eth:syzkaller0>
[  104.199966][ T7418] tipc: Disabling bearer <eth:syzkaller0>
[  104.630198][ T7425] wlan1 speed is unknown, defaulting to 1000
[  104.635194][ T7425] lo speed is unknown, defaulting to 1000
[  105.208830][    T9] tipc: Node number set to 1257787212
[  105.217182][ T7441] netlink: 'syz.0.392': attribute type 5 has an invalid length.
[  105.233295][ T7440] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  105.333287][ T7444] __nla_validate_parse: 8 callbacks suppressed
[  105.333305][ T7444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.393'.
[  105.339043][ T7445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.393'.
[  105.498273][ T7450] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20003
[  105.504604][ T7450] TCP: tcp_parse_options: Illegal window scaling value 104 > 14 received
[  105.691080][ T7461] syzkaller1: entered promiscuous mode
[  105.693713][ T7461] syzkaller1: entered allmulticast mode
[  105.699458][ T7456] netlink: 36 bytes leftover after parsing attributes in process `syz.0.397'.
[  105.703023][ T7456] netlink: 40 bytes leftover after parsing attributes in process `syz.0.397'.
[  105.707684][ T7456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.397'.
[  105.756520][ T7464] netlink: 'syz.1.400': attribute type 10 has an invalid length.
[  105.760780][ T7464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.400'.
[  105.913260][ T7472] wlan1 speed is unknown, defaulting to 1000
[  105.917098][ T7472] lo speed is unknown, defaulting to 1000
[  106.061214][ T7487] netlink: zone id is out of range
[  106.063214][ T7487] netlink: zone id is out of range
[  106.064881][ T7487] netlink: zone id is out of range
[  106.066550][ T7487] netlink: zone id is out of range
[  106.068224][ T7487] netlink: zone id is out of range
[  106.071368][ T7487] netlink: zone id is out of range
[  106.073088][ T7487] netlink: zone id is out of range
[  106.075021][ T7487] netlink: zone id is out of range
[  106.078993][ T7488] netlink: 60 bytes leftover after parsing attributes in process `syz.1.403'.
[  106.165371][ T7491] wlan1 speed is unknown, defaulting to 1000
[  106.170857][ T7491] lo speed is unknown, defaulting to 1000
[  107.030612][ T7510] netlink: 64 bytes leftover after parsing attributes in process `syz.0.409'.
[  107.034279][ T7510] block nbd0: not configured, cannot reconfigure
[  107.165073][ T7518] wlan1 speed is unknown, defaulting to 1000
[  107.171314][ T7518] lo speed is unknown, defaulting to 1000
[  107.245376][ T7524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  107.287714][ T7533] netlink: 'syz.0.415': attribute type 10 has an invalid length.
[  107.291262][ T7533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.415'.
[  107.303369][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.415'.
[  107.807071][ T7575] netlink: 'syz.0.425': attribute type 16 has an invalid length.
[  107.818216][ T7575] netlink: 'syz.0.425': attribute type 17 has an invalid length.
[  107.901721][ T7583] netlink: 'syz.1.428': attribute type 10 has an invalid length.
[  108.295290][  T794] lo speed is unknown, defaulting to 1000
[  108.299102][  T794] syz0: Port: 1 Link DOWN
[  108.305161][ T7585] netem: invalid attributes len -16
[  108.307008][ T7585] netem: change failed
[  108.316551][ T5674] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.320563][ T5674] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.323663][ T5674] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.336880][ T5674] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.589192][ T7613] syzkaller0: entered promiscuous mode
[  108.591069][ T7613] syzkaller0: entered allmulticast mode
[  109.683358][ T7632] syzkaller0: entered promiscuous mode
[  109.685445][ T7632] syzkaller0: entered allmulticast mode
[  110.798477][ T7651] wlan1 speed is unknown, defaulting to 1000
[  110.801720][ T7651] lo speed is unknown, defaulting to 1000
[  110.927817][ T7657] wlan1 speed is unknown, defaulting to 1000
[  110.953054][ T7657] lo speed is unknown, defaulting to 1000
[  111.035654][ T7669] __nla_validate_parse: 7 callbacks suppressed
[  111.035669][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.447'.
[  111.268784][ T7675] syzkaller1: entered allmulticast mode
[  111.824349][ T7690] syzkaller0: entered promiscuous mode
[  111.826760][ T7690] syzkaller0: entered allmulticast mode
[  112.337652][ T7700] IPVS: set_ctl: invalid protocol: 47 172.20.20.187:20004
[  113.052303][ T7708] tap0: tun_chr_ioctl cmd 1074025677
[  113.054696][ T7708] tap0: linktype set to 270
[  113.473659][ T7735] wlan1 speed is unknown, defaulting to 1000
[  113.479908][ T7735] lo speed is unknown, defaulting to 1000
[  114.177228][ T7756] tipc: MTU too low for tipc bearer
[  114.248439][ T7761] syzkaller0: entered promiscuous mode
[  114.250910][ T7761] syzkaller0: entered allmulticast mode
[  114.296080][ T7758] netlink: 36 bytes leftover after parsing attributes in process `syz.2.468'.
[  114.302112][ T7758] netlink: 40 bytes leftover after parsing attributes in process `syz.2.468'.
[  114.305228][ T7758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.468'.
[  115.510885][ T7779] tipc: Started in network mode
[  115.512956][ T7779] tipc: Node identity 66deef8b34e3, cluster identity 4711
[  115.515846][ T7779] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  115.524600][ T7779] syzkaller0: entered promiscuous mode
[  115.526694][ T7779] syzkaller0: entered allmulticast mode
[  115.567237][ T7779] tipc: Resetting bearer <eth:syzkaller0>
[  115.572760][ T7778] tipc: Resetting bearer <eth:syzkaller0>
[  115.586476][ T7778] tipc: Disabling bearer <eth:syzkaller0>
[  115.829408][ T7784] netlink: 'syz.0.475': attribute type 1 has an invalid length.
[  115.833648][ T7784] nbd: error processing sock list
[  115.837771][ T7784] block nbd0: shutting down sockets
[  116.535896][ T7803] syzkaller1: entered promiscuous mode
[  116.538001][ T7803] syzkaller1: entered allmulticast mode
[  116.591808][ T7811] dvmrp1: entered allmulticast mode
[  116.592220][ T7813] netlink: 36 bytes leftover after parsing attributes in process `syz.1.483'.
[  116.595386][ T7811] dvmrp1: left allmulticast mode
[  116.628677][ T7818] IPVS: set_ctl: invalid protocol: 115 172.20.20.16:20001
[  116.711032][ T7811] netlink: 'syz.0.482': attribute type 16 has an invalid length.
[  116.714990][ T7811] netlink: 'syz.0.482': attribute type 17 has an invalid length.
[  116.720294][ T7827] syzkaller0: entered promiscuous mode
[  116.722736][ T7827] syzkaller0: entered allmulticast mode
[  116.725639][ T7811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.482'.
[  116.731604][ T7811] IPv6: NLM_F_REPLACE set, but no existing node found!
[  116.791982][ T7834] wlan1 speed is unknown, defaulting to 1000
[  116.795338][ T7834] lo speed is unknown, defaulting to 1000
[  116.831366][ T7835] netlink: 'syz.1.487': attribute type 30 has an invalid length.
[  117.235323][ T7844] netlink: 36 bytes leftover after parsing attributes in process `syz.1.489'.
[  117.239550][ T7844] netlink: 40 bytes leftover after parsing attributes in process `syz.1.489'.
[  117.243103][ T7844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.489'.
[  117.435972][ T7857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.492'.
[  117.486889][ T7852] netlink: 20 bytes leftover after parsing attributes in process `syz.1.492'.
[  117.696567][ T7883] wlan1 speed is unknown, defaulting to 1000
[  117.702373][ T7886] netlink: 36 bytes leftover after parsing attributes in process `syz.0.499'.
[  117.703074][ T7883] lo speed is unknown, defaulting to 1000
[  117.706059][ T7886] netlink: 16 bytes leftover after parsing attributes in process `syz.0.499'.
[  117.711121][ T7886] netlink: 36 bytes leftover after parsing attributes in process `syz.0.499'.
[  118.666201][ T7909] veth1_to_bond: left allmulticast mode
[  118.709888][ T7911] syzkaller1: entered promiscuous mode
[  118.739272][ T7911] syzkaller1: entered allmulticast mode
[  118.986608][ T7919] wlan1 speed is unknown, defaulting to 1000
[  118.991939][ T7919] lo speed is unknown, defaulting to 1000
[  119.032151][ T7932] netlink: 'syz.2.514': attribute type 10 has an invalid length.
[  119.798278][ T7941] wlan1 speed is unknown, defaulting to 1000
[  119.805121][ T7941] lo speed is unknown, defaulting to 1000
[  119.974912][ T7951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  120.058757][ T7951] syzkaller0: left promiscuous mode
[  120.062819][ T7951] syzkaller0: left allmulticast mode
[  120.196370][ T7967] net_ratelimit: 9 callbacks suppressed
[  120.196399][ T7967] openvswitch: netlink: Duplicate key (type 32).
[  120.742758][ T7995] netlink: 'syz.2.533': attribute type 10 has an invalid length.
[  120.910311][ T8000] netlink: 'syz.0.534': attribute type 1 has an invalid length.
[  121.023526][ T8008] sctp: [Deprecated]: syz.0.536 (pid 8008) Use of struct sctp_assoc_value in delayed_ack socket option.
[  121.023526][ T8008] Use struct sctp_sack_info instead
[  121.758122][ T8026] wlan1 speed is unknown, defaulting to 1000
[  121.762932][ T8026] lo speed is unknown, defaulting to 1000
[  121.791133][ T8030] wlan1 speed is unknown, defaulting to 1000
[  121.797529][   T54] Bluetooth: hci2: link tx timeout
[  121.802033][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  121.806681][   T54] Bluetooth: hci2: link tx timeout
[  121.808414][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  121.812671][   T54] Bluetooth: hci2: link tx timeout
[  121.814711][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  121.817832][   T54] Bluetooth: hci2: link tx timeout
[  121.820050][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  121.823563][   T54] Bluetooth: hci2: link tx timeout
[  121.825608][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  121.828691][   T54] Bluetooth: hci2: link tx timeout
[  121.830737][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  121.833963][   T54] Bluetooth: hci2: link tx timeout
[  121.835978][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  121.838819][   T54] Bluetooth: hci2: link tx timeout
[  121.840956][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  121.843649][   T54] Bluetooth: hci2: link tx timeout
[  121.846056][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  121.963209][ T8030] lo speed is unknown, defaulting to 1000
[  122.134570][ T8040] __nla_validate_parse: 8 callbacks suppressed
[  122.134587][ T8040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.543'.
[  122.502939][ T8042] wlan1 speed is unknown, defaulting to 1000
[  122.506799][ T8042] lo speed is unknown, defaulting to 1000
[  123.050039][ T8055] netlink: 'syz.2.547': attribute type 10 has an invalid length.
[  123.053843][ T8055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.547'.
[  123.855106][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.553'.
[  123.858108][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.553'.
[  123.860764][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  125.321676][ T8136] wlan1 speed is unknown, defaulting to 1000
[  125.327914][ T8136] lo speed is unknown, defaulting to 1000
[  125.826290][ T8149] can: request_module (can-proto-5) failed.
[  125.851903][ T8151] wlan1 speed is unknown, defaulting to 1000
[  125.855031][ T8151] lo speed is unknown, defaulting to 1000
[  125.873136][ T8155] netlink: 48 bytes leftover after parsing attributes in process `syz.0.569'.
[  126.102796][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.573'.
[  126.165818][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.574'.
[  126.346686][ T8183] netlink: 'syz.0.577': attribute type 10 has an invalid length.
[  126.522781][ T8189] netlink: 36 bytes leftover after parsing attributes in process `syz.0.579'.
[  126.526151][ T8189] netlink: 40 bytes leftover after parsing attributes in process `syz.0.579'.
[  126.530635][ T8189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.579'.
[  126.677151][ T8208] netlink: 'syz.1.584': attribute type 10 has an invalid length.
[  126.941988][ T8218] wlan1 speed is unknown, defaulting to 1000
[  126.945844][ T8218] lo speed is unknown, defaulting to 1000
[  127.768421][ T8227] netlink: 'syz.1.589': attribute type 10 has an invalid length.
[  127.795373][ T8227] __nla_validate_parse: 3 callbacks suppressed
[  127.795390][ T8227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.589'.
[  127.859443][ T8234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.589'.
[  127.935482][ T8238] netlink: 27 bytes leftover after parsing attributes in process `syz.0.592'.
[  127.940743][ T8238] netlink: 'syz.0.592': attribute type 1 has an invalid length.
[  128.005719][ T8238] bond1 (unregistering): Released all slaves
[  128.330756][ T8257] netlink: 17 bytes leftover after parsing attributes in process `syz.0.596'.
[  128.551911][ T8278] wlan1 speed is unknown, defaulting to 1000
[  128.554850][ T8278] lo speed is unknown, defaulting to 1000
[  128.835804][ T8293] syzkaller1: entered promiscuous mode
[  128.838180][ T8293] syzkaller1: entered allmulticast mode
[  128.953965][ T8301] netlink: set zone limit has 8 unknown bytes
[  129.702036][ T8325] netlink: 20 bytes leftover after parsing attributes in process `syz.1.612'.
[  129.903097][ T8331] netlink: set zone limit has 8 unknown bytes
[  130.364344][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.618'.
[  130.369339][ T8340] netlink: 'syz.0.618': attribute type 5 has an invalid length.
[  130.372454][ T8340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.618'.
[  130.424620][ T8340] netlink: 32 bytes leftover after parsing attributes in process `syz.0.618'.
[  130.616283][ T8359] netlink: 16 bytes leftover after parsing attributes in process `syz.0.623'.
[  130.670929][ T8366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.622'.
[  130.751543][ T8359] bond0 (unregistering): Released all slaves
[  130.780338][ T8370] wlan1 speed is unknown, defaulting to 1000
[  130.783990][ T8370] lo speed is unknown, defaulting to 1000
[  131.053068][ T8385] syzkaller0: entered promiscuous mode
[  131.055631][ T8385] syzkaller0: entered allmulticast mode
[  132.314068][ T8407] sctp: [Deprecated]: syz.2.635 (pid 8407) Use of struct sctp_assoc_value in delayed_ack socket option.
[  132.314068][ T8407] Use struct sctp_sack_info instead
[  132.436723][ T8417] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  132.581773][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.584315][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.770294][ T8417] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  133.108762][ T8417] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  133.214780][ T8417] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  133.392213][ T8434] syzkaller0: entered promiscuous mode
[  133.394167][ T8434] syzkaller0: entered allmulticast mode
[  133.537648][ T8445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.644'.
[  134.419906][ T8482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.652'.
[  134.423047][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.652'.
[  134.500902][ T8490] netlink: 256 bytes leftover after parsing attributes in process `syz.1.653'.
[  134.550776][ T8496] netlink: 20 bytes leftover after parsing attributes in process `syz.2.656'.
[  134.647071][ T8509] netlink: 'syz.2.658': attribute type 16 has an invalid length.
[  134.650743][ T8509] netlink: 'syz.2.658': attribute type 17 has an invalid length.
[  134.666397][ T8509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.658'.
[  134.679993][ T8509] IPv6: NLM_F_REPLACE set, but no existing node found!
[  134.710424][ T8516] netlink: 28 bytes leftover after parsing attributes in process `syz.1.660'.
[  134.714076][ T8516] netlink: 28 bytes leftover after parsing attributes in process `syz.1.660'.
[  135.509731][ T8545] netlink: 201916 bytes leftover after parsing attributes in process `syz.0.668'.
[  135.589183][ T8556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.670'.
[  137.409166][ T8583] wlan1 speed is unknown, defaulting to 1000
[  137.412185][ T8583] lo speed is unknown, defaulting to 1000
[  137.484151][ T8591] veth0_to_bridge: entered promiscuous mode
[  137.544266][ T8590] veth0_to_bridge: left promiscuous mode
[  137.574486][ T8601] netlink: 'syz.0.679': attribute type 10 has an invalid length.
[  137.587445][ T8600] syzkaller0: left promiscuous mode
[  137.589699][ T8600] syzkaller0: left allmulticast mode
[  137.704250][ T8611] batadv_slave_0: entered promiscuous mode
[  138.182710][ T8626] syz.2.685: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  138.200305][ T8626] CPU: 1 UID: 0 PID: 8626 Comm: syz.2.685 Not tainted syzkaller #0 PREEMPT(full) 
[  138.200321][ T8626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  138.200328][ T8626] Call Trace:
[  138.200343][ T8626]  <TASK>
[  138.200348][ T8626]  dump_stack_lvl+0x189/0x250
[  138.200367][ T8626]  ? __pfx_dump_stack_lvl+0x10/0x10
[  138.200378][ T8626]  ? __pfx__printk+0x10/0x10
[  138.200390][ T8626]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  138.200400][ T8626]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  138.200409][ T8626]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  138.200422][ T8626]  warn_alloc+0x214/0x310
[  138.200437][ T8626]  ? stack_depot_save_flags+0x40/0x860
[  138.200451][ T8626]  ? __pfx_warn_alloc+0x10/0x10
[  138.200465][ T8626]  ? kasan_save_track+0x4f/0x80
[  138.200475][ T8626]  ? xskq_create+0x56/0x170
[  138.200489][ T8626]  ? xsk_init_queue+0xb0/0x110
[  138.200499][ T8626]  ? xsk_setsockopt+0x4dc/0x8d0
[  138.200510][ T8626]  ? do_sock_setsockopt+0x17c/0x1b0
[  138.200521][ T8626]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  138.200529][ T8626]  ? do_syscall_64+0xfa/0x3b0
[  138.200538][ T8626]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.200549][ T8626]  __vmalloc_node_range_noprof+0x125/0x12f0
[  138.200575][ T8626]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  138.200589][ T8626]  ? __kasan_kmalloc+0x93/0xb0
[  138.200600][ T8626]  vmalloc_user_noprof+0xad/0xf0
[  138.200611][ T8626]  ? xskq_create+0xbf/0x170
[  138.200622][ T8626]  xskq_create+0xbf/0x170
[  138.200635][ T8626]  xsk_init_queue+0xb0/0x110
[  138.200647][ T8626]  xsk_setsockopt+0x4dc/0x8d0
[  138.200659][ T8626]  ? __pfx_xsk_setsockopt+0x10/0x10
[  138.200676][ T8626]  ? __pfx_aa_sk_perm+0x10/0x10
[  138.200692][ T8626]  ? aa_sock_opt_perm+0xff/0x1b0
[  138.200701][ T8626]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  138.200711][ T8626]  ? __pfx_xsk_setsockopt+0x10/0x10
[  138.200722][ T8626]  do_sock_setsockopt+0x17c/0x1b0
[  138.200736][ T8626]  __x64_sys_setsockopt+0x13f/0x1b0
[  138.200747][ T8626]  do_syscall_64+0xfa/0x3b0
[  138.200754][ T8626]  ? lockdep_hardirqs_on+0x9c/0x150
[  138.200765][ T8626]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.200773][ T8626]  ? exc_page_fault+0x9f/0xf0
[  138.200785][ T8626]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  138.200793][ T8626] RIP: 0033:0x7f0e8938ec29
[  138.200802][ T8626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  138.200809][ T8626] RSP: 002b:00007f0e8a159038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  138.200819][ T8626] RAX: ffffffffffffffda RBX: 00007f0e895d6090 RCX: 00007f0e8938ec29
[  138.200825][ T8626] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c
[  138.200830][ T8626] RBP: 00007f0e89411e41 R08: 0000000000000004 R09: 0000000000000000
[  138.200835][ T8626] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  138.200841][ T8626] R13: 00007f0e895d6128 R14: 00007f0e895d6090 R15: 00007ffcf0f7f7a8
[  138.200855][ T8626]  </TASK>
[  138.200886][ T8626] Mem-Info:
[  138.317908][ T8626] active_anon:8492 inactive_anon:0 isolated_anon:0
[  138.317908][ T8626]  active_file:1303 inactive_file:38269 isolated_file:0
[  138.317908][ T8626]  unevictable:1768 dirty:78 writeback:0
[  138.317908][ T8626]  slab_reclaimable:10080 slab_unreclaimable:54717
[  138.317908][ T8626]  mapped:23096 shmem:5298 pagetables:975
[  138.317908][ T8626]  sec_pagetables:0 bounce:0
[  138.317908][ T8626]  kernel_misc_reclaimable:0
[  138.317908][ T8626]  free:295195 free_pcp:20097 free_cma:0
[  138.333911][ T8626] Node 0 active_anon:12564kB inactive_anon:0kB active_file:3744kB inactive_file:83612kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29972kB dirty:152kB writeback:0kB shmem:5164kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8308kB pagetables:1824kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  138.344905][ T8626] Node 1 active_anon:21404kB inactive_anon:0kB active_file:1468kB inactive_file:69464kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:62412kB dirty:160kB writeback:0kB shmem:16028kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3428kB pagetables:2076kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  138.356408][ T8626] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  138.366119][ T8626] lowmem_reserve[]: 0 814 814 814 814
[  138.368070][ T8626] Node 0 DMA32 free:341028kB boost:0kB min:33720kB low:42148kB high:50576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12564kB inactive_anon:0kB active_file:3744kB inactive_file:83612kB unevictable:3536kB writepending:152kB present:1556484kB managed:833644kB mlocked:0kB bounce:0kB free_pcp:34000kB local_pcp:15200kB free_cma:0kB
[  138.379297][ T8626] lowmem_reserve[]: 0 0 0 0 0
[  138.381297][ T8626] Node 1 DMA32 free:458616kB boost:0kB min:19172kB low:23964kB high:28756kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  138.394108][ T8626] lowmem_reserve[]: 0 0 854 854 854
[  138.396202][ T8626] Node 1 Normal free:365776kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21268kB inactive_anon:0kB active_file:1468kB inactive_file:69464kB unevictable:3536kB writepending:160kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:46516kB local_pcp:26084kB free_cma:0kB
[  138.408825][ T8626] lowmem_reserve[]: 0 0 0 0 0
[  138.415459][ T8626] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  138.423735][ T8626] Node 0 DMA32: 1527*4kB (UME) 391*8kB (UME) 185*16kB (UME) 380*32kB (UME) 126*64kB (UM) 61*128kB (UM) 27*256kB (UM) 16*512kB (U) 11*1024kB (U) 14*2048kB (UM) 60*4096kB (UME) = 341028kB
[  138.431833][ T8626] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  138.438476][ T8626] Node 1 Normal: 188*4kB (UE) 316*8kB (UE) 279*16kB (UME) 407*32kB (UE) 186*64kB (UE) 36*128kB (UME) 3*256kB (U) 10*512kB (UM) 5*1024kB (UME) 9*2048kB (UME) 73*4096kB (UM) = 365728kB
[  138.449594][ T8626] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  138.453475][ T8626] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  138.457466][ T8626] 44870 total pagecache pages
[  138.459681][ T8626] 0 pages in swap cache
[  138.461726][ T8626] Free swap  = 124996kB
[  138.463649][ T8626] Total swap = 124996kB
[  138.465347][ T8626] 786301 pages RAM
[  138.466855][ T8626] 0 pages HighMem/MovableOnly
[  138.468874][ T8626] 240658 pages reserved
[  138.473455][ T8626] 0 pages cma reserved
[  138.530154][ T8610] batadv_slave_0: left promiscuous mode
[  138.570775][ T8636] __nla_validate_parse: 4 callbacks suppressed
[  138.570788][ T8636] netlink: 36 bytes leftover after parsing attributes in process `syz.2.688'.
[  138.576374][ T8636] netlink: 16 bytes leftover after parsing attributes in process `syz.2.688'.
[  138.579895][ T8636] netlink: 36 bytes leftover after parsing attributes in process `syz.2.688'.
[  138.582700][ T8636] netlink: 36 bytes leftover after parsing attributes in process `syz.2.688'.
[  138.624500][ T8642] netlink: set zone limit has 8 unknown bytes
[  138.649703][ T8637] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.688'.
[  138.768512][ T8654] netlink: 'syz.1.696': attribute type 10 has an invalid length.
[  138.771355][ T8654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.696'.
[  170.831538][ T8706] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  170.845959][ T8706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.710'.
[  170.895349][ T8709] netlink: set zone limit has 8 unknown bytes
[  170.938520][ T8711] nbd: must specify a device to reconfigure
[  170.997507][ T8713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.713'.
[  171.154907][ T8720] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  171.161790][ T8720] netlink: 64 bytes leftover after parsing attributes in process `syz.2.714'.
[  171.316970][ T8722] netlink: 36 bytes leftover after parsing attributes in process `syz.2.715'.
[  171.321349][ T8722] netlink: 40 bytes leftover after parsing attributes in process `syz.2.715'.
[  171.324885][ T8722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.715'.
[  171.348487][ T8726] netlink: 48 bytes leftover after parsing attributes in process `syz.1.716'.
[  171.503964][ T8736] netlink: 36 bytes leftover after parsing attributes in process `syz.2.718'.
[  171.507527][ T8736] netlink: 16 bytes leftover after parsing attributes in process `syz.2.718'.
[  171.511769][ T8736] netlink: 36 bytes leftover after parsing attributes in process `syz.2.718'.
[  171.596282][ T8738] delete_channel: no stack
[  171.747435][ T8760] netlink: 'syz.1.723': attribute type 10 has an invalid length.
[  171.938930][ T8758] netlink: 'syz.0.725': attribute type 1 has an invalid length.
[  171.942042][ T8758] nbd: error processing sock list
[  171.944218][ T8758] block nbd0: shutting down sockets
[  172.023965][ T8767] tipc: Enabling of bearer <et:g> rejected, media not registered
[  172.377390][ T8776] wlan1 speed is unknown, defaulting to 1000
[  172.381967][ T8776] lo speed is unknown, defaulting to 1000
[  172.560258][ T8780] netlink: 'syz.1.730': attribute type 1 has an invalid length.
[  172.623925][ T8785] netlink: set zone limit has 8 unknown bytes
[  172.670791][ T8788] syzkaller0: entered promiscuous mode
[  172.673027][ T8788] syzkaller0: entered allmulticast mode
[  172.717030][ T8784] wlan1 speed is unknown, defaulting to 1000
[  172.731411][ T8784] lo speed is unknown, defaulting to 1000
[  173.965162][ T8836] wlan1 speed is unknown, defaulting to 1000
[  173.969618][ T8836] lo speed is unknown, defaulting to 1000
[  174.984563][ T8845] wlan1 speed is unknown, defaulting to 1000
[  174.987413][ T8845] lo speed is unknown, defaulting to 1000
[  175.148195][ T8853] netlink: 'syz.0.750': attribute type 10 has an invalid length.
[  175.754257][ T8886] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  175.948205][ T8893] wlan1 speed is unknown, defaulting to 1000
[  175.952580][ T8893] lo speed is unknown, defaulting to 1000
[  176.050914][ T8909] netlink: 'syz.0.759': attribute type 1 has an invalid length.
[  176.053938][ T8909] __nla_validate_parse: 14 callbacks suppressed
[  176.053947][ T8909] netlink: 220 bytes leftover after parsing attributes in process `syz.0.759'.
[  176.064478][ T8910] sctp: [Deprecated]: syz.1.762 (pid 8910) Use of int in max_burst socket option.
[  176.064478][ T8910] Use struct sctp_assoc_value instead
[  176.783814][ T8913] wlan1 speed is unknown, defaulting to 1000
[  176.788355][ T8913] lo speed is unknown, defaulting to 1000
[  176.789756][ T8914] wlan1 speed is unknown, defaulting to 1000
[  176.876136][ T8917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.764'.
[  176.879792][ T8917] netlink: 'syz.1.764': attribute type 1 has an invalid length.
[  176.882581][ T8917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.764'.
[  176.886897][ T8917] netlink: 4 bytes leftover after parsing attributes in process `syz.1.764'.
[  176.997608][ T8914] lo speed is unknown, defaulting to 1000
[  178.388123][ T8958] netlink: 'syz.0.774': attribute type 10 has an invalid length.
[  178.392199][ T8958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.774'.
[  179.716118][ T8977] netlink: 36 bytes leftover after parsing attributes in process `syz.1.779'.
[  179.719871][ T8977] netlink: 40 bytes leftover after parsing attributes in process `syz.1.779'.
[  179.723542][ T8977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.779'.
[  179.782636][ T8981] wlan1 speed is unknown, defaulting to 1000
[  179.785709][ T8981] lo speed is unknown, defaulting to 1000
[  180.701390][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.783'.
[  180.784969][ T9000] wlan1 speed is unknown, defaulting to 1000
[  180.801786][ T9000] lo speed is unknown, defaulting to 1000
[  180.879264][ T9001] netlink: 'syz.0.783': attribute type 1 has an invalid length.
[  180.881918][ T9001] netlink: 220 bytes leftover after parsing attributes in process `syz.0.783'.
[  181.232709][ T9006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.785'.
[  181.236204][ T9006] netlink: 20 bytes leftover after parsing attributes in process `syz.1.785'.
[  181.247210][ T9006] geneve2: entered promiscuous mode
[  181.249675][ T9006] geneve2: entered allmulticast mode
[  181.254970][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  181.258321][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  181.261703][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  181.267640][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  181.273713][ T9006] netlink: 'syz.1.785': attribute type 1 has an invalid length.
[  181.276708][ T9006] netlink: 132 bytes leftover after parsing attributes in process `syz.1.785'.
[  181.280428][ T9006] netlink: 'syz.1.785': attribute type 2 has an invalid length.
[  181.283555][ T9006] netlink: 'syz.1.785': attribute type 1 has an invalid length.
[  181.286506][ T9006] netlink: 2 bytes leftover after parsing attributes in process `syz.1.785'.
[  181.551940][ T9022] netlink: 'syz.0.787': attribute type 1 has an invalid length.
[  181.597023][ T9022] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  181.715282][ T9032] netlink: set zone limit has 8 unknown bytes
[  182.797600][ T9045] netlink: 36 bytes leftover after parsing attributes in process `syz.0.792'.
[  182.801603][ T9045] netlink: 40 bytes leftover after parsing attributes in process `syz.0.792'.
[  182.805202][ T9045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.792'.
[  183.214571][ T9060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.797'.
[  183.217676][ T9060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.797'.
[  183.268524][ T9065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  183.279923][ T9068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.800'.
[  183.287190][ T9068] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  183.885642][ T9077] team0: Device ipip2 is of different type
[  183.934509][ T9079] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  183.937660][ T9079] syzkaller0: entered promiscuous mode
[  183.940357][ T9079] syzkaller0: entered allmulticast mode
[  183.954334][ T9077] tipc: Resetting bearer <eth:syzkaller0>
[  183.959320][ T9077] tipc: Resetting bearer <eth:syzkaller0>
[  183.968087][ T9077] tipc: Disabling bearer <eth:syzkaller0>
[  184.236774][ T9095] syzkaller0: entered promiscuous mode
[  184.239450][ T9095] syzkaller0: entered allmulticast mode
[  185.251334][ T9098] netlink: 'syz.1.808': attribute type 1 has an invalid length.
[  185.382884][ T9106] wlan1 speed is unknown, defaulting to 1000
[  185.386683][ T9106] lo speed is unknown, defaulting to 1000
[  185.477495][ T9117] netlink: set zone limit has 8 unknown bytes
[  185.794472][ T9144] netlink: set zone limit has 8 unknown bytes
[  185.858776][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  185.950150][ T9153] netlink: 'syz.1.823': attribute type 10 has an invalid length.
[  186.006006][ T9156] netlink: 'syz.2.824': attribute type 10 has an invalid length.
[  186.030729][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  186.033611][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  186.036517][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  186.040071][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  186.805513][ T9172] __nla_validate_parse: 9 callbacks suppressed
[  186.805527][ T9172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.827'.
[  186.815167][ T9172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.827'.
[  186.830783][ T9171] wlan1 speed is unknown, defaulting to 1000
[  186.835703][ T9171] lo speed is unknown, defaulting to 1000
[  187.304003][ T9199] netlink: del zone limit has 8 unknown bytes
[  187.517626][ T9210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.838'.
[  187.614705][ T9212] wlan1 speed is unknown, defaulting to 1000
[  187.619323][ T9212] lo speed is unknown, defaulting to 1000
[  187.787451][ T9218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.840'.
[  188.257659][ T9225] wlan1 speed is unknown, defaulting to 1000
[  188.262261][ T9225] lo speed is unknown, defaulting to 1000
[  188.428787][ T9233] netlink: del zone limit has 8 unknown bytes
[  188.466672][ T9235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.844'.
[  188.664428][ T9246] netlink: 'syz.0.847': attribute type 10 has an invalid length.
[  188.664430][ T9245] netlink: 'syz.0.847': attribute type 10 has an invalid length.
[  188.670219][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.847'.
[  188.811203][ T9256] netlink: 224 bytes leftover after parsing attributes in process `syz.2.849'.
[  188.826522][ T9258] netlink: del zone limit has 8 unknown bytes
[  188.854841][ T9261] netlink: 'syz.0.852': attribute type 10 has an invalid length.
[  188.857987][ T9261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.852'.
[  188.863350][ T9265] netlink: 15 bytes leftover after parsing attributes in process `syz.2.851'.
[  188.927623][ T9272] netlink: 52 bytes leftover after parsing attributes in process `syz.2.853'.
[  189.061223][ T9287] netlink: del zone limit has 8 unknown bytes
[  189.146419][ T9294] wlan1 speed is unknown, defaulting to 1000
[  189.152169][ T9294] lo speed is unknown, defaulting to 1000
[  189.901946][ T9326] wlan1 speed is unknown, defaulting to 1000
[  189.905052][ T9326] lo speed is unknown, defaulting to 1000
[  190.383651][ T9346] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  190.758013][ T9359] netlink: 'syz.0.876': attribute type 10 has an invalid length.
[  190.976748][ T9371] tipc: Can't bind to reserved service type 3
[  190.994524][ T9369] wlan1 speed is unknown, defaulting to 1000
[  190.997781][ T9369] lo speed is unknown, defaulting to 1000
[  192.012304][ T9414] syz.2.889: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  192.017810][ T9414] CPU: 1 UID: 0 PID: 9414 Comm: syz.2.889 Not tainted syzkaller #0 PREEMPT(full) 
[  192.017828][ T9414] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  192.017834][ T9414] Call Trace:
[  192.017839][ T9414]  <TASK>
[  192.017845][ T9414]  dump_stack_lvl+0x189/0x250
[  192.017863][ T9414]  ? __pfx_dump_stack_lvl+0x10/0x10
[  192.017873][ T9414]  ? __pfx__printk+0x10/0x10
[  192.017885][ T9414]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  192.017895][ T9414]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  192.017904][ T9414]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  192.017913][ T9414]  warn_alloc+0x214/0x310
[  192.017926][ T9414]  ? stack_depot_save_flags+0x40/0x860
[  192.017940][ T9414]  ? __pfx_warn_alloc+0x10/0x10
[  192.017951][ T9414]  ? kasan_save_track+0x4f/0x80
[  192.017962][ T9414]  ? xskq_create+0x56/0x170
[  192.017974][ T9414]  ? xsk_init_queue+0xb0/0x110
[  192.017983][ T9414]  ? xsk_setsockopt+0x4dc/0x8d0
[  192.017993][ T9414]  ? do_sock_setsockopt+0x17c/0x1b0
[  192.018002][ T9414]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  192.018010][ T9414]  ? do_syscall_64+0xfa/0x3b0
[  192.018017][ T9414]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.018029][ T9414]  __vmalloc_node_range_noprof+0x125/0x12f0
[  192.018057][ T9414]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  192.018071][ T9414]  ? __kasan_kmalloc+0x93/0xb0
[  192.018082][ T9414]  vmalloc_user_noprof+0xad/0xf0
[  192.018094][ T9414]  ? xskq_create+0xbf/0x170
[  192.018105][ T9414]  xskq_create+0xbf/0x170
[  192.018118][ T9414]  xsk_init_queue+0xb0/0x110
[  192.018130][ T9414]  xsk_setsockopt+0x4dc/0x8d0
[  192.018141][ T9414]  ? __pfx_xsk_setsockopt+0x10/0x10
[  192.018152][ T9414]  ? __pfx_aa_sk_perm+0x10/0x10
[  192.018165][ T9414]  ? aa_sock_opt_perm+0xff/0x1b0
[  192.018174][ T9414]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  192.018182][ T9414]  ? __pfx_xsk_setsockopt+0x10/0x10
[  192.018193][ T9414]  do_sock_setsockopt+0x17c/0x1b0
[  192.018204][ T9414]  __x64_sys_setsockopt+0x13f/0x1b0
[  192.018216][ T9414]  do_syscall_64+0xfa/0x3b0
[  192.018223][ T9414]  ? lockdep_hardirqs_on+0x9c/0x150
[  192.018234][ T9414]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.018241][ T9414]  ? exc_page_fault+0x9f/0xf0
[  192.018254][ T9414]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.018261][ T9414] RIP: 0033:0x7f0e8938ec29
[  192.018269][ T9414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  192.018276][ T9414] RSP: 002b:00007f0e8a159038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  192.018285][ T9414] RAX: ffffffffffffffda RBX: 00007f0e895d6090 RCX: 00007f0e8938ec29
[  192.018291][ T9414] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000011
[  192.018295][ T9414] RBP: 00007f0e89411e41 R08: 0000000000000004 R09: 0000000000000000
[  192.018300][ T9414] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  192.018304][ T9414] R13: 00007f0e895d6128 R14: 00007f0e895d6090 R15: 00007ffcf0f7f7a8
[  192.018317][ T9414]  </TASK>
[  192.018321][ T9414] Mem-Info:
[  192.119709][ T9419] delete_channel: no stack
[  192.122367][ T9414] active_anon:5477 inactive_anon:0 isolated_anon:0
[  192.122367][ T9414]  active_file:1303 inactive_file:38287 isolated_file:0
[  192.122367][ T9414]  unevictable:1768 dirty:49 writeback:0
[  192.122367][ T9414]  slab_reclaimable:10182 slab_unreclaimable:55478
[  192.122367][ T9414]  mapped:18106 shmem:2401 pagetables:956
[  192.122367][ T9414]  sec_pagetables:0 bounce:0
[  192.122367][ T9414]  kernel_misc_reclaimable:0
[  192.122367][ T9414]  free:292168 free_pcp:24864 free_cma:0
[  192.122416][ T9414] Node 0 active_anon:12132kB inactive_anon:0kB active_file:3744kB inactive_file:83620kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:25308kB dirty:172kB writeback:0kB shmem:4784kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8424kB pagetables:1772kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  192.122441][ T9414] Node 1 active_anon:9776kB inactive_anon:0kB active_file:1468kB inactive_file:69528kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:47116kB dirty:24kB writeback:0kB shmem:4820kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:3196kB pagetables:2052kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  192.159561][ T9414] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  192.168738][ T9414] lowmem_reserve[]: 0 814 814 814 814
[  192.170444][ T9414] Node 0 DMA32 free:303236kB boost:0kB min:33720kB low:42148kB high:50576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12132kB inactive_anon:0kB active_file:3744kB inactive_file:83620kB unevictable:3536kB writepending:172kB present:1556484kB managed:833644kB mlocked:0kB bounce:0kB free_pcp:63432kB local_pcp:19880kB free_cma:0kB
[  192.181426][ T9414] lowmem_reserve[]: 0 0 0 0 0
[  192.183233][ T9414] Node 1 DMA32 free:458616kB boost:0kB min:19172kB low:23964kB high:28756kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  192.193046][ T9414] lowmem_reserve[]: 0 0 854 854 854
[  192.194815][ T9414] Node 1 Normal free:391460kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9776kB inactive_anon:0kB active_file:1468kB inactive_file:69528kB unevictable:3536kB writepending:24kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:36088kB local_pcp:16252kB free_cma:0kB
[  192.205270][ T9414] lowmem_reserve[]: 0 0 0 0 0
[  192.209126][ T9414] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  192.213359][ T9414] Node 0 DMA32: 17*4kB (ME) 158*8kB (UME) 237*16kB (UME) 264*32kB (UME) 114*64kB (UM) 48*128kB (UE) 43*256kB (UME) 26*512kB (UM) 20*1024kB (UME) 15*2048kB (UME) 49*4096kB (UM) = 303236kB
[  192.219680][ T9414] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  192.225010][ T9414] Node 1 Normal: 141*4kB (ME) 38*8kB (UM) 22*16kB (UME) 650*32kB (UME) 288*64kB (UME) 100*128kB (UME) 21*256kB (UM) 8*512kB (UM) 5*1024kB (UME) 8*2048kB (UME) 75*4096kB (UM) = 391428kB
[  192.231844][ T9414] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  192.234912][ T9414] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  192.237918][ T9414] 41991 total pagecache pages
[  192.239716][ T9414] 0 pages in swap cache
[  192.241141][ T9414] Free swap  = 124996kB
[  192.242561][ T9414] Total swap = 124996kB
[  192.243968][ T9414] 786301 pages RAM
[  192.245231][ T9414] 0 pages HighMem/MovableOnly
[  192.246911][ T9414] 240658 pages reserved
[  192.248355][ T9414] 0 pages cma reserved
[  194.024087][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  194.026731][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  224.383463][ T9443] __nla_validate_parse: 9 callbacks suppressed
[  224.383484][ T9443] netlink: 16 bytes leftover after parsing attributes in process `syz.0.894'.
[  224.486234][ T9454] netlink: del zone limit has 8 unknown bytes
[  224.540524][ T9459] netlink: 'syz.0.898': attribute type 39 has an invalid length.
[  224.828809][ T9461] netlink: 'syz.1.903': attribute type 1 has an invalid length.
[  224.832094][ T9461] nbd: error processing sock list
[  224.834124][ T9461] block nbd0: shutting down sockets
[  225.317287][ T9478] netlink: 16 bytes leftover after parsing attributes in process `syz.0.906'.
[  225.437415][ T9483] netlink: 48 bytes leftover after parsing attributes in process `syz.0.907'.
[  225.442417][ T9483] netlink: 48 bytes leftover after parsing attributes in process `syz.0.907'.
[  225.446979][ T9483] netlink: 48 bytes leftover after parsing attributes in process `syz.0.907'.
[  225.457037][ T9483] netlink: 48 bytes leftover after parsing attributes in process `syz.0.907'.
[  225.461766][ T9483] netlink: 48 bytes leftover after parsing attributes in process `syz.0.907'.
[  225.465386][ T9483] netlink: 48 bytes leftover after parsing attributes in process `syz.0.907'.
[  225.468930][ T9483] netlink: 48 bytes leftover after parsing attributes in process `syz.0.907'.
[  225.473585][ T9483] netlink: 48 bytes leftover after parsing attributes in process `syz.0.907'.
[  225.577123][ T9490] netlink: 'syz.0.909': attribute type 11 has an invalid length.
[  225.747564][ T9493] netlink: 'syz.2.910': attribute type 6 has an invalid length.
[  225.757865][ T9493] netlink: 'syz.2.910': attribute type 12 has an invalid length.
[  227.152866][ T9532] wlan1 speed is unknown, defaulting to 1000
[  227.157029][ T9532] lo speed is unknown, defaulting to 1000
[  227.480434][ T9550] syzkaller1: entered promiscuous mode
[  227.482954][ T9550] syzkaller1: entered allmulticast mode
[  227.746365][ T9565] sit0: entered promiscuous mode
[  227.749679][ T9565] netlink: 'syz.0.928': attribute type 1 has an invalid length.
[  227.783257][ T9565] sit0: left promiscuous mode
[  227.800296][ T9565] 8021q: adding VLAN 0 to HW filter on device team0
[  227.807645][ T9565] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  227.816313][  T794] lo speed is unknown, defaulting to 1000
[  227.823122][  T794] syz0: Port: 1 Link ACTIVE
[  227.829989][ T9564] netlink: 'syz.1.929': attribute type 1 has an invalid length.
[  228.038498][ T9575] wlan1 speed is unknown, defaulting to 1000
[  228.042385][ T9575] lo speed is unknown, defaulting to 1000
[  228.666851][ T9602] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  228.797582][ T9609] wlan1 speed is unknown, defaulting to 1000
[  228.801811][ T9609] lo speed is unknown, defaulting to 1000
[  229.695474][ T9661] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  229.878410][ T9677] __nla_validate_parse: 146 callbacks suppressed
[  229.878429][ T9677] netlink: 36 bytes leftover after parsing attributes in process `syz.0.955'.
[  229.884422][ T9677] netlink: 16 bytes leftover after parsing attributes in process `syz.0.955'.
[  229.887735][ T9677] netlink: 36 bytes leftover after parsing attributes in process `syz.0.955'.
[  229.894915][ T9677] netlink: 36 bytes leftover after parsing attributes in process `syz.0.955'.
[  229.955562][ T9677] netlink: 24 bytes leftover after parsing attributes in process `syz.0.955'.
[  229.959964][ T9677] netlink: 'syz.0.955': attribute type 1 has an invalid length.
[  229.993341][ T9681] netlink: del zone limit has 8 unknown bytes
[  230.276041][ T9692] netlink: 277 bytes leftover after parsing attributes in process `syz.1.959'.
[  230.929890][ T9704] netlink: del zone limit has 8 unknown bytes
[  231.057217][ T9711] netlink: 'syz.0.966': attribute type 16 has an invalid length.
[  231.061902][ T9711] netlink: 'syz.0.966': attribute type 17 has an invalid length.
[  231.088799][   T10] lo speed is unknown, defaulting to 1000
[  231.092291][   T10] syz0: Port: 1 Link DOWN
[  231.092482][ T9711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.966'.
[  231.099558][ T9711] IPv6: NLM_F_REPLACE set, but no existing node found!
[  231.186818][ T9713] netlink: 16 bytes leftover after parsing attributes in process `syz.0.967'.
[  231.255432][ T9726] netlink: del zone limit has 8 unknown bytes
[  231.289381][ T9729] netlink: zone id is out of range
[  231.291152][ T9729] netlink: zone id is out of range
[  231.292930][ T9729] netlink: del zone limit has 8 unknown bytes
[  231.461998][ T9734] wlan1 speed is unknown, defaulting to 1000
[  231.465926][ T9734] lo speed is unknown, defaulting to 1000
[  231.896112][ T9750] syzkaller0: left promiscuous mode
[  231.897976][ T9750] syzkaller0: left allmulticast mode
[  232.107899][ T9755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.979'.
[  232.111353][ T9754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.979'.
[  232.146962][ T9759] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  232.862245][ T9794] netlink: 'syz.2.990': attribute type 16 has an invalid length.
[  232.864907][ T9794] netlink: 'syz.2.990': attribute type 17 has an invalid length.
[  232.869262][ T9794] IPv6: NLM_F_REPLACE set, but no existing node found!
[  233.933090][ T9825] netlink: zone id is out of range
[  233.935103][ T9825] netlink: zone id is out of range
[  233.937165][ T9825] netlink: del zone limit has 8 unknown bytes
[  234.048100][ T9831] netlink: 'syz.0.1003': attribute type 21 has an invalid length.
[  234.264671][ T9845] netlink: zone id is out of range
[  234.511489][ T9862] wlan1 speed is unknown, defaulting to 1000
[  234.514465][ T9862] lo speed is unknown, defaulting to 1000
[  234.906419][ T9886] wlan1 speed is unknown, defaulting to 1000
[  234.909416][ T9886] lo speed is unknown, defaulting to 1000
[  235.259187][ T9898] __nla_validate_parse: 8 callbacks suppressed
[  235.259230][ T9898] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1023'.
[  235.369624][ T9900] netlink: 'syz.1.1024': attribute type 16 has an invalid length.
[  235.372940][ T9900] netlink: 'syz.1.1024': attribute type 17 has an invalid length.
[  235.384812][ T9900] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1024'.
[  235.477068][ T9910] geneve2: left promiscuous mode
[  235.479562][ T9910] geneve2: left allmulticast mode
[  235.896659][ T9929] netlink: 'syz.0.1028': attribute type 1 has an invalid length.
[  235.901728][ T9929] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1028'.
[  236.139008][ T9932] wlan1 speed is unknown, defaulting to 1000
[  236.144448][ T9932] lo speed is unknown, defaulting to 1000
[  236.602069][ T9949] netlink: 'syz.1.1033': attribute type 1 has an invalid length.
[  236.891294][ T9958] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1035'.
[  236.911815][ T9958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1035'.
[  237.019268][ T9958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1035'.
[  237.030704][ T9958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1035'.
[  237.586492][ T9964] net_ratelimit: 7 callbacks suppressed
[  237.586504][ T9964] netlink: del zone limit has 8 unknown bytes
[  237.736272][ T9968] syzkaller0: entered promiscuous mode
[  237.738541][ T9968] syzkaller0: entered allmulticast mode
[  238.737342][ T9981] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1041'.
[  238.745840][ T9981] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1041'.
[  238.750064][ T9981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1041'.
[  239.065645][ T9988] ieee802154 phy0 wpan0: encryption failed: -22
[  239.178271][ T9993] netlink: 'syz.0.1043': attribute type 1 has an invalid length.
[  239.182441][ T9999] syzkaller1: entered promiscuous mode
[  239.185301][ T9999] syzkaller1: entered allmulticast mode
[  239.200757][ T9999] gre1: entered promiscuous mode
[  239.202692][ T9999] gre1: entered allmulticast mode
[  239.240018][T10003] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  239.242867][T10003] syzkaller0: entered promiscuous mode
[  239.244778][T10003] syzkaller0: entered allmulticast mode
[  239.254334][T10003] tipc: Resetting bearer <eth:syzkaller0>
[  239.270848][T10002] tipc: Resetting bearer <eth:syzkaller0>
[  239.284805][T10002] tipc: Disabling bearer <eth:syzkaller0>
[  239.465073][T10007] syzkaller0: entered promiscuous mode
[  239.466847][T10007] syzkaller0: entered allmulticast mode
[  240.016081][T10019] nbd: must specify an index to disconnect
[  240.602959][T10033] netlink: del zone limit has 8 unknown bytes
[  240.666091][T10040] sch_fq: defrate 2 ignored.
[  240.737684][T10048] __nla_validate_parse: 7 callbacks suppressed
[  240.737698][T10048] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1061'.
[  240.743472][T10048] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1061'.
[  240.746592][T10048] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1061'.
[  240.764512][T10052] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1062'.
[  240.815703][T10055] veth0_to_team: mtu less than device minimum
[  240.824031][T10054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  241.423290][T10061] netlink: del zone limit has 8 unknown bytes
[  241.457954][T10063] netlink: zone id is out of range
[  241.461274][T10063] netlink: zone id is out of range
[  241.463087][T10063] netlink: del zone limit has 8 unknown bytes
[  241.552640][T10071] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1069'.
[  241.669249][T10075] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1070'.
[  241.845840][T10084] netlink: del zone limit has 8 unknown bytes
[  242.213811][T10101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1078'.
[  242.376780][T10109] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  242.530027][T10111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1079'.
[  243.014367][T10120] netlink: del zone limit has 8 unknown bytes
[  243.100364][T10123] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1083'.
[  243.103267][T10123] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1083'.
[  243.774181][T10160] netlink: 'syz.1.1095': attribute type 21 has an invalid length.
[  244.053750][T10183] netlink: zone id is out of range
[  244.055894][T10183] netlink: zone id is out of range
[  244.057987][T10183] netlink: del zone limit has 8 unknown bytes
[  244.444450][   T33] audit: type=1800 audit(1758972330.076:5): pid=10198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1105" name="cgroup.controllers" dev="tmpfs" ino=1877 res=0 errno=0
[  244.671772][T10221] netlink: 'syz.0.1112': attribute type 1 has an invalid length.
[  244.675071][T10221] netlink: 'syz.0.1112': attribute type 1 has an invalid length.
[  244.925543][T10242] netlink: zone id is out of range
[  244.927438][T10242] netlink: zone id is out of range
[  244.930746][T10242] netlink: del zone limit has 8 unknown bytes
[  245.198749][T10246] netlink: 'syz.0.1120': attribute type 1 has an invalid length.
[  245.201430][T10246] nbd: error processing sock list
[  245.203958][T10246] block nbd0: shutting down sockets
[  245.216196][T10258] 8021q: adding VLAN 0 to HW filter on device bond0
[  245.859093][T10292] netlink: 'syz.0.1132': attribute type 10 has an invalid length.
[  245.862542][T10292] __nla_validate_parse: 22 callbacks suppressed
[  245.862556][T10292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1132'.
[  245.907139][T10289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1131'.
[  246.351068][T10333] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1142'.
[  246.407597][T10331] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1141'.
[  246.432341][T10331] bond2: entered promiscuous mode
[  246.434948][T10331] 8021q: adding VLAN 0 to HW filter on device bond2
[  246.488282][T10337] netlink: 'syz.0.1143': attribute type 1 has an invalid length.
[  246.491757][T10337] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1143'.
[  246.521134][T10337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1143'.
[  246.542671][T10331] bond2 (unregistering): Released all slaves
[  246.773421][T10341] syzkaller0: entered promiscuous mode
[  246.775506][T10341] syzkaller0: entered allmulticast mode
[  248.097031][T10350] netlink: 'syz.2.1147': attribute type 49 has an invalid length.
[  248.141643][T10363] syzkaller0: entered promiscuous mode
[  248.143840][T10363] syzkaller0: entered allmulticast mode
[  249.432139][T10386] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.1155'.
[  249.509900][T10393] netlink: 'syz.1.1158': attribute type 1 has an invalid length.
[  249.592949][T10391] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1157'.
[  249.596814][T10391] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1157'.
[  249.601282][T10391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1157'.
[  249.712394][T10417] netlink: 'syz.1.1163': attribute type 16 has an invalid length.
[  249.715042][T10417] netlink: 'syz.1.1163': attribute type 17 has an invalid length.
[  249.760134][T10422] netlink: 'syz.0.1165': attribute type 16 has an invalid length.
[  249.763026][T10422] netlink: 'syz.0.1165': attribute type 17 has an invalid length.
[  249.770473][T10422] IPv6: NLM_F_REPLACE set, but no existing node found!
[  249.861899][T10426] netlink: zone id is out of range
[  249.863796][T10426] netlink: zone id is out of range
[  249.865957][T10426] netlink: del zone limit has 8 unknown bytes
[  250.018760][T10434] wlan1 speed is unknown, defaulting to 1000
[  250.022292][T10434] lo speed is unknown, defaulting to 1000
[  250.920695][T10450] netlink: 'syz.2.1174': attribute type 2 has an invalid length.
[  250.923497][T10450] __nla_validate_parse: 4 callbacks suppressed
[  250.923506][T10450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1174'.
[  250.929758][T10450] netlink: 'syz.2.1174': attribute type 2 has an invalid length.
[  250.932853][T10450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1174'.
[  250.981884][T10452] netlink: zone id is out of range
[  250.983633][T10452] netlink: zone id is out of range
[  250.985253][T10452] netlink: del zone limit has 8 unknown bytes
[  251.172823][T10459] netlink: 'syz.2.1177': attribute type 1 has an invalid length.
[  251.371044][T10461] netlink: 'syz.1.1178': attribute type 10 has an invalid length.
[  251.373766][T10461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1178'.
[  251.551205][T10468] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  251.554257][T10468] syzkaller0: entered promiscuous mode
[  251.558513][T10468] syzkaller0: entered allmulticast mode
[  251.580769][T10468] tipc: Resetting bearer <eth:syzkaller0>
[  251.599205][T10472] netlink: zone id is out of range
[  251.601654][T10472] netlink: zone id is out of range
[  251.603842][T10472] netlink: del zone limit has 8 unknown bytes
[  251.691580][T10479] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  252.066431][T10493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1188'.
[  252.073934][T10492] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1188'.
[  252.217116][T10499] macvlan2: entered allmulticast mode
[  252.219114][T10499] ip6gretap0: entered allmulticast mode
[  252.222689][T10499] ip6gretap0: left allmulticast mode
[  252.370693][T10467] tipc: Resetting bearer <eth:syzkaller0>
[  252.392086][T10467] tipc: Disabling bearer <eth:syzkaller0>
[  252.415614][T10502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1191'.
[  252.614411][T10513] 8021q: adding VLAN 0 to HW filter on device team0
[  252.622054][T10516] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32)
[  252.628241][ T5891] lo speed is unknown, defaulting to 1000
[  252.631330][ T5891] syz0: Port: 1 Link ACTIVE
[  252.833641][T10527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1199'.
[  253.063176][T10536] wlan1 speed is unknown, defaulting to 1000
[  253.067065][T10536] lo speed is unknown, defaulting to 1000
[  253.440620][T10540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1204'.
[  253.449609][T10540] IPv6: NLM_F_REPLACE set, but no existing node found!
[  254.189774][T10572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1214'.
[  254.224060][T10570] can: request_module (can-proto-0) failed.
[  254.265735][T10567] wlan1 speed is unknown, defaulting to 1000
[  254.269784][T10567] lo speed is unknown, defaulting to 1000
[  254.403357][T10583] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  254.539538][T10591] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  254.593583][T10596] wlan1 speed is unknown, defaulting to 1000
[  254.598034][T10596] lo speed is unknown, defaulting to 1000
[  254.607496][T10598] netlink: 'syz.0.1221': attribute type 10 has an invalid length.
[  254.621899][T10598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1221'.
[  254.749536][ T5891] lo speed is unknown, defaulting to 1000
[  254.755999][ T5891] syz0: Port: 1 Link DOWN
[  255.462481][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  255.465127][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  256.527964][T10660] __nla_validate_parse: 3 callbacks suppressed
[  256.527975][T10660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1236'.
[  256.604575][T10664] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1237'.
[  256.607723][T10664] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1237'.
[  256.611049][T10664] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1237'.
[  256.614492][T10664] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1237'.
[  257.531827][T10693] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1243'.
[  258.630525][T10725] net_ratelimit: 7 callbacks suppressed
[  258.630539][T10725] netlink: zone id is out of range
[  258.634370][T10725] netlink: zone id is out of range
[  258.636626][T10725] netlink: del zone limit has 8 unknown bytes
[  258.904600][T10745] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1257'.
[  259.606640][T10755] wlan1 speed is unknown, defaulting to 1000
[  259.611604][T10755] lo speed is unknown, defaulting to 1000
[  259.793880][T10761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1260'.
[  259.867706][T10767] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  259.872069][T10768] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  260.004825][T10776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1264'.
[  260.519929][T10782] wlan1 speed is unknown, defaulting to 1000
[  260.523303][T10782] lo speed is unknown, defaulting to 1000
[  260.959938][T10797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1268'.
[  260.964310][T10797] IPv6: NLM_F_REPLACE set, but no existing node found!
[  291.668980][T10813] netlink: 'syz.2.1273': attribute type 1 has an invalid length.
[  291.672293][T10813] netlink: 'syz.2.1273': attribute type 2 has an invalid length.
[  291.927823][T10846] netlink: 'syz.0.1282': attribute type 9 has an invalid length.
[  291.932180][T10846] netlink: 'syz.0.1282': attribute type 6 has an invalid length.
[  291.934888][T10846] netlink: 'syz.0.1282': attribute type 7 has an invalid length.
[  291.937672][T10846] netlink: 'syz.0.1282': attribute type 8 has an invalid length.
[  292.032941][T10856] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1284'.
[  292.124194][T10866] netlink: 'syz.0.1286': attribute type 5 has an invalid length.
[  292.135995][T10869] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  292.139739][T10869] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  292.184856][T10873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1288'.
[  292.189846][T10873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1288'.
[  292.261399][T10876] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1289'.
[  292.264385][T10876] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1289'.
[  292.267319][T10876] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1289'.
[  292.270843][T10876] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1289'.
[  292.274166][T10880] netlink: zone id is out of range
[  292.275877][T10880] netlink: zone id is out of range
[  292.277604][T10880] netlink: del zone limit has 8 unknown bytes
[  292.318930][T10876] netlink: 'syz.0.1289': attribute type 1 has an invalid length.
[  292.411366][T10891] netlink: 'syz.1.1294': attribute type 1 has an invalid length.
[  292.414857][T10891] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1294'.
[  292.425225][T10891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1294'.
[  292.444641][T10891] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1294'.
[  292.564952][T10902] syzkaller1: entered promiscuous mode
[  292.567257][T10902] syzkaller1: entered allmulticast mode
[  292.762545][T10908] geneve2: entered promiscuous mode
[  292.764707][T10908] geneve2: entered allmulticast mode
[  292.768382][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  292.771943][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  292.775328][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  292.779145][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  292.814242][T10910] openvswitch: netlink: Message has 200 unknown bytes.
[  292.816729][T10910] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  292.834590][T10910] gre1: left promiscuous mode
[  292.836122][T10910] gre1: left allmulticast mode
[  292.840759][T10910] geneve2: left promiscuous mode
[  292.842597][T10910] geneve2: left allmulticast mode
[  292.845581][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  292.850698][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  292.855383][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  292.859417][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  293.885608][T10952] netlink: 'syz.2.1314': attribute type 10 has an invalid length.
[  294.796846][T10967] wlan1 speed is unknown, defaulting to 1000
[  294.803023][T10967] lo speed is unknown, defaulting to 1000
[  295.829599][T11000] openvswitch: netlink: Message has 4 unknown bytes.
[  295.832109][T11001] openvswitch: netlink: Message has 4 unknown bytes.
[  296.218935][T11004] nbd: error processing sock list
[  296.224441][T11004] block nbd0: shutting down sockets
[  296.924175][T11028] wlan1 speed is unknown, defaulting to 1000
[  296.927297][T11028] lo speed is unknown, defaulting to 1000
[  298.118566][T11083] netlink: zone id is out of range
[  298.121856][T11083] netlink: zone id is out of range
[  298.123673][T11083] netlink: del zone limit has 8 unknown bytes
[  298.241378][T11092] validate_nla: 1 callbacks suppressed
[  298.241407][T11092] netlink: 'syz.1.1344': attribute type 13 has an invalid length.
[  298.252650][T11092] __nla_validate_parse: 8 callbacks suppressed
[  298.252666][T11092] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1344'.
[  298.473802][T11113] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1351'.
[  298.476648][T11113] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1351'.
[  298.480392][T11113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1351'.
[  298.598259][T11132] netlink: 'syz.0.1356': attribute type 10 has an invalid length.
[  298.603698][T11132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1356'.
[  298.684715][T11140] netlink: zone id is out of range
[  298.686396][T11140] netlink: zone id is out of range
[  298.688143][T11140] netlink: del zone limit has 8 unknown bytes
[  298.795310][T11146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1360'.
[  298.981668][T11149] wlan1 speed is unknown, defaulting to 1000
[  298.985801][T11149] lo speed is unknown, defaulting to 1000
[  299.001001][T11151] netlink: 'syz.1.1362': attribute type 10 has an invalid length.
[  299.003592][T11151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1362'.
[  299.074433][T11155] netlink: 8764 bytes leftover after parsing attributes in process `syz.2.1361'.
[  299.077578][T11155] netlink: 1264 bytes leftover after parsing attributes in process `syz.2.1361'.
[  299.186729][T11162] netlink: zone id is out of range
[  299.189673][T11162] netlink: zone id is out of range
[  299.194421][T11162] netlink: del zone limit has 8 unknown bytes
[  299.285918][T11164] wlan1 speed is unknown, defaulting to 1000
[  299.293278][T11164] lo speed is unknown, defaulting to 1000
[  299.525402][T11174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1367'.
[  299.557120][T11172] wlan1 speed is unknown, defaulting to 1000
[  299.569169][T11172] lo speed is unknown, defaulting to 1000
[  299.957581][T11177] syzkaller0: entered promiscuous mode
[  299.964750][T11177] syzkaller0: entered allmulticast mode
[  299.989831][T11179] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  300.924674][T11190] syzkaller1: entered promiscuous mode
[  300.926620][T11190] syzkaller1: entered allmulticast mode
[  301.064919][T11208] netlink: 'syz.1.1377': attribute type 1 has an invalid length.
[  301.149583][T11209] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  301.362041][T11213] wlan1 speed is unknown, defaulting to 1000
[  301.364950][T11213] lo speed is unknown, defaulting to 1000
[  301.837457][T11224] netlink: 'syz.0.1380': attribute type 1 has an invalid length.
[  302.135616][T11248] sctp: [Deprecated]: syz.0.1386 (pid 11248) Use of int in maxseg socket option.
[  302.135616][T11248] Use struct sctp_assoc_value instead
[  302.515464][T11264] netlink: 'syz.2.1393': attribute type 1 has an invalid length.
[  302.650436][T11275] dvmrp0: entered allmulticast mode
[  303.615115][T11295] netlink: 'syz.2.1401': attribute type 1 has an invalid length.
[  303.620988][T11295] netlink: 'syz.2.1401': attribute type 2 has an invalid length.
[  303.624011][T11295] netlink: 'syz.2.1401': attribute type 2 has an invalid length.
[  303.626586][T11295] netlink: 'syz.2.1401': attribute type 2 has an invalid length.
[  303.629445][T11295] netlink: 'syz.2.1401': attribute type 1 has an invalid length.
[  303.686198][T11303] netlink: zone id is out of range
[  303.687978][T11303] netlink: zone id is out of range
[  303.690247][T11303] netlink: del zone limit has 8 unknown bytes
[  303.889463][T11312] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  303.982635][T11316] __nla_validate_parse: 8 callbacks suppressed
[  303.982646][T11316] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1408'.
[  304.043470][T11320] netlink: zone id is out of range
[  304.045211][T11320] netlink: zone id is out of range
[  304.047085][T11320] netlink: del zone limit has 8 unknown bytes
[  304.671560][T11330] wlan1 speed is unknown, defaulting to 1000
[  304.675103][T11330] lo speed is unknown, defaulting to 1000
[  304.861372][T11338] netlink: 'syz.0.1416': attribute type 9 has an invalid length.
[  304.864490][T11338] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1416'.
[  305.186002][T11365] wlan1 speed is unknown, defaulting to 1000
[  305.193171][T11365] lo speed is unknown, defaulting to 1000
[  305.712354][T11393] gre0: entered allmulticast mode
[  305.881242][T11396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1423'.
[  307.176823][T11436] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1435'.
[  307.518296][T11477] wlan1 speed is unknown, defaulting to 1000
[  307.521774][T11477] lo speed is unknown, defaulting to 1000
[  307.565976][T11481] trusted_key: syz.1.1443 sent an empty control message without MSG_MORE.
[  307.650738][T11487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1445'.
[  308.166113][T11505] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  308.173060][T11505] tipc: New replicast peer: 255.255.255.255
[  308.470992][T11524] ------------[ cut here ]------------
[  308.473628][T11524] WARNING: CPU: 1 PID: 11524 at net/mptcp/pm.c:379 mptcp_pm_alloc_anno_list+0x3fe/0x460
[  308.477692][T11524] Modules linked in:
[  308.480148][T11524] CPU: 1 UID: 0 PID: 11524 Comm: syz.0.1453 Not tainted syzkaller #0 PREEMPT(full) 
[  308.484766][T11524] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  308.489128][T11524] RIP: 0010:mptcp_pm_alloc_anno_list+0x3fe/0x460
[  308.491768][T11524] Code: b0 01 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d e9 57 5c 15 00 cc e8 c1 3d 5f f6 90 0f 0b 90 e9 8b fc ff ff e8 b3 3d 5f f6 90 <0f> 0b 90 31 c0 eb d1 48 c7 c1 60 1f a3 8f 80 e1 07 80 c1 03 38 c1
[  308.499575][T11524] RSP: 0018:ffffc90006746d30 EFLAGS: 00010287
[  308.502092][T11524] RAX: ffffffff8b606fdd RBX: 0000000000000000 RCX: 0000000000080000
[  308.505332][T11524] RDX: ffffc900072e9000 RSI: 0000000000001902 RDI: 0000000000001903
[  308.508547][T11524] RBP: ffff888106f65200 R08: 00000000000a0021 R09: 0000000000000000
[  308.511915][T11524] R10: 0000000000000000 R11: aa1414acffff0000 R12: ffff88803e87a400
[  308.515192][T11524] R13: ffff88803e87a400 R14: dffffc0000000000 R15: ffffc90006746f00
[  308.518398][T11524] FS:  00007f2d4eeaa6c0(0000) GS:ffff8881a3c3d000(0000) knlGS:0000000000000000
[  308.522112][T11524] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  308.524907][T11524] CR2: 000000110c34fdaa CR3: 0000000111408000 CR4: 00000000000006f0
[  308.528252][T11524] Call Trace:
[  308.529785][T11524]  <TASK>
[  308.531098][T11524]  ? mptcp_pm_create_subflow_or_signal_addr+0x29f/0x1c30
[  308.533982][T11524]  mptcp_pm_create_subflow_or_signal_addr+0x1448/0x1c30
[  308.536896][T11524]  ? stack_depot_save_flags+0x40/0x860
[  308.538728][T11524]  ? mptcp_pm_create_subflow_or_signal_addr+0x29f/0x1c30
[  308.540893][T11524]  ? __lock_acquire+0x9d1/0xd20
[  308.542431][T11524]  ? nla_get_range_unsigned+0x30e/0x4b0
[  308.544139][T11524]  ? __nla_validate_parse+0x2400/0x2d40
[  308.545854][T11524]  ? __pfx_mptcp_pm_create_subflow_or_signal_addr+0x10/0x10
[  308.548161][T11524]  ? __lock_acquire+0xab9/0xd20
[  308.549778][T11524]  ? __lock_acquire+0xab9/0xd20
[  308.551304][T11524]  ? do_raw_spin_lock+0x121/0x290
[  308.552882][T11524]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  308.554544][T11524]  ? mptcp_addresses_equal+0x283/0x4d0
[  308.556286][T11524]  mptcp_pm_nl_add_addr_doit+0xe66/0x1460
[  308.558076][T11524]  ? __nla_validate_parse+0x2400/0x2d40
[  308.559916][T11524]  ? __sock_sendmsg+0x21c/0x270
[  308.561449][T11524]  ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10
[  308.563390][T11524]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  308.565539][T11524]  genl_family_rcv_msg_doit+0x215/0x300
[  308.567671][T11524]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  308.570430][T11524]  ? bpf_lsm_capable+0x9/0x20
[  308.572372][T11524]  ? security_capable+0x7e/0x2e0
[  308.574405][T11524]  genl_rcv_msg+0x60e/0x790
[  308.576258][T11524]  ? __pfx_genl_rcv_msg+0x10/0x10
[  308.578277][T11524]  ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10
[  308.580478][T11524]  netlink_rcv_skb+0x208/0x470
[  308.582113][T11524]  ? __lock_acquire+0xab9/0xd20
[  308.583793][T11524]  ? __pfx_genl_rcv_msg+0x10/0x10
[  308.585427][T11524]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  308.587121][T11524]  ? down_read+0x1ad/0x2e0
[  308.588648][T11524]  genl_rcv+0x28/0x40
[  308.590033][T11524]  netlink_unicast+0x82f/0x9e0
[  308.591744][T11524]  ? __pfx_netlink_unicast+0x10/0x10
[  308.593465][T11524]  ? netlink_sendmsg+0x642/0xb30
[  308.595103][T11524]  ? skb_put+0x11b/0x210
[  308.596583][T11524]  netlink_sendmsg+0x805/0xb30
[  308.598170][T11524]  ? __pfx_netlink_sendmsg+0x10/0x10
[  308.600039][T11524]  ? aa_sock_msg_perm+0xf1/0x1d0
[  308.601645][T11524]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  308.603596][T11524]  ? __pfx_netlink_sendmsg+0x10/0x10
[  308.605331][T11524]  __sock_sendmsg+0x21c/0x270
[  308.606823][T11524]  ____sys_sendmsg+0x505/0x830
[  308.608425][T11524]  ? __pfx_____sys_sendmsg+0x10/0x10
[  308.610174][T11524]  ? import_iovec+0x74/0xa0
[  308.611651][T11524]  ___sys_sendmsg+0x21f/0x2a0
[  308.613156][T11524]  ? __pfx____sys_sendmsg+0x10/0x10
[  308.614844][T11524]  ? __fget_files+0x2a/0x420
[  308.616288][T11524]  ? __fget_files+0x3a0/0x420
[  308.617807][T11524]  __x64_sys_sendmsg+0x19b/0x260
[  308.619642][T11524]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  308.621567][T11524]  ? rcu_is_watching+0x15/0xb0
[  308.623227][T11524]  ? do_syscall_64+0xbe/0x3b0
[  308.624835][T11524]  do_syscall_64+0xfa/0x3b0
[  308.626511][T11524]  ? lockdep_hardirqs_on+0x9c/0x150
[  308.628247][T11524]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.630332][T11524]  ? exc_page_fault+0x9f/0xf0
[  308.631879][T11524]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.633846][T11524] RIP: 0033:0x7f2d4df8ec29
[  308.635313][T11524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  308.641727][T11524] RSP: 002b:00007f2d4eeaa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  308.644455][T11524] RAX: ffffffffffffffda RBX: 00007f2d4e1d6090 RCX: 00007f2d4df8ec29
[  308.647146][T11524] RDX: 0000000004000000 RSI: 0000200000000400 RDI: 0000000000000005
[  308.649719][T11524] RBP: 00007f2d4e011e41 R08: 0000000000000000 R09: 0000000000000000
[  308.652222][T11524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  308.654747][T11524] R13: 00007f2d4e1d6128 R14: 00007f2d4e1d6090 R15: 00007ffeb99aeae8
[  308.657349][T11524]  </TASK>
[  308.658385][T11524] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  308.660686][T11524] CPU: 1 UID: 0 PID: 11524 Comm: syz.0.1453 Not tainted syzkaller #0 PREEMPT(full) 
[  308.664243][T11524] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  308.667880][T11524] Call Trace:
[  308.669066][T11524]  <TASK>
[  308.670126][T11524]  dump_stack_lvl+0x99/0x250
[  308.671710][T11524]  ? __asan_memcpy+0x40/0x70
[  308.673281][T11524]  ? __pfx_dump_stack_lvl+0x10/0x10
[  308.674977][T11524]  ? __pfx__printk+0x10/0x10
[  308.676559][T11524]  vpanic+0x281/0x750
[  308.677901][T11524]  ? __pfx__printk+0x10/0x10
[  308.679506][T11524]  ? __pfx_vpanic+0x10/0x10
[  308.681022][T11524]  ? is_bpf_text_address+0x292/0x2b0
[  308.682699][T11524]  panic+0xb9/0xc0
[  308.683914][T11524]  ? __pfx_panic+0x10/0x10
[  308.685315][T11524]  __warn+0x31b/0x4b0
[  308.686612][T11524]  ? mptcp_pm_alloc_anno_list+0x3fe/0x460
[  308.688494][T11524]  ? mptcp_pm_alloc_anno_list+0x3fe/0x460
[  308.690646][T11524]  report_bug+0x2be/0x4f0
[  308.692080][T11524]  ? mptcp_pm_alloc_anno_list+0x3fe/0x460
[  308.693879][T11524]  ? mptcp_pm_alloc_anno_list+0x3fe/0x460
[  308.695681][T11524]  ? mptcp_pm_alloc_anno_list+0x400/0x460
[  308.697514][T11524]  handle_bug+0x84/0x160
[  308.698877][T11524]  exc_invalid_op+0x1a/0x50
[  308.700323][T11524]  asm_exc_invalid_op+0x1a/0x20
[  308.701871][T11524] RIP: 0010:mptcp_pm_alloc_anno_list+0x3fe/0x460
[  308.703870][T11524] Code: b0 01 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d e9 57 5c 15 00 cc e8 c1 3d 5f f6 90 0f 0b 90 e9 8b fc ff ff e8 b3 3d 5f f6 90 <0f> 0b 90 31 c0 eb d1 48 c7 c1 60 1f a3 8f 80 e1 07 80 c1 03 38 c1
[  308.710798][T11524] RSP: 0018:ffffc90006746d30 EFLAGS: 00010287
[  308.713277][T11524] RAX: ffffffff8b606fdd RBX: 0000000000000000 RCX: 0000000000080000
[  308.716417][T11524] RDX: ffffc900072e9000 RSI: 0000000000001902 RDI: 0000000000001903
[  308.719549][T11524] RBP: ffff888106f65200 R08: 00000000000a0021 R09: 0000000000000000
[  308.722598][T11524] R10: 0000000000000000 R11: aa1414acffff0000 R12: ffff88803e87a400
[  308.725632][T11524] R13: ffff88803e87a400 R14: dffffc0000000000 R15: ffffc90006746f00
[  308.728714][T11524]  ? mptcp_pm_alloc_anno_list+0x3fd/0x460
[  308.731174][T11524]  ? mptcp_pm_create_subflow_or_signal_addr+0x29f/0x1c30
[  308.733922][T11524]  mptcp_pm_create_subflow_or_signal_addr+0x1448/0x1c30
[  308.736594][T11524]  ? stack_depot_save_flags+0x40/0x860
[  308.738705][T11524]  ? mptcp_pm_create_subflow_or_signal_addr+0x29f/0x1c30
[  308.741394][T11524]  ? __lock_acquire+0x9d1/0xd20
[  308.743318][T11524]  ? nla_get_range_unsigned+0x30e/0x4b0
[  308.745454][T11524]  ? __nla_validate_parse+0x2400/0x2d40
[  308.747499][T11524]  ? __pfx_mptcp_pm_create_subflow_or_signal_addr+0x10/0x10
[  308.749799][T11524]  ? __lock_acquire+0xab9/0xd20
[  308.751358][T11524]  ? __lock_acquire+0xab9/0xd20
[  308.752986][T11524]  ? do_raw_spin_lock+0x121/0x290
[  308.754721][T11524]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  308.756441][T11524]  ? mptcp_addresses_equal+0x283/0x4d0
[  308.758167][T11524]  mptcp_pm_nl_add_addr_doit+0xe66/0x1460
[  308.759970][T11524]  ? __nla_validate_parse+0x2400/0x2d40
[  308.761677][T11524]  ? __sock_sendmsg+0x21c/0x270
[  308.763219][T11524]  ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10
[  308.765166][T11524]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  308.767149][T11524]  genl_family_rcv_msg_doit+0x215/0x300
[  308.768873][T11524]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  308.770778][T11524]  ? bpf_lsm_capable+0x9/0x20
[  308.772265][T11524]  ? security_capable+0x7e/0x2e0
[  308.773894][T11524]  genl_rcv_msg+0x60e/0x790
[  308.775341][T11524]  ? __pfx_genl_rcv_msg+0x10/0x10
[  308.776930][T11524]  ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10
[  308.778877][T11524]  netlink_rcv_skb+0x208/0x470
[  308.780378][T11524]  ? __lock_acquire+0xab9/0xd20
[  308.781920][T11524]  ? __pfx_genl_rcv_msg+0x10/0x10
[  308.783488][T11524]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  308.785135][T11524]  ? down_read+0x1ad/0x2e0
[  308.786534][T11524]  genl_rcv+0x28/0x40
[  308.787805][T11524]  netlink_unicast+0x82f/0x9e0
[  308.789308][T11524]  ? __pfx_netlink_unicast+0x10/0x10
[  308.790952][T11524]  ? netlink_sendmsg+0x642/0xb30
[  308.792536][T11524]  ? skb_put+0x11b/0x210
[  308.793867][T11524]  netlink_sendmsg+0x805/0xb30
[  308.795557][T11524]  ? __pfx_netlink_sendmsg+0x10/0x10
[  308.797467][T11524]  ? aa_sock_msg_perm+0xf1/0x1d0
[  308.799143][T11524]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  308.800802][T11524]  ? __pfx_netlink_sendmsg+0x10/0x10
[  308.802488][T11524]  __sock_sendmsg+0x21c/0x270
[  308.804365][T11524]  ____sys_sendmsg+0x505/0x830
[  308.806172][T11524]  ? __pfx_____sys_sendmsg+0x10/0x10
[  308.808006][T11524]  ? import_iovec+0x74/0xa0
[  308.809662][T11524]  ___sys_sendmsg+0x21f/0x2a0
[  308.811461][T11524]  ? __pfx____sys_sendmsg+0x10/0x10
[  308.813580][T11524]  ? __fget_files+0x2a/0x420
[  308.815455][T11524]  ? __fget_files+0x3a0/0x420
[  308.817381][T11524]  __x64_sys_sendmsg+0x19b/0x260
[  308.819379][T11524]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  308.821561][T11524]  ? rcu_is_watching+0x15/0xb0
[  308.823493][T11524]  ? do_syscall_64+0xbe/0x3b0
[  308.825373][T11524]  do_syscall_64+0xfa/0x3b0
[  308.827213][T11524]  ? lockdep_hardirqs_on+0x9c/0x150
[  308.829302][T11524]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.831692][T11524]  ? exc_page_fault+0x9f/0xf0
[  308.833593][T11524]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.835977][T11524] RIP: 0033:0x7f2d4df8ec29
[  308.837759][T11524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  308.845237][T11524] RSP: 002b:00007f2d4eeaa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  308.848551][T11524] RAX: ffffffffffffffda RBX: 00007f2d4e1d6090 RCX: 00007f2d4df8ec29
[  308.851646][T11524] RDX: 0000000004000000 RSI: 0000200000000400 RDI: 0000000000000005
[  308.854666][T11524] RBP: 00007f2d4e011e41 R08: 0000000000000000 R09: 0000000000000000
[  308.857431][T11524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  308.860490][T11524] R13: 00007f2d4e1d6128 R14: 00007f2d4e1d6090 R15: 00007ffeb99aeae8
[  308.863616][T11524]  </TASK>
[  308.865360][T11524] Kernel Offset: disabled
[  308.866806][T11524] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:26:34  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffffffff903faf01 RCX=7dfee1503ea14900 RDX=ffffc90000007801
RSI=ffffffff8be33ee0 RDI=ffffffff8be33ea0 RBP=dffffc0000000000 RSP=ffffc90000007730
R8 =ffffc90000007bd0 R9 =0000000000000000 R10=ffffc900000078b8 R11=fffff52000000f19
R12=ffffc90000007be0 R13=ffffffff8172c195 R14=ffffffff8e13a0e0 R15=ffffffff8172c195
RIP=ffffffff819d6ed8 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557b91b500 ffffffff 00c00000
GS =0000 ffff8880b863d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055559136d5c8 CR3=000000010d662000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0408060a016e9a00 0200070808000803
XMM02=101000000401f608 0002880800010000 XMM03=0003010000040806 020103ec00020007
XMM04=08000108000a016f 9200020007180800 XMM05=0108100007800436 08000c0800010000
XMM06=0008060a016d9e00 0200070482080007 XMM07=8003081000000402 080004b208000108
XMM08=000a016f92000200 0718080000030100 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000050 RBX=0000000000000050 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000012830 RDI=0000000000012831 RBP=00000000000003f8 RSP=ffffc900067464d0
R8 =ffff888020348237 R9 =1ffff11004069046 R10=dffffc0000000000 R11=ffffffff854fac30
R12=dffffc0000000000 R13=ffffffff99ad78d9 R14=ffffffff99dcc480 R15=0000000000000000
RIP=ffffffff854facac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f2d4eeaa6c0 ffffffff 00c00000
GS =0000 ffff8881a3c3d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c34fdaa CR3=0000000111408000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007f2d4ed0d100 00007f2d4e1a7460 XMM05=00007f2d4e1a7478 00007f2d4e1a74c0
XMM06=00007f2d4e1a74b8 00007f2d4e1a74b0 XMM07=00007f2d4e1a74a8 00007f2d4e1a74a0
XMM08=200a303030303030 3030303230303030 XMM09=0000000000000000 00007f2d4e012fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
