last executing test programs:

2.004342976s ago: executing program 2 (id=1439):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$alg(0x26, 0x5, 0x0)
close(0x3)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000440), 0x10)
listen(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
r4 = accept4(r1, 0x0, 0x0, 0x0)
close(0x4)
recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffc4c, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x80}, 0x1, 0x7}, 0x0)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x241}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x2b}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)

1.933048994s ago: executing program 2 (id=1440):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x80}, 0x1, 0x7}, 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\t\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23e}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x2b}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)

1.931355423s ago: executing program 2 (id=1442):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x80}, 0x1, 0x7}, 0x0)
r1 = accept4(r0, &(0x7f0000000140)=@qipcrtr, &(0x7f0000000080)=0x80, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='freezer.self_freezing\x00', 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r5=>0x0]}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={r5, 0x6}, 0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={r5, @in6={{0xa, 0x4e21, 0xf, @remote, 0xd}}, 0x2, 0x10, 0xfffffb04, 0x8, 0x4c, 0x5, 0x80}, &(0x7f00000002c0)=0x9c)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23e}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x2b}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)

1.787026768s ago: executing program 1 (id=1446):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2fe4a74041c1ce1c}, 0x48)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='v\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040026bd7000fcdbdf250b00000008002b0006000000080034005700000008002b0006000000050033000100000005002d0001000000080039000900000008003b000900000008003a000104000005002f000000000008003c0001010000"], 0x64}, 0x1, 0x0, 0x0, 0x4000851}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0})
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
socket(0x22, 0x800000003, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@broadcast, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x80, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x72}, {0x3}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x32}, 0x2, @in6=@remote, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xe8)
sendmmsg$inet6(r3, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet6_mreq(r4, 0x29, 0x14, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x8001}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x5}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x12}]}}]}, 0x48}}, 0x0)
r5 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10)
setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="b400000000000000791090000000000063000000000000009500000000000000cb5239a01b5b902367fd5ec1a64e367acb74c7e00c2f2bd72b3a0be2ea96caa37fb3469e8505342e47fc8929a6a015"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)="fd", 0x0}, 0x50)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.222355508s ago: executing program 1 (id=1448):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9403000010000104f04e93294c00000000001700", @ANYRES32=0x0, @ANYBLOB="00000000000000001400350076657468305f6d61637674617000000005001100050000000a0002"], 0x394}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)={0x1c, r3, 0xf03, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x1c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x6}, 0xaf)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000180), 0x0, 0x8}, 0x20)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001700)={'ip6tnl0\x00'})
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x205, 0x0, 0x2}, 0x10)
sendto$inet6(r7, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x9, 0x12, &(0x7f0000000f80)=ANY=[@ANYBLOB="18000000ff7f000000000000fbff000085100000f9ffffff9876040008000000851000000100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000000000085000000860000008520000001000000851000000100000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000000e77b328d9ca9766f8a0400000034330000850000008600000070560c"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0xd4, &(0x7f0000000640)=""/212, 0x41100, 0x20, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x10, 0xffff, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000380)=[0x1, 0x1, 0x1, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x3, 0x3, 0xf, 0x1}, {0x0, 0x1, 0x8, 0x9}], 0x10, 0x7}, 0x94)
socket$inet6_sctp(0xa, 0x1, 0x84)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000740)={@in6={{0xa, 0x4e22, 0x9, @empty, 0x6}}, 0x0, 0x0, 0x2a, 0x0, "955b94b19a44f02aa23c6a4a3c6ec11144bdee5d5ac0d8cb63051a062ed1c96567b1db8c7c21607784474bf11312bf3fcd5722a45429b214a097963a1a5644d190193a1ceb23ed9bb6d25ad252bd381d"}, 0xd8)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x66}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_HASH_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x20014}, 0x0)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})

1.213909211s ago: executing program 0 (id=1449):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x7000000}, @TCA_FQ_FLOW_REFILL_DELAY={0x1027, 0x9, 0x3}]}}]}, 0xa2}}, 0x0) (async)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x0, 0x0, r4, 0x4}, 0xc) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000008c0)=@newsa={0x17c, 0x10, 0x1, 0x0, 0x25dfdbfc, {{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x0, 0x81e, 0x4, 0x0, 0x20, 0x80, 0x21}, {@in=@multicast1, 0x0, 0x33}, @in=@loopback, {0x401, 0x0, 0x8, 0x0, 0xffffffff, 0x3, 0x0, 0x8000000}, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0x80000001}, {0x0, 0x1, 0xfffffffc}, 0x0, 0x0, 0xa, 0x4, 0x1, 0x40}, [@algo_auth={0x89, 0x1, {{'rmd160\x00'}, 0x208, "d5deb33e8d02d5b4c6cdd277a6d0adde7a89a2677f61d0a96eb8706a52b9fbdc312b5aeab8894c493c358ef76ec179b21865e1b6f29b2da7d564f2bcd96ec67ffc"}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x24040021}, 0x0)

1.11591473s ago: executing program 0 (id=1450):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x1f)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0xa43, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x80}, 0x1, 0x7}, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="030000000400081d0d1600000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x0, 0xe, 0x0, &(0x7f00000006c0)="ff83ffff106c3e5990f67e9eb3cf", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23e}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x2b}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r4, 0x8008f513, &(0x7f0000000180))

1.03580388s ago: executing program 2 (id=1451):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20024090)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1)
pipe(&(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
splice(r2, 0x0, r3, &(0x7f00000002c0), 0x6, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000fc0)="89000000120081ae08060cdc030ec0007f0600ff1f00000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32cb83c8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000022c0)={{{@in6=@private2, @in=@private}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000003000000080001"], 0x28}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=ANY=[@ANYBLOB="5801000010000100030000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000001600"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

1.034824026s ago: executing program 1 (id=1452):
socket$nl_xfrm(0x10, 0x3, 0x6)
accept$ax25(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @default}, [@rose, @netrom, @remote, @remote, @default, @null, @rose, @bcast]}, &(0x7f0000000000)=0x67)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r0 = socket(0x8, 0x3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000040)=0x8, 0x4)
recvmmsg(r2, &(0x7f0000008e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/63, 0xfffffffffffffd30}, 0xa6}], 0x1, 0x2, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e)
write(r3, &(0x7f0000000080)="0b000300010001", 0x7)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000002c0))
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100001900000000000012000000180001801400020076657468315f76d7616e0000000000000800060000000000"], 0x34}}, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, @null, @bpq0, 0x6, 'syz0\x00', @null, 0x7, 0x3, [@null, @default, @null, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50)
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000001500)=0xe3c4, 0x4)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @remote}, 0x3, 0x4, 0x0, 0x2}}, 0x26)
unshare(0x20020400)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="feffffff0180ffff0000000000000000ffff00000000000000000000b48a705b60a69cba26d22e32f7cf308ea6279d8f1d05b5a18108c9836a4c2c6d0bc0c915663abc91c6d82371ae6b391b591ca60aba197a5625610ab60b6eb2b8f668296765b6ff0ee970bc72ed3adc9fe66c958d7ceb5c16771d867b00ac25e5daf0c13f420566cf1c6b9133cf60b7dbaa045f691f00d5c3ac6ab6cdd18716a73b7c2c0d476cf0bc8a3ee6eb6a2479"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.033404887s ago: executing program 2 (id=1453):
r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cgroup.max.depth\x00', 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000000040)=0x3, 0x12)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e20, @loopback}, 0x20, 0x0, 0x0, 0x0, 0xffff, &(0x7f0000000080), 0x3, 0x20000000000000, 0x9})
ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000240)=@buf={0xc3, &(0x7f0000000140)="40fc82758f0acffa675a0debf9fd48f751cc61a4adec500a857c4a7334968632778ddca16bdd5cd4066fda3454fb87e49369ca737b5e5882e1db24ff60f4d5baaa03a6283a90ff77bdf5be8144a9a9c1ffb1268a25607233cb2af505e03a8c51810c306663115feb1e48e1457c4b53e1e11ac0026eb9b375f05fc5432fe82493ad61acefdb352a8aff3cb623f45d82ac6636a56f6acaaf99a8589f893acd9aaf6a29d1e31eb0a0327cf0365b23e90e262a5ef7795304cec744589f8a6a57c730ec061b"})
r2 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r2, 0x4002f516, &(0x7f0000000280)={0x2, 0xb})
r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000300)={[{0x2d, 'blkio'}, {0x2d, 'io'}, {0x2b, 'perf_event'}, {0x2d, 'pids'}, {0x2b, 'perf_event'}, {0x2b, 'io'}, {0x2b, 'cpuset'}, {0x2d, 'blkio'}, {0x2d, 'freezer'}]}, 0x45)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000380)=0x7, 0x4)
ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000740)={{'\x00', 0x2}, {}, 0x141, 0x0, 0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)="6c4cc034aeed07454d8f3ea707e671471a25ccc089b206743d1242ae36a2866989fe7b64c31e87ccf39c82766e4f02228a0cca268b4bf93d8dd395502ae8cb5a7c60b2d7a886927ef29ff0ae76c91e47617159b98125ca103b0ad8cf3c418e177a9923d57cebf7cc8059546bbcd2abe6eb7d3eddd74aab768af1b1c2abb69ba0ddf4bc52767c395d1330937334083eb2856f343d1b1899b4e82b0de4b39f1c6edd923c20e55dd67321a941597c89c3ee2f5bf7ab914b3ffae65b604130101e006e5bc87b2c1c6858661bf3457b4e6ffdb252c7103ccf149d08cd4f14d42f146878eb1bfb6318102925f03629a63d10558ae7ebf86eb433298a6f1dbfb699a3be25107a40de640db088fa3e2aa6f6f32ea076d13c7f22229dcb8007cc83a9524fa4ee2b3b9abd0602fc21a6ac79a91ee4c10bdf5688c27f7ca1ae46851c978a932201cac0e40c8fa3e64ed34776b40d2ccdb02cdccdae66cc0b4420fddedc2c2fa64c8fa29bc7a115641debf38f3faf48caef89829bc01bdff01306b618acade111757c7b93fa3e09f83658e8671b206650769d15f1ffb607f7c29abd451826ee52b8ec2473773c83c30f566cdc2df2213da5d695c070c72e3b51954874e1ab871f7d5a1b8dca11a5e85c64c7cfc75f6cd3", 0x1d1, 0x0, &(0x7f0000000640)={0x2, 0xbf, {0x0, 0xc, 0x13, "b7feaacc214c4b7f8e88532986792964401c44", 0x9f, "ffbd0e9adb345817c09602e74f9411851fbd2c9ca22152b335c9d19af88854a1462942cba0f106f0d91e13a783cec87c3ddec4a6dfc5dbef99641724bfb46f814b02bb68b95baa31542e02e33e679acecda0a754f6cfb062ecba2b5964e26b98d0eda0a608d243d5974c92904493258db80479788de4dacad4f3b45c4aeb28e44f244655720d1954a13cde28a7cc229615a8384645544da1238c0e7c728974"}, 0x1a, "ce38eedb9b08c68d38cbdd8e8782d133759dc6034e469b837ea9"}, 0xe5})
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, 0x2, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x2004c001)
socket$phonet(0x23, 0x2, 0x1)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f00000008c0)={<r5=>0x0, 0x49, "16eb3a90166df002aa03376de474d3889f96b47ba684b4bec2417d54f31a670dd8de232b8e3fef3e659615459a772398053c8f12b02049b1a8e248d58dce6e391b80e6a4ef4aca64fd"}, &(0x7f0000000940)=0x51)
setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000980)={r5, 0x4da}, 0x8)
ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f00000009c0))
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r2, <r6=>0xffffffffffffffff}, 0x4)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000a80)=@generic={&(0x7f0000000a00)='./file0\x00', r6}, 0x18)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000ac0)={<r7=>r4, 0x0, 0x2, 0x6})
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000b00)=r7, 0x4)
socket$unix(0x1, 0x2, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r7)
sendmsg$NL80211_CMD_GET_REG(r7, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, r8, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x17}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x2400c804)
socket$nl_audit(0x10, 0x3, 0x9)
r9 = socket$unix(0x1, 0x2, 0x0)
recvmmsg$unix(r9, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000c80)=""/145, 0x91}, {&(0x7f0000000d40)=""/46, 0x2e}, {&(0x7f0000000d80)=""/61, 0x3d}, {&(0x7f0000000dc0)=""/196, 0xc4}, {&(0x7f0000000ec0)=""/126, 0x7e}, {&(0x7f0000000f40)=""/162, 0xa2}, {&(0x7f0000001000)=""/138, 0x8a}, {&(0x7f00000010c0)=""/239, 0xef}, {&(0x7f00000011c0)=""/150, 0x96}, {&(0x7f0000001280)=""/249, 0xf9}], 0xa, &(0x7f0000001440)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000001500), 0x6e, &(0x7f0000001840)=[{&(0x7f0000001580)=""/212, 0xd4}, {&(0x7f0000001680)=""/129, 0x81}, {&(0x7f0000001740)=""/223, 0xdf}], 0x3, &(0x7f0000001880)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [<r10=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x140}}], 0x2, 0x10020, &(0x7f0000001a40)={0x0, 0x3938700})
setsockopt(r10, 0x3, 0x0, &(0x7f0000001a80)="a1ad71c97d93619c", 0x8)
listen(0xffffffffffffffff, 0x5)

237.646813ms ago: executing program 0 (id=1454):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
recvmmsg(r1, &(0x7f00000015c0)=[{{0x0, 0xfffffffffffffcaa, 0x0}}], 0x1, 0x12023, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1)
sendmmsg$inet(r1, &(0x7f0000003b00), 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x140, r4, 0x0, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0x17, 0x34, @random="aa5aa229042698d994c5521a3c803ba2808b31"}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0xf, 0xa, "2693dddb182ec4206e614a"}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "81471b"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "a535da1d64f51b32f038a64d9e"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0x1d, 0x34, @random="42bd39beb3bca7eac71b9d3ae09a17c0468c756a12f91d4f0d"}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "da29a758cb26f2336d9a59901f"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}], @key_params=[@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "4a5c1ecd429611247a6a87bde7"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_MODE={0x5}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8}]}]]}, 0x140}, 0x1, 0x0, 0x0, 0x4000}, 0x8044)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x80}, 0x1, 0x7}, 0x0)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23e}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x2b}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)

160.925559ms ago: executing program 1 (id=1455):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x80}, 0x1, 0x7}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x1, 0x20}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23e}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x2b}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)

159.390321ms ago: executing program 0 (id=1456):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0xf0, 0x10, 0x300, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd27, 0x0, 0x2, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c"], 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x2, {@ip4=@rand_addr=0x64010100, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newsa={0x154, 0x10, 0x1, 0x8000000, 0x0, {{@in=@private=0xa010101, @in6=@empty}, {@in=@broadcast, 0x1, 0x33}, @in=@local, {}, {}, {0x10, 0xd29}, 0x0, 0x0, 0xa, 0x1}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x10000000}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x154}}, 0x0)

159.013136ms ago: executing program 2 (id=1457):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x80}, 0x1, 0x7}, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x4)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23e}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x2b}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
ioctl(r3, 0x6, &(0x7f0000000080)="bc6b2164d0fe7ed308ea0dc991543b510cb7")

83.382063ms ago: executing program 1 (id=1458):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x40, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x5}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xfffffff8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048844}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001900010000000000000000001c140000fe000001000000001400120011"], 0x30}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000040)=0x7ff, 0x4)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r0], 0x17c}, 0x1, 0x0, 0x0, 0x24040021}, 0x0)

1.020669ms ago: executing program 0 (id=1459):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x80}, 0x1, 0x7}, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23e}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x2b}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)

333.99µs ago: executing program 0 (id=1460):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10)
unshare(0x400)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x14, 0x4, 0x4, 0x448, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, 0x0, &(0x7f00000000c0)=""/193}, 0x20)
close(r0)
ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
recvfrom$ax25(r0, &(0x7f0000000140)=""/29, 0x1d, 0x10000, &(0x7f00000001c0)={{0x3, @bcast, 0x1}, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0xf14, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}, 0x1c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r4, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x7fffffff}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x3}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x4}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x80)
sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)={0x14, 0x0, 0xb, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x24040800)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000000)=0x2, 0x8)
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'tunl0\x00'}}, 0x1e)
sendmmsg(r5, &(0x7f0000003840), 0x0, 0x4080)
r6 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)=@newsa={0x1d4, 0x10, 0x713, 0x0, 0x25dfdbfe, {{@in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in=@loopback, 0x0, 0x0, 0x4e22}, {@in=@broadcast, 0x0, 0x32}, @in6=@local, {}, {0x0, 0x0, 0xffffffffffffffc0}, {}, 0x0, 0x4, 0xa, 0x3}, [@algo_auth_trunc={0x5d, 0x14, {{'cmac(aes)\x00'}, 0x88, 0x0, "35f6fd8fd57fd44aa5074c50bcc4059acb"}}, @tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x4d3, 0x3c}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x3, 0x3, 0xd1, 0x9, 0xe35, 0x9}, {{@in=@private=0xa010101, 0x6322, 0x3c}, 0xa, @in=@empty, 0x3503, 0x4, 0x2, 0x3a, 0x3a, 0x6, 0x3}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x20000020}, 0x44000)

0s ago: executing program 1 (id=1461):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x80}, 0x1, 0x7}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_flags})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe5e, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x9c}}, 0x0)
ioctl$sock_proto_private(r3, 0x8b2a, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x27799a24, 0x0, 0x0, 0x0, 0x23e}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @sk_skb=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r5 = socket$igmp6(0xa, 0x3, 0x2)
sendto$inet6(r5, &(0x7f0000000340)="c7e35ef63413b6d67006641d4ece391b0bafa6a1008a70b024a9cb8759e29458726b5a0d8cf0d6cae11d0148d6844778247b27e37f5e06cf4522361366516ca2e87f7d0135e4db957491c373d84fd65b046cfb272f8f7b89ed31c104f7164847a575369215c3eca6200aef4f42c034becfbf0d510072961d5bfdf9c33412d50bd764cf71eaa2f1dc12a1c42802cd93e26d1463395dee69072806c1e56c00b01f344e787f54403665d8ff9e203cd346390f4baf5c146f8b3cbf2a75c8", 0xbc, 0x40000, &(0x7f0000000140)={0xa, 0x4e20, 0xd84, @remote, 0x5}, 0x1c)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:52797' (ED25519) to the list of known hosts.
syzkaller login: [   48.828680][ T5773] cgroup: Unknown subsys name 'net'
[   48.922573][ T5773] cgroup: Unknown subsys name 'cpuset'
[   48.930422][ T5773] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.787568][ T5773] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.565063][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.568635][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.571313][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.574885][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.578653][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.595281][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.599099][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.602151][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.605670][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.608288][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.698660][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.701814][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.709827][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.721003][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.724659][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.926348][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   56.022010][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   56.133049][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   56.142416][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.146016][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.148826][ T5841] bridge_slave_0: entered allmulticast mode
[   56.151947][ T5841] bridge_slave_0: entered promiscuous mode
[   56.178760][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.181373][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.183970][ T5841] bridge_slave_1: entered allmulticast mode
[   56.187073][ T5841] bridge_slave_1: entered promiscuous mode
[   56.267262][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.269628][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.272055][ T5846] bridge_slave_0: entered allmulticast mode
[   56.275947][ T5846] bridge_slave_0: entered promiscuous mode
[   56.292057][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.294981][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.297897][ T5846] bridge_slave_1: entered allmulticast mode
[   56.301515][ T5846] bridge_slave_1: entered promiscuous mode
[   56.319253][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.355778][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.369960][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.382060][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.386667][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.388976][ T5853] bridge_slave_0: entered allmulticast mode
[   56.391734][ T5853] bridge_slave_0: entered promiscuous mode
[   56.396971][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.416380][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.419100][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.421536][ T5853] bridge_slave_1: entered allmulticast mode
[   56.425049][ T5853] bridge_slave_1: entered promiscuous mode
[   56.446146][ T5846] team0: Port device team_slave_0 added
[   56.449431][ T5841] team0: Port device team_slave_0 added
[   56.467009][ T5846] team0: Port device team_slave_1 added
[   56.472030][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.478313][ T5841] team0: Port device team_slave_1 added
[   56.482688][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.527147][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.529385][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.537968][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.565615][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.568349][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.577828][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.587404][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.589561][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.597668][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.603095][ T5853] team0: Port device team_slave_0 added
[   56.608443][ T5853] team0: Port device team_slave_1 added
[   56.635928][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.638184][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.646285][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.669020][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.671202][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.679708][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.703974][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.706177][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.715625][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.727340][ T5846] hsr_slave_0: entered promiscuous mode
[   56.730782][ T5846] hsr_slave_1: entered promiscuous mode
[   56.803719][ T5841] hsr_slave_0: entered promiscuous mode
[   56.807107][ T5841] hsr_slave_1: entered promiscuous mode
[   56.810034][ T5841] debugfs: 'hsr0' already exists in 'hsr'
[   56.812424][ T5841] Cannot create hsr debugfs directory
[   56.838655][ T5853] hsr_slave_0: entered promiscuous mode
[   56.841905][ T5853] hsr_slave_1: entered promiscuous mode
[   56.845203][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   56.847581][ T5853] Cannot create hsr debugfs directory
[   57.186686][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.195479][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.201298][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.207290][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.267424][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.276970][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.283424][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.301947][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.405398][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.416477][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.431624][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.445819][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.504814][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.532680][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.543103][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   57.563355][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.565819][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.577769][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   57.591529][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.594602][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.602382][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.605501][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.615985][ T5850] Bluetooth: hci0: command tx timeout
[   57.635134][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.638091][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.695160][ T5850] Bluetooth: hci1: command tx timeout
[   57.731239][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.748602][ T5853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.774448][ T5850] Bluetooth: hci2: command tx timeout
[   57.777749][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   57.794928][ T3558] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.797328][ T3558] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.810814][ T3558] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.813046][ T3558] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.891602][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.937271][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.946301][ T5853] veth0_vlan: entered promiscuous mode
[   57.969819][ T5853] veth1_vlan: entered promiscuous mode
[   57.991414][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.005734][ T5846] veth0_vlan: entered promiscuous mode
[   58.016384][ T5846] veth1_vlan: entered promiscuous mode
[   58.022670][ T5853] veth0_macvtap: entered promiscuous mode
[   58.042318][ T5853] veth1_macvtap: entered promiscuous mode
[   58.061928][ T5841] veth0_vlan: entered promiscuous mode
[   58.071616][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.075784][ T5846] veth0_macvtap: entered promiscuous mode
[   58.086155][ T5841] veth1_vlan: entered promiscuous mode
[   58.090428][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.096092][ T5846] veth1_macvtap: entered promiscuous mode
[   58.112982][ T5716] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.117965][ T5716] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.120661][ T5716] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.123428][ T5716] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.145975][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.170501][ T5841] veth0_macvtap: entered promiscuous mode
[   58.180552][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.190091][ T5841] veth1_macvtap: entered promiscuous mode
[   58.221038][ T5716] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.224818][ T5716] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.227520][ T5716] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.230208][ T5716] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.272780][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.281019][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.293560][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.298934][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.319629][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.332688][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.337443][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.351822][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.355729][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.365965][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.396245][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.401986][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.430249][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.432921][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.479525][ T5853] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.493616][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.501525][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.542837][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.547371][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.843588][ T5933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6'.
[   58.865551][ T5933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6'.
[   58.877354][ T5933] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6'.
[   58.883684][ T5933] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6'.
[   58.890432][ T5933] netlink: 'syz.0.6': attribute type 4 has an invalid length.
[   59.694659][ T5850] Bluetooth: hci0: command tx timeout
[   59.757765][ T5943] bridge_slave_0: invalid flags given to default FDB implementation
[   59.760807][ T5942] warning: `syz.2.10' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   59.774617][ T5850] Bluetooth: hci1: command tx timeout
[   59.853951][ T5850] Bluetooth: hci2: command tx timeout
[   59.885915][ T5953] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[   59.889976][ T5953] openvswitch: netlink: IPv4 tunnel dst address is zero
[   60.624177][ T5961] netlink: 120 bytes leftover after parsing attributes in process `syz.2.18'.
[   60.657406][ T5963] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.902669][ T5979] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_1, syncid = 3, id = 0
[   61.110092][ T5971] Zero length message leads to an empty skb
[   61.784197][ T5850] Bluetooth: hci0: command tx timeout
[   61.867389][ T5850] Bluetooth: hci1: command tx timeout
[   61.902101][ T6055] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.929042][ T6056] netlink: 20 bytes leftover after parsing attributes in process `syz.2.28'.
[   61.934188][ T5850] Bluetooth: hci2: command tx timeout
[   62.091709][ T6070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.097487][ T6070] netlink: 'syz.2.32': attribute type 1 has an invalid length.
[   62.100167][ T6070] netlink: 28 bytes leftover after parsing attributes in process `syz.2.32'.
[   62.110038][ T6070] vlan2: entered allmulticast mode
[   62.111799][ T6070] macvtap0: entered allmulticast mode
[   62.113485][ T6070] veth0_macvtap: entered allmulticast mode
[   62.173420][ T6071] netlink: 14 bytes leftover after parsing attributes in process `syz.1.31'.
[   62.308255][ T6071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   62.325694][ T6071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   62.360978][ T6071] bond0 (unregistering): Released all slaves
[   62.595104][ T6091] vlan0: entered promiscuous mode
[   62.776956][ T6109] netlink: 'syz.0.40': attribute type 21 has an invalid length.
[   62.779350][ T6109] netlink: 156 bytes leftover after parsing attributes in process `syz.0.40'.
[   62.792663][ T6109] netlink: 88 bytes leftover after parsing attributes in process `syz.0.40'.
[   62.852922][ T6115] netlink: 'syz.0.43': attribute type 83 has an invalid length.
[   62.898934][ T6120] netlink: 'syz.2.45': attribute type 5 has an invalid length.
[   62.901387][ T6120] netlink: 'syz.2.45': attribute type 6 has an invalid length.
[   63.542136][ T6175] sctp: failed to load transform for md5: -2
[   63.714632][ T6188] tipc: Started in network mode
[   63.722400][ T6188] tipc: Node identity 92b5c659c074, cluster identity 4711
[   63.729748][ T6188] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   63.762624][ T6188] tipc: Disabling bearer <eth:syzkaller0>
[   63.854290][ T5850] Bluetooth: hci0: command tx timeout
[   63.935165][ T5850] Bluetooth: hci1: command tx timeout
[   63.994419][ T6206] __nla_validate_parse: 11 callbacks suppressed
[   63.994434][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.63'.
[   64.014528][ T5850] Bluetooth: hci2: command tx timeout
[   65.055271][ T6232] netlink: 'syz.2.72': attribute type 13 has an invalid length.
[   65.057732][ T6232] netlink: 'syz.2.72': attribute type 17 has an invalid length.
[   65.060195][ T6232] netlink: 'syz.2.72': attribute type 5 has an invalid length.
[   65.117516][ T6242] tipc: Started in network mode
[   65.119269][ T6242] tipc: Node identity 76dde6c31a99, cluster identity 4711
[   65.122099][ T6242] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.126215][ T6242] syzkaller0: entered promiscuous mode
[   65.128109][ T6242] syzkaller0: entered allmulticast mode
[   65.170867][ T6242] tipc: Resetting bearer <eth:syzkaller0>
[   65.182972][ T6239] tipc: Resetting bearer <eth:syzkaller0>
[   65.196256][ T6239] tipc: Disabling bearer <eth:syzkaller0>
[   65.951926][ T6293] netlink: 104 bytes leftover after parsing attributes in process `syz.0.89'.
[   66.025237][    T9] cfg80211: failed to load regulatory.db
[   66.281433][ T6321] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.98'.
[   66.349400][ T6332] sctp: [Deprecated]: syz.1.101 (pid 6332) Use of struct sctp_assoc_value in delayed_ack socket option.
[   66.349400][ T6332] Use struct sctp_sack_info instead
[   66.440139][ T6338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.103'.
[   66.447118][ T6338] syz.0.103 uses obsolete (PF_INET,SOCK_PACKET)
[   66.492988][ T6338] netlink: 44 bytes leftover after parsing attributes in process `syz.0.103'.
[   66.550424][ T6347] netlink: 104 bytes leftover after parsing attributes in process `syz.2.106'.
[   66.670419][ T6360] netlink: 104 bytes leftover after parsing attributes in process `syz.1.111'.
[   66.680401][ T6347] netlink: 277 bytes leftover after parsing attributes in process `syz.2.106'.
[   66.730501][ T6364] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   66.742836][ T6367] netlink: 'syz.0.113': attribute type 13 has an invalid length.
[   66.842887][ T6369] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[   67.075220][ T6388] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   67.076507][   T51] IPVS: starting estimator thread 0...
[   67.154795][ T6396] blkio.reset_stats is deprecated
[   67.173874][ T6392] IPVS: using max 61 ests per chain, 146400 per kthread
[   67.262799][ T6400] netlink: 104 bytes leftover after parsing attributes in process `syz.1.123'.
[   67.546317][ T6430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.133'.
[   69.308927][ T6463] __nla_validate_parse: 1 callbacks suppressed
[   69.308940][ T6463] netlink: 244 bytes leftover after parsing attributes in process `syz.0.145'.
[   69.447191][ T6468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.147'.
[   70.932322][ T6502] syzkaller1: entered promiscuous mode
[   70.939778][ T6502] syzkaller1: entered allmulticast mode
[   70.982513][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.985437][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.267668][ T6522] netlink: 'syz.2.166': attribute type 83 has an invalid length.
[   71.376866][ T6526] netdevsim netdevsim1: Direct firmware load for /. failed with error -2
[   71.379591][ T6526] netdevsim netdevsim1: Falling back to sysfs fallback for: /.
[   71.426970][ T6530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.167'.
[   71.430740][ T6530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.167'.
[   71.469231][ T6534] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.472535][ T6534] syzkaller0: entered allmulticast mode
[   71.500032][ T6534] tipc: Disabling bearer <eth:syzkaller0>
[   71.528611][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.172'.
[   71.542424][ T6540] netlink: 32 bytes leftover after parsing attributes in process `syz.1.172'.
[   71.679439][ T6543] netlink: 36 bytes leftover after parsing attributes in process `syz.1.173'.
[   71.701313][ T6542] netlink: 104 bytes leftover after parsing attributes in process `syz.1.173'.
[   71.943056][ T6570] netlink: 'syz.1.182': attribute type 1 has an invalid length.
[   71.977070][ T6570] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.169782][ T6645] netlink: 60 bytes leftover after parsing attributes in process `syz.2.187'.
[   73.310707][ T6656] netlink: 76 bytes leftover after parsing attributes in process `syz.0.193'.
[   73.316360][ T6656] nbd: illegal input index 65508
[   73.330805][ T6658] gtp0: entered promiscuous mode
[   73.332413][ T6658] gtp0: entered allmulticast mode
[   73.398329][ T6663] openvswitch: netlink: Flow key attr not present in new flow.
[   73.472819][ T6671] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   73.476418][ T6671] syzkaller0: entered promiscuous mode
[   73.478156][ T6671] syzkaller0: entered allmulticast mode
[   73.492747][ T6671] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   73.504432][ T6671] tipc: Resetting bearer <eth:syzkaller0>
[   73.526205][ T6670] tipc: Resetting bearer <eth:syzkaller0>
[   73.546859][ T6670] tipc: Disabling bearer <eth:syzkaller0>
[   74.739338][ T6716] __nla_validate_parse: 4 callbacks suppressed
[   74.739359][ T6716] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.211'.
[   74.749554][ T6716] netlink: zone id is out of range
[   74.753558][ T6716] netlink: zone id is out of range
[   74.757341][ T6716] netlink: zone id is out of range
[   74.758996][ T6716] netlink: zone id is out of range
[   74.760593][ T6716] netlink: zone id is out of range
[   74.762195][ T6716] netlink: zone id is out of range
[   74.768240][ T6716] netlink: zone id is out of range
[   74.769892][ T6716] netlink: zone id is out of range
[   74.771512][ T6716] netlink: zone id is out of range
[   74.798152][ T6720] netlink: 140 bytes leftover after parsing attributes in process `syz.2.212'.
[   74.867587][ T6726] netlink: 104 bytes leftover after parsing attributes in process `syz.1.215'.
[   74.877871][ T6730] Unsupported ieee802154 address type: 0
[   74.942336][ T6735] netlink: 'syz.1.218': attribute type 9 has an invalid length.
[   74.946417][ T6735] netlink: 'syz.1.218': attribute type 6 has an invalid length.
[   74.948898][ T6735] netlink: 'syz.1.218': attribute type 7 has an invalid length.
[   74.951271][ T6735] netlink: 'syz.1.218': attribute type 8 has an invalid length.
[   75.002278][ T6739] netlink: 76 bytes leftover after parsing attributes in process `syz.2.219'.
[   75.250835][ T6762] netlink: 20 bytes leftover after parsing attributes in process `syz.0.226'.
[   75.453878][ T5850] Bluetooth: hci2: command tx timeout
[   75.463215][ T6778] netlink: 100 bytes leftover after parsing attributes in process `syz.2.231'.
[   75.747540][ T6801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.240'.
[   75.804140][ T6806] pim6reg1: entered allmulticast mode
[   76.036105][ T6824] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[   76.040424][ T6824] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[   76.118491][ T6827] tap0: tun_chr_ioctl cmd 1074025680
[   76.122265][ T6827] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.129919][ T6827] D: renamed from syzkaller0
[   76.133257][ T6827] tipc: Disabling bearer <eth:syzkaller0>
[   76.232603][ T6830] netlink: 104 bytes leftover after parsing attributes in process `syz.2.248'.
[   76.831553][ T6859] nbd: must specify at least one socket
[   76.912175][ T6866] netlink: 112 bytes leftover after parsing attributes in process `syz.0.259'.
[   76.919401][ T6865] netlink: 112 bytes leftover after parsing attributes in process `syz.0.259'.
[   77.269968][ T6898] netlink: 'syz.2.274': attribute type 3 has an invalid length.
[   77.273165][ T6898] netlink: 'syz.2.274': attribute type 3 has an invalid length.
[   78.313498][ T6968] Bluetooth: MGMT ver 1.23
[   78.569184][ T6982] net_ratelimit: 6 callbacks suppressed
[   78.569232][ T6982] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.810778][ T7004] netlink: 'syz.1.313': attribute type 1 has an invalid length.
[   78.962766][ T7021] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   79.321932][ T7047] netlink: 'syz.2.329': attribute type 8 has an invalid length.
[   79.357089][ T7050] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.986296][ T7092] __nla_validate_parse: 21 callbacks suppressed
[   79.986310][ T7092] netlink: 32 bytes leftover after parsing attributes in process `syz.0.340'.
[   80.076692][ T7099] tipc: Invalid UDP bearer configuration
[   80.076726][ T7099] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   80.175303][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.348'.
[   80.178769][ T7111] netlink: 100 bytes leftover after parsing attributes in process `syz.0.348'.
[   80.196820][ T7111] syzkaller1: entered promiscuous mode
[   80.198619][ T7111] syzkaller1: entered allmulticast mode
[   80.266674][ T7115] netlink: 28 bytes leftover after parsing attributes in process `syz.1.349'.
[   80.387765][ T7122] smc: net device bond0 applied user defined pnetid SYZ2
[   81.075809][ T7138] netlink: 32 bytes leftover after parsing attributes in process `syz.2.356'.
[   81.123022][ T7146] netlink: 'syz.1.359': attribute type 1 has an invalid length.
[   81.127581][ T7146] netlink: 224 bytes leftover after parsing attributes in process `syz.1.359'.
[   81.132827][ T7146] netlink: 48 bytes leftover after parsing attributes in process `syz.1.359'.
[   81.169085][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.360'.
[   81.172599][ T7149] netlink: 'syz.2.358': attribute type 4 has an invalid length.
[   81.185768][ T7149] netlink: 'syz.2.358': attribute type 4 has an invalid length.
[   81.261377][ T7152] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   81.514986][ T7171] netlink: 24 bytes leftover after parsing attributes in process `syz.1.365'.
[   81.696816][ T7190] netlink: 120 bytes leftover after parsing attributes in process `syz.1.375'.
[   83.121612][ T7228] netlink: 'syz.0.387': attribute type 5 has an invalid length.
[   83.132677][ T7230] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   83.388966][ T7253] tc_dump_action: action bad kind
[   83.451847][ T7256] Driver unsupported XDP return value 0 on prog  (id 248) dev N/A, expect packet loss!
[   86.865938][ T7296] nbd: must specify at least one socket
[   87.028684][ T7313] tap0: tun_chr_ioctl cmd 1074025678
[   87.030559][ T7313] tap0: group set to 0
[   87.036499][ T7313] tap0: tun_chr_ioctl cmd 1074328842
[   87.452175][ T7337] __nla_validate_parse: 4 callbacks suppressed
[   87.452193][ T7337] netlink: 312 bytes leftover after parsing attributes in process `syz.0.425'.
[   87.766795][ T7357] netlink: 104 bytes leftover after parsing attributes in process `syz.1.430'.
[   87.820933][ T7365] netlink: 88 bytes leftover after parsing attributes in process `syz.1.435'.
[   87.825344][ T7365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.435'.
[   87.828210][ T7365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.435'.
[   88.130236][ T7435] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[   88.159448][ T7435] netlink: 'syz.0.447': attribute type 1 has an invalid length.
[   88.161823][ T7435] netlink: 224 bytes leftover after parsing attributes in process `syz.0.447'.
[   88.215424][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'.
[   88.286523][ T7448] netlink: 84 bytes leftover after parsing attributes in process `syz.1.453'.
[   88.362366][ T7453] netlink: 'syz.1.455': attribute type 1 has an invalid length.
[   88.388556][ T7453] netlink: 36 bytes leftover after parsing attributes in process `syz.1.455'.
[   88.439504][ T7458] trusted_key: syz.1.456 sent an empty control message without MSG_MORE.
[   88.489215][ T7461] netlink: 'syz.2.457': attribute type 11 has an invalid length.
[   88.566028][ T7465] netlink: 24 bytes leftover after parsing attributes in process `syz.0.458'.
[   89.054035][ T7500] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.057042][ T7500] syzkaller0: entered promiscuous mode
[   89.058961][ T7500] syzkaller0: entered allmulticast mode
[   89.079721][ T7500] tipc: Resetting bearer <eth:syzkaller0>
[   89.086429][ T7499] tipc: Resetting bearer <eth:syzkaller0>
[   89.097434][ T7499] tipc: Disabling bearer <eth:syzkaller0>
[   89.946660][ T7548] netlink: 'syz.1.484': attribute type 9 has an invalid length.
[   89.949311][ T7548] netlink: 'syz.1.484': attribute type 9 has an invalid length.
[   90.245508][ T7574] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   90.248295][ T7574] batman_adv: batadv0: Removing interface: batadv_slave_0
[   90.252568][ T7574] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.259597][ T7574] batman_adv: batadv0: Removing interface: batadv_slave_1
[   90.939501][ T7643] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   90.962281][ T7644] netlink: 'syz.2.516': attribute type 83 has an invalid length.
[   91.025364][ T7649] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[   91.099035][ T7650] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[   91.103138][ T7650] CPU: 1 UID: 0 PID: 7650 Comm: syz.1.521 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[   91.103149][ T7650] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   91.103155][ T7650] Call Trace:
[   91.103160][ T7650]  <TASK>
[   91.103165][ T7650]  dump_stack_lvl+0x189/0x250
[   91.103183][ T7650]  ? __pfx_dump_stack_lvl+0x10/0x10
[   91.103194][ T7650]  ? __pfx__printk+0x10/0x10
[   91.103209][ T7650]  ? kernfs_path_from_node+0x2f/0x290
[   91.103221][ T7650]  ? kernfs_path_from_node+0x250/0x290
[   91.103229][ T7650]  ? kernfs_path_from_node+0x2f/0x290
[   91.103240][ T7650]  sysfs_warn_dup+0x8e/0xa0
[   91.103249][ T7650]  sysfs_do_create_link_sd+0xc0/0x110
[   91.103260][ T7650]  device_add_class_symlinks+0x1cf/0x240
[   91.103275][ T7650]  device_add+0x475/0xb50
[   91.103288][ T7650]  wiphy_register+0x1ba6/0x28d0
[   91.103308][ T7650]  ? __pfx_wiphy_register+0x10/0x10
[   91.103317][ T7650]  ? minstrel_ht_alloc+0x6dd/0x7e0
[   91.103335][ T7650]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[   91.103351][ T7650]  ieee80211_register_hw+0x3425/0x4080
[   91.103375][ T7650]  ? ieee80211_register_hw+0x14b1/0x4080
[   91.103390][ T7650]  ? __pfx_ieee80211_register_hw+0x10/0x10
[   91.103404][ T7650]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   91.103420][ T7650]  ? __hrtimer_setup+0x187/0x210
[   91.103429][ T7650]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[   91.103442][ T7650]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[   91.103466][ T7650]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[   91.103475][ T7650]  ? trace_kmalloc+0x1f/0xd0
[   91.103487][ T7650]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[   91.103498][ T7650]  ? kstrndup+0xbf/0x160
[   91.103513][ T7650]  hwsim_new_radio_nl+0xea4/0x1b10
[   91.103523][ T7650]  ? __pfx___nla_validate_parse+0x10/0x10
[   91.103543][ T7650]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   91.103559][ T7650]  ? __nla_parse+0x40/0x60
[   91.103571][ T7650]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   91.103586][ T7650]  genl_family_rcv_msg_doit+0x215/0x300
[   91.103598][ T7650]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   91.103613][ T7650]  ? bpf_lsm_capable+0x9/0x20
[   91.103624][ T7650]  ? security_capable+0x7e/0x2e0
[   91.103640][ T7650]  genl_rcv_msg+0x60e/0x790
[   91.103651][ T7650]  ? __pfx_genl_rcv_msg+0x10/0x10
[   91.103659][ T7650]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[   91.103675][ T7650]  netlink_rcv_skb+0x208/0x470
[   91.103685][ T7650]  ? __lock_acquire+0xab9/0xd20
[   91.103699][ T7650]  ? __pfx_genl_rcv_msg+0x10/0x10
[   91.103708][ T7650]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   91.103743][ T7650]  ? down_read+0x1ad/0x2e0
[   91.103759][ T7650]  genl_rcv+0x28/0x40
[   91.103770][ T7650]  netlink_unicast+0x82f/0x9e0
[   91.103784][ T7650]  ? __pfx_netlink_unicast+0x10/0x10
[   91.103818][ T7650]  ? netlink_sendmsg+0x642/0xb30
[   91.103827][ T7650]  ? skb_put+0x11b/0x210
[   91.103847][ T7650]  netlink_sendmsg+0x805/0xb30
[   91.103864][ T7650]  ? __pfx_netlink_sendmsg+0x10/0x10
[   91.103877][ T7650]  ? aa_sock_msg_perm+0xf1/0x1d0
[   91.103892][ T7650]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   91.103902][ T7650]  ? __pfx_netlink_sendmsg+0x10/0x10
[   91.103914][ T7650]  __sock_sendmsg+0x21c/0x270
[   91.103927][ T7650]  ____sys_sendmsg+0x505/0x830
[   91.103943][ T7650]  ? __pfx_____sys_sendmsg+0x10/0x10
[   91.103960][ T7650]  ? import_iovec+0x74/0xa0
[   91.103971][ T7650]  ___sys_sendmsg+0x21f/0x2a0
[   91.103985][ T7650]  ? __pfx____sys_sendmsg+0x10/0x10
[   91.104016][ T7650]  ? __fget_files+0x2a/0x420
[   91.104030][ T7650]  ? __fget_files+0x3a0/0x420
[   91.104047][ T7650]  __x64_sys_sendmsg+0x19b/0x260
[   91.104061][ T7650]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   91.104079][ T7650]  ? do_user_addr_fault+0xc8a/0x1390
[   91.104097][ T7650]  ? do_syscall_64+0xbe/0x3b0
[   91.104111][ T7650]  do_syscall_64+0xfa/0x3b0
[   91.104121][ T7650]  ? lockdep_hardirqs_on+0x9c/0x150
[   91.104132][ T7650]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.104141][ T7650]  ? exc_page_fault+0x9f/0xf0
[   91.104152][ T7650]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   91.104161][ T7650] RIP: 0033:0x7f1fa838ebe9
[   91.104200][ T7650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   91.104207][ T7650] RSP: 002b:00007f1fa65d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   91.104217][ T7650] RAX: ffffffffffffffda RBX: 00007f1fa85b6090 RCX: 00007f1fa838ebe9
[   91.104223][ T7650] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005
[   91.104229][ T7650] RBP: 00007f1fa8411e19 R08: 0000000000000000 R09: 0000000000000000
[   91.104234][ T7650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   91.104239][ T7650] R13: 00007f1fa85b6128 R14: 00007f1fa85b6090 R15: 00007ffdc027ce18
[   91.104253][ T7650]  </TASK>
[   91.347076][ T7667] netlink: 'syz.0.526': attribute type 1 has an invalid length.
[   91.378337][ T7667] 8021q: adding VLAN 0 to HW filter on device bond1
[   91.405642][ T7667] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.410610][ T7667] bond1: (slave batadv0): making interface the new active one
[   91.415640][ T7667] bond1: (slave batadv0): Enslaving as an active interface with an up link
[   91.441410][ T7667] netlink: 'syz.0.526': attribute type 21 has an invalid length.
[   91.444400][ T7667] netlink: 'syz.0.526': attribute type 22 has an invalid length.
[   91.446985][ T7667] netlink: 'syz.0.526': attribute type 23 has an invalid length.
[   91.691411][ T7697] netlink: 'syz.1.535': attribute type 2 has an invalid length.
[   91.822940][ T7710] bridge_slave_0: left allmulticast mode
[   91.830338][ T7710] bridge_slave_0: left promiscuous mode
[   91.833045][ T7710] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.845787][ T7712] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.128521][ T7710] bridge_slave_1: left allmulticast mode
[   92.130299][ T7710] bridge_slave_1: left promiscuous mode
[   92.132142][ T7710] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.140955][ T7710] bond0: (slave bond_slave_0): Releasing backup interface
[   92.147100][ T7710] bond0: (slave bond_slave_1): Releasing backup interface
[   92.157940][ T7710] team0: Port device team_slave_0 removed
[   92.212140][ T7710] team0: Port device team_slave_1 removed
[   92.216519][ T7710] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.219517][ T7710] batman_adv: batadv0: Removing interface: batadv_slave_0
[   92.226325][ T7710] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.228931][ T7710] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.376289][ T5862] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   93.561035][ T7789] batadv_slave_1: entered promiscuous mode
[   94.104974][ T7787] batadv_slave_1: left promiscuous mode
[   94.233703][ T7816] __nla_validate_parse: 14 callbacks suppressed
[   94.233714][ T7816] netlink: 28 bytes leftover after parsing attributes in process `syz.1.561'.
[   94.346782][ T7826] bridge0: port 1(erspan0) entered blocking state
[   94.349293][ T7826] bridge0: port 1(erspan0) entered disabled state
[   94.351777][ T7826] erspan0: entered allmulticast mode
[   94.355188][ T7826] erspan0: entered promiscuous mode
[   94.359662][ T7826] bridge0: port 1(erspan0) entered blocking state
[   94.362195][ T7826] bridge0: port 1(erspan0) entered forwarding state
[   94.372369][ T7826] erspan0: left allmulticast mode
[   94.374720][ T7826] erspan0: left promiscuous mode
[   94.376708][ T7826] bridge0: port 1(erspan0) entered disabled state
[   94.509864][ T7839] netlink: 28 bytes leftover after parsing attributes in process `syz.2.567'.
[   94.571938][ T7842] validate_nla: 1 callbacks suppressed
[   94.571982][ T7842] netlink: 'syz.2.567': attribute type 4 has an invalid length.
[   94.670418][ T7845] netlink: 332 bytes leftover after parsing attributes in process `syz.2.569'.
[   94.673205][ T7845] netlink: 104 bytes leftover after parsing attributes in process `syz.2.569'.
[   94.676339][ T7845] netlink: 32 bytes leftover after parsing attributes in process `syz.2.569'.
[   94.989032][ T7875] netlink: 'syz.2.577': attribute type 4 has an invalid length.
[   95.022328][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.578'.
[   95.278304][ T7899] netlink: 60 bytes leftover after parsing attributes in process `syz.0.585'.
[   95.290851][ T7899] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   95.353427][ T7905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.587'.
[   95.382937][ T7905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.587'.
[   95.455109][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.590'.
[   95.591614][ T7929] bridge1: the hash_elasticity option has been deprecated and is always 16
[   95.868247][ T7953] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   95.870519][ T7953] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   97.119652][ T7982] syzkaller0: entered promiscuous mode
[   97.121985][ T7982] syzkaller0: entered allmulticast mode
[   98.560204][ T5911] IPVS: starting estimator thread 0...
[   98.643969][ T8005] IPVS: using max 35 ests per chain, 84000 per kthread
[   99.183322][ T8030] openvswitch: netlink: Unknown nsh attribute 0
[   99.188271][ T8029] openvswitch: netlink: Unknown nsh attribute 0
[   99.190713][ T8029] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.194767][ T8030] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.246417][ T8037] __nla_validate_parse: 11 callbacks suppressed
[   99.246434][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.628'.
[   99.252348][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.628'.
[   99.258582][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.628'.
[   99.261968][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.628'.
[   99.265919][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.628'.
[   99.269790][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.628'.
[   99.273144][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.628'.
[   99.277269][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.628'.
[   99.280747][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.628'.
[   99.285279][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.628'.
[   99.395928][ T8047] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.348980][ T8141] netlink: 'syz.2.665': attribute type 3 has an invalid length.
[  100.478052][ T8153] openvswitch: netlink: IPv4 tun info is not correct
[  100.637775][ T8172] bond0: Error: Cannot enslave bond to itself.
[  100.640850][ T8172] chnl_net:caif_netlink_parms(): no params data found
[  100.955426][ T8197] netlink: 'syz.1.687': attribute type 10 has an invalid length.
[  101.005634][ T8196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  101.007727][ T8202] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20004
[  101.609554][ T5850] Bluetooth: hci2: link tx timeout
[  101.612071][ T5850] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  101.621351][ T5850] Bluetooth: hci2: link tx timeout
[  101.622961][ T5850] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  101.801329][ T8250] syzkaller1: entered promiscuous mode
[  101.803160][ T8250] syzkaller1: entered allmulticast mode
[  101.951737][ T8267] netlink: 'syz.1.708': attribute type 1 has an invalid length.
[  102.044057][ T8273] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20004
[  102.088135][ T8283] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  102.118224][ T8279] pim6reg1: entered promiscuous mode
[  102.120041][ T8279] pim6reg1: entered allmulticast mode
[  102.155434][ T8285] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.157912][ T8285] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  102.160329][ T8285] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  102.171737][ T8285] tipc: Resetting bearer <eth:syzkaller0>
[  102.739286][ T8341] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  102.856075][ T8354] syzkaller1: entered promiscuous mode
[  102.857854][ T8354] syzkaller1: entered allmulticast mode
[  103.165158][ T5844] tipc: Node number set to 1388430937
[  103.285709][ T8374] netlink: 'syz.0.748': attribute type 1 has an invalid length.
[  103.454457][ T8377] macsec1: entered allmulticast mode
[  103.459044][ T8377] macsec0: entered allmulticast mode
[  103.462229][ T8377] veth1_macvtap: entered allmulticast mode
[  103.700091][ T5850] Bluetooth: hci2: command 0x0406 tx timeout
[  103.887608][ T8414] syzkaller0: entered promiscuous mode
[  103.890332][ T8414] syzkaller0: entered allmulticast mode
[  103.897803][ T8414] tipc: New replicast peer: 0.0.0.0
[  103.900336][ T8414] tipc: Enabled bearer <udp:syz2>, priority 10
[  103.925646][ T8415] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  104.301001][ T8447] netlink: 'syz.2.768': attribute type 21 has an invalid length.
[  105.015899][ T5911] tipc: Node number set to 1816454851
[  105.139591][ T8447] __nla_validate_parse: 75 callbacks suppressed
[  105.139609][ T8447] netlink: 156 bytes leftover after parsing attributes in process `syz.2.768'.
[  105.155295][ T8447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.768'.
[  105.248469][ T8462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.771'.
[  105.285012][ T8465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.357188][ T8470] bridge_slave_0: left allmulticast mode
[  105.359504][ T8470] bridge_slave_0: left promiscuous mode
[  105.361358][ T8470] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.367394][ T8470] bridge_slave_1: left allmulticast mode
[  105.369142][ T8470] bridge_slave_1: left promiscuous mode
[  105.371176][ T8470] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.386092][ T8470] team0: Port device team_slave_0 removed
[  105.393583][ T8470] team0: Port device team_slave_1 removed
[  105.398254][ T8470] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.402709][ T8470] batman_adv: batadv0: Removing interface: batadv_slave_0
[  105.428119][ T8470] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  105.430543][ T8470] batman_adv: batadv0: Removing interface: batadv_slave_1
[  105.450053][ T8473] team0: Mode changed to "loadbalance"
[  105.458049][ T8477] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.460656][ T8477] syzkaller0: entered promiscuous mode
[  105.462603][ T8477] syzkaller0: entered allmulticast mode
[  105.467645][ T8476] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  105.492742][ T8476] tipc: Resetting bearer <eth:syzkaller0>
[  105.509834][ T8475] tipc: Resetting bearer <eth:syzkaller0>
[  105.519425][ T8475] tipc: Disabling bearer <eth:syzkaller0>
[  105.559602][ T8480] netlink: 'syz.1.775': attribute type 1 has an invalid length.
[  105.945204][ T8506] netlink: 32 bytes leftover after parsing attributes in process `syz.1.785'.
[  105.988867][ T8508] openvswitch: netlink: Tunnel attr 227 out of range max 16
[  106.037882][ T8517] netlink: 100 bytes leftover after parsing attributes in process `syz.0.789'.
[  106.121089][ T8522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.791'.
[  106.149161][ T8529] openvswitch: netlink: IP tunnel dst address not specified
[  106.157931][ T8529] netlink: 'syz.2.793': attribute type 1 has an invalid length.
[  106.187144][ T8529] bond3: entered promiscuous mode
[  106.188792][ T8529] bond3: entered allmulticast mode
[  106.192029][ T8529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.793'.
[  106.558478][ T8579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.811'.
[  106.636126][ T8586] netlink: 32 bytes leftover after parsing attributes in process `syz.2.814'.
[  106.638883][ T8588] netlink: 'syz.0.815': attribute type 21 has an invalid length.
[  106.641661][ T8588] netlink: 128 bytes leftover after parsing attributes in process `syz.0.815'.
[  106.645130][ T8586] netem: unknown loss type 13
[  106.645158][ T8586] netem: change failed
[  106.650970][ T8588] netlink: 'syz.0.815': attribute type 5 has an invalid length.
[  106.775768][ T8603] netlink: 'syz.0.821': attribute type 31 has an invalid length.
[  107.020308][ T8626] netlink: 'syz.1.829': attribute type 4 has an invalid length.
[  107.046435][ T8626] netlink: 'syz.1.829': attribute type 4 has an invalid length.
[  107.102096][ T8633] ieee802154 phy0 wpan0: encryption failed: -22
[  107.192273][ T8641] syz.0.833: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  107.198478][ T8641] CPU: 1 UID: 0 PID: 8641 Comm: syz.0.833 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  107.198496][ T8641] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  107.198506][ T8641] Call Trace:
[  107.198513][ T8641]  <TASK>
[  107.198521][ T8641]  dump_stack_lvl+0x189/0x250
[  107.198552][ T8641]  ? __pfx_dump_stack_lvl+0x10/0x10
[  107.198568][ T8641]  ? __pfx__printk+0x10/0x10
[  107.198583][ T8641]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  107.198603][ T8641]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  107.198614][ T8641]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  107.198626][ T8641]  warn_alloc+0x214/0x310
[  107.198681][ T8641]  ? stack_depot_save_flags+0x40/0x860
[  107.198694][ T8641]  ? __pfx_warn_alloc+0x10/0x10
[  107.198710][ T8641]  ? kasan_save_track+0x4f/0x80
[  107.198723][ T8641]  ? xskq_create+0x56/0x170
[  107.198733][ T8641]  ? xsk_init_queue+0xb0/0x110
[  107.198741][ T8641]  ? xsk_setsockopt+0x4dc/0x8d0
[  107.198749][ T8641]  ? do_sock_setsockopt+0x17c/0x1b0
[  107.198763][ T8641]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  107.198775][ T8641]  ? do_syscall_64+0xfa/0x3b0
[  107.198786][ T8641]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.198799][ T8641]  __vmalloc_node_range_noprof+0x125/0x12f0
[  107.198827][ T8641]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  107.198840][ T8641]  ? xskq_create+0x56/0x170
[  107.198850][ T8641]  ? __kasan_kmalloc+0x93/0xb0
[  107.198863][ T8641]  vmalloc_user_noprof+0xad/0xf0
[  107.198875][ T8641]  ? xskq_create+0xbf/0x170
[  107.198885][ T8641]  xskq_create+0xbf/0x170
[  107.198896][ T8641]  xsk_init_queue+0xb0/0x110
[  107.198906][ T8641]  xsk_setsockopt+0x4dc/0x8d0
[  107.198916][ T8641]  ? __pfx_xsk_setsockopt+0x10/0x10
[  107.198925][ T8641]  ? __pfx_aa_sk_perm+0x10/0x10
[  107.198938][ T8641]  ? aa_sock_opt_perm+0xff/0x1b0
[  107.198951][ T8641]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  107.198961][ T8641]  ? __pfx_xsk_setsockopt+0x10/0x10
[  107.198971][ T8641]  do_sock_setsockopt+0x17c/0x1b0
[  107.198985][ T8641]  __x64_sys_setsockopt+0x13f/0x1b0
[  107.198999][ T8641]  do_syscall_64+0xfa/0x3b0
[  107.199009][ T8641]  ? lockdep_hardirqs_on+0x9c/0x150
[  107.199020][ T8641]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.199028][ T8641]  ? exc_page_fault+0x9f/0xf0
[  107.199039][ T8641]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.199048][ T8641] RIP: 0033:0x7f6b3df8ebe9
[  107.199058][ T8641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  107.199066][ T8641] RSP: 002b:00007f6b3c1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  107.199076][ T8641] RAX: ffffffffffffffda RBX: 00007f6b3e1b5fa0 RCX: 00007f6b3df8ebe9
[  107.199083][ T8641] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  107.199088][ T8641] RBP: 00007f6b3e011e19 R08: 0000000000000004 R09: 0000000000000000
[  107.199093][ T8641] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  107.199098][ T8641] R13: 00007f6b3e1b6038 R14: 00007f6b3e1b5fa0 R15: 00007fffb73d1968
[  107.199113][ T8641]  </TASK>
[  107.199118][ T8641] Mem-Info:
[  107.311727][ T8641] active_anon:5627 inactive_anon:0 isolated_anon:0
[  107.311727][ T8641]  active_file:1005 inactive_file:38223 isolated_file:0
[  107.311727][ T8641]  unevictable:1768 dirty:73 writeback:0
[  107.311727][ T8641]  slab_reclaimable:9577 slab_unreclaimable:83982
[  107.311727][ T8641]  mapped:18164 shmem:2464 pagetables:1002
[  107.311727][ T8641]  sec_pagetables:0 bounce:0
[  107.311727][ T8641]  kernel_misc_reclaimable:0
[  107.311727][ T8641]  free:258997 free_pcp:26013 free_cma:0
[  107.329116][ T8641] Node 0 active_anon:12956kB inactive_anon:0kB active_file:2868kB inactive_file:148076kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28484kB dirty:56kB writeback:0kB shmem:4728kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7108kB pagetables:2188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  107.340008][ T8641] Node 1 active_anon:9552kB inactive_anon:0kB active_file:1152kB inactive_file:4816kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:44172kB dirty:236kB writeback:0kB shmem:5128kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6016kB pagetables:1888kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  107.349458][ T8641] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  107.358337][ T8641] lowmem_reserve[]: 0 811 811 811 811
[  107.360021][ T8641] Node 0 DMA32 free:181592kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13024kB inactive_anon:0kB active_file:2868kB inactive_file:148076kB unevictable:3536kB writepending:56kB present:1556484kB managed:830996kB mlocked:0kB bounce:0kB free_pcp:52344kB local_pcp:18464kB free_cma:0kB
[  107.370892][ T8641] lowmem_reserve[]: 0 0 0 0 0
[  107.372400][ T8641] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  107.381974][ T8641] lowmem_reserve[]: 0 0 854 854 854
[  107.384450][ T8641] Node 1 Normal free:380544kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9552kB inactive_anon:0kB active_file:1152kB inactive_file:4816kB unevictable:3536kB writepending:236kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:52384kB local_pcp:30552kB free_cma:0kB
[  107.393977][ T8641] lowmem_reserve[]: 0 0 0 0 0
[  107.395537][ T8641] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  107.399392][ T8641] Node 0 DMA32: 1*4kB (E) 15*8kB (ME) 111*16kB (M) 278*32kB (UME) 92*64kB (UME) 32*128kB (UM) 22*256kB (UM) 19*512kB (UME) 10*1024kB (UM) 2*2048kB (ME) 32*4096kB (M) = 181548kB
[  107.405481][ T8641] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  107.410880][ T8641] Node 1 Normal: 700*4kB (UM) 426*8kB (UME) 576*16kB (UME) 308*32kB (UME) 117*64kB (UM) 61*128kB (UME) 30*256kB (UME) 5*512kB (UM) 6*1024kB (UME) 2*2048kB (UM) 78*4096kB (M) = 380544kB
[  107.416654][ T8641] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  107.419558][ T8641] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  107.422772][ T8641] 41811 total pagecache pages
[  107.424503][ T8641] 0 pages in swap cache
[  107.425843][ T8641] Free swap  = 124996kB
[  107.427211][ T8641] Total swap = 124996kB
[  107.429734][ T8641] 786301 pages RAM
[  107.433241][ T8641] 0 pages HighMem/MovableOnly
[  107.435701][ T8641] 241320 pages reserved
[  107.437176][ T8641] 0 pages cma reserved
[  107.612790][ T8664] netlink: 'syz.1.842': attribute type 9 has an invalid length.
[  107.822363][ T8677] netlink: 'syz.2.847': attribute type 1 has an invalid length.
[  108.011026][ T8696] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535)
[  108.016219][ T8696] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  108.723200][ T8754] netlink: 'syz.2.863': attribute type 21 has an invalid length.
[  109.045046][ T8777] pim6reg1: entered promiscuous mode
[  109.046762][ T8777] pim6reg1: entered allmulticast mode
[  110.295103][ T8853] __nla_validate_parse: 24 callbacks suppressed
[  110.295116][ T8853] netlink: 24 bytes leftover after parsing attributes in process `syz.2.900'.
[  110.335854][ T8857] netlink: 104 bytes leftover after parsing attributes in process `syz.0.902'.
[  110.350301][ T8858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.900'.
[  110.616909][ T8888] netlink: 112 bytes leftover after parsing attributes in process `syz.1.909'.
[  110.702216][ T8896] netlink: 28 bytes leftover after parsing attributes in process `syz.1.913'.
[  111.006089][ T8906] netlink: 44 bytes leftover after parsing attributes in process `syz.1.915'.
[  111.841710][ T8960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.930'.
[  111.846159][ T8961] netlink: 1 bytes leftover after parsing attributes in process `syz.0.925'.
[  111.849589][ T8960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.930'.
[  111.875452][ T8960] netlink: 256 bytes leftover after parsing attributes in process `syz.1.930'.
[  112.012752][ T8980] syzkaller0: entered promiscuous mode
[  112.018231][ T8980] syzkaller0: entered allmulticast mode
[  112.021426][ T8980] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  112.096096][ T8988] openvswitch: netlink: Geneve opt len 63 is not a multiple of 4.
[  112.326150][ T9006] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.330131][ T9006] syzkaller0: entered promiscuous mode
[  112.332333][ T9006] syzkaller0: entered allmulticast mode
[  112.357738][ T9006] tipc: Resetting bearer <eth:syzkaller0>
[  112.362368][ T9005] tipc: Resetting bearer <eth:syzkaller0>
[  112.392501][ T9005] tipc: Disabling bearer <eth:syzkaller0>
[  112.523335][ T9017] pimreg: entered allmulticast mode
[  112.575476][ T9030] Bluetooth: MGMT ver 1.23
[  112.702601][ T9041] bridge2: the hash_elasticity option has been deprecated and is always 16
[  112.708119][ T9041] bridge2: entered allmulticast mode
[  112.721355][ T9042] bridge3: the hash_elasticity option has been deprecated and is always 16
[  112.724201][ T9042] bridge3: entered allmulticast mode
[  112.795810][ T9050] syzkaller1: entered promiscuous mode
[  112.797701][ T9050] syzkaller1: entered allmulticast mode
[  112.800177][ T9050] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  113.012959][ T9070] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  132.416025][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.418436][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  143.195450][ T9074] __nla_validate_parse: 9 callbacks suppressed
[  143.195468][ T9074] netlink: 100 bytes leftover after parsing attributes in process `syz.0.972'.
[  143.223974][ T9081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.974'.
[  143.473059][ T9096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.980'.
[  143.573005][ T9105] netlink: 36 bytes leftover after parsing attributes in process `syz.2.982'.
[  143.582806][ T9105] netlink: 100 bytes leftover after parsing attributes in process `syz.2.982'.
[  143.709450][ T9123] netlink: 120 bytes leftover after parsing attributes in process `syz.2.988'.
[  143.745586][ T9128] ieee802154 phy0 wpan0: encryption failed: -22
[  143.813356][ T9138] validate_nla: 1 callbacks suppressed
[  143.813369][ T9138] netlink: 'syz.1.992': attribute type 27 has an invalid length.
[  143.822230][ T9139] netlink: 'syz.1.992': attribute type 27 has an invalid length.
[  143.941530][ T9156] sctp: [Deprecated]: syz.2.997 (pid 9156) Use of int in max_burst socket option.
[  143.941530][ T9156] Use struct sctp_assoc_value instead
[  144.889182][ T9180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1006'.
[  145.032667][ T9191] tipc: Can't bind to reserved service type 0
[  145.595594][ T9220] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  145.600868][ T9220] macsec1: entered promiscuous mode
[  145.603274][ T9220] macsec1: entered allmulticast mode
[  145.608697][ T9220] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  145.657196][ T9226] netlink: 516 bytes leftover after parsing attributes in process `syz.0.1022'.
[  145.783536][ T9238] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1027'.
[  164.503972][ T5912] page_pool_release_retry() stalled pool shutdown: id 22, 1 inflight 60 sec
[  173.504010][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1031'.
[  173.510964][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1031'.
[  173.515572][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1031'.
[  173.521206][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1031'.
[  173.528196][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1031'.
[  174.512396][ T9281] bridge0: port 1(erspan0) entered blocking state
[  174.517414][ T9281] bridge0: port 1(erspan0) entered disabled state
[  174.520401][ T9281] erspan0: entered allmulticast mode
[  174.533521][ T9281] erspan0: entered promiscuous mode
[  174.540705][ T9281] bridge0: port 1(erspan0) entered blocking state
[  174.543492][ T9281] bridge0: port 1(erspan0) entered forwarding state
[  174.551348][ T9281] erspan0: left allmulticast mode
[  174.553417][ T9281] erspan0: left promiscuous mode
[  174.557585][ T9281] bridge0: port 1(erspan0) entered disabled state
[  175.357196][ T9330] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1047'.
[  175.375184][ T9331] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1047'.
[  175.504047][ T9338] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1050'.
[  175.546909][ T9349] IPVS: set_ctl: invalid protocol: 115 10.1.1.0:20002
[  175.611097][ T9353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1053'.
[  175.668044][ T9364] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  175.700283][ T9366] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1056'.
[  175.741951][ T9374] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  175.747078][ T9374] syzkaller0: entered promiscuous mode
[  175.748862][ T9374] syzkaller0: entered allmulticast mode
[  175.762093][ T9374] tipc: Resetting bearer <eth:syzkaller0>
[  175.776355][ T9373] tipc: Resetting bearer <eth:syzkaller0>
[  175.788319][ T9373] tipc: Disabling bearer <eth:syzkaller0>
[  177.240886][ T9441] 8021q: adding VLAN 0 to HW filter on device bond4
[  177.256530][ T9446] macvlan2: entered promiscuous mode
[  177.265893][ T9446] macvlan2: entered allmulticast mode
[  177.276511][ T9441] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.730803][ T9478] netlink: 'syz.0.1093': attribute type 7 has an invalid length.
[  177.734992][ T9478] netlink: 'syz.0.1093': attribute type 8 has an invalid length.
[  177.832769][ T9484] netlink: 'syz.0.1095': attribute type 10 has an invalid length.
[  178.716326][ T9520] gtp0: left promiscuous mode
[  178.718292][ T9520] gtp0: left allmulticast mode
[  178.753342][ T9520] bridge2: left allmulticast mode
[  178.755841][ T9520] bridge3: left allmulticast mode
[  178.764484][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.767914][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.771299][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.774794][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.858039][ T9541] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  179.967744][ T9582] netlink: 'syz.1.1117': attribute type 10 has an invalid length.
[  179.972253][ T9582] __nla_validate_parse: 18 callbacks suppressed
[  179.972265][ T9582] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1117'.
[  179.982390][ T9582] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1117'.
[  179.991951][ T9582] netlink: 'syz.1.1117': attribute type 12 has an invalid length.
[  179.996141][ T9582] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1117'.
[  180.001986][ T9581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  180.091801][ T9584] netlink: 212296 bytes leftover after parsing attributes in process `syz.0.1118'.
[  180.399496][ T9599] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1124'.
[  180.459024][ T9601] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1125'.
[  180.462928][ T9602] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1125'.
[  180.499243][ T9605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1126'.
[  180.547253][ T9605] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1126'.
[  180.574005][ T5850] Bluetooth: hci1: command 0x0406 tx timeout
[  180.624390][ T9605] nbd0: detected capacity change from 0 to 875674160
[  180.648585][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1128'.
[  180.857286][    C1] vcan0: j1939_tp_rxtimer: 0xffff888112644800: rx timeout, send abort
[  181.121192][ T9642] netlink: 'syz.0.1138': attribute type 7 has an invalid length.
[  181.126944][ T9642] netlink: 'syz.0.1138': attribute type 8 has an invalid length.
[  181.230139][ T9654] netlink: 'syz.0.1141': attribute type 1 has an invalid length.
[  181.357402][    C1] vcan0: j1939_tp_rxtimer: 0xffff888112644c00: rx timeout, send abort
[  181.361170][    C1] vcan0: j1939_tp_rxtimer: 0xffff888112644800: abort rx timeout. Force session deactivation
[  181.365254][   T55] block nbd0: Receive control failed (result -104)
[  181.436921][ T9667] syz_tun: entered allmulticast mode
[  181.449830][ T9666] syz_tun: left allmulticast mode
[  181.451507][ T9669] netlink: 'syz.1.1148': attribute type 1 has an invalid length.
[  181.660005][ T9688] netlink: 'syz.2.1155': attribute type 21 has an invalid length.
[  181.860225][    C1] vcan0: j1939_tp_rxtimer: 0xffff888112644c00: abort rx timeout. Force session deactivation
[  182.037593][ T9726] bond5: entered promiscuous mode
[  182.039458][ T9726] 8021q: adding VLAN 0 to HW filter on device bond5
[  182.049666][ T9726] batadv1: entered promiscuous mode
[  182.051445][ T9726] batadv1: entered allmulticast mode
[  182.054320][ T9726] 8021q: adding VLAN 0 to HW filter on device batadv1
[  182.064712][ T9726] bond5: (slave batadv1): making interface the new active one
[  182.067617][ T9726] bond5: (slave batadv1): Enslaving as an active interface with an up link
[  182.341113][ T9756] dummy0: mtu less than device minimum
[  182.781316][ T9775] veth0_macvtap: left allmulticast mode
[  182.786480][ T9775] veth1_macvtap: left allmulticast mode
[  182.837280][ T9775] tipc: Resetting bearer <eth:syzkaller0>
[  182.843056][ T9775] macsec0: left allmulticast mode
[  182.875017][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  182.883313][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  182.890426][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  182.893309][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  183.222764][ T9839] validate_nla: 6 callbacks suppressed
[  183.222781][ T9839] netlink: 'syz.2.1205': attribute type 7 has an invalid length.
[  183.228310][ T9839] netlink: 'syz.2.1205': attribute type 8 has an invalid length.
[  183.793000][ T9894] tipc: Enabling of bearer <eth:caif0> rejected, failed to enable media
[  184.009026][ T9911] syzkaller0: entered promiscuous mode
[  184.011442][ T9911] syzkaller0: entered allmulticast mode
[  185.127095][ T9918] __nla_validate_parse: 35 callbacks suppressed
[  185.127117][ T9918] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1233'.
[  185.187412][ T9936] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1237'.
[  185.192549][ T9937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1237'.
[  185.199775][ T9938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1237'.
[  185.251664][ T9940] netlink: 'syz.2.1238': attribute type 83 has an invalid length.
[  185.354496][ T9946] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1239'.
[  185.456670][ T9960] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  185.671936][ T9975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1248'.
[  185.903534][ T9994] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1254'.
[  185.969938][T10003] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1253'.
[  186.037543][T10009] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1257'.
[  186.114176][T10014] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  186.432366][T10032] bridge5: the hash_elasticity option has been deprecated and is always 16
[  186.501199][T10036] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1267'.
[  187.408002][T10088] tc_dump_action: action bad kind
[  187.694611][T10113] syzkaller0: create flow: hash 670479394 index 3
[  187.738630][ T5913] syzkaller0: tun_net_xmit 76
[  187.740668][ T5913] syzkaller0: tun_net_xmit 48
[  187.764312][ T5844] syzkaller0: tun_net_xmit 76
[  187.815076][T10111] syzkaller0: delete flow: hash 670479394 index 3
[  189.051931][   T13] nci: nci_rx_work: unknown MT 0x1
[  190.137893][T10188] __nla_validate_parse: 12 callbacks suppressed
[  190.137911][T10188] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1312'.
[  190.202196][T10195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1314'.
[  190.559478][T10219] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1320'.
[  190.818120][ T5237] Bluetooth: hci2: link tx timeout
[  190.819828][ T5237] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  191.056768][T10237] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1326'.
[  191.061994][T10238] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1326'.
[  191.392480][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1328'.
[  191.397463][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1328'.
[  191.508235][T10253] syzkaller1: entered promiscuous mode
[  191.510826][T10253] syzkaller1: entered allmulticast mode
[  191.810755][T10277] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  192.127892][T10297] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1344'.
[  192.130836][T10297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1344'.
[  192.295604][ T5237] Bluetooth: hci2: link tx timeout
[  192.298194][ T5237] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  192.369827][T10307] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.372493][T10307] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.532988][ T5237] Bluetooth: hci2: link tx timeout
[  192.535405][ T5237] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  192.582317][T10307] vlan0: left promiscuous mode
[  192.671315][T10307] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  192.674465][T10307] macsec1: left promiscuous mode
[  192.676811][T10307] macsec1: left allmulticast mode
[  192.709848][T10314] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1349'.
[  192.714413][T10319] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  192.717900][ T5862] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.721770][ T5862] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.740849][ T5862] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.758663][ T5862] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.845792][T10336] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  192.897437][ T5237] Bluetooth: hci2: command 0x0406 tx timeout
[  193.082353][T10348] netlink: 'syz.0.1353': attribute type 11 has an invalid length.
[  193.394166][T10379] team0: Device gtp0 is of different type
[  193.858445][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  193.860946][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  211.146555][ T1118] block nbd0: Possible stuck request ffff888021858000: control (read@0,4096B). Runtime 30 seconds
[  221.348394][T10414] __nla_validate_parse: 2 callbacks suppressed
[  221.348409][T10414] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1365'.
[  221.361388][T10412] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  221.365044][T10412] syzkaller0: entered promiscuous mode
[  221.367306][T10412] syzkaller0: entered allmulticast mode
[  221.396844][T10412] tipc: Resetting bearer <eth:syzkaller0>
[  221.409662][T10410] tipc: Resetting bearer <eth:syzkaller0>
[  221.419858][T10410] tipc: Disabling bearer <eth:syzkaller0>
[  221.427874][T10416] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1364'.
[  221.606727][T10430] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1371'.
[  221.621561][T10430] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1371'.
[  221.670074][T10433] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1372'.
[  221.726336][T10440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1374'.
[  221.811133][T10446] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1375'.
[  221.858044][T10452] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1378'.
[  222.012968][T10463] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1382'.
[  222.599415][T10481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1386'.
[  223.229719][T10539] netlink: 'syz.0.1408': attribute type 29 has an invalid length.
[  223.233410][T10539] netlink: 'syz.0.1408': attribute type 29 has an invalid length.
[  223.237458][T10539] unsupported nla_type 58
[  223.467054][T10556] syzkaller0: entered promiscuous mode
[  223.469026][T10556] syzkaller0: entered allmulticast mode
[  225.474892][T10588] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  225.483568][T10589] syzkaller0: entered promiscuous mode
[  225.489001][T10589] syzkaller0: entered allmulticast mode
[  225.508138][T10588] tipc: Resetting bearer <eth:syzkaller0>
[  225.519480][T10588] tipc: Disabling bearer <eth:syzkaller0>
[  225.539695][T10591] netlink: 'syz.1.1423': attribute type 4 has an invalid length.
[  226.783621][T10701] __nla_validate_parse: 18 callbacks suppressed
[  226.783631][T10701] netlink: 844 bytes leftover after parsing attributes in process `syz.1.1448'.
[  226.896238][T10710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1451'.
[  227.031316][T10718] sock: sock_timestamping_bind_phc: sock not bind to device
[  227.803284][T10725] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1456'.
[  227.903489][T10733] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1458'.
Connection to localhost closed by remote host.
[  229.252424][ T5862] bond0 (unregistering): Released all slaves
[  229.261485][ T5862] bond1 (unregistering): Released all slaves
[  229.538051][ T5862] hsr_slave_0: left promiscuous mode
[  229.541123][ T5862] hsr_slave_1: left promiscuous mode
[  230.405267][ T5862] IPVS: stop unused estimator thread 0...
[  231.923087][   T13] bridge_slave_1: left allmulticast mode
[  231.925394][   T13] bridge_slave_1: left promiscuous mode
[  231.928105][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.935368][   T13] bridge_slave_0: left allmulticast mode
[  231.937517][   T13] bridge_slave_0: left promiscuous mode
[  231.939816][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.445860][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  232.450121][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  232.453580][   T13] bond0 (unregistering): Released all slaves
[  232.520364][   T13] bond1 (unregistering): (slave batadv0): Releasing active interface
[  232.523596][   T13] bond1 (unregistering): Released all slaves
[  232.589406][   T13] tipc: Disabling bearer <udp:syz2>
[  232.599982][   T13] tipc: Left network mode
[  232.615986][   T13] IPVS: stopping master sync thread 5979 ...
[  232.782338][   T13] hsr_slave_0: left promiscuous mode
[  232.785988][   T13] hsr_slave_1: left promiscuous mode
[  233.061836][   T13] team0 (unregistering): Port device team_slave_1 removed
[  233.083899][   T13] team0 (unregistering): Port device team_slave_0 removed
[  234.887443][   T13] ------------[ cut here ]------------
[  234.889681][   T13] WARNING: CPU: 1 PID: 13 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x81/0x100
[  234.892771][   T13] Modules linked in:
[  234.894427][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  234.899202][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  234.902494][   T13] Workqueue: netns cleanup_net
[  234.904365][   T13] RIP: 0010:xfrm6_tunnel_net_exit+0x81/0x100
[  234.906389][   T13] Code: 75 20 e0 f7 4b 83 3c 2c 00 75 19 e8 c9 b5 7c f7 49 81 fd f8 07 00 00 74 1d e8 bb b5 7c f7 49 83 c5 08 eb c9 e8 b0 b5 7c f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  234.912512][   T13] RSP: 0018:ffffc900001078b0 EFLAGS: 00010293
[  234.914537][   T13] RAX: ffffffff8a42f600 RBX: ffff88802793c000 RCX: ffff88801c2f8000
[  234.916898][   T13] RDX: 0000000000000000 RSI: ffffffff8d9b47bc RDI: ffff88802793c000
[  234.919554][   T13] RBP: ffffc900001079b0 R08: ffffffff8fa34637 R09: 1ffffffff1f468c6
[  234.922216][   T13] R10: dffffc0000000000 R11: fffffbfff1f468c7 R12: ffff88802793c000
[  234.924777][   T13] R13: 0000000000000000 R14: ffff88802b310000 R15: dffffc0000000000
[  234.927278][   T13] FS:  0000000000000000(0000) GS:ffff8881a3c21000(0000) knlGS:0000000000000000
[  234.930246][   T13] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  234.932284][   T13] CR2: 0000559ca63fba18 CR3: 000000010fb4c000 CR4: 00000000000006f0
[  234.934842][   T13] Call Trace:
[  234.936104][   T13]  <TASK>
[  234.937054][   T13]  ops_undo_list+0x49a/0x990
[  234.938553][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  234.940212][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  234.942157][   T13]  cleanup_net+0x4c5/0x800
[  234.943588][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  234.945488][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  234.947348][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  234.949095][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  234.950887][   T13]  process_scheduled_works+0xae1/0x17b0
[  234.952638][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  234.954830][   T13]  worker_thread+0x8a0/0xda0
[  234.956437][   T13]  kthread+0x711/0x8a0
[  234.957720][   T13]  ? __pfx_worker_thread+0x10/0x10
[  234.959281][   T13]  ? __pfx_kthread+0x10/0x10
[  234.960709][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  234.962303][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  234.964171][   T13]  ? __pfx_kthread+0x10/0x10
[  234.965667][   T13]  ret_from_fork+0x3fc/0x770
[  234.967114][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  234.968720][   T13]  ? __switch_to_asm+0x39/0x70
[  234.970221][   T13]  ? __switch_to_asm+0x33/0x70
[  234.971741][   T13]  ? __pfx_kthread+0x10/0x10
[  234.973182][   T13]  ret_from_fork_asm+0x1a/0x30
[  234.975116][   T13]  </TASK>
[  234.976337][   T13] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  234.978577][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  234.982502][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  234.986076][   T13] Workqueue: netns cleanup_net
[  234.987572][   T13] Call Trace:
[  234.988596][   T13]  <TASK>
[  234.989499][   T13]  dump_stack_lvl+0x99/0x250
[  234.990939][   T13]  ? __asan_memcpy+0x40/0x70
[  234.992479][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  234.994105][   T13]  ? __pfx__printk+0x10/0x10
[  234.995547][   T13]  vpanic+0x281/0x750
[  234.996824][   T13]  ? __pfx__printk+0x10/0x10
[  234.998327][   T13]  ? __pfx_vpanic+0x10/0x10
[  234.999928][   T13]  ? is_bpf_text_address+0x292/0x2b0
[  235.001773][   T13]  panic+0xb9/0xc0
[  235.002966][   T13]  ? __pfx_panic+0x10/0x10
[  235.004335][   T13]  __warn+0x31b/0x4b0
[  235.005597][   T13]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  235.007525][   T13]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  235.009392][   T13]  report_bug+0x2be/0x4f0
[  235.010776][   T13]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  235.012595][   T13]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  235.014261][   T13]  ? xfrm6_tunnel_net_exit+0x83/0x100
[  235.015938][   T13]  handle_bug+0x84/0x160
[  235.017265][   T13]  exc_invalid_op+0x1a/0x50
[  235.018796][   T13]  asm_exc_invalid_op+0x1a/0x20
[  235.020503][   T13] RIP: 0010:xfrm6_tunnel_net_exit+0x81/0x100
[  235.022329][   T13] Code: 75 20 e0 f7 4b 83 3c 2c 00 75 19 e8 c9 b5 7c f7 49 81 fd f8 07 00 00 74 1d e8 bb b5 7c f7 49 83 c5 08 eb c9 e8 b0 b5 7c f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  235.028259][   T13] RSP: 0018:ffffc900001078b0 EFLAGS: 00010293
[  235.030430][   T13] RAX: ffffffff8a42f600 RBX: ffff88802793c000 RCX: ffff88801c2f8000
[  235.033237][   T13] RDX: 0000000000000000 RSI: ffffffff8d9b47bc RDI: ffff88802793c000
[  235.035657][   T13] RBP: ffffc900001079b0 R08: ffffffff8fa34637 R09: 1ffffffff1f468c6
[  235.038309][   T13] R10: dffffc0000000000 R11: fffffbfff1f468c7 R12: ffff88802793c000
[  235.041058][   T13] R13: 0000000000000000 R14: ffff88802b310000 R15: dffffc0000000000
[  235.043922][   T13]  ? xfrm6_tunnel_net_exit+0x80/0x100
[  235.046098][   T13]  ops_undo_list+0x49a/0x990
[  235.048045][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  235.050120][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  235.051876][   T13]  cleanup_net+0x4c5/0x800
[  235.053301][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  235.054874][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  235.056599][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  235.058344][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  235.060100][   T13]  process_scheduled_works+0xae1/0x17b0
[  235.061883][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  235.063838][   T13]  worker_thread+0x8a0/0xda0
[  235.065479][   T13]  kthread+0x711/0x8a0
[  235.066740][   T13]  ? __pfx_worker_thread+0x10/0x10
[  235.068350][   T13]  ? __pfx_kthread+0x10/0x10
[  235.069888][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  235.071499][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  235.073371][   T13]  ? __pfx_kthread+0x10/0x10
[  235.075106][   T13]  ret_from_fork+0x3fc/0x770
[  235.076572][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  235.078213][   T13]  ? __switch_to_asm+0x39/0x70
[  235.079886][   T13]  ? __switch_to_asm+0x33/0x70
[  235.081772][   T13]  ? __pfx_kthread+0x10/0x10
[  235.083354][   T13]  ret_from_fork_asm+0x1a/0x30
[  235.085122][   T13]  </TASK>
[  235.086679][   T13] Kernel Offset: disabled
[  235.088044][   T13] Rebooting in 86400 seconds..

VM DIAGNOSIS:
00:55:18  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000000 RCX=9beaaeaf98f00800 RDX=0000000000000000
RSI=ffffffff8be32660 RDI=ffffffff8be32620 RBP=ffffffff8b464602 RSP=ffffc900034bf960
R8 =0000000000000000 R9 =0000000000000000 R10=dffffc0000000000 R11=ffffffff8b464530
R12=0000000000000002 R13=ffffffff8e139ee0 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff81a65d95 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffd19623188 CR3=0000000029504000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000ff0000000000 XMM01=0000000000000000 0000000000000000
XMM02=000000ff00000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000107050
R8 =ffff8881067d8237 R9 =1ffff11020cfb046 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=ffffffff99af491f R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e724c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000559ca63fba18 CR3=000000010fb4c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000ff 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=ffffffffffffff00 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000000000ff 00000000000000ff XMM05=0000000000000211 000030682f32622f
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 00000000000000ff
XMM08=ffffffffffff0000 ffff000000000000 XMM09=74656e2f3030323a 326963682f326963
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
