last executing test programs:

2.170064286s ago: executing program 2 (id=1489):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="600000000206030000000000000000000500000705000108000000000900020073797a3100000000ab000780080021001a000000080012400008000005000500020080000500040001000000110003006a6173683a69702c706f727400000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000ff0700004100000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x200088c0}, 0x4000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = socket$inet(0x2b, 0x801, 0x0)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000500)={0x0, 0x0, 0x1800, 0x3}, 0x20) (async)
ioctl$int_in(r5, 0x5452, &(0x7f0000000280)=0x8) (async)
writev(r5, &(0x7f0000001600)=[{&(0x7f0000000580)="6d456bde", 0x4}], 0x1) (async)
write$tun(r4, &(0x7f0000000000)=ANY=[], 0x38) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x9}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x47}, 0x94)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r4, 0x0) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x60702, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1400000010000100faffffff000000000a00000a1c000000120a0102000000000000000000000009080003400000000a30000000000a010200000000000000000500000207000600259b3f000900010073797a300000000008000240e771"], 0x74}}, 0x0)

2.169571482s ago: executing program 2 (id=1490):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0xfffffffffffffe4a}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000)
getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00120000009404006c0012800b00010062726964676500005c0002800c001e00000000000000000005002a00ff0000000500260001000000050019000000000008001a00d80300000c001f0000000000000000000500240000000000050024000100000008001a0007000000050007000700000008000a00", @ANYRES32=r3], 0x9c}}, 0x40)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000000000081"], 0x0, 0x3e}, 0x20)
r9 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x89f, 0x8, 0x1]}}, 0x5c)
setsockopt$MRT6_FLUSH(r9, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4)
setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100"/523], 0x290)
getsockopt$inet6_tcp_buf(r9, 0x6, 0x1c, &(0x7f0000000480)=""/253, &(0x7f0000000180)=0xfd)
setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f00000001c0)={0x9, {{0x2, 0xfffe, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e23, @loopback}}]}, 0x110)

1.834209077s ago: executing program 2 (id=1491):
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xca)
ioctl$SIOCAX25DELUID(r0, 0xc0045878, &(0x7f0000000280)={0x3, @default})

1.83404698s ago: executing program 2 (id=1492):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
close(0x3)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01dd27bd7000fedbdf650200000008000100", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)

1.833383085s ago: executing program 2 (id=1493):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10)
r2 = accept4(r1, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4051}, 0x20008001)
recvmsg$can_raw(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet(0x2, 0x3, 0x4)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="05000000ff6000"/16, @ANYRES64=r5, @ANYRES64=r5, @ANYRES64=r5, @ANYRESOCT], 0x48}}, 0x0)
setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10)
sendmmsg$inet(r4, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r7, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}}, 0x0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="00281cd635e36c87a3613e0128bd7000fedbdf250000000005000d000b000000"], 0x1c}}, 0x40c0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004040)=ANY=[@ANYBLOB="682400003e000701feffffff00000000037c000008004280040008000c000180060006008848"], 0x2468}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)

424.803309ms ago: executing program 2 (id=1502):
socket$netlink(0x10, 0x3, 0x9)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0)
r2 = socket$inet6(0xa, 0x80002, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'syzkaller0\x00', &(0x7f0000000240)=@ethtool_drvinfo={0x3, "12e5f23c2edf2cacbf8058fa31f144f84f2dcba667379c8e384d6463521ed7af", "9f5deca0afe9202756c24bd4e443651dd70a66d3aedac133c8c91c1b6929650f", "c5de61f1f74246f02300", "bbae26cf7cd15c056d1883c15387ca0e318e864aa47894870783407051fe8fc9", "9f91b68a21397390a69336dd21f1bb4bce429ec6a6ffd1d50190629200c5b21a", "adf5052cc5f020faec2d00", 0x4, 0x0, 0x200000, 0x25240a17}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', <r4=>0x0})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_ext={0x1c, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3e9e, 0x0, 0x0, 0x0, 0x8}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x2}]}, &(0x7f0000000140)='syzkaller\x00', 0x401, 0x0, &(0x7f0000000200), 0x41000, 0x2e, '\x00', r4, 0x0, r0, 0x8, &(0x7f0000000280)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xd, 0x4, 0x7}, 0x10, 0xba0f, r0, 0x5, 0x0, &(0x7f0000000300)=[{0x1, 0x2, 0x4, 0xa}, {0x0, 0x3, 0x4, 0x1}, {0x1, 0x4, 0x1, 0xc}, {0x4, 0x1, 0xd, 0x5}, {0x4, 0x3, 0x0, 0xc}], 0x10, 0x8}, 0x94)
ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000))
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_RATE64={0xc, 0x8, 0x4526dd370cbcddac}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r11, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r12 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r12, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
connect$rose(r12, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40)

276.223639ms ago: executing program 0 (id=1505):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
close(0x3)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01dd27bd7000fedbdf650200000008000100", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)

273.893625ms ago: executing program 0 (id=1508):
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "156909", 0x44, 0x2f, 0x0, @private2, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x6000}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {0xa888, 0x88be, 0x8000000}}}}}}}, 0x0)

273.536826ms ago: executing program 0 (id=1510):
syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0xf5, 0x0, 0x4, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @multicast2, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd, 0x2}, {@broadcast, 0x80}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@remote, 0xfffffffe}]}]}}}}}}}, 0x0)

202.031776ms ago: executing program 0 (id=1512):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000b"], 0x48)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x34, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r4=>0x0})
connect$can_bcm(r3, &(0x7f0000000300)={0x1d, r4}, 0x10)
sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/12, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0104000001"], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r7=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f00000002c0)={0x8, 'wg2\x00', {'veth1_macvtap\x00'}, 0xf5})

201.704091ms ago: executing program 1 (id=1513):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, 0x3e, 0x107, 0xfffffffe, 0xf0ff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x4, 0x1}]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

201.213181ms ago: executing program 1 (id=1514):
socket(0x2a, 0x2, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000240)="f243060000000000009929ea8900", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x11, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES8=r0], 0x48)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000040)=0x45d2, 0x4)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x1080, 0x4)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
sendto$inet6(r3, &(0x7f00000001c0)='L', 0x1, 0x8005, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
shutdown(r3, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x18, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r7 = socket$alg(0x26, 0x5, 0x0)
writev(r5, &(0x7f00000005c0)=[{&(0x7f0000001140)="4bc3c120c5c629b850099aaec26333e38a890618ec426d2efef5f514ad6a3578280b6c0b68766654061fcdabec6b1c3632fbb170a57803e5b95419c2d0c7126b40c385adc3090da172d589fcaaa1e4e98110e9123df7a7f9bfaa6fde58451ddc49b79c93001ce6f70ce1243467cf2fdabc66ed1d26c2de6aa4e77142e601e25570dace134aa62038374c791933695c1bb19444ab4a9e0610983a8910401f4938868c2abf14bab25244d43882ad8ed026f1c4b2362e59439d0640f233d0594c0c189d8598e8047e183964", 0xca}, {&(0x7f0000000400)="6f580fab1e2aab95d825da58f8612198", 0x10}, {&(0x7f0000001240)="ef59d8cd1680feb73b48dd293ef6a51d9ff0f1f58325db486d395de02212f93b3b82df1ee3a4a0a6ee8b75420d146e58e169fd0c858dd9b1189bdc6f4493aeabccb294e21663c0fdad74c1c325516533217e4bffc3e1b567fdf70091880dfd94fd88ec722dbadf5e81f8b9e7fdccc556bb93000c71d382aebcb37c509d04045f33fc302f38d3f5b1a10da1d88aa6dd4e1845c8debe34699872ab9bc87e68deaf283b307a802e1d3be4fea0c7fdb4ad4042b0092384b4f35f8b030d4565bf822091f902fb716bc89611bfbc9449fb87012bf40be3d2998180bd9d2f9357d1262429f0731d9277c566eac00926b591e5bb05ea62a103", 0xf5}, {&(0x7f0000001340)="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", 0xfd}], 0x4)
bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r8 = accept4(r7, 0x0, 0x0, 0x1000)
sendmmsg$alg(r8, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x3d}], 0x1, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x30, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x9, 0x7, 0x4, 0x3ff}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4040010}, 0x8000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0}, 0x50)
unshare(0x24020400)
socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r3, 0x84, 0x23, &(0x7f0000000040)="2000fb000980ffff", 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000010000000000000010412b344db17a9ebaa349010f7f4d7eca8d62075b5d7a59b956bbceab5eec002e5471694d3f52cbc0cc4b8b19c475486db6c5212a900026820b39bb"], 0x48)

111.59334ms ago: executing program 1 (id=1515):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r4, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000))
r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc)
setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]})
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000))
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01012cbd7000fbdbdf2503000000050002000a000000060001004e"], 0x24}, 0x1, 0x0, 0x0, 0x404c045}, 0x40000)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r8 = accept4(r7, 0x0, 0x0, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000190001002bbd70f62adbdf2580208003fe04c80300110000"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10)
recvmsg$can_raw(r8, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000400)=""/86, 0x56}, {&(0x7f0000000480)=""/107, 0x6b}], 0x2}, 0x40000001)
sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[], 0x340}, 0x1, 0x0, 0x0, 0xd0}, 0x4048010)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000084000000000000000000850000008b00000095000000ddffffff"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003e5c70945768f33dbaa344dbe5acaa00070127bd700000000000017c0000040042801000018006000600800a0000040001800800b000ffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

62.046198ms ago: executing program 0 (id=1516):
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e001400028008000100080000000621"], 0x54}}, 0x20000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071101d000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, &(0x7f0000000000))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r2, 0x0, 0xc000)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r9, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000580)={'wlan0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000380)={'sit0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r14, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r11, 0x5, 0x70bd25, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x3800000, {0x1, 0x2, 0x9, 0x5}}}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x34}}, 0x0)
sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r7, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x300080c4}, 0x20004040)

59.568707ms ago: executing program 1 (id=1517):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
close(0x3)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRES16=r2, @ANYRESDEC=r1, @ANYRES8=r0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)

56.92604ms ago: executing program 0 (id=1522):
getsockopt(0xffffffffffffffff, 0xdee6, 0x1, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001080)=""/105, 0x69}, {&(0x7f0000001100)=""/126, 0x7e}, {&(0x7f0000001180)=""/74, 0x4a}, {&(0x7f0000001200)=""/35, 0x23}], 0x4, &(0x7f0000001280)=""/176, 0xb0}, 0x1}, {{&(0x7f0000001340)=@ll={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000001700)=[{&(0x7f00000013c0)}, {&(0x7f0000001400)=""/199, 0xc7}, {&(0x7f0000001500)=""/188, 0xbc}, {&(0x7f00000015c0)=""/188, 0xbc}, {&(0x7f0000001680)=""/91, 0x5b}], 0x5, &(0x7f0000001780)=""/16, 0x10}, 0x3ff}, {{&(0x7f00000017c0)=@alg, 0x80, &(0x7f0000002980)=[{&(0x7f0000001840)=""/54, 0x36}, {&(0x7f0000001880)=""/177, 0xb1}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/19, 0x13}], 0x4, &(0x7f00000029c0)=""/206, 0xce}, 0x9}, {{&(0x7f0000002ac0)=@phonet, 0x80, &(0x7f0000003000)=[{&(0x7f0000002b40)=""/150, 0x96}, {&(0x7f0000002c00)=""/14, 0xe}, {&(0x7f0000002c40)=""/209, 0xd1}, {&(0x7f0000002d40)=""/14, 0xe}, {&(0x7f0000002d80)=""/214, 0xd6}, {&(0x7f0000002e80)=""/52, 0x34}, {&(0x7f0000002ec0)=""/54, 0x36}, {&(0x7f0000002f00)=""/31, 0x1f}, {&(0x7f0000002f40)=""/50, 0x32}, {&(0x7f0000002f80)=""/128, 0x80}], 0xa, &(0x7f00000030c0)=""/147, 0x93}, 0x26b}, {{&(0x7f0000003180)=@hci, 0x80, &(0x7f00000053c0)=[{&(0x7f0000003200)=""/107, 0x6b}, {&(0x7f0000003280)=""/244, 0xf4}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000004380)=""/25, 0x19}, {&(0x7f00000043c0)=""/4096, 0x1000}], 0x5, &(0x7f0000005440)=""/182, 0xb6}}], 0x5, 0x101, &(0x7f0000005640))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000005740)={&(0x7f0000005680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000005700)={&(0x7f00000056c0)=@ipv4_getrule={0x1c, 0x22, 0x10, 0x70bd26, 0x25dfdbfe, {0x2, 0x10, 0x14, 0xe7, 0x6d, 0x0, 0x0, 0x0, 0x18013}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000480}, 0x44841)
r3 = socket$netlink(0x10, 0x3, 0xa)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000006140)={<r4=>0x0}, &(0x7f0000006180)=0xc)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000006580)=<r5=>0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000065c0)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, &(0x7f00000066c0)=0xe8)
r8 = getgid()
r9 = gettid()
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000006700)={{{@in=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0, <r11=>0x0}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f0000006800)=0xe8)
r12 = getgid()
r13 = socket$pptp(0x18, 0x1, 0x2)
r14 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
sendmsg$netlink(r3, &(0x7f0000006900)={&(0x7f0000005780)=@proc={0x10, 0x0, 0x25dfdbfb, 0x4100}, 0xc, &(0x7f0000006500)=[{&(0x7f00000057c0)={0x48, 0x23, 0x8, 0x70bd2a, 0x25dfdbff, "", [@generic="7caff76c35082fe7bd8f32d046547b3bf1bda5e7d040218aa5d9ee2157dc89176315145a5988b0dfcf73f6061e6b", @typed={0x8, 0xf9, 0x0, 0x0, @fd=r1}]}, 0x48}, {&(0x7f0000005840)={0x4dc, 0x13, 0x100, 0x70bd25, 0x25dfdbff, "", [@nested={0x180, 0x4b, 0x0, 0x1, [@generic="fc1e274d6043e9cce9a1434393e47a7656ee27dd82ea4417e655ce59359c5c5c23facb3ceac8a06b9c26adaf952bbfe594fd037571ba926d52a1f66bec8f9348c7a53a332987ff39969041b032e403f2baeae916d469fc4473f10fb2859d85f52aa74ba42f28387120803a030a314fd09d16b7ba1d6772ea9e84584e538c11347d9c702ca673f1dc26bea6917c291a9de9ad5226397b3aa41858c8b99aba50ce1b95e128dac6bea59551d85b8f70e3243f772f6fed9d8c85488f030ca873c62e4a05ba56", @typed={0x19, 0xf7, 0x0, 0x0, @binary="00dde237dd934e4855bac327a45fd1ebde216520ae"}, @typed={0xc, 0x10d, 0x0, 0x0, @u64=0xb}, @typed={0x86, 0xa1, 0x0, 0x0, @binary="db22def93c5c4351d3c4ecc72bfdd278b3f52530e4071b0960237b49752923c1019a9c848370ceadbf29fd82d06eeeb92eb41f5d3714cb7fd3b1143a51c4d077c85c3608095273c872ee3ba59d3ac844e44c4b027fe217e0078a5e42b77a012b95233fdefeec2d609cff733b34612abf3a057f992bc86bec3ead8359f1deebf732da"}, @typed={0x8, 0x116, 0x0, 0x0, @str=')}@\x00'}]}, @typed={0x14, 0xd6, 0x0, 0x0, @ipv6=@loopback}, @generic="0a37d587c0ec011060a2e1d02dc175bca2904c02b1fa1bae33eebef44bb57f841b3bb9e85deb0d4b26ecb9b8745b9a6879e1d387e086d8328fff3f0be111bb2f8105720a82aca9764e847e9086f3a5958c95bff403b4380146e88d77b677300e0bf385f30d96b5cb01b39460bd321c3e8b486fb2297b4681180d371de991489e88686954cfc51aa768d120b86e257d50e1238d5fd119c97003d18f8e7ba8633c679eca1dc2a9b537c490168906e024942e85908e96635d8e37f5b13bc5a2bf1811ea", @generic="9a49898396cbaf26fd02965b60b22f2f56885180", @nested={0x24c, 0x41, 0x0, 0x1, [@typed={0x5, 0x82, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x2}, @generic="654ba2ff815f194bb9731c54451c20a7e38a71d992f13bd1ae775a9ced9534605b26e89a563d0c4f2cd05eea9abea65babd9e14b658705ab35d43edff2ef963f81d2aa8c229bd6a64e25e168e5a8cf60c5d2ddcd99f390cdb5c6b3ed7e247f2bde1b99cb9c767a674b4ba2e48d7852ec3e1ea059ba309eed2517b47142f50faf8cd39d2a75501fa55303ec5883093f1e93e3f4a9c83de4b76869254317af36d71f18815ac6933e2759a199e467ae2b3e5e4597067905fb89fcb1584286d858d88953b57495b16cbdb2b23f2665e964c0", @nested={0x4, 0x106}, @nested={0x4, 0xb4}, @typed={0x3d, 0x86, 0x0, 0x0, @binary="b680dcdae4a37eb758158eafbad4a38f5af25ff7acf0758f1e3b767020f2f194f3a52aa1ebaec0b54a2caf51b66fdb5bad62249da2fede797f"}, @generic="663a80690f4d77504e2878b235976fce7392c57f92cf07aa4e7bc3f19be17de2f0d2cecd6c207729a276fe3bd5501b6bda989a5a9db99b04f0709696e1aff3e121bc2b1e4ac5b824ae550a3fee990dfd6e28f807fe45c87bc5d9dfcf28cddd5e89915f5b7eb04d83afa4930fce693e38c12305ed775671b3333be6f9ac36bc45c36dde0d840eff948510e618", @generic="bd3732e439a59d2fd1fd3c90111574a316e420f905dff0dc3384cae9d029b7ad87ec291d023e3a248ab0dad43a86c09c669754d8d98f030d6bd92c9123f1aa20d78ad7809d9e8499db43486e9f9490de68d115eb81f65b097eac85d0763c13df0b037fe53f3e3b3538444b15dcd54eb80536bc609153f42a4f5eb52f299cf8ec32d6390b119ac592e12b363bf8be93427d76d00b8f572657"]}, @typed={0x14, 0xe, 0x0, 0x0, @ipv6=@mcast1}]}, 0x4dc}, {&(0x7f0000005d40)={0x148, 0x3a, 0x800, 0x70bd2b, 0x25dfdbff, "", [@generic="f4daac3f69a8470a446c854a74b09918bfc218631cdf5b3bec7d1987f4d1d485fbf476399ffe9401d3866ae63e69f9eed477d0b6e824df06aaaafb8966e0d0b3cba6c8ae84fb56d33ef3d53c1cf714f102540a8352a3b8be237b300f818688b7425332f7cb1bd01dc7ca7c1fdbf219ff185136f77485b0d632a0224234c47bc6768b9fd65f36d06f8717a47f22d7f4a0b0266ce8b6f124cb5f17a7c7c7305fc5f7db25789fbeb0ee5a4921833eebc563b1fbeb", @typed={0x14, 0x17, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x4e, 0xfa, 0x0, 0x1, [@generic="3941c4eab29236d2d86830023c479be7bbc2f8a589d4537541ec6516bafe8cee0d10c5e408f0cccc70b189a715ec6d6eece33916ae5d03498fbcb2b413edd91f31c931e98c4a7bb3fb6e"]}, @nested={0x20, 0x9a, 0x0, 0x1, [@typed={0x14, 0x151, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @typed={0x8, 0x86, 0x0, 0x0, @fd=r0}]}]}, 0x148}, {&(0x7f0000005ec0)={0x254, 0x13, 0x100, 0x70bd2d, 0x25dfdbff, "", [@typed={0x8, 0x134, 0x0, 0x0, @u32=0x1}, @generic="5216d913ac4f0e7cbae164bd5b41a0b7c845ab9416d1235c0e911b09142447767c5f6806b624c982ccd7eb2aaa4ff3db", @nested={0x10, 0xec, 0x0, 0x1, [@nested={0x4, 0x8f}, @typed={0x6, 0xb0, 0x0, 0x0, @str='#\x00'}]}, @generic="6b8f188793a8e0587a91fb07e7c3e9265d46c5486c8b3935b968df56f4262ba451ef36d03a23ec9b33c1f60388d043dd9b403bcc231b0dd50e9a90da839bce4c7aa6ce04566cc1ef7ccec8f18306fe1ec36b10b71b24dd6c15818d428f647c787346b7273ffe22904cbdd23178410bdc2e818e213f7933134667bfee20491573d8416b70b670e0ea4ea41d6e63b738ca57ce30029b0e95a632334e48681fef91575bbd8593ab158cfce531694df0f444ff037a994b", @generic="7d05f6a099e70e6857cb079898f8763adf7fa85864645afdea60646e91506a5ac1a81c2685960ea6da5f7461d5495c8320a754c835e6a37da9b4489d4e18d85221690bd64d155c2c2c91177f1f7a59a2bdb26546776cf00c5aebb1f07c345807c56348ec2cb22301ce250df6a83282155a31089e07e38175c5d52d22959dd4e78638ab47b4021a192c66c6", @generic="4df30d2ac078319981c489bef108451a577482b2a0a05ab4093a655e52cb7a14ca674068f7cf2ff47a36760034c53705e32b80198a42e302e821c89cef7a047890e27149b04faad3fe2960b1619c3a", @generic="34c95718dc2a544b3f8768207726c136e62d863df691c6fb869b842954a306619cdef969023c8f80666dda2999dbd431f62fde9bf098387ecb7703c383a899dbeea59b554cc235deb93c625a44756a3a8c2ab5002999d3e26f8e1e9a7a6dcf08168c6043e9f27bc0b8d9065e"]}, 0x254}, {&(0x7f00000061c0)={0x31c, 0x38, 0x30d, 0x70bd2b, 0x25dfdbfc, "", [@generic="700a45e29688467fd7d5ea70400c69fbe60a7a71d76d29fa1cd1bde2254fed53a24685b12573d2067dba886444db67812ba7bf57b34983cf20bfebf55b99cc25add06ee823a017ec761c121327e0846104681396114e9e7d012334ea791f78cf2fb6b808fbd7d53afcbbdb1fda4817b64f3f83445593d7b8736f15a173093a413dc2c4277734531f6f1072aa0d18be02f48f1aa3cdee1b99b61dffe4050b11c037e8ba336493e77f0b13ff0d848d8dacea3efd68da1b9d6dda721d1f182a2a3e2d14b2468ffacbed47f6ad34dd367ac43272526425ec422d573ebdd44973c869d47d", @generic="ee70aa6f72255abc7e6b75b83ef962c3dcac26ed6eb5b5e6fd38d2690b48e96c5b41d9f2d0cbb81e37b9cb2a0e585dbbe8aaaf8bae2200cc6c39fa13652af4cb7a2adc5f634829d232a9d80593c2b9092d38354e6ae63b8745a98d8e214ff1dac9a3b4d8bfc6ce77d05ea253cf660cbd0b264f98bdd1152d400cea28922863e3055cc93d7a55ce6c3da937c038fbd260705a88db9d15902915ae76091bb9980fbcd4", @typed={0x8, 0x131, 0x0, 0x0, @pid=r4}, @nested={0x14f, 0xf7, 0x0, 0x1, [@generic="05c8d2e32e6cc322d322a18dd0c7b1d724f02a62d0cc14150ab6242a1101caf41769afe613b0c5c25669564df196a9e6b1f8e9c45e9ce89f5c0c2d3857e3710cf32e550dc83e406d97", @generic="7ddd1646c5bfe8909a38a8d812836eccfe68d6dced974e88c96dc7f10485b5b87471cd3936b9bd33dff092d28985ba22e24848d378ea2d726a391e537091dd85f640459c56c5c9aae786794016ec44a487fd80656e433d98fa3a53002e3127120c67ab4baa3a81df8db2cead98b2fc95038bfe24832e1122963cf3f5a204ffd00cff789afa5c7b1d59904c7d45e921463276d84263015a6b9096d91dc8726de1928cf5ff9b38f9a3e9cf2d0be5eb1c69228f2b88bcc51a551890e6c30505a5e1d22d60897ef041f25bfe9c79dadc1e79620bc46db344cb7279871c53984f0bb701ca74390ab8ddb92155ee87877e", @typed={0x8, 0x14d, 0x0, 0x0, @uid=0xee00}, @typed={0x8, 0x19, 0x0, 0x0, @u32=0x400}, @nested={0x4, 0xa7}]}, @typed={0x8, 0xe0, 0x0, 0x0, @u32=0x5}, @nested={0x28, 0x64, 0x0, 0x1, [@typed={0x8, 0x85, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0x9f}, @typed={0x14, 0xb8, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @nested={0x4, 0x61}]}]}, 0x31c}], 0x5, &(0x7f0000006840)=[@cred={{0x1c, 0x1, 0x2, {r5, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r11, r12}}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [r13, r1, r0, r1, r1]}}, @rights={{0x24, 0x1, 0x1, [r14, r0, r1, r1, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, r1]}}], 0xc0, 0x20000080}, 0x890)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000006940)={{{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000006a40)=0xe8)
setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000006a80)={r5, r15, r8}, 0xc)
r16 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000006ac0)='freezer.parent_freezing\x00', 0x0, 0x0)
setsockopt$MRT6_ADD_MIF(r16, 0x29, 0xca, &(0x7f0000006b00)={0x1, 0x1, 0x7, r2, 0x8}, 0xc)
recvmmsg(r1, &(0x7f000000aac0)=[{{&(0x7f0000006b40)=@tipc=@name, 0x80, &(0x7f00000080c0)=[{&(0x7f0000006bc0)=""/23, 0x17}, {&(0x7f0000006c00)=""/4096, 0x1000}, {&(0x7f0000007c00)=""/248, 0xf8}, {&(0x7f0000007d00)=""/235, 0xeb}, {&(0x7f0000007e00)=""/170, 0xaa}, {&(0x7f0000007ec0)=""/101, 0x65}, {&(0x7f0000007f40)=""/105, 0x69}, {&(0x7f0000007fc0)=""/233, 0xe9}], 0x8}, 0xfffffffc}, {{&(0x7f0000008140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f000000a540)=[{&(0x7f00000081c0)=""/4096, 0x1000}, {&(0x7f00000091c0)=""/170, 0xaa}, {&(0x7f0000009280)=""/241, 0xf1}, {&(0x7f0000009380)=""/64, 0x40}, {&(0x7f00000093c0)=""/209, 0xd1}, {&(0x7f00000094c0)=""/86, 0x56}, {&(0x7f0000009540)=""/4096, 0x1000}], 0x7}, 0x3}, {{&(0x7f000000a5c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f000000a640)}, 0x81}, {{&(0x7f000000a680)=@qipcrtr, 0x80, &(0x7f000000aa40)=[{&(0x7f000000a700)=""/153, 0x99}, {&(0x7f000000a7c0)=""/97, 0x61}, {&(0x7f000000a840)=""/133, 0x85}, {&(0x7f000000a900)=""/66, 0x42}, {&(0x7f000000a980)=""/186, 0xba}], 0x5}, 0x7a9}], 0x4, 0x2000, &(0x7f000000abc0)={0x0, 0x989680})
r17 = bpf$MAP_CREATE(0x0, &(0x7f000000ac00)=@bloom_filter={0x1e, 0x3, 0x6, 0x401, 0x290, r16, 0x3, '\x00', r10, 0xffffffffffffffff, 0x2, 0x0, 0x3, 0x6}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f000000ac80)={0x2, 0x4, 0x8, 0x1, 0x80, r17, 0x7fff, '\x00', r6, r16, 0x4}, 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r16, 0x89e2, &(0x7f000000ad00)={<r18=>r3})
bind$alg(r18, &(0x7f000000ad40)={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(chacha20-generic,wp512-generic)\x00'}, 0x58)
socketpair(0x25, 0x6, 0x7a2, &(0x7f000000adc0)={<r19=>0xffffffffffffffff, <r20=>0xffffffffffffffff})
setsockopt$MRT_ADD_VIF(r19, 0x0, 0xca, &(0x7f000000ae00)={0xffffffffffffffff, 0x4, 0x9, 0xffffffff, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x20}, @remote}, 0x10)
setsockopt$netlink_NETLINK_PKTINFO(r20, 0x10e, 0x3, &(0x7f000000ae40), 0x4)
r21 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r21, 0x89f1, &(0x7f000000af00)={'ip6gre0\x00', &(0x7f000000ae80)={'ip6_vti0\x00', r2, 0x4, 0x40, 0x1, 0x9, 0x4, @private0, @mcast1, 0x80, 0x20, 0xbe5, 0x8}})
getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f000000af40)=""/201, &(0x7f000000b040)=0xc9)

2.016799ms ago: executing program 1 (id=1518):
syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0xf5, 0x0, 0x4, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @multicast2, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd, 0x2}, {@broadcast, 0x80}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@remote, 0xfffffffe}]}]}}}}}}}, 0x0)

0s ago: executing program 1 (id=1525):
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000700)={'sit0\x00', 0x0})
r1 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xe8)
sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)={0x2c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x14, 0xc, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0xea, 0x0, 0x0, @uid=r2}]}, 0x2c}], 0x1, 0x0, 0x0, 0x8080}, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x32}]}}}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x20000884}, 0x8800)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:20748' (ED25519) to the list of known hosts.
syzkaller login: [   48.281827][ T5803] cgroup: Unknown subsys name 'net'
[   48.431798][ T5803] cgroup: Unknown subsys name 'cpuset'
[   48.435967][ T5803] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.864130][ T5803] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.519455][ T5209] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.522377][ T5209] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.524947][ T5209] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.528275][ T5209] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.531435][ T5209] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.550836][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.556727][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.559840][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.566369][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.571853][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.575448][ T5818] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.604594][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.608389][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.612959][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.617088][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.986935][ T5819] chnl_net:caif_netlink_parms(): no params data found
[   55.016197][ T5815] chnl_net:caif_netlink_parms(): no params data found
[   55.061054][ T5822] chnl_net:caif_netlink_parms(): no params data found
[   55.183555][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.186809][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.190543][ T5819] bridge_slave_0: entered allmulticast mode
[   55.194557][ T5819] bridge_slave_0: entered promiscuous mode
[   55.231634][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.234904][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.239810][ T5819] bridge_slave_1: entered allmulticast mode
[   55.243842][ T5819] bridge_slave_1: entered promiscuous mode
[   55.256032][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.259239][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.261666][ T5815] bridge_slave_0: entered allmulticast mode
[   55.264372][ T5815] bridge_slave_0: entered promiscuous mode
[   55.287666][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.291001][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.294132][ T5815] bridge_slave_1: entered allmulticast mode
[   55.299989][ T5815] bridge_slave_1: entered promiscuous mode
[   55.303607][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.306114][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.309256][ T5822] bridge_slave_0: entered allmulticast mode
[   55.313493][ T5822] bridge_slave_0: entered promiscuous mode
[   55.334958][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.353716][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.356480][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.359424][ T5822] bridge_slave_1: entered allmulticast mode
[   55.363816][ T5822] bridge_slave_1: entered promiscuous mode
[   55.368678][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.425216][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.433290][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.455248][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.463067][ T5819] team0: Port device team_slave_0 added
[   55.492206][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.497939][ T5815] team0: Port device team_slave_0 added
[   55.502357][ T5819] team0: Port device team_slave_1 added
[   55.516907][ T5815] team0: Port device team_slave_1 added
[   55.569498][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.572570][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.583864][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.590715][ T5822] team0: Port device team_slave_0 added
[   55.594556][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.598443][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.609619][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.614068][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.617136][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.628539][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.634484][ T5822] team0: Port device team_slave_1 added
[   55.637029][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.640935][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.650684][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.695405][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.698702][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.709763][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.716895][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.720047][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.731614][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.791803][ T5815] hsr_slave_0: entered promiscuous mode
[   55.795135][ T5815] hsr_slave_1: entered promiscuous mode
[   55.819113][ T5819] hsr_slave_0: entered promiscuous mode
[   55.822414][ T5819] hsr_slave_1: entered promiscuous mode
[   55.825432][ T5819] debugfs: 'hsr0' already exists in 'hsr'
[   55.828751][ T5819] Cannot create hsr debugfs directory
[   55.877897][ T5822] hsr_slave_0: entered promiscuous mode
[   55.881189][ T5822] hsr_slave_1: entered promiscuous mode
[   55.884112][ T5822] debugfs: 'hsr0' already exists in 'hsr'
[   55.886653][ T5822] Cannot create hsr debugfs directory
[   56.239249][ T5822] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.249740][ T5822] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.256936][ T5822] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.273241][ T5822] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.318598][ T5815] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.325357][ T5815] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.332055][ T5815] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.354010][ T5815] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.425343][ T5819] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.434240][ T5819] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.442240][ T5819] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.459197][ T5819] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.534763][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.548304][ T5826] Bluetooth: hci0: command tx timeout
[   56.552267][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.562149][ T5822] 8021q: adding VLAN 0 to HW filter on device team0
[   56.583893][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.587126][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.596447][ T5815] 8021q: adding VLAN 0 to HW filter on device team0
[   56.607111][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.610354][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.625919][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.628621][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.632024][ T5826] Bluetooth: hci1: command tx timeout
[   56.636325][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.639029][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.674560][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.711265][ T5819] 8021q: adding VLAN 0 to HW filter on device team0
[   56.718458][ T5826] Bluetooth: hci2: command tx timeout
[   56.732834][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.735904][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.759553][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.762246][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.912980][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.946718][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.960624][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.985339][ T5815] veth0_vlan: entered promiscuous mode
[   57.008788][ T5815] veth1_vlan: entered promiscuous mode
[   57.028015][ T5819] veth0_vlan: entered promiscuous mode
[   57.049294][ T5819] veth1_vlan: entered promiscuous mode
[   57.069561][ T5822] veth0_vlan: entered promiscuous mode
[   57.072063][ T5815] veth0_macvtap: entered promiscuous mode
[   57.083807][ T5815] veth1_macvtap: entered promiscuous mode
[   57.087784][ T5822] veth1_vlan: entered promiscuous mode
[   57.114544][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.125688][ T5819] veth0_macvtap: entered promiscuous mode
[   57.136354][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.146316][ T5819] veth1_macvtap: entered promiscuous mode
[   57.160106][ T5846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.164439][ T5822] veth0_macvtap: entered promiscuous mode
[   57.168348][ T5846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.177216][ T5846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.190927][ T5822] veth1_macvtap: entered promiscuous mode
[   57.195269][ T5846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.216106][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.238899][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.248562][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.266477][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.267897][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.274770][ T5846] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.279879][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.286447][ T5846] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.299276][ T5846] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.308887][ T5846] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.312034][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.326415][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.329907][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.333238][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.338657][   T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.341980][   T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.388079][ T5815] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.413678][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.416295][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.429931][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.433304][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.482175][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.485420][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.493657][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.511019][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.610900][ T5890] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.682422][ T5896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   57.707623][ T5898] netlink: 'syz.0.1': attribute type 1 has an invalid length.
[   57.718695][ T5898] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1'.
[   57.729450][ T5898] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'.
[   57.737068][ T5892] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'.
[   57.748992][ T5892] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'.
[   57.990338][ T5919] netlink: 240 bytes leftover after parsing attributes in process `syz.2.7'.
[   58.283206][ T5932] Zero length message leads to an empty skb
[   58.326044][ T5931] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.638350][ T5826] Bluetooth: hci0: command tx timeout
[   58.708267][ T5826] Bluetooth: hci1: command tx timeout
[   58.789052][ T5826] Bluetooth: hci2: command tx timeout
[   59.025026][ T5943] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   59.691443][ T5931] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.707505][ T5826] Bluetooth: hci0: command tx timeout
[   60.787390][ T5826] Bluetooth: hci1: command tx timeout
[   60.877849][ T5826] Bluetooth: hci2: command tx timeout
[   61.138725][   T24] cfg80211: failed to load regulatory.db
[   61.262097][ T5931] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.331427][ T5931] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.411212][ T5846] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.434544][ T5846] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.447380][ T5846] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.455397][ T5846] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.527771][ T5993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   61.564311][ T5997] syz.2.36 uses obsolete (PF_INET,SOCK_PACKET)
[   62.263593][ T6029] netlink: 200 bytes leftover after parsing attributes in process `syz.0.48'.
[   62.266778][ T6029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.48'.
[   62.353313][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.49'.
[   62.461997][ T6036] netlink: 16 bytes leftover after parsing attributes in process `syz.0.51'.
[   62.475294][ T6036] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   62.572884][ T6042] netlink: 28 bytes leftover after parsing attributes in process `syz.2.53'.
[   62.792568][ T5826] Bluetooth: hci0: command tx timeout
[   62.868407][ T5826] Bluetooth: hci1: command tx timeout
[   62.914788][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.65'.
[   62.949441][ T5826] Bluetooth: hci2: command tx timeout
[   63.081386][ T6079] netlink: 20 bytes leftover after parsing attributes in process `syz.2.70'.
[   63.141173][ T6081] netlink: 68 bytes leftover after parsing attributes in process `syz.0.71'.
[   63.144974][ T6081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.71'.
[   63.174678][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71'.
[   63.257587][ T6092] warning: `syz.0.75' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   63.383355][ T6102] macvlan2: entered allmulticast mode
[   63.385172][ T6102] veth1_vlan: entered allmulticast mode
[   63.400876][ T6102] veth1_vlan: left allmulticast mode
[   63.442851][ T6106] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.451203][ T6106] Bluetooth: MGMT ver 1.23
[   63.991962][ T6138] syzkaller1: tun_chr_ioctl cmd 1074025677
[   64.001321][ T6138] syzkaller1: linktype set to 778
[   64.333582][ T6160] tipc: Started in network mode
[   64.335384][ T6160] tipc: Node identity 8a9106b02b86, cluster identity 4711
[   64.338238][ T6160] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.340883][ T6160] syzkaller0: entered promiscuous mode
[   64.343036][ T6160] syzkaller0: entered allmulticast mode
[   64.356205][ T6160] tipc: Resetting bearer <eth:syzkaller0>
[   64.359688][ T6159] tipc: Resetting bearer <eth:syzkaller0>
[   64.365671][ T6159] tipc: Disabling bearer <eth:syzkaller0>
[   64.743933][ T5866] IPVS: starting estimator thread 0...
[   64.847390][ T6182] IPVS: using max 79 ests per chain, 189600 per kthread
[   65.238264][ T6216] netlink: 'syz.2.127': attribute type 7 has an invalid length.
[   65.241691][ T6216] netlink: 'syz.2.127': attribute type 8 has an invalid length.
[   65.245150][ T6216] netlink: 224 bytes leftover after parsing attributes in process `syz.2.127'.
[   66.035050][ T6246] Driver unsupported XDP return value 0 on prog  (id 30) dev N/A, expect packet loss!
[   66.212616][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.143'.
[   66.221574][ T6259] gretap0: entered promiscuous mode
[   66.844133][ T6306] netlink: 40 bytes leftover after parsing attributes in process `syz.1.162'.
[   67.071388][ T6312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.165'.
[   67.622247][ T6312] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   67.625857][ T6312] macvtap1: entered allmulticast mode
[   67.628467][ T6312] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   67.639641][ T6321] ipvlan2: entered promiscuous mode
[   67.939203][ T6343] netlink: 24 bytes leftover after parsing attributes in process `syz.2.177'.
[   68.579682][ T6355] netlink: 'syz.0.181': attribute type 1 has an invalid length.
[   68.583048][ T6355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.181'.
[   68.653857][ T6359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.183'.
[   69.174252][ T6394] netlink: 24 bytes leftover after parsing attributes in process `syz.0.200'.
[   69.181344][ T6398] sctp: [Deprecated]: syz.1.201 (pid 6398) Use of int in max_burst socket option deprecated.
[   69.181344][ T6398] Use struct sctp_assoc_value instead
[   69.609203][ T6437] tipc: Started in network mode
[   69.611326][ T6437] tipc: Node identity d223f92110cb, cluster identity 4711
[   69.614383][ T6437] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.620455][ T6437] syzkaller0: entered promiscuous mode
[   69.622398][ T6437] syzkaller0: entered allmulticast mode
[   69.640051][ T6437] tipc: Resetting bearer <eth:syzkaller0>
[   69.643220][ T6436] tipc: Resetting bearer <eth:syzkaller0>
[   69.655186][ T6436] tipc: Disabling bearer <eth:syzkaller0>
[   69.728853][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.224'.
[   69.735376][ T6448] dummy0: entered promiscuous mode
[   69.741460][ T6448] dummy0: left promiscuous mode
[   69.870626][ T6457] netlink: 'syz.1.228': attribute type 11 has an invalid length.
[   69.954237][ T6464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.233'.
[   70.136398][ T6481] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.140130][ T6481] syzkaller0: entered promiscuous mode
[   70.141970][ T6481] syzkaller0: entered allmulticast mode
[   70.151593][ T6481] tipc: Resetting bearer <eth:syzkaller0>
[   70.154182][ T6482] netlink: 260 bytes leftover after parsing attributes in process `syz.1.240'.
[   70.159858][ T6482] netlink: 260 bytes leftover after parsing attributes in process `syz.1.240'.
[   70.164196][ T6479] tipc: Resetting bearer <eth:syzkaller0>
[   70.218996][ T6479] tipc: Disabling bearer <eth:syzkaller0>
[   70.318677][ T6496] netlink: 16 bytes leftover after parsing attributes in process `syz.0.247'.
[   70.428829][ T6506] netlink: 'syz.1.251': attribute type 16 has an invalid length.
[   70.431415][ T6506] netlink: 20 bytes leftover after parsing attributes in process `syz.1.251'.
[   70.872595][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.874920][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.029328][ T6568] netlink: 'syz.0.280': attribute type 27 has an invalid length.
[   71.501523][ T6611] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003
[   72.947644][ T6693] __nla_validate_parse: 6 callbacks suppressed
[   72.947655][ T6693] netlink: 168 bytes leftover after parsing attributes in process `syz.2.335'.
[   73.025796][ T6700] netlink: 24 bytes leftover after parsing attributes in process `syz.1.337'.
[   73.201612][ T6718] netlink: 'syz.1.343': attribute type 10 has an invalid length.
[   73.212417][ T6718] team0: Port device dummy0 added
[   73.583509][ T6758] netlink: 20 bytes leftover after parsing attributes in process `syz.0.359'.
[   73.591980][ T6758] netlink: 'syz.0.359': attribute type 6 has an invalid length.
[   73.594491][ T6758] netlink: 16 bytes leftover after parsing attributes in process `syz.0.359'.
[   73.764567][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.369'.
[   75.714729][ T6842] netlink: 56 bytes leftover after parsing attributes in process `syz.1.399'.
[   75.754263][ T6846] dvmrp1: entered allmulticast mode
[   75.764639][ T6846] dvmrp1: left allmulticast mode
[   76.054218][ T6883] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.084718][ T6886] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20004
[   76.171753][ T6895] Bluetooth: MGMT ver 1.23
[   76.204288][ T6898] netlink: 'syz.2.426': attribute type 3 has an invalid length.
[   76.366739][ T6914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.433'.
[   76.376133][ T6914] netlink: 32 bytes leftover after parsing attributes in process `syz.2.433'.
[   76.792574][ T6945] sctp: [Deprecated]: syz.0.445 (pid 6945) Use of struct sctp_assoc_value in delayed_ack socket option.
[   76.792574][ T6945] Use struct sctp_sack_info instead
[   77.326170][ T6994] netlink: 'syz.2.464': attribute type 5 has an invalid length.
[   77.329165][ T6994] netlink: 24 bytes leftover after parsing attributes in process `syz.2.464'.
[   77.416962][ T6969] netlink: 20 bytes leftover after parsing attributes in process `syz.0.456'.
[   77.423620][ T6969] netlink: 'syz.0.456': attribute type 13 has an invalid length.
[   77.426396][ T6969] netlink: 'syz.0.456': attribute type 17 has an invalid length.
[   77.436363][ T6969] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   77.775544][ T7035] netem: change failed
[   77.946699][ T7050] dummy0: entered promiscuous mode
[   77.953299][ T7050] team0: entered promiscuous mode
[   77.955268][ T7050] team_slave_0: entered promiscuous mode
[   77.958442][ T7050] team_slave_1: entered promiscuous mode
[   78.140929][ T7071] __nla_validate_parse: 3 callbacks suppressed
[   78.140941][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.499'.
[   78.145897][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.499'.
[   78.151279][ T7071] netlink: 2 bytes leftover after parsing attributes in process `syz.0.499'.
[   78.211252][ T7075] netlink: 32 bytes leftover after parsing attributes in process `syz.2.504'.
[   78.229192][ T5826] Bluetooth: hci2: Opcode 0x0401 failed: -110
[   78.232698][ T5826] Bluetooth: hci2: command 0x0401 tx timeout
[   78.255372][ T7081] netlink: 32 bytes leftover after parsing attributes in process `syz.2.504'.
[   78.548338][ T7112] netlink: 92 bytes leftover after parsing attributes in process `syz.0.520'.
[   78.628734][ T7118] netlink: 304 bytes leftover after parsing attributes in process `syz.2.523'.
[   78.650916][ T7114] netlink: 'syz.1.521': attribute type 12 has an invalid length.
[   78.654539][ T7114] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.521'.
[   79.075534][ T7151] @: renamed from veth0_vlan (while UP)
[   79.247453][ T7165] netlink: 24 bytes leftover after parsing attributes in process `syz.1.544'.
[   79.319577][ T7169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.546'.
[   79.535292][ T7182] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   79.618257][ T7186] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.622396][ T7183] tipc: Resetting bearer <eth:syzkaller0>
[   79.634956][ T7183] tipc: Disabling bearer <eth:syzkaller0>
[   80.315672][ T7221] netlink: 'syz.2.565': attribute type 1 has an invalid length.
[   80.404327][ T7224] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.408939][ T7224] syzkaller0: entered promiscuous mode
[   80.411205][ T7224] syzkaller0: entered allmulticast mode
[   80.432069][ T7224] tipc: Resetting bearer <eth:syzkaller0>
[   80.435720][ T7223] tipc: Resetting bearer <eth:syzkaller0>
[   80.450865][ T7223] tipc: Disabling bearer <eth:syzkaller0>
[   80.678104][ T7242] l2tp_ppp: sess 2/0: no socket in recv
[   81.489237][ T7262] tipc: Cannot configure node identity twice
[   81.529631][ T7267] netlink: 'syz.1.588': attribute type 4 has an invalid length.
[   81.544263][ T7267] netlink: 'syz.1.588': attribute type 4 has an invalid length.
[   81.575395][ T7272] rdma_op ffff8881262ae9f0 conn xmit_rdma 0000000000000000
[   81.787925][ T7290] vlan2: entered allmulticast mode
[   81.790069][ T7290] macvlan0: entered allmulticast mode
[   81.792168][ T7290] veth1_vlan: entered allmulticast mode
[   82.571572][ T7334] Bluetooth: hci1: Opcode 0x080f failed: -4
[   83.607227][ T7363] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.610580][ T7363] syzkaller0: entered promiscuous mode
[   83.614135][ T7363] syzkaller0: entered allmulticast mode
[   83.630844][ T7363] tipc: Resetting bearer <eth:syzkaller0>
[   83.638336][ T7362] tipc: Resetting bearer <eth:syzkaller0>
[   83.652174][ T7362] tipc: Disabling bearer <eth:syzkaller0>
[   83.690627][ T7371] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.768106][ T7371] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.777144][ T7379] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   83.824400][ T7371] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.876110][ T7371] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.949717][ T7389] wg1 speed is unknown, defaulting to 1000
[   83.951732][ T7389] wg1 speed is unknown, defaulting to 1000
[   83.977322][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.980100][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.990707][ T7393] __nla_validate_parse: 6 callbacks suppressed
[   83.990717][ T7393] netlink: 16 bytes leftover after parsing attributes in process `syz.2.634'.
[   84.000795][ T7389] wg1 speed is unknown, defaulting to 1000
[   84.002890][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.006479][ T7389] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   84.014182][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.023240][ T7389] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   84.064424][ T7389] wg1 speed is unknown, defaulting to 1000
[   84.069028][ T7389] wg1 speed is unknown, defaulting to 1000
[   84.072644][ T7389] wg1 speed is unknown, defaulting to 1000
[   84.637415][   T54] Bluetooth: hci1: command 0x080f tx timeout
[   85.144066][ T7415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.641'.
[   86.147456][   T54] Bluetooth: hci2: command 0x0401 tx timeout
[   86.766573][ T7431] wg1 speed is unknown, defaulting to 1000
[   86.938839][ T7443] netlink: 'syz.2.649': attribute type 1 has an invalid length.
[   86.941490][ T7443] netlink: 144 bytes leftover after parsing attributes in process `syz.2.649'.
[   86.944621][ T7443] netlink: 'syz.2.649': attribute type 1 has an invalid length.
[   86.949364][ T7443] netlink: 76 bytes leftover after parsing attributes in process `syz.2.649'.
[   87.393885][ T7461] tipc: Started in network mode
[   87.396527][ T7461] tipc: Node identity 76b02800d05f, cluster identity 4711
[   87.401006][ T7461] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.442027][ T7461] syzkaller0: entered promiscuous mode
[   87.444091][ T7461] syzkaller0: entered allmulticast mode
[   87.446526][ T7461] tipc: Resetting bearer <eth:syzkaller0>
[   87.454759][ T7460] tipc: Resetting bearer <eth:syzkaller0>
[   88.310332][ T7460] tipc: Disabling bearer <eth:syzkaller0>
[   88.354025][ T7481] netlink: 'syz.1.659': attribute type 4 has an invalid length.
[   88.416854][ T7485] netlink: 'syz.1.660': attribute type 4 has an invalid length.
[   88.424667][ T7485] netlink: 96 bytes leftover after parsing attributes in process `syz.1.660'.
[   88.465724][ T7484] bridge_slave_0: left allmulticast mode
[   88.470980][ T7484] bridge_slave_0: left promiscuous mode
[   88.473350][ T7484] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.484912][ T7484] bridge_slave_1: left allmulticast mode
[   88.487420][ T7484] bridge_slave_1: left promiscuous mode
[   88.490389][ T7484] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.501694][ T7484] bond0: (slave bond_slave_0): Releasing backup interface
[   88.513341][ T7484] bond0: (slave bond_slave_1): Releasing backup interface
[   88.529536][ T7484] team_slave_0: left promiscuous mode
[   88.545696][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.663'.
[   88.550457][ T7484] team0: Port device team_slave_0 removed
[   88.555523][ T7484] team_slave_1: left promiscuous mode
[   88.561800][ T7484] team0: Port device team_slave_1 removed
[   88.565067][ T7484] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.570269][ T7484] batman_adv: batadv0: Removing interface: batadv_slave_0
[   88.576625][ T7484] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.580002][ T7484] batman_adv: batadv0: Removing interface: batadv_slave_1
[   88.583882][ T7499] netlink: 48 bytes leftover after parsing attributes in process `syz.2.661'.
[   88.593575][   T52] wg1 speed is unknown, defaulting to 1000
[   88.850157][ T7514] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.665'.
[   88.984015][ T7522] veth0: entered promiscuous mode
[   89.008597][ T7522] veth0: left promiscuous mode
[   89.039537][ T7527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.668'.
[   89.043645][ T7527] wg1 speed is unknown, defaulting to 1000
[   89.065689][ T7528] netlink: 128 bytes leftover after parsing attributes in process `syz.0.668'.
[   89.071410][ T7528] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[   89.081272][ T7531] netlink: 20 bytes leftover after parsing attributes in process `syz.2.669'.
[   89.085391][ T7531] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (65547)
[   89.091319][ T7531] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[   89.095852][ T7531] netlink: 20 bytes leftover after parsing attributes in process `syz.2.669'.
[   89.103078][ T7531] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (65547)
[   89.111576][ T7531] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[   89.229598][ T7542] netlink: 'syz.0.673': attribute type 1 has an invalid length.
[   89.251601][ T7542] bond1: entered promiscuous mode
[   89.255654][ T7542] 8021q: adding VLAN 0 to HW filter on device bond1
[   89.271426][ T7542] sock: sock_timestamping_bind_phc: sock not bind to device
[   89.293626][ T7546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   89.341352][ T7550] pim6reg1: entered promiscuous mode
[   89.343206][ T7550] pim6reg1: entered allmulticast mode
[   89.455225][ T7550] netlink: 32 bytes leftover after parsing attributes in process `syz.0.675'.
[   89.638001][ T7556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.677'.
[   89.681486][ T7558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.678'.
[   89.762407][ T7562] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   89.874382][ T7566] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.880090][ T7567] syzkaller0: entered promiscuous mode
[   89.883213][ T7567] syzkaller0: entered allmulticast mode
[   89.900257][ T7567] tipc: Resetting bearer <eth:syzkaller0>
[   89.910827][ T7567] tipc: Disabling bearer <eth:syzkaller0>
[   89.942502][ T7572] netlink: 'syz.2.682': attribute type 1 has an invalid length.
[   89.970604][ T7572] 8021q: adding VLAN 0 to HW filter on device bond1
[   89.993900][ T7572] ipvlan2: entered allmulticast mode
[   89.995897][ T7572] bond1: entered allmulticast mode
[   90.008370][ T7572] bond1: (slave gretap1): making interface the new active one
[   90.010908][ T7572] gretap1: entered allmulticast mode
[   90.014542][ T7572] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   90.020324][ T7572] syz.2.682 (7572) used greatest stack depth: 19624 bytes left
[   90.064436][ T7583] netlink: 'syz.1.684': attribute type 10 has an invalid length.
[   90.080362][ T7583] @: left promiscuous mode
[   90.085404][ T7583] @: entered promiscuous mode
[   90.089976][ T7583] team0: Device 4@ failed to register rx_handler
[   90.282595][ T7594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.688'.
[   90.360823][ T7599] netlink: 96 bytes leftover after parsing attributes in process `syz.1.690'.
[   90.455732][ T7603] can: request_module (can-proto-0) failed.
[   90.466253][ T7609] netlink: 'syz.1.691': attribute type 9 has an invalid length.
[   90.472942][ T7609] netlink: 'syz.1.691': attribute type 9 has an invalid length.
[   90.628132][ T7624] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.639511][ T7622] tipc: Resetting bearer <eth:syzkaller0>
[   90.649574][ T7621] tipc: Disabling bearer <eth:syzkaller0>
[   90.860266][ T7632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'.
[   91.071087][ T7644] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   91.270136][ T7656] veth1_to_bond: entered allmulticast mode
[   91.307177][ T7656] bond0: (slave bond_slave_1): Releasing backup interface
[   91.326619][ T7656] veth1_to_bond (unregistering): left allmulticast mode
[   91.336792][ T7659] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.385509][ T7666] netlink: 'syz.2.710': attribute type 1 has an invalid length.
[   91.408323][ T7666] bond2: entered promiscuous mode
[   91.410245][ T7666] bond2: entered allmulticast mode
[   91.456136][ T7669] bond0: option mode: unable to set because the bond device has slaves
[   91.475829][ T7671] ip6_tunnel: non-ECT from fc08:0000:0000:0000:0000:0000:0000:0001 with DS=0x2
[   91.642939][ T7689] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   91.646801][ T7689] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.705159][ T7693] vlan0: entered promiscuous mode
[   92.172880][ T7716] validate_nla: 1 callbacks suppressed
[   92.172896][ T7716] netlink: 'syz.2.724': attribute type 1 has an invalid length.
[   92.361063][ T7726] netlink: 'syz.2.726': attribute type 12 has an invalid length.
[   92.365307][ T7726] netlink: 'syz.2.726': attribute type 4 has an invalid length.
[   92.417004][ T7728] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   92.422686][ T7728] batman_adv: batadv0: Removing interface: batadv_slave_0
[   92.426646][ T7728] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   92.433706][ T7728] batman_adv: batadv0: Removing interface: batadv_slave_1
[   92.592842][ T7731] vlan2: entered promiscuous mode
[   92.594660][ T7731] bond0: entered promiscuous mode
[   92.652806][ T7739] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   92.879268][ T7762] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   93.053762][ T7777] netlink: 'syz.1.735': attribute type 3 has an invalid length.
[   93.677503][ T7852] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.681447][ T7852] syzkaller0: entered promiscuous mode
[   93.683750][ T7852] syzkaller0: entered allmulticast mode
[   93.726003][ T7852] tipc: Resetting bearer <eth:syzkaller0>
[   93.734715][ T7856] wg1 speed is unknown, defaulting to 1000
[   93.815177][ T7865] tipc: Resetting bearer <eth:syzkaller0>
[   93.835671][ T7865] tipc: Disabling bearer <eth:syzkaller0>
[   94.056317][ T7872] openvswitch: netlink: VXLAN extension 274 out of range max 1
[   94.056330][ T7880] openvswitch: netlink: VXLAN extension 274 out of range max 1
[   94.071660][ T7878] lo speed is unknown, defaulting to 1000
[   94.074113][ T7878] lo speed is unknown, defaulting to 1000
[   94.077028][ T7878] lo speed is unknown, defaulting to 1000
[   94.114744][ T7878] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   94.129860][ T7883] __nla_validate_parse: 15 callbacks suppressed
[   94.129876][ T7883] netlink: 200 bytes leftover after parsing attributes in process `syz.1.745'.
[   94.139925][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.745'.
[   94.201412][ T7884] netlink: 40 bytes leftover after parsing attributes in process `syz.2.744'.
[   94.206282][ T7878] lo speed is unknown, defaulting to 1000
[   94.211325][ T7878] lo speed is unknown, defaulting to 1000
[   94.216601][ T7878] lo speed is unknown, defaulting to 1000
[   94.482533][ T7911] netlink: 20 bytes leftover after parsing attributes in process `syz.0.751'.
[   94.622944][ T7924] netlink: 300 bytes leftover after parsing attributes in process `syz.2.754'.
[   94.625527][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.755'.
[   94.807686][ T7933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.758'.
[   94.933868][ T7943] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.936520][ T7943] syzkaller0: entered promiscuous mode
[   94.942451][ T7943] syzkaller0: entered allmulticast mode
[   94.949541][ T7943] netlink: 'syz.2.761': attribute type 4 has an invalid length.
[   94.992273][ T7942] tipc: Resetting bearer <eth:syzkaller0>
[   95.015756][ T7942] tipc: Disabling bearer <eth:syzkaller0>
[   95.042583][ T7948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.762'.
[   95.096587][ T7952] netlink: 28 bytes leftover after parsing attributes in process `syz.2.764'.
[   95.506421][ T7972] netlink: 52 bytes leftover after parsing attributes in process `syz.2.770'.
[   95.699040][ T7980] netlink: 'syz.2.773': attribute type 1 has an invalid length.
[   95.761304][ T7981] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.834936][ T7981] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.881690][ T7981] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.940220][ T7981] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.019524][ T5846] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.040389][ T5846] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.052690][ T5846] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.065031][ T5846] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.639524][ T7990] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.647385][ T7990] bond0: (slave rose0): Enslaving as an active interface with an up link
[   96.684916][ T7996] netlink: 'syz.2.776': attribute type 1 has an invalid length.
[   96.689040][ T7996] netlink: 'syz.2.776': attribute type 1 has an invalid length.
[   97.419741][ T8038] netlink: zone id is out of range
[   97.421932][ T8038] netlink: zone id is out of range
[   97.423860][ T8038] netlink: zone id is out of range
[   97.425799][ T8038] netlink: zone id is out of range
[   97.429993][ T8038] netlink: zone id is out of range
[   97.432464][ T8038] netlink: zone id is out of range
[   97.434454][ T8038] netlink: zone id is out of range
[   97.436132][ T8038] netlink: zone id is out of range
[   97.439421][ T8038] netlink: zone id is out of range
[   97.441319][ T8038] netlink: zone id is out of range
[   97.576171][ T8050] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   97.934979][ T8089] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   97.941433][ T8089] syzkaller0: entered promiscuous mode
[   97.943701][ T8089] syzkaller0: entered allmulticast mode
[   97.960516][ T8089] tipc: Resetting bearer <eth:syzkaller0>
[   97.965209][ T8088] tipc: Resetting bearer <eth:syzkaller0>
[   97.974663][ T8088] tipc: Disabling bearer <eth:syzkaller0>
[   98.103745][ T8097] wg1 speed is unknown, defaulting to 1000
[   98.115644][ T8097] lo speed is unknown, defaulting to 1000
[   98.200234][ T8104] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.203759][ T8104] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.356803][ T8104] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.372347][ T8104] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.426813][ T8104] veth1_vlan: left allmulticast mode
[   98.516083][ T8104] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[   98.602277][ T5846] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.608184][ T5846] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.614093][ T5846] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   98.632754][ T5846] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   99.015943][   T24] hid-generic 0005:0B57:0009.0001: unknown main item tag 0x0
[   99.026286][   T24] hid-generic 0005:0B57:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa
[   99.292037][ T8158] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.295548][ T8158] syzkaller0: entered promiscuous mode
[   99.298561][ T8158] syzkaller0: entered allmulticast mode
[   99.311447][ T8158] tipc: Resetting bearer <eth:syzkaller0>
[   99.327036][ T8158] tipc: Resetting bearer <eth:syzkaller0>
[   99.340270][ T8158] tipc: Disabling bearer <eth:syzkaller0>
[   99.689448][ T5880] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.694338][ T5880] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.699261][ T5880] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.702833][ T5880] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.776721][ T8167] netlink: 'syz.1.823': attribute type 2 has an invalid length.
[   99.776738][ T8165] netlink: 'syz.1.823': attribute type 2 has an invalid length.
[   99.827620][ T8170] netlink: 'syz.0.824': attribute type 10 has an invalid length.
[   99.830993][ T8170] __nla_validate_parse: 16 callbacks suppressed
[   99.831004][ T8170] netlink: 40 bytes leftover after parsing attributes in process `syz.0.824'.
[   99.841009][ T8170] dummy0: entered promiscuous mode
[   99.843427][ T8170] dummy0: entered allmulticast mode
[   99.846971][ T8170] bridge0: port 3(dummy0) entered blocking state
[   99.850246][ T8170] bridge0: port 3(dummy0) entered disabled state
[   99.855361][ T8170] bridge0: port 3(dummy0) entered blocking state
[   99.858709][ T8170] bridge0: port 3(dummy0) entered forwarding state
[   99.881751][ T8172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.825'.
[  100.081696][ T8191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.828'.
[  100.099485][ T8192] netlink: 'syz.0.829': attribute type 10 has an invalid length.
[  100.102724][ T8192] netlink: 40 bytes leftover after parsing attributes in process `syz.0.829'.
[  100.205435][ T8200] netlink: 16 bytes leftover after parsing attributes in process `syz.0.834'.
[  100.210243][ T8200] netlink: 724 bytes leftover after parsing attributes in process `syz.0.834'.
[  100.213288][ T8202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.833'.
[  100.213600][ T8200] netlink: 724 bytes leftover after parsing attributes in process `syz.0.834'.
[  100.236132][ T8202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.245060][ T8202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.833'.
[  100.296209][ T8208] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  100.301726][ T8206] IPVS: stopping master sync thread 8208 ...
[  100.339376][ T8211] wg1 speed is unknown, defaulting to 1000
[  100.341996][ T8211] lo speed is unknown, defaulting to 1000
[  100.403781][ T8214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.838'.
[  101.002218][ T8229] wg1 speed is unknown, defaulting to 1000
[  101.005117][ T8229] lo speed is unknown, defaulting to 1000
[  101.234427][ T8236] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.246960][ T8235] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  101.250766][ T8236] syzkaller0: entered promiscuous mode
[  101.253129][ T8236] syzkaller0: entered allmulticast mode
[  101.263735][ T8235] tipc: Resetting bearer <eth:syzkaller0>
[  101.269409][ T8234] tipc: Resetting bearer <eth:syzkaller0>
[  101.277043][ T8234] tipc: Disabling bearer <eth:syzkaller0>
[  101.546065][ T8266] erspan0: entered promiscuous mode
[  101.550498][ T8266] erspan0: left promiscuous mode
[  101.705885][ T8284] sctp: [Deprecated]: syz.1.854 (pid 8284) Use of struct sctp_assoc_value in delayed_ack socket option.
[  101.705885][ T8284] Use struct sctp_sack_info instead
[  101.747568][ T8291] netlink: 'syz.2.857': attribute type 39 has an invalid length.
[  102.002473][ T8307] netlink: 'syz.2.863': attribute type 12 has an invalid length.
[  102.053077][ T8310] lo speed is unknown, defaulting to 1000
[  102.055209][ T8310] lo speed is unknown, defaulting to 1000
[  102.059203][ T8310] lo speed is unknown, defaulting to 1000
[  102.072171][ T8310] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  102.091607][ T8310] lo speed is unknown, defaulting to 1000
[  102.094911][ T8310] lo speed is unknown, defaulting to 1000
[  102.098806][ T8310] lo speed is unknown, defaulting to 1000
[  102.118937][ T8312] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  102.122560][ T8312] syzkaller0: entered promiscuous mode
[  102.124588][ T8312] syzkaller0: entered allmulticast mode
[  102.130652][ T8310] gretap0: Device is already in use.
[  102.141659][ T8312] tipc: Resetting bearer <eth:syzkaller0>
[  102.149259][ T8311] tipc: Resetting bearer <eth:syzkaller0>
[  102.163785][ T8311] tipc: Disabling bearer <eth:syzkaller0>
[  102.180391][ T8314] bond0: entered promiscuous mode
[  102.182103][ T8314] bond_slave_0: entered promiscuous mode
[  102.185198][ T8314] batadv_slave_1: entered promiscuous mode
[  102.188175][ T8314] debugfs: 'hsr1' already exists in 'hsr'
[  102.190193][ T8314] Cannot create hsr debugfs directory
[  102.319019][ T8331] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  102.602817][ T5846] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.605869][ T5846] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.610001][ T5846] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.613453][ T5846] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  102.888988][ T8360] netlink: 'syz.1.877': attribute type 1 has an invalid length.
[  103.153778][ T8378] net_ratelimit: 32 callbacks suppressed
[  103.153788][ T8378] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.225894][ T8388] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  103.488909][ T8394] netlink: 'syz.2.887': attribute type 13 has an invalid length.
[  104.075803][ T8408] macvtap2: entered promiscuous mode
[  104.078413][ T8408] batadv0: entered promiscuous mode
[  104.081130][ T8408] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  104.084465][ T8408] batadv0: left promiscuous mode
[  104.323424][ T8430] netlink: 'syz.2.896': attribute type 1 has an invalid length.
[  104.348944][ T8430] 8021q: adding VLAN 0 to HW filter on device bond3
[  104.376941][ T8430] gretap2: entered promiscuous mode
[  104.382342][ T8430] bond3: (slave gretap2): making interface the new active one
[  104.386520][ T8430] bond3: (slave gretap2): Enslaving as an active interface with an up link
[  104.392247][ T8433] wg1 speed is unknown, defaulting to 1000
[  104.395483][ T8433] lo speed is unknown, defaulting to 1000
[  104.400604][ T8433] lo speed is unknown, defaulting to 1000
[  104.413252][ T8434] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.532464][ T8434] bridge0: port 3(dummy0) entered disabled state
[  104.545866][ T8434] bridge0: port 3(dummy0) entered disabled state
[  104.576294][ T8447] ieee802154 phy0 wpan0: encryption failed: -22
[  104.598490][ T8432] tipc: Disabling bearer <eth:syzkaller0>
[  104.692335][ T8452] trusted_key: syz.1.903 sent an empty control message without MSG_MORE.
[  104.713074][ T8458] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  104.716806][ T8458] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  104.750367][ T8452] bridge2: entered promiscuous mode
[  104.752616][ T8452] bridge2: entered allmulticast mode
[  104.756650][ T8452] team0: Port device bridge2 added
[  104.860846][ T8465] __nla_validate_parse: 136 callbacks suppressed
[  104.860862][ T8465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.906'.
[  104.868913][ T8463] netlink: 'syz.2.907': attribute type 10 has an invalid length.
[  104.885035][ T8463] team0: Device dummy0 failed to register rx_handler
[  104.926328][   T34] audit: type=1107 audit(1754401215.315:2): pid=8466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='귿&޺:o.<jAXxH1C0YP[-'
[  104.968486][ T8469] wg1 speed is unknown, defaulting to 1000
[  104.972715][ T8469] lo speed is unknown, defaulting to 1000
[  104.976599][ T8469] lo speed is unknown, defaulting to 1000
[  105.093149][ T8478] netlink: 14 bytes leftover after parsing attributes in process `syz.1.911'.
[  105.170658][ T8478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  105.175558][ T8478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  105.179738][ T8478] bond0 (unregistering): Released all slaves
[  105.193855][ T8479] macsec0: entered promiscuous mode
[  105.330657][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.913'.
[  105.458840][ T8500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.916'.
[  105.537975][ T8503] netlink: 32 bytes leftover after parsing attributes in process `syz.2.917'.
[  105.605043][ T8510] netlink: 256 bytes leftover after parsing attributes in process `syz.0.919'.
[  105.610155][ T8510] netlink: 48 bytes leftover after parsing attributes in process `syz.0.919'.
[  105.625873][ T8510] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  105.631865][   T24] lo speed is unknown, defaulting to 1000
[  105.736437][ T8514] netlink: 32 bytes leftover after parsing attributes in process `syz.0.921'.
[  105.783976][ T8516] veth1: mtu greater than device maximum
[  106.155233][ T8537] vlan0: left promiscuous mode
[  106.157942][ T8537] macsec0: left promiscuous mode
[  106.161159][ T8537] bridge2: left promiscuous mode
[  106.164317][ T8537] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  106.190640][ T8541] netlink: 24 bytes leftover after parsing attributes in process `syz.0.929'.
[  106.191503][ T8537] netlink: 76 bytes leftover after parsing attributes in process `syz.1.927'.
[  106.306305][ T8545] syz.0.931 (8545) used greatest stack depth: 19192 bytes left
[  106.437564][ T8572] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.519983][ T8583] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  106.580179][ T8581] ieee802154 phy0 wpan0: encryption failed: -22
[  106.584859][ T8592] netlink: 'syz.0.946': attribute type 21 has an invalid length.
[  106.586626][ T8590] 8021q: adding VLAN 0 to HW filter on device team0
[  106.593139][ T8590] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  106.622868][ T8598] netlink: 'syz.2.947': attribute type 10 has an invalid length.
[  106.643928][ T8598] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[  106.648581][ T8598] bond0: (slave wlan1): Enslaving as an active interface with a down link
[  106.771907][ T8610] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  106.775420][ T8610] syzkaller0: entered promiscuous mode
[  106.777961][ T8610] syzkaller0: entered allmulticast mode
[  107.200917][ T8619] wg1 speed is unknown, defaulting to 1000
[  107.204657][ T8619] lo speed is unknown, defaulting to 1000
[  107.210909][ T8619] lo speed is unknown, defaulting to 1000
[  107.300514][ T8625] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  107.361646][ T8630] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.367604][ T8630] syzkaller0: entered promiscuous mode
[  107.369831][ T8630] syzkaller0: entered allmulticast mode
[  107.400255][ T8631] tipc: Resetting bearer <eth:syzkaller0>
[  107.409153][ T8631] tipc: Disabling bearer <eth:syzkaller0>
[  107.483734][ T8635] tipc: Enabling of bearer <dp:s> rejected, media not registered
[  107.599623][ T8609] tipc: Resetting bearer <eth:syzkaller0>
[  107.613661][ T8609] tipc: Disabling bearer <eth:syzkaller0>
[  107.713544][ T8655] netlink: 'syz.0.960': attribute type 83 has an invalid length.
[  107.824850][ T8670] netlink: 'syz.1.965': attribute type 1 has an invalid length.
[  107.839562][ T8670] bond0: entered promiscuous mode
[  107.841302][ T8670] bond0: entered allmulticast mode
[  107.864417][ T8670] bridge3: the hash_elasticity option has been deprecated and is always 16
[  107.907000][ T8676] openvswitch: netlink: Flow key attr not present in new flow.
[  107.998525][ T8683] Bluetooth: MGMT ver 1.23
[  108.027178][ T8687] netlink: 'syz.1.969': attribute type 4 has an invalid length.
[  108.036870][ T8687] vlan0: entered promiscuous mode
[  108.208977][ T8699] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.211411][ T8700] syzkaller0: entered promiscuous mode
[  108.213261][ T8700] syzkaller0: entered allmulticast mode
[  108.235519][ T8701] tipc: Resetting bearer <eth:syzkaller0>
[  108.242687][ T8698] tipc: Resetting bearer <eth:syzkaller0>
[  108.255671][ T8698] tipc: Disabling bearer <eth:syzkaller0>
[  108.306364][ T8705] wg1 speed is unknown, defaulting to 1000
[  108.309494][ T8705] lo speed is unknown, defaulting to 1000
[  108.313446][ T8705] lo speed is unknown, defaulting to 1000
[  108.339509][ T8707] team0: Device vti0 is of different type
[  108.434541][ T8711] netlink: 'syz.1.976': attribute type 5 has an invalid length.
[  108.490962][ T8711] wg1 speed is unknown, defaulting to 1000
[  108.493745][ T8711] lo speed is unknown, defaulting to 1000
[  108.496442][ T8711] lo speed is unknown, defaulting to 1000
[  108.567062][ T8718] netlink: 'syz.0.977': attribute type 13 has an invalid length.
[  108.642430][ T8718] net_ratelimit: 1 callbacks suppressed
[  108.642435][ T8718] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  108.724572][ T8730] netlink: 'syz.2.982': attribute type 1 has an invalid length.
[  108.732442][ T8730] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  108.737741][ T8728] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  108.776262][ T8740] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  108.782110][ T8738] IPVS: stopping backup sync thread 8740 ...
[  108.842557][ T8742] netlink: 'syz.2.985': attribute type 4 has an invalid length.
[  109.321198][ T8776] ip6gretap0: entered promiscuous mode
[  110.110608][ T8828] wg1 speed is unknown, defaulting to 1000
[  110.114624][ T8828] lo speed is unknown, defaulting to 1000
[  110.119460][ T8828] lo speed is unknown, defaulting to 1000
[  110.385991][ T5881] lo speed is unknown, defaulting to 1000
[  110.391743][ T8849] __nla_validate_parse: 33 callbacks suppressed
[  110.391754][ T8849] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1003'.
[  110.472504][ T8851] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[  110.821113][ T8873] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (255)
[  110.893601][ T8883] netlink: zone id is out of range
[  110.899956][ T8883] netlink: zone id is out of range
[  110.904138][ T8883] netlink: zone id is out of range
[  110.908531][ T8883] netlink: zone id is out of range
[  110.925575][ T8883] netlink: zone id is out of range
[  110.929071][ T8883] netlink: zone id is out of range
[  110.931082][ T8883] netlink: zone id is out of range
[  110.933045][ T8883] netlink: zone id is out of range
[  110.935540][ T8883] netlink: zone id is out of range
[  111.102493][ T8903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1011'.
[  111.109324][ T8889] validate_nla: 2 callbacks suppressed
[  111.109334][ T8889] netlink: 'syz.2.1009': attribute type 178 has an invalid length.
[  111.156823][ T8906] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1012'.
[  111.161483][ T8906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1012'.
[  111.169462][ T8906] batman_adv: batadv0: Adding interface: ipvlan3
[  111.171984][ T8906] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active
[  111.266891][ T8917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1016'.
[  111.343506][ T8915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1015'.
[  111.351912][ T8921] netlink: 'syz.2.1018': attribute type 10 has an invalid length.
[  111.355246][ T8921] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1018'.
[  111.376836][ T8921] geneve0: entered promiscuous mode
[  111.380161][ T8921] team0: Port device geneve0 added
[  111.466318][ T8928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1020'.
[  111.611333][ T8937] netlink: 'syz.1.1023': attribute type 4 has an invalid length.
[  111.614108][ T8937] netlink: 14345 bytes leftover after parsing attributes in process `syz.1.1023'.
[  111.637048][ T8942] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1025'.
[  111.670070][ T8949] syzkaller1: entered promiscuous mode
[  111.672831][ T8949] syzkaller1: entered allmulticast mode
[  111.780731][ T8954] geneve2: entered promiscuous mode
[  111.807359][ T8956] wg1 speed is unknown, defaulting to 1000
[  111.810343][ T8956] lo speed is unknown, defaulting to 1000
[  111.814389][ T8956] lo speed is unknown, defaulting to 1000
[  111.855318][ T8956] IPVS: Unknown mcast interface: veth0_virt_wifi
[  111.872501][   T24] IPVS: starting estimator thread 0...
[  111.967736][ T8965] IPVS: using max 41 ests per chain, 98400 per kthread
[  112.012593][ T8977] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.062591][ T8976] tipc: Disabling bearer <eth:syzkaller0>
[  112.133432][ T8987] wg1 speed is unknown, defaulting to 1000
[  112.136143][ T8987] lo speed is unknown, defaulting to 1000
[  112.139823][ T8987] lo speed is unknown, defaulting to 1000
[  112.202101][ T5826] Bluetooth: hci2: link tx timeout
[  112.204785][ T5826] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  112.210397][ T5818] Bluetooth: hci2: link tx timeout
[  112.212614][ T5818] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  112.403736][ T9006] smc: net device bond0 applied user defined pnetid SYZ2
[  112.459844][ T9006] macsec1: entered allmulticast mode
[  112.461738][ T9006] macsec0: entered allmulticast mode
[  112.463599][ T9006] veth1_macvtap: entered allmulticast mode
[  112.549045][   T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  112.573951][ T9014] netlink: 'syz.0.1047': attribute type 142 has an invalid length.
[  113.144151][ T9037] wg1 speed is unknown, defaulting to 1000
[  113.158076][ T9037] lo speed is unknown, defaulting to 1000
[  113.172697][ T9037] lo speed is unknown, defaulting to 1000
[  113.207151][ T9043] pimreg3: entered allmulticast mode
[  113.221355][   T54] Bluetooth: hci2: link tx timeout
[  113.223126][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  113.225794][   T54] Bluetooth: hci2: link tx timeout
[  113.228563][   T54] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  113.296526][ T9051] netlink: 'syz.2.1060': attribute type 1 has an invalid length.
[  113.346579][ T9051] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  113.354502][ T9051] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  113.383242][ T9055] geneve2: entered promiscuous mode
[  113.513546][ T9064] netlink: 'syz.2.1057': attribute type 30 has an invalid length.
[  113.516441][ T9064] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  113.521240][ T9064] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  113.721271][ T9074] wg1 speed is unknown, defaulting to 1000
[  113.725172][ T9074] lo speed is unknown, defaulting to 1000
[  113.729315][ T9074] lo speed is unknown, defaulting to 1000
[  114.227432][   T54] Bluetooth: hci2: command 0x0401 tx timeout
[  114.518350][ T9093] net_ratelimit: 108 callbacks suppressed
[  114.518372][ T9093] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  114.640996][ T9095] netlink: 'syz.2.1069': attribute type 1 has an invalid length.
[  114.644513][ T9095] netlink: 'syz.2.1069': attribute type 2 has an invalid length.
[  114.714802][ T9100] netlink: 'syz.2.1071': attribute type 7 has an invalid length.
[  114.717568][ T9100] netlink: 'syz.2.1071': attribute type 8 has an invalid length.
[  114.771526][ T9104] bridge4: the hash_elasticity option has been deprecated and is always 16
[  115.000265][ T9122] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  115.078766][ T9125] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  115.166499][ T9137] 8021q: adding VLAN 0 to HW filter on device bond3
[  115.290414][ T9141] TCP: TCP_TX_DELAY enabled
[  115.921030][ T9143] __nla_validate_parse: 28 callbacks suppressed
[  115.921041][ T9143] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1084'.
[  116.029971][ T9151] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1087'.
[  116.032895][ T9151] bond0: left promiscuous mode
[  116.035210][ T9151] bond0: left allmulticast mode
[  116.066691][ T9153] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  116.074333][ T9155] openvswitch: netlink: Unknown key attributes 2
[  116.182815][ T9164] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  116.182919][ T9162] validate_nla: 2 callbacks suppressed
[  116.182928][ T9162] netlink: 'syz.0.1098': attribute type 4 has an invalid length.
[  116.194667][ T1270] lo speed is unknown, defaulting to 1000
[  116.196651][ T1270] syz1: Port: 1 Link DOWN
[  116.206285][ T9162] netlink: 'syz.0.1098': attribute type 4 has an invalid length.
[  116.211565][   T24] lo speed is unknown, defaulting to 1000
[  116.213517][   T24] syz1: Port: 1 Link ACTIVE
[  116.214918][ T9162] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1098'.
[  116.220990][ T9166] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1094'.
[  116.231108][ T9166] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1094'.
[  116.264653][ T9166] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1094'.
[  116.275538][ T9166] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1094'.
[  116.319325][ T9166] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1094'.
[  116.322497][ T9166] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1094'.
[  117.095788][ T9191] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1096'.
[  117.162999][ T9203] openvswitch: netlink: Unknown key attributes 2
[  117.229843][ T9212] netlink: 'syz.2.1102': attribute type 4 has an invalid length.
[  117.251840][   T52] lo speed is unknown, defaulting to 1000
[  117.254295][   T52] syz2: Port: 1 Link DOWN
[  117.261142][ T9212] netlink: 'syz.2.1102': attribute type 4 has an invalid length.
[  117.276340][   T52] lo speed is unknown, defaulting to 1000
[  117.282441][   T52] syz2: Port: 1 Link ACTIVE
[  117.436914][ T9234] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  117.462579][ T9243] openvswitch: netlink: Unknown key attributes 2
[  117.547599][ T9249] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  117.606048][ T9249] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  117.674108][ T9258] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  117.676666][ T9258] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.788146][ T9275] netlink: 'syz.0.1117': attribute type 26 has an invalid length.
[  118.144173][ T1270] IPVS: starting estimator thread 0...
[  118.175928][ T9307] netlink: 'syz.1.1130': attribute type 4 has an invalid length.
[  118.184617][ T9307] netlink: 'syz.1.1130': attribute type 4 has an invalid length.
[  118.248034][ T9303] IPVS: using max 79 ests per chain, 189600 per kthread
[  118.372663][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.375352][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.972448][ T9345] veth5: entered promiscuous mode
[  118.982366][ T9345] bond0: (slave veth5): Enslaving as an active interface with a down link
[  119.020571][ T9350] netlink: 'syz.0.1137': attribute type 1 has an invalid length.
[  119.463812][ T9372] netlink: 'syz.1.1142': attribute type 4 has an invalid length.
[  119.471206][ T9372] netlink: 'syz.1.1142': attribute type 4 has an invalid length.
[  120.271007][ T9409] net_ratelimit: 5 callbacks suppressed
[  120.271018][ T9409] openvswitch: netlink: Unknown key attributes 2
[  120.324860][ T9414] wg1 speed is unknown, defaulting to 1000
[  120.338595][ T9414] lo speed is unknown, defaulting to 1000
[  120.341260][ T9414] lo speed is unknown, defaulting to 1000
[  120.654397][ T9442] bridge_slave_0: left allmulticast mode
[  120.656461][ T9442] bridge_slave_0: left promiscuous mode
[  120.660205][ T9442] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.665214][ T9442] bridge_slave_1: left allmulticast mode
[  120.670393][ T9442] bridge_slave_1: left promiscuous mode
[  120.673649][ T9442] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.680731][ T9442] bond0: (slave bond_slave_0): Releasing backup interface
[  120.684074][ T9442] bond_slave_0: left promiscuous mode
[  120.694805][ T9442] team0: Port device team_slave_0 removed
[  120.704325][ T9442] team0: Port device team_slave_1 removed
[  120.787940][ T9442] bond0: (slave veth5): Releasing backup interface
[  120.854231][ T9455] openvswitch: netlink: Unknown key attributes 2
[  120.981330][ T9466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  120.985297][ T9466] __nla_validate_parse: 14 callbacks suppressed
[  120.985305][ T9466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1167'.
[  120.994898][ T9466] hsr0: entered promiscuous mode
[  121.477193][ T9484] openvswitch: netlink: Unknown key attributes 2
[  121.505975][ T9488] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1174'.
[  121.605639][ T9497] validate_nla: 1 callbacks suppressed
[  121.605649][ T9497] netlink: 'syz.2.1176': attribute type 9 has an invalid length.
[  121.611145][ T9497] netlink: 'syz.2.1176': attribute type 6 has an invalid length.
[  121.738491][ T9502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1178'.
[  121.750532][ T9502] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  121.753665][ T9502] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  122.387542][   T54] Bluetooth: hci2: command 0x0401 tx timeout
[  122.390307][ T9518] openvswitch: netlink: Unknown key attributes 2
[  122.468890][ T9523] netlink: 'syz.2.1183': attribute type 83 has an invalid length.
[  122.589204][ T9527] netlink: 4112 bytes leftover after parsing attributes in process `syz.1.1185'.
[  122.592324][ T9527] openvswitch: netlink: Flow key attr not present in new flow.
[  122.621681][ T9529] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1186'.
[  122.914582][ T9541] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20001
[  122.953962][ T9545] openvswitch: netlink: Unknown key attributes 2
[  123.057449][ T9551] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  123.060384][ T9551] syzkaller0: entered promiscuous mode
[  123.062334][ T9551] syzkaller0: entered allmulticast mode
[  123.072409][ T9546] tipc: Resetting bearer <eth:syzkaller0>
[  123.083993][ T9546] tipc: Disabling bearer <eth:syzkaller0>
[  123.153427][ T9553] tun0: tun_chr_ioctl cmd 2147767520
[  123.300558][ T9560] netlink: 'syz.0.1195': attribute type 2 has an invalid length.
[  123.303175][ T9560] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1195'.
[  123.327715][ T9560] openvswitch: netlink: Unknown key attributes 2
[  123.379918][ T9557] wg1 speed is unknown, defaulting to 1000
[  123.382719][ T9557] lo speed is unknown, defaulting to 1000
[  123.385271][ T9557] lo speed is unknown, defaulting to 1000
[  123.403639][ T9563] bond0: entered promiscuous mode
[  123.405963][ T9563] batadv0: entered promiscuous mode
[  123.417482][ T9563] debugfs: 'hsr1' already exists in 'hsr'
[  123.419473][ T9563] Cannot create hsr debugfs directory
[  123.423747][ T9563] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  123.429918][ T9563] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  123.433394][ T9563] hsr1: entered allmulticast mode
[  123.435095][ T9563] bond0: entered allmulticast mode
[  123.436770][ T9563] batadv0: entered allmulticast mode
[  123.440326][ T9563] 8021q: adding VLAN 0 to HW filter on device hsr1
[  123.448413][ T9563] bond0: left promiscuous mode
[  123.453726][ T9563] batadv0: left promiscuous mode
[  123.476143][ T9577] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1198'.
[  123.540008][ T9587] openvswitch: netlink: Unknown key attributes 2
[  123.609924][ T9589] sctp: [Deprecated]: syz.1.1200 (pid 9589) Use of int in maxseg socket option.
[  123.609924][ T9589] Use struct sctp_assoc_value instead
[  123.653768][ T9601] wg1 speed is unknown, defaulting to 1000
[  123.656855][ T9601] lo speed is unknown, defaulting to 1000
[  123.660818][ T9601] lo speed is unknown, defaulting to 1000
[  123.714481][ T9607] openvswitch: netlink: Key type 4870 is out of range max 32
[  123.746307][ T9601] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1201'.
[  123.751699][ T9601] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1201'.
[  123.800797][ T9612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1206'.
[  123.888746][ T9618] vlan0: left promiscuous mode
[  123.895905][ T9618] macvtap1: left allmulticast mode
[  123.904109][ T9618] bridge2: left allmulticast mode
[  123.941975][ T9621] openvswitch: netlink: Unknown key attributes 2
[  124.022886][ T9625] sctp: [Deprecated]: syz.2.1211 (pid 9625) Use of int in maxseg socket option.
[  124.022886][ T9625] Use struct sctp_assoc_value instead
[  124.221467][ T9643] netlink: 'syz.2.1216': attribute type 3 has an invalid length.
[  124.230051][ T9643] siw: device registration error -23
[  124.238572][ T9643] 8021q: adding VLAN 0 to HW filter on device bond0
[  124.512967][ T9655] sctp: [Deprecated]: syz.0.1219 (pid 9655) Use of int in maxseg socket option.
[  124.512967][ T9655] Use struct sctp_assoc_value instead
[  124.668379][ T9668] nbd: nbd63 already in use
[  124.878495][ T9680] sctp: [Deprecated]: syz.0.1228 (pid 9680) Use of int in maxseg socket option.
[  124.878495][ T9680] Use struct sctp_assoc_value instead
[  124.961932][ T9692] syzkaller1: entered promiscuous mode
[  124.963959][ T9692] syzkaller1: entered allmulticast mode
[  125.062577][ T9696] netlink: 'syz.0.1231': attribute type 2 has an invalid length.
[  125.179704][ T9703] netlink: 'syz.1.1234': attribute type 4 has an invalid length.
[  125.233098][ T9706] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  125.320540][ T9713] net_ratelimit: 6 callbacks suppressed
[  125.320550][ T9713] openvswitch: netlink: Unknown key attributes 2
[  126.119040][ T9725] netlink: 'syz.0.1242': attribute type 13 has an invalid length.
[  126.124327][ T9727] openvswitch: netlink: Unknown key attributes 2
[  126.131559][ T9725] netlink: 'syz.0.1242': attribute type 17 has an invalid length.
[  126.153276][ T9725] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  126.193043][ T9742] openvswitch: netlink: Unknown key attributes 2
[  126.451367][ T9765] openvswitch: netlink: Unknown key attributes 2
[  126.463469][ T9765] __nla_validate_parse: 8 callbacks suppressed
[  126.463483][ T9765] netlink: 3696 bytes leftover after parsing attributes in process `syz.2.1252'.
[  126.469951][ T9765] netlink: 3696 bytes leftover after parsing attributes in process `syz.2.1252'.
[  127.141917][ T9776] openvswitch: netlink: Unknown key attributes 2
[  127.186413][ T9782] geneve3: entered promiscuous mode
[  127.199344][ T9784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1253'.
[  127.202614][ T9784] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  127.206494][ T9784] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.269956][ T9789] wg1 speed is unknown, defaulting to 1000
[  127.272719][ T9789] lo speed is unknown, defaulting to 1000
[  127.275833][ T9789] lo speed is unknown, defaulting to 1000
[  127.286461][ T9791] netlink: 'syz.0.1260': attribute type 32 has an invalid length.
[  127.293299][ T9791] syzkaller0: entered promiscuous mode
[  127.295156][ T9791] syzkaller0: entered allmulticast mode
[  127.302357][ T9791] tipc: Failed to remove unknown binding: 66,1,1/0:2340873090/2340873092
[  127.305869][ T9791] tipc: Failed to remove unknown binding: 66,1,1/0:2340873090/2340873092
[  127.311082][ T9791] sctp: [Deprecated]: syz.0.1260 (pid 9791) Use of int in maxseg socket option.
[  127.311082][ T9791] Use struct sctp_assoc_value instead
[  127.394270][ T9796] delete_channel: no stack
[  127.430687][ T9800] openvswitch: netlink: Flow actions attr not present in new flow.
[  127.491390][ T9809] openvswitch: netlink: Unknown key attributes 2
[  127.636978][ T9816] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1268'.
[  127.939319][ T9818] netlink: 'syz.1.1269': attribute type 7 has an invalid length.
[  127.942002][ T9818] netlink: 'syz.1.1269': attribute type 8 has an invalid length.
[  127.944742][ T9818] netlink: 'syz.1.1269': attribute type 4 has an invalid length.
[  127.948024][ T9818] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1269'.
[  128.386604][ T9837] netlink: 'syz.2.1277': attribute type 7 has an invalid length.
[  128.394571][ T9837] netlink: 'syz.2.1277': attribute type 8 has an invalid length.
[  128.400119][ T9837] netlink: 'syz.2.1277': attribute type 4 has an invalid length.
[  128.403526][ T9837] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1277'.
[  128.413630][ T9835] syzkaller0: entered promiscuous mode
[  128.416045][ T9835] syzkaller0: entered allmulticast mode
[  129.283998][ T9839] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  129.295881][ T9847] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1280'.
[  129.300037][ T9847] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1280'.
[  129.303850][ T9847] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1280'.
[  129.355241][ T9856] sctp: [Deprecated]: syz.2.1281 (pid 9856) Use of int in maxseg socket option.
[  129.355241][ T9856] Use struct sctp_assoc_value instead
[  129.432111][ T9868] netlink: 'syz.0.1285': attribute type 7 has an invalid length.
[  129.435186][ T9868] netlink: 'syz.0.1285': attribute type 8 has an invalid length.
[  129.438100][ T9868] netlink: 'syz.0.1285': attribute type 4 has an invalid length.
[  129.440759][ T9868] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1285'.
[  129.486506][ T9871] sctp: [Deprecated]: syz.2.1291 (pid 9871) Use of int in maxseg socket option.
[  129.486506][ T9871] Use struct sctp_assoc_value instead
[  129.549269][ T9884] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  129.553090][ T9884] syzkaller0: entered promiscuous mode
[  129.555041][ T9884] syzkaller0: entered allmulticast mode
[  129.581865][ T9884] tipc: Resetting bearer <eth:syzkaller0>
[  129.720054][ T9891] batman_adv: batadv0: Removing interface: ipvlan3
[  129.839054][ T9895] sctp: [Deprecated]: syz.1.1297 (pid 9895) Use of int in maxseg socket option.
[  129.839054][ T9895] Use struct sctp_assoc_value instead
[  130.065450][ T9923] sctp: [Deprecated]: syz.2.1308 (pid 9923) Use of int in maxseg socket option.
[  130.065450][ T9923] Use struct sctp_assoc_value instead
[  130.180340][ T9938] 8021q: adding VLAN 0 to HW filter on device bond1
[  130.217148][ T9948] 8021q: adding VLAN 0 to HW filter on device bond2
[  130.230974][ T9948] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  130.234668][ T9948] bond2: (slave macvlan3): Enslaving as a backup interface with a down link
[  130.283340][ T9952] sctp: [Deprecated]: syz.1.1318 (pid 9952) Use of int in maxseg socket option.
[  130.283340][ T9952] Use struct sctp_assoc_value instead
[  130.512440][ T9977] sctp: [Deprecated]: syz.1.1326 (pid 9977) Use of int in maxseg socket option.
[  130.512440][ T9977] Use struct sctp_assoc_value instead
[  130.539855][ T9984] net_ratelimit: 10 callbacks suppressed
[  130.539866][ T9984] openvswitch: netlink: Flow actions attr not present in new flow.
[  130.588850][   T52] tipc: Node number set to 2800691200
[  130.730044][T10013] openvswitch: netlink: Flow actions attr not present in new flow.
[  130.937369][T10035] openvswitch: netlink: Flow actions attr not present in new flow.
[  130.951373][T10037] openvswitch: netlink: Unknown key attributes 2
[  131.360898][T10059] openvswitch: netlink: Flow actions attr not present in new flow.
[  131.532978][T10074] openvswitch: netlink: Unknown key attributes 2
[  131.601529][T10081] openvswitch: netlink: Flow actions attr not present in new flow.
[  131.643443][T10085] __nla_validate_parse: 24 callbacks suppressed
[  131.643459][T10085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1363'.
[  131.762906][T10099] openvswitch: netlink: Unknown key attributes 2
[  131.850508][T10108] openvswitch: netlink: Flow actions attr not present in new flow.
[  131.885409][T10111] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1371'.
[  131.990636][T10124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1376'.
[  131.994023][T10122] openvswitch: netlink: Unknown key attributes 2
[  132.003367][T10124] vti0: entered promiscuous mode
[  132.037101][T10128] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1378'.
[  132.053009][T10127] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  132.059122][T10127] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  132.312154][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.314607][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.886965][T10145] validate_nla: 8 callbacks suppressed
[  132.886976][T10145] netlink: 'syz.0.1384': attribute type 29 has an invalid length.
[  132.894675][T10145] netlink: 'syz.0.1384': attribute type 29 has an invalid length.
[  132.906837][T10145] netlink: 508 bytes leftover after parsing attributes in process `syz.0.1384'.
[  132.911284][T10145] netlink: 'syz.0.1384': attribute type 29 has an invalid length.
[  133.001250][T10155] netlink: 'syz.1.1388': attribute type 1 has an invalid length.
[  133.004937][T10155] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1388'.
[  133.011365][T10156] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  133.069987][T10163] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1390'.
[  133.202470][T10176] netlink: 'syz.1.1394': attribute type 1 has an invalid length.
[  133.217949][T10176] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  133.972717][T10199] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1401'.
[  134.009317][T10205] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1403'.
[  134.844352][T10216] sctp: [Deprecated]: syz.2.1406 (pid 10216) Use of struct sctp_assoc_value in delayed_ack socket option.
[  134.844352][T10216] Use struct sctp_sack_info instead
[  134.968278][T10220] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1407'.
[  134.985766][T10220] netlink: 'syz.1.1407': attribute type 7 has an invalid length.
[  135.165278][T10232] netlink: 'syz.2.1412': attribute type 7 has an invalid length.
[  135.185072][T10232] : entered promiscuous mode
[  136.065468][T10254] net_ratelimit: 6 callbacks suppressed
[  136.065483][T10254] openvswitch: netlink: Flow actions attr not present in new flow.
[  136.075078][T10256] netlink: 'syz.2.1418': attribute type 1 has an invalid length.
[  136.191444][T10273] openvswitch: netlink: Unknown key attributes 2
[  136.251775][T10275] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.255222][T10275] syzkaller0: entered promiscuous mode
[  136.258429][T10275] syzkaller0: entered allmulticast mode
[  136.288520][T10275] tipc: Resetting bearer <eth:syzkaller0>
[  136.294342][T10274] tipc: Resetting bearer <eth:syzkaller0>
[  136.311011][T10274] tipc: Disabling bearer <eth:syzkaller0>
[  136.422305][T10294] openvswitch: netlink: Flow actions attr not present in new flow.
[  136.545607][T10292] syzkaller0: entered promiscuous mode
[  136.549638][T10292] syzkaller0: entered allmulticast mode
[  136.570650][T10306] raw_sendmsg: syz.2.1434 forgot to set AF_INET. Fix it!
[  136.651884][T10316] openvswitch: netlink: Unknown key attributes 2
[  137.563075][T10332] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  137.585065][T10334] openvswitch: netlink: Flow actions attr not present in new flow.
[  137.709969][T10345] openvswitch: netlink: Flow actions attr not present in new flow.
[  137.732110][T10347] openvswitch: netlink: Unknown key attributes 2
[  137.822155][T10358] netlink: 'syz.1.1452': attribute type 2 has an invalid length.
[  137.827565][T10358] netlink: 'syz.1.1452': attribute type 2 has an invalid length.
[  137.891546][T10366] openvswitch: netlink: Flow actions attr not present in new flow.
[  137.924555][T10372] openvswitch: netlink: Unknown key attributes 2
[  137.959401][T10376] __nla_validate_parse: 6 callbacks suppressed
[  137.959415][T10376] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1458'.
[  137.980086][T10376] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1458'.
[  138.030949][T10382] validate_nla: 2 callbacks suppressed
[  138.030963][T10382] netlink: 'syz.1.1459': attribute type 1 has an invalid length.
[  138.062892][T10382] bond3: entered promiscuous mode
[  138.065127][T10382] bond3: entered allmulticast mode
[  138.075567][T10382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1459'.
[  138.088402][T10382] bridge7: the hash_elasticity option has been deprecated and is always 16
[  138.181841][T10390] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  138.185607][T10392] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1463'.
[  138.189868][T10389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1462'.
[  138.257694][T10395] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1464'.
[  138.315712][T10399] openvswitch: netlink: Flow actions attr not present in new flow.
[  138.545271][T10410] netlink: 'syz.2.1469': attribute type 1 has an invalid length.
[  138.570732][T10410] bond6: entered promiscuous mode
[  138.572984][T10410] bond6: entered allmulticast mode
[  138.583616][T10414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  138.591254][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1469'.
[  138.613128][T10410] bridge5: the hash_elasticity option has been deprecated and is always 16
[  138.721905][T10419] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1472'.
[  138.725849][T10419] netlink: 'syz.2.1472': attribute type 1 has an invalid length.
[  138.893600][T10419] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1472'.
[  139.178724][T10426] netlink: 'syz.1.1474': attribute type 9 has an invalid length.
[  139.212046][T10428] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6
[  139.313215][T10439] netlink: 'syz.0.1480': attribute type 1 has an invalid length.
[  139.336129][T10439] bond4: entered promiscuous mode
[  139.338703][T10439] bond4: entered allmulticast mode
[  139.359427][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1480'.
[  139.367021][T10439] bridge5: the hash_elasticity option has been deprecated and is always 16
[  139.702372][T10466] netlink: 'syz.2.1490': attribute type 1 has an invalid length.
[  139.735216][T10466] bond7: entered promiscuous mode
[  139.737597][T10466] bond7: entered allmulticast mode
[  139.884180][T10466] bridge6: the hash_elasticity option has been deprecated and is always 16
[  140.672447][T10491] netlink: 'syz.1.1498': attribute type 1 has an invalid length.
[  140.701660][T10491] bond4: entered promiscuous mode
[  140.703991][T10491] 8021q: adding VLAN 0 to HW filter on device bond4
[  141.454013][T10508] netlink: 'syz.0.1509': attribute type 11 has an invalid length.
[  141.591616][T10525] net_ratelimit: 7 callbacks suppressed
[  141.591632][T10525] openvswitch: netlink: Flow actions attr not present in new flow.
[  141.634485][T10531] openvswitch: netlink: Unknown key attributes 2
[  142.278121][T10509] ==================================================================
[  142.281369][T10509] BUG: KASAN: slab-use-after-free in rose_transmit_link+0x5c3/0x740
[  142.284186][T10509] Read of size 1 at addr ffff8881137cf032 by task syz.2.1502/10509
[  142.287873][T10509] 
[  142.288701][T10509] CPU: 1 UID: 0 PID: 10509 Comm: syz.2.1502 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10-dirty #0 PREEMPT(full) 
[  142.288713][T10509] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  142.288719][T10509] Call Trace:
[  142.288723][T10509]  <TASK>
[  142.288728][T10509]  dump_stack_lvl+0x189/0x250
[  142.288738][T10509]  ? __virt_addr_valid+0x1c8/0x5c0
[  142.288747][T10509]  ? rcu_is_watching+0x15/0xb0
[  142.288759][T10509]  ? __kasan_check_byte+0x12/0x40
[  142.288770][T10509]  ? __pfx_dump_stack_lvl+0x10/0x10
[  142.288777][T10509]  ? rcu_is_watching+0x15/0xb0
[  142.288787][T10509]  ? lock_release+0x4b/0x3e0
[  142.288798][T10509]  ? __virt_addr_valid+0x1c8/0x5c0
[  142.288807][T10509]  ? __virt_addr_valid+0x4a5/0x5c0
[  142.288815][T10509]  print_report+0xca/0x240
[  142.288825][T10509]  ? rose_transmit_link+0x5c3/0x740
[  142.288832][T10509]  kasan_report+0x118/0x150
[  142.288842][T10509]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  142.288853][T10509]  ? rose_transmit_link+0x5c3/0x740
[  142.288861][T10509]  rose_transmit_link+0x5c3/0x740
[  142.288868][T10509]  ? skb_put+0x11b/0x210
[  142.288875][T10509]  rose_write_internal+0x11dc/0x1ac0
[  142.288887][T10509]  ? __pfx_rose_write_internal+0x10/0x10
[  142.288896][T10509]  ? __timer_delete+0x5d/0x390
[  142.288906][T10509]  rose_release+0x24e/0x520
[  142.288917][T10509]  sock_close+0xc3/0x240
[  142.288926][T10509]  ? __pfx_sock_close+0x10/0x10
[  142.288934][T10509]  __fput+0x44c/0xa70
[  142.288944][T10509]  task_work_run+0x1d4/0x260
[  142.288954][T10509]  ? __pfx_task_work_run+0x10/0x10
[  142.288963][T10509]  ? task_work_add+0x377/0x420
[  142.288971][T10509]  ? __pfx_task_work_add+0x10/0x10
[  142.288979][T10509]  get_signal+0x11ed/0x1340
[  142.288993][T10509]  arch_do_signal_or_restart+0x9a/0x750
[  142.289003][T10509]  ? __pfx___sys_connect+0x10/0x10
[  142.289013][T10509]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  142.289025][T10509]  ? exit_to_user_mode_loop+0x40/0x110
[  142.289034][T10509]  exit_to_user_mode_loop+0x75/0x110
[  142.289043][T10509]  do_syscall_64+0x2bd/0x3b0
[  142.289060][T10509]  ? lockdep_hardirqs_on+0x9c/0x150
[  142.289069][T10509]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.289076][T10509]  ? exc_page_fault+0x9f/0xf0
[  142.289085][T10509]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.289092][T10509] RIP: 0033:0x7f34ba98eb69
[  142.289101][T10509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  142.289107][T10509] RSP: 002b:00007f34bb715038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  142.289117][T10509] RAX: fffffffffffffe00 RBX: 00007f34babb5fa0 RCX: 00007f34ba98eb69
[  142.289123][T10509] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000010
[  142.289128][T10509] RBP: 00007f34baa11df1 R08: 0000000000000000 R09: 0000000000000000
[  142.289132][T10509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  142.289137][T10509] R13: 0000000000000000 R14: 00007f34babb5fa0 R15: 00007ffd863221f8
[  142.289145][T10509]  </TASK>
[  142.289147][T10509] 
[  142.400520][T10509] Allocated by task 10398:
[  142.402197][T10509]  kasan_save_track+0x3e/0x80
[  142.403815][T10509]  __kasan_kmalloc+0x93/0xb0
[  142.405385][T10509]  __kmalloc_cache_noprof+0x230/0x3d0
[  142.407201][T10509]  rose_add_node+0x23a/0xde0
[  142.408774][T10509]  rose_rt_ioctl+0xa48/0xfb0
[  142.410330][T10509]  rose_ioctl+0x3ce/0x8b0
[  142.411803][T10509]  sock_do_ioctl+0xdc/0x300
[  142.413332][T10509]  sock_ioctl+0x576/0x790
[  142.414793][T10509]  __se_sys_ioctl+0xfc/0x170
[  142.416350][T10509]  do_syscall_64+0xfa/0x3b0
[  142.417885][T10509]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.420295][T10509] 
[  142.421312][T10509] Freed by task 10535:
[  142.422905][T10509]  kasan_save_track+0x3e/0x80
[  142.424520][T10509]  kasan_save_free_info+0x46/0x50
[  142.426199][T10509]  __kasan_slab_free+0x62/0x70
[  142.427784][T10509]  kfree+0x18e/0x440
[  142.429143][T10509]  rose_rt_device_down+0x473/0x4c0
[  142.430844][T10509]  rose_device_event+0x603/0x6a0
[  142.432492][T10509]  notifier_call_chain+0x1b6/0x3e0
[  142.434191][T10509]  __dev_notify_flags+0x18d/0x2e0
[  142.435817][T10509]  netif_change_flags+0xe8/0x1a0
[  142.437446][T10509]  dev_change_flags+0x130/0x260
[  142.439099][T10509]  dev_ioctl+0x7b4/0x1150
[  142.440500][T10509]  sock_do_ioctl+0x22c/0x300
[  142.441992][T10509]  sock_ioctl+0x576/0x790
[  142.443476][T10509]  __se_sys_ioctl+0xfc/0x170
[  142.445043][T10509]  do_syscall_64+0xfa/0x3b0
[  142.446513][T10509]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.448435][T10509] 
[  142.449249][T10509] The buggy address belongs to the object at ffff8881137cf000
[  142.449249][T10509]  which belongs to the cache kmalloc-512 of size 512
[  142.453737][T10509] The buggy address is located 50 bytes inside of
[  142.453737][T10509]  freed 512-byte region [ffff8881137cf000, ffff8881137cf200)
[  142.458027][T10509] 
[  142.458805][T10509] The buggy address belongs to the physical page:
[  142.460840][T10509] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8881137cfc00 pfn:0x1137cc
[  142.464152][T10509] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  142.466905][T10509] flags: 0x57ff00000000240(workingset|head|node=1|zone=2|lastcpupid=0x7ff)
[  142.469785][T10509] page_type: f5(slab)
[  142.471272][T10509] raw: 057ff00000000240 ffff88801a441c80 ffff8881000007c8 ffffea0004265b10
[  142.474434][T10509] raw: ffff8881137cfc00 000000000010000e 00000000f5000000 0000000000000000
[  142.477739][T10509] head: 057ff00000000240 ffff88801a441c80 ffff8881000007c8 ffffea0004265b10
[  142.480985][T10509] head: ffff8881137cfc00 000000000010000e 00000000f5000000 0000000000000000
[  142.484114][T10509] head: 057ff00000000002 ffffea00044df301 00000000ffffffff 00000000ffffffff
[  142.486957][T10509] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  142.489814][T10509] page dumped because: kasan: bad access detected
[  142.491936][T10509] page_owner tracks the page as allocated
[  142.493819][T10509] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10206, tgid 10190 (syz.0.1398), ts 134104963771, free_ts 121267470905
[  142.500796][T10509]  post_alloc_hook+0x240/0x2a0
[  142.502406][T10509]  get_page_from_freelist+0x21e4/0x22c0
[  142.504367][T10509]  __alloc_frozen_pages_noprof+0x181/0x370
[  142.506266][T10509]  alloc_pages_mpol+0x232/0x4a0
[  142.507842][T10509]  allocate_slab+0x8a/0x3b0
[  142.509308][T10509]  ___slab_alloc+0xbfc/0x1480
[  142.510802][T10509]  __kmalloc_noprof+0x305/0x4f0
[  142.512358][T10509]  copy_splice_read+0x143/0x9b0
[  142.513998][T10509]  splice_direct_to_actor+0x4d0/0xcc0
[  142.515795][T10509]  do_splice_direct+0x181/0x270
[  142.517400][T10509]  do_sendfile+0x4da/0x7e0
[  142.518838][T10509]  __se_sys_sendfile64+0x13e/0x190
[  142.520508][T10509]  do_syscall_64+0xfa/0x3b0
[  142.522056][T10509]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.524022][T10509] page last free pid 9476 tgid 9475 stack trace:
[  142.526114][T10509]  __free_frozen_pages+0xc71/0xe70
[  142.527827][T10509]  rcu_core+0xca8/0x1710
[  142.529410][T10509]  handle_softirqs+0x286/0x870
[  142.531133][T10509]  __irq_exit_rcu+0xca/0x1f0
[  142.532861][T10509]  irq_exit_rcu+0x9/0x30
[  142.534281][T10509]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  142.536150][T10509]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  142.538145][T10509] 
[  142.538973][T10509] Memory state around the buggy address:
[  142.540837][T10509]  ffff8881137cef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  142.543531][T10509]  ffff8881137cef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  142.546109][T10509] >ffff8881137cf000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  142.548757][T10509]                                      ^
[  142.550584][T10509]  ffff8881137cf080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  142.553327][T10509]  ffff8881137cf100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  142.555844][T10509] ==================================================================
[  142.559742][T10509] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  142.562140][T10509] CPU: 1 UID: 0 PID: 10509 Comm: syz.2.1502 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10-dirty #0 PREEMPT(full) 
[  142.566004][T10509] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  142.569283][T10509] Call Trace:
[  142.570437][T10509]  <TASK>
[  142.571455][T10509]  dump_stack_lvl+0x99/0x250
[  142.573015][T10509]  ? __asan_memcpy+0x40/0x70
[  142.574608][T10509]  ? __pfx_dump_stack_lvl+0x10/0x10
[  142.576366][T10509]  ? __pfx__printk+0x10/0x10
[  142.577905][T10509]  panic+0x2db/0x790
[  142.579174][T10509]  ? __pfx_preempt_schedule+0x10/0x10
[  142.581006][T10509]  ? __pfx_panic+0x10/0x10
[  142.582501][T10509]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  142.584511][T10509]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  142.586635][T10509]  ? rose_transmit_link+0x5c3/0x740
[  142.588372][T10509]  check_panic_on_warn+0x89/0xb0
[  142.590043][T10509]  ? rose_transmit_link+0x5c3/0x740
[  142.591813][T10509]  end_report+0x78/0x160
[  142.593252][T10509]  kasan_report+0x129/0x150
[  142.594750][T10509]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  142.596734][T10509]  ? rose_transmit_link+0x5c3/0x740
[  142.598452][T10509]  rose_transmit_link+0x5c3/0x740
[  142.600115][T10509]  ? skb_put+0x11b/0x210
[  142.601607][T10509]  rose_write_internal+0x11dc/0x1ac0
[  142.603374][T10509]  ? __pfx_rose_write_internal+0x10/0x10
[  142.605261][T10509]  ? __timer_delete+0x5d/0x390
[  142.606908][T10509]  rose_release+0x24e/0x520
[  142.608397][T10509]  sock_close+0xc3/0x240
[  142.609799][T10509]  ? __pfx_sock_close+0x10/0x10
[  142.611398][T10509]  __fput+0x44c/0xa70
[  142.612734][T10509]  task_work_run+0x1d4/0x260
[  142.614262][T10509]  ? __pfx_task_work_run+0x10/0x10
[  142.615939][T10509]  ? task_work_add+0x377/0x420
[  142.617514][T10509]  ? __pfx_task_work_add+0x10/0x10
[  142.619183][T10509]  get_signal+0x11ed/0x1340
[  142.620743][T10509]  arch_do_signal_or_restart+0x9a/0x750
[  142.622534][T10509]  ? __pfx___sys_connect+0x10/0x10
[  142.624202][T10509]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  142.626226][T10509]  ? exit_to_user_mode_loop+0x40/0x110
[  142.628040][T10509]  exit_to_user_mode_loop+0x75/0x110
[  142.629730][T10509]  do_syscall_64+0x2bd/0x3b0
[  142.631264][T10509]  ? lockdep_hardirqs_on+0x9c/0x150
[  142.633004][T10509]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.634978][T10509]  ? exc_page_fault+0x9f/0xf0
[  142.636513][T10509]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  142.638416][T10509] RIP: 0033:0x7f34ba98eb69
[  142.639897][T10509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  142.646062][T10509] RSP: 002b:00007f34bb715038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  142.648787][T10509] RAX: fffffffffffffe00 RBX: 00007f34babb5fa0 RCX: 00007f34ba98eb69
[  142.651360][T10509] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000010
[  142.653975][T10509] RBP: 00007f34baa11df1 R08: 0000000000000000 R09: 0000000000000000
[  142.656606][T10509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  142.659277][T10509] R13: 0000000000000000 R14: 00007f34babb5fa0 R15: 00007ffd863221f8
[  142.661983][T10509]  </TASK>
[  142.663923][T10509] Kernel Offset: disabled
[  142.665477][T10509] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:40:52  Registers:
info registers vcpu 0

CPU#0
RAX=79a379424caa4d00 RBX=ffffffff81969b18 RCX=79a379424caa4d00 RDX=0000000000000001
RSI=ffffffff8d979309 RDI=ffffffff8be30a00 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa07cf0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a18
RIP=ffffffff8b6fd4f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2f808ff8 CR3=0000000033a16000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 306974765f367069
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 29636972656e6567
XMM04=00007f1a39eed100 00007f1a39387460 XMM05=00007f1a39387478 00007f1a393874c0
XMM06=00007f1a393874b8 00007f1a393874b0 XMM07=00007f1a393874a8 00007f1a393874a0
XMM08=0505c3e69018551a c5bc882b8f22691c XMM09=0000000000000000 00007f1a39212f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000074 RBX=0000000000000074 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000106c RDI=000000000000106d RBP=00000000000003f8 RSP=ffffc90002c8f210
R8 =ffff888107b40237 R9 =1ffff11020f68046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a95923 R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f34bb7156c0 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffffb3b1fa8 CR3=000000010e900000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f1a39212e17
XMM06=0000000000000000 00007f1a39212e11 XMM07=0000000000000000 00007f1a39212e25
XMM08=0000000000000000 00007f1a39212eab XMM09=0000000000000000 00007f1a39212f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
