last executing test programs:

38.848773463s ago: executing program 1 (id=262):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$can_bcm(0x1d, 0x2, 0x2)
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r0], 0x38}}, 0x10)

38.791151266s ago: executing program 1 (id=263):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x4000000}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x307, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14}}, 0x70}}, 0x0)

38.730131419s ago: executing program 1 (id=265):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000300))
r2 = accept$ax25(r1, &(0x7f0000000340)={{0x3, @netrom}, [@bcast, @bcast, @null, @bcast, @netrom, @rose, @null, @null]}, &(0x7f0000000080)=0x48)
r3 = accept$ax25(r2, &(0x7f0000000480)={{0x3, @bcast}, [@null, @netrom, @netrom, @bcast, @default, @rose]}, &(0x7f00000001c0)=0x48)
ioctl$SIOCAX25DELFWD(r3, 0x89eb, &(0x7f0000000140)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}})
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x48f, &(0x7f0000000000)={0x3a, @empty, 0x4ea3, 0x0, 'lblcr\x00', 0x3c, 0x8003, 0x8000063}, 0x2c)
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000001240)=@add_del={0x2, &(0x7f0000001200)='syzkaller0\x00'})
pipe(&(0x7f0000000100)={<r5=>0xffffffffffffffff})
syz_emit_ethernet(0x76, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
writev(r6, &(0x7f0000000040)=[{&(0x7f0000000100)="8f", 0x1}], 0x1)
ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f00000000c0))
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0xffffffffffffff92, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4040818)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000a00), 0x0, 0x12040, 0x0)
ioctl$sock_netdev_private(r9, 0x8946, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket(0xa, 0x3, 0x3a)

37.903305356s ago: executing program 1 (id=280):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000780)=ANY=[@ANYBLOB="2c00000018001101ffffffff000000000a600000ff00fe060000000008004f3e070000000800060004000000"], 0x2c}}, 0x0)

37.827400767s ago: executing program 1 (id=283):
r0 = getpid()
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$kcm(0x29, 0x5, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x2c, r6, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x48845}, 0x4040000)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0xc0, r6, 0xe22, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x32}}}}, [@NL80211_ATTR_TID_CONFIG={0x94, 0x11d, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x18, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x27}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x6}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x11}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x24004010)
sendmsg(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)}, {&(0x7f0000000ac0)="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", 0xfffffd6b}, {&(0x7f0000000640)="74a892e6122d0e9da29a40f6060049f3ab51554d", 0x14}], 0x3, &(0x7f00000005c0)=ANY=[], 0x158}, 0x0)
sendmmsg(r2, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)='r', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000010c0)="f3", 0x1}], 0x1}}], 0x2, 0x20004841)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)

36.309732645s ago: executing program 2 (id=313):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r3, 0x29, 0x31, 0x0, &(0x7f0000000280))
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="500000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000004180000280012800b000100697036746e6c00001800028014000200fc00000000000000000000000000000008000a00", @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000008000001c0012800b00010067656e65766500000c00028008000f"], 0x3c}}, 0x0)

36.218178668s ago: executing program 2 (id=315):
syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa"], 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'bond0\x00', <r3=>0x0})
getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, &(0x7f00000000c0)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000100)=0x28)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0x10}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x10, 0xf}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40008cc}, 0x20004804)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r4, r7, 0x25, 0x2, @void}, 0x10)
sendto$packet(r1, &(0x7f0000000140)='\x00', 0x5c8, 0x20008801, &(0x7f0000000200)={0x11, 0x88a8, r3, 0x1, 0x0, 0x6, @remote}, 0x14)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58)
r9 = socket$nl_crypto(0x10, 0x3, 0x15)
syz_emit_ethernet(0x406, &(0x7f0000000c00)={@local, @broadcast, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x5, 0x1, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x4, 0x6, "8cc927", 0x3c8, 0x2f, 0x0, @remote, @local, {[@hopopts={0x73, 0x24, '\x00', [@ra={0x5, 0x2, 0x7fff}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @calipso={0x7, 0x38, {0x0, 0xc, 0x10, 0x8, [0x4, 0x100000000, 0x8, 0x6, 0x8, 0x6]}}, @jumbo={0xc2, 0x4, 0x101}, @pad1, @ra={0x5, 0x2, 0x80}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x8}, @generic={0x4e, 0xbc, "16353b8969ff543ea782b14148965638cd671d6bb7c333b877605a4b8821fa97e81aa344a3c28c45b07931741c622dc9c48da0e658df1fb6519e77e3c7e68ba07290b28f94f8c199b76a70be6b38d8919754d0fe911705e0c5df20f2b9b6a7cae06c0f8868acb90b41017ed3112ea17e0f00e92237a0fb0ae0cfe4cbb6118a49da224492a69ca4a6cabc9aa30cc536825a7219843f966873857254736e21d8959f3e57a1ba2ad26b12582b3ed7df1085bb101259a721ce28d5809ca8"}]}, @srh={0x33, 0x12, 0x4, 0x9, 0xc, 0x0, 0xf, [@empty, @loopback, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @ipv4={'\x00', '\xff\xff', @multicast1}, @local]}, @fragment={0x2b, 0x0, 0x0, 0x1, 0x0, 0x9, 0x68}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x1d, 0x2, [0x0], "3e67b8e2f4c925836e40b670acdf88e0ca4153bc1a8db84ba479de3ebc"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x1000, 0x9, 0x1], "869685802a10562b29aeadd3c1523bb2ff6a5c77c1565237b40d7e0b33434281c5a44c5dce8556690bc406851fb477d77ef363311523c67da575f57a00281278c6aa816024ade9c5115b731c0ae25e9f0742c4a5abc3d444c378fb84a1b3440cf94e38fae3cfc09ddac9f7be7582aadc9f33ad0ad3c2ba2152f58f89"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "b51929ea2fd32aa4c1744a6232daf94c7a89d4c4fb78e5ef198f345818a5d1e71358a989e7a97764e4955145"}, {0x8, 0x88be, 0x4, {{0x6, 0x1, 0x6, 0x3, 0x1, 0x0, 0x1, 0x5}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x2, {{0x8, 0x2, 0xe, 0x0, 0x0, 0x1, 0x0, 0x1f}, 0x2, {0x1, 0xfffe, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3, "9f1c3c56254450b7a397f90f28fc9bfd4a7c6b047dcd90c86cfe66e404a231aedf684c76806ee7d03d3106fc265d9139e4a16d6841151048eacf5315c0017d5a5d7f76e51be55f29d4a00fbfe9bb981746d283a4863dbd413160f0a614f649b501843f6f0866a99e88e2458480ed3b4a3eb1043fd21b4a1eaadd35a47ec0768a3b726fc27048d37102a6e427bc0f4c376c2e65c19f6cda29e86e38a52b6d9635a599092ca49125f9dee416cf21f94f311351c90fe8da36ced0caec45fbc2f749cbf6676afa197d708a2eabe51c1774df1b14f26d6b6dace2213dfb9d0398566bfdb40def5ea397"}}}}}}}, 0x0)
sendmsg$nl_crypto(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000130001"], 0xe0}}, 0x0)

36.132035994s ago: executing program 2 (id=319):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071163a0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c40)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000000c00000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000100003000508011000a004abee339084eeef16f162471f4000000080007"], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x800)

36.058867174s ago: executing program 1 (id=320):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x27}]}, @NFT_MSG_NEWSETELEM={0x114, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xe8, 0x3, 0x0, 0x1, [{0xe4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xe0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xda, 0x1, "8da87cab48925f37fe1ad2eef0cd18098d63bde447445e707617081b974c0945726bf7282ffa91e97a0355bde8c30ae8696599f33d57436a9018d90b27a425eed3606a4a25cf87361e9e8b5fa69a54f8b20c187180d0b262193ffeb0d7703c55be254862b4a56e8c862d0ef1aa328459cfd17f970049a181d79a7be49a5ca1b19b19f43407402d6824f25d272368409e1005d4d388086006aaa95e4e866a8bc10a1252845a4ac4605b22e5a232af10c96d4bb8a4590c3e5b2824a24f8400d4ccdbe2b59a6fb24b719ad156636c60301c370ff1916f3c"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x18c}}, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}, @ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000100)='GPL\x00'}, 0x90) (async)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r5=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0xfd45}}, 0x0) (async)
write$nci(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="7105040902020766cb440484b907eb0101f8"], 0x12)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x18, 0x31, 0x10b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
close(0x3) (async)
connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=<r8=>0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r10, &(0x7f0000000000), 0x2a979d)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r12}, 0x10) (async, rerun: 32)
r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) (rerun: 32)
sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, r13, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}}, 0x0) (async)
write$nci(r7, &(0x7f0000001140)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x1, 0x2, 0x1, 0x1, 0x1}, 0x4) (async, rerun: 64)
listen(0xffffffffffffffff, 0x80) (rerun: 64)
r14 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r14, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) (async)
sendmsg$sock(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)='k', 0x1}], 0x1, &(0x7f0000000080)=[@timestamping={{0x18, 0x1, 0x4f, 0x100}}], 0x18}, 0x4000081) (async, rerun: 32)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) (rerun: 32)

36.05789709s ago: executing program 2 (id=322):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x29c1}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x33d}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)

36.000087015s ago: executing program 2 (id=323):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r0, @ANYRES32=r1], 0x44}}, 0x0)

35.999734647s ago: executing program 2 (id=324):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000c80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf7cf39e3100c8acaa47684f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d7559f3b14820ed58b15627c95aa0b784625704f07372c29184ff7f4a7c0000070015006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e000000000000041201baa87ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000fb1a26abfb0767192361448279b05d96a703a660587a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb155481ef836eb0f8c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff57fb57000000009700cf0b000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaed2b25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec0271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761036eafed1fb2b98b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe514283707c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a515d83129cd857c775f9e7d6101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbe3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562e00e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb2214209ed2d5d776e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b55ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f608ce27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e30400000000000000000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a95d32f46ed9bd1f00fb8191bbab2dc599dda61fe2010000294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bfe2777e808fcba821a00e8c5c39609ff854256cb490000000000c1fee30a3f7a85d1b2b458c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b185f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd210819203828b202779d386ed295f023c67d867014d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df40600000000000000e9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b0600b805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1202000000b59fed817072a0da60160761fd3dffda0f7c742eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7000000000000000542954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c9e281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b630500163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f700400fa0c61d5fe6d8ff353f631080405547d65375ae04f44f0c2543c772c5ccb137be7dc87746e1785a8214454d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b036e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e010000005a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb3985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1428c0805b4031a667e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab9100781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c1227c8bed10591958c906321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b863af34bac64c247672a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f27080ece2a94c760b002c77f82662675a7713c7067081cac1599a998c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e90000000000000000008faf2cddffbfa66bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab7c3fa4d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5435bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de286553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c03f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c872a4882d21db2046a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265441d513a1294b8439276394945d94a589708e32a1cb30a8b07b391201385e0b92ecbb7b13d7a87284164018ace6ce58a82c5de321452461089cdd69259f5390f5f508646a524490583c30630bedb47e158ad41c0a653e86a4f4f255cd2a6e95f33b586823aef5564d9de1f5bdd8c80e193f0597b8003860302cd243c00bc5a82c52afb115d16258d507937966bb89409d6d47b8b652d0761d7c72875ae1efb9bc7c6807c2d783e31fd9cd7e84d3d50d8fc44ab8ac9ccd2c0d42e3bd4c029241320446bbf47e23d1320de30fbdf7ed13f80c28fb5c13fccc2e3f73509bdcddad8a2fe48cdd61f2f43611704af64eed8b0cbbd08754f93b8f3d6347aad5cde1ccc5cbd5eaa87e52cea257c856a4af5243eeb5e89f0000000000000000f420df5e4c6d856b3d55e455c08110b2ef4255a38f81555e8e1f22d59c0bc3c9013e66a1f5bda1b695e1602c0afb5c35b2f68f3b151b1e869f40ff4d1bef5e926eb29bd482b1e0b6d61ff95f6321131e4cb797f53455a093a95e67605222d6acc29c46e5db1ef3b8b07e2169fb24ced4b3ae87ebeca06df93212e465bbd1a7e41df2e1a0d508f86cfc7a469ac682685c44692877d03c34c23a65d2677acc73b5d276fdebd685c9b7a079eae228d8426188cb19b083548f5f29e493ab079f33d1965dcbb165015c46998ad410d60cc65fcfa73bd65a43fc024455c4bf530d663976cf71490577251780ab6b1cf8d397444b5be575229f687a3d95ea6b2aa62fce8acb3d4a6a130b4fefa55d0c1d6f3fa448ee24e588e2965c9a442f0baf90923dda91a6850fb7b9c7f432b63001423fedcf053fa28024cc9a178a07042dabc07176fc524032c2edb340c9c18a83565c431aeb0c869683507255254430f90f61e4eca9c8fa98c000b35fec357ee1ebd08439bd95c1ab0753dfd2603d1608bd8c589a1e160000a6ee0ad13346e08738c2d7b00b5d121d918f1dc8bceded939fa8605b54b37cdfcea0bf2bc63e655dc04a2e50212ff89d6587d49896ce18916cf3adc12839c345ca91bb232b891fae2fdd68aaa38281c0feb2c107af3e080d6cdd1c6646ec6804d7e9960c02aa0db9eda24bbcb287fd2a890fa7f9d6ae0c0b1f8dd1603c9ea2f66b572276f96a28b5b6dd9f9bf6ad4bdaa2139b90faf1f40b0f141258578bd825daaaf718d21b7ac05fe5d1b699e5422ca341fe1c944f68fe3a6d783dcf30b0e09d7688f696883b61cb64464b04d351a0a69b0733c348049b0430ed40e200f4ff0000000000000000000000996bcc1b721b152c892fab887e7d20466d90c049c0fdf51dcc16d226a2619c6f47bc25b7f5df5c09fed638922ed127ab36aa7b0c58a2ce5894b1b0f5375d340d96b69b966b05daaf585121a9c7605ed8e9964eef1f14b74cbb2ccdadc6d0b77cf0492b75e1cd11bfdcfddde91b20366715ba0cbe1041be2a65c25d7ca15ef8b71bd2ab9a4294899a1964b0152518fc2ac15a728bcb9e2bc4b551dfdf9011a2a607bc39ad2c4d7c64dcf967724e9b63c397d5265ad3f1da4395a5a800d8845257dcbf210d4f00fe0bd3deed05e506736e6bb6d40ee6cb960bcdb33633ee87f82beb665a9a4c2d4d2b06479ade3a4cd6bba765c9f52b52a0bdd0849ab92baae3775570accb5a57ee9f0035fc6d3df4eebec2e7eb4ff863d3979a20f4428ddca471037b49d4fd130743a97faa02c293b721e52bf53d64c6585e138162331ef98792e1e9b21a6a084fb7b42c64062ef1323a8a65a8ed6038f274f28ff4f78123a1ef108efbe8c4f4e347d50dcdbc33bf3ade4c3a39d316061930d7dd39b8acdecc3f27830e3eda40e648328d95a9aee65a9dd09fd4e96d5b852025dc53ec3f30cc753e6a796084b4e34f521dbb230ae0f3b79142073d437e1fd22d3b7503ffa95b1d5c7740b0ecbfd35dc0f8af895583dfcc2689f6e02c2dd4b57f3dcac54f40da013eb221fa3d65de760576031052c25a96ed4b20230b36d46d3d3fd6bb1d77cc8a48a6b10fa0149e55ccde4a2b26cca2d1ca9191c74ab006a602543fc24d1283e353cfb917620000000024bf3eed258c02a591ec4cd295212d9a98d38745f6f6c4537b2ccc5f9602da15f184f239098bf32551c7cf454e2865974f6520112743f73c619c3cab5609e00178f7393e53462f31559220c026bbde09837bf1b3ffe748a3247c9569f0c5e99f4494f93e0fa1badca90c888616eca97bddabd800"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000001c0)='xen_mc_entry_alloc\x00', r1, 0x0, 0x800000000003}, 0x18)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x53, &(0x7f0000000000)=0x2, 0x4)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c)
pipe(&(0x7f00000045c0)={<r4=>0xffffffffffffffff})
r5 = socket$inet(0x2, 0x3, 0x7f)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r5, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
splice(r4, 0x0, r5, 0x0, 0x8000, 0x0)
close(r5)
setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f0000000000), 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x18, 0x61, 0x11, 0x98}, [@initr0]}, 0x0}, 0x94)
socket$nl_rdma(0x10, 0x3, 0x14)
r6 = socket(0x10, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001940)=ANY=[@ANYBLOB="68000000100039042cbd7000eaffffff0000", @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x41}, 0x8)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0)

21.067197495s ago: executing program 32 (id=320):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x27}]}, @NFT_MSG_NEWSETELEM={0x114, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xe8, 0x3, 0x0, 0x1, [{0xe4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xe0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xda, 0x1, "8da87cab48925f37fe1ad2eef0cd18098d63bde447445e707617081b974c0945726bf7282ffa91e97a0355bde8c30ae8696599f33d57436a9018d90b27a425eed3606a4a25cf87361e9e8b5fa69a54f8b20c187180d0b262193ffeb0d7703c55be254862b4a56e8c862d0ef1aa328459cfd17f970049a181d79a7be49a5ca1b19b19f43407402d6824f25d272368409e1005d4d388086006aaa95e4e866a8bc10a1252845a4ac4605b22e5a232af10c96d4bb8a4590c3e5b2824a24f8400d4ccdbe2b59a6fb24b719ad156636c60301c370ff1916f3c"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x18c}}, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}, @ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000100)='GPL\x00'}, 0x90) (async)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r5=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0xfd45}}, 0x0) (async)
write$nci(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="7105040902020766cb440484b907eb0101f8"], 0x12)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x18, 0x31, 0x10b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
close(0x3) (async)
connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=<r8=>0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r10, &(0x7f0000000000), 0x2a979d)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r12}, 0x10) (async, rerun: 32)
r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) (rerun: 32)
sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, r13, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}}, 0x0) (async)
write$nci(r7, &(0x7f0000001140)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x1, 0x2, 0x1, 0x1, 0x1}, 0x4) (async, rerun: 64)
listen(0xffffffffffffffff, 0x80) (rerun: 64)
r14 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r14, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) (async)
sendmsg$sock(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)='k', 0x1}], 0x1, &(0x7f0000000080)=[@timestamping={{0x18, 0x1, 0x4f, 0x100}}], 0x18}, 0x4000081) (async, rerun: 32)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) (rerun: 32)

20.945571529s ago: executing program 33 (id=324):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000001c0)='xen_mc_entry_alloc\x00', r1, 0x0, 0x800000000003}, 0x18)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x53, &(0x7f0000000000)=0x2, 0x4)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c)
pipe(&(0x7f00000045c0)={<r4=>0xffffffffffffffff})
r5 = socket$inet(0x2, 0x3, 0x7f)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r5, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
splice(r4, 0x0, r5, 0x0, 0x8000, 0x0)
close(r5)
setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f0000000000), 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x18, 0x61, 0x11, 0x98}, [@initr0]}, 0x0}, 0x94)
socket$nl_rdma(0x10, 0x3, 0x14)
r6 = socket(0x10, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001940)=ANY=[@ANYBLOB="68000000100039042cbd7000eaffffff0000", @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x41}, 0x8)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0)

15.628506928s ago: executing program 0 (id=527):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, 0x4, 0x9, 0x2})
setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000140), 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x220, 0x52000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000)

15.628248447s ago: executing program 0 (id=528):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="700000a4fa6e48ffffff13b5c200000e08060024080006040002aaaaaaaaaabb0000002affffffffffffac1e0001ff2dd0106ef4d698547e9331013463c61feb5f4a31b6e08648524ca5cee3909a1fe897ed8825c19a8e889d8ee6ce6b83d1fcb8b7790cd1eb0848910100000000000000e1d691562a3322ca8e9862b331f272f417b40829ee10072c1b0ee356a9773deb25a219ee79cd56e88be903babc75388d257f3b885c1784ed8fc5d5082d203b8a468f2df1d055"], 0x2e)

15.468928288s ago: executing program 0 (id=529):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000019c0)={0x24, r1, 0x41d, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004c04}, 0x40)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
socket(0x2, 0x80805, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_channels={0x3c, 0x10001, 0x9, 0x8000, 0x2, 0xffffff01, 0x8, 0x3, 0x80000001}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08060001080006040001aaaaaaaaaa37ac1452aaaaaaaaaaaa38ac1414"], 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000a40), 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff})
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r8}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
r9 = socket$alg(0x26, 0x5, 0x0)
unshare(0x22020600)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000002300810000000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, 0x0, 0x26}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r10, 0x58, &(0x7f0000000180)}, 0x10)
bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58)
sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

15.466456278s ago: executing program 0 (id=530):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x64, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xb98}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x44}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000015}, 0x440c0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x3, 0x8, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000020000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x88, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x50, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_BITWISE_DATA={0x1c, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "00da25ca23912021c3212a1882250681e0"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x124}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040001}, 0x0)
socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'geneve1\x00', <r9=>0x0})
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000000)=0x200000)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd7000ffdbdf2515000000180001801400028064756d6d793000000000000000000200"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20000040)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0x4c, r10, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x2)

15.399511553s ago: executing program 0 (id=531):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0)
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0xfffffffffffffffe)
setsockopt(r0, 0x84, 0x40000081, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$kcm(0x2d, 0x2, 0x0)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x20}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40041)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$NL80211_CMD_RADAR_DETECT(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000048}, 0x20048000)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c000701080000000000000007000000", @ANYRES32=r3, @ANYBLOB="e04f00000a000200aaaaaaaaaa0c"], 0x28}}, 0x0)

15.398920306s ago: executing program 0 (id=532):
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', <r4=>0x0})
setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000001c0)={@remote, r4}, 0x14)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbec, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
r5 = socket(0x2b, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, 0x0, &(0x7f00000000c0))
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000370400000000ffffffff1f000000", @ANYRES32, @ANYBLOB="0b12050000000000240012800b00010069703667726500001400028008000100", @ANYRES32, @ANYBLOB="08000c0000ff"], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x24000800)
r6 = socket(0x10, 0x3, 0x0)
r7 = accept4$inet(r5, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10, 0x80000)
setsockopt$inet_int(r7, 0x0, 0x31, &(0x7f0000000280)=0xbd, 0x4)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r9, 0x0, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
setsockopt$inet6_int(r9, 0x29, 0x10, &(0x7f0000000400)=0x5, 0x4)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000340)='pim6reg\x00', 0x10)
sendto$inet6(r9, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c)
setsockopt$packet_int(r8, 0x107, 0x13, 0x0, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23}, 0x18}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendto$inet6(r5, &(0x7f0000000540)="085c235fd568ca9f8be5233b1d6fb77877da99e5189c328eecc776322930c6350c8f7a3132e5919f650b4af74fa8d136801091136e9b6cbd48300052c8c4fc605f9487958d683a9cac87e2c26e1075151f8a9f8cfc55afe480ff0b55dc1106eea93dba6ecd17cab933f0793ac8956ac1f35c43d052d95fd2946282ca148a1a995f2159a5393e46371ec5433e7b35de857f571cc81674d243f8084ea434a06d1a1da0b966297608c813ed53f8a377a33b8d22c4973186385a0ca69d98358e936e7cb3c1864cc97a1647c2", 0xca, 0x4000800, 0x0, 0x0)
sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060080f21d66a04b12f215a543f50f0a000010000280"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

0s ago: executing program 34 (id=532):
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', <r4=>0x0})
setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000001c0)={@remote, r4}, 0x14)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbec, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
r5 = socket(0x2b, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, 0x0, &(0x7f00000000c0))
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000370400000000ffffffff1f000000", @ANYRES32, @ANYBLOB="0b12050000000000240012800b00010069703667726500001400028008000100", @ANYRES32, @ANYBLOB="08000c0000ff"], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x24000800)
r6 = socket(0x10, 0x3, 0x0)
r7 = accept4$inet(r5, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10, 0x80000)
setsockopt$inet_int(r7, 0x0, 0x31, &(0x7f0000000280)=0xbd, 0x4)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r9, 0x0, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
setsockopt$inet6_int(r9, 0x29, 0x10, &(0x7f0000000400)=0x5, 0x4)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000340)='pim6reg\x00', 0x10)
sendto$inet6(r9, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c)
setsockopt$packet_int(r8, 0x107, 0x13, 0x0, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23}, 0x18}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendto$inet6(r5, &(0x7f0000000540)="085c235fd568ca9f8be5233b1d6fb77877da99e5189c328eecc776322930c6350c8f7a3132e5919f650b4af74fa8d136801091136e9b6cbd48300052c8c4fc605f9487958d683a9cac87e2c26e1075151f8a9f8cfc55afe480ff0b55dc1106eea93dba6ecd17cab933f0793ac8956ac1f35c43d052d95fd2946282ca148a1a995f2159a5393e46371ec5433e7b35de857f571cc81674d243f8084ea434a06d1a1da0b966297608c813ed53f8a377a33b8d22c4973186385a0ca69d98358e936e7cb3c1864cc97a1647c2", 0xca, 0x4000800, 0x0, 0x0)
sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060080f21d66a04b12f215a543f50f0a000010000280"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:3547' (ED25519) to the list of known hosts.
syzkaller login: [   49.439218][ T5815] cgroup: Unknown subsys name 'net'
[   49.546436][ T5815] cgroup: Unknown subsys name 'cpuset'
[   49.553824][ T5815] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.369922][ T5815] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.973574][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.976780][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.979798][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.985996][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.988947][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.999369][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.002325][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.005604][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.011887][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.018248][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.062302][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.065145][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.067849][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.079175][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.082166][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.251508][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   56.335544][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   56.346777][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   56.406017][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.409357][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.411738][ T5841] bridge_slave_0: entered allmulticast mode
[   56.414505][ T5841] bridge_slave_0: entered promiscuous mode
[   56.444187][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.446899][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.450571][ T5841] bridge_slave_1: entered allmulticast mode
[   56.453267][ T5841] bridge_slave_1: entered promiscuous mode
[   56.534929][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.537971][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.540937][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.543328][ T5845] bridge_slave_0: entered allmulticast mode
[   56.546077][ T5845] bridge_slave_0: entered promiscuous mode
[   56.551520][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.553872][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.556189][ T5849] bridge_slave_0: entered allmulticast mode
[   56.559741][ T5849] bridge_slave_0: entered promiscuous mode
[   56.563063][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.565374][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.567710][ T5849] bridge_slave_1: entered allmulticast mode
[   56.570668][ T5849] bridge_slave_1: entered promiscuous mode
[   56.574588][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.577544][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.580302][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.582836][ T5845] bridge_slave_1: entered allmulticast mode
[   56.585980][ T5845] bridge_slave_1: entered promiscuous mode
[   56.644715][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.649738][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.654528][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.659376][ T5841] team0: Port device team_slave_0 added
[   56.672481][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.685428][ T5841] team0: Port device team_slave_1 added
[   56.690502][ T5845] team0: Port device team_slave_0 added
[   56.721444][ T5845] team0: Port device team_slave_1 added
[   56.735146][ T5849] team0: Port device team_slave_0 added
[   56.752155][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.754596][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.764679][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.770419][ T5849] team0: Port device team_slave_1 added
[   56.789280][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.791625][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.801329][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.805552][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.808548][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.817577][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.831174][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.833360][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.842258][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.850825][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.853638][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.864375][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.868564][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.870813][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.879356][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.934308][ T5845] hsr_slave_0: entered promiscuous mode
[   56.936807][ T5845] hsr_slave_1: entered promiscuous mode
[   56.952039][ T5841] hsr_slave_0: entered promiscuous mode
[   56.954734][ T5841] hsr_slave_1: entered promiscuous mode
[   56.957335][ T5841] debugfs: 'hsr0' already exists in 'hsr'
[   56.960270][ T5841] Cannot create hsr debugfs directory
[   56.974170][ T5849] hsr_slave_0: entered promiscuous mode
[   56.976739][ T5849] hsr_slave_1: entered promiscuous mode
[   56.978953][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   56.980725][ T5849] Cannot create hsr debugfs directory
[   57.229128][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.236437][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.251866][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.258717][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.300608][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.305675][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.311373][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.315970][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.416281][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.424652][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.431573][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.442117][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.509245][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.523110][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.549361][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   57.563153][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   57.572028][ T4981] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.575125][ T4981] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.584412][ T4981] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.587136][ T4981] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.600625][ T4981] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.603494][ T4981] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.619262][ T4981] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.621560][ T4981] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.676441][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.713222][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   57.723671][  T285] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.725883][  T285] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.734796][  T728] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.737149][  T728] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.792354][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.843036][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.863011][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.907641][ T5849] veth0_vlan: entered promiscuous mode
[   57.925938][ T5841] veth0_vlan: entered promiscuous mode
[   57.931920][ T5849] veth1_vlan: entered promiscuous mode
[   57.941680][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.958781][ T5841] veth1_vlan: entered promiscuous mode
[   57.971021][ T5849] veth0_macvtap: entered promiscuous mode
[   57.991194][ T5849] veth1_macvtap: entered promiscuous mode
[   58.007921][ T5841] veth0_macvtap: entered promiscuous mode
[   58.010298][ T5233] Bluetooth: hci0: command tx timeout
[   58.022053][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.024627][ T5841] veth1_macvtap: entered promiscuous mode
[   58.031221][ T5845] veth0_vlan: entered promiscuous mode
[   58.036446][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.055696][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.060709][ T5845] veth1_vlan: entered promiscuous mode
[   58.064474][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.071067][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.073946][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.077148][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.087794][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.101423][ T5233] Bluetooth: hci1: command tx timeout
[   58.121070][ T5713] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.131399][ T5713] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.141582][ T5713] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.145420][ T5713] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.168729][ T5233] Bluetooth: hci2: command tx timeout
[   58.212805][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.216254][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.231456][ T5845] veth0_macvtap: entered promiscuous mode
[   58.249696][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.254887][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.261312][ T5845] veth1_macvtap: entered promiscuous mode
[   58.301051][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.306177][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.306599][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.311550][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.313984][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.323414][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.345084][ T5713] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.352485][ T5713] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.368668][ T5713] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.369248][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.372177][ T5713] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.429044][ T5908] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.470286][ T5908] tipc: Started in network mode
[   58.472149][ T5908] tipc: Node identity 02accf637b3a, cluster identity 4711
[   58.472206][ T5910] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.474660][ T5908] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.484031][  T285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.486497][  T285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.487355][ T5908] syzkaller0: entered promiscuous mode
[   58.491262][ T5908] syzkaller0: entered allmulticast mode
[   58.515617][ T5910] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   58.533163][ T5908] Zero length message leads to an empty skb
[   58.534095][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.536724][ T5910] veth0_to_team: entered promiscuous mode
[   58.537756][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.540277][    C0] Illegal XDP return value 16128 on prog  (id 2) dev veth0_to_bridge, expect packet loss!
[   58.547800][ T5910] veth0_to_team: entered allmulticast mode
[   58.551627][ T5908] netlink: 'syz.0.1': attribute type 1 has an invalid length.
[   58.614790][ T5908] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'.
[   58.621766][ T5908] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'.
[   58.631113][ T5907] tipc: Resetting bearer <eth:syzkaller0>
[   58.652347][ T5907] tipc: Disabling bearer <eth:syzkaller0>
[   58.807264][ T5927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'.
[   58.974253][ T5943] netlink: 'syz.2.13': attribute type 10 has an invalid length.
[   59.016731][ T5943] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   59.032377][ T5943] syz.2.13 uses obsolete (PF_INET,SOCK_PACKET)
[   59.035155][ T5943] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13'.
[   59.072374][ T5947] tipc: Started in network mode
[   59.074208][ T5947] tipc: Node identity febcba9713ca, cluster identity 4711
[   59.077098][ T5947] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   59.082259][ T5949] netlink: 96 bytes leftover after parsing attributes in process `syz.0.20'.
[   59.086954][ T5947] syzkaller0: entered promiscuous mode
[   59.089898][ T5947] syzkaller0: entered allmulticast mode
[   59.095116][ T5949] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   59.105948][ T5947] netlink: 'syz.1.14': attribute type 1 has an invalid length.
[   59.144137][ T5947] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14'.
[   59.159473][ T5947] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14'.
[   59.165068][ T5946] tipc: Resetting bearer <eth:syzkaller0>
[   59.216562][ T5955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15'.
[   59.222512][ T5946] tipc: Disabling bearer <eth:syzkaller0>
[   59.231481][ T5955] netlink: 48 bytes leftover after parsing attributes in process `syz.2.15'.
[   59.623887][ T5962] netlink: 168 bytes leftover after parsing attributes in process `syz.0.17'.
[   60.089428][ T5233] Bluetooth: hci0: command tx timeout
[   60.153426][ T5978] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   60.155927][ T5978] IPv6: NLM_F_CREATE should be set when creating new route
[   60.158143][ T5978] IPv6: NLM_F_CREATE should be set when creating new route
[   60.168358][ T5233] Bluetooth: hci1: command tx timeout
[   60.266399][ T5233] Bluetooth: hci2: command tx timeout
[   61.084238][ T5951] Set syz1 is full, maxelem 65536 reached
[   61.703815][ T6026] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.770327][ T6026] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.842175][ T6026] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.884753][ T6032] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   61.914415][ T6026] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.927741][ T6032] veth0_to_team: entered promiscuous mode
[   61.931529][ T6032] veth0_to_team: entered allmulticast mode
[   62.024294][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.043875][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.066687][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.084227][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.170803][ T5233] Bluetooth: hci0: command tx timeout
[   62.250009][ T5233] Bluetooth: hci1: command tx timeout
[   62.330491][ T5233] Bluetooth: hci2: command tx timeout
[   62.371283][ T6049] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.391736][ T6053] vxlan0: entered promiscuous mode
[   62.393563][ T6053] vxlan0: entered allmulticast mode
[   62.397375][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   62.402967][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   62.405589][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   62.408899][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   62.436797][ T6049] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.503842][ T6049] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.586946][ T6049] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.706552][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.729405][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.749173][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.758352][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.954905][ T6079] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   62.957743][ T6079] IPv6: NLM_F_CREATE should be set when creating new route
[   62.960454][ T6079] IPv6: NLM_F_CREATE should be set when creating new route
[   63.020904][ T6087] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 4, id = 0
[   63.055009][ T6089] warning: `syz.1.62' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   63.076839][ T6091] syzkaller1: entered promiscuous mode
[   63.079951][ T6091] syzkaller1: entered allmulticast mode
[   63.226337][ T6107] bridge0: port 3(netdevsim2) entered blocking state
[   63.230595][ T6107] bridge0: port 3(netdevsim2) entered disabled state
[   63.232988][ T6107] netdevsim netdevsim0 netdevsim2: entered allmulticast mode
[   63.236301][ T6107] netdevsim netdevsim0 netdevsim2: entered promiscuous mode
[   63.239689][ T6107] bridge0: port 3(netdevsim2) entered blocking state
[   63.242582][ T6107] bridge0: port 3(netdevsim2) entered forwarding state
[   63.269033][ T6107] netlink: 'syz.0.69': attribute type 10 has an invalid length.
[   63.279439][ T6107] 8021q: adding VLAN 0 to HW filter on device team0
[   63.286407][ T6107] bond0: (slave team0): Enslaving as an active interface with an up link
[   63.483098][ T6126] netlink: 'syz.1.74': attribute type 1 has an invalid length.
[   63.504116][ T6130] netlink: 'syz.0.76': attribute type 6 has an invalid length.
[   63.516900][ T6126] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   63.532458][ T6126] veth3: entered promiscuous mode
[   63.580323][ T6127] bridge_slave_0: left allmulticast mode
[   63.582576][ T6127] bridge_slave_0: left promiscuous mode
[   63.589981][ T6127] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.605624][ T6127] bridge_slave_1: left allmulticast mode
[   63.607597][ T6127] bridge_slave_1: left promiscuous mode
[   63.614724][ T6127] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.621536][ T6127] bond0: (slave bond_slave_0): Releasing backup interface
[   63.626398][ T6127] bond0: (slave bond_slave_1): Releasing backup interface
[   63.637547][ T6127] team0: Port device team_slave_0 removed
[   63.643867][ T6127] team0: Port device team_slave_1 removed
[   63.646374][ T6127] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   63.651391][ T6127] batman_adv: batadv0: Removing interface: batadv_slave_0
[   63.655001][ T6127] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   63.657415][ T6127] batman_adv: batadv0: Removing interface: batadv_slave_1
[   63.671167][ T6127] bond2: (slave ip6gretap1): Releasing backup interface
[   63.922550][ T6144] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20000
[   63.982733][ T6149] __nla_validate_parse: 76 callbacks suppressed
[   63.982758][ T6149] netlink: 6 bytes leftover after parsing attributes in process `syz.1.82'.
[   63.992022][ T6149] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   64.248193][ T5233] Bluetooth: hci0: command tx timeout
[   64.328381][ T5233] Bluetooth: hci1: command tx timeout
[   64.408654][ T5233] Bluetooth: hci2: command tx timeout
[   64.482670][ T6153] netlink: 'syz.0.83': attribute type 1 has an invalid length.
[   64.507474][ T6153] 8021q: adding VLAN 0 to HW filter on device bond2
[   64.824954][ T6162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.86'.
[   64.830271][ T6162] netlink: 'syz.1.86': attribute type 16 has an invalid length.
[   64.856429][ T6164] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20131
[   64.975180][ T6166] netlink: 'syz.1.87': attribute type 13 has an invalid length.
[   65.160754][   T12] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   65.168206][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.170942][   T12] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   65.173482][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.176033][   T12] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   65.179369][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.181955][   T12] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   65.184499][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   65.652649][ T6175] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   65.841089][ T6186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   65.841262][ T6185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.94'.
[   65.986114][ T6188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.96'.
[   66.415496][ T6205] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.424461][ T6206] netlink: 'syz.0.102': attribute type 29 has an invalid length.
[   66.427588][ T6206] netlink: 'syz.0.102': attribute type 29 has an invalid length.
[   66.432045][ T6206] netlink: 'syz.0.102': attribute type 29 has an invalid length.
[   66.432983][ T6205] bridge1: entered allmulticast mode
[   66.435389][ T6206] netlink: 'syz.0.102': attribute type 29 has an invalid length.
[   66.541830][ T6211] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.544845][ T6211] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address
[   66.549277][ T6211] bond0: (slave ip_vti0): Error -95 calling set_mac_address
[   66.913889][ T6231] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   66.916123][ T6231] IPv6: NLM_F_CREATE should be set when creating new route
[   66.918445][ T6231] IPv6: NLM_F_CREATE should be set when creating new route
[   66.921751][ T6231] netlink: 'syz.2.105': attribute type 2 has an invalid length.
[   66.924098][ T6231] netlink: 'syz.2.105': attribute type 1 has an invalid length.
[   66.933768][ T6231] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   67.082485][ T6240] netlink: 16 bytes leftover after parsing attributes in process `syz.2.108'.
[   67.121703][ T6242] netlink: 'syz.2.109': attribute type 1 has an invalid length.
[   67.124904][ T6242] netlink: 180 bytes leftover after parsing attributes in process `syz.2.109'.
[   67.130252][ T6242] netlink: 36 bytes leftover after parsing attributes in process `syz.2.109'.
[   67.248859][ T6247] netlink: 12 bytes leftover after parsing attributes in process `syz.2.111'.
[   67.253480][ T6247] netlink: 48 bytes leftover after parsing attributes in process `syz.2.111'.
[   67.374362][ T6249] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   67.431568][ T6255] vlan2: entered promiscuous mode
[   67.433201][ T6255] bridge0: entered promiscuous mode
[   67.435023][ T6256] netlink: 32 bytes leftover after parsing attributes in process `syz.0.115'.
[   67.438554][ T6255] vlan2: entered allmulticast mode
[   67.440518][ T6255] bridge0: entered allmulticast mode
[   67.763784][ T6273] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.775707][ T6273] tipc: Resetting bearer <eth:syzkaller0>
[   67.782699][ T6272] tipc: Disabling bearer <eth:syzkaller0>
[   67.871756][ T6275] vxlan0: entered promiscuous mode
[   67.873755][ T6275] vxlan0: entered allmulticast mode
[   67.876394][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   67.879902][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   67.883134][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   67.886355][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   68.420021][ T6300] ieee802154 phy0 wpan0: encryption failed: -22
[   69.245759][ T6329] __nla_validate_parse: 6 callbacks suppressed
[   69.245777][ T6329] netlink: 24 bytes leftover after parsing attributes in process `syz.0.140'.
[   69.269225][ T6329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'.
[   69.272059][ T6329] netlink: 24 bytes leftover after parsing attributes in process `syz.0.140'.
[   69.284826][ T6329] bond3: entered promiscuous mode
[   69.287052][ T6329] 8021q: adding VLAN 0 to HW filter on device bond3
[   69.321961][ T6332] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20135
[   69.426848][ T6339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.144'.
[   69.494539][ T6341] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   69.513059][ T6344] validate_nla: 4 callbacks suppressed
[   69.513077][ T6344] netlink: 'syz.2.145': attribute type 1 has an invalid length.
[   69.517589][ T6344] netlink: 'syz.2.145': attribute type 2 has an invalid length.
[   69.520792][ T6341] netlink: 24 bytes leftover after parsing attributes in process `syz.0.141'.
[   69.684841][ T6360] netlink: 'syz.2.151': attribute type 7 has an invalid length.
[   69.695814][ T6360] : entered promiscuous mode
[   69.723411][ T6360] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.746723][ T6362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.149'.
[   69.750185][ T6362] netlink: 48 bytes leftover after parsing attributes in process `syz.1.149'.
[   69.817861][ T6360] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.899930][ T6360] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.000349][ T6360] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.140999][ T5713] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.150506][ T5713] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.199554][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.202037][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.318764][ T6369] netlink: 24 bytes leftover after parsing attributes in process `syz.2.154'.
[   70.366179][ T6374] netlink: 16 bytes leftover after parsing attributes in process `syz.0.156'.
[   70.571819][ T6384] tipc: Started in network mode
[   70.573437][ T6384] tipc: Node identity c65535780ad6, cluster identity 4711
[   70.575702][ T6384] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.578833][ T6384] syzkaller0: entered promiscuous mode
[   70.580685][ T6384] syzkaller0: entered allmulticast mode
[   70.586915][ T6384] tipc: Resetting bearer <eth:syzkaller0>
[   70.609664][ T6383] tipc: Resetting bearer <eth:syzkaller0>
[   70.665974][ T6383] tipc: Disabling bearer <eth:syzkaller0>
[   70.801601][ T6389] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20131
[   70.915006][ T6391] netlink: 'syz.2.160': attribute type 13 has an invalid length.
[   70.973615][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.975552][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   70.976996][ T6391] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.980180][ T6391] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.051626][ T6391] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.058574][ T6391] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.144934][   T12] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.148502][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.152298][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.155641][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   71.200879][ T6358] Set syz1 is full, maxelem 65536 reached
[   71.228755][ T6394] netlink: 'syz.1.161': attribute type 21 has an invalid length.
[   71.231146][ T6394] netlink: 152 bytes leftover after parsing attributes in process `syz.1.161'.
[   71.235599][ T6394] syzkaller0: entered promiscuous mode
[   71.237443][ T6394] syzkaller0: entered allmulticast mode
[   71.294286][ T6396] IPv6: Can't replace route, no match found
[   72.226883][ T6418] IPv6: NLM_F_REPLACE set, but no existing node found!
[   72.276910][ T6428] syzkaller1: entered promiscuous mode
[   72.284259][ T6428] syzkaller1: entered allmulticast mode
[   72.639686][ T6444] openvswitch: netlink: Message has 4 unknown bytes.
[   72.752470][ T6450] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   72.950720][ T6458] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   72.954650][ T6458] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.022751][ T6458] bridge0: port 3(netdevsim2) entered disabled state
[   73.039121][ T6458] netdevsim netdevsim0 netdevsim2 (unregistering): left allmulticast mode
[   73.042556][ T6458] netdevsim netdevsim0 netdevsim2 (unregistering): left promiscuous mode
[   73.046503][ T6458] bridge0: port 3(netdevsim2) entered disabled state
[   73.066466][ T6458] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   73.069941][ T6458] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.127266][ T6458] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   73.132073][ T6458] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.203028][ T6458] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   73.206682][ T6458] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.295435][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   73.299743][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.313137][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   73.315948][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.327406][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   73.330728][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.339502][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   73.342754][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.029753][ T6467] IPv6: Can't replace route, no match found
[   74.400316][ T6480] syzkaller1: entered promiscuous mode
[   74.402435][ T6480] syzkaller1: entered allmulticast mode
[   74.513387][ T6485] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   74.650011][ T6491] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.653688][ T6491] 8021q: adding VLAN 0 to HW filter on device team0
[   74.660595][ T6491] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   74.671932][ T6491] veth0_to_team: entered promiscuous mode
[   74.673737][ T6491] veth0_to_team: entered allmulticast mode
[   74.686076][ T6491] syz.1.196 (6491) used greatest stack depth: 19992 bytes left
[   75.334761][ T6519] openvswitch: netlink: Multiple metadata blocks provided
[   75.846307][ T6531] __nla_validate_parse: 6 callbacks suppressed
[   75.846324][ T6531] netlink: 24 bytes leftover after parsing attributes in process `syz.2.209'.
[   76.246413][ T6551] pim6reg1: entered promiscuous mode
[   76.249750][ T6551] pim6reg1: entered allmulticast mode
[   76.289759][ T6553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.216'.
[   76.373493][ T6556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.217'.
[   76.376911][ T6556] netlink: 48 bytes leftover after parsing attributes in process `syz.1.217'.
[   76.391602][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.217'.
[   76.395615][ T6555] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   76.441476][ T6558] netlink: 508 bytes leftover after parsing attributes in process `syz.1.218'.
[   76.682416][ T6563] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   76.730689][ T6567] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.744842][ T6567] tipc: Resetting bearer <eth:syzkaller0>
[   76.749516][ T6567] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   76.752454][ T6567] IPv6: NLM_F_CREATE should be set when creating new route
[   76.755221][ T6567] IPv6: NLM_F_CREATE should be set when creating new route
[   77.165657][ T6588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   77.241290][ T6588] IPVS: Unknown mcast interface: vcan0
[   77.245314][ T6588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   77.310785][ T6594] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   77.351025][ T6596] netlink: 16 bytes leftover after parsing attributes in process `syz.2.233'.
[   77.354968][ T6596] sctp: [Deprecated]: syz.2.233 (pid 6596) Use of struct sctp_assoc_value in delayed_ack socket option.
[   77.354968][ T6596] Use struct sctp_sack_info instead
[   77.424750][ T6598] syz.2.234 (6598) used greatest stack depth: 19936 bytes left
[   77.440643][ T6600] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.443193][ T6600] syzkaller0: entered promiscuous mode
[   77.445022][ T6600] syzkaller0: entered allmulticast mode
[   77.454618][ T6600] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   77.472012][ T6600] tipc: Resetting bearer <eth:syzkaller0>
[   77.521867][ T6605] IPv6: Can't replace route, no match found
[   77.749513][ T6065] tipc: Node number set to 3983981207
[   77.986517][ T6624] netlink: 36 bytes leftover after parsing attributes in process `syz.1.243'.
[   78.199353][ T6632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.245'.
[   78.202828][ T6632] netlink: 48 bytes leftover after parsing attributes in process `syz.1.245'.
[   78.459678][ T6065] tipc: Node number set to 3431150968
[   78.487928][ T6641] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   78.606772][ T6647] netem: incorrect ge model size
[   78.609558][ T6647] netem: change failed
[   78.612861][ T6647] trusted_key: syz.2.251 sent an empty control message without MSG_MORE.
[   78.751946][ T6657] sctp: [Deprecated]: syz.1.255 (pid 6657) Use of struct sctp_assoc_value in delayed_ack socket option.
[   78.751946][ T6657] Use struct sctp_sack_info instead
[   78.819619][ T6673] syzkaller0: left promiscuous mode
[   78.821525][ T6673] syzkaller0: left allmulticast mode
[   78.874551][ T6682] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20131
[   78.982885][ T6686] netlink: 'syz.1.265': attribute type 13 has an invalid length.
[   79.015509][ T6686] tipc: Resetting bearer <eth:syzkaller0>
[   79.561449][ T6716] netlink: 'syz.2.275': attribute type 1 has an invalid length.
[   79.566667][ T6716] tipc: Can't bind to reserved service type 2
[   79.654576][ T6720] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   79.699553][ T6724] nftables ruleset with unbound chain
[   79.743379][ T6728] IPv6: Can't replace route, no match found
[   79.838695][ T6738] syzkaller1: entered promiscuous mode
[   79.840919][ T6738] syzkaller1: entered allmulticast mode
[   79.981490][ T6750] netlink: 'syz.0.289': attribute type 21 has an invalid length.
[   80.190443][ T6758] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[   80.405516][ T6774] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[   80.466322][ T5713] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[   80.472206][ T5713] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[   80.477816][ T5713] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[   80.482520][ T5713] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[   80.621147][ T6787] netlink: 'syz.2.301': attribute type 2 has an invalid length.
[   80.623495][ T6787] netlink: 'syz.2.301': attribute type 1 has an invalid length.
[   80.960923][ T6797] __nla_validate_parse: 13 callbacks suppressed
[   80.960936][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.303'.
[   81.210362][ T1270] cfg80211: failed to load regulatory.db
[   81.239158][ T6812] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[   81.500086][ T6836] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   81.669344][ T6858] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   81.671743][ T6858] IPv6: NLM_F_CREATE should be set when creating new route
[   81.686792][ T6858] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   81.710127][ T6859] netlink: 72 bytes leftover after parsing attributes in process `syz.2.324'.
[   81.816170][ T6870] netlink: 16 bytes leftover after parsing attributes in process `syz.0.327'.
[   82.270333][ T6901] netlink: zone id is out of range
[   82.280729][ T6901] netlink: zone id is out of range
[   82.282502][ T6901] netlink: zone id is out of range
[   82.284397][ T6901] netlink: zone id is out of range
[   82.286307][ T6901] netlink: zone id is out of range
[   82.287981][ T6901] netlink: zone id is out of range
[   82.481394][ T6859] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   82.484124][ T6859] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   82.537910][ T6859] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   82.544853][ T6859] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   82.561705][ T6859] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   82.563718][ T6859] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   84.122117][ T6955] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.125170][ T6955] syzkaller0: entered promiscuous mode
[   84.126907][ T6955] syzkaller0: entered allmulticast mode
[   84.221073][ T6960] netlink: 32 bytes leftover after parsing attributes in process `syz.0.351'.
[   84.224844][ T6960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.351'.
[   84.446211][ T6969] netlink: 'syz.0.354': attribute type 10 has an invalid length.
[   84.453768][ T6969] team0: Port device dummy0 added
[   84.629384][ T6969] syz.0.354 (6969) used greatest stack depth: 19448 bytes left
[   84.849717][ T6979] netlink: 156 bytes leftover after parsing attributes in process `syz.0.359'.
[   84.862555][ T6979] bond0: (slave team0): Releasing backup interface
[   84.873746][ T6979] team0: Port device dummy0 removed
[   84.879436][ T6979] bridge_slave_0: left allmulticast mode
[   84.881569][ T6979] bridge_slave_0: left promiscuous mode
[   84.883749][ T6979] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.891659][ T6979] bridge_slave_1: left allmulticast mode
[   84.893790][ T6979] bridge_slave_1: left promiscuous mode
[   84.896013][ T6979] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.905155][ T6979] bond0: (slave bond_slave_0): Releasing backup interface
[   84.913398][ T6979] bond0: (slave bond_slave_1): Releasing backup interface
[   84.921983][ T6979] team0: Port device team_slave_0 removed
[   84.931128][ T6979] team0: Port device team_slave_1 removed
[   84.933999][ T6979] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.936966][ T6979] batman_adv: batadv0: Removing interface: batadv_slave_0
[   84.942050][ T6979] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.944931][ T6979] batman_adv: batadv0: Removing interface: batadv_slave_1
[   85.086110][ T6984] netlink: 32 bytes leftover after parsing attributes in process `syz.0.361'.
[   85.239845][ T6065] tipc: Node number set to 2039926627
[   85.852959][ T7023] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   85.855899][ T7023] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.902763][ T7023] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   85.905890][ T7023] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.961956][ T7023] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   85.965180][ T7023] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.014954][ T7023] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   86.019449][ T7023] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.104026][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   86.106842][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.115383][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   86.117962][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.126715][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   86.129629][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.137190][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   86.140223][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.274699][ T7028] tun0: tun_chr_ioctl cmd 2148553947
[   87.174044][ T7038] IPv6: Can't replace route, no match found
[   87.257778][ T7041] ieee802154 phy0 wpan0: encryption failed: -22
[   88.265678][ T7059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.387'.
[   88.400964][ T7061] infiniband syz1: set active
[   88.403632][ T7061] infiniband syz1: added macvlan1
[   88.427243][ T7061] RDS/IB: syz1: added
[   88.428921][ T7061] smc: adding ib device syz1 with port count 1
[   88.430986][ T7061] smc:    ib device syz1 port 1 has pnetid 
[   89.045727][ T7075] vlan2: entered promiscuous mode
[   89.047469][ T7075] bridge0: entered promiscuous mode
[   89.050203][ T7075] vlan2: entered allmulticast mode
[   89.052688][ T7075] bridge0: entered allmulticast mode
[   89.169371][ T7080] netlink: 20 bytes leftover after parsing attributes in process `syz.0.395'.
[   89.172962][ T7080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.395'.
[   89.176452][ T7080] netlink: 31 bytes leftover after parsing attributes in process `syz.0.395'.
[   89.182533][ T7080] netlink: 'syz.0.395': attribute type 3 has an invalid length.
[   89.185778][ T7080] netlink: 'syz.0.395': attribute type 2 has an invalid length.
[   89.189241][ T7080] netlink: 31 bytes leftover after parsing attributes in process `syz.0.395'.
[   89.192606][ T7080] netlink: 'syz.0.395': attribute type 2 has an invalid length.
[   90.184329][ T7091] netlink: 'syz.0.400': attribute type 1 has an invalid length.
[   90.187647][ T7091] netlink: 'syz.0.400': attribute type 4 has an invalid length.
[   90.192301][ T7091] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.400'.
[   90.197230][ T7091] netlink: 'syz.0.400': attribute type 1 has an invalid length.
[   90.201000][ T7091] netlink: 'syz.0.400': attribute type 4 has an invalid length.
[   90.204237][ T7091] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.400'.
[   90.217293][ T7091] netlink: 'syz.0.400': attribute type 21 has an invalid length.
[   90.221251][ T7091] netlink: 156 bytes leftover after parsing attributes in process `syz.0.400'.
[   90.388005][ T7099] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20131
[   90.499632][ T7101] netlink: 'syz.0.403': attribute type 13 has an invalid length.
[   90.693024][ T7101] tipc: Resetting bearer <eth:syzkaller0>
[   90.698510][   T95] syz1: Port: 1 Link DOWN
[   90.698900][   T13] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   90.703500][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.706955][   T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   90.711411][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.714895][   T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   90.718847][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   90.722325][   T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   90.725754][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   91.281605][ T7106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.405'.
[   91.593282][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.410'.
[   91.644361][ T7121] net_ratelimit: 9 callbacks suppressed
[   91.644373][ T7121] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   91.699826][ T7123] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   92.933349][ T7130] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[   93.372776][ T7149] __nla_validate_parse: 1 callbacks suppressed
[   93.372788][ T7149] netlink: 28 bytes leftover after parsing attributes in process `syz.0.421'.
[   93.467051][ T7153] veth0_to_team: left promiscuous mode
[   93.469119][ T7153] veth0_to_team: left allmulticast mode
[   93.473344][ T7153] bridge1: left allmulticast mode
[   93.474987][ T7153] vxlan0: left promiscuous mode
[   93.476610][ T7153] vxlan0: left allmulticast mode
[   93.480067][ T7153] bond3: left promiscuous mode
[   93.481754][ T7153] syzkaller0: left promiscuous mode
[   93.483372][ T7153] syzkaller0: left allmulticast mode
[   93.485302][ T7153] vlan2: left promiscuous mode
[   93.486923][ T7153] bridge0: left promiscuous mode
[   93.488882][ T7153] vlan2: left allmulticast mode
[   93.490449][ T7153] bridge0: left allmulticast mode
[   93.564014][ T7157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.425'.
[   94.375305][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.434'.
[   94.522793][ T7191] syzkaller1: entered promiscuous mode
[   94.524896][ T7191] syzkaller1: entered allmulticast mode
[   95.594612][ T7193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.439'.
[   95.788439][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.446'.
[   95.842951][ T7212] IPv6: Can't replace route, no match found
[   96.011659][ T7224] netlink: 'syz.0.452': attribute type 83 has an invalid length.
[   96.035159][ T7224] netlink: 60 bytes leftover after parsing attributes in process `syz.0.452'.
[   96.555990][ T7258] netlink: 36 bytes leftover after parsing attributes in process `syz.0.461'.
[   96.632984][ T7264] C: renamed from lo
[   96.636202][ T7264] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   96.904623][ T7282] netlink: 'syz.0.469': attribute type 1 has an invalid length.
[   97.948248][ T7300] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20131
[   98.050770][ T7306] syzkaller1: entered promiscuous mode
[   98.053026][ T7306] syzkaller1: entered allmulticast mode
[   98.191477][ T7314] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20131
[   98.254475][ T7323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.477'.
[   98.597897][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.482'.
[   99.364540][ T7382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.490'.
[   99.580136][ T7390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.494'.
[  100.656015][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.497'.
[  100.658941][ T7400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.497'.
[  100.661706][ T7400] netlink: 'syz.0.497': attribute type 18 has an invalid length.
[  100.713972][ T7402] netlink: 52 bytes leftover after parsing attributes in process `syz.0.498'.
[  100.717349][ T7402] netlink: 52 bytes leftover after parsing attributes in process `syz.0.498'.
[  100.933414][ T7415] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20131
[  101.073995][ T7423] netlink: 36 bytes leftover after parsing attributes in process `syz.0.506'.
[  101.083244][ T7423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.506'.
[  101.145193][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.507'.
[  101.309797][ T7431] IPv6: Can't replace route, no match found
[  102.145941][ T7476] netlink: 'syz.0.529': attribute type 4 has an invalid length.
[  102.322028][ T7485] openvswitch: netlink: Flow actions attr not present in new flow.
[  132.411869][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.414228][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  193.850362][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  193.852673][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  233.528383][   T34] INFO: task kworker/0:2:1270 blocked for more than 143 seconds.
[  233.531368][   T34]       Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  233.535655][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  233.544902][   T34] task:kworker/0:2     state:D stack:25848 pid:1270  tgid:1270  ppid:2      task_flags:0x4208060 flags:0x00004000
[  233.550377][   T34] Workqueue: events rfkill_global_led_trigger_worker
[  233.553302][   T34] Call Trace:
[  233.554665][   T34]  <TASK>
[  233.555927][   T34]  __schedule+0x1798/0x4cc0
[  233.557800][   T34]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  233.578510][   T34]  ? __pfx___schedule+0x10/0x10
[  233.580476][   T34]  ? schedule+0x91/0x360
[  233.582085][   T34]  schedule+0x165/0x360
[  233.583745][   T34]  schedule_preempt_disabled+0x13/0x30
[  233.585929][   T34]  __mutex_lock+0x7e6/0x1360
[  233.587955][   T34]  ? __mutex_lock+0x5b6/0x1360
[  233.600503][   T34]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  233.603037][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  233.605046][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  233.607254][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  233.610941][   T34]  rfkill_global_led_trigger_worker+0x27/0xd0
[  233.613375][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  233.615591][   T34]  process_scheduled_works+0xae1/0x17b0
[  233.617760][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  233.622109][   T34]  worker_thread+0x8a0/0xda0
[  233.623945][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  233.626462][   T34]  ? __kthread_parkme+0x7b/0x200
[  233.628605][   T34]  kthread+0x711/0x8a0
[  233.630236][   T34]  ? __pfx_worker_thread+0x10/0x10
[  233.632281][   T34]  ? __pfx_kthread+0x10/0x10
[  233.634088][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  233.636104][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.640047][   T34]  ? __pfx_kthread+0x10/0x10
[  233.641871][   T34]  ret_from_fork+0x3fc/0x770
[  233.643704][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  233.645727][   T34]  ? __switch_to_asm+0x39/0x70
[  233.647613][   T34]  ? __switch_to_asm+0x33/0x70
[  233.650269][   T34]  ? __pfx_kthread+0x10/0x10
[  233.652085][   T34]  ret_from_fork_asm+0x1a/0x30
[  233.653984][   T34]  </TASK>
[  233.655321][   T34] INFO: task syz.1.320:6842 blocked for more than 143 seconds.
[  233.659866][   T34]       Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0
[  233.663004][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  233.666332][   T34] task:syz.1.320       state:D stack:25096 pid:6842  tgid:6842  ppid:5845   task_flags:0x400040 flags:0x00004004
[  233.671335][   T34] Call Trace:
[  233.672680][   T34]  <TASK>
[  233.673858][   T34]  __schedule+0x1798/0x4cc0
[  233.675626][   T34]  ? __lock_acquire+0xab9/0xd20
[  233.677562][   T34]  ? __lock_acquire+0xab9/0xd20
[  233.682442][   T34]  ? __pfx___schedule+0x10/0x10
[  233.684426][   T34]  ? schedule+0x91/0x360
[  233.686128][   T34]  schedule+0x165/0x360
[  233.687801][   T34]  schedule_preempt_disabled+0x13/0x30
[  233.690245][   T34]  __mutex_lock+0x7e6/0x1360
[  233.692148][   T34]  ? __mutex_lock+0x5b6/0x1360
[  233.694060][   T34]  ? rfkill_unregister+0xc8/0x220
[  233.696059][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  233.698531][   T34]  ? __pfx_device_del+0x10/0x10
[  233.700507][   T34]  rfkill_unregister+0xc8/0x220
[  233.702442][   T34]  nfc_unregister_device+0x96/0x2a0
[  233.704519][   T34]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  233.706764][   T34]  virtual_ncidev_close+0x56/0x90
[  233.708951][   T34]  __fput+0x44c/0xa70
[  233.710532][   T34]  task_work_run+0x1d4/0x260
[  233.712350][   T34]  ? __pfx_task_work_run+0x10/0x10
[  233.714368][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  233.716494][   T34]  exit_to_user_mode_loop+0xec/0x110
[  233.718788][   T34]  do_syscall_64+0x2bd/0x3b0
[  233.720640][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.722667][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.724994][   T34]  ? exc_page_fault+0x9f/0xf0
[  233.726819][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.729456][   T34] RIP: 0033:0x7f66a3f8ebe9
[  233.731169][   T34] RSP: 002b:00007ffe9ed26d18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  233.734367][   T34] RAX: 0000000000000000 RBX: 00007f66a41b7da0 RCX: 00007f66a3f8ebe9
[  233.737492][   T34] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  233.740743][   T34] RBP: 00007f66a41b7da0 R08: 0000000000000000 R09: 0000001e9ed2700f
[  233.743828][   T34] R10: 000000000003fcd4 R11: 0000000000000246 R12: 000000000001416d
[  233.747031][   T34] R13: 00007f66a41b6180 R14: ffffffffffffffff R15: 00007ffe9ed26e30
[  233.750299][   T34]  </TASK>
[  233.751573][   T34] INFO: task syz.2.324:6859 blocked for more than 143 seconds.
[  233.754529][   T34]       Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0
[  233.757845][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  233.762451][   T34] task:syz.2.324       state:D stack:25144 pid:6859  tgid:6855  ppid:5849   task_flags:0x400140 flags:0x00004006
[  233.767127][   T34] Call Trace:
[  233.768665][   T34]  <TASK>
[  233.769909][   T34]  __schedule+0x1798/0x4cc0
[  233.771785][   T34]  ? __lock_acquire+0xab9/0xd20
[  233.773754][   T34]  ? __lock_acquire+0xab9/0xd20
[  233.775747][   T34]  ? __pfx___schedule+0x10/0x10
[  233.777770][   T34]  ? schedule+0x91/0x360
[  233.779818][   T34]  schedule+0x165/0x360
[  233.781527][   T34]  schedule_preempt_disabled+0x13/0x30
[  233.783662][   T34]  __mutex_lock+0x7e6/0x1360
[  233.785566][   T34]  ? __mutex_lock+0x5b6/0x1360
[  233.787488][   T34]  ? nfc_rfkill_set_block+0x50/0x2e0
[  233.789904][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  233.791928][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.794018][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  233.796387][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  233.799041][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  233.801299][   T34]  nfc_rfkill_set_block+0x50/0x2e0
[  233.803310][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  233.805529][   T34]  rfkill_set_block+0x1d2/0x440
[  233.807477][   T34]  rfkill_fop_write+0x44b/0x570
[  233.809627][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  233.811762][   T34]  ? security_kernfs_init_security+0x240/0x290
[  233.814165][   T34]  ? rw_verify_area+0x255/0x4d0
[  233.816072][   T34]  ? __lock_acquire+0xab9/0xd20
[  233.818003][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  233.820578][   T34]  vfs_write+0x27e/0xb30
[  233.822277][   T34]  ? __pfx_vfs_write+0x10/0x10
[  233.824218][   T34]  ? __fget_files+0x2a/0x420
[  233.826081][   T34]  ? __fget_files+0x2a/0x420
[  233.827946][   T34]  ? __fget_files+0x3a0/0x420
[  233.829978][   T34]  ? __fget_files+0x2a/0x420
[  233.831845][   T34]  ksys_write+0x145/0x250
[  233.833578][   T34]  ? __pfx_ksys_write+0x10/0x10
[  233.835508][   T34]  ? rcu_is_watching+0x15/0xb0
[  233.837622][   T34]  ? do_syscall_64+0xbe/0x3b0
[  233.839878][   T34]  do_syscall_64+0xfa/0x3b0
[  233.841854][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.843673][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.845595][   T34]  ? exc_page_fault+0x9f/0xf0
[  233.847087][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.849442][   T34] RIP: 0033:0x7f427c38ebe9
[  233.850856][   T34] RSP: 002b:00007f427d1a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  233.853361][   T34] RAX: ffffffffffffffda RBX: 00007f427c5b6090 RCX: 00007f427c38ebe9
[  233.855709][   T34] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 000000000000000b
[  233.858183][   T34] RBP: 00007f427c411e19 R08: 0000000000000000 R09: 0000000000000000
[  233.860868][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  233.863367][   T34] R13: 00007f427c5b6128 R14: 00007f427c5b6090 R15: 00007ffd8528f1d8
[  233.866093][   T34]  </TASK>
[  233.867406][   T34] 
[  233.867406][   T34] Showing all locks held in the system:
[  233.870360][   T34] 2 locks held by ksoftirqd/0/15:
[  233.872218][   T34]  #0: ffff88804b039f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  233.875347][   T34]  #1: ffff88804b024008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  233.878556][   T34] 1 lock held by khungtaskd/34:
[  233.880113][   T34]  #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  233.883128][   T34] 3 locks held by kworker/0:2/1270:
[  233.884702][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  233.888825][   T34]  #1: ffffc900078d7bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  233.892821][   T34]  #2: ffffffff8f8117e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0
[  233.896244][   T34] 2 locks held by getty/5672:
[  233.897646][   T34]  #0: ffff88810958c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  233.900664][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  233.903704][   T34] 2 locks held by syz.1.320/6842:
[  233.905270][   T34]  #0: ffff88802f2c9100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0
[  233.908988][   T34]  #1: ffffffff8f8117e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220
[  233.912047][   T34] 2 locks held by syz.2.324/6859:
[  233.913549][   T34]  #0: ffffffff8f8117e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570
[  233.916609][   T34]  #1: ffff88802f2c9100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0
[  233.919594][   T34] 2 locks held by syz-executor/7272:
[  233.921224][   T34]  #0: ffff888112b2d918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0
[  233.924172][   T34]  #1: ffffffff8f8117e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  233.927707][   T34] 2 locks held by syz-executor/7280:
[  233.929560][   T34]  #0: ffff8881105a8118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0
[  233.932693][   T34]  #1: ffffffff8f8117e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  233.935720][   T34] 3 locks held by syz.0.532/7482:
[  233.937276][   T34]  #0: ffffffff8f59d270 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  233.940004][   T34]  #1: ffffffff8f59d088 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  233.942814][   T34]  #2: ffffffff8f8117e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  233.946043][   T34] 2 locks held by syz-executor/7490:
[  233.948272][   T34]  #0: ffff888030b52118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0
[  233.951407][   T34]  #1: ffffffff8f8117e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  233.954413][   T34] 2 locks held by syz-executor/7493:
[  233.956104][   T34]  #0: ffff8881074a9118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0
[  233.959447][   T34]  #1: ffffffff8f8117e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  233.962618][   T34] 2 locks held by syz-executor/7496:
[  233.964315][   T34]  #0: ffff8881074ae118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0
[  233.968456][   T34]  #1: ffffffff8f8117e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  233.971550][   T34] 2 locks held by syz-executor/7498:
[  233.973206][   T34]  #0: ffff88810a737118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0
[  233.976319][   T34]  #1: ffffffff8f8117e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  233.979933][   T34] 2 locks held by syz-executor/7501:
[  233.981650][   T34]  #0: ffff88810b265118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0
[  233.984714][   T34]  #1: ffffffff8f8117e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  233.988389][   T34] 2 locks held by syz-executor/7504:
[  233.990170][   T34]  #0: ffff88810b265918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0
[  233.993237][   T34]  #1: ffffffff8f8117e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0
[  233.996282][   T34] 
[  233.997032][   T34] =============================================
[  233.997032][   T34] 
[  233.999934][   T34] NMI backtrace for cpu 1
[  233.999951][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[  233.999960][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  233.999965][   T34] Call Trace:
[  233.999969][   T34]  <TASK>
[  233.999973][   T34]  dump_stack_lvl+0x189/0x250
[  233.999986][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  233.999995][   T34]  ? __pfx__printk+0x10/0x10
[  234.000010][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  234.000028][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  234.000037][   T34]  ? __pfx__printk+0x10/0x10
[  234.000048][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  234.000060][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  234.000070][   T34]  watchdog+0xf93/0xfe0
[  234.000082][   T34]  ? watchdog+0x1de/0xfe0
[  234.000094][   T34]  kthread+0x711/0x8a0
[  234.000105][   T34]  ? __pfx_watchdog+0x10/0x10
[  234.000113][   T34]  ? __pfx_kthread+0x10/0x10
[  234.000123][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  234.000132][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  234.000141][   T34]  ? __pfx_kthread+0x10/0x10
[  234.000150][   T34]  ret_from_fork+0x3fc/0x770
[  234.000159][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  234.000168][   T34]  ? __switch_to_asm+0x39/0x70
[  234.000177][   T34]  ? __switch_to_asm+0x33/0x70
[  234.000210][   T34]  ? __pfx_kthread+0x10/0x10
[  234.000219][   T34]  ret_from_fork_asm+0x1a/0x30
[  234.000235][   T34]  </TASK>
[  234.000238][   T34] Sending NMI from CPU 1 to CPUs 0:
[  234.052008][    C0] NMI backtrace for cpu 0
[  234.052024][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[  234.052033][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  234.052039][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  234.052055][    C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 33 d7 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  234.052061][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  234.052069][    C0] RAX: ba04c4038b184f00 RBX: ffffffff81968308 RCX: ba04c4038b184f00
[  234.052074][    C0] RDX: 0000000000000001 RSI: ffffffff8d9b6e8f RDI: ffffffff8be33400
[  234.052079][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  234.052084][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa37e30
[  234.052089][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  234.052094][    C0] FS:  0000000000000000(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  234.052099][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  234.052104][    C0] CR2: 000056332ce1f680 CR3: 0000000108f56000 CR4: 00000000000006f0
[  234.052127][    C0] Call Trace:
[  234.052137][    C0]  <TASK>
[  234.052141][    C0]  default_idle+0x13/0x20
[  234.052149][    C0]  default_idle_call+0x74/0xb0
[  234.052157][    C0]  do_idle+0x1e8/0x510
[  234.052166][    C0]  ? __pfx_do_idle+0x10/0x10
[  234.052203][    C0]  cpu_startup_entry+0x44/0x60
[  234.052212][    C0]  rest_init+0x2de/0x300
[  234.052220][    C0]  start_kernel+0x3a9/0x410
[  234.052231][    C0]  x86_64_start_reservations+0x24/0x30
[  234.052242][    C0]  x86_64_start_kernel+0x143/0x1c0
[  234.052251][    C0]  common_startup_64+0x13e/0x147
[  234.052265][    C0]  </TASK>
[  234.053006][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  234.117147][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00207-g815957293639-dirty #0 PREEMPT(full) 
[  234.121370][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  234.124938][   T34] Call Trace:
[  234.126261][   T34]  <TASK>
[  234.127513][   T34]  dump_stack_lvl+0x99/0x250
[  234.129333][   T34]  ? __asan_memcpy+0x40/0x70
[  234.130768][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  234.132740][   T34]  ? __pfx__printk+0x10/0x10
[  234.134746][   T34]  vpanic+0x281/0x750
[  234.136433][   T34]  ? __pfx_vpanic+0x10/0x10
[  234.138408][   T34]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  234.140775][   T34]  ? preempt_schedule+0xae/0xc0
[  234.142873][   T34]  ? preempt_schedule_common+0x83/0xd0
[  234.145234][   T34]  panic+0xb9/0xc0
[  234.146836][   T34]  ? __pfx_panic+0x10/0x10
[  234.148756][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  234.151047][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  234.153632][   T34]  watchdog+0xfd2/0xfe0
[  234.155221][   T34]  ? watchdog+0x1de/0xfe0
[  234.156642][   T34]  kthread+0x711/0x8a0
[  234.157974][   T34]  ? __pfx_watchdog+0x10/0x10
[  234.159609][   T34]  ? __pfx_kthread+0x10/0x10
[  234.161097][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  234.162781][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  234.164683][   T34]  ? __pfx_kthread+0x10/0x10
[  234.166707][   T34]  ret_from_fork+0x3fc/0x770
[  234.168711][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  234.170921][   T34]  ? __switch_to_asm+0x39/0x70
[  234.172964][   T34]  ? __switch_to_asm+0x33/0x70
[  234.175007][   T34]  ? __pfx_kthread+0x10/0x10
[  234.176985][   T34]  ret_from_fork_asm+0x1a/0x30
[  234.179045][   T34]  </TASK>
[  234.181075][   T34] Kernel Offset: disabled
[  234.182961][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
02:04:17  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff888104ff8237 R9 =1ffff110209ff046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af9907 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000056332ce1f680 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000080000010015 0000000c00000028 XMM01=0000000e00000001 0000000000000006
XMM02=0043004400010015 0000000000000040 XMM03=0000000000000000 0000000000000000
XMM04=0000ff0000000000 00000000000000ff XMM05=0031313230382f65 65692f316968702f
XMM06=0000000000000000 0000000000000000 XMM07=000000000000ff00 0000ff00000000ff
XMM08=ff00000000000000 0000000000000000 XMM09=3435313230386565 65692f6d69737768
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff82095201 RBX=dffffc0000000000 RCX=ffffffff82095326 RDX=0000000000000000
RSI=0000000000000008 RDI=ffffea0000a13fc0 RBP=ffffc9000250f890 RSP=ffffc9000250f5e0
R8 =ffffea0000a13fc7 R9 =1ffffd40001427f8 R10=dffffc0000000000 R11=fffff940001427f9
R12=dffffc0000000000 R13=00007ff93e91e000 R14=ffffc9000250faa0 R15=ffffea0000a13fc0
RIP=ffffffff82095326 RFL=00000256 [---ZAP-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff9416e7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007ff940b876c3 00007ff940b876c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 000000000003bf12
XMM06=0000020806060168 e004c08400000007 XMM07=0ae0030000000000 0305e88210000ac0
XMM08=030210000ab00301 a010001600000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
