last executing test programs:

1.811346618s ago: executing program 2 (id=1296):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=@newqdisc={0x54, 0x24, 0xf0b, 0x1, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x80000001}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_INGRESS={0x4}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}]}}]}, 0x54}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newsa={0xfc, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8001, 0x0, 0x20, 0x0, 0x1}, {@in=@dev, 0x0, 0x3c}, @in=@multicast2, {0xf7, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4}, {}, {}, 0x70bd29, 0x0, 0xa, 0x2}, [@offload={0xc, 0x1c, {r3, 0x1}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x200088c0}, 0x0)

1.750161373s ago: executing program 2 (id=1298):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in6=@rand_addr=' \x01\x00', 0x4d5, 0xff}, @in=@multicast1, {0x3}, {}, {0x0, 0x20}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x158}}, 0x0)

1.746295014s ago: executing program 2 (id=1300):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
pipe(&(0x7f0000000480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x80000000)
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
write$tun(r1, &(0x7f00000004c0)={@val={0x0, 0x88a8}, @val={0x0, 0x0, 0x19, 0x7, 0x101, 0x3}, @ipv6=@tcp={0x2, 0x6, '4\be', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @dev={0xfe, 0x80, '\x00', 0x2d}, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x40, 0x2, 0x0, 0x3}}}}}, 0x4a)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x144, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @mark={0xc, 0x15, {0x35075c, 0x6}}]}, 0x144}}, 0x20040814)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, 0x0, 0x80)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f30216000000001c00000000000002001b0008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0)

1.742201075s ago: executing program 2 (id=1302):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)={0x84, 0x15, 0x601, 0x0, 0x0, "", [@generic="ab5e89e1c26c8bb8cfd317041ee3a4f259f54d3c93b348d92b3232d9fd8ffb02ab37722aba3daf409bea393f7c9cc9c652df77c7ac56418fa39181d83fd8d8b1a69faa4985fda109caa2ef07d8aea44f8057adbf09a5859c0923e577a87de9ddf68c8180756efc32b343a9e43b9cd3e6a9f26d"]}, 0x84}], 0x1}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x2000)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xb0, 0x3, [@func={0x7, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0xb, 0x5}, {0xe, 0x4}, {0x10, 0x4}, {0x0, 0x3}, {0xa, 0x4}, {0xc, 0x5}, {0xf, 0x3}, {0xc, 0x3}, {0x3, 0x3}, {0xa, 0x1}]}, @float={0xf, 0x0, 0x0, 0x10, 0x10}, @struct={0xc, 0x4, 0x0, 0x4, 0x1, 0x8, [{0x2, 0x1, 0x7}, {0x9, 0x5, 0x1}, {0xe, 0x2, 0x5}, {0xd, 0x1, 0xf6d}]}]}, {0x0, [0x2e]}}, &(0x7f0000000800)=""/4096, 0xcb, 0x1000, 0x1, 0xfffffff8, 0x10000}, 0x28)
ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000280)={0x2, 0x6})

1.673755466s ago: executing program 2 (id=1303):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000006c0)=0x29, 0x4)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_DEL_RULE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="20040000e80304002cbd7000fedbdf2506000000020000003c000000000000000100000003000000020000000600000000800000b20d0000ef220000ff01000001000100050000000104000001000000060000006de14101080000000b00000008000000508fed2504000000060000000600000032aa00000200000007000000e7f9ffff0200000008000000001000000700000004000000090000000e000000f464bbb838e5fed25b8988a79daad38900004000000001040000810000000500000006000000ff7f0000090000000700000006000000400000004ed60000020000000100000007000000060000007f0e00000800000007000000b09200000d0000000200000001800000050000000600000004000000af00000000000000946a397303000000040000000300000006000080feffffff03000000f9ffffffcd000000fdffffffffff0000aa0000000500000009000000050000000c000000000000000000000281000000040000000079000082070000000100000100ffff000000000100000000000000030000000900000c01000004030000000000000004000000060000001000000005000000000000000100000004000000ac0000000300000010000000ff03000006000000080000000900000008000000020000000000000095b1000080ddffff03000000010010000300000006000000080000000b00000005000000ac0000000920000000000000060000000c000000010000000200000000000000fcffffff070000000e000000ce00000001000000010000000d000000000000000800000003000000ff07000001000000040000001eee0000050000000600000002000000080000000500000003000000070000005807000009000000010000000600000000000000cc7700000900000002000000060000000800000003000000640f0000080000000100000004000000000001000200000005000000e80e0000ff7f00002284e1150000010005000000ff0700000100000002000000060000000800000008000000020000000400000000100000ff0300000300000000006f7b020000000300000409000000ec6800000400000009000000070000000d8fffff0300000009000000080000000100000000020000f8ffffff00040000030000000a0000009000000006000000080000006b4e00000c00000000000000c8000000ad00000003000000050000000400000006000000f1ffffff010000000100000004000000080000000600000009000000ff0000000004000009000000ff0f00000600000051060000018000000100000083ee000007000000040000000e0000000a000000ffff000004000000090000000000002007000000740000000000000006000000050000000101000009000000020000000200000000000000050000000600000002000000040000000600000004000000070000000600fec1b98407604f8600000800"/1078], 0x420}}, 0x40040)
recvmmsg(r1, &(0x7f00000002c0), 0x220, 0x100, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f00000004c0)}, 0x6e)
setsockopt$sock_int(r4, 0x1, 0x1e, &(0x7f0000000000)=0xb, 0x4)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0x100000000000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0)
sendto$unix(r3, &(0x7f0000000240)="0014", 0x2, 0x4040081, 0x0, 0x0)
recvfrom$unix(r4, 0x0, 0x0, 0x10102, 0x0, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
r9 = accept$ax25(0xffffffffffffffff, &(0x7f0000000640)={{0x3, @default}, [@default, @bcast, @null, @bcast, @rose, @null, @rose, @default]}, &(0x7f00000000c0)=0x48)
setsockopt$ax25_SO_BINDTODEVICE(r9, 0x101, 0x19, &(0x7f0000000280)=@rose={'rose', 0x0}, 0x10)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xb, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x40002}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r11 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010002070000000000000900020073797a25000000000800410072786500140033"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$AUDIT_USER_TTY(r11, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="100000006404021b2abd7000ffdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x8880}, 0x8040)
r12 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r12, &(0x7f0000007cc0)=[{{&(0x7f0000000800)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}, 0x6}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000340)='(', 0x1}], 0x1, &(0x7f00000019c0)=ANY=[@ANYBLOB="24000000000000002001000000000000000000000000000e14b65b156c4d1400", @ANYRES32=0x0, @ANYBLOB="00000000400000000000000029000000360000001d04000000000000000100c90300000000000000000000ffffac1414aac910fe8800000000000000000000000001010014000000000000008400000008000000070000000000000014000000000000002900000008000000060000000000000014"], 0xb0}}], 0x1, 0x931766f6319eed40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r13 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r13, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

821.064423ms ago: executing program 2 (id=1313):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=<r2=>0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r1, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) (async)
r4 = socket$l2tp(0x2, 0x2, 0x73)
getsockname$l2tp(r4, &(0x7f0000000200)={0x2, 0x0, @remote}, &(0x7f0000000240)=0x10)
ioctl$sock_SIOCDELRT(r4, 0x890c, &(0x7f00000002c0)={0x0, @generic={0x2, "938ab678dd43b62ab2efce24b41d"}, @generic={0x1, "6ab554ad09f3a521ff94cd7732e5"}, @hci={0x1f, 0x1, 0x2}, 0xb9, 0x0, 0x0, 0x0, 0x91, &(0x7f0000000280)='bond_slave_0\x00', 0x1c, 0xc5, 0x6})
r5 = accept4(r4, &(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f00000003c0)=0x80, 0x80000)
getsockopt$inet_tcp_buf(r5, 0x6, 0xb, &(0x7f0000000400)=""/199, &(0x7f0000000500)=0xc7)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), r0)
sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r7, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0xc040}, 0x48004) (async)
r8 = accept4$alg(r4, 0x0, 0x0, 0x0)
sendmsg$alg(r8, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000680)="bf6dd8beaa50719dffd4d0d43e80b4af1625c4a355b761b9a70a8058008a54a29f6d989a2e06e8983d95ddd88c11be02437998e7d0f2205ff3f6e67edb6d31ab3771671bd336413e73271dd1df88de9f2fcba7fdd6293e3b771c7cd7a4b9977d63d40cdf538538c3d9446a9bf960faa4757187e835840c46e496611d6d49a13835ca9b0626f120196f92895ea98b0c613144946ff9779d4e5df01a410e6330f622361fe6868a780c347f6b87", 0xac}, {&(0x7f0000000740)="02e017687474f99f14b8b3a745132f509d0d3bd2355a06af7da90e76ebae3d51c732b1b18b85d89b96df48d1ace5a94a2e759ad3fd230f55184087538f3c994454e03a3638328289fe775442889b57beb2caf24a890c34d4e6b1849a97424eded37853dd47fa6f44148c92260a77b944a1a9744348aa2a18f21414b8eded607a71b78934c75b58334151d3e7aab7213f8364d9b6fdefa4e6ff284ed57f8a6a30a01e5d8d324d1230f5e72fc669b2ad7fac183e533b888ca21b7f2e", 0xbb}, {&(0x7f0000000800)="72de4c9aeee7d1c8e042645543fabe480354a0c57405555f686a0c105ae29023db53daed71691a4073d78ff57d00d76468957d82ed56e53f0b9f748f33d2b1e8a2cb53aa49e548465036760eae3caec221c56dafdba1852e9cc2fb883b10a7ffa829c69c20d12af721fadb1cd55dff7735d7e4e752e57c460827e0f93afd24b75dfdb59e338a15601a790101a5a30c9c01b8ba2bcd5c6c2aab0341354a91400226815121c2d2e17fe1547bf650c25f95d9e239795088deca3131ac869d73ac62001b4e284c47bf", 0xc7}, {&(0x7f0000000900)="d1bea0d51364a8555d5cd029d6aa17e7177ceec0e503ea6be18600dbb644208303f00f22869f6a16ef0ef61c3883bfb02fc9b80404ea675c95d1dde1a9f3ea464926ff8647b81b157db9338815d8b17980fa331c87d00705981a5e5cd64880c85e03f6d9bdfd54868b4c548c3c5081b14ab7134edf604208c5482aeb2d0f7d4716910b0a766b801f2e27b72839ce7f1310bb7849350fbcc53bde36c3d70a3ae3a791ea597ef1a1e05f903826f71c183b6a6da533068a849608287bc1dff3e35784d0147c0c88e75420ebbe1911a0d826ae816d", 0xd3}], 0x4, &(0x7f0000000a40)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0x58, 0x117, 0x2, 0x3d, "1633a94f2d1929e6d95626724ace2ae9d0b3c7246f1215e1e301c69afd1fc6c63bdf650e04f433907b60f1a9d14884aae3e48df6adad8230457256dec0"}, @op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0x30, 0x117, 0x2, 0x18, "93d7db457402823a606521185f336f093b055a924854095a"}], 0x1118, 0x4004}, 0x4048080) (async)
r9 = accept4$llc(r5, &(0x7f0000001bc0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000001c00)=0x10, 0x800)
connect$llc(r9, &(0x7f0000001c40)={0x1a, 0x0, 0x22, 0xe, 0x8, 0x5e, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001cc0)=<r10=>0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001d00)=<r11=>0x0)
sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f0000001dc0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x34, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x48850) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
accept4$unix(r5, &(0x7f0000001e00)=@abs, &(0x7f0000001e80)=0x6e, 0x800) (async)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000001f80)={&(0x7f0000001ec0), 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20040041) (async)
sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000002080)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x14, r1, 0x2, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
bpf$ENABLE_STATS(0x20, &(0x7f00000020c0), 0x4) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000002100), r0)
r12 = openat$cgroup(0xffffffffffffffff, &(0x7f0000002140)='syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r12, &(0x7f0000002180)='memory.numa_stat\x00', 0x0, 0x0) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000021c0), r0) (async)
r13 = openat$nci(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0)
read$nci(r13, &(0x7f0000002240)=""/222, 0xde)

661.433698ms ago: executing program 0 (id=1319):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000790020000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000080000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a0000000000000000000000804000000000000000000800000000000000000000000000000044000500ac140010000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000000000000000000000000000493990bbaff76b1cd1b0a75ce8d84de4d5580000000000000000"], 0xfc}}, 0x0)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000003c0)={<r2=>0x0, 0x2}, &(0x7f0000000400)=0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000440)={r2, 0x6}, 0x8)
close(r1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00'}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3, <r4=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r3}, 0x20)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$xdp(0x2c, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'sit0\x00', <r8=>0x0})
r9 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000500)={0x0, 0x0, 0x1800, 0x3}, 0x20)
unshare(0x22020600)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0xa8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x15}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x902}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x994}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x3cd5b127c6b6b279}]}]}, 0xa8}}, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$tun(r12, &(0x7f0000000340)=ANY=[], 0x33)
sendfile(r12, r11, 0x0, 0x10000)
r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r13, 0x0, 0xd76}, 0x18)
setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
bind$xdp(r6, &(0x7f0000000140)={0x2c, 0x2, r8, 0x16}, 0x10)
sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES8=r4, @ANYBLOB="02000000000000009c0011000a010100000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa330000000200000002000a0000000000000000000000ffff7f000001fc02000000000000000000000000000064010102000000000000000000000000fc0200000000000000000000000000003c0000000000000008000200"], 0xec}, 0x1, 0x0, 0x0, 0x8040}, 0x0)

544.014559ms ago: executing program 0 (id=1323):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10)
sendfile(r3, r2, 0x0, 0x800)
sendmsg$nl_xfrm(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001200010025bd70000400000000000000000000000000000000000000000004d502006c000c0015"], 0x34}, 0x1, 0x0, 0x0, 0x14040015}, 0x24004040)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={<r5=>0x0, 0x79, "0bda90c949b58f7ea79badecfb13f79ed14229e831bd87febd67e1361d8d80746188bfa8b8b0d2e6d11cee1795617e3c2080c24185638d709fc94979856797337355b781490bfec8a60241742ba26b3f6b3313cd8b2827aaf441f3def46e3a49ceb5bff3d394fb2c367d228d6903eeb445a202699a6ec6cb2a"}, &(0x7f00000000c0)=0x81)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000100)={r5, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x30}}}, 0x668, 0xfff8}, &(0x7f00000001c0)=0x90)

542.199815ms ago: executing program 0 (id=1324):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0)
write$tun(r0, &(0x7f0000000380)={@val, @void, @eth={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @void, {@ipv6={0x86dd, @tcp={0x1, 0x6, "b404ba", 0x2d, 0x6, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{0x4e23, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x8, 0x7, 0x0, 0x6, {[@md5sig={0x13, 0x12, "2c14486192166a53444fdf3392add95e"}]}}, {"650e79681b"}}}}}}}}, 0x67)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r5=>0x0}) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x2c}}, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3e, 0x907, 0xfffffffe, 0xfffffffc, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\xbd\n'}, @typed={0x6, 0x20, 0x0, 0x0, @str='\xbd\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x400c800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
unshare(0x62040200) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x34, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, 0x34}}, 0x8000) (async)
r8 = socket(0x29, 0x6, 0x10001) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0) (async)
r10 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r11=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r11}]}, 0x20}}, 0x0) (async)
bind$packet(r8, &(0x7f00000000c0)={0x11, 0x9, r11, 0x1, 0x9a, 0x6, @random="0f1c4b9ef26f"}, 0x14)

211.777606ms ago: executing program 0 (id=1327):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)=ANY=[], 0x20) (async)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x43}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x44, 0x8, 0x0, 0x0}}, 0x10) (async)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r3, &(0x7f0000000400), &(0x7f0000000440)=""/236}, 0x20) (async)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x15}}}, 0xe8) (async)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) (async)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats}) (async)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0xff7ffeff}, {0x6, 0xa, 0xfe, 0x8001}]})
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x4, 0x84) (async)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r7}, 0x18)
r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8)
write$cgroup_int(r9, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r9)
sendmsg$IPVS_CMD_SET_CONFIG(r9, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x70, r10, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x69}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x4041}, 0x20000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) (async)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x4000010, 0xffffffffffffffff, 0x54099000) (async)
sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x3c, 0x15, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x800)

211.383169ms ago: executing program 1 (id=1328):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c010000100013072cbd7000fcdbdf25fc02000000000000000000000000000020010000000000000000000000000001000000204e2100020a0000003b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe32000000fe64000000080000004698250000001b000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000050000000000000043050000000000000500000000000000ffffffffffffff7f0000000000000000000000000000000000000000000000000000000028bd7000003500000a000400000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000217d66d38547aa140db8a200000000c538c7cb7a1c000400ffff4e244e240000fe8000000000000000000000000000aa"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0)

210.34825ms ago: executing program 1 (id=1329):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000480)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8, {0xa}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x6, 0x7, 0xff4c, 0x9}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x70}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0xc)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x549f41, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000280), &(0x7f0000000700)=r2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000bc0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000580)="c705e395312d4e1a5df95256a640a7570000000087eeb182", 0xffffffffffffffe6)
r5 = accept4(r4, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$alg(r6, &(0x7f0000000e80)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000005c0)="d8a6c23ff2d1a2ece2b60fc01be1b2dc4bb9905b951b91e583fde714e2875992cc89594136df837ab4a47cbabaca1cb237ad6b783716d20a949c813c5abfe68d9641dcc71a8ea44c", 0x48}, {&(0x7f0000000300)="a20f17", 0x3}, {&(0x7f0000000640)="3ac5546e1044edd50b8de358f163db30461a21b5d12cbeb1b43e20c5b943ab383575f9d87db96c02199545c22953e01e452fab6e150c955261ad253b1cfe7d419a2000bd186badb5064e698354ef5e110c1dd144532dc15731908a16b7eb3475bd6d59e0ab9b233ffbeef221020b31ca737b364927cbc26f37550a9d21133b567ba2accba27b218e6ac2e67bbe26", 0x8e}, {&(0x7f0000000780)="6d159a4dbb720ea6893a33309557fdbc588103c90bac38abe4948e190fb604cba4b00312f002b9fa9b0623073de69622f85492de60d05dae395d80710fef937cd4856ee6777ec3bf5a38e79f9d35b7469b70edd4d0470eec253ffd88c5ee5918b437afdfdf497091abdb0bb43c983f7a38f3b9c93c4f4c07de69512fb054223607970f2167734e63dff64bf06c96ee", 0x8f}], 0x4, &(0x7f0000000400), 0x0, 0x4001}, {0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x218}], 0x2, 0x20048080)
sendfile(r6, r5, 0x0, 0x5)
ioctl$FS_IOC_GETFSUUID(r6, 0x80111500, &(0x7f00000002c0))
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000000050005000200000005000100070000000500040003000000090002009e5acbd473797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x34, 0x6, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x8000)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r9, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x58}}, 0x0)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={0xa0, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x74, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x76edac37}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x378}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x6, 0x1a, ':\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x4000050)
socket$nl_netfilter(0x10, 0x3, 0xc)

152.81484ms ago: executing program 1 (id=1330):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x2, 0x0, {{@in6=@empty, @in6=@mcast2, 0x1, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x400000000}, 0x400, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000001070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000090"], 0x140}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x28030}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r4, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x50, r4, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x365}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x29c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xff}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_BSS_BASIC_RATES={0xb, 0x24, [{}, {0x24}, {0x6, 0x1}, {0xb}, {0x36}, {0x36}, {0x36}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)={0x20, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x82}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x480}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x440c0}, 0x44012)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0xffe, 0x0, 0xfffffffd}, 0x10)
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r8, 0x118, 0x1, &(0x7f0000000b00)=0xffff7fff, 0x4)
write(r6, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r6, 0x8040942d, &(0x7f00000000c0))

83.51191ms ago: executing program 1 (id=1331):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0)
sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x100, 0x70bd28, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40010)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r3, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0xc000)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0))
r4 = socket(0x1, 0x6, 0x200)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
shutdown(r5, 0x0)
clock_gettime(0x0, &(0x7f0000000340)={<r6=>0x0, <r7=>0x0})
recvmmsg(r2, &(0x7f0000000300), 0x0, 0x40, &(0x7f0000000380)={r6, r7+60000000})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x7c, r3, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x9d7}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x18, 0xcd, [0x0, 0x5, 0xab42, 0x3, 0x8, 0x400, 0x1, 0x0, 0x5, 0x3]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x6, 0x80, 0x4f9, 0x7, 0xc00]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x16, 0xcd, [0x1, 0x4681, 0x3, 0x2, 0x6, 0xdb, 0x5, 0x6, 0x3]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x425}]]}, 0x7c}, 0x1, 0x0, 0x0, 0x4815}, 0x8010)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000540)={0x6, 0x208, 0x9, 0xb}, &(0x7f0000000580)=0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000005c0)={'team0\x00', <r9=>0x0})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0x1, <r10=>0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x8, 0x0, 0x4, 0x5, 0x102, r10, 0x0, '\x00', r9, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x50)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x7}, 0x8)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r4)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r12, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r13, 0x500, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7c}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44040}, 0x20040090)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r12, 0x0, 0x79, 0xfa, &(0x7f00000008c0)="ec6428666b1586c06b27ae0490bd417b02c7216fd24f49a7d2729d76501c8b06a1a9e653c3db58550e82dee372c6072360da71ea6e10c23a91871f7d4afe3aa241930d713514d9739c09217929cf16082890b8b637cb5bb8e552e4d0bc37d3e4c8f3713cac56d94befe426e7af814968b93b89b9b17f0b7d93", &(0x7f0000000940)=""/250, 0x1, 0x0, 0x78, 0x77, &(0x7f0000000a40)="9f7f58f5a0c7b68f1d17a48a74a4789076d8d7a7900aa82d5be9b6813d179e149e26ff8af0138252a51d3a48a8251c2ae02fa395cb1a5680ecf12757da43eb779545d2e9c7134c8e6a3e64f5714d49268ba1c1c8310a8ef872a8cf719648c970a4c8c7e3b2357b2fb9eccb5a42a6d0459c72125d61f23664", &(0x7f0000000ac0)="521b98a984ab3f9491c2b9d93a9c83241290d08d8875e34f09f32eb97363b8ed1f2feaf550101ffdb64e3525168e76731546a86516ba631f2dd2ce0bfd9584b6bf22bf4ec338ccb612aaa2953e02cad90d748dcc1123cca9e42bd3b7f1d73d2073c92d9f3c1b4ee228435531507ae1f018b19d4efe19d3", 0x4, 0x0, 0x4}, 0x50)
sendmsg$NL80211_CMD_GET_COALESCE(r12, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r13, 0x0, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004020}, 0x4000890)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r10, 0xf517, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000011c0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001180)={&(0x7f0000000d00)={0x458, r13, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x511, 0x2f}}}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x50, 0x84, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="63f3288dab93"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="71353dfcd947"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}]}]}, @NL80211_ATTR_SCAN_SSIDS={0xa8, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0x1f, 0x0, @random="a2adf3c8a7d1ab38324338ebaec17ac2ce3d5d491b84d47e152d0f"}, {0xa, 0x0, @default_ap_ssid}, {0x9, 0x0, @random="44c096dcaa"}, {0x1c, 0x0, @random="93a6cc33d12b0dd9ac4a4fdbf86e958f7a01762813690125"}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x13, 0x0, @random="8f97ac9ae9f44489a222168ab99541"}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x2d0, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x96, 0x3, "55c5da73043bec529065b352f17b501923fcef8e66fc818f306a88781ce1f7db2387612a17cd42469809c6e6746fb5ae866be15f2e0b22e7c020cb821f14acb39f1f713e05e122fe7a631e2ec1e46cbb5147e7589089d360a92df865be029a202022cee0fa2c83fec672d480c6e229d68b1071594bbc7067a8b10105f9982da15b330743c947f33043ceb38a2ef9376ec4fa"}, @NL80211_BAND_6GHZ={0xe3, 0x3, "373e845f1c29466de8a7fb4c7341ec16e559b26acbd45ed1940435af1f7d50b7c7c4f46cbc1ddbaa9563e7b080dd8ef21c4882ea0e7f92d9bb2374727d6ea210bf2a6ef3808c74286ea02b98eee555202aa1ed877879f8515e279a765e2b5b55a5cefe2c2b294c9a88a7b01ccc6adc399a8673074ca10bc7b74f8ea573c89c9748cc87f5fd3cfe4dc435def060d5d3bb179b0a02b965d93c4c458189562a4c55703deab00a1fa422505a5f76919dcf65ce8da584c26fc3a04877b09acef67f524d02bf222bbf6fbf26336e4e485d0165af86c5b54a0a5695f9d5564c194d97"}, @NL80211_BAND_60GHZ={0x1a, 0x2, "457e9e67da1f7fc5e3466b1d9b5aa39c668fe7fcded5"}, @NL80211_BAND_6GHZ={0x56, 0x3, "dc0be138c88a3092e4be3edfd9af41999b32adedc8bc9c2aa4d67eea4633a7fa8ee27421d932cf07d2000ff643d0d06952dd9d81abdbbfb3bf59d85b126603eac0e50d8a3396b3e027534e152a616ab791d6"}, @NL80211_BAND_2GHZ={0xda, 0x0, "301bed662b429f3baf766c9ca589b7e5917f7e2cb64bd85e336e42ecc106f73de36e4f25ab0970e067b94433597ab812072b861308571699bff59b5eff62c435e7dd06c31c0abe402d71e9e0ef2120cce3f21c724a6ed5f89353756a9f60225963d11cd3a5bdc924e51415085c01196523eab5d6ba490fb70054b09d7cd992bb16c2d54bcaec32cf37ffe19641e67a1d5a006d195b9330dc172fa2c7cbf4050a493a4e8be7ca068ce91d79b748192f066d1ddaab5bf46eaf700acdc6a483dc78793c4fc7b339586e9200f1b088e9dcbff985d1ab6e44"}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x2c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x1}, {0x8, 0x0, 0x8001}, {0x8, 0x0, 0x6e}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x80000000}]}, @NL80211_ATTR_SCAN_SSIDS={0x34, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xb, 0x0, @random="bc1b409ffc7c6d"}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x7}]}, 0x458}, 0x1, 0x0, 0x0, 0x10}, 0x1)
socket(0x26, 0x1, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001240)=@generic={&(0x7f0000001200)='./file0\x00', r11}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)

82.466096ms ago: executing program 1 (id=1332):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_newaddr={0x28, 0x14, 0x9535393fea6295b5, 0x70bd2c, 0x0, {0xa, 0x78, 0x0, 0xc8, r2}, [@IFA_CACHEINFO={0x0, 0x6, {0x8, 0x0, 0x8, 0x400}}, @IFA_CACHEINFO={0x0, 0x6, {0x3, 0xfffffff7, 0x1, 0x5}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x818) (async)
r3 = socket(0x10, 0x803, 0x0) (async)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
r6 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) (async)
connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r6, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{}, &(0x7f0000000040), 0x0}, 0x20) (async)
bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) (async)
r7 = openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, 0x0)
r8 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async)
sendmmsg$inet(r8, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) (async)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) (async)
socket(0x840000000002, 0x1, 0xff)
socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x0, 0x0, 0xc8, r5}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x208}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x100000000, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) (async)
r10 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000500)={'tunl0\x00', <r11=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x3, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x16}}]}}}]}, 0x3c}, 0x1, 0x2}, 0x0)

2.978052ms ago: executing program 1 (id=1333):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030c00000000070000000000000200090010000000e925000000000000030006000000000002000000000000000000000000000000020001000000000000fd000300000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x1, @mcast1, 0x400}]}, &(0x7f0000000080)=0x10)
getpeername$packet(r1, 0x0, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socket(0x11, 0x3, 0x3a)
r4 = socket$igmp(0x2, 0x3, 0x2)
sendmmsg$inet(r4, &(0x7f00000053c0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000001c0), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="5800000000000000000000000700000086160000000305105ddb38a892a795d64cf2b1cded95820c0cac63d30adc5d6505a0892308e4ffffffab1414bbac14013b0000000064010101e0000002ffffffffac14143800000014000000000000000000002f0005d1"], 0x70}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4)
socket$kcm(0x10, 0x0, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="b36297232100210189f1dca18a4fd9e3b530f05305000000000c00180032cdd30e012e10f49ed74d7d5382e4eeb6b337b65315fe6c567aa56abe789a267b4ed99c91f19e06a73c3620b4f3d94a8480cd1a2375ca3b3575e1fcc5c7d004b4a4da761325373a5a869fa9bfaa54134bce28e428971aa05d9e4c367e3c3c6727ead8970ea811e1b2bda660cc4e7ff3c84f8d35d2c671d255c0e60dbbc551ddb4e0d4c47889cdfe45ae690658b6610f217c9c3871759a32f30665b9426f6c90ad2b11b66bcdc7cbbdf63672789747aba50140550b161daca28b75a9cd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x28}}, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000280)={r3, r3, 0x1, 0x2, &(0x7f00000000c0)='\x00\x00', 0x9, 0x1, 0x16bf, 0x5505, 0xc3b8, 0x1, 0x0, 'syz0\x00'})
socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r5 = socket$inet(0xa, 0x801, 0x84)
listen(r5, 0x8)
r6 = socket$inet(0xa, 0x801, 0x84)
listen(r6, 0xfffffffd)
r7 = socket$inet(0xa, 0x801, 0x84)
listen(r7, 0x8)
r8 = socket$inet(0xa, 0x801, 0x84)
listen(r8, 0x8)
r9 = socket$inet6(0xa, 0x1, 0x8010000000000084)
listen(r9, 0x7)
socket$inet6_sctp(0xa, 0x1, 0x84)

1.416402ms ago: executing program 0 (id=1334):
r0 = socket$kcm(0x2d, 0x2, 0x0)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x208000}, 0xc, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40041)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00070000000000d41f9ab90001000600000000000000000000c4fc0000100000000000e2ffff1c004f03000600002008060000000000000024ce6e4ae300a5000003000500001e001e02"], 0x80}}, 0x4810)
r2 = socket$key(0xf, 0x3, 0x2)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x5)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7e}, {@private=0xa010102, 0x4e20, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44)
setsockopt$inet_int(r3, 0x0, 0x25, &(0x7f0000000080)=0x9, 0x4)
sendmmsg(r2, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0)

0s ago: executing program 0 (id=1335):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000c0008"], 0x178}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=ANY=[@ANYRES16=r0], 0xe0}], 0x1}, 0x0)
r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x20ffc000, 0x0, 0x13, r4, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2e8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002214000000110001"], 0xd8}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000200)="e460cdfbef2408002900119386dd", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x200c00ca)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:11510' (ED25519) to the list of known hosts.
syzkaller login: [   40.755987][ T5769] cgroup: Unknown subsys name 'net'
[   40.856937][ T5769] cgroup: Unknown subsys name 'cpuset'
[   40.860457][ T5769] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.844839][ T5769] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.621957][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.625205][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.627618][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.634630][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.637882][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.639489][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.643290][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.643330][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.646466][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.649578][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.655106][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.658274][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.661693][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.664250][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.669642][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.784846][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   46.866355][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   46.870147][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.872518][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.876106][ T5843] bridge_slave_0: entered allmulticast mode
[   46.879153][ T5843] bridge_slave_0: entered promiscuous mode
[   46.888591][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   46.892825][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.895875][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.898795][ T5843] bridge_slave_1: entered allmulticast mode
[   46.902001][ T5843] bridge_slave_1: entered promiscuous mode
[   46.934656][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.941695][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.981837][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.984575][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.986862][ T5842] bridge_slave_0: entered allmulticast mode
[   46.989233][ T5842] bridge_slave_0: entered promiscuous mode
[   46.993574][ T5843] team0: Port device team_slave_0 added
[   47.005668][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.008168][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.010795][ T5842] bridge_slave_1: entered allmulticast mode
[   47.014031][ T5842] bridge_slave_1: entered promiscuous mode
[   47.017695][ T5843] team0: Port device team_slave_1 added
[   47.020091][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.023024][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.025810][ T5851] bridge_slave_0: entered allmulticast mode
[   47.028321][ T5851] bridge_slave_0: entered promiscuous mode
[   47.058312][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.060654][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.062928][ T5851] bridge_slave_1: entered allmulticast mode
[   47.065679][ T5851] bridge_slave_1: entered promiscuous mode
[   47.069323][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.078265][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.080988][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.091009][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.096887][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.107261][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.109820][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.119440][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.134882][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.139371][ T5842] team0: Port device team_slave_0 added
[   47.146322][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.156098][ T5842] team0: Port device team_slave_1 added
[   47.173090][ T5851] team0: Port device team_slave_0 added
[   47.176668][ T5851] team0: Port device team_slave_1 added
[   47.194890][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.197106][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.205549][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.220882][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.223597][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.233853][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.242874][ T5843] hsr_slave_0: entered promiscuous mode
[   47.246146][ T5843] hsr_slave_1: entered promiscuous mode
[   47.249348][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.252193][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.262580][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.267256][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.269896][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.279189][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.311524][ T5842] hsr_slave_0: entered promiscuous mode
[   47.313798][ T5842] hsr_slave_1: entered promiscuous mode
[   47.317049][ T5842] debugfs: 'hsr0' already exists in 'hsr'
[   47.318850][ T5842] Cannot create hsr debugfs directory
[   47.355251][ T5851] hsr_slave_0: entered promiscuous mode
[   47.358155][ T5851] hsr_slave_1: entered promiscuous mode
[   47.360955][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   47.363200][ T5851] Cannot create hsr debugfs directory
[   47.506609][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.512694][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.518969][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.526148][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.548977][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.553541][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.558666][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.562848][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.588452][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.590775][ T5843] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.593157][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.595485][ T5843] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.602908][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.605513][ T5842] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.607931][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.610224][ T5842] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.620083][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.626135][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.632035][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.644640][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.685286][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.688022][ T5851] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.690665][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.693512][ T5851] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.709312][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.725944][   T29] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.728514][   T29] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.733652][   T29] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.737742][   T29] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.741351][   T29] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.745970][   T29] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.759527][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.765843][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   47.776027][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.778852][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.789482][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.792093][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.797285][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   47.807000][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.809786][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.820072][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.822655][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.840818][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.870213][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   47.883553][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.885776][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.893666][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.895967][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.930091][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.999130][ T5843] veth0_vlan: entered promiscuous mode
[   48.002941][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.016986][ T5843] veth1_vlan: entered promiscuous mode
[   48.047798][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.052626][ T5843] veth0_macvtap: entered promiscuous mode
[   48.058981][ T5843] veth1_macvtap: entered promiscuous mode
[   48.061989][ T5842] veth0_vlan: entered promiscuous mode
[   48.077734][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.082417][ T5842] veth1_vlan: entered promiscuous mode
[   48.090529][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.103904][ T5691] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.114541][ T5691] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.117609][ T5691] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.120675][ T5691] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.123524][ T5851] veth0_vlan: entered promiscuous mode
[   48.136264][ T5842] veth0_macvtap: entered promiscuous mode
[   48.141001][ T5851] veth1_vlan: entered promiscuous mode
[   48.149193][ T5842] veth1_macvtap: entered promiscuous mode
[   48.179423][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.186220][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.187464][ T5851] veth0_macvtap: entered promiscuous mode
[   48.189019][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.193131][ T5851] veth1_macvtap: entered promiscuous mode
[   48.209616][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.214731][ T1019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.217596][ T1019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.225943][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.228608][ T5874] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.231375][ T5874] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.245628][ T5874] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.249467][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.252057][ T5874] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.256137][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.274406][ T5874] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.282935][ T5874] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.293788][ T5874] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.295106][ T5910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   48.302933][ T5874] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.307536][ T5910] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'.
[   48.364292][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.367427][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.392444][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.393286][ T5912] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   48.397358][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.405557][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.408255][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.435550][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.438054][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.522993][ T5920] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[   48.657196][ T5916] syzkaller0: entered promiscuous mode
[   48.659429][ T5916] syzkaller0: entered allmulticast mode
[   48.717638][   T55] Bluetooth: hci1: command tx timeout
[   48.717677][ T5850] Bluetooth: hci2: command tx timeout
[   48.719418][   T55] Bluetooth: hci0: command tx timeout
[   48.791437][ T5937] syz.1.8 uses obsolete (PF_INET,SOCK_PACKET)
[   48.797432][ T5937] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8'.
[   48.801041][ T5937] unsupported nlmsg_type 40
[   48.923795][ T5957] netlink: 124 bytes leftover after parsing attributes in process `syz.0.14'.
[   48.992961][ T5966] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   49.123040][ T5979] netlink: 'syz.1.16': attribute type 1 has an invalid length.
[   49.173748][ T5982] syzkaller1: entered promiscuous mode
[   49.175810][ T5982] syzkaller1: entered allmulticast mode
[   49.362225][ T5996] netlink: 'syz.2.20': attribute type 2 has an invalid length.
[   49.368936][ T5996] k*]: entered promiscuous mode
[   49.388825][ T5996] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   49.406077][ T5996] veth0_to_team: entered promiscuous mode
[   49.408043][ T5996] veth0_to_team: entered allmulticast mode
[   49.411706][ T5996] Illegal XDP return value 16128 on prog  (id 5) dev syz_tun, expect packet loss!
[   49.428366][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19'.
[   49.621990][ T6018] netlink: 'syz.2.23': attribute type 1 has an invalid length.
[   49.683680][ T6024] netlink: 16 bytes leftover after parsing attributes in process `syz.2.24'.
[   49.707737][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25'.
[   50.200266][ T6031] netlink: 'syz.1.26': attribute type 10 has an invalid length.
[   50.217247][ T6031] team0: Port device dummy0 added
[   50.220076][ T6031] netlink: 'syz.1.26': attribute type 10 has an invalid length.
[   50.227812][ T6031] team0: Port device dummy0 removed
[   50.237884][ T6031] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   50.321469][ T6035] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.329807][ T6039] netlink: 24 bytes leftover after parsing attributes in process `syz.0.28'.
[   50.428358][ T6041] Zero length message leads to an empty skb
[   50.431265][ T6041] netlink: 20 bytes leftover after parsing attributes in process `syz.0.29'.
[   50.436356][ T6041] ip6tnl0: entered promiscuous mode
[   50.438575][ T6041] ip6tnl0: entered allmulticast mode
[   50.487060][ T6044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.30'.
[   50.561112][ T6045] pim6reg: entered allmulticast mode
[   50.570519][ T6045] pim6reg: left allmulticast mode
[   50.794204][ T5850] Bluetooth: hci2: command tx timeout
[   50.804266][ T5850] Bluetooth: hci0: command tx timeout
[   50.806420][ T5850] Bluetooth: hci1: command tx timeout
[   50.911354][ T6064] openvswitch: netlink: Multiple metadata blocks provided
[   50.950611][ T6066] warning: `syz.0.35' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   51.779663][   T47] cfg80211: failed to load regulatory.db
[   51.896302][ T6073] veth0_macvtap: left promiscuous mode
[   51.918623][ T6035] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.923751][ T6084] netlink: 'syz.1.41': attribute type 29 has an invalid length.
[   51.930031][ T6084] netlink: 'syz.1.41': attribute type 29 has an invalid length.
[   51.939844][ T6084] unsupported nla_type 58
[   51.981294][ T6035] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.014339][ T6092] netlink: 'syz.1.44': attribute type 10 has an invalid length.
[   52.019486][ T6092] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   52.045348][ T6035] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.098437][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.101608][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.110267][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.120377][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   52.267737][ T6109] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   52.302850][ T6113] netlink: 'syz.1.51': attribute type 1 has an invalid length.
[   52.325634][ T6115] trusted_key: syz.0.52 sent an empty control message without MSG_MORE.
[   52.479581][ T6134] netlink: 'syz.2.57': attribute type 4 has an invalid length.
[   52.875510][ T5848] Bluetooth: hci1: command tx timeout
[   52.876237][ T5850] Bluetooth: hci0: command tx timeout
[   52.877730][ T5848] Bluetooth: hci2: command tx timeout
[   52.886086][ T6185] 8021q: adding VLAN 0 to HW filter on device bond1
[   52.889124][ T6183] veth1_macvtap: left promiscuous mode
[   52.956447][ T6197] vxcan1: entered allmulticast mode
[   52.961092][ T6197] vxcan1: left allmulticast mode
[   53.028130][ T6203] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.030295][ T6197] raw_sendmsg: syz.0.71 forgot to set AF_INET. Fix it!
[   53.102472][ T6203] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.189937][ T6203] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.352808][ T6203] bond0: (slave netdevsim0): Releasing backup interface
[   53.407691][ T6203] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.512658][ T6276] tipc: Can't bind to reserved service type 2
[   53.527607][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   53.534420][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   53.541537][ T6278] __nla_validate_parse: 22 callbacks suppressed
[   53.541549][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.79'.
[   53.550042][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   53.553359][ T6278] netlink: 620 bytes leftover after parsing attributes in process `syz.0.79'.
[   53.559704][ T6278] netlink: 68 bytes leftover after parsing attributes in process `syz.0.79'.
[   53.563855][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.662664][ T6288] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.707761][ T6288] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.732639][ T6294] netlink: 24 bytes leftover after parsing attributes in process `syz.1.82'.
[   53.739282][ T6296] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   53.743372][ T6297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.85'.
[   53.771665][ T6288] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.859514][ T6288] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.947608][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.88'.
[   54.212838][ T6318] netlink: 60 bytes leftover after parsing attributes in process `syz.0.91'.
[   54.219841][ T6318] validate_nla: 2 callbacks suppressed
[   54.219915][ T6318] netlink: 'syz.0.91': attribute type 1 has an invalid length.
[   54.238308][ T6318] 8021q: adding VLAN 0 to HW filter on device bond1
[   54.248985][ T6318] bond1: (slave geneve2): making interface the new active one
[   54.252424][ T6318] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   54.357540][ T6330] vxcan1: entered allmulticast mode
[   54.359978][ T6330] vxcan1: left allmulticast mode
[   54.449133][ T6333] netlink: 124 bytes leftover after parsing attributes in process `syz.0.96'.
[   54.522965][ T6339] !: renamed from dummy0 (while UP)
[   54.583134][ T6344] netlink: 56 bytes leftover after parsing attributes in process `syz.0.98'.
[   54.954754][   T55] Bluetooth: hci1: command tx timeout
[   54.954794][ T5850] Bluetooth: hci2: command tx timeout
[   54.956786][ T5848] Bluetooth: hci0: command tx timeout
[   55.442613][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.99'.
[   55.876261][ T6469] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.920909][ T6469] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.972440][ T6469] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.030161][ T6469] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.112529][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.121777][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.128792][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.137984][ T5691] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.187909][ T6474] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.228887][ T6474] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.297060][ T6474] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   56.337288][ T6474] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.107955][ T5874] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.115852][ T5874] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.123542][ T5874] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.133132][ T5874] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.474470][ T6542] syzkaller1: entered promiscuous mode
[   57.480108][ T6542] syzkaller1: entered allmulticast mode
[   57.667343][ T6553] sctp: [Deprecated]: syz.1.124 (pid 6553) Use of int in maxseg socket option.
[   57.667343][ T6553] Use struct sctp_assoc_value instead
[   58.644680][ T6566] nbd0: detected capacity change from 0 to 549764202496
[   58.676318][ T6573] __nla_validate_parse: 8 callbacks suppressed
[   58.676331][ T6573] netlink: 3 bytes leftover after parsing attributes in process `syz.2.131'.
[   58.687208][ T6573] batadv1: entered promiscuous mode
[   58.689359][ T6573] batadv1: entered allmulticast mode
[   58.922290][ T6579] netlink: 277 bytes leftover after parsing attributes in process `syz.2.132'.
[   59.036248][ T6581] netlink: 'syz.2.133': attribute type 1 has an invalid length.
[   59.049806][ T6581] bond1: entered promiscuous mode
[   59.051961][ T6581] 8021q: adding VLAN 0 to HW filter on device bond1
[   59.062610][ T6581] 8021q: adding VLAN 0 to HW filter on device bond1
[   59.065669][ T6581] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   59.069417][ T6581] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode
[   59.075611][ T6581] bond1: (slave vxcan3): making interface the new active one
[   59.077994][ T6581] vxcan3: entered promiscuous mode
[   59.080780][ T6581] bond1: (slave vxcan3): Enslaving as an active interface with an up link
[   59.398046][   T57] block nbd0: Receive control failed (result -104)
[   59.781870][ T6595] netlink: 'syz.2.137': attribute type 1 has an invalid length.
[   59.793243][ T6595] 8021q: adding VLAN 0 to HW filter on device bond2
[   59.802383][ T6595] bond2: (slave geneve2): making interface the new active one
[   59.806143][ T6595] bond2: (slave geneve2): Enslaving as an active interface with an up link
[   59.811317][ T6595] bond2: entered promiscuous mode
[   59.812986][ T6595] geneve2: entered promiscuous mode
[   59.920492][ T5691] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   59.929048][ T6606] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   59.937349][ T6606] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   59.945461][ T6606] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   59.998075][ T6612] netlink: 28 bytes leftover after parsing attributes in process `syz.0.142'.
[   60.028879][ T6615] netlink: 64 bytes leftover after parsing attributes in process `syz.0.143'.
[   60.076475][ T6620] tipc: Failed to remove unknown binding: 66,1,1/0:2694841465/2694841468
[   60.080365][ T6621] tipc: Failed to remove unknown binding: 66,1,1/0:2694841465/2694841468
[   60.085847][ T6620] tipc: Failed to remove unknown binding: 66,1,1/0:2694841465/2694841468
[   60.089251][ T6620] tipc: Failed to remove unknown binding: 66,1,1/0:2694841465/2694841468
[   60.096865][ T6620] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.137008][ T6620] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.177074][ T6620] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.217159][ T6620] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.339657][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.146'.
[   60.342520][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.146'.
[   60.439019][ T6637] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.470177][ T6637] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.508755][ T6637] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.559208][ T6637] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.663325][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.672008][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.681645][ T6606] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.691905][ T6606] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.823133][ T6641] netlink: 'syz.2.152': attribute type 1 has an invalid length.
[   60.841436][ T6641] 8021q: adding VLAN 0 to HW filter on device bond3
[   60.853291][ T6641] bond3: (slave geneve3): making interface the new active one
[   60.858332][ T6641] bond3: (slave geneve3): Enslaving as an active interface with an up link
[   60.877499][ T6641] syz.2.152 (6641) used greatest stack depth: 18128 bytes left
[   61.046100][ T6652] netlink: 40 bytes leftover after parsing attributes in process `syz.2.156'.
[   61.130396][ T6656] netlink: 24 bytes leftover after parsing attributes in process `syz.2.158'.
[   61.240945][ T6660] netlink: 'syz.2.160': attribute type 10 has an invalid length.
[   61.429963][ T6663] syz_tun: entered allmulticast mode
[   61.480539][ T6665] netlink: 24 bytes leftover after parsing attributes in process `syz.1.162'.
[   61.507399][ T6666] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   61.519220][ T6666] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   61.587278][ T6666] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.589776][ T6666] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.639474][ T6666] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   61.656177][ T6670] netlink: 'syz.1.164': attribute type 1 has an invalid length.
[   61.671255][ T6670] 8021q: adding VLAN 0 to HW filter on device bond2
[   61.675348][ T6662] syz_tun: left allmulticast mode
[   61.711192][ T6676] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.718329][ T6674] netlink: 'syz.2.166': attribute type 29 has an invalid length.
[   61.721587][ T6674] netlink: 'syz.2.166': attribute type 29 has an invalid length.
[   61.749114][ T6676] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.756810][ T6681] bridge0: port 3(erspan0) entered blocking state
[   61.759029][ T6681] bridge0: port 3(erspan0) entered disabled state
[   61.761249][ T6681] erspan0: entered allmulticast mode
[   61.763605][ T6681] erspan0: entered promiscuous mode
[   61.768290][ T6681] erspan0: left allmulticast mode
[   61.770405][ T6681] erspan0: left promiscuous mode
[   61.772517][ T6681] bridge0: port 3(erspan0) entered disabled state
[   61.796121][ T6676] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.860767][ T6676] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.988010][ T2281] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   61.991094][ T2281] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   62.014721][ T2281] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   62.362135][ T6738] netlink: 'syz.2.173': attribute type 2 has an invalid length.
[   62.373102][ T6738] : entered promiscuous mode
[   62.384437][ T6738] netlink: 'syz.2.173': attribute type 2 has an invalid length.
[   62.387377][ T6738] netlink: 'syz.2.173': attribute type 2 has an invalid length.
[   62.390649][ T6738] netlink: 'syz.2.173': attribute type 2 has an invalid length.
[   62.588495][ T6751] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.637265][ T6751] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.677528][ T6751] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.717377][ T6751] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.773778][ T5691] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.779793][ T5691] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.785675][ T5691] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.792191][ T5691] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.798076][ T6752] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.857282][ T6752] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.898580][ T6752] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.948324][ T6752] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   63.825734][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.833242][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.842584][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.850912][ T6606] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.881453][ T6754] bridge0: port 3(erspan0) entered blocking state
[   63.884184][ T6754] bridge0: port 3(erspan0) entered disabled state
[   63.886519][ T6754] erspan0: entered allmulticast mode
[   63.888783][ T6754] erspan0: entered promiscuous mode
[   63.890818][ T6754] bridge0: port 3(erspan0) entered blocking state
[   63.892930][ T6754] bridge0: port 3(erspan0) entered forwarding state
[   63.898757][ T6754] erspan0: left allmulticast mode
[   63.900517][ T6754] erspan0: left promiscuous mode
[   63.902292][ T6754] bridge0: port 3(erspan0) entered disabled state
[   63.953020][ T6758] netlink: 100 bytes leftover after parsing attributes in process `syz.0.180'.
[   63.963115][ T6758] macsec0: entered promiscuous mode
[   63.965802][ T6758] macsec0: entered allmulticast mode
[   63.992883][ T6763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.181'.
[   63.996850][ T6763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.181'.
[   64.206545][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.212089][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.220668][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.227022][ T6780] netlink: 32 bytes leftover after parsing attributes in process `syz.0.185'.
[   64.230792][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.396497][ T6793] bridge_slave_0: left allmulticast mode
[   64.398944][ T6793] bridge_slave_0: left promiscuous mode
[   64.401449][ T6793] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.409095][ T6793] bridge_slave_1: left allmulticast mode
[   64.411641][ T6793] bridge_slave_1: left promiscuous mode
[   64.414004][ T6793] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.422555][ T6793] bond0: (slave bond_slave_0): Releasing backup interface
[   64.429567][ T6793] bond0: (slave bond_slave_1): Releasing backup interface
[   64.437496][ T6793] team0: Port device team_slave_0 removed
[   64.441284][ T6793] team0: Port device team_slave_1 removed
[   64.443713][ T6793] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.447295][ T6793] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.450497][ T6793] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.453459][ T6793] batman_adv: batadv0: Removing interface: batadv_slave_1
[   64.460179][ T6793] bond1: (slave geneve2): Releasing active interface
[   64.655138][ T6812] netlink: 68 bytes leftover after parsing attributes in process `syz.0.194'.
[   64.685966][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.195'.
[   64.689414][ T6814] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   64.691885][ T6814] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   64.766748][ T6820] netlink: 124 bytes leftover after parsing attributes in process `syz.0.197'.
[   64.860825][ T6832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.200'.
[   65.061549][ T6842] netlink: 20 bytes leftover after parsing attributes in process `syz.0.205'.
[   65.227876][ T6850] 8021q: adding VLAN 0 to HW filter on device bond2
[   65.319025][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.212'.
[   65.399230][ T6864] Bluetooth: MGMT ver 1.23
[   65.403129][ T6864] Bluetooth: MGMT ver 1.23
[   65.403856][ T6850] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   65.409381][ T6850] bond2: (slave macvlan2): Enslaving as a backup interface with a down link
[   65.436929][ T6850] bond2: (slave macvlan2): Releasing backup interface
[   65.464930][ T6606] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.473610][ T6606] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.485488][ T6850] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.489946][ T6606] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.499690][ T6606] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.512906][ T6850] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.567806][ T6850] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.618070][ T6850] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.190324][ T6900] validate_nla: 51 callbacks suppressed
[   66.190341][ T6900] netlink: 'syz.1.224': attribute type 1 has an invalid length.
[   66.197212][ T6901] netlink: 'syz.1.224': attribute type 1 has an invalid length.
[   66.202478][  T793] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[   66.214238][  T793] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0
[   66.223796][  T793] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   66.583650][ T6933] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.640629][ T6933] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.698314][ T6933] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.747849][ T6933] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.203205][ T6941] Bluetooth: MGMT ver 1.23
[   67.430841][ T6947] netlink: 'syz.1.234': attribute type 10 has an invalid length.
[   67.437843][ T6947] bond0: (slave dummy0): Releasing backup interface
[   67.443073][ T6947] team0: Port device dummy0 added
[   67.448547][ T6947] netlink: 'syz.1.234': attribute type 10 has an invalid length.
[   67.453945][ T6947] team0: Port device dummy0 removed
[   67.457713][ T6947] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   67.740329][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.749118][ T6606] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.757130][ T6606] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.766350][ T6606] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.196250][ T6606] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.203289][ T6606] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.210717][ T6606] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.219865][ T6606] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.300907][ T6964] netlink: 'syz.1.239': attribute type 1 has an invalid length.
[   68.322342][ T6964] 8021q: adding VLAN 0 to HW filter on device bond3
[   68.327020][ T6964] netlink: 'syz.1.239': attribute type 1 has an invalid length.
[   68.331186][ T6964] netlink: 'syz.1.239': attribute type 1 has an invalid length.
[   68.337394][ T6964] netlink: 'syz.1.239': attribute type 1 has an invalid length.
[   68.346882][ T6964] netlink: 'syz.1.239': attribute type 1 has an invalid length.
[   68.356909][ T6964] netlink: 'syz.1.239': attribute type 1 has an invalid length.
[   68.425766][  T793] hid-generic 0005:16BF:5505.0003: unknown main item tag 0x0
[   68.429971][  T793] hid-generic 0005:16BF:5505.0003: unknown main item tag 0x0
[   68.436593][  T793] hid-generic 0005:16BF:5505.0003: hidraw0: BLUETOOTH HID vc3.b8 Device [syz1] on aa:aa:aa:aa:aa:aa
[   68.740641][ T7005] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.821737][ T7025] __nla_validate_parse: 19 callbacks suppressed
[   69.821756][ T7025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.253'.
[   69.883460][ T7036] netlink: 76 bytes leftover after parsing attributes in process `syz.2.255'.
[   69.970523][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880398f6400: rx timeout, send abort
[   69.973802][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880398f5400: rx timeout, send abort
[   69.977546][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880398f6400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   69.983056][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880398f5400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   70.049126][ T7045] netlink: 104 bytes leftover after parsing attributes in process `syz.1.259'.
[   70.108005][ T7048] netem: change failed
[   70.183700][ T7056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.262'.
[   70.202942][ T7056] 8021q: adding VLAN 0 to HW filter on device bond4
[   70.257065][ T7065] : renamed from wg2 (while UP)
[   70.262855][ T7065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.264'.
[   70.271046][ T7064] delete_channel: no stack
[   70.352115][ T7071] tipc: Started in network mode
[   70.353805][ T7071] tipc: Node identity ba0ae17e1e8d, cluster identity 4711
[   70.356643][ T7071] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.427841][ T7070] tipc: Disabling bearer <eth:syzkaller0>
[   70.562271][ T7088] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.565387][ T7088] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.600967][ T7088] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.606028][ T7088] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.648079][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.651872][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.657259][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.660992][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.693293][ T7090] netlink: 284 bytes leftover after parsing attributes in process `syz.1.270'.
[   71.109642][ T7104] netlink: 60 bytes leftover after parsing attributes in process `syz.0.276'.
[   71.126207][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.298076][ T7120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.281'.
[   71.301174][ T7121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.281'.
[   71.361905][ T7121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.281'.
[   71.452407][ T7124] validate_nla: 5 callbacks suppressed
[   71.452480][ T7124] netlink: 'syz.2.282': attribute type 10 has an invalid length.
[   71.458969][ T7124] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   71.598745][   T34] audit: type=1800 audit(1756468910.824:2): pid=7125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.282" name="memory.events" dev="tmpfs" ino=435 res=0 errno=0
[   71.713112][ T7131] pim6reg: entered allmulticast mode
[   71.717139][ T7131] pim6reg: left allmulticast mode
[   72.151357][ T7139] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   72.160481][ T7139] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   72.210204][   T34] audit: type=1800 audit(1756468911.434:3): pid=7142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.287" name=CB dev="tmpfs" ino=480 res=0 errno=0
[   72.651462][ T7188] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   72.799204][ T7210] netlink: 'syz.2.301': attribute type 6 has an invalid length.
[   72.858095][ T7218] netlink: 'syz.2.304': attribute type 41 has an invalid length.
[   73.081698][ T7242] netlink: 'syz.2.310': attribute type 1 has an invalid length.
[   73.089684][ T7242] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   73.090895][ T7244] tipc: New replicast peer: 255.255.255.255
[   73.099667][ T7244] tipc: Enabled bearer <udp:syz2>, priority 10
[   73.221868][ T7257] syz.2.316: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   73.232764][ T7257] CPU: 1 UID: 0 PID: 7257 Comm: syz.2.316 Not tainted syzkaller #0 PREEMPT(full) 
[   73.232778][ T7257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   73.232784][ T7257] Call Trace:
[   73.232803][ T7257]  <TASK>
[   73.232809][ T7257]  dump_stack_lvl+0x189/0x250
[   73.232828][ T7257]  ? __pfx_dump_stack_lvl+0x10/0x10
[   73.232837][ T7257]  ? __pfx__printk+0x10/0x10
[   73.232847][ T7257]  ? lock_release+0x4b/0x3e0
[   73.232866][ T7257]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   73.232876][ T7257]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   73.232884][ T7257]  warn_alloc+0x214/0x310
[   73.232900][ T7257]  ? __pfx_warn_alloc+0x10/0x10
[   73.232911][ T7257]  ? __get_vm_area_node+0x28f/0x300
[   73.232922][ T7257]  ? fq_pie_init+0x430/0x840
[   73.232934][ T7257]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   73.232951][ T7257]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   73.232962][ T7257]  ? rcu_is_watching+0x15/0xb0
[   73.232971][ T7257]  ? fq_pie_init+0x430/0x840
[   73.232980][ T7257]  ? fq_pie_init+0x430/0x840
[   73.232988][ T7257]  __kvmalloc_node_noprof+0x3b8/0x5f0
[   73.233000][ T7257]  ? fq_pie_init+0x430/0x840
[   73.233008][ T7257]  ? tcf_block_get+0x67/0xa0
[   73.233020][ T7257]  ? __pfx_tcf_chain_head_change_dflt+0x10/0x10
[   73.233032][ T7257]  fq_pie_init+0x430/0x840
[   73.233041][ T7257]  ? __pfx_fq_pie_init+0x10/0x10
[   73.233050][ T7257]  qdisc_create+0x7ac/0xea0
[   73.233061][ T7257]  tc_modify_qdisc+0x1538/0x20e0
[   73.233073][ T7257]  ? __pfx_tc_modify_qdisc+0x10/0x10
[   73.233086][ T7257]  ? lock_release+0x4b/0x3e0
[   73.233095][ T7257]  ? bpf_lsm_capable+0x9/0x20
[   73.233108][ T7257]  ? security_capable+0x7e/0x2e0
[   73.233121][ T7257]  ? __pfx_tc_modify_qdisc+0x10/0x10
[   73.233129][ T7257]  rtnetlink_rcv_msg+0x77c/0xb70
[   73.233143][ T7257]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[   73.233153][ T7257]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   73.233163][ T7257]  ? __netlink_lookup+0xbd/0x810
[   73.233171][ T7257]  ? rcu_is_watching+0x15/0xb0
[   73.233178][ T7257]  ? rcu_is_watching+0x15/0xb0
[   73.233186][ T7257]  netlink_rcv_skb+0x208/0x470
[   73.233198][ T7257]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   73.233209][ T7257]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   73.233223][ T7257]  netlink_unicast+0x82f/0x9e0
[   73.233234][ T7257]  ? __pfx_netlink_unicast+0x10/0x10
[   73.233243][ T7257]  ? netlink_sendmsg+0x642/0xb30
[   73.233249][ T7257]  ? skb_put+0x11b/0x210
[   73.233258][ T7257]  netlink_sendmsg+0x805/0xb30
[   73.233266][ T7257]  ? __pfx_netlink_sendmsg+0x10/0x10
[   73.233273][ T7257]  ? futex_unqueue+0x22/0x240
[   73.233281][ T7257]  ? aa_sock_msg_perm+0xf1/0x1d0
[   73.233289][ T7257]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   73.233297][ T7257]  ? __pfx_netlink_sendmsg+0x10/0x10
[   73.233304][ T7257]  __sock_sendmsg+0x21c/0x270
[   73.233317][ T7257]  ____sys_sendmsg+0x505/0x830
[   73.233325][ T7257]  ? __pfx_____sys_sendmsg+0x10/0x10
[   73.233334][ T7257]  ? import_iovec+0x74/0xa0
[   73.233345][ T7257]  ___sys_sendmsg+0x21f/0x2a0
[   73.233352][ T7257]  ? __pfx____sys_sendmsg+0x10/0x10
[   73.233361][ T7257]  ? futex_wait+0x285/0x360
[   73.233377][ T7257]  ? __fget_files+0x2a/0x420
[   73.233384][ T7257]  ? __fget_files+0x3a0/0x420
[   73.233391][ T7257]  __x64_sys_sendmsg+0x19b/0x260
[   73.233400][ T7257]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   73.233411][ T7257]  ? rcu_is_watching+0x15/0xb0
[   73.233418][ T7257]  do_syscall_64+0xfa/0x3b0
[   73.233428][ T7257]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.233435][ T7257]  ? exc_page_fault+0x9f/0xf0
[   73.233470][ T7257]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   73.233478][ T7257] RIP: 0033:0x7f00dc38ebe9
[   73.233487][ T7257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   73.233494][ T7257] RSP: 002b:00007f00dd23a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   73.233503][ T7257] RAX: ffffffffffffffda RBX: 00007f00dc5b5fa0 RCX: 00007f00dc38ebe9
[   73.233509][ T7257] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 0000000000000007
[   73.233514][ T7257] RBP: 00007f00dc411e19 R08: 0000000000000000 R09: 0000000000000000
[   73.233518][ T7257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   73.233523][ T7257] R13: 00007f00dc5b6038 R14: 00007f00dc5b5fa0 R15: 00007fff27185c88
[   73.233531][ T7257]  </TASK>
[   73.233535][ T7257] Mem-Info:
[   73.382413][ T7257] active_anon:17306 inactive_anon:0 isolated_anon:0
[   73.382413][ T7257]  active_file:1166 inactive_file:38216 isolated_file:0
[   73.382413][ T7257]  unevictable:1768 dirty:108 writeback:0
[   73.382413][ T7257]  slab_reclaimable:9853 slab_unreclaimable:52729
[   73.382413][ T7257]  mapped:18276 shmem:2450 pagetables:1036
[   73.382413][ T7257]  sec_pagetables:0 bounce:0
[   73.382413][ T7257]  kernel_misc_reclaimable:0
[   73.382413][ T7257]  free:284366 free_pcp:18538 free_cma:0
[   73.397763][ T7257] Node 0 active_anon:54848kB inactive_anon:0kB active_file:4144kB inactive_file:135208kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:46184kB dirty:336kB writeback:0kB shmem:5144kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5528kB pagetables:2536kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   73.408066][ T7257] Node 1 active_anon:14376kB inactive_anon:0kB active_file:520kB inactive_file:17656kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:26920kB dirty:96kB writeback:0kB shmem:4656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6916kB pagetables:1608kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   73.419285][ T7257] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   73.428206][ T7257] lowmem_reserve[]: 0 811 811 811 811
[   73.429918][ T7257] Node 0 DMA32 free:210428kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:54848kB inactive_anon:0kB active_file:4144kB inactive_file:135208kB unevictable:3536kB writepending:336kB present:1556484kB managed:830908kB mlocked:0kB bounce:0kB free_pcp:48164kB local_pcp:20564kB free_cma:0kB
[   73.441140][ T7257] lowmem_reserve[]: 0 0 0 0 0
[   73.443091][ T7257] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   73.452747][ T7257] lowmem_reserve[]: 0 0 854 854 854
[   73.454685][ T7257] Node 1 Normal free:453060kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14376kB inactive_anon:0kB active_file:520kB inactive_file:17656kB unevictable:3536kB writepending:96kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:25984kB local_pcp:10720kB free_cma:0kB
[   73.465081][ T7257] lowmem_reserve[]: 0 0 0 0 0
[   73.466930][ T7257] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   73.470919][ T7257] Node 0 DMA32: 119*4kB (UME) 322*8kB (UME) 193*16kB (UME) 18*32kB (ME) 165*64kB (UME) 55*128kB (UM) 27*256kB (UM) 6*512kB (UME) 0*1024kB 2*2048kB (UE) 42*4096kB (UM) = 210428kB
[   73.477676][ T7257] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[   73.482660][ T7257] Node 1 Normal: 1606*4kB (UM) 1161*8kB (UME) 864*16kB (UME) 31*32kB (UME) 164*64kB (UM) 51*128kB (UM) 16*256kB (UM) 14*512kB (UME) 5*1024kB (UM) 4*2048kB (UM) 93*4096kB (UM) = 453056kB
[   73.488913][ T7257] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   73.491994][ T7257] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   73.495563][ T7257] 41832 total pagecache pages
[   73.497123][ T7257] 0 pages in swap cache
[   73.498374][ T7257] Free swap  = 124996kB
[   73.499658][ T7257] Total swap = 124996kB
[   73.500947][ T7257] 786301 pages RAM
[   73.502088][ T7257] 0 pages HighMem/MovableOnly
[   73.503734][ T7257] 241342 pages reserved
[   73.506127][ T7257] 0 pages cma reserved
[   73.878253][ T7282] macsec0: left promiscuous mode
[   73.879800][ T7282] macsec0: left allmulticast mode
[   73.898223][ T5874] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.901099][ T5874] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.906896][ T5874] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.913287][ T7285] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.920273][ T5874] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   73.966990][ T7285] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.997765][ T7292] vxcan1: entered allmulticast mode
[   74.002262][ T7293] vxcan1: left allmulticast mode
[   74.017585][ T7285] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.058618][ T7285] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.094531][   T47] tipc: Node number set to 2760368510
[   74.101984][ T7300] nbd: must specify an index to disconnect
[   74.128486][ T7302] sctp: [Deprecated]: syz.0.327 (pid 7302) Use of int in max_burst socket option deprecated.
[   74.128486][ T7302] Use struct sctp_assoc_value instead
[   74.220598][ T6606] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.231588][ T5874] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.243093][ T6606] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.259089][ T6606] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.322880][ T7313] netlink: 'syz.2.332': attribute type 29 has an invalid length.
[   74.331058][ T7313] netlink: 'syz.2.332': attribute type 29 has an invalid length.
[   74.336190][ T7311] atomic_op ffff888029355998 conn xmit_atomic 0000000000000000
[   74.369396][ T7315] IPv6: Can't replace route, no match found
[   74.588047][ T7333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   74.593507][ T7333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   74.600463][ T7333] bond0 (unregistering): Released all slaves
[   76.110502][ T7346] __nla_validate_parse: 24 callbacks suppressed
[   76.110519][ T7346] netlink: 324 bytes leftover after parsing attributes in process `syz.1.342'.
[   76.225997][ T7361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.346'.
[   76.283480][ T7362] pim6reg: entered allmulticast mode
[   76.286726][ T7362] pim6reg: left allmulticast mode
[   76.722481][ T7373] netlink: 48 bytes leftover after parsing attributes in process `syz.1.350'.
[   76.798781][ T7374] netlink: 52 bytes leftover after parsing attributes in process `syz.1.350'.
[   77.529323][ T7387] netlink: 27 bytes leftover after parsing attributes in process `syz.2.355'.
[   77.551057][ T7389] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.601701][ T7390] netlink: 24 bytes leftover after parsing attributes in process `syz.2.356'.
[   77.616857][ T7393] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.357'.
[   77.639786][ T7389] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.706205][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.358'.
[   77.721637][ T7389] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.756717][ T7398] netlink: 116 bytes leftover after parsing attributes in process `syz.0.359'.
[   77.764782][ T7398] netlink: 41 bytes leftover after parsing attributes in process `syz.0.359'.
[   77.808683][ T7389] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.844842][ T7406] netlink: 'syz.0.361': attribute type 1 has an invalid length.
[   77.861529][ T7406] 8021q: adding VLAN 0 to HW filter on device bond3
[   77.921700][ T5691] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.932389][ T5691] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.954814][ T5691] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.015521][ T6606] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.169782][ T7453] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   78.199974][ T7455] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   78.266576][ T7463] pim6reg: entered allmulticast mode
[   78.276349][ T7463] pim6reg: left allmulticast mode
[   79.251867][ T7501] netlink: 'syz.0.390': attribute type 13 has an invalid length.
[   81.243755][ T7537] tipc: Started in network mode
[   81.245978][ T7537] tipc: Node identity 6ac767b43dd2, cluster identity 4711
[   81.249116][ T7537] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.252603][ T7537] syzkaller0: entered promiscuous mode
[   81.255097][ T7537] syzkaller0: entered allmulticast mode
[   81.259449][ T7536] tipc: Resetting bearer <eth:syzkaller0>
[   81.263740][ T7536] tipc: Disabling bearer <eth:syzkaller0>
[   81.301656][ T7540] __nla_validate_parse: 21 callbacks suppressed
[   81.301676][ T7540] netlink: 3 bytes leftover after parsing attributes in process `syz.2.402'.
[   81.310866][ T7540] batadv2: entered promiscuous mode
[   81.313019][ T7540] batadv2: entered allmulticast mode
[   81.461547][ T7546] syzkaller1: entered promiscuous mode
[   81.464492][ T7546] syzkaller1: entered allmulticast mode
[   81.676567][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.410'.
[   81.817302][ T7586] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.822139][ T7586] syzkaller0: entered promiscuous mode
[   81.823899][ T7586] syzkaller0: entered allmulticast mode
[   81.833091][ T7586] tipc: Resetting bearer <eth:syzkaller0>
[   81.847066][ T7586] tipc: Resetting bearer <eth:syzkaller0>
[   81.850318][ T7586] tipc: Disabling bearer <eth:syzkaller0>
[   82.083865][ T7595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.416'.
[   82.198742][ T7597] netlink: 56 bytes leftover after parsing attributes in process `syz.2.417'.
[   82.256046][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.417'.
[   82.275102][ T7598] netlink: 'syz.2.417': attribute type 10 has an invalid length.
[   82.281487][ T7598] team0: Port device dummy0 added
[   82.285418][ T7598] netlink: 'syz.2.417': attribute type 10 has an invalid length.
[   82.292632][ T7598] team0: Port device dummy0 removed
[   82.604001][ T7606] netlink: 277 bytes leftover after parsing attributes in process `syz.1.419'.
[   82.699761][ T5874] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   83.505968][ T7623] netlink: 'syz.1.423': attribute type 2 has an invalid length.
[   83.511604][ T7623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.423'.
[   83.518023][ T7623] veth0_to_team: entered promiscuous mode
[   83.519780][ T7623] veth0_to_team: entered allmulticast mode
[   83.697583][ T7645] netlink: 212296 bytes leftover after parsing attributes in process `syz.1.431'.
[   83.701595][ T7645] netlink: 132 bytes leftover after parsing attributes in process `syz.1.431'.
[   83.705813][ T7646] netlink: 132 bytes leftover after parsing attributes in process `syz.1.431'.
[   83.816075][ T7655] netlink: 'syz.1.434': attribute type 1 has an invalid length.
[   83.831930][ T7655] 8021q: adding VLAN 0 to HW filter on device bond5
[   84.121712][ T7679] netlink: 'syz.1.443': attribute type 1 has an invalid length.
[   84.870723][ T7683] netlink: 'syz.2.444': attribute type 4 has an invalid length.
[   84.953038][ T7700] netlink: 'syz.2.448': attribute type 1 has an invalid length.
[   84.988224][ T7702] syzkaller0: entered promiscuous mode
[   84.993479][ T7702] syzkaller0: entered allmulticast mode
[   85.230226][ T7753] sctp: [Deprecated]: syz.1.459 (pid 7753) Use of int in max_burst socket option.
[   85.230226][ T7753] Use struct sctp_assoc_value instead
[   85.289746][ T7759] netlink: 'syz.2.461': attribute type 21 has an invalid length.
[   85.349658][ T7767] netlink: 'syz.2.464': attribute type 1 has an invalid length.
[   85.385999][ T7773] !: renamed from dummy0
[   85.410505][ T7767] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.447006][ T7767] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.578590][ T7767] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.623136][ T7767] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.690418][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.697566][ T7811] netlink: 'syz.0.472': attribute type 10 has an invalid length.
[   85.703773][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.709548][ T7811] team0: Port device 0! added
[   85.717296][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.720982][ T7811] netlink: 'syz.0.472': attribute type 10 has an invalid length.
[   85.738768][ T7811] team0: Port device 0! removed
[   85.742016][ T7811] bond0: (slave 0!): Enslaving as an active interface with an up link
[   85.757065][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.889801][ T7827] 8021q: adding VLAN 0 to HW filter on device bond6
[   86.206354][ T7841] netlink: 'syz.2.481': attribute type 10 has an invalid length.
[   86.212965][ T7841] team0: Port device dummy0 added
[   86.222694][ T7841] team0: Port device dummy0 removed
[   86.550395][ T7849] __nla_validate_parse: 11 callbacks suppressed
[   86.550413][ T7849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.485'.
[   86.775483][   T24] IPVS: starting estimator thread 0...
[   86.778073][ T7859] IPVS: fo: FWM 3 0x00000003 - no destination available
[   86.801775][ T7862] netlink: 104 bytes leftover after parsing attributes in process `syz.0.490'.
[   86.841269][ T7869] netlink: 64 bytes leftover after parsing attributes in process `syz.0.492'.
[   86.864365][ T7860] IPVS: using max 92 ests per chain, 220800 per kthread
[   86.960055][ T7879] netlink: 20 bytes leftover after parsing attributes in process `syz.0.496'.
[   87.049253][ T7891] netlink: 40 bytes leftover after parsing attributes in process `syz.1.500'.
[   87.212641][ T7914] bond7 (unregistering): Released all slaves
[   87.243727][ T7919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.508'.
[   87.826160][ T7967] netlink: 200 bytes leftover after parsing attributes in process `syz.0.512'.
[   87.829891][ T7967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.512'.
[   87.871141][ T7967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.512'.
[   87.915941][ T7974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.514'.
[   87.986294][ T7983] pim6reg: entered allmulticast mode
[   88.001497][ T7983] pim6reg: left allmulticast mode
[   88.233614][ T8006] IPVS: fo: FWM 3 0x00000003 - no destination available
[   88.236624][ T5850] Bluetooth: hci2: command 0x0405 tx timeout
[   88.296047][ T8009] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   88.573573][ T8039] ieee802154 phy0 wpan0: encryption failed: -22
[   88.738722][ T8059] validate_nla: 1 callbacks suppressed
[   88.738746][ T8059] netlink: 'syz.2.539': attribute type 32 has an invalid length.
[   88.766946][ T8064] openvswitch: netlink: Missing key (keys=40, expected=100)
[   89.019862][ T8073] pim6reg: entered allmulticast mode
[   89.043108][ T8072] pim6reg: left allmulticast mode
[   89.054664][  T127] block nbd0: Possible stuck request ffff8880204b0000: control (read@0,4096B). Runtime 30 seconds
[   89.702641][ T8097] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.707102][ T8097] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004
[   89.859660][ T8100] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   89.862927][ T8100] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   89.891897][ T8096] tipc: Disabling bearer <eth:syzkaller0>
[   89.916289][ T8074] delete_channel: no stack
[   90.080977][ T8113] netlink: 'syz.1.551': attribute type 10 has an invalid length.
[   90.084125][ T8113] bond0: (slave wlan1): Opening slave failed
[   90.247501][ T8127] pim6reg: entered allmulticast mode
[   90.250515][ T8127] pim6reg: left allmulticast mode
[   90.878411][ T8180] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.947361][ T8180] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.994722][ T8180] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.039148][ T8180] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.096198][ T6606] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.102860][ T6606] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.111049][ T6606] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.119576][ T6606] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.678475][ T8211] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[   91.702178][ T8215] __nla_validate_parse: 23 callbacks suppressed
[   91.702192][ T8215] netlink: 100 bytes leftover after parsing attributes in process `syz.2.578'.
[   91.726193][ T8219] netlink: 'syz.2.579': attribute type 2 has an invalid length.
[   91.989019][ T8245] netlink: 92 bytes leftover after parsing attributes in process `syz.1.582'.
[   91.992142][ T8245] netlink: 92 bytes leftover after parsing attributes in process `syz.1.582'.
[   91.998507][ T8245] netlink: 'syz.1.582': attribute type 1 has an invalid length.
[   92.068835][ T8261] netlink: 96 bytes leftover after parsing attributes in process `syz.0.589'.
[   92.072417][ T8261] netlink: 96 bytes leftover after parsing attributes in process `syz.0.589'.
[   92.087932][ T8264] netlink: 36 bytes leftover after parsing attributes in process `syz.2.588'.
[   92.206754][ T8277] netlink: 'syz.0.595': attribute type 11 has an invalid length.
[   92.287169][ T8288] netlink: 84 bytes leftover after parsing attributes in process `syz.1.596'.
[   92.423240][ T8310] netlink: 24 bytes leftover after parsing attributes in process `syz.0.598'.
[   92.431088][ T8310] netlink: 40 bytes leftover after parsing attributes in process `syz.0.598'.
[   92.465419][ T8316] netlink: 'syz.1.600': attribute type 8 has an invalid length.
[   92.468972][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.600'.
[   92.603366][ T8329] netlink: 'syz.1.602': attribute type 1 has an invalid length.
[   92.621059][ T8329] 8021q: adding VLAN 0 to HW filter on device bond7
[   92.977846][ T8368] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   92.980671][ T8368] syzkaller0: entered promiscuous mode
[   92.982651][ T8368] syzkaller0: entered allmulticast mode
[   92.990311][ T8368] tipc: Resetting bearer <eth:syzkaller0>
[   92.995181][ T8367] tipc: Resetting bearer <eth:syzkaller0>
[   92.998473][ T8367] tipc: Disabling bearer <eth:syzkaller0>
[   93.575348][   T24] IPVS: starting estimator thread 0...
[   93.578900][ T8385] ieee802154 phy0 wpan0: encryption failed: -22
[   93.588542][ T8390] IPVS: set_ctl: invalid protocol: 0 172.30.0.2:20001
[   93.658970][ T8397] netlink: 'syz.2.621': attribute type 10 has an invalid length.
[   93.662854][ T8397] team0: Port device dummy0 added
[   93.665804][ T8389] IPVS: using max 92 ests per chain, 220800 per kthread
[   93.669681][ T8397] netlink: 'syz.2.621': attribute type 10 has an invalid length.
[   93.679052][ T8397] team0: Port device dummy0 removed
[   93.790456][ T5691] IPVS: stop unused estimator thread 0...
[   94.553621][ T8437] netlink: 'syz.2.634': attribute type 2 has an invalid length.
[   94.565890][ T8437] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   94.730871][ T8454] vxcan0: entered allmulticast mode
[   94.763586][ T8459] netlink: 'syz.2.640': attribute type 1 has an invalid length.
[   94.767266][ T8459] netlink: 'syz.2.640': attribute type 4 has an invalid length.
[   94.801670][ T8461] batadv2: entered promiscuous mode
[   94.803749][ T8461] batadv2: entered allmulticast mode
[   95.308049][ T8499] netlink: 'syz.2.651': attribute type 29 has an invalid length.
[   95.312243][ T8499] netlink: 'syz.2.651': attribute type 29 has an invalid length.
[   96.642484][ T8553] netlink: 'syz.0.664': attribute type 1 has an invalid length.
[   96.833655][ T8565] __nla_validate_parse: 23 callbacks suppressed
[   96.833688][ T8565] netlink: 228 bytes leftover after parsing attributes in process `syz.0.670'.
[   97.021919][ T8573] netlink: 24 bytes leftover after parsing attributes in process `syz.0.673'.
[   97.420018][ T8581] netlink: 252 bytes leftover after parsing attributes in process `syz.2.675'.
[   97.422799][ T8581] openvswitch: netlink: Flow actions attr not present in new flow.
[   97.471266][ T8587] netlink: 277 bytes leftover after parsing attributes in process `syz.2.678'.
[   97.489129][ T8591] netlink: 176 bytes leftover after parsing attributes in process `syz.2.680'.
[   97.580114][ T8599] netlink: 16 bytes leftover after parsing attributes in process `syz.1.679'.
[   97.766455][ T8609] netlink: 3 bytes leftover after parsing attributes in process `syz.2.684'.
[   97.775006][ T8609] batadv2: entered promiscuous mode
[   97.777172][ T8609] batadv2: entered allmulticast mode
[   97.910978][ T8617] tipc: New replicast peer: 255.255.255.255
[   97.925273][ T8617] tipc: Enabled bearer <udp:syz2>, priority 10
[   97.988739][ T8625] netlink: 308 bytes leftover after parsing attributes in process `syz.2.687'.
[   97.993436][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.687'.
[   97.997846][ T8625] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   98.032630][ T8630] !: renamed from dummy0
[   98.369185][ T8658] netlink: 68 bytes leftover after parsing attributes in process `syz.1.691'.
[   98.555154][   T47] hid-generic 0005:16BF:5505.0004: unknown main item tag 0x0
[   98.563722][   T47] hid-generic 0005:16BF:5505.0004: unknown main item tag 0x0
[   98.579323][   T47] hid-generic 0005:16BF:5505.0004: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   99.045091][    T9] tipc: Node number set to 1461020596
[   99.138220][ T8725] netlink: 'syz.0.710': attribute type 10 has an invalid length.
[   99.138305][ T8723] netlink: 'syz.0.710': attribute type 10 has an invalid length.
[  100.061112][ T8763] pim6reg1: entered promiscuous mode
[  100.063516][ T8763] pim6reg1: entered allmulticast mode
[  100.268279][ T8774] bond0: entered promiscuous mode
[  100.270513][ T8774] !: entered promiscuous mode
[  100.273558][ T8774] bond0: left promiscuous mode
[  100.278321][ T8774] !: left promiscuous mode
[  101.412308][ T8832] netlink: 'syz.1.737': attribute type 13 has an invalid length.
[  101.417170][ T8832] netlink: 'syz.1.737': attribute type 11 has an invalid length.
[  101.448573][ T8833] pim6reg: entered allmulticast mode
[  101.451570][ T8833] pim6reg: left allmulticast mode
[  101.940465][ T8886] __nla_validate_parse: 26 callbacks suppressed
[  101.940476][ T8886] netlink: 16 bytes leftover after parsing attributes in process `syz.0.751'.
[  102.009078][ T8891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.752'.
[  102.207904][ T8917] netlink: 100 bytes leftover after parsing attributes in process `syz.0.758'.
[  102.211436][ T8918] netlink: 100 bytes leftover after parsing attributes in process `syz.0.758'.
[  102.277433][ T8924] netlink: 36 bytes leftover after parsing attributes in process `syz.1.759'.
[  102.343919][ T8917] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  102.451635][ T8944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.765'.
[  102.458747][ T8944] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  102.462767][ T8944] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  102.740074][ T8967] netlink: 'syz.2.771': attribute type 58 has an invalid length.
[  102.742649][ T8967] netlink: 20 bytes leftover after parsing attributes in process `syz.2.771'.
[  102.846951][ T8969] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.888865][ T8969] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.927264][ T8969] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.977163][ T8969] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.039389][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.046747][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.054608][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.063345][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.226952][ T8978] netlink: 'syz.2.775': attribute type 29 has an invalid length.
[  103.230772][ T8978] netlink: 'syz.2.775': attribute type 29 has an invalid length.
[  103.235152][ T8978] netlink: 596 bytes leftover after parsing attributes in process `syz.2.775'.
[  103.308693][ T8981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.776'.
[  103.350257][ T8988] netlink: 60 bytes leftover after parsing attributes in process `syz.2.779'.
[  103.437300][ T8996] netlink: 'syz.2.781': attribute type 1 has an invalid length.
[  103.447543][ T8996] 8021q: adding VLAN 0 to HW filter on device bond4
[  103.620650][ T9014] netlink: 'syz.2.789': attribute type 2 has an invalid length.
[  103.640577][ T9014] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  103.683002][    T9] IPVS: starting estimator thread 0...
[  103.747592][ T9018] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  103.785110][ T9019] IPVS: using max 92 ests per chain, 220800 per kthread
[  103.873475][ T9030] netlink: 'syz.2.793': attribute type 10 has an invalid length.
[  103.880428][ T9030] team0: Port device 0! added
[  104.638288][ T9044] netlink: 'syz.1.799': attribute type 29 has an invalid length.
[  104.644375][ T5848] Bluetooth: hci2: command 0x0405 tx timeout
[  104.647629][ T9044] netlink: 'syz.1.799': attribute type 29 has an invalid length.
[  104.983393][ T9078] 8021q: adding VLAN 0 to HW filter on device bond10
[  105.050657][ T9093] team0: No ports can be present during mode change
[  105.083311][ T9100] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  105.130826][ T5848] Bluetooth: hci2: link tx timeout
[  105.132502][ T5848] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  106.270537][ T9137] 8021q: adding VLAN 0 to HW filter on device bond11
[  106.357523][ T9142] pim6reg: entered allmulticast mode
[  106.361052][ T9142] pim6reg: left allmulticast mode
[  106.766426][ T9150] validate_nla: 36 callbacks suppressed
[  106.766436][ T9150] netlink: 'syz.1.835': attribute type 1 has an invalid length.
[  106.779167][ T9150] 8021q: adding VLAN 0 to HW filter on device bond12
[  107.085722][ T9174] __nla_validate_parse: 28 callbacks suppressed
[  107.085738][ T9174] netlink: 96 bytes leftover after parsing attributes in process `syz.2.842'.
[  107.183336][ T9184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.846'.
[  107.200062][ T5850] Bluetooth: hci2: command 0x0405 tx timeout
[  107.243342][ T9186] pim6reg: entered allmulticast mode
[  107.247342][ T9186] pim6reg: left allmulticast mode
[  108.606931][ T9227] tipc: Started in network mode
[  108.609034][ T9227] tipc: Node identity 7a475ea07bd1, cluster identity 4711
[  108.611982][ T9227] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.617836][ T9227] veth1_to_bridge: mtu less than device minimum
[  108.627681][ T9226] tipc: Disabling bearer <eth:syzkaller0>
[  108.696733][ T9232] netlink: 144 bytes leftover after parsing attributes in process `syz.2.858'.
[  108.720544][ T9229] netlink: 64 bytes leftover after parsing attributes in process `syz.1.857'.
[  108.756088][ T9238] netlink: 'syz.1.860': attribute type 2 has an invalid length.
[  108.761898][ T9238] k*]: entered promiscuous mode
[  108.780510][ T9239] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.783493][ T9239] 8021q: adding VLAN 0 to HW filter on device team0
[  108.789276][ T9239] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  109.540614][ T9275] netlink: 'syz.0.869': attribute type 1 has an invalid length.
[  109.609240][ T9285] netlink: 'syz.0.872': attribute type 41 has an invalid length.
[  109.623473][ T9287] syzkaller1: entered promiscuous mode
[  109.628877][ T9287] syzkaller1: entered allmulticast mode
[  109.695434][ T9292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.874'.
[  109.760987][ T9303] netlink: 'syz.0.877': attribute type 32 has an invalid length.
[  109.772426][ T9308] netlink: 308 bytes leftover after parsing attributes in process `syz.2.878'.
[  109.779134][ T9308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.878'.
[  109.782480][ T9308] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  109.823372][ T9311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.879'.
[  109.828672][ T9313] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  109.891309][ T9323] pim6reg: entered allmulticast mode
[  109.903219][ T9323] vxcan0: left allmulticast mode
[  109.907328][ T9323] pim6reg: left allmulticast mode
[  109.962023][ T9311] netlink: 80 bytes leftover after parsing attributes in process `syz.2.879'.
[  110.806238][ T9332] Bluetooth: hci0: Opcode 0x080f failed: -4
[  110.851858][ T9372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.896'.
[  110.905223][ T9380] netlink: 'syz.0.897': attribute type 1 has an invalid length.
[  111.866812][ T9412] : renamed from wg2
[  111.874764][ T9409] delete_channel: no stack
[  111.970720][ T9430] netlink: 'syz.2.908': attribute type 23 has an invalid length.
[  111.994777][ T5848] Bluetooth: hci0: command 0x080f tx timeout
[  112.161252][ T9443] __nla_validate_parse: 9 callbacks suppressed
[  112.161274][ T9443] netlink: 88 bytes leftover after parsing attributes in process `syz.1.911'.
[  112.257289][ T9447] netlink: 28 bytes leftover after parsing attributes in process `syz.1.912'.
[  112.418545][ T9459] netlink: 64 bytes leftover after parsing attributes in process `syz.1.915'.
[  112.546260][ T9469] netlink: 28 bytes leftover after parsing attributes in process `syz.1.918'.
[  112.557957][ T9469] netlink: 'syz.1.918': attribute type 7 has an invalid length.
[  112.564926][ T9469] netlink: 'syz.1.918': attribute type 8 has an invalid length.
[  112.567415][ T9469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.918'.
[  112.571717][ T9473] netlink: 20 bytes leftover after parsing attributes in process `syz.0.919'.
[  112.728900][ T9483] syzkaller1: entered promiscuous mode
[  112.730949][ T9483] syzkaller1: entered allmulticast mode
[  112.736274][ T9483] syzkaller1: left promiscuous mode
[  112.739032][ T9483] syzkaller1: left allmulticast mode
[  113.110083][ T9525] netlink: 24 bytes leftover after parsing attributes in process `syz.2.929'.
[  113.126790][ T9525] netlink: 68 bytes leftover after parsing attributes in process `syz.2.929'.
[  113.236528][ T9535] vxcan1: entered allmulticast mode
[  113.240988][ T9535] vxcan1: left allmulticast mode
[  113.405961][ T9557] sctp: [Deprecated]: syz.1.935 (pid 9557) Use of struct sctp_assoc_value in delayed_ack socket option.
[  113.405961][ T9557] Use struct sctp_sack_info instead
[  113.413894][ T9557] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  113.799449][ T9562] netlink: 104 bytes leftover after parsing attributes in process `syz.2.938'.
[  113.853178][ T9569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.940'.
[  113.913480][ T9570] pim6reg: entered allmulticast mode
[  113.917437][ T9570] pim6reg: left allmulticast mode
[  114.160272][ T9580] syzkaller1: entered promiscuous mode
[  114.162465][ T9580] syzkaller1: entered allmulticast mode
[  114.387372][ T9595] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[  114.392122][ T9595] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.437676][ T9595] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.489105][ T9595] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.528370][ T9595] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.639891][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  114.665001][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  114.672056][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  114.682950][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.253335][ T9632] ieee802154 phy0 wpan0: encryption failed: -22
[  115.257535][ T9632] ieee802154 phy0 wpan0: encryption failed: -22
[  117.026669][ T9645] netlink: 'syz.1.965': attribute type 29 has an invalid length.
[  117.029757][ T9645] netlink: 'syz.1.965': attribute type 29 has an invalid length.
[  117.096130][ T9651] warn_alloc: 1 callbacks suppressed
[  117.096177][ T9651] syz.1.967: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  117.105338][ T9651] CPU: 0 UID: 0 PID: 9651 Comm: syz.1.967 Not tainted syzkaller #0 PREEMPT(full) 
[  117.105353][ T9651] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  117.105360][ T9651] Call Trace:
[  117.105365][ T9651]  <TASK>
[  117.105370][ T9651]  dump_stack_lvl+0x189/0x250
[  117.105388][ T9651]  ? __pfx_dump_stack_lvl+0x10/0x10
[  117.105401][ T9651]  ? __pfx__printk+0x10/0x10
[  117.105414][ T9651]  ? lock_release+0x4b/0x3e0
[  117.105430][ T9651]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  117.105443][ T9651]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  117.105455][ T9651]  warn_alloc+0x214/0x310
[  117.105472][ T9651]  ? __pfx_warn_alloc+0x10/0x10
[  117.105487][ T9651]  ? __get_vm_area_node+0x28f/0x300
[  117.105501][ T9651]  ? xskq_create+0xbf/0x170
[  117.105527][ T9651]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  117.105549][ T9651]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  117.105563][ T9651]  ? xsk_setsockopt+0x502/0x8d0
[  117.105577][ T9651]  ? __kasan_kmalloc+0x93/0xb0
[  117.105594][ T9651]  vmalloc_user_noprof+0xad/0xf0
[  117.105609][ T9651]  ? xskq_create+0xbf/0x170
[  117.105622][ T9651]  xskq_create+0xbf/0x170
[  117.105637][ T9651]  xsk_init_queue+0xb0/0x110
[  117.105650][ T9651]  xsk_setsockopt+0x57b/0x8d0
[  117.105664][ T9651]  ? __pfx_xsk_setsockopt+0x10/0x10
[  117.105677][ T9651]  ? __pfx_aa_sk_perm+0x10/0x10
[  117.105692][ T9651]  ? lock_release+0x4b/0x3e0
[  117.105706][ T9651]  ? __se_sys_futex+0x36f/0x400
[  117.105719][ T9651]  ? aa_sock_opt_perm+0xff/0x1b0
[  117.105729][ T9651]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  117.105741][ T9651]  ? __pfx_xsk_setsockopt+0x10/0x10
[  117.105753][ T9651]  do_sock_setsockopt+0x17c/0x1b0
[  117.105766][ T9651]  __x64_sys_setsockopt+0x13f/0x1b0
[  117.105777][ T9651]  do_syscall_64+0xfa/0x3b0
[  117.105786][ T9651]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.105797][ T9651]  ? exc_page_fault+0x9f/0xf0
[  117.105811][ T9651]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.105821][ T9651] RIP: 0033:0x7efe50f8ebe9
[  117.105832][ T9651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  117.105841][ T9651] RSP: 002b:00007efe51d6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  117.105853][ T9651] RAX: ffffffffffffffda RBX: 00007efe511b6180 RCX: 00007efe50f8ebe9
[  117.105861][ T9651] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000008
[  117.105867][ T9651] RBP: 00007efe51011e19 R08: 0000000000000004 R09: 0000000000000000
[  117.105873][ T9651] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  117.105880][ T9651] R13: 00007efe511b6218 R14: 00007efe511b6180 R15: 00007ffd45ada048
[  117.105891][ T9651]  </TASK>
[  117.105895][ T9651] Mem-Info:
[  117.206296][ T9651] active_anon:17459 inactive_anon:0 isolated_anon:0
[  117.206296][ T9651]  active_file:1166 inactive_file:38232 isolated_file:0
[  117.206296][ T9651]  unevictable:1768 dirty:8 writeback:0
[  117.206296][ T9651]  slab_reclaimable:10063 slab_unreclaimable:54612
[  117.206296][ T9651]  mapped:18326 shmem:2417 pagetables:1069
[  117.206296][ T9651]  sec_pagetables:0 bounce:0
[  117.206296][ T9651]  kernel_misc_reclaimable:0
[  117.206296][ T9651]  free:278159 free_pcp:16797 free_cma:0
[  117.225429][ T9651] Node 0 active_anon:62424kB inactive_anon:0kB active_file:4144kB inactive_file:135240kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:46376kB dirty:28kB writeback:0kB shmem:5016kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5628kB pagetables:2444kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  117.238594][ T9651] Node 1 active_anon:7412kB inactive_anon:0kB active_file:520kB inactive_file:17688kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:26928kB dirty:4kB writeback:0kB shmem:4652kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7436kB pagetables:1832kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  117.251814][ T9651] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  117.264752][ T9651] lowmem_reserve[]: 0 811 811 811 811
[  117.267029][ T9651] Node 0 DMA32 free:197520kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:62424kB inactive_anon:0kB active_file:4144kB inactive_file:135240kB unevictable:3536kB writepending:28kB present:1556484kB managed:830908kB mlocked:0kB bounce:0kB free_pcp:29148kB local_pcp:17340kB free_cma:0kB
[  117.279644][ T9651] lowmem_reserve[]: 0 0 0 0 0
[  117.281065][ T9651] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  117.290419][ T9651] lowmem_reserve[]: 0 0 854 854 854
[  117.292033][ T9651] Node 1 Normal free:441140kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7412kB inactive_anon:0kB active_file:520kB inactive_file:17688kB unevictable:3536kB writepending:4kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:38100kB local_pcp:20376kB free_cma:0kB
[  117.301746][ T9651] lowmem_reserve[]: 0 0 0 0 0
[  117.303585][ T9651] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  117.309091][ T9651] Node 0 DMA32: 920*4kB (UME) 712*8kB (UME) 278*16kB (UME) 257*32kB (UME) 99*64kB (UME) 93*128kB (UM) 14*256kB (UM) 6*512kB (UME) 5*1024kB (UM) 5*2048kB (UE) 33*4096kB (UM) = 197472kB
[  117.316006][ T9651] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  117.321435][ T9651] Node 1 Normal: 1530*4kB (UM) 922*8kB (UME) 928*16kB (UME) 233*32kB (UME) 165*64kB (UM) 40*128kB (UM) 22*256kB (UME) 8*512kB (UM) 5*1024kB (ME) 7*2048kB (UME) 88*4096kB (M) = 441112kB
[  117.331795][ T9651] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  117.344461][ T9651] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  117.350311][ T9651] 41815 total pagecache pages
[  117.351858][ T9651] 0 pages in swap cache
[  117.353263][ T9651] Free swap  = 124996kB
[  117.355762][ T9651] Total swap = 124996kB
[  117.357454][ T9651] 786301 pages RAM
[  117.358882][ T9651] 0 pages HighMem/MovableOnly
[  117.360734][ T9651] 241342 pages reserved
[  117.362211][ T9651] 0 pages cma reserved
[  117.399745][ T9654] __nla_validate_parse: 13 callbacks suppressed
[  117.399762][ T9654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.968'.
[  117.413788][ T9654] netlink: 'syz.1.968': attribute type 10 has an invalid length.
[  117.422613][ T9654] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  118.038980][ T9662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.971'.
[  118.196003][ T9669] netlink: 'syz.2.974': attribute type 27 has an invalid length.
[  118.430503][ T9677] netlink: 96 bytes leftover after parsing attributes in process `syz.2.977'.
[  118.527144][ T9685] netlink: 'syz.2.980': attribute type 7 has an invalid length.
[  118.529846][ T9685] netlink: 224 bytes leftover after parsing attributes in process `syz.2.980'.
[  118.571851][ T9689] netlink: 3 bytes leftover after parsing attributes in process `syz.2.982'.
[  118.578061][ T9689] batadv2: entered promiscuous mode
[  118.579955][ T9689] batadv2: entered allmulticast mode
[  118.860411][ T9716] netlink: 100 bytes leftover after parsing attributes in process `syz.2.990'.
[  118.911329][ T9722] netlink: 536 bytes leftover after parsing attributes in process `syz.2.992'.
[  118.916691][ T9722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.992'.
[  118.930709][ T9722] 8021q: adding VLAN 0 to HW filter on device bond5
[  119.117788][  T127] block nbd0: Possible stuck request ffff8880204b0000: control (read@0,4096B). Runtime 60 seconds
[  119.353296][ T9750] netlink: 'syz.2.1000': attribute type 2 has an invalid length.
[  119.612803][ T9752] macsec1: entered promiscuous mode
[  119.618049][ T9752] syz_tun: entered promiscuous mode
[  119.622134][ T9752] syz_tun: left promiscuous mode
[  119.658273][ T9764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1005'.
[  119.816530][ T9767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1006'.
[  120.109300][ T9787] netlink: 'syz.2.1013': attribute type 1 has an invalid length.
[  120.619527][ T9845] netlink: 'syz.1.1023': attribute type 29 has an invalid length.
[  120.626361][ T9845] netlink: 'syz.1.1023': attribute type 29 has an invalid length.
[  120.700452][ T9850] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  120.891999][ T9869] netlink: zone id is out of range
[  120.896413][ T9869] netlink: zone id is out of range
[  120.898092][ T9869] netlink: zone id is out of range
[  120.901407][ T9869] netlink: zone id is out of range
[  120.903189][ T9869] netlink: zone id is out of range
[  120.907637][ T9869] netlink: zone id is out of range
[  120.909568][ T9869] netlink: zone id is out of range
[  120.911328][ T9869] netlink: zone id is out of range
[  120.913113][ T9869] netlink: zone id is out of range
[  120.916514][ T9869] netlink: zone id is out of range
[  121.063780][ T9878] netlink: 'syz.2.1031': attribute type 1 has an invalid length.
[  124.075092][ T5292] udevd[5292]: worker [6493] /devices/virtual/block/nbd0 is taking a long time
[  132.556837][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  149.195150][  T127] block nbd0: Possible stuck request ffff8880204b0000: control (read@0,4096B). Runtime 90 seconds
[  155.021836][ T9892] __nla_validate_parse: 10 callbacks suppressed
[  155.021850][ T9892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1037'.
[  155.097492][ T9905] pim6reg: entered allmulticast mode
[  155.099817][ T9905] pim6reg: left allmulticast mode
[  155.130998][ T9908] nbd: nbd0 already in use
[  155.150238][ T9911] delete_channel: no stack
[  155.170790][ T9892] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1037'.
[  155.249629][ T9920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1044'.
[  155.385938][ T9936] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1046'.
[  155.581577][ T9965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1053'.
[  155.650699][ T9973] validate_nla: 2 callbacks suppressed
[  155.650713][ T9973] netlink: 'syz.0.1056': attribute type 1 has an invalid length.
[  155.663081][ T9973] 8021q: adding VLAN 0 to HW filter on device bond6
[  155.673302][ T9973] bond6: (slave geneve3): making interface the new active one
[  155.678657][ T9973] bond6: (slave geneve3): Enslaving as an active interface with an up link
[  155.682350][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.689854][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.692633][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.696199][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.700005][ T9973] bond6: entered promiscuous mode
[  155.701770][ T9973] geneve3: entered promiscuous mode
[  155.726009][ T9976] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1057'.
[  156.010834][T10011] netlink: 'syz.2.1065': attribute type 1 has an invalid length.
[  156.031571][T10011] 8021q: adding VLAN 0 to HW filter on device bond6
[  156.048263][T10012] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1064'.
[  156.141169][T10025] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1069'.
[  156.152328][T10028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1070'.
[  156.156731][T10028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1070'.
[  156.259162][T10034] ieee802154 phy0 wpan0: encryption failed: -22
[  156.552527][T10064] 8021q: adding VLAN 0 to HW filter on device bond0
[  157.268148][T10070] pim6reg: entered allmulticast mode
[  157.270539][T10070] pim6reg: left allmulticast mode
[  157.476904][T10077] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.531805][T10077] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.591928][T10077] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.630491][T10077] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.672139][T10083] netlink: 'syz.0.1085': attribute type 10 has an invalid length.
[  157.678391][T10083] bond0: option arp_all_targets: invalid value (196616)
[  157.707056][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.721813][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.739823][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.752904][ T6606] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.042750][T10101] netlink: 'syz.0.1091': attribute type 11 has an invalid length.
[  158.230666][T10111] netlink: 'syz.0.1093': attribute type 10 has an invalid length.
[  158.240624][T10111] bond0: (slave 0!): Releasing backup interface
[  158.247497][T10111] team0: Port device 0! added
[  158.530960][T10126] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.616002][T10125] tipc: Resetting bearer <eth:syzkaller0>
[  158.661643][T10125] tipc: Disabling bearer <eth:syzkaller0>
[  158.959851][T10138] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.029781][T10138] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.097804][T10144] sctp: [Deprecated]: syz.0.1105 (pid 10144) Use of int in max_burst socket option deprecated.
[  159.097804][T10144] Use struct sctp_assoc_value instead
[  159.106910][T10146] netlink: 'syz.1.1106': attribute type 2 has an invalid length.
[  159.110083][T10138] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.127625][T10146] net_ratelimit: 8 callbacks suppressed
[  159.127639][T10146] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  159.148581][T10138] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.158904][T10148] netlink: 'syz.1.1107': attribute type 1 has an invalid length.
[  159.180367][T10148] 8021q: adding VLAN 0 to HW filter on device bond13
[  159.314734][T10166] netlink: 'syz.0.1111': attribute type 13 has an invalid length.
[  159.317228][T10166] netlink: 'syz.0.1111': attribute type 17 has an invalid length.
[  159.323198][T10166] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  159.361793][T10178] netlink: 'syz.1.1113': attribute type 2 has an invalid length.
[  159.433980][T10185] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.477076][T10185] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.556834][T10185] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.618291][T10185] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.693867][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  159.700560][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  159.708717][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  159.715962][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  159.746496][T10199] net veth1_virt_wifi : renamed from virt_wifi0
[  159.756781][ T6606] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  159.761705][ T6606] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  159.770694][ T6606] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  159.773329][ T6606] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  159.968390][T10221] pim6reg: entered allmulticast mode
[  159.976585][T10222] syz.0.1126: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  159.982968][T10222] CPU: 0 UID: 0 PID: 10222 Comm: syz.0.1126 Not tainted syzkaller #0 PREEMPT(full) 
[  159.982986][T10222] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  159.982995][T10222] Call Trace:
[  159.983000][T10222]  <TASK>
[  159.983006][T10222]  dump_stack_lvl+0x189/0x250
[  159.983027][T10222]  ? __pfx_dump_stack_lvl+0x10/0x10
[  159.983042][T10222]  ? __pfx__printk+0x10/0x10
[  159.983056][T10222]  ? lock_release+0x4b/0x3e0
[  159.983075][T10222]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  159.983089][T10222]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  159.983103][T10222]  warn_alloc+0x214/0x310
[  159.983123][T10222]  ? __pfx_warn_alloc+0x10/0x10
[  159.983143][T10222]  ? __get_vm_area_node+0x28f/0x300
[  159.983158][T10222]  ? xskq_create+0xbf/0x170
[  159.983175][T10222]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  159.983202][T10222]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  159.983219][T10222]  ? xsk_setsockopt+0x502/0x8d0
[  159.983233][T10222]  ? __kasan_kmalloc+0x93/0xb0
[  159.983247][T10222]  vmalloc_user_noprof+0xad/0xf0
[  159.983262][T10222]  ? xskq_create+0xbf/0x170
[  159.983276][T10222]  xskq_create+0xbf/0x170
[  159.983291][T10222]  xsk_init_queue+0xb0/0x110
[  159.983308][T10222]  xsk_setsockopt+0x57b/0x8d0
[  159.983325][T10222]  ? __pfx_xsk_setsockopt+0x10/0x10
[  159.983354][T10222]  ? __pfx_aa_sk_perm+0x10/0x10
[  159.983373][T10222]  ? lock_release+0x4b/0x3e0
[  159.983388][T10222]  ? __se_sys_futex+0x36f/0x400
[  159.983402][T10222]  ? aa_sock_opt_perm+0xff/0x1b0
[  159.983414][T10222]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  159.983427][T10222]  ? __pfx_xsk_setsockopt+0x10/0x10
[  159.983442][T10222]  do_sock_setsockopt+0x17c/0x1b0
[  159.983458][T10222]  __x64_sys_setsockopt+0x13f/0x1b0
[  159.983472][T10222]  do_syscall_64+0xfa/0x3b0
[  159.983485][T10222]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.983498][T10222]  ? exc_page_fault+0x9f/0xf0
[  159.983515][T10222]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  159.983527][T10222] RIP: 0033:0x7f3b0458ebe9
[  159.983538][T10222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  159.983547][T10222] RSP: 002b:00007f3b0538a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  159.983562][T10222] RAX: ffffffffffffffda RBX: 00007f3b047b6090 RCX: 00007f3b0458ebe9
[  159.983571][T10222] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000009
[  159.983579][T10222] RBP: 00007f3b04611e19 R08: 0000000000000004 R09: 0000000000000000
[  159.983586][T10222] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[  159.983594][T10222] R13: 00007f3b047b6128 R14: 00007f3b047b6090 R15: 00007fffd6ab2418
[  159.983608][T10222]  </TASK>
[  159.983614][T10222] Mem-Info:
[  160.078634][T10222] active_anon:17485 inactive_anon:0 isolated_anon:0
[  160.078634][T10222]  active_file:1294 inactive_file:38240 isolated_file:0
[  160.078634][T10222]  unevictable:1768 dirty:110 writeback:0
[  160.078634][T10222]  slab_reclaimable:10347 slab_unreclaimable:54709
[  160.078634][T10222]  mapped:18337 shmem:2440 pagetables:1108
[  160.078634][T10222]  sec_pagetables:0 bounce:0
[  160.078634][T10222]  kernel_misc_reclaimable:0
[  160.078634][T10222]  free:270501 free_pcp:23961 free_cma:0
[  160.092683][T10222] Node 0 active_anon:62384kB inactive_anon:0kB active_file:4636kB inactive_file:135264kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:46400kB dirty:408kB writeback:0kB shmem:5036kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5712kB pagetables:2660kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  160.102690][T10222] Node 1 active_anon:7556kB inactive_anon:0kB active_file:540kB inactive_file:17696kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:31096kB dirty:32kB writeback:0kB shmem:4724kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7500kB pagetables:1772kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  160.112622][T10222] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  160.122678][T10222] lowmem_reserve[]: 0 811 811 811 811
[  160.124900][T10222] Node 0 DMA32 free:168888kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:62384kB inactive_anon:0kB active_file:4636kB inactive_file:135264kB unevictable:3536kB writepending:408kB present:1556484kB managed:830908kB mlocked:0kB bounce:0kB free_pcp:54064kB local_pcp:34100kB free_cma:0kB
[  160.135255][T10222] lowmem_reserve[]: 0 0 0 0 0
[  160.136752][T10222] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  160.146105][T10222] lowmem_reserve[]: 0 0 854 854 854
[  160.147738][T10222] Node 1 Normal free:439140kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7556kB inactive_anon:0kB active_file:540kB inactive_file:17696kB unevictable:3536kB writepending:32kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:41732kB local_pcp:21732kB free_cma:0kB
[  160.157796][T10222] lowmem_reserve[]: 0 0 0 0 0
[  160.159310][T10222] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  160.163596][T10222] Node 0 DMA32: 580*4kB (U) 310*8kB (U) 65*16kB (UE) 78*32kB (UE) 7*64kB (UM) 21*128kB (UM) 35*256kB (UME) 12*512kB (UM) 9*1024kB (UM) 3*2048kB (UE) 31*4096kB (UM) = 168912kB
[  160.169627][T10222] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  160.175678][T10222] Node 1 Normal: 285*4kB (U) 602*8kB (UME) 676*16kB (U) 525*32kB (UME) 198*64kB (UME) 69*128kB (UM) 24*256kB (UM) 8*512kB (UM) 5*1024kB (ME) 6*2048kB (UME) 87*4096kB (M) = 439076kB
[  160.181382][T10222] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  160.184677][T10222] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  160.187579][T10222] 41974 total pagecache pages
[  160.189072][T10222] 0 pages in swap cache
[  160.190374][T10222] Free swap  = 124996kB
[  160.191672][T10222] Total swap = 124996kB
[  160.192989][T10222] 786301 pages RAM
[  160.194703][T10222] 0 pages HighMem/MovableOnly
[  160.196216][T10222] 241342 pages reserved
[  160.197520][T10222] 0 pages cma reserved
[  160.246637][T10229] __nla_validate_parse: 24 callbacks suppressed
[  160.246646][T10229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1127'.
[  160.356946][T10233] syzkaller1: entered promiscuous mode
[  160.358801][T10233] syzkaller1: entered allmulticast mode
[  160.405619][T10233] 8021q: adding VLAN 0 to HW filter on device bond8
[  160.409973][T10233] bond7: (slave bond8): making interface the new active one
[  160.413458][T10233] bond7: (slave bond8): Enslaving as an active interface with an up link
[  160.426906][T10233] bond7: (slave gretap1): Enslaving as a backup interface with an up link
[  160.431907][T10233] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1128'.
[  160.436591][T10233] 8021q: adding VLAN 0 to HW filter on device bond7
[  160.582066][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  160.588958][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  160.596296][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  160.602595][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  160.799565][T10247] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1131'.
[  160.842434][T10247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1131'.
[  160.982319][T10272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1136'.
[  160.988571][T10272] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  160.996949][T10272] batman_adv: batadv0: Removing interface: batadv_slave_1
[  161.127646][T10286] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1142'.
[  161.211199][T10290] validate_nla: 4 callbacks suppressed
[  161.211286][T10290] netlink: 'syz.1.1143': attribute type 1 has an invalid length.
[  161.887389][T10304] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1147'.
[  161.943803][T10305] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1147'.
[  162.860421][T10316] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1150'.
[  162.948837][T10322] netlink: 'syz.1.1151': attribute type 32 has an invalid length.
[  163.068615][T10340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1154'.
[  163.538798][T10367] syzkaller0: entered promiscuous mode
[  163.540644][T10367] syzkaller0: entered allmulticast mode
[  163.546689][T10367] syz_tun: entered promiscuous mode
[  163.548596][T10367] macsec0: entered promiscuous mode
[  163.551440][T10367] syz_tun: left promiscuous mode
[  163.678487][T10373] netlink: 'syz.1.1160': attribute type 1 has an invalid length.
[  164.037755][T10410] netlink: 'syz.2.1171': attribute type 1 has an invalid length.
[  164.230886][T10433] batadv1: entered promiscuous mode
[  164.232648][T10433] batadv1: entered allmulticast mode
[  164.455487][ T5908] IPVS: starting estimator thread 0...
[  164.457941][T10445] ieee802154 phy0 wpan0: encryption failed: -22
[  164.461228][ T5908] IPVS: starting estimator thread 0...
[  164.486262][T10452] netlink: 'syz.0.1179': attribute type 10 has an invalid length.
[  164.499198][T10452] netlink: 'syz.0.1179': attribute type 10 has an invalid length.
[  164.507189][T10452] team0: Port device 0! removed
[  164.511495][T10452] bond0: (slave 0!): Enslaving as an active interface with an up link
[  164.545120][T10448] IPVS: using max 92 ests per chain, 220800 per kthread
[  164.565742][T10450] IPVS: using max 93 ests per chain, 223200 per kthread
[  164.780314][ T5874] IPVS: stop unused estimator thread 0...
[  164.910786][T10490] netem: incorrect gi model size
[  164.912385][T10490] netem: change failed
[  164.915716][T10490] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  164.947757][T10492] syzkaller1: entered promiscuous mode
[  164.949682][T10492] syzkaller1: entered allmulticast mode
[  165.200864][T10518] netlink: 'syz.2.1201': attribute type 33 has an invalid length.
[  165.209081][T10518] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.265736][T10522] netlink: 'syz.2.1201': attribute type 33 has an invalid length.
[  165.269034][T10522] __nla_validate_parse: 11 callbacks suppressed
[  165.269044][T10522] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1201'.
[  165.269189][T10518] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.301929][T10525] netlink: 'syz.0.1203': attribute type 4 has an invalid length.
[  165.318605][   T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  165.321895][   T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  165.325269][   T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  165.328167][   T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  165.333170][T10518] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.350501][T10528] netlink: 'syz.0.1204': attribute type 29 has an invalid length.
[  165.355892][T10528] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1204'.
[  165.392765][T10518] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.407375][T10530] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1205'.
[  165.455283][ T9348] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.460847][ T9348] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.468481][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.475773][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.556091][T10544] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1209'.
[  165.577973][T10549] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1211'.
[  165.662272][T10549] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1211'.
[  165.668636][T10549] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1211'.
[  165.846042][T10590] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1218'.
[  165.849259][T10590] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1218'.
[  166.049677][T10608] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1221'.
[  166.287846][T10624] pim6reg: entered allmulticast mode
[  166.305380][T10624] pim6reg: left allmulticast mode
[  166.710253][T10628] validate_nla: 3 callbacks suppressed
[  166.710263][T10628] netlink: 'syz.2.1227': attribute type 11 has an invalid length.
[  166.737872][T10631] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.768794][T10633] @: renamed from veth0_vlan (while UP)
[  166.833241][T10638] netlink: 'syz.2.1231': attribute type 1 has an invalid length.
[  166.848599][T10638] 8021q: adding VLAN 0 to HW filter on device bond7
[  166.866739][T10638] bond7: entered promiscuous mode
[  166.918490][T10650] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (144)
[  166.961685][T10652] netlink: 'syz.2.1236': attribute type 1 has an invalid length.
[  166.965812][T10652] netlink: 'syz.2.1236': attribute type 3 has an invalid length.
[  167.106782][T10684] ieee802154 phy0 wpan0: encryption failed: -90
[  167.217314][T10702] syzkaller1: entered promiscuous mode
[  167.221033][T10702] syzkaller1: entered allmulticast mode
[  167.378777][T10712] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  167.982179][T10725] sctp: [Deprecated]: syz.2.1261 (pid 10725) Use of int in max_burst socket option.
[  167.982179][T10725] Use struct sctp_assoc_value instead
[  168.331626][T10755] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  168.601992][T10777] netlink: 'syz.1.1277': attribute type 2 has an invalid length.
[  168.646202][T10779] netlink: 'syz.0.1278': attribute type 4 has an invalid length.
[  169.018316][T10820] IPVS: length: 49 != 24
[  169.027896][T10824] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  169.033404][T10822] syzkaller0: entered promiscuous mode
[  169.039126][T10822] syzkaller0: entered allmulticast mode
[  169.044741][T10824] tipc: Resetting bearer <eth:syzkaller0>
[  169.057487][T10821] tipc: Resetting bearer <eth:syzkaller0>
[  169.061104][T10821] tipc: Disabling bearer <eth:syzkaller0>
[  169.150605][T10838] netlink: 'syz.2.1296': attribute type 15 has an invalid length.
[  169.195899][T10852] macvlan1: entered promiscuous mode
[  169.198639][T10852] macvlan1: left promiscuous mode
[  169.257814][T10852] netlink: 'syz.0.1301': attribute type 29 has an invalid length.
[  169.274948][T10852] netlink: 'syz.0.1301': attribute type 29 has an invalid length.
[  169.303391][T10858] netlink: 'syz.2.1303': attribute type 10 has an invalid length.
[  169.319583][T10858] team0: Port device 0! removed
[  169.405160][T10863] pim6reg: left allmulticast mode
[  169.919667][T10883] pim6reg: entered allmulticast mode
[  169.932758][T10883] pim6reg: left allmulticast mode
[  170.055246][T10885] nbd1: detected capacity change from 0 to 127
[  170.094719][   T56] block nbd1: Receive control failed (result -104)
[  170.151944][T10907] sctp: [Deprecated]: syz.0.1316 (pid 10907) Use of int in max_burst socket option deprecated.
[  170.151944][T10907] Use struct sctp_assoc_value instead
[  170.203757][T10911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  170.209372][T10911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  170.214012][T10911] bond0 (unregistering): (slave 0!): Releasing backup interface
[  170.221181][T10911] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  170.227564][T10911] bond0 (unregistering): Released all slaves
[  170.277992][T10917] __nla_validate_parse: 31 callbacks suppressed
[  170.278009][T10917] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1319'.
[  170.286097][T10920] netlink: 'syz.1.1320': attribute type 11 has an invalid length.
[  170.308738][T10922] sctp: [Deprecated]: syz.1.1321 (pid 10922) Use of int in max_burst socket option deprecated.
[  170.308738][T10922] Use struct sctp_assoc_value instead
[  170.337361][T10925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1322'.
[  170.396449][T10929] pim6reg: entered allmulticast mode
[  170.400644][T10929] pim6reg: left allmulticast mode
[  170.474700][   T55] Bluetooth: hci0: command 0x080f tx timeout
[  170.475006][ T5233] Bluetooth: hci1: command 0x0406 tx timeout
[  170.878346][T10960] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1332'.
[  170.981169][   T47] hid-generic 0005:16BF:5505.0005: unknown main item tag 0x0
[  170.990058][   T47] hid-generic 0005:16BF:5505.0005: unknown main item tag 0x0
[  171.027402][   T47] hid-generic 0005:16BF:5505.0005: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
Connection to localhost closed by remote host.
[  171.296712][T10978] ==================================================================
[  171.299588][T10978] BUG: KASAN: slab-use-after-free in __mutex_lock+0x801/0x1350
[  171.301966][T10978] Read of size 8 at addr ffff88801f7840a0 by task khidpd_16bf5505/10978
[  171.305780][T10978] 
[  171.307136][T10978] CPU: 1 UID: 0 PID: 10978 Comm: khidpd_16bf5505 Not tainted syzkaller #0 PREEMPT(full) 
[  171.307156][T10978] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  171.307166][T10978] Call Trace:
[  171.307172][T10978]  <TASK>
[  171.307179][T10978]  dump_stack_lvl+0x189/0x250
[  171.307200][T10978]  ? __pfx_dump_stack_lvl+0x10/0x10
[  171.307216][T10978]  ? lock_release+0x4b/0x3e0
[  171.307237][T10978]  ? __virt_addr_valid+0x4a5/0x5c0
[  171.307255][T10978]  print_report+0xca/0x240
[  171.307268][T10978]  ? __mutex_lock+0x801/0x1350
[  171.307279][T10978]  kasan_report+0x118/0x150
[  171.307295][T10978]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  171.307315][T10978]  ? __mutex_lock+0x801/0x1350
[  171.307328][T10978]  __mutex_lock+0x801/0x1350
[  171.307341][T10978]  ? __mutex_lock+0x5bb/0x1350
[  171.307354][T10978]  ? l2cap_unregister_user+0x6a/0x1b0
[  171.307374][T10978]  ? __pfx___mutex_lock+0x10/0x10
[  171.307385][T10978]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  171.307405][T10978]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  171.307430][T10978]  l2cap_unregister_user+0x6a/0x1b0
[  171.307448][T10978]  hidp_session_thread+0x3c9/0x410
[  171.307467][T10978]  ? __pfx_hidp_session_thread+0x10/0x10
[  171.307483][T10978]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  171.307500][T10978]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  171.307518][T10978]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  171.307535][T10978]  ? __kthread_parkme+0x7b/0x200
[  171.307550][T10978]  ? __kthread_parkme+0x1a1/0x200
[  171.307564][T10978]  kthread+0x711/0x8a0
[  171.307581][T10978]  ? __pfx_hidp_session_thread+0x10/0x10
[  171.307597][T10978]  ? __pfx_kthread+0x10/0x10
[  171.307612][T10978]  ? rcu_is_watching+0x15/0xb0
[  171.307625][T10978]  ? __pfx_kthread+0x10/0x10
[  171.307640][T10978]  ret_from_fork+0x3fc/0x770
[  171.307655][T10978]  ? __pfx_ret_from_fork+0x10/0x10
[  171.307670][T10978]  ? __switch_to_asm+0x39/0x70
[  171.307690][T10978]  ? __switch_to_asm+0x33/0x70
[  171.307706][T10978]  ? __pfx_kthread+0x10/0x10
[  171.307721][T10978]  ret_from_fork_asm+0x1a/0x30
[  171.307743][T10978]  </TASK>
[  171.307748][T10978] 
[  171.384563][T10978] Allocated by task 5851:
[  171.386305][T10978]  kasan_save_track+0x3e/0x80
[  171.388199][T10978]  __kasan_kmalloc+0x93/0xb0
[  171.390040][T10978]  __kmalloc_noprof+0x27a/0x4f0
[  171.391999][T10978]  hci_alloc_dev_priv+0x28/0x2060
[  171.393994][T10978]  vhci_create_device+0x120/0x6e0
[  171.396023][T10978]  vhci_write+0x3ce/0x4a0
[  171.397754][T10978]  vfs_write+0x5c9/0xb30
[  171.399430][T10978]  ksys_write+0x145/0x250
[  171.401118][T10978]  do_syscall_64+0xfa/0x3b0
[  171.402910][T10978]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.405182][T10978] 
[  171.406025][T10978] Freed by task 5851:
[  171.407526][T10978]  kasan_save_track+0x3e/0x80
[  171.409095][T10978]  kasan_save_free_info+0x46/0x50
[  171.410900][T10978]  __kasan_slab_free+0x5b/0x80
[  171.412643][T10978]  kfree+0x18e/0x440
[  171.413958][T10978]  bt_host_release+0x82/0x90
[  171.415534][T10978]  device_release+0x9c/0x1c0
[  171.417031][T10978]  kobject_put+0x22b/0x480
[  171.418492][T10978]  vhci_release+0x88/0xd0
[  171.419858][T10978]  __fput+0x44c/0xa70
[  171.421182][T10978]  task_work_run+0x1d4/0x260
[  171.422682][T10978]  do_exit+0x6b5/0x2300
[  171.424165][T10978]  do_group_exit+0x21c/0x2d0
[  171.425632][T10978]  __x64_sys_exit_group+0x3f/0x40
[  171.427259][T10978]  x64_sys_call+0x21f7/0x2200
[  171.428805][T10978]  do_syscall_64+0xfa/0x3b0
[  171.430221][T10978]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.432093][T10978] 
[  171.432858][T10978] Last potentially related work creation:
[  171.434853][T10978]  kasan_save_stack+0x3e/0x60
[  171.436384][T10978]  kasan_record_aux_stack+0xbd/0xd0
[  171.438113][T10978]  insert_work+0x3d/0x330
[  171.439572][T10978]  __queue_work+0xcd2/0xfb0
[  171.441085][T10978]  queue_work_on+0x181/0x270
[  171.442648][T10978]  hci_cmd_sync_submit+0x285/0x2b0
[  171.444414][T10978]  process_scheduled_works+0xae1/0x17b0
[  171.446151][T10978]  worker_thread+0x8a0/0xda0
[  171.447647][T10978]  kthread+0x711/0x8a0
[  171.448918][T10978]  ret_from_fork+0x3fc/0x770
[  171.450332][T10978]  ret_from_fork_asm+0x1a/0x30
[  171.451822][T10978] 
[  171.452607][T10978] Second to last potentially related work creation:
[  171.454785][T10978]  kasan_save_stack+0x3e/0x60
[  171.456301][T10978]  kasan_record_aux_stack+0xbd/0xd0
[  171.457916][T10978]  insert_work+0x3d/0x330
[  171.459298][T10978]  __queue_work+0xbaf/0xfb0
[  171.460728][T10978]  queue_work_on+0x181/0x270
[  171.462238][T10978]  hci_cmd_sync_submit+0x285/0x2b0
[  171.463960][T10978]  process_scheduled_works+0xae1/0x17b0
[  171.465703][T10978]  worker_thread+0x8a0/0xda0
[  171.467207][T10978]  kthread+0x711/0x8a0
[  171.468496][T10978]  ret_from_fork+0x3fc/0x770
[  171.469947][T10978]  ret_from_fork_asm+0x1a/0x30
[  171.471509][T10978] 
[  171.472321][T10978] The buggy address belongs to the object at ffff88801f784000
[  171.472321][T10978]  which belongs to the cache kmalloc-8k of size 8192
[  171.476859][T10978] The buggy address is located 160 bytes inside of
[  171.476859][T10978]  freed 8192-byte region [ffff88801f784000, ffff88801f786000)
[  171.481190][T10978] 
[  171.481922][T10978] The buggy address belongs to the physical page:
[  171.483955][T10978] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1f780
[  171.486654][T10978] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  171.489345][T10978] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  171.491782][T10978] page_type: f5(slab)
[  171.493108][T10978] raw: 00fff00000000040 ffff88801a442280 0000000000000000 0000000000000001
[  171.495856][T10978] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  171.498540][T10978] head: 00fff00000000040 ffff88801a442280 0000000000000000 0000000000000001
[  171.501608][T10978] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  171.504415][T10978] head: 00fff00000000003 ffffea00007de001 00000000ffffffff 00000000ffffffff
[  171.507041][T10978] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  171.510104][T10978] page dumped because: kasan: bad access detected
[  171.512428][T10978] page_owner tracks the page as allocated
[  171.514530][T10978] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5589, tgid 5589 (dhcpcd), ts 31182239547, free_ts 29409902326
[  171.520953][T10978]  post_alloc_hook+0x240/0x2a0
[  171.522687][T10978]  get_page_from_freelist+0x21e4/0x22c0
[  171.524713][T10978]  __alloc_frozen_pages_noprof+0x181/0x370
[  171.526759][T10978]  alloc_pages_mpol+0x232/0x4a0
[  171.528684][T10978]  allocate_slab+0x8a/0x370
[  171.530844][T10978]  ___slab_alloc+0xbeb/0x1410
[  171.532419][T10978]  __kmalloc_node_track_caller_noprof+0x2f8/0x4e0
[  171.534841][T10978]  kmalloc_reserve+0x136/0x290
[  171.536873][T10978]  __alloc_skb+0x142/0x2d0
[  171.538613][T10978]  netlink_dump+0x167/0xe90
[  171.540396][T10978]  netlink_recvmsg+0x676/0xa30
[  171.542246][T10978]  sock_recvmsg+0x22c/0x270
[  171.543971][T10978]  ____sys_recvmsg+0x1c9/0x460
[  171.545972][T10978]  ___sys_recvmsg+0x1b5/0x510
[  171.547773][T10978]  __x64_sys_recvmsg+0x198/0x260
[  171.549666][T10978]  do_syscall_64+0xfa/0x3b0
[  171.551421][T10978] page last free pid 5605 tgid 5605 stack trace:
[  171.553832][T10978]  __free_frozen_pages+0xbc4/0xd30
[  171.555813][T10978]  __put_partials+0x156/0x1a0
[  171.557675][T10978]  put_cpu_partial+0x17c/0x250
[  171.559644][T10978]  __slab_free+0x2d5/0x3c0
[  171.561479][T10978]  qlist_free_all+0x97/0x140
[  171.563283][T10978]  kasan_quarantine_reduce+0x148/0x160
[  171.565408][T10978]  __kasan_slab_alloc+0x22/0x80
[  171.567233][T10978]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  171.569285][T10978]  getname_flags+0xb8/0x540
[  171.570971][T10978]  do_sys_openat2+0xbc/0x1c0
[  171.572667][T10978]  __x64_sys_openat+0x138/0x170
[  171.574472][T10978]  do_syscall_64+0xfa/0x3b0
[  171.576261][T10978]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.578524][T10978] 
[  171.579465][T10978] Memory state around the buggy address:
[  171.581638][T10978]  ffff88801f783f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  171.584690][T10978]  ffff88801f784000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  171.587747][T10978] >ffff88801f784080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  171.590804][T10978]                                ^
[  171.592759][T10978]  ffff88801f784100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  171.595763][T10978]  ffff88801f784180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  171.598766][T10978] ==================================================================
[  171.602943][T10978] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  171.605743][T10978] CPU: 1 UID: 0 PID: 10978 Comm: khidpd_16bf5505 Not tainted syzkaller #0 PREEMPT(full) 
[  171.609540][T10978] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  171.613394][T10978] Call Trace:
[  171.614877][T10978]  <TASK>
[  171.616063][T10978]  dump_stack_lvl+0x99/0x250
[  171.617931][T10978]  ? __asan_memcpy+0x40/0x70
[  171.619745][T10978]  ? __pfx_dump_stack_lvl+0x10/0x10
[  171.621867][T10978]  ? __pfx__printk+0x10/0x10
[  171.623702][T10978]  vpanic+0x281/0x750
[  171.625242][T10978]  ? __pfx_vpanic+0x10/0x10
[  171.627013][T10978]  ? rcu_is_watching+0x15/0xb0
[  171.628947][T10978]  panic+0xb9/0xc0
[  171.630448][T10978]  ? __pfx_panic+0x10/0x10
[  171.632163][T10978]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  171.634423][T10978]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  171.636432][T10978]  ? __mutex_lock+0x801/0x1350
[  171.638036][T10978]  check_panic_on_warn+0x89/0xb0
[  171.639642][T10978]  ? __mutex_lock+0x801/0x1350
[  171.641345][T10978]  end_report+0x78/0x160
[  171.642834][T10978]  kasan_report+0x129/0x150
[  171.644372][T10978]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  171.646162][T10978]  ? __mutex_lock+0x801/0x1350
[  171.647589][T10978]  __mutex_lock+0x801/0x1350
[  171.649240][T10978]  ? __mutex_lock+0x5bb/0x1350
[  171.650886][T10978]  ? l2cap_unregister_user+0x6a/0x1b0
[  171.653013][T10978]  ? __pfx___mutex_lock+0x10/0x10
[  171.654662][T10978]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  171.656998][T10978]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  171.659315][T10978]  l2cap_unregister_user+0x6a/0x1b0
[  171.660987][T10978]  hidp_session_thread+0x3c9/0x410
[  171.662692][T10978]  ? __pfx_hidp_session_thread+0x10/0x10
[  171.664784][T10978]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  171.666660][T10978]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  171.668621][T10978]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  171.670881][T10978]  ? __kthread_parkme+0x7b/0x200
[  171.672683][T10978]  ? __kthread_parkme+0x1a1/0x200
[  171.674467][T10978]  kthread+0x711/0x8a0
[  171.675773][T10978]  ? __pfx_hidp_session_thread+0x10/0x10
[  171.677568][T10978]  ? __pfx_kthread+0x10/0x10
[  171.679209][T10978]  ? rcu_is_watching+0x15/0xb0
[  171.680722][T10978]  ? __pfx_kthread+0x10/0x10
[  171.682367][T10978]  ret_from_fork+0x3fc/0x770
[  171.684107][T10978]  ? __pfx_ret_from_fork+0x10/0x10
[  171.685827][T10978]  ? __switch_to_asm+0x39/0x70
[  171.687446][T10978]  ? __switch_to_asm+0x33/0x70
[  171.689241][T10978]  ? __pfx_kthread+0x10/0x10
[  171.690970][T10978]  ret_from_fork_asm+0x1a/0x30
[  171.692686][T10978]  </TASK>
[  171.694250][T10978] Kernel Offset: disabled
[  171.695720][T10978] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:03:30  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff89991b58 RBX=0000000000000001 RCX=ffff888020ad9cc0 RDX=0000000000000100
RSI=0000000000000000 RDI=0000000000000000 RBP=ffffc9002ca128a8 RSP=ffffc90000007a90
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=fffff52000000f54
R12=dffffc0000000000 R13=0019999999999998 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff89991b58 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007efe51ce7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007efe511876c3 00007efe511876c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 00007efe51012e53
XMM06=0000000000000000 00007efe51012e4d XMM07=0000000000000000 00007efe51012e61
XMM08=0000000000000000 00007efe51012ee7 XMM09=0000000000000000 00007efe51012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90006df7370
R8 =ffff888108498237 R9 =1ffff11021093046 R10=dffffc0000000000 R11=ffffffff854f2340
R12=dffffc0000000000 R13=ffffffff99afb8cd R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f23bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3b052e7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f3b047876c3 00007f3b047876c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 00007f3b04612e53
XMM06=0000000000000000 00007f3b04612e4d XMM07=0000000000000000 00007f3b04612e61
XMM08=0000000000000000 00007f3b04612ee7 XMM09=0000000000000000 00007f3b04612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
