last executing test programs:

8.162382852s ago: executing program 0 (id=1025):
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_compaction_try_to_compact_pages\x00', 0xffffffffffffffff, 0x0, 0x60a}, 0x18)
ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000000c0)={0x5, 0x10, '\x00', 0x0, &(0x7f0000000080)=[0x0, 0x0]})
r1 = socket(0x0, 0x3, 0x100)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', <r4=>0x0, 0x4, 0xe, 0x2, 0x8, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, 0x0, 0x0, 0x5, 0x3}})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x2}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_CHANNELS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44040}, 0x4040)
ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000440)={0x4f})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4}, 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x400, 0x0)
bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r1)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r7, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x51}, @void, @val={0xc, 0x99, {0xffff, 0x30}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r8 = syz_genetlink_get_family_id$team(&(0x7f00000007c0), r1)
getpeername$packet(r1, &(0x7f0000000800)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000840)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000880)={'team0\x00', <r10=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000940)={'syztnl1\x00', &(0x7f00000008c0)={'syztnl0\x00', <r11=>r5, 0x2f, 0x4, 0xf8, 0x1, 0x21, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0x6, 0x9}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000a00)={'gretap0\x00', &(0x7f0000000980)={'tunl0\x00', <r12=>r3, 0x7880, 0x7, 0x10000, 0x5, {{0xa, 0x4, 0x1, 0x7, 0x28, 0x64, 0x0, 0x8, 0x29, 0x0, @private=0xa010102, @rand_addr=0x64010101, {[@generic={0x88, 0xc, "78bb5c463b66e7468b66"}, @noop, @ra={0x94, 0x4}]}}}}})
getsockname$packet(r1, &(0x7f0000000a40)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000a80)=0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'syztnl0\x00', <r14=>r4, 0x2f, 0x7, 0x4, 0x5, 0x12, @remote, @private1, 0x8000, 0x80, 0xcf0, 0x1}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000b80)={'batadv_slave_0\x00', <r15=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000014c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4004}, 0xc, &(0x7f0000001480)={&(0x7f0000000bc0)={0x8a8, r8, 0x8, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r9}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x8, 0x1, 0x1}, {0x6, 0xd, 0x8, 0x1}, {0x6, 0xc, 0x5, 0x1}]}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xbe, 0x56, 0x0, 0x9}, {0xa8b, 0x9, 0x44, 0x6}, {0x5, 0x86, 0x4, 0xfff}, {0x0, 0x19, 0x0, 0x9}, {0x6, 0x1, 0x3, 0x8}, {0x9, 0xa9, 0x7f, 0x200}]}}}]}}, {{0x8, 0x1, r10}, {0x288, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xffc0, 0x67, 0x2, 0x26}, {0x4, 0x0, 0x1d, 0xff}, {0x7fff, 0x2, 0xff, 0x1}, {0x2, 0x9, 0x1, 0x8c}, {0x5, 0x1, 0x80, 0x3}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8, 0x1, r5}, {0x198, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x101, 0x7c, 0x0, 0xd0}, {0x4, 0x10, 0xc}, {0x1b4c, 0x3, 0x1, 0xffffffff}, {0x8, 0x61, 0x7, 0x7}, {0x8, 0x1, 0xd, 0x6}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}]}}, {{0x8, 0x1, r5}, {0x2a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x0, 0x3, 0x10, 0x4}, {0x7, 0x9, 0x4, 0x7fffffff}, {0xe7, 0xea, 0x1}, {0x6, 0x4, 0x28}, {0x4, 0x2}, {0x100, 0x81, 0x5, 0x9}, {0x98, 0x88, 0x7, 0xa7}, {0x0, 0x6, 0x10, 0x4}, {0x0, 0xb7, 0x8, 0x80}, {0x4, 0xf, 0x6, 0x13fb}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r15}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x8a8}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000)
sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x2c, r7, 0x1823263f735a4820, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000040)
bind(r1, &(0x7f0000001600)=@generic={0x1d, "382d04f349ae63f9250c73328d95cdd7eb2630c7d34af21010c1bd3f0be8b5829ffbf3ed420c011bc10d636daed6d87a0ea68bcd4c024165c60a1529799cc1f917430ae0c012ccdedc9309c9fa174a8c37643229907804d80a8e3558ec396393858fb030c1db4f8b4f30edc28946e02ba4dde9969cb0c6a974f5cb92830f"}, 0x80)
r16 = syz_genetlink_get_family_id$nl80211(&(0x7f00000016c0), r1)
sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000003b00)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x8200}, 0xc, &(0x7f0000003ac0)={&(0x7f0000001700)={0x239c, r16, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x8e, 0x45, "f7da29a5398ec240f5232ed42741f81ce6d183c8feb3f1fc41668817f8d61f0f3136c0828adad1ff2448271d212c404c59ff8e7e10b401ee3d4c7a24d31b56a13bacb8bc32b64d69f0086400ce9a6fcba93b6a46c38d5fe9bf6e1786b671393009c07a6189a2bc86734fb38c19bcf3eb22535e9b84199221d25ae12cda822478ed0558ab73aea70342f0"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x36, 0x45, "ee037f570ac032c56690d8bf949e00622ac279887eb1a8c75a4acf2ce602b883343cea97cd27176192a3b8e1224713248729"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x8f, 0x45, "50e9a8a70718a0d1847d6fb7b477b418979162467fc2f4ebae90191a006c1b5f9ed5fb460468f366caddf51622c9ec892fad6d356c6e5bd60a464d761891df5a7ec504a340fdc9a6007d2cb4b984319e0be3ab97c72dc684241075db55fa9d56dd53227fa5aa91abcb1f54385fc595e72b3dda199415dce176c80b2fb1543314707f47df93809345f4c4a4"}, @NL80211_ATTR_TESTDATA={0x25, 0x45, "5c45ef210e55893586ad6683d1aeaf6b65268fe652f67f9f4b4a238153f6fae6ba"}, @NL80211_ATTR_TESTDATA={0x9e, 0x45, "ea2c9eef8eb4d05761f1ea718c95432a081b4bed4b526133c4051fab576d426add8acb41a1e693aa2cee3a3f682fb01be05e306fd315f99e57ef216ca65843d19c4f01bb68e7c6a1c904f6adb4c5f477711f52ba9a558d3f9723a125d75003f9ef16bb7526d5f46816b60fbf961eb87303554e30ef985a389d26034b221165ca56bed357c02eb1ae49acd2aaa29c86a26a7681d54d9509b766b6"}, @NL80211_ATTR_TESTDATA={0xbb, 0x45, "0f5648de3f45a0213048b8a7bda15dc579165c050de6839d2e23f20218b50f3d28d2cc5a938b0583f278b1d9f0e4802e9d861c83c2f202a7836747b63f469f7303f0d007c6454712b4ae4323cb6d3c9eba96111d2899b4af5982a1ae06cbb59865b21552b4ad22355efab7bae731fce9b063a299da8b85373e4a316e8a7d55e726e8b1c88398cc2de590b6c3c062d5f96a733760d0e282a0e46f4e32f8299c8d959ef93142979a8a11537929873ef2f681b97fbc05a6a5"}, @NL80211_ATTR_TESTDATA={0x7d, 0x45, "a756c262e1c39bf25eadb44c0cb57f73d55dafdeede4383f5012bfcf0dc4837bccc89a037054694b2c9b292b88d6f3a11b2a7469c3d42c9109e3caa87e787cbc5af967a0498119c98b205aa00f5e9a9d4ad92a347e0efd55f35d38b2928f386ab18c0b5593315d71284621732a6af66b0b1bda1a1de8ee247f"}, @NL80211_ATTR_TESTDATA={0x22, 0x45, "474cba8a75eafc3414a24d806c870a87b309eca0f130a5898bf7e352f55f"}]}, 0x239c}, 0x1, 0x0, 0x0, 0x4001}, 0x10)
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000003b40)='wg1\x00', 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000003c00)={'syztnl2\x00', &(0x7f0000003b80)={'ip6gre0\x00', r9, 0x29, 0xf8, 0x5, 0x1, 0x7e, @empty, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x7879, 0x1, 0xa}})

7.322445936s ago: executing program 0 (id=1028):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000805}, 0x40040) (async)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) (async, rerun: 64)
write$nci(r1, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16) (rerun: 64)
write$nci(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="400204b0b8b82bb5"], 0x7) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r7 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) (async, rerun: 64)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x3}, 0x10) (async, rerun: 64)
bind$tipc(r6, 0x0, 0x0)
r8 = socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 32)
r9 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r10, 0x1) (async)
bind$inet6(r10, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @loopback, 0x6}, 0x1c) (async)
setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x10) (async)
connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff7, @empty, 0x2}, 0x1c) (async, rerun: 32)
sendmmsg$inet6(r10, &(0x7f0000000480)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x240c089d) (rerun: 32)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000080)) (async)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})

3.312738713s ago: executing program 1 (id=1043):
mmap(&(0x7f0000209000/0x3000)=nil, 0x3000, 0x1000008, 0x13, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000009640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1073eedab59a32", 0x7}, {&(0x7f0000000240)="02a2f97a177137003d9b418698b97c81bf1bde7a9b76365fd7b1bbae5f5e09cb9b4432ed011564c718321c92affddb69470547b1baefcdb5445c31a7d34e0b20bddd0e2357b50d72", 0x48}, {&(0x7f00000038c0)}], 0x3}}], 0x1, 0x8810)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4008af25, &(0x7f0000000840)={0x3, 0x1, &(0x7f0000000600)=""/189, &(0x7f00000006c0)=""/228, &(0x7f0000000800), 0xeeee0000})
recvmsg$unix(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f00000007c0)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, [0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x4]}})
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='cubic', 0xb)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000080)={0x5, 0x545, 0x5f9, 0x5f, 0x7fff}, 0x14)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x1a, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000000000006110080000000000630afcff000000009500000000000000ec233c34d7254a78457ef5edf05a6d132044859a52afd9e9f578f2882da300d39f3e5c0f714f7ee274791376de3125b519e2bffc78594cf8fd92ca8d2e068b91ec8747508808266b0a3fd3305c7d612b55768ab4b62bb85d4f599439bd719f"], &(0x7f0000000100)='GPL\x00'}, 0x90)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=<r8=>0x0)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYRES8=0x0, @ANYRES32=r8], 0xfd45}}, 0x0)
write$nci(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="7105040902020766cb440484b907eb0101f8"], 0x12)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x18, 0x31, 0x10b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
close(0x3)
connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @null, 0x5}, [@default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)

2.48991577s ago: executing program 1 (id=1045):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0x1, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0xfffffffffffffe5c, 0x2, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
socket$unix(0x1, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0x7, 0x80, 0x5, 0x2, 0x0, 0x70bd28, 0x25dfdbfb}, 0x10}}, 0xc4)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{0xa, 0x0, 0x101, @mcast1, 0x8}, {0xa, 0x0, 0xfffffffd, @private2, 0x6}, 0x0, {[0x6, 0x200, 0x1, 0xfffffefc, 0x2d, 0x1, 0x0, 0x200003]}}, 0x5c)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r11 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r10, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef)
socket$xdp(0x2c, 0x3, 0x0)

2.301763609s ago: executing program 2 (id=1051):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0xfd45}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000000000000002", 0x54}, {&(0x7f00000001c0)="ee641681", 0x4}], 0x2)
write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="60800290dd"], 0x5)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r7=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="18500000000000000000"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r5]}, 0x94)
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bind$nfc_llcp(r8, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
listen(r8, 0x0)
close(r9)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)

2.152081351s ago: executing program 2 (id=1052):
mmap(&(0x7f0000209000/0x3000)=nil, 0x3000, 0x1000008, 0x13, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000009640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1073eedab59a32", 0x7}, {&(0x7f0000000240)="02a2f97a177137003d9b418698b97c81bf1bde7a9b76365fd7b1bbae5f5e09cb9b4432ed011564c718321c92affddb69470547b1baefcdb5445c31a7d34e0b20bddd0e2357b50d72", 0x48}, {&(0x7f00000038c0)}], 0x3}}], 0x1, 0x8810)
recvmsg$unix(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'gretap0\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, [0xfffffffd, 0x0, 0x4, 0x1, 0x0, 0x0, 0x1, 0x4]}})
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='cubic', 0xb)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x5, 0x545, 0x5f9, 0x5f, 0x7fff}, 0x14)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x1a, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}, @ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000100)='GPL\x00'}, 0x90)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e24, 0x5, @loopback}, 0x5d)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x2, 0xb2, &(0x7f0000000800)=""/178, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200)={0x0, 0x0, 0xffffffff}, 0x10, 0x0, r5}, 0x94)
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=<r9=>0x0)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYRESDEC, @ANYRES16=r7, @ANYRES32=r5, @ANYRES32=r9, @ANYRES8=r7], 0xfd45}}, 0x0)
write$nci(r7, &(0x7f0000000480)=ANY=[@ANYBLOB="7105040902020766cb440484b907eb0101f8"], 0x12)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x18, 0x31, 0x10b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
close(0x3)

2.039125088s ago: executing program 2 (id=1053):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0xfd45}}, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000000000000002", 0x54}, {&(0x7f00000001c0)="ee641681", 0x4}], 0x2) (async)
write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="60800290dd"], 0x5)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r7=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x2}, 0x50) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x5}}, &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r5]}, 0x94) (async)
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async)
r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bind$nfc_llcp(r8, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) (async)
listen(r8, 0x0) (async)
close(r9) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
socket$nl_generic(0x10, 0x3, 0x10)
close(0x4)

1.981082537s ago: executing program 1 (id=1054):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async)
r3 = socket(0x10, 0x80002, 0x0) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000546439f08500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r6=>0x0}) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRES8=r4], 0xffffffffffffff53}, 0x0) (async)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
recvmsg(r13, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r5, r6, 0x25, 0x0, @val=@perf_event}, 0x18) (async)
r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r16 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r16, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES16=r15, @ANYBLOB="01000000000000000000540000000e0002006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e007f0a7eed1168379a3601ffc4910700004f78d4"], 0x1c}}, 0x0)
recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r2, @ANYBLOB="21f734d750f66011573a2e63908a78333e997464fa39cf6ff192eebbee1170a9fa6c4a0828ab2ca7a5677f649c74e3e42c5e", @ANYBLOB="f30904", @ANYRESDEC, @ANYRES32=r11, @ANYRESDEC=r9], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x40) (async)
r17 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r17, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="580100001000330100000000000000007f000001d8eb0000000000f0000000000000fe8000000000000000000000000000bb0000009521edf900395c10880000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000009a2300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200010000000000000000004c0012007266633435343328726663343130362d67636d2d6165736e6929000000000000000000000000000000000000000000000000000000000000000000fffffffffffffff700000000001c0016"], 0x158}}, 0x20004001)

1.980258154s ago: executing program 2 (id=1055):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000900), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000b00)=ANY=[@ANYBLOB="98000000", @ANYRES16=r4, @ANYBLOB="010029bd7000ffdbdf25050000000800020002000000080003"], 0x98}, 0x1, 0x0, 0x0, 0x40804}, 0x0)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r6=>0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000004080101030000000000000003000008060002400800000009000100b7e6c6f7797a0500000000741d168113dc5c0aafd345c009b5042835292c381f1a3289ec02ea5bd96fd21fea265090b5"], 0x28}, 0x1, 0x0, 0x0, 0x4000805}, 0x2040000)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r6], 0x1c}}, 0x0)
write$nci(r1, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16)
write$nci(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="400204b0b8b82bb5"], 0x7)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r7 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r8 = socket$tipc(0x1e, 0x2, 0x0)
socket(0x1f, 0x6, 0x8)
bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x3}, 0x10)
bind$tipc(r7, 0x0, 0x0)
r9 = socket$igmp6(0xa, 0x3, 0x2)
r10 = socket$kcm(0x2, 0xa, 0x2)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000080))
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
ioctl$TUNSETVNETHDRSZ(r11, 0x400454d8, &(0x7f0000000200)=0xb55)
write$tun(r0, &(0x7f0000000140)={@val={0x0, 0xc}, @void, @eth={@empty, @random="8bc6002500", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@mpls_mc={0x8848, {[], @llc={@llc={0xd4, 0x8, "d3"}}}}}}}, 0x19)

1.862565594s ago: executing program 1 (id=1056):
mmap(&(0x7f0000209000/0x3000)=nil, 0x3000, 0x1000008, 0x13, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000009640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1073eedab59a32", 0x7}, {&(0x7f0000000240)="02a2f97a177137003d9b418698b97c81bf1bde7a9b76365fd7b1bbae5f5e09cb9b4432ed011564c718321c92affddb69470547b1baefcdb5445c31a7d34e0b20bddd0e2357b50d72", 0x48}, {&(0x7f00000038c0)}], 0x3}}], 0x1, 0x8810)
recvmsg$unix(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0xfe, 0x1, 0x0, 0x4, [0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0xa]}})
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='cubic', 0xb)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000080)={0x5, 0x545, 0x5f9, 0x5f, 0x7fff}, 0x14)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x1a, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8)
setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040)=0xa, 0xffffffa8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000580)=ANY=[@ANYRES32=r4], &(0x7f0000000100)='GPL\x00'}, 0xd8)
socket$inet(0x2, 0xa, 0x3)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r8, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r10, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r11, {0x2, 0x0, @multicast2}, 0x2}}, 0x26)
r12 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYRES8=r12, @ANYRES32=r12, @ANYRESOCT=r10], 0x3c}}, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

1.372687698s ago: executing program 0 (id=1057):
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1073eedab59a32", 0x7}, {&(0x7f0000000240)="02a2f97a177137003d9b418698b97c81bf1bde7a9b76365fd7b1bbae5f5e09cb9b4432ed011564c718321c92affddb69470547b1baefcdb5445c31a7d34e0b20bddd0e2357b50d72", 0x48}, {&(0x7f0000000740)}], 0x3}}], 0x1, 0x8810)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)}, 0x10060)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, [0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x4]}})
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='cubic', 0xb)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x5, 0x545, 0x5f9, 0x7, 0x7fff}, 0x14)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x1a, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000091446f456f1c0000000000000000006110080000000000630afcff000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r8=>0x0)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0xfd45}}, 0x0)
write$nci(r5, &(0x7f0000000480)=ANY=[@ANYBLOB="7105040902020766cb440484b907eb0101f8"], 0x12)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x18, 0x31, 0x10b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
close(0x3)
connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000000000000a004e2000007fff97790cb9000000000000000000000001ff0300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a004e2200000040ff02000000000000000000000000000156a100"/272], 0x110)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

1.061904281s ago: executing program 0 (id=1058):
mmap(&(0x7f0000209000/0x3000)=nil, 0x3000, 0x1000008, 0x13, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000009640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1073eedab59a32", 0x7}, {&(0x7f0000000240)="02a2f97a177137003d9b418698b97c81bf1bde7a9b76365fd7b1bbae5f5e09cb9b4432ed011564c718321c92affddb69470547b1baefcdb5445c31a7d34e0b20bddd0e2357b50d72", 0x48}, {&(0x7f00000038c0)}], 0x3}}], 0x1, 0x8810)
recvmsg$unix(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, [0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x4]}})
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='cubic', 0xb)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x5, 0x545, 0x5f9, 0x5f, 0x7fff}, 0x14)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x1a, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000060000008000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_ext={0x1c, 0x18, &(0x7f0000000880)=ANY=[@ANYBLOB="18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000b7080000000000007b8af8ff00000000b7080000871a00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000000000eeb605c2cb61f054f754540f00000800000085000000a5000000184400000800007ca146148184fe3a7782c4dc657a648fe73914e676d0c178b37cebb57054a82ed5fcc41368e80e29f2dcc4542d9a5b118acac998"], &(0x7f0000000700)='GPL\x00', 0x4, 0xa0, &(0x7f0000000740)=""/160, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x1, 0x40, 0xff}, 0x10, 0x6598, 0xffffffffffffffff, 0xa, &(0x7f0000000ac0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000b00)=[{0x2, 0x2, 0x1, 0x4}, {0x3, 0x2, 0x8, 0x9}, {0x2, 0x1, 0x5, 0x8}, {0x6, 0x4, 0x2, 0xb}, {0x4, 0x5, 0x8, 0xc}, {0x82ed, 0x3, 0x10, 0x3}, {0x3, 0x2, 0x10}, {0x0, 0x5, 0x4, 0xc}, {0x0, 0x5, 0x7}, {0x5, 0x2, 0xd, 0x2}]}, 0x94)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r9=>0x0)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0xfd45}}, 0x0)
write$nci(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="7105040902020766cb440484b907eb0101f8"], 0x12)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x18, 0x31, 0x10b, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
close(0x3)
connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

1.060520846s ago: executing program 1 (id=1059):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0xfd45}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000000000000002", 0x54}, {&(0x7f00000001c0)="ee641681", 0x4}], 0x2)
write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="60800290dd"], 0x5)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r7=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000010c0)="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", 0x1000}], 0x1, 0x3, 0x6)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x5}}, &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r5]}, 0x94)
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bind$nfc_llcp(r8, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
listen(r8, 0x0)
close(r9)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)

1.00275142s ago: executing program 2 (id=1060):
mmap(&(0x7f0000209000/0x3000)=nil, 0x3000, 0x1000008, 0x13, 0xffffffffffffffff, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000009640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1073eedab59a32", 0x7}, {&(0x7f0000000240)="02a2f97a177137003d9b418698b97c81bf1bde7a9b76365fd7b1bbae5f5e09cb9b4432ed011564c718321c92affddb69470547b1baefcdb5445c31a7d34e0b20bddd0e2357b50d72", 0x48}, {&(0x7f00000038c0)}], 0x3}}], 0x1, 0x8810) (async)
recvmsg$unix(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000680)=@ethtool_link_settings={0x4c, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, [0xfffffffc, 0x0, 0x4, 0x0, 0x0, 0x5, 0x1, 0x4]}})
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='cubic', 0xb)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000080)={0x5, 0x545, 0x5f9, 0x5f, 0x7fff}, 0x14)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}, 0x0, 0x0, 0x1a, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) (async)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000d7b40e193db50320000000007368698fe47ffbaf00630afcff00000000"], &(0x7f0000000100)='GPL\x00'}, 0x90) (async)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="b21f8cbfce46007b9666e77998d347ecd46c1230cb860de1b042806965c997ce2b6b5cc71a36247bc41a48ba266a65b207993c27024eae11363dbd20d1d2772bfd629a49066110", 0x47, 0x40, &(0x7f0000000600)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r8=>0x0)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0xfd45}}, 0x0) (async)
write$nci(r5, &(0x7f0000000480)=ANY=[@ANYBLOB="7105040902020766cb440484b907eb0101f8"], 0x12)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x18, 0x31, 0x10b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) (async)
close(0x3) (async)
connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) (async)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

902.219311ms ago: executing program 1 (id=1061):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000})
write$bt_hci(r5, &(0x7f0000000080)=ANY=[], 0x6)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000805}, 0x40040)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0)
write$nci(r1, &(0x7f0000001800)=ANY=[@ANYBLOB="7240082b0102020681055a03997713fa06070202267a"], 0x16)
write$nci(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="400204b0b8b82bb5"], 0x7)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r7 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r8 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x3}, 0x10)
bind$tipc(r7, 0x0, 0x0)
r9 = socket$igmp6(0xa, 0x3, 0x2)
r10 = socket$kcm(0x2, 0xa, 0x2)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000000080))
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
ioctl$TUNSETVNETHDRSZ(r11, 0x400454d8, &(0x7f0000000200)=0xb55)
write$tun(r0, &(0x7f0000000140)={@val={0x0, 0xc}, @void, @eth={@empty, @random="8bc6002500", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@mpls_mc={0x8848, {[], @llc={@llc={0xd4, 0x8, "d3"}}}}}}}, 0x19)

899.359002ms ago: executing program 2 (id=1062):
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 64)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0xfd45}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000000000000002", 0x54}, {&(0x7f00000001c0)="ee641681", 0x4}], 0x2)
write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="60800290dd"], 0x5)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r7=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x2}, 0x50) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x3, 0x3, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x5}}, &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r5]}, 0x94) (async)
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
bind$nfc_llcp(r8, &(0x7f0000001040)={0x27, r3, 0xffffffffffffffff, 0x7, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x38}, 0x60)
listen(r8, 0x0)
close(r9) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)

898.483448ms ago: executing program 0 (id=1063):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={<r1=>0x0, 0x9}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0xffff, 0xc7, 0xc, 0x4f23a643, 0x1ff, 0x4, 0x9, 0x100, r1}, &(0x7f00000000c0)=0x20)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000100)={<r2=>0x0, @in6={{0xa, 0x4e24, 0x1, @private2, 0x800}}, [0x7, 0xfffffffffffffffa, 0x8123, 0x9, 0x616, 0x9, 0x1000, 0x0, 0x1, 0x0, 0x2800000000000, 0x5, 0x8, 0x4, 0x333800000000]}, &(0x7f0000000200)=0x100)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e24, 0x800, @loopback, 0x2a}}, 0x7f, 0x2}, 0x90)
sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000300)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000340)="6ec22e4770e96721185aadc71904313c4f172a2913a3623a37952ecbeae4b81610c7988fe2133c6f2e4cd5223e67023e1a545e8c02db0e5d271d4f1b18ae45010a8cee9bdc586cf6ed0dc77f0bf79c2d6565ee0a07b86153481fbef1c73063f9b0d59a3ac9b3fee0ae13d1dc8a1d4bb565218d483fcbdb850a2dea6fd075ad0a697ddb96eb6c4285baa71f287ac86ef9bd8846421c4adf87fab180fd312c99edf0fabbc29f877df4e4aaf20b8710f2a49066dff883abd591acb1f0a0705d70e4b1d5f8c014ed9269ab0516e1a944b5545a2d8e47e29a45ac3958f13aa0e0bf566c74d508f28c1097894914c555be8859aa503d20c37398c296", 0xf9}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000600)=[{&(0x7f00000004c0)="ce7e51cdfd041f0a4cfe77502d178034262b7673299977386ca7efd9e4b6eacddc8385af1c8896961540dc387e41adaf95cc384752a8fbc584ddff5faad5a02935ba95001ed48b9ba1ff4dbc181d07158bb7bbf7781521044bb321205d7978f86f2c8c4dd4f64ba9ba95afba3e0c0474b987b37f22b7f14ae4d0dc446ffcc317cc64a40f0c0317229fe1658ec30370ca9a090f575de49e80472c3eef2df929ddb2944a8232d580740d45284d03b38a92d6c09c83971ab0573f84bd670e33480cc1aafcc83c12e8bfc297e78303c9b8eae4089ef7bf2b795744904e5799b64bf5b587ef2038f11603591ee0d0b093152988", 0xf1}, {&(0x7f00000005c0)="2d6010e1ef46ca9255b7bd71e46e409bdb81d92cc502d1ae6443677c21fa23", 0x1f}], 0x2, &(0x7f0000000640)=[@ip_retopts={{0x78, 0x0, 0x7, {[@cipso={0x86, 0x13, 0xffffffffffffffff, [{0x0, 0xd, "5f79be774bd604b23f519b"}]}, @rr={0x7, 0xb, 0x72, [@empty, @broadcast]}, @generic={0x88, 0xc, "1a65656631dda78b21e6"}, @noop, @noop, @cipso={0x86, 0x37, 0x3, [{0x1, 0x2}, {0x0, 0x5, "a95170"}, {0x5, 0x11, "b08e9ef777328c0d5c70532491cd7a"}, {0x0, 0x12, "24f60c9e435ddf207e5aea341c80bcbe"}, {0x2, 0x5, "e630f9"}, {0x1, 0x2}]}, @noop, @end, @end]}}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@rr={0x7, 0x17, 0xbd, [@multicast1, @broadcast, @dev={0xac, 0x14, 0x14, 0x32}, @rand_addr=0x64010101, @empty]}, @end, @lsrr={0x83, 0x23, 0x8d, [@broadcast, @loopback, @loopback, @broadcast, @empty, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @multicast2}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@ssrr={0x89, 0x23, 0x26, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote, @multicast1, @broadcast, @empty, @loopback, @broadcast]}, @ra={0x94, 0x4}, @noop, @timestamp_addr={0x44, 0x14, 0xfd, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@remote, 0xfffffff0}]}, @end, @timestamp={0x44, 0x1c, 0x1b, 0x0, 0xe, [0x2, 0x1, 0x6, 0x3, 0x1, 0xe]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xd320}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x1a0}}], 0x2, 0x4000000)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000880)={r2, 0x7}, 0x8)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f00000008c0), &(0x7f0000000900)=0x4)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r5 = socket$caif_stream(0x25, 0x1, 0x5)
sendto$inet6(r5, &(0x7f0000000940)="84169359012f70fe5cb7085693be2088bc9e8abe5b08fe3e89c6f962bdff05764dc05928bfde922db5e755113cf9f50185b7dfbc26d0550cbd34a32cf1d66010e97ca05b8f", 0x45, 0x4000, &(0x7f00000009c0)={0xa, 0x2, 0x8, @local, 0x2}, 0x1c)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000a00)=0xc5, 0x4)
getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000a40)={<r6=>r2, 0xfff}, &(0x7f0000000a80)=0x8)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000ac0)={<r7=>r6, 0xa6, "ec5fbb0445453222039a4d713b14c7defa76ff772f7e62f4b70cef7f94fbb5572c34afbfbcb66678519ad9232fdc1d3af4cd2cbbcd9e08e7325a08ee0f01013d4a9fe2af66e7665c1f8fc1e9fa7c73cd61a92f23362316ff4750abc6452d299bde71269c63515d5e424c7669b9ef169e0db5bd956856ab81e01ad3953e1a5372d0165a9601f0e8155aafdceb8a30387b3836dc6a4b0ee3d49fccf8443432ba54df35a1379b7a"}, &(0x7f0000000b80)=0xae)
r8 = accept$netrom(0xffffffffffffffff, &(0x7f0000000bc0)={{0x3, @null}, [@default, @bcast, @netrom, @netrom, @netrom, @bcast, @bcast]}, &(0x7f0000000c40)=0x48)
getsockname$netrom(r8, &(0x7f0000000c80)={{0x3, @bcast}, [@default, @default, @default, @netrom, @remote, @default, @bcast, @bcast]}, &(0x7f0000000d00)=0x48)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r9, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0xb8, 0xb, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x200}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x68, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1ff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x90}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4080}, 0x8c1)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_NODELAY(r10, 0x84, 0x3, &(0x7f0000000ec0), &(0x7f0000000f00)=0x4)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000f40)=@assoc_value, &(0x7f0000000f80)=0x8)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000fc0)={r7, 0xc2e1}, &(0x7f0000001000)=0x8)
setsockopt$inet_int(r0, 0x0, 0xe, &(0x7f0000001040)=0xfffffffc, 0x4)
r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001080)='cpuset.memory_pressure\x00', 0x0, 0x0)
ioctl$PPPIOCSACTIVE(r11, 0x40107446, &(0x7f0000001100)={0x2, &(0x7f00000010c0)=[{0x8, 0xc5, 0x7, 0xe53}, {0x1, 0x0, 0x7, 0x1}]})
getsockopt$inet_mtu(r11, 0x0, 0xa, &(0x7f0000001140), &(0x7f0000001180)=0x4)
recvmsg(r9, &(0x7f0000001700)={&(0x7f00000011c0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000001640)=[{&(0x7f0000001240)=""/150, 0x96}, {&(0x7f0000001300)}, {&(0x7f0000001340)=""/16, 0x10}, {&(0x7f0000001380)=""/103, 0x67}, {&(0x7f0000001400)=""/106, 0x6a}, {&(0x7f0000001480)=""/202, 0xca}, {&(0x7f0000001580)=""/142, 0x8e}], 0x7, &(0x7f00000016c0)=""/57, 0x39}, 0x22)
socket(0x10, 0x3, 0x6)
socket$packet(0x11, 0x2, 0x300)

0s ago: executing program 0 (id=1064):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000ff0001002cbd7000ffdbdf25120000001323eb7d808df1d0b047d7a8ad42fa496676e063c449c72f0e037d2de5877faae29f7de609db11973313dd7c49471c7817add908f68ca21f4efb42411bfec3b14f964a2279cbd9206af9597058965e64c850c516a420056fa75e35b087035ddfd413885eae7d23ee6fa13bcfe4b567f85765c3f77f5161f88c9e419dc9866e8a7d52da23f08fe484554c45f29df9c90d68c7096f4a1dc7d4c9e76f6aa7e48ff4d7ed096c18dd294569f1f2a4ff6ef08c77dad1b2831ab364ecb78e37b2eae6da7378225076"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc804)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0xfd45}}, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x0)
sendmsg$key(r5, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="020a0009eb000000fffffffffedbdf25d126c405113f0b45b5f018e3a8384d3fc7c770ac7a976b987ca64dfb8ab02cea0cec99c4963da85c18034f0bb91342e844f516db416fbcacbc73dfc682f6cf3bfb330e270da321b60535b61ec5025293ccc9978bbaf9b962c88d131f4b"], 0x10}}, 0x4000000)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000060a0b04000000000000000002000000140000001100010000000000000000000100000a3a84e78202335713739b1f114dfa6a7f11ec8e3788bd1c"], 0x3c}}, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r7)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r7)
sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="fbc22d439b587d3aba3886d909e7429fce683047bd67078b1724d95cc454316f8848e7c9c6b67bd4b06bf8e6b059c2c4e49eebcd46f89cc3d8419f3f93768d406da33a41aba2e041654c601c3b67918353e94bf287cc7e4daae2aeffcaf3664f56c9cb05184d3d0475e9275ec836400c5e1e8044fa0c76075036f814", @ANYRES16=r8, @ANYBLOB="0100000000000000eeff130000000a0013007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x84}}, 0x0)
socket(0x10, 0x3, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r10}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10)
write$tun(r9, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000000, 0x10012, r9, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:57115' (ED25519) to the list of known hosts.
syzkaller login: [   49.583404][ T5803] cgroup: Unknown subsys name 'net'
[   49.691018][ T5803] cgroup: Unknown subsys name 'cpuset'
[   49.695713][ T5803] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.144341][ T5803] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.096268][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.100485][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.104063][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.108896][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.112317][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.199744][   T56] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.202487][   T56] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.205211][   T56] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.208839][   T56] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.211588][   T56] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.242517][   T56] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.247662][   T56] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.251249][   T56] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.255041][   T56] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.260991][   T56] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.348545][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   55.537819][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.540925][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.544198][ T5846] bridge_slave_0: entered allmulticast mode
[   55.547784][ T5846] bridge_slave_0: entered promiscuous mode
[   55.553876][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.556899][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.560449][ T5846] bridge_slave_1: entered allmulticast mode
[   55.564212][ T5846] bridge_slave_1: entered promiscuous mode
[   55.604130][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.609411][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.638742][ T5846] team0: Port device team_slave_0 added
[   55.641033][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   55.648404][ T5846] team0: Port device team_slave_1 added
[   55.704594][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.707068][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.727299][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.735516][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.738139][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.747151][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.786308][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   55.799964][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.802365][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.804772][ T5851] bridge_slave_0: entered allmulticast mode
[   55.807910][ T5851] bridge_slave_0: entered promiscuous mode
[   55.811983][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.814403][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.816806][ T5851] bridge_slave_1: entered allmulticast mode
[   55.819991][ T5851] bridge_slave_1: entered promiscuous mode
[   55.865320][ T5846] hsr_slave_0: entered promiscuous mode
[   55.868253][ T5846] hsr_slave_1: entered promiscuous mode
[   55.875621][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.885547][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.930945][ T5851] team0: Port device team_slave_0 added
[   55.946300][ T5851] team0: Port device team_slave_1 added
[   55.950613][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.953075][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.955463][ T5854] bridge_slave_0: entered allmulticast mode
[   55.959927][ T5854] bridge_slave_0: entered promiscuous mode
[   55.963121][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.965497][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.968340][ T5854] bridge_slave_1: entered allmulticast mode
[   55.971052][ T5854] bridge_slave_1: entered promiscuous mode
[   56.016594][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.019476][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.029237][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.034172][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.042541][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.046260][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.049218][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.058107][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.089280][ T5854] team0: Port device team_slave_0 added
[   56.092897][ T5854] team0: Port device team_slave_1 added
[   56.141918][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.144420][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.154677][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.161750][ T5851] hsr_slave_0: entered promiscuous mode
[   56.164343][ T5851] hsr_slave_1: entered promiscuous mode
[   56.166616][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   56.168871][ T5851] Cannot create hsr debugfs directory
[   56.175215][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.178399][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.187932][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.236375][ T5854] hsr_slave_0: entered promiscuous mode
[   56.238955][ T5854] hsr_slave_1: entered promiscuous mode
[   56.241269][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   56.243310][ T5854] Cannot create hsr debugfs directory
[   56.370570][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.391353][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.399165][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.420360][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.506079][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.522642][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.532340][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.560273][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.599595][ T5854] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.606353][ T5854] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.611808][ T5854] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.616977][ T5854] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.638937][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.679969][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   56.703787][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.706350][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.721019][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.723616][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.771284][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.789157][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.809267][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   56.819344][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.821890][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.844109][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   56.853258][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.855961][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.869382][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.871894][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.902084][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.904475][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.944321][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.981375][ T5846] veth0_vlan: entered promiscuous mode
[   56.994591][ T5846] veth1_vlan: entered promiscuous mode
[   57.014709][ T5846] veth0_macvtap: entered promiscuous mode
[   57.019657][ T5846] veth1_macvtap: entered promiscuous mode
[   57.035944][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.056951][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.062143][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.085731][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.090907][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.094253][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.102425][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.139675][ T5851] veth0_vlan: entered promiscuous mode
[   57.145558][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.148375][   T56] Bluetooth: hci0: command tx timeout
[   57.173070][ T5851] veth1_vlan: entered promiscuous mode
[   57.213353][ T3614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.216065][ T3614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.228958][ T5854] veth0_vlan: entered promiscuous mode
[   57.229234][   T56] Bluetooth: hci1: command tx timeout
[   57.243278][ T5854] veth1_vlan: entered promiscuous mode
[   57.246123][ T5851] veth0_macvtap: entered promiscuous mode
[   57.260983][ T5851] veth1_macvtap: entered promiscuous mode
[   57.265368][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.274101][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.302422][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.308301][   T56] Bluetooth: hci2: command tx timeout
[   57.308554][ T5854] veth0_macvtap: entered promiscuous mode
[   57.326595][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.333857][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.336898][ T5854] veth1_macvtap: entered promiscuous mode
[   57.355899][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.366873][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.371594][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.383619][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.401859][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.422148][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.441217][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.456615][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.460883][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.465278][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.496002][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.511897][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.546505][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.555947][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.588137][ T3614] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.590801][ T3614] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.634102][ T3538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.637039][ T3538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.690891][ T5925] workqueue: Failed to create a rescuer kthread for wq "nfc9_nci_cmd_wq": -EINTR
[   58.524328][ T5972] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7'.
[   59.227495][   T56] Bluetooth: hci0: command tx timeout
[   59.309154][   T56] Bluetooth: hci1: command tx timeout
[   59.388091][   T56] Bluetooth: hci2: command tx timeout
[   59.602839][ T6021] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[   59.642511][ T6015] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[   60.811150][ T6095] syz.2.24 uses obsolete (PF_INET,SOCK_PACKET)
[   61.094241][ T6137] netlink: 48 bytes leftover after parsing attributes in process `syz.1.28'.
[   61.317559][   T56] Bluetooth: hci0: command tx timeout
[   61.387411][   T56] Bluetooth: hci1: command tx timeout
[   61.477524][   T56] Bluetooth: hci2: command tx timeout
[   62.036215][ T5873] nci: nci_ntf_packet: unknown ntf opcode 0x127
[   63.162026][ T6216] veth1_macvtap: left promiscuous mode
[   63.388122][   T56] Bluetooth: hci0: command tx timeout
[   63.468064][   T56] Bluetooth: hci1: command tx timeout
[   63.547964][   T56] Bluetooth: hci2: command tx timeout
[   64.038681][ T6249] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[   64.069584][ T6250] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR
[   64.213749][ T5876] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   64.355553][ T2207] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   64.358779][ T2207] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   64.365536][ T2207] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   65.001162][ T6306] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[   65.095041][ T6313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.50'.
[   65.102171][ T6313] IPVS: Error joining to the multicast group
[   65.216388][ T6313] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   65.473199][ T6356] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   65.693327][ T6379] workqueue: Failed to create a rescuer kthread for wq "nfc9_nci_cmd_wq": -EINTR
[   65.804113][ T6407] netlink: 56 bytes leftover after parsing attributes in process `syz.2.61'.
[   66.576764][ T6415] warning: `syz.1.63' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   66.582407][ T6410] syzkaller1: entered promiscuous mode
[   66.584303][ T6410] syzkaller1: entered allmulticast mode
[   66.637636][ T6423] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   66.641283][ T6415] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   66.950266][ T6459] syzkaller1: entered promiscuous mode
[   66.952253][ T6459] syzkaller1: entered allmulticast mode
[   67.872457][ T6497] netlink: 16 bytes leftover after parsing attributes in process `syz.0.75'.
[   68.671614][ T6509] netlink: 'syz.1.79': attribute type 1 has an invalid length.
[   68.674522][ T6509] netlink: 144 bytes leftover after parsing attributes in process `syz.1.79'.
[   68.678216][ T6509] netlink: 'syz.1.79': attribute type 1 has an invalid length.
[   70.850952][ T6617] netlink: 28 bytes leftover after parsing attributes in process `syz.2.93'.
[   70.856227][ T6617] Zero length message leads to an empty skb
[   70.859349][ T6617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.93'.
[   70.880776][ T6617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.93'.
[   70.925852][ T6623] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   70.929202][ T6631] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   70.936132][ T5876] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[   71.152468][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.154925][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.786944][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.100'.
[   71.969858][ T6685] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   72.088570][ T6701] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   73.763908][ T6740] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   73.846141][ T6766] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[   73.917941][ T6768] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[   74.753232][ T6804] syzkaller0: entered promiscuous mode
[   74.758788][ T6804] syzkaller0: entered allmulticast mode
[   75.687677][ T6833] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[   75.692121][ T6833] macsec1: entered promiscuous mode
[   75.694598][ T6833] macsec1: entered allmulticast mode
[   75.697090][ T6833] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[   75.897510][ T6855] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_cmd_wq": -EINTR
[   76.673966][ T6863] team0 (unregistering): Port device team_slave_0 removed
[   76.682223][ T6863] team0 (unregistering): Port device team_slave_1 removed
[   77.526518][ T6910] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   77.595269][ T6924] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   78.532903][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.138'.
[   78.582103][ T6979] netlink: 16 bytes leftover after parsing attributes in process `syz.2.139'.
[   79.439696][ T6993] netlink: 16 bytes leftover after parsing attributes in process `syz.1.141'.
[   79.514432][ T7013] syzkaller1: entered promiscuous mode
[   79.516744][ T7013] syzkaller1: entered allmulticast mode
[   79.703873][ T6993] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   80.713452][ T7047] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR
[   80.713696][ T7046] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   80.722010][ T7050] netlink: 'syz.1.148': attribute type 1 has an invalid length.
[   80.729666][ T7050] netlink: 224 bytes leftover after parsing attributes in process `syz.1.148'.
[   80.733396][ T7061] netlink: 16 bytes leftover after parsing attributes in process `syz.0.150'.
[   80.759080][ T7073] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[   80.782994][ T7078] netlink: 100 bytes leftover after parsing attributes in process `syz.2.152'.
[   80.791713][ T7078] netlink: 100 bytes leftover after parsing attributes in process `syz.2.152'.
[   81.393980][   T10] cfg80211: failed to load regulatory.db
[   82.430265][ T7113] netlink: 'syz.1.158': attribute type 58 has an invalid length.
[   82.433006][ T7113] netlink: 20 bytes leftover after parsing attributes in process `syz.1.158'.
[   82.513540][ T7126] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   83.383989][ T7142] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_cmd_wq": -EINTR
[   83.555525][ T7179] workqueue: Failed to create a rescuer kthread for wq "nfc7_nci_cmd_wq": -EINTR
[   83.686614][ T7209] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR
[   85.469484][ T7260] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR
[   85.478033][ T7249] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   85.486153][ T7255] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   85.496281][ T7254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.175'.
[   85.546479][ T7275] netlink: 'syz.1.178': attribute type 9 has an invalid length.
[   86.652201][ T7324] syzkaller0: entered promiscuous mode
[   86.654206][ T7324] syzkaller0: entered allmulticast mode
[   87.613011][ T7348] netlink: 508 bytes leftover after parsing attributes in process `syz.1.188'.
[   87.978717][ T7349] netlink: 32 bytes leftover after parsing attributes in process `syz.0.185'.
[   88.980695][ T7386] 8021q: adding VLAN 0 to HW filter on device bond1
[   88.985988][ T7389] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.194'.
[   88.994836][ T7386] macvlan2: entered promiscuous mode
[   88.997051][ T7386] macvlan2: entered allmulticast mode
[   89.001266][ T7386] veth0: entered promiscuous mode
[   89.003545][ T7386] veth0: entered allmulticast mode
[   89.009422][ T7386] bond1: (slave macvlan2): making interface the new active one
[   89.014579][ T7386] bond1: (slave macvlan2): Enslaving as an active interface with an up link
[   90.985127][ T7472] netlink: 24 bytes leftover after parsing attributes in process `syz.1.201'.
[   91.313699][ T7523] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_tx_wq": -EINTR
[   92.126584][ T7538] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   93.029158][ T7581] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[   93.036090][ T7580] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[   93.087818][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'.
[   93.094058][ T7598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.217'.
[   93.100524][ T7598] netlink: 'syz.0.217': attribute type 18 has an invalid length.
[   94.960375][ T7663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.227'.
[   94.964938][ T7663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.227'.
[   95.780182][ T7661] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   95.855873][ T7692] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[   97.712414][ T7754] netlink: 'syz.1.239': attribute type 1 has an invalid length.
[   97.769904][ T7754] 8021q: adding VLAN 0 to HW filter on device bond1
[   98.647598][ T5873] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  100.490333][ T7859] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  100.493599][ T7858] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  100.549878][ T7873] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  100.553109][ T7869] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  100.615417][ T7893] netlink: 16 bytes leftover after parsing attributes in process `syz.0.255'.
[  100.621958][ T7893] netlink: 16 bytes leftover after parsing attributes in process `syz.0.255'.
[  100.732267][ T7893] 8021q: VLANs not supported on syzkaller1
[  101.667888][ T7939] xt_l2tp: wrong L2TP version: 1
[  101.732021][ T7921] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  102.004729][ T7988] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  102.014651][ T7986] 8021q: VLANs not supported on wg1
[  102.044722][ T8000] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  102.894893][ T8032] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  102.967585][ T8034] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  103.082811][ T8065] netlink: 36 bytes leftover after parsing attributes in process `syz.1.275'.
[  103.807060][ T8077] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  103.860981][ T8091] netlink: 'syz.2.280': attribute type 10 has an invalid length.
[  103.887164][ T8091] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  103.942793][ T8091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.280'.
[  104.171525][ T8138] netlink: 16 bytes leftover after parsing attributes in process `syz.2.286'.
[  104.974882][ T8155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.290'.
[  106.035504][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  106.086683][ T8222] netlink: 766 bytes leftover after parsing attributes in process `syz.1.299'.
[  109.605029][ T8334] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_tx_wq": -EINTR
[  110.596320][ T5873] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  111.439929][ T8399] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.674050][ T8442] 8021q: VLANs not supported on ip_vti0
[  111.706162][ T8442] dvmrp8: entered allmulticast mode
[  111.801195][ T8445] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  111.805501][ T8454] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  111.980649][ T8497] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_cmd_wq": -EINTR
[  111.988580][ T8485] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_cmd_wq": -EINTR
[  112.154957][ T8528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.339'.
[  112.161259][ T8528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.339'.
[  113.000068][ T8540] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  113.005044][ T8541] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  113.019923][ T8548] netlink: 104 bytes leftover after parsing attributes in process `syz.2.343'.
[  113.123410][ T8557] netlink: 104 bytes leftover after parsing attributes in process `syz.1.344'.
[  113.140745][ T8557] policy can only be matched on NF_INET_PRE_ROUTING
[  113.140757][ T8557] unable to load match
[  114.200924][ T8616] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  115.102631][ T8649] netlink: 32 bytes leftover after parsing attributes in process `syz.0.354'.
[  115.121615][ T8649] 8021q: VLANs not supported on ipvlan1
[  115.892326][ T8666] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  118.910409][   T56] Bluetooth: hci1: command tx timeout
[  118.962454][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  119.829487][ T8844] 8021q: adding VLAN 0 to HW filter on device bond1
[  119.846927][ T8844] bond_slave_0: entered promiscuous mode
[  119.849061][ T8844] bond_slave_1: entered promiscuous mode
[  119.850939][ T8844] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  119.862315][ T8844] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  119.869357][ T8844] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[  119.941210][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  120.032179][ T8866] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR
[  121.296720][ T8933] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  121.625388][ T8961] netlink: 16 bytes leftover after parsing attributes in process `syz.2.396'.
[  121.663426][ T8966] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR
[  121.700621][ T8961] syzkaller1: entered promiscuous mode
[  121.707121][ T8961] syzkaller1: entered allmulticast mode
[  122.623012][ T9004] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  123.684166][ T9078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.412'.
[  123.714921][ T9082] netlink: 'syz.2.413': attribute type 6 has an invalid length.
[  123.829568][ T9094] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  123.832684][ T9098] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  123.889181][ T9102] netlink: 56 bytes leftover after parsing attributes in process `syz.2.417'.
[  124.758671][ T9132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.421'.
[  125.657034][ T9171] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  125.806811][ T9189] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  126.689340][ T9209] netlink: 32 bytes leftover after parsing attributes in process `syz.0.431'.
[  126.693589][ T9209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.431'.
[  127.113498][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.437'.
[  127.116476][ T9260] netlink: 16 bytes leftover after parsing attributes in process `syz.0.437'.
[  127.119452][ T9260] netlink: 540 bytes leftover after parsing attributes in process `syz.0.437'.
[  127.841854][ T9278] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  127.898911][ T5873] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  127.997059][ T9294] trusted_key: syz.0.442 sent an empty control message without MSG_MORE.
[  129.572499][ T9333] Driver unsupported XDP return value 0 on prog  (id 84) dev N/A, expect packet loss!
[  129.597737][ T9336] netlink: 'syz.2.447': attribute type 83 has an invalid length.
[  130.519726][ T9372] syzkaller0: entered promiscuous mode
[  130.521571][ T9372] syzkaller0: entered allmulticast mode
[  132.408340][ T9439] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  132.458368][ T9444] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  132.589654][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.591696][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  133.334356][ T9499] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR
[  134.301953][ T9526] netlink: 32 bytes leftover after parsing attributes in process `syz.1.477'.
[  134.381407][ T5873] nci: nci_rsp_packet: unknown rsp opcode 0xc3d
[  134.384534][ T5873] nci: nci_rsp_packet: unknown rsp opcode 0x20e
[  134.387109][ T5873] nci: nci_rx_work: unknown MT 0x1
[  135.178076][ T9551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.481'.
[  135.234217][ T5876] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  135.248362][ T9568] netlink: 16 bytes leftover after parsing attributes in process `syz.0.482'.
[  136.228493][ T9601] netlink: 44 bytes leftover after parsing attributes in process `syz.1.490'.
[  138.297379][ T9702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.502'.
[  138.451459][ T9722] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  138.529212][ T9740] 8021q: VLANs not supported on lo
[  140.132088][ T9769] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  140.246787][ T9778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.514'.
[  140.301306][ T9798] netlink: 20 bytes leftover after parsing attributes in process `syz.2.515'.
[  140.318556][ T9797] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  140.501383][ T9828] netlink: 'syz.2.517': attribute type 11 has an invalid length.
[  141.519974][ T9876] netlink: 76 bytes leftover after parsing attributes in process `syz.1.523'.
[  142.433068][ T9910] vlan0: entered promiscuous mode
[  143.312692][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  143.318458][ T9942] netlink: 20896 bytes leftover after parsing attributes in process `syz.2.530'.
[  144.270303][ T9962] workqueue: Failed to create a rescuer kthread for wq "nfc8_nci_cmd_wq": -EINTR
[  144.368347][ T9991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.536'.
[  144.381271][ T9991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.536'.
[  144.388856][ T9990] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  144.490306][T10013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.538'.
[  144.590331][T10013] bridge_slave_1: left allmulticast mode
[  144.592329][T10013] bridge_slave_1: left promiscuous mode
[  144.595063][T10013] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.600767][T10013] bridge_slave_0: left allmulticast mode
[  144.602901][T10013] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.636845][T10000] tipc: Can't bind to reserved service type 0
[  144.793974][T10034] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  144.815456][T10040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.544'.
[  145.441396][T10066] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  145.465896][T10074] netlink: 156 bytes leftover after parsing attributes in process `syz.0.549'.
[  145.582934][T10085] IPv6: Can't replace route, no match found
[  146.503886][T10113] netlink: 16 bytes leftover after parsing attributes in process `syz.2.555'.
[  147.462561][T10140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.559'.
[  148.622448][T10202] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  148.752222][T10235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.569'.
[  148.752440][T10228] netlink: 'syz.0.570': attribute type 11 has an invalid length.
[  148.756053][T10235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.569'.
[  148.820277][T10244] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR
[  149.157518][T10278] netlink: 24 bytes leftover after parsing attributes in process `syz.2.578'.
[  149.199212][T10295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.580'.
[  149.202119][T10295] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  149.218044][T10295] batman_adv: batadv0: Removing interface: batadv_slave_1
[  149.241443][T10286] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  150.079763][T10324] workqueue: Failed to create a rescuer kthread for wq "nfc7_nci_rx_wq": -EINTR
[  150.100859][T10320] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  150.107165][T10327] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  150.222910][T10348] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  151.214685][T10391] netlink: 'syz.1.593': attribute type 4 has an invalid length.
[  151.271157][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  154.072379][T10512] sctp: [Deprecated]: syz.1.606 (pid 10512) Use of int in max_burst socket option deprecated.
[  154.072379][T10512] Use struct sctp_assoc_value instead
[  154.251633][T10528] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  154.279671][T10538] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  155.305745][T10587] netlink: 16 bytes leftover after parsing attributes in process `syz.2.618'.
[  155.383267][T10587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.618'.
[  157.117029][T10653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.627'.
[  157.132191][T10647] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  157.197603][T10664] netlink: 224 bytes leftover after parsing attributes in process `syz.1.628'.
[  157.209380][T10643] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_cmd_wq": -EINTR
[  157.213308][T10645] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  157.387454][   T56] Bluetooth: hci2: command tx timeout
[  158.440160][T10754] netlink: 72 bytes leftover after parsing attributes in process `syz.2.640'.
[  158.443748][T10762] netlink: 72 bytes leftover after parsing attributes in process `syz.2.640'.
[  158.451671][T10759] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_cmd_wq": -EINTR
[  158.499661][T10775] workqueue: Failed to create a rescuer kthread for wq "nfc8_nci_cmd_wq": -EINTR
[  158.655697][T10795] tipc: Started in network mode
[  158.671043][T10795] tipc: Node identity f665d0ecfbb6, cluster identity 4711
[  158.680686][T10795] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  158.714280][T10795] tipc: Disabling bearer <eth:syzkaller0>
[  158.716760][T10812] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  158.764613][T10818] netlink: 16 bytes leftover after parsing attributes in process `syz.0.648'.
[  158.912870][T10837] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  158.913301][T10823] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  158.940488][T10845] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[  159.009330][T10856] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  159.053015][T10871] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  159.064235][T10870] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  159.079800][T10863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.655'.
[  159.079811][T10875] netlink: 16 bytes leftover after parsing attributes in process `syz.2.655'.
[  159.144315][T10863] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  159.259282][T10877] netlink: 32 bytes leftover after parsing attributes in process `syz.0.658'.
[  160.060890][T10929] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe
[  160.992257][T10970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.669'.
[  161.855334][T10995] netlink: 'syz.1.672': attribute type 10 has an invalid length.
[  161.859101][T10995] veth1_macvtap: entered promiscuous mode
[  161.861648][T10995] bridge0: port 3(macsec0) entered blocking state
[  161.863951][T10995] bridge0: port 3(macsec0) entered disabled state
[  161.868191][T10995] macsec0: entered allmulticast mode
[  161.870374][T10995] veth1_macvtap: entered allmulticast mode
[  161.873152][T10995] macsec0: entered promiscuous mode
[  161.876715][   T27] bridge0: port 3(macsec0) entered blocking state
[  161.879073][   T27] bridge0: port 3(macsec0) entered forwarding state
[  162.725825][T11009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.674'.
[  162.752364][T11020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.674'.
[  163.971597][T11081] tipc: Started in network mode
[  163.973267][T11081] tipc: Node identity 5626dd63cc63, cluster identity 4711
[  163.976705][T11081] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  163.997123][T11081] syzkaller0: entered promiscuous mode
[  163.999909][T11081] syzkaller0: entered allmulticast mode
[  164.016985][T11081] tipc: Resetting bearer <eth:syzkaller0>
[  164.041211][T11079] tipc: Resetting bearer <eth:syzkaller0>
[  164.049334][T11079] tipc: Disabling bearer <eth:syzkaller0>
[  164.302924][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.306998][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.309475][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.311988][T11131] netlink: 'syz.2.690': attribute type 3 has an invalid length.
[  164.314875][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.316672][T11131] netlink: 224 bytes leftover after parsing attributes in process `syz.2.690'.
[  164.319990][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.323457][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.326093][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.329008][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.331222][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.333361][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.335552][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.338993][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.341209][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.343447][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.345980][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.348250][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.351087][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.353182][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.355499][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.357737][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.359998][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.362141][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.364267][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.366790][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.369439][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.371753][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.373875][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.376090][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.378320][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.381356][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.383455][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.385946][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.388849][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.391484][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.394120][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.397146][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.401861][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.404539][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.408726][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.411594][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.417926][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.421960][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.424191][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.430898][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.436362][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.439806][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.442665][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.444706][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.446774][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.449780][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.451846][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.453965][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.455951][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.459273][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.461274][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.463284][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.465408][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.467926][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.469955][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.471963][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.473961][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.476056][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.479319][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.481314][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  164.483513][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  166.281864][T11196] netlink: 60 bytes leftover after parsing attributes in process `syz.2.699'.
[  167.172977][T11221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.702'.
[  167.327434][T11221] nbd0: detected capacity change from 0 to 63
[  167.332161][T11230] block nbd0: NBD_DISCONNECT
[  167.334930][T11230] block nbd0: Disconnected due to user request.
[  167.339917][T11230] block nbd0: shutting down sockets
[  167.355862][    C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  167.358922][    C0] Buffer I/O error on dev nbd0, logical block 0, async page read
[  167.361390][    C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  167.364280][    C0] Buffer I/O error on dev nbd0, logical block 1, async page read
[  167.366792][    C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  167.369744][    C0] Buffer I/O error on dev nbd0, logical block 2, async page read
[  167.372166][    C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  167.375308][    C0] Buffer I/O error on dev nbd0, logical block 3, async page read
[  167.378146][ T5963] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  167.381113][ T5963] Buffer I/O error on dev nbd0, logical block 0, async page read
[  167.383738][ T5963] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  167.386712][ T5963] Buffer I/O error on dev nbd0, logical block 1, async page read
[  167.389570][ T5963] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  167.391398][T11221] bond2: entered promiscuous mode
[  167.392613][ T5963] Buffer I/O error on dev nbd0, logical block 2, async page read
[  167.394901][T11221] bond2: entered allmulticast mode
[  167.398127][ T5963] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  167.402332][T11221] 8021q: adding VLAN 0 to HW filter on device bond2
[  167.402738][ T5963] Buffer I/O error on dev nbd0, logical block 3, async page read
[  167.408675][ T5963] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  167.411688][ T5963] Buffer I/O error on dev nbd0, logical block 0, async page read
[  167.414744][ T5963] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  167.426330][ T5963] Buffer I/O error on dev nbd0, logical block 1, async page read
[  167.434298][ T5963] ldm_validate_partition_table(): Disk read failed.
[  167.438736][ T5963] Dev nbd0: unable to read RDB block 0
[  167.442726][ T5963]  nbd0: unable to read partition table
[  167.451671][ T5963] ldm_validate_partition_table(): Disk read failed.
[  167.456277][ T5963] Dev nbd0: unable to read RDB block 0
[  167.461210][ T5963]  nbd0: unable to read partition table
[  180.749317][ T5238] Bluetooth: hci1: command 0x0406 tx timeout
[  180.785943][T11235] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  181.710520][T11277] netlink: 12 bytes leftover after parsing attributes in process `syz.2.712'.
[  181.802023][T11277] syzkaller1: entered promiscuous mode
[  181.805113][T11277] syzkaller1: entered allmulticast mode
[  182.098466][T11323] netlink: 88 bytes leftover after parsing attributes in process `syz.0.719'.
[  182.156600][T11323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.719'.
[  183.082598][T11361] netlink: 28 bytes leftover after parsing attributes in process `syz.2.721'.
[  183.087446][T11361] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.090583][T11361] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.236348][T11365] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  185.075555][T11408] netlink: 48 bytes leftover after parsing attributes in process `syz.2.730'.
[  185.145623][T11411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.731'.
[  185.156212][   T10] IPVS: starting estimator thread 0...
[  185.215249][T11411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.731'.
[  185.267900][T11417] IPVS: using max 78 ests per chain, 187200 per kthread
[  186.153332][T11462] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR
[  186.226175][T11474] netlink: 48 bytes leftover after parsing attributes in process `syz.0.738'.
[  188.096728][T11543] netlink: 48 bytes leftover after parsing attributes in process `syz.1.747'.
[  188.159990][T11552] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  189.015052][T11565] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[  189.074530][T11591] netlink: 16 bytes leftover after parsing attributes in process `syz.0.751'.
[  190.088393][T11621] netlink: 24 bytes leftover after parsing attributes in process `syz.2.758'.
[  190.093325][T11621] netlink: 16 bytes leftover after parsing attributes in process `syz.2.758'.
[  190.758771][T11596] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  190.763747][T11597] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  190.822132][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.759'.
[  190.824535][T11634] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  191.693736][T11669] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  192.178609][T11728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.773'.
[  192.187929][T11728] tipc: Started in network mode
[  192.189803][T11728] tipc: Node identity 4ecb14abdb86, cluster identity 4711
[  192.193602][T11728] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  192.196535][T11728] syzkaller0: entered promiscuous mode
[  192.199038][T11728] syzkaller0: entered allmulticast mode
[  192.205864][T11728] tipc: Resetting bearer <eth:syzkaller0>
[  192.719235][T11755] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  192.948372][T11727] tipc: Resetting bearer <eth:syzkaller0>
[  192.960870][T11727] tipc: Disabling bearer <eth:syzkaller0>
[  193.065735][T11763] netlink: 48 bytes leftover after parsing attributes in process `syz.0.779'.
[  193.996311][T11788] netlink: 'syz.0.781': attribute type 2 has an invalid length.
[  193.999691][T11788] netlink: 244 bytes leftover after parsing attributes in process `syz.0.781'.
[  194.033904][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  194.198621][T11824] netlink: 16 bytes leftover after parsing attributes in process `syz.1.786'.
[  195.021888][T11847] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[  195.022077][T11837] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  195.989875][T11865] workqueue: Failed to create a rescuer kthread for wq "nfc9_nci_tx_wq": -EINTR
[  197.002745][T11940] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  197.318974][T11990] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  197.329745][T11990] syzkaller0: entered promiscuous mode
[  197.332286][T11990] syzkaller0: entered allmulticast mode
[  197.344265][T11996] tipc: Resetting bearer <eth:syzkaller0>
[  197.351668][T12002] netlink: 16 bytes leftover after parsing attributes in process `syz.1.809'.
[  197.389914][T11990] tipc: Resetting bearer <eth:syzkaller0>
[  197.416582][T11990] tipc: Disabling bearer <eth:syzkaller0>
[  198.382929][T12146] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  198.526758][T12167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.819'.
[  198.540241][T12179] Bluetooth: MGMT ver 1.23
[  198.541996][T12179] Bluetooth: hci1: too big key_count value 32778
[  199.446627][T12208] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  199.447045][T12214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.826'.
[  201.175109][T12277] netlink: 'syz.0.832': attribute type 2 has an invalid length.
[  201.244262][T12277] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  201.348814][T12293] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  201.365324][T12306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.837'.
[  201.432528][T12310] netlink: 36 bytes leftover after parsing attributes in process `syz.2.838'.
[  201.490436][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  202.321496][T12340] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  202.395512][T12350] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR
[  202.600584][T12370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.844'.
[  203.361290][T12411] ieee802154 phy1 wpan1: encryption failed: -22
[  204.128558][T12425] netlink: 24 bytes leftover after parsing attributes in process `syz.2.852'.
[  204.131504][T12425] netlink: 24 bytes leftover after parsing attributes in process `syz.2.852'.
[  204.266624][T12444] IPVS: set_ctl: invalid protocol: 47 10.1.1.1:20004
[  204.980316][T12446] netlink: 'syz.0.855': attribute type 7 has an invalid length.
[  204.982930][T12446] netlink: 224 bytes leftover after parsing attributes in process `syz.0.855'.
[  205.006164][T12449] netlink: 32 bytes leftover after parsing attributes in process `syz.2.854'.
[  205.036413][T12466] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_tx_wq": -EINTR
[  205.206499][ T5876] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  206.074101][ T5876] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  206.906213][T12541] netlink: 28 bytes leftover after parsing attributes in process `syz.2.868'.
[  206.966383][T12536] netlink: 20 bytes leftover after parsing attributes in process `syz.0.866'.
[  206.970734][T12536] netlink: 20 bytes leftover after parsing attributes in process `syz.0.866'.
[  207.125529][T12562] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  207.732741][T12541] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  207.740109][T12536] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  207.820068][T12572] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  207.915640][T12599] bond0: (slave bond_slave_0): Releasing backup interface
[  207.936894][T12599] bond0: (slave bond_slave_1): Releasing backup interface
[  207.956854][T12599] team0: Port device team_slave_0 removed
[  207.963852][T12599] team0: Port device team_slave_1 removed
[  207.966706][T12599] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  207.969896][T12599] batman_adv: batadv0: Removing interface: batadv_slave_0
[  207.973890][T12599] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  207.979993][T12599] batman_adv: batadv0: Removing interface: batadv_slave_1
[  207.989535][T12599] bond1: (slave macvlan2): Releasing backup interface
[  207.992952][T12599] veth0: left allmulticast mode
[  207.994866][T12599] veth0: left promiscuous mode
[  208.785065][T12634] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  209.825027][T12686] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  209.918372][T12703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.887'.
[  209.944426][   T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  210.892031][ T5873] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  211.712847][T12783] IPVS: set_ctl: invalid protocol: 896 0.32.0.0:7168
[  211.943526][T12815] syzkaller0: entered promiscuous mode
[  211.945798][T12815] syzkaller0: entered allmulticast mode
[  211.954816][T12823] netlink: 2 bytes leftover after parsing attributes in process `syz.1.900'.
[  213.541036][T12839] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  214.555339][T12892] netlink: 24 bytes leftover after parsing attributes in process `syz.2.912'.
[  215.562906][T12944] netlink: 176 bytes leftover after parsing attributes in process `syz.2.919'.
[  216.372268][T12951] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  216.415251][T12962] netlink: 22 bytes leftover after parsing attributes in process `syz.2.923'.
[  216.457432][T12970] netlink: 32 bytes leftover after parsing attributes in process `syz.1.925'.
[  216.466323][T12971] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  216.579654][T12984] netlink: 20 bytes leftover after parsing attributes in process `syz.2.928'.
[  216.731008][T13008] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR
[  217.469833][ T5238] Bluetooth: hci2: command 0x0405 tx timeout
[  217.847664][T13053] syzkaller0: entered promiscuous mode
[  217.850585][T13053] syzkaller0: entered allmulticast mode
[  218.309473][T13025] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  218.371313][T13055] netlink: 'syz.1.936': attribute type 2 has an invalid length.
[  218.430373][T13060] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  218.738147][T13106] netlink: 'syz.1.944': attribute type 3 has an invalid length.
[  219.669735][T13139] wg1 speed is unknown, defaulting to 1000
[  219.671967][T13139] wg1 speed is unknown, defaulting to 1000
[  219.679744][T13139] wg1 speed is unknown, defaulting to 1000
[  219.684208][T13139] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  219.701268][T13139] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  219.714755][T13145] wg1 speed is unknown, defaulting to 1000
[  219.745617][T13139] wg1 speed is unknown, defaulting to 1000
[  219.776064][T13139] wg1 speed is unknown, defaulting to 1000
[  219.799290][T13139] wg1 speed is unknown, defaulting to 1000
[  222.101296][T13280] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  223.879218][ T5864] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xcc
[  224.630372][T13352] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  224.916173][ T5873] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  226.096749][T13482] netlink: 'syz.1.989': attribute type 8 has an invalid length.
[  228.548649][T13550] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  228.589269][T13564] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  229.435340][T13579] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  230.437161][T13618] syzkaller0: entered promiscuous mode
[  230.439259][T13618] syzkaller0: entered allmulticast mode
[  230.442653][ T5864] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  231.260854][T13635] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1010'.
[  231.294621][T13639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1011'.
[  232.199237][ T5873] nci: nci_ntf_packet: unsupported ntf opcode 0xf3d
[  233.046652][T13692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1019'.
[  233.150031][ T5864] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  233.174868][   T10] wg1 speed is unknown, defaulting to 1000
[  233.181282][T13703] syz.0.1020: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  233.187013][T13703] CPU: 1 UID: 0 PID: 13703 Comm: syz.0.1020 Not tainted syzkaller #0 PREEMPT(full) 
[  233.187033][T13703] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  233.187042][T13703] Call Trace:
[  233.187050][T13703]  <TASK>
[  233.187056][T13703]  dump_stack_lvl+0x189/0x250
[  233.187080][T13703]  ? __pfx_dump_stack_lvl+0x10/0x10
[  233.187097][T13703]  ? __pfx__printk+0x10/0x10
[  233.187116][T13703]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  233.187130][T13703]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  233.187146][T13703]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  233.187161][T13703]  warn_alloc+0x214/0x310
[  233.187201][T13703]  ? stack_depot_save_flags+0x40/0x860
[  233.187222][T13703]  ? __pfx_warn_alloc+0x10/0x10
[  233.187236][T13703]  ? kasan_save_track+0x4f/0x80
[  233.187247][T13703]  ? xskq_create+0x56/0x170
[  233.187254][T13703]  ? xsk_init_queue+0xb0/0x110
[  233.187260][T13703]  ? xsk_setsockopt+0x4dc/0x8d0
[  233.187271][T13703]  ? do_sock_setsockopt+0x17c/0x1b0
[  233.187281][T13703]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  233.187289][T13703]  ? do_syscall_64+0xfa/0x3b0
[  233.187298][T13703]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.187309][T13703]  __vmalloc_node_range_noprof+0x125/0x12f0
[  233.187332][T13703]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  233.187345][T13703]  ? __kasan_kmalloc+0x93/0xb0
[  233.187356][T13703]  vmalloc_user_noprof+0xad/0xf0
[  233.187367][T13703]  ? xskq_create+0xbf/0x170
[  233.187374][T13703]  xskq_create+0xbf/0x170
[  233.187383][T13703]  xsk_init_queue+0xb0/0x110
[  233.187391][T13703]  xsk_setsockopt+0x4dc/0x8d0
[  233.187403][T13703]  ? __pfx_xsk_setsockopt+0x10/0x10
[  233.187414][T13703]  ? __pfx_aa_sk_perm+0x10/0x10
[  233.187433][T13703]  ? aa_sock_opt_perm+0xff/0x1b0
[  233.187446][T13703]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  233.187458][T13703]  ? __pfx_xsk_setsockopt+0x10/0x10
[  233.187511][T13703]  do_sock_setsockopt+0x17c/0x1b0
[  233.187529][T13703]  __x64_sys_setsockopt+0x13f/0x1b0
[  233.187548][T13703]  do_syscall_64+0xfa/0x3b0
[  233.187561][T13703]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.187574][T13703]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.187584][T13703]  ? exc_page_fault+0x9f/0xf0
[  233.187592][T13703]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.187599][T13703] RIP: 0033:0x7feb81b8ec29
[  233.187607][T13703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  233.187614][T13703] RSP: 002b:00007feb7fdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  233.187623][T13703] RAX: ffffffffffffffda RBX: 00007feb81dd5fa0 RCX: 00007feb81b8ec29
[  233.187628][T13703] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009
[  233.187632][T13703] RBP: 00007feb81c11e41 R08: 0000000000000004 R09: 0000000000000000
[  233.187636][T13703] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  233.187641][T13703] R13: 00007feb81dd6038 R14: 00007feb81dd5fa0 R15: 00007ffc8b9b2e58
[  233.187652][T13703]  </TASK>
[  233.234089][T13713] netlink: 'syz.0.1020': attribute type 4 has an invalid length.
[  233.298101][T13703] Mem-Info:
[  233.319325][T13703] active_anon:5685 inactive_anon:0 isolated_anon:0
[  233.319325][T13703]  active_file:1431 inactive_file:38304 isolated_file:0
[  233.319325][T13703]  unevictable:1768 dirty:99 writeback:0
[  233.319325][T13703]  slab_reclaimable:9704 slab_unreclaimable:52467
[  233.319325][T13703]  mapped:18236 shmem:2446 pagetables:1013
[  233.319325][T13703]  sec_pagetables:0 bounce:0
[  233.319325][T13703]  kernel_misc_reclaimable:0
[  233.319325][T13703]  free:303545 free_pcp:16127 free_cma:0
[  233.334502][T13703] Node 0 active_anon:12188kB inactive_anon:0kB active_file:2756kB inactive_file:17944kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:34504kB dirty:44kB writeback:0kB shmem:4728kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5528kB pagetables:2308kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  233.346731][T13703] Node 1 active_anon:10620kB inactive_anon:0kB active_file:2968kB inactive_file:135272kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38440kB dirty:352kB writeback:0kB shmem:5056kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6468kB pagetables:1744kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  233.357741][T13703] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  233.362587][T13714] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1021'.
[  233.369281][T13703] lowmem_reserve[]: 0 811 811 811 811
[  233.373490][T13703] Node 0 DMA32 free:405248kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12188kB inactive_anon:0kB active_file:2756kB inactive_file:17944kB unevictable:3536kB writepending:44kB present:1556484kB managed:830892kB mlocked:0kB bounce:0kB free_pcp:32576kB local_pcp:18564kB free_cma:0kB
[  233.385024][T13703] lowmem_reserve[]: 0 0 0 0 0
[  233.386667][T13703] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  233.396812][T13703] lowmem_reserve[]: 0 0 854 854 854
[  233.399125][T13703] Node 1 Normal free:334668kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10620kB inactive_anon:0kB active_file:2968kB inactive_file:135272kB unevictable:3536kB writepending:352kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:31880kB local_pcp:21040kB free_cma:0kB
[  233.410202][T13703] lowmem_reserve[]: 0 0 0 0 0
[  233.411883][T13703] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  233.416687][T13703] Node 0 DMA32: 630*4kB (UME) 773*8kB (UM) 295*16kB (UME) 281*32kB (UME) 175*64kB (UME) 103*128kB (UME) 58*256kB (UME) 43*512kB (UME) 36*1024kB (U) 15*2048kB (UME) 62*4096kB (UM) = 405200kB
[  233.423455][T13703] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  233.429198][T13703] Node 1 Normal: 277*4kB (M) 213*8kB (UME) 457*16kB (UM) 236*32kB (UME) 99*64kB (UME) 47*128kB (UME) 16*256kB (UM) 1*512kB (U) 9*1024kB (UME) 4*2048kB (UM) 69*4096kB (M) = 334668kB
[  233.435556][T13703] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  233.438961][T13703] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  233.442157][T13703] 42181 total pagecache pages
[  233.443776][T13703] 0 pages in swap cache
[  233.445245][T13703] Free swap  = 124996kB
[  233.446848][T13703] Total swap = 124996kB
[  233.448943][T13703] 786301 pages RAM
[  233.450315][T13703] 0 pages HighMem/MovableOnly
[  233.457877][T13703] 241346 pages reserved
[  233.459373][T13703] 0 pages cma reserved
[  233.854975][T13704] delete_channel: no stack
[  235.919038][T13813] syzkaller0: entered promiscuous mode
[  235.920974][T13813] syzkaller0: entered allmulticast mode
[  236.826016][T13828] wg1 speed is unknown, defaulting to 1000
[  238.238578][T13893] netlink: 'syz.2.1042': attribute type 1 has an invalid length.
[  238.241273][T13893] netlink: 'syz.2.1042': attribute type 3 has an invalid length.
[  238.244295][T13893] netlink: 564 bytes leftover after parsing attributes in process `syz.2.1042'.
[  239.080084][T13954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1045'.
[  239.128752][T13951] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  239.134925][T13954] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  239.138818][T13954] syzkaller0: entered promiscuous mode
[  239.144985][T13954] syzkaller0: entered allmulticast mode
[  239.160580][T13954] tipc: Resetting bearer <eth:syzkaller0>
[  239.217819][T13962] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  239.575934][T14005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1049'.
[  239.978322][T13953] tipc: Resetting bearer <eth:syzkaller0>
[  239.989325][T13953] tipc: Disabling bearer <eth:syzkaller0>
[  240.102953][T14096] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  240.164307][T14109] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1055'.
[  240.668495][T13763] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0
[  241.247919][T14161] Bluetooth: MGMT ver 1.23
[  241.327089][T14166] workqueue: Failed to create a rescuer kthread for wq "nfc15_nci_cmd_wq": -EINTR
[  242.179409][T14220] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  242.182586][T14225] ==================================================================
[  242.188168][T14225] BUG: KASAN: slab-use-after-free in __xfrm_state_insert+0x8af/0x1450
[  242.190831][T14225] Read of size 1 at addr ffff888120695530 by task syz.0.1064/14225
[  242.194047][T14225] 
[  242.194867][T14225] CPU: 1 UID: 0 PID: 14225 Comm: syz.0.1064 Not tainted syzkaller #0 PREEMPT(full) 
[  242.194877][T14225] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  242.194882][T14225] Call Trace:
[  242.194886][T14225]  <TASK>
[  242.194889][T14225]  dump_stack_lvl+0x189/0x250
[  242.194901][T14225]  ? __kasan_check_byte+0x12/0x40
[  242.194914][T14225]  ? __pfx_dump_stack_lvl+0x10/0x10
[  242.194922][T14225]  ? lock_release+0x4b/0x3e0
[  242.194934][T14225]  ? __virt_addr_valid+0x4a5/0x5c0
[  242.194947][T14225]  print_report+0xca/0x240
[  242.194956][T14225]  ? __xfrm_state_insert+0x8af/0x1450
[  242.194967][T14225]  kasan_report+0x118/0x150
[  242.194978][T14225]  ? __xfrm_state_insert+0x8af/0x1450
[  242.194988][T14225]  __xfrm_state_insert+0x8af/0x1450
[  242.194998][T14225]  ? xfrm_state_insert+0x44/0x60
[  242.195007][T14225]  xfrm_state_insert+0x54/0x60
[  242.195016][T14225]  ipcomp6_init_state+0x655/0x900
[  242.195026][T14225]  __xfrm_init_state+0xa76/0x13f0
[  242.195036][T14225]  ? __xfrm_init_state+0x7ef/0x13f0
[  242.195047][T14225]  xfrm_init_state+0x18/0xa0
[  242.195055][T14225]  pfkey_add+0x1d38/0x2e00
[  242.195066][T14225]  ? __pfx_pfkey_add+0x10/0x10
[  242.195074][T14225]  ? kmem_cache_free+0x18f/0x400
[  242.195086][T14225]  pfkey_sendmsg+0xbfe/0x1090
[  242.195096][T14225]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  242.195108][T14225]  ? aa_sock_msg_perm+0xf1/0x1d0
[  242.195117][T14225]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  242.195125][T14225]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  242.195132][T14225]  __sock_sendmsg+0x21c/0x270
[  242.195144][T14225]  ____sys_sendmsg+0x52d/0x830
[  242.195154][T14225]  ? __pfx_____sys_sendmsg+0x10/0x10
[  242.195165][T14225]  ? import_iovec+0x74/0xa0
[  242.195175][T14225]  ___sys_sendmsg+0x21f/0x2a0
[  242.195184][T14225]  ? __pfx____sys_sendmsg+0x10/0x10
[  242.195200][T14225]  ? __fget_files+0x2a/0x420
[  242.195207][T14225]  ? __fget_files+0x3a0/0x420
[  242.195214][T14225]  __sys_sendmmsg+0x227/0x430
[  242.195224][T14225]  ? __pfx___sys_sendmmsg+0x10/0x10
[  242.195232][T14225]  ? do_futex+0x395/0x420
[  242.195243][T14225]  ? fdget+0x184/0x1e0
[  242.195252][T14225]  ? rcu_is_watching+0x15/0xb0
[  242.195260][T14225]  __x64_sys_sendmmsg+0xa0/0xc0
[  242.195269][T14225]  do_syscall_64+0xfa/0x3b0
[  242.195277][T14225]  ? lockdep_hardirqs_on+0x9c/0x150
[  242.195284][T14225]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.195291][T14225]  ? exc_page_fault+0x9f/0xf0
[  242.195298][T14225]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.195305][T14225] RIP: 0033:0x7feb81b8ec29
[  242.195312][T14225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  242.195319][T14225] RSP: 002b:00007feb7fdd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  242.195327][T14225] RAX: ffffffffffffffda RBX: 00007feb81dd6090 RCX: 00007feb81b8ec29
[  242.195333][T14225] RDX: 000000000400008a RSI: 0000200000000180 RDI: 0000000000000006
[  242.195339][T14225] RBP: 00007feb81c11e41 R08: 0000000000000000 R09: 0000000000000000
[  242.195374][T14225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  242.195379][T14225] R13: 00007feb81dd6128 R14: 00007feb81dd6090 R15: 00007ffc8b9b2e58
[  242.195388][T14225]  </TASK>
[  242.195391][T14225] 
[  242.300634][T14225] Allocated by task 13601:
[  242.302097][T14225]  kasan_save_track+0x3e/0x80
[  242.303656][T14225]  __kasan_slab_alloc+0x6c/0x80
[  242.305256][T14225]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  242.307042][T14225]  xfrm_state_alloc+0x24/0x2f0
[  242.308658][T14225]  xfrm_add_sa+0x17d1/0x4070
[  242.310169][T14225]  xfrm_user_rcv_msg+0x7a3/0xab0
[  242.311792][T14225]  netlink_rcv_skb+0x208/0x470
[  242.313371][T14225]  xfrm_netlink_rcv+0x79/0x90
[  242.314917][T14225]  netlink_unicast+0x82f/0x9e0
[  242.316503][T14225]  netlink_sendmsg+0x805/0xb30
[  242.318030][T14225]  __sock_sendmsg+0x21c/0x270
[  242.319971][T14225]  ____sys_sendmsg+0x505/0x830
[  242.321560][T14225]  ___sys_sendmsg+0x21f/0x2a0
[  242.323099][T14225]  __x64_sys_sendmsg+0x19b/0x260
[  242.324735][T14225]  do_syscall_64+0xfa/0x3b0
[  242.326222][T14225]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.328264][T14225] 
[  242.329077][T14225] Freed by task 2207:
[  242.330390][T14225]  kasan_save_track+0x3e/0x80
[  242.331936][T14225]  kasan_save_free_info+0x46/0x50
[  242.333592][T14225]  __kasan_slab_free+0x5b/0x80
[  242.335162][T14225]  kmem_cache_free+0x18f/0x400
[  242.336744][T14225]  xfrm_state_gc_task+0x52d/0x6b0
[  242.338409][T14225]  process_scheduled_works+0xae1/0x17b0
[  242.340226][T14225]  worker_thread+0x8a0/0xda0
[  242.341766][T14225]  kthread+0x711/0x8a0
[  242.343114][T14225]  ret_from_fork+0x439/0x7d0
[  242.344643][T14225]  ret_from_fork_asm+0x1a/0x30
[  242.346212][T14225] 
[  242.347010][T14225] The buggy address belongs to the object at ffff888120695200
[  242.347010][T14225]  which belongs to the cache xfrm_state of size 928
[  242.352310][T14225] The buggy address is located 816 bytes inside of
[  242.352310][T14225]  freed 928-byte region [ffff888120695200, ffff8881206955a0)
[  242.357778][T14225] 
[  242.358773][T14225] The buggy address belongs to the physical page:
[  242.361536][T14225] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888120695b00 pfn:0x120694
[  242.365665][T14225] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  242.369026][T14225] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  242.372122][T14225] page_type: f5(slab)
[  242.373777][T14225] raw: 057ff00000000040 ffff88810546d3c0 dead000000000122 0000000000000000
[  242.377206][T14225] raw: ffff888120695b00 00000000800e0007 00000000f5000000 0000000000000000
[  242.380378][T14225] head: 057ff00000000040 ffff88810546d3c0 dead000000000122 0000000000000000
[  242.383404][T14225] head: ffff888120695b00 00000000800e0007 00000000f5000000 0000000000000000
[  242.386643][T14225] head: 057ff00000000002 ffffea000481a501 00000000ffffffff 00000000ffffffff
[  242.389505][T14225] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  242.392317][T14225] page dumped because: kasan: bad access detected
[  242.394408][T14225] page_owner tracks the page as allocated
[  242.396522][T14225] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6711, tgid 6708 (syz.1.106), ts 72051295362, free_ts 57290054458
[  242.403327][T14225]  post_alloc_hook+0x240/0x2a0
[  242.405125][T14225]  get_page_from_freelist+0x21e4/0x22c0
[  242.407091][T14225]  __alloc_frozen_pages_noprof+0x181/0x370
[  242.409106][T14225]  alloc_pages_mpol+0x232/0x4a0
[  242.410789][T14225]  allocate_slab+0x8a/0x370
[  242.412392][T14225]  ___slab_alloc+0xbeb/0x1420
[  242.413994][T14225]  kmem_cache_alloc_noprof+0x283/0x3c0
[  242.415915][T14225]  xfrm_state_alloc+0x24/0x2f0
[  242.417613][T14225]  xfrm_add_sa+0x17d1/0x4070
[  242.419229][T14225]  xfrm_user_rcv_msg+0x7a3/0xab0
[  242.420876][T14225]  netlink_rcv_skb+0x208/0x470
[  242.422540][T14225]  xfrm_netlink_rcv+0x79/0x90
[  242.424178][T14225]  netlink_unicast+0x82f/0x9e0
[  242.425844][T14225]  netlink_sendmsg+0x805/0xb30
[  242.427547][T14225]  __sock_sendmsg+0x21c/0x270
[  242.429151][T14225]  ____sys_sendmsg+0x505/0x830
[  242.430837][T14225] page last free pid 5846 tgid 5846 stack trace:
[  242.433013][T14225]  __free_frozen_pages+0xbc4/0xd30
[  242.434764][T14225]  __slab_free+0x303/0x3c0
[  242.436610][T14225]  qlist_free_all+0x97/0x140
[  242.438192][T14225]  kasan_quarantine_reduce+0x148/0x160
[  242.440021][T14225]  __kasan_slab_alloc+0x22/0x80
[  242.441626][T14225]  __kmalloc_cache_noprof+0x1be/0x3d0
[  242.443368][T14225]  tomoyo_init_log+0x183/0x1f70
[  242.445009][T14225]  tomoyo_supervisor+0x340/0x1480
[  242.446661][T14225]  tomoyo_path_number_perm+0x438/0x5a0
[  242.448491][T14225]  tomoyo_path_mkdir+0xa8/0xe0
[  242.450053][T14225]  security_path_mkdir+0x171/0x380
[  242.451872][T14225]  do_mkdirat+0x1bd/0x590
[  242.453336][T14225]  __x64_sys_mkdirat+0x87/0xa0
[  242.455051][T14225]  do_syscall_64+0xfa/0x3b0
[  242.456870][T14225]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.458960][T14225] 
[  242.459821][T14225] Memory state around the buggy address:
[  242.461728][T14225]  ffff888120695400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  242.464456][T14225]  ffff888120695480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  242.467108][T14225] >ffff888120695500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  242.469983][T14225]                                      ^
[  242.471948][T14225]  ffff888120695580: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  242.474610][T14225]  ffff888120695600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  242.477479][T14225] ==================================================================
[  242.480532][T14225] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  242.483259][T14225] CPU: 1 UID: 0 PID: 14225 Comm: syz.0.1064 Not tainted syzkaller #0 PREEMPT(full) 
[  242.486946][T14225] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  242.490769][T14225] Call Trace:
[  242.491901][T14225]  <TASK>
[  242.492898][T14225]  dump_stack_lvl+0x99/0x250
[  242.494460][T14225]  ? __asan_memcpy+0x40/0x70
[  242.496251][T14225]  ? __pfx_dump_stack_lvl+0x10/0x10
[  242.498035][T14225]  ? __pfx__printk+0x10/0x10
[  242.499661][T14225]  vpanic+0x281/0x750
[  242.501009][T14225]  ? __pfx_vpanic+0x10/0x10
[  242.502767][T14225]  ? irqentry_exit+0x74/0x90
[  242.504431][T14225]  panic+0xb9/0xc0
[  242.505947][T14225]  ? __pfx_panic+0x10/0x10
[  242.507559][T14225]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  242.509767][T14225]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  242.511972][T14225]  ? __xfrm_state_insert+0x8af/0x1450
[  242.513795][T14225]  check_panic_on_warn+0x89/0xb0
[  242.515561][T14225]  ? __xfrm_state_insert+0x8af/0x1450
[  242.517326][T14225]  end_report+0x78/0x160
[  242.518773][T14225]  kasan_report+0x129/0x150
[  242.520400][T14225]  ? __xfrm_state_insert+0x8af/0x1450
[  242.522231][T14225]  __xfrm_state_insert+0x8af/0x1450
[  242.524215][T14225]  ? xfrm_state_insert+0x44/0x60
[  242.526237][T14225]  xfrm_state_insert+0x54/0x60
[  242.527863][T14225]  ipcomp6_init_state+0x655/0x900
[  242.529743][T14225]  __xfrm_init_state+0xa76/0x13f0
[  242.531419][T14225]  ? __xfrm_init_state+0x7ef/0x13f0
[  242.533174][T14225]  xfrm_init_state+0x18/0xa0
[  242.534751][T14225]  pfkey_add+0x1d38/0x2e00
[  242.536283][T14225]  ? __pfx_pfkey_add+0x10/0x10
[  242.537886][T14225]  ? kmem_cache_free+0x18f/0x400
[  242.539570][T14225]  pfkey_sendmsg+0xbfe/0x1090
[  242.541132][T14225]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  242.542814][T14225]  ? aa_sock_msg_perm+0xf1/0x1d0
[  242.544586][T14225]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  242.546658][T14225]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  242.548393][T14225]  __sock_sendmsg+0x21c/0x270
[  242.550123][T14225]  ____sys_sendmsg+0x52d/0x830
[  242.551710][T14225]  ? __pfx_____sys_sendmsg+0x10/0x10
[  242.553458][T14225]  ? import_iovec+0x74/0xa0
[  242.554979][T14225]  ___sys_sendmsg+0x21f/0x2a0
[  242.556546][T14225]  ? __pfx____sys_sendmsg+0x10/0x10
[  242.558246][T14225]  ? __fget_files+0x2a/0x420
[  242.559817][T14225]  ? __fget_files+0x3a0/0x420
[  242.561390][T14225]  __sys_sendmmsg+0x227/0x430
[  242.562900][T14225]  ? __pfx___sys_sendmmsg+0x10/0x10
[  242.564749][T14225]  ? do_futex+0x395/0x420
[  242.566540][T14225]  ? fdget+0x184/0x1e0
[  242.567888][T14225]  ? rcu_is_watching+0x15/0xb0
[  242.569547][T14225]  __x64_sys_sendmmsg+0xa0/0xc0
[  242.571223][T14225]  do_syscall_64+0xfa/0x3b0
[  242.572821][T14225]  ? lockdep_hardirqs_on+0x9c/0x150
[  242.574642][T14225]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.576825][T14225]  ? exc_page_fault+0x9f/0xf0
[  242.578990][T14225]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.581151][T14225] RIP: 0033:0x7feb81b8ec29
[  242.582755][T14225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  242.589839][T14225] RSP: 002b:00007feb7fdd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  242.592721][T14225] RAX: ffffffffffffffda RBX: 00007feb81dd6090 RCX: 00007feb81b8ec29
[  242.595293][T14225] RDX: 000000000400008a RSI: 0000200000000180 RDI: 0000000000000006
[  242.598513][T14225] RBP: 00007feb81c11e41 R08: 0000000000000000 R09: 0000000000000000
[  242.601960][T14225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  242.605170][T14225] R13: 00007feb81dd6128 R14: 00007feb81dd6090 R15: 00007ffc8b9b2e58
[  242.608222][T14225]  </TASK>
[  242.610269][T14225] Kernel Offset: disabled
[  242.612149][T14225] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:58:00  Registers:
info registers vcpu 0

CPU#0
RAX=463dad2f0d638500 RBX=ffffffff8959dee1 RCX=463dad2f0d638500 RDX=0000000000000000
RSI=ffffffff8dba91de RDI=ffffffff8be33c00 RBP=dffffc0000000000 RSP=ffffc90000007770
R8 =0000000000000000 R9 =ffffffff8172d195 R10=ffffc90000007898 R11=ffffffff81ac4b00
R12=1ffff92000000f09 R13=ffffc90000007880 R14=ffffc90000007848 R15=ffffffff8172d195
RIP=ffffffff8172d1b2 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd60dd74c80 CR3=000000010eb64000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000ff00000000 00000000ffff00ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=000000ff00000000 00000000ffff00ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000039 RBX=0000000000000039 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000162f RDI=0000000000001630 RBP=00000000000003f8 RSP=ffffc90009c1ecb0
R8 =ffff888107af8237 R9 =1ffff11020f5f046 R10=dffffc0000000000 R11=ffffffff854f91c0
R12=dffffc0000000000 R13=ffffffff99b008fa R14=ffffffff99df5420 R15=0000000000000000
RIP=ffffffff854f923c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007feb7fdd56c0 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007feb7fdd4fc8 CR3=00000001234fa000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007feb81da7498 00007feb81da7470 XMM03=00007feb81da74a8 00007feb81da74a0
XMM04=00007feb8290d100 00007feb81da7460 XMM05=00007feb81da7478 00007feb81da74c0
XMM06=00007feb81da74b8 00007feb81da74b0 XMM07=00007feb81da74a8 00007feb81da74a0
XMM08=4a6f09c7680dc9f9 9df2454c5584e48f XMM09=0000000000000000 00007feb81c12fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
