last executing test programs:

1.438640602s ago: executing program 1 (id=1342):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000150001030000000000008eeb18ba0000d438655ff2b44b17d09f67921a9e89ae992853c0400c7f61d8dbd97b5778296d98bed5edc8006b24"], 0x14}}, 0x0) (async, rerun: 32)
r2 = socket(0x10, 0x1, 0x0) (rerun: 32)
sendmsg$nl_generic(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4000055) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="980000000102010800000000000000000a000000840001802c0001801400030000000000000000000000ffffac1e000114000400fc0200000000000000000000000000000c00028005000100000000001400018008000100ffffffff080002000a0101022c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000000600034000040000"], 0x98}}, 0x0) (async)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) (async, rerun: 32)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async, rerun: 32)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "0000004afffffff8", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", '\x00', "89b46aff130000fd"}, 0x38) (async)
socket$netlink(0x10, 0x3, 0x0)
bind$l2tp(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local, 0x2}, 0x10) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
getsockopt$bt_hci(r5, 0x0, 0x2, &(0x7f00000001c0), &(0x7f0000001240))
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x402000, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', <r7=>0x0}) (async)
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) (async)
sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYRES16=r1, @ANYRES8=r4, @ANYRESOCT=r7, @ANYBLOB="d9ef529b9c15cd4990e92310aa040347478a5365d9db1e800b8095e1c3fae16d41962ff5aaf65641554e0a658e5217a16f44d7aa7bad3ab5b27c21b8495c5c8de3aece9e5cfe9e94bbbf3c1ada3fb38d50206111211cf79030bee095a827c84d2e44f482a7639332483ae0b1aabf4fee5f494c9cdc639f1f90afd1b7ab1a4e5b0bfbf6f025edcd9ae6f02d35818d2d5ce18d6e8ba6813b563369cf5d7e1d366c6361680e3f58092b036b6b", @ANYRESHEX=r8], 0x26}, 0x1, 0x0, 0x0, 0x1}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'ip6gre0\x00', 0xc201}) (async)
socket(0x3, 0x803, 0x0) (async)
r9 = socket(0x2a, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000000380)={'ip6_vti0\x00', 0x0}) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'sit0\x00', &(0x7f00000007c0)={'erspan0\x00', r7, 0x80, 0x8, 0x5, 0x400, {{0x3b, 0x4, 0x0, 0x2b, 0xec, 0x66, 0x0, 0xfc, 0x2f, 0x0, @loopback, @multicast1, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x44, 0xfa, 0x3, 0x6, [{@local, 0xffffff7c}, {@local, 0x7d}, {@rand_addr=0x64010100}, {@rand_addr=0x64010100}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x5}, {@remote, 0x9}, {@loopback, 0x7}, {@private=0xa010101, 0xff}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0x4a, [@broadcast, @empty, @remote, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x2c, 0x5, 0x1, 0x4, [{@multicast1, 0x80}, {@local, 0x7fff}, {@rand_addr=0x64010101, 0x14e8}, {@remote, 0x5}, {@broadcast, 0xf2d}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x1f, 0x8d, [@remote, @multicast1, @local, @multicast2, @local, @multicast1, @private=0xa010100]}, @cipso={0x86, 0x29, 0x2, [{0x5, 0xe, "1ec6e3bf2bb4c9e831a0cfe1"}, {0x1, 0x3, "9c"}, {0x6, 0x5, "4c539c"}, {0x2, 0xd, "5ef9439a9a1a10b765bdda"}]}]}}}}}) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
connect$vsock_stream(r2, &(0x7f0000000340)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

1.437562114s ago: executing program 1 (id=1343):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000000))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r4 = socket$kcm(0x29, 0x7, 0x0)
sendmsg$kcm(r4, &(0x7f0000003a00)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000240)="a1f305056ab65b58b77099556b459894be6f", 0x12}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="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", 0x1000}, {&(0x7f0000002280)="f202df0e6339fa3d6305b64c98cddff7d74ea20bc1e14e4eb0d9b833178e808c7590d56f273071c45caf697b", 0x2c}, {&(0x7f00000022c0)="f800143f7f9cf500b454578b0808177dca5fcc025dfc3d55d342abc129ac8544c015b099aeae3622f02023e4340f03b2fa02e634d5cabd3e597578274f177569ac63b9ebb435b94258556483a3e5fe919da9855c2cc73f34d085d81e4460eee602e633ecd6417f2b9cec5045236d760d86103bbf270f8ea837127f6abba9514b67dc76b8e778069ef3a68019d46fd0339857c361e527bdbbea6ae59448ed15ededb23f843c1461f1c588be2355e50887cb48fd80b0", 0xb5}, {&(0x7f0000002380)="2f0b6fb2c1906a4422f7be3a960dc4271260", 0x12}, {&(0x7f00000023c0)="49f2461395d8c4059681844550172984ab3724665500bfc957befae6b2a6b8efa96bc849eb53fbbf99bfafc293a00c615952e1725e61e3d3cdd95d25b24939df", 0x40}, {&(0x7f0000002400)="1f50a6080b96f1e04f19dd722018fb326c9dbb11423b72ebfccd4910963c7a8577838d815f90af37e0436ebe3cd74e3cf088b05852067b09d97115c87b6914defcfd3e7885052259e962f992e2fc2b02d099150871cf7b680757520677b1cde477096d28bad0abd1c0a006adeb278792224a30603b22a51f9b47573856f22189a9fda50ab740a9718042ed38cdbe305ac0b80e79b0ab79f16b66c82157dcceaa532d1cb2b4d6336d63e1540c5edebf8ce43a3fbe267eba5dd61a4834a45e80fc", 0xc0}, {&(0x7f00000024c0)="ec2217b7f54a296d83ca9a83c64edf6e07109b076d5649fc020a4a551859be1b7dd9c73fa5e5ed217de47980b6fb42506bcdbf6b1cadc15850602138fe5a6ec54322383f531f0256d80bcc7f6ef5b26eeb3e7ed06b786f79bb9bd62428256f7cca757b36b04e018395a9641b725dc625994340defde7bafba2d6ca58dbb1815d1f808378406688da91f0761f0dde113dbd147b06d7ad40ee029bfa79f5629d9c7304ae254faab3197bb3fdf58efa28a21cd6f0f29cf2e3843abdefd98195087f062af860ff95146ea650cc", 0xcb}], 0x9, &(0x7f0000002680)=[{0x30, 0x29, 0x7, "cc4fce0445153a40f0df497743840d8145c3d1908719f3f43301d059b3"}, {0xc8, 0x115, 0x4, "27f16f568403ddf5a9e7d9f68ab36428b5aa9bca4342f29acd1c1d1240542ece57f1d83bdd44f01f3742cb984357923ab8042ea3117662ed004cfff8c30110ded19b281d7319e0ca655af619a95c51e76051b3dd899622fe129203ce777482bf0216bb9098fe66d2fa8b7e262f462133761c62f5ba733f142d645eb0c2e43203f0a09188c65dfb29acca39136431ed5ae09df2afc1b9584c373e5e851a4854065b56f08bb30e1b962de6921eaedfae7799211cf4"}, {0x18, 0x102, 0x0, "ac"}, {0x1010, 0x110, 0x10, "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"}, {0xc8, 0x109, 0x7fff, "401359e40746271205f202704a44719c05b25881f2ca13a360b5900ef2caefa887a334c3732a91d3fadfbfa98d82247536f3fef5a1cd0700f46c8c363d83dc3b4a55bde889cf3f20b4ff6edfebaa12ba7046f0172cbad22bcf72951986d6548cc0e83fe892a9baddfca5285b7864a1f1284440ca2ca5a5e9ebf5665cce73bbee87b97edf5ef4391905a4b143a4c6d5ca7ddd12f13413daea81da7c52c8416d31084f47679aa26268dc30a6eacaca1687f693564a58"}, {0x60, 0x103, 0x3, "b768e8c000cc5299bb4ea25a6c259be94a39592263e6baeb6bea45708046c0fc6251838dc5400306c6cfaa61b8ecc252f18d54d73235ebdf23133f4a6bd6d49df86565fd8af823bd51dae1"}, {0x98, 0x108, 0x16f3, "5435093d7dfc62e3979004c5d8666d52bcd66e2f3a88055cd5dce5de622e831b376db5d9bcacd666e58627c3fcaeb4336675ada0522b2070e0561eb92f5581d7f54e68874d34daf4bc292d485e40b0c5652b281b8486fd670148099bfc2adbc028d9ae2b8337715f921842c61571884ec0706c545997faff33dec651418289f886f7"}, {0x68, 0x29, 0x20a, "c4f7cccb7425d1081530cb9a19aaeb8af2785b34c7585ee7dc89e2528fe33dc2bfc5e6854cdae9d4437806cc1210397733203023e92c360e84712966e43b8d112c87523c4b16f4faf7284a56231f6203b2b2739bc4"}], 0x1348}, 0x20000000)
bind$bt_l2cap(r0, &(0x7f0000003a40)={0x1f, 0x9, @any, 0x9a, 0x1}, 0xe)
syz_genetlink_get_family_id$devlink(&(0x7f0000003a80), r1)
ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000003ac0)={0xd5, 0x8, 0x1, 0x8, 0x1, [0x2, 0xe9, 0x1, 0x80]})
r5 = accept(r1, 0x0, &(0x7f0000003b00))
ioctl$int_out(r5, 0x2, &(0x7f0000003b40))
r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000003b80)='syz0\x00', 0x200002, 0x0)
r7 = openat$cgroup_freezer_state(r6, &(0x7f0000003bc0), 0x2, 0x0)
getpeername$netlink(r5, &(0x7f0000003c00), &(0x7f0000003c40)=0xc)
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
recvmsg$can_j1939(r8, &(0x7f0000003e40)={&(0x7f0000003c80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000003d00)=""/173, 0xad}], 0x1, &(0x7f0000003e00)=""/16, 0x10}, 0x40000000)
ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000003ec0)={0x0, @tipc=@id={0x1e, 0x3, 0x0, {0x4e23, 0x1}}, @tipc=@name={0x1e, 0x2, 0x0, {{0xa9c30705adeab2ae, 0x3}, 0x4}}, @can={0x1d, <r9=>0x0}, 0x5, 0x0, 0x0, 0x0, 0xcd1, &(0x7f0000003e80)='dvmrp1\x00', 0x0, 0x401, 0x3})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000003f80)={'batadv_slave_1\x00', <r10=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f00000040c0)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000004080)={&(0x7f0000003fc0)={0x9c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000000)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, 0x10, r7, 0xc17f3000)
r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000004140), r5)
sendmsg$GTP_CMD_ECHOREQ(r5, &(0x7f0000004240)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000004200)={&(0x7f0000004180)={0x60, r11, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010101}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_MS_ADDR6={0x14, 0xc, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0xb}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x200080c0}, 0x8c5)
r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000042c0), r1)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f00000045c0)={&(0x7f0000004280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004580)={&(0x7f0000004300)={0x254, r12, 0x711, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x4001}, 0x40000)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000004600)={'vcan0\x00'})
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000004680)=@add_del={0x2, &(0x7f0000004640)='bridge0\x00'})
setsockopt$inet_tcp_int(r5, 0x6, 0x8, &(0x7f00000046c0)=0xffff, 0x4)

1.350159593s ago: executing program 1 (id=1344):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x18}}, 0x2000)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[@ANYBLOB="d4000000010901040000000000000000000000000900010073797a31000000000900010073797a310000000008000340000000000c00048008000140000000000c00048008000140000000070800054000000000740002001400018008000100ffffffff08000200ac1414bb0c0002"], 0xd4}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@ipv4_delrule={0x2c, 0x21, 0x1, 0x200, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, [@FRA_SRC={0x8, 0x2, @local}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0xf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
shutdown(r0, 0x0)

1.22577999s ago: executing program 1 (id=1346):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x4)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x18}}, 0x2000)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @remote}}, 0x7, 0x1ff, 0x9, 0x6fa, 0x61, 0x5, 0x8}, 0x9c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, '\x00\b\x00', "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="5800000002060104000000000d000000000000000c000780080012400000000c0500010006000000050005000a0000000500040000ca0bc778f26a87935df078dfbc96460000000900020073797a310000669014000300686173683a69702c706f72742c697000"], 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
shutdown(r0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@deltclass={0x4d8, 0x29, 0x0, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xfff1, 0x3}, {0xe, 0xd}, {0xc, 0x4}}, [@tclass_kind_options=@c_htb={{0x8}, {0x4ac, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0x0, 0x514d1d38, 0x40, 0xffff81fc, 0xfff, 0x7fff, 0x0, 0x8001, 0x13, 0x6d2, 0x4, 0x2, 0x7, 0x3, 0x5, 0x0, 0x6, 0x9, 0x5, 0x3, 0x5, 0x1, 0x25de, 0x2, 0x4, 0x81, 0x0, 0x4, 0x2, 0x4, 0xfffffff7, 0x1, 0x0, 0x1, 0x1ff, 0x9, 0x2, 0xeb0, 0x400, 0x1000, 0x0, 0xffffffff, 0x6, 0x63, 0x3, 0x48, 0x80000001, 0x0, 0x4000ffff, 0x2, 0x7fff, 0x3, 0x1, 0x2, 0x0, 0x1, 0x40000000, 0x11e65e00, 0x81, 0x80000001, 0x10000, 0x3, 0x4, 0xd13, 0x5, 0x5, 0xfffffffe, 0xfffffff7, 0x7, 0x9, 0x1, 0x3, 0x1000, 0x40, 0x80000b2, 0x6, 0x100, 0x2, 0x4, 0x1, 0x0, 0x9, 0x5, 0x6c9, 0xdfe, 0x3, 0x8, 0x8, 0x7, 0x1, 0x3ff, 0x3, 0x40, 0x7, 0x8, 0x7, 0x9, 0x3ff, 0x0, 0x9, 0x8, 0x10000, 0x7, 0x80, 0x8, 0x81, 0x43b50bfc, 0x6, 0x5, 0x9, 0x3, 0xff, 0x2, 0x10000, 0x1, 0xfffffffa, 0x80, 0x0, 0xec, 0x7f, 0x9, 0xd, 0xb825, 0x80000000, 0x9, 0x4, 0x5, 0x3, 0x93, 0x9, 0x3, 0x0, 0x5, 0x4ff, 0x2, 0x8, 0x2, 0x2, 0x0, 0x7, 0x7ff, 0xe, 0x40, 0x0, 0xc1, 0x2, 0x3, 0x115, 0x60, 0xa1, 0x2, 0x2, 0x5, 0x7f, 0x101, 0xb3f3, 0x0, 0x400, 0x9, 0x7fff, 0x70, 0x7, 0x8, 0x7, 0x10000, 0x2, 0x3, 0x9, 0x7, 0x3, 0xfffffc00, 0x8, 0x2, 0x9, 0x0, 0x6, 0x5, 0x5, 0x9, 0x0, 0x9, 0x4, 0x3, 0x2, 0x8, 0x40, 0x7, 0xff, 0xb, 0x74, 0x604c72b4, 0x6, 0x6, 0xffff, 0x0, 0x0, 0x2, 0x2, 0x4, 0x8, 0x6, 0x7fff, 0x1, 0x2, 0xfab, 0x2, 0x7, 0x1001, 0xfffffff9, 0x90, 0xb, 0x8, 0x4, 0x4, 0x5, 0x3, 0x1, 0x1, 0x8, 0x3, 0x7d2d27fc, 0x536cd8d2, 0x800401, 0x6, 0x5, 0xbf, 0xe, 0x9b05, 0x3ff, 0x3, 0x6, 0x5, 0x6, 0x8, 0x7, 0x7, 0xffff, 0x2, 0x1, 0x7e, 0x8, 0x1d5ef0c6, 0x0, 0x4498, 0x8, 0x2, 0x5, 0x1, 0xd96, 0x4, 0x6, 0x3ff, 0x8, 0x10001, 0x7, 0x5]}, @TCA_HTB_RATE64={0xc, 0x6, 0xffffffffffffcb37}, @TCA_HTB_PARMS={0x30, 0x1, {{0x1, 0x1, 0xe92, 0x8, 0x2, 0x80000000}, {0x4d, 0x1, 0x1ac7, 0x101, 0x701, 0x5}, 0xffffffff, 0x9, 0x7, 0x101, 0x7c1}}, @TCA_HTB_PARMS={0x30, 0x1, {{0x6, 0x0, 0x9, 0x9, 0x2, 0x3}, {0x2, 0x1, 0xfff7, 0xb, 0x10, 0xf8}, 0x5, 0x4f0, 0x7, 0x2, 0xfffffbff}}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RATE64={0xc, 0x6, 0xfffffffffffffff5}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RATE64={0xc, 0x6, 0x800}, @TCA_HTB_RATE64={0xc, 0x6, 0x9}, @TCA_HTB_RATE64={0xc, 0x6, 0x7f}]}}]}, 0x4d8}, 0x1, 0x0, 0x0, 0x81}, 0x800)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4)
r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0xffffffb6)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYRESHEX, @ANYRES32=<r10=>0x1, @ANYBLOB='\x00'/20, @ANYBLOB="a5f432aba9e5933a54bf3673ee546ad29cce05095684746dbb7f0422db33f4e0b390d17cd348147df6c5aae02d2ea9528ba7d8896a7402b2df37c86a7a5f0463b6793da1654b5caaf28d651dc048933908f4100b1c05", @ANYBLOB="4c7eae7ad65c6e0b66a2004717778147804d708e725e018e8c62cefd6e09653b3624b9f8111f4aed478fabc32449f95662e365080977f8d8a51aaa9d9dbc2847be6983bd088995d040794e785f14d42f4644b10cba6aac9a78d12fafd7f98addc6aa87a8e55bdb179c8ea44b5407953aca9204926d61b67a8c3f648679493db588ac85c66ab91228548c95bc57aacf41012007c91e8435cd5980347d2b3cad6949949719315cb8daac0cc5565beb1764e2b1dd72b52c460555438c2e3e1f278e3817ae04c950275b3235148d7960995f842dc24b", @ANYRES64=r1], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r9}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001600)={r9, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0xfffffe01, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x102}, 0x50)
r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d80)=ANY=[@ANYRESDEC=r4, @ANYRES16=r9, @ANYRES32=r5, @ANYRES8=r11, @ANYRES32, @ANYBLOB="03000000040000000300"/28, @ANYRESOCT=r7, @ANYRESOCT=r10, @ANYRESHEX=r0, @ANYRES16=r3], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="85000000700000003246bf94955c7ca0a6a66fb080360bfa37e3a9f7c05cd0a35e4c3a569d415b3e50b8aac3079be5c987d337bdf3ce38209b5d1ee4917e80cd7e023e94aa0bb6549e8537c9ebf534fc85d3b50f05a02b8bad40565856145290a5521b00e9d3836aa23c746cf52932ca29000badbdfe7d59155f50f0a2d0b75cb9ef7985fcd5483aa75d81b25d667524e01225695486330399a72f3da1ea9415e6213a02"], &(0x7f00000003c0)='GPL\x00', 0xd, 0x86, &(0x7f0000000440)=""/134, 0x41000, 0x0, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000000540)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[r8, r9, r11, r12, r1, r12], 0x0, 0x10, 0x74f}, 0x94)

1.10888149s ago: executing program 1 (id=1348):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r1 = socket(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r2 = socket(0x8, 0x4, 0x89)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001a40)="0ef9924e", 0xa11c}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f0000000300)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x4048884)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x8000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000200)={@local, 0x1, 0x0, 0x60, 0x0, [{}, {}, {@loopback}, {}, {@dev}, {@multicast2}]}})
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0x1}], 0x1)
shutdown(r1, 0x0)

1.019637266s ago: executing program 0 (id=1350):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000850000005000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x50)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x182}, "cd103e7747082a96", "a6ffe929b65dca2fc94e25a0a5bf3b3c", "6543c359", "f4944b8e82445634"}, 0x28)
r2 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x6a, 0x2, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
ppoll(&(0x7f0000000300)=[{r0, 0x2000}], 0x1, 0x0, 0x0, 0x0)

407.884008ms ago: executing program 2 (id=1352):
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r1, 0x0, 0x0, 0x20000046, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e21, 0x8000000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
sendmsg$tipc(r2, 0x0, 0x884)
write$cgroup_devices(r2, 0x0, 0x9)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="d84708da4f73706f41df3f21fbcea2966e155e", @ANYRES64=0x0], 0x20)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r4=>0x0}, 0x8)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f90fa3c92b", 0x14}], 0x1}, 0x0)
r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r6, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$LINK_DETACH(0x22, &(0x7f0000000600)=r6, 0x4)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r7, &(0x7f0000000140)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x10)
socket$netlink(0x10, 0x3, 0xc)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28)
sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)="c8a8131ca007e85a18bc6b24a378e08a49e0c93626b87303e4a271de4550d9686960c66c0c63a838c90aa5866c3d5f", 0x2f}, {&(0x7f00000002c0)="9f110abaf3b55a040250acc12df018e309c1f665cfc040bcd008e94f1fecd8ee91046bc2ef941d25686f655b0c12a7c216386bce829471aaf60509d16dc6b8b5ec2b1734da164b433d03bf4de330eed7522409af33425d9c0b7c1520f80a8b32706f277d70058ffa28892b21b36d97c67a4f3cc1323cb930f15b9db780c0e160f6a6aac5eebaab886858b2c90174948f6cc00aacae966a42bced", 0x9a}, {&(0x7f0000000380)="66d999ef1e19a4d4a43d6b3b60fae0037287b0af9207bd43a9c5c0d52210a03bfaa08b1113eee9417be80a85dd58d0a2a6b6acfacee3e79c5a084a787d47203c9760c3ee94117a90877cb36fff75d2d466f2e881475546fa2c0b75403153f42497285ea7e0284a5fc022331f524b745e6125a0254b37e41dee6f695df876b9fde9d0580cef159efaadece2314e147113df78e700b64f4828986c980fb6f41e35cac01ff0f1c2b864d4358ad7fb97819b8af9e1aa75164aa10f23ef6f7d5732bb01b474d1dca0b7", 0xc7}, {&(0x7f0000000480)="1e2cf1086d951e2baad6ed128440442be55a679a4e3df37c1ed432d090a3a52085cdb1cb8434951894bf91387c4d86f1688076cc5971977d11ff0b25e2835bcf065f8f0ccaa12c45b9e0bd84b07d1cac17bbaf", 0x53}, {&(0x7f00000006c0)="e2b1d5c7f5fc5cbf411d26a82c7e349e2b5908467d30683b2e2de9b16319b791863fe2519267883b13fb50f80d5f0fd7e1d8601fafe9c691e375acf7fd4a6eb52e1c4da01408ab116236fe0885dede47b01f1a1062", 0x55}], 0x5}, 0x8000)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29cdf9b4900", "0cbe1eae", "bb10000000000001"}, 0x28)

239.359079ms ago: executing program 1 (id=1353):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x18}}, 0x2000)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r4, 0x1}, 0x14}}, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
pipe(0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r7=>0x0})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
pipe(&(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xf4, 0x17}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)

150.273486ms ago: executing program 0 (id=1354):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38)
sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x0, 0x200, 0x70bd25, 0xfffffff8}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x8000)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @private=0xa010101, @broadcast}}}], 0x20}, 0x0)

149.524453ms ago: executing program 2 (id=1355):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) (async, rerun: 64)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async, rerun: 64)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff800000fd"}, 0x38)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"})
sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48001}, 0x8000) (async, rerun: 32)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x8}}], 0x18}, 0x0) (rerun: 32)

148.923091ms ago: executing program 0 (id=1356):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0xfffffffc}}, 0xb8}}, 0x2c000010)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0xfffffffffffffffd}}, [@mark={0xc, 0x15, {0x35075a, 0x5d21841b}}]}, 0xc4}}, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0)
socketpair(0x22, 0x2, 0x2, &(0x7f0000000000))
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "db57cda808852139", "252432e72844858a068b92a5a810f4dc", "11802ff5", "5aee41448c84afb7"}, 0x28)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002780)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0)
close(0x4)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0xfffffffc}}, 0xb8}}, 0x2c000010) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0xfffffffffffffffd}}, [@mark={0xc, 0x15, {0x35075a, 0x5d21841b}}]}, 0xc4}}, 0x0) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) (async)
socketpair(0x22, 0x2, 0x2, &(0x7f0000000000)) (async)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) (async)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "db57cda808852139", "252432e72844858a068b92a5a810f4dc", "11802ff5", "5aee41448c84afb7"}, 0x28) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002780)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
close(0x4) (async)

146.299703ms ago: executing program 2 (id=1357):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0xfe07) (async)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "6550c01b21986c5a", "9af8773dad5de4d5dcbd2727fc5b8a076499f3ffffffffffffff00", "0810186b", "fbd1e2072ea0edb6"}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000230000000000daabb55df21d16b0a994468df354f2f60eed665938c6677df7b98c13669c44347f7954e87b0c24c88eb61365741c4d26b161ceb84cd0d428977fca319329a6b3c01647d4c678405c304dc3102c7351afa4ecca4a339c9e87e222131677c4364cede520af022b"], &(0x7f0000000000)='GPL\x00', 0x904, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6={0xa, 0x4e20, 0x0, @loopback, 0x3}]}, &(0x7f0000000180)=0x10) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async)
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000440)={0x2, &(0x7f0000000000)=[{0x74, 0x0, 0x1}, {0x6}]}) (async)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000400)={r2, 0x39, "b1c18f70612939ec9920b77781b7addc6bc7f2bbfb1cd5017f4a85f67b8abb3c66269c42d7a238cb802ff1c984d8d842d176fef210dee530c1"}, &(0x7f00000000c0)=0x41)
shutdown(r0, 0x1) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) (async)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xffffffffffffffab) (async)
sendfile(r0, r4, 0x0, 0x5)

89.005831ms ago: executing program 0 (id=1358):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={<r2=>r1})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r3, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x2e}, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'sit0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000880}, 0x4000000)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "db57cda808852139", "252432e72844858a068b92a5a810f4dc", "11802ff5", "5aee41448c84afb7"}, 0x28)
close(0x4)

86.251228ms ago: executing program 2 (id=1359):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
r1 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040), 0x10)
listen(r1, 0x0)
r2 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x4000890)
r3 = accept4$unix(r1, 0x0, 0x0, 0x0)
recvfrom$unix(r3, &(0x7f0000001680)=""/256, 0x100, 0x1120, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38)
sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48001}, 0x8000)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x8}}], 0x18}, 0x0)

74.369516ms ago: executing program 0 (id=1360):
r0 = socket$inet(0x2, 0x1, 0x7)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x48}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xbe, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94)
connect$inet6(r1, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r3 = accept4$llc(r1, 0x0, &(0x7f0000000000), 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
r4 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMGETVERSION(r4, 0x80044942, &(0x7f0000000100))
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000015c0)={0x0, {{0xa, 0x4e24, 0x9, @mcast2, 0x9}}}, 0x90)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x8}}], 0x18}, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000580)={0x0, {{0xa, 0x4e24, 0x9d4e, @mcast1, 0x5}}, 0x0, 0x8, [{{0xa, 0x4e24, 0x1, @remote, 0x3}}, {{0xa, 0x4e21, 0x2, @empty}}, {{0xa, 0x4e31, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xa}}, {{0xa, 0x4e23, 0x40, @mcast2, 0x7ff}}, {{0xa, 0x4e21, 0x8, @local, 0xb}}, {{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}}, {{0xa, 0x4e23, 0x7fffffff, @private2={0xfc, 0x2, '\x00', 0x4}, 0x7}}, {{0xa, 0x4e23, 0xa22, @loopback, 0x8000000}}]}, 0x490)

72.667332ms ago: executing program 2 (id=1361):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) (async)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x18}}, 0x2000) (async, rerun: 64)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async, rerun: 64)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) (async)
shutdown(r0, 0x0)

64.103045ms ago: executing program 2 (id=1362):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x18}}, 0x2000)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000206010400000000000000000300fffd0c000780080012400000000c05f1000006004dbd4000050001000000000005000a0000000900020073797a310000001f07000300686173683a69702c706f72742c697000"], 0x58}, 0x1, 0x0, 0x0, 0x24000010}, 0x0)
mmap(&(0x7f0000446000/0x1000)=nil, 0x1000, 0x9, 0x4000010, 0xffffffffffffffff, 0x92d11000)
unshare(0x30480)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
shutdown(r0, 0x0)

0s ago: executing program 0 (id=1363):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100)=r3, 0x4)
sendmsg$unix(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)="041000", 0x3}], 0x1, 0x0, 0x0, 0x20040004}, 0x20004011)
recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002)
sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}, 0x2404c140)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{}, "ecb45375cd3a1a5f", "3929005212e382568b70d3d66c63d25b9eb9eba5ebe57d424530fda5084a2a73", "c7d1b587", "002b43690c7e7fbb"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
sendfile(r0, r5, 0x0, 0xffffffff004)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:41427' (ED25519) to the list of known hosts.
syzkaller login: [   41.485238][ T5766] cgroup: Unknown subsys name 'net'
[   41.587841][ T5766] cgroup: Unknown subsys name 'cpuset'
[   41.591373][ T5766] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.819090][ T5766] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.912653][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.915799][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.918371][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.921069][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.923654][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.941298][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.944336][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.951730][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.957429][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.960378][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.036529][ T5209] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.039336][ T5209] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.042531][ T5209] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.046957][ T5209] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.050581][ T5209] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.194801][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   46.212069][ T5823] chnl_net:caif_netlink_parms(): no params data found
[   46.284969][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.287729][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.290163][ T5827] bridge_slave_0: entered allmulticast mode
[   46.292916][ T5827] bridge_slave_0: entered promiscuous mode
[   46.307473][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.309832][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.312135][ T5827] bridge_slave_1: entered allmulticast mode
[   46.314959][ T5827] bridge_slave_1: entered promiscuous mode
[   46.359631][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.361970][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.364341][ T5823] bridge_slave_0: entered allmulticast mode
[   46.367484][ T5823] bridge_slave_0: entered promiscuous mode
[   46.372041][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.383556][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.386381][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.388718][ T5823] bridge_slave_1: entered allmulticast mode
[   46.391440][ T5823] bridge_slave_1: entered promiscuous mode
[   46.395554][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.429546][ T5827] team0: Port device team_slave_0 added
[   46.435345][ T5827] team0: Port device team_slave_1 added
[   46.439469][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.442581][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   46.449201][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.487284][ T5823] team0: Port device team_slave_0 added
[   46.490048][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.492281][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.501689][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.513022][ T5823] team0: Port device team_slave_1 added
[   46.522475][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.524905][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.532903][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.558931][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.561254][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.569928][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.586848][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.589162][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.597897][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.610871][ T5827] hsr_slave_0: entered promiscuous mode
[   46.613334][ T5827] hsr_slave_1: entered promiscuous mode
[   46.627371][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.629869][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.632277][ T5831] bridge_slave_0: entered allmulticast mode
[   46.635139][ T5831] bridge_slave_0: entered promiscuous mode
[   46.638205][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.640626][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.642940][ T5831] bridge_slave_1: entered allmulticast mode
[   46.645923][ T5831] bridge_slave_1: entered promiscuous mode
[   46.679473][ T5823] hsr_slave_0: entered promiscuous mode
[   46.681840][ T5823] hsr_slave_1: entered promiscuous mode
[   46.683938][ T5823] debugfs: 'hsr0' already exists in 'hsr'
[   46.686346][ T5823] Cannot create hsr debugfs directory
[   46.696384][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.701051][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.728702][ T5831] team0: Port device team_slave_0 added
[   46.731871][ T5831] team0: Port device team_slave_1 added
[   46.776134][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.778481][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.786987][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.797683][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.800003][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.808792][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.850830][ T5831] hsr_slave_0: entered promiscuous mode
[   46.853155][ T5831] hsr_slave_1: entered promiscuous mode
[   46.855470][ T5831] debugfs: 'hsr0' already exists in 'hsr'
[   46.857413][ T5831] Cannot create hsr debugfs directory
[   46.973339][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.981479][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.993830][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.008252][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.025863][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.035407][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.040706][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.053135][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.059576][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.061990][ T5827] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.064980][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.067370][ T5827] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.099299][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.111318][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.122021][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.124503][ T5823] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.126978][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.129329][ T5823] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.134215][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.148131][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.182261][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.188316][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.190585][ T5831] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.193054][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.195523][ T5831] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.208988][   T29] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.212054][   T29] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.216168][   T29] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.219194][   T29] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.227793][   T29] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.230801][   T29] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.240357][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   47.252083][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.257683][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.260056][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.270087][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.272537][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.292929][ T5823] 8021q: adding VLAN 0 to HW filter on device team0
[   47.302224][ T1365] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.304765][ T1365] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.315679][ T1365] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.318147][ T1365] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.348389][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.366433][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   47.380044][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.382445][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.397256][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.399613][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.439549][ T5831] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   47.442928][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.475502][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.510267][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.529498][ T5827] veth0_vlan: entered promiscuous mode
[   47.547064][ T5823] veth0_vlan: entered promiscuous mode
[   47.550021][ T5827] veth1_vlan: entered promiscuous mode
[   47.557184][ T5823] veth1_vlan: entered promiscuous mode
[   47.589282][ T5827] veth0_macvtap: entered promiscuous mode
[   47.591885][ T5823] veth0_macvtap: entered promiscuous mode
[   47.596950][ T5827] veth1_macvtap: entered promiscuous mode
[   47.602404][ T5823] veth1_macvtap: entered promiscuous mode
[   47.613452][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.618841][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.629040][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.635921][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.642728][ T5848] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.646781][ T5848] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.649558][ T5848] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.652399][ T5848] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.658083][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.676420][ T5848] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.688417][ T5852] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.691338][ T5852] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.696969][ T5852] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.727445][ T5831] veth0_vlan: entered promiscuous mode
[   47.745711][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.748016][ T5831] veth1_vlan: entered promiscuous mode
[   47.748379][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.779112][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.785669][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.799268][ T5831] veth0_macvtap: entered promiscuous mode
[   47.813789][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.817255][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.817322][ T5831] veth1_macvtap: entered promiscuous mode
[   47.832365][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.834337][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.838284][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.840033][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.856307][ T5852] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.860498][ T5852] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.869445][ T5852] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.872389][ T5852] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.883761][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.940105][ T1365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.944184][ T1365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.964020][ T5890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   47.965669][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.970144][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.972790][ T5890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   47.977915][ T5890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   47.982052][ T5890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   47.986561][ T5890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   48.004875][ T5209] Bluetooth: hci1: command tx timeout
[   48.016557][ T5209] Bluetooth: hci0: command tx timeout
[   48.075868][ T5902] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET)
[   48.085084][ T5209] Bluetooth: hci2: command tx timeout
[   48.148990][ T5910] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5'.
[   48.206335][ T5911] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3'.
[   48.211779][ T5911] Zero length message leads to an empty skb
[   48.304104][  T790] IPVS: starting estimator thread 0...
[   48.394556][ T5916] IPVS: using max 79 ests per chain, 189600 per kthread
[   49.010791][  T790] IPVS: starting estimator thread 0...
[   49.044165][ T5936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'.
[   49.095006][ T5941] IPVS: using max 80 ests per chain, 192000 per kthread
[   49.110723][ T5951] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   49.136478][ T5954] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.750013][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'.
[   49.752922][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'.
[   50.084777][ T5209] Bluetooth: hci0: command tx timeout
[   50.084811][ T5829] Bluetooth: hci1: command tx timeout
[   50.164915][ T5829] Bluetooth: hci2: command tx timeout
[   50.798163][ T6075] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[   50.803170][ T6077] tls_set_device_offload_rx: netdev not found
[   50.867144][ T6074] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   50.869706][  T790] IPVS: starting estimator thread 0...
[   50.906754][ T6086] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   50.964868][ T6084] IPVS: using max 79 ests per chain, 189600 per kthread
[   51.047207][ T6095] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   51.088456][ T6100] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   51.570487][ T6131] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   51.938384][ T6145] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   52.164655][ T5829] Bluetooth: hci1: command tx timeout
[   52.164691][ T5209] Bluetooth: hci0: command tx timeout
[   52.254593][ T5209] Bluetooth: hci2: command tx timeout
[   52.607716][ T6159] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   52.611955][ T6163] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   52.825850][ T6192] netlink: 'syz.2.79': attribute type 1 has an invalid length.
[   52.832696][ T6193] netlink: 'syz.2.79': attribute type 1 has an invalid length.
[   52.977462][ T6201] netlink: 'syz.2.82': attribute type 1 has an invalid length.
[   52.980402][ T6201] netlink: 'syz.2.82': attribute type 2 has an invalid length.
[   52.983496][ T6201] netlink: 'syz.2.82': attribute type 1 has an invalid length.
[   52.986246][ T6201] netlink: 'syz.2.82': attribute type 2 has an invalid length.
[   53.033811][ T6214] __nla_validate_parse: 17 callbacks suppressed
[   53.033820][ T6214] netlink: 16 bytes leftover after parsing attributes in process `syz.2.85'.
[   53.040966][ T6214] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   53.100913][ T6210] openvswitch: netlink: Key 0 has unexpected len 20 expected 0
[   53.514962][ T6244] netlink: 16 bytes leftover after parsing attributes in process `syz.1.93'.
[   53.525062][ T6244] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   53.643851][ T6256] netlink: 16 bytes leftover after parsing attributes in process `syz.0.95'.
[   53.649168][ T6256] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   53.974502][ T6265] netlink: 16 bytes leftover after parsing attributes in process `syz.2.98'.
[   54.244577][ T5209] Bluetooth: hci0: command tx timeout
[   54.245324][ T5829] Bluetooth: hci1: command tx timeout
[   54.324564][ T5829] Bluetooth: hci2: command tx timeout
[   54.721573][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.104'.
[   54.725477][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.104'.
[   54.728492][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.104'.
[   54.809020][ T6291] netlink: 16 bytes leftover after parsing attributes in process `syz.0.106'.
[   54.813297][ T6292] net_ratelimit: 1 callbacks suppressed
[   54.813304][ T6292] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   54.973879][ T6300] netlink: 16 bytes leftover after parsing attributes in process `syz.2.109'.
[   54.979793][ T6300] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   55.048525][ T6313] openvswitch: netlink: Key 0 has unexpected len 20 expected 0
[   55.103549][ T6317] netlink: 16 bytes leftover after parsing attributes in process `syz.2.114'.
[   55.139943][ T6319] openvswitch: netlink: Key 2 has unexpected len 20 expected 4
[   55.238421][ T6326] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   55.346923][ T6330] openvswitch: netlink: Key 14 has unexpected len 20 expected 28
[   55.402426][ T6334] netlink: 'syz.2.122': attribute type 1 has an invalid length.
[   55.403562][ T6336] lo speed is unknown, defaulting to 1000
[   55.413020][ T6336] lo speed is unknown, defaulting to 1000
[   55.417281][ T6336] lo speed is unknown, defaulting to 1000
[   55.422027][ T6336] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   55.454272][ T6335] Illegal XDP return value 4294967294 on prog  (id 60) dev N/A, expect packet loss!
[   55.466348][ T6336] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   55.495042][ T6336] lo speed is unknown, defaulting to 1000
[   55.505704][ T6336] lo speed is unknown, defaulting to 1000
[   55.508712][ T6336] lo speed is unknown, defaulting to 1000
[   55.511833][ T6336] lo speed is unknown, defaulting to 1000
[   55.696082][ T6365] netlink: 'syz.2.129': attribute type 10 has an invalid length.
[   55.703593][ T6365] syz_tun: entered promiscuous mode
[   55.710451][ T6365] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   55.723877][ T6365] netlink: 'syz.2.129': attribute type 10 has an invalid length.
[   55.736492][ T6365] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.739694][ T6365] team0: Port device bond0 added
[   55.856888][ T6380] netlink: 'syz.2.136': attribute type 21 has an invalid length.
[   55.857150][ T6378] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   55.861916][ T6380] dummy0: entered allmulticast mode
[   55.905626][ T6384] syzkaller0: entered promiscuous mode
[   55.907428][ T6384] syzkaller0: entered allmulticast mode
[   56.707979][ T6413] warning: `syz.1.146' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   56.864013][ T6423] tipc: Started in network mode
[   56.867271][ T6423] tipc: Node identity ac14142f, cluster identity 4711
[   56.869816][ T6423] tipc: New replicast peer: 0.0.0.0
[   56.871946][ T6423] tipc: Enabled bearer <udp:syz2>, priority 10
[   56.874092][ T6425] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[   57.160379][ T6451] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   57.492039][ T6468] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[   57.818163][ T6478] bond1: entered promiscuous mode
[   57.820774][ T6478] 8021q: adding VLAN 0 to HW filter on device bond1
[   57.875728][   T47] tipc: Node number set to 2886997039
[   58.078800][ T6503] openvswitch: netlink: Tunnel attr 0 has unexpected len 4 expected 8
[   58.084882][ T6501] __nla_validate_parse: 66 callbacks suppressed
[   58.084893][ T6501] netlink: 16 bytes leftover after parsing attributes in process `syz.1.171'.
[   58.104389][ T6501] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   58.159386][ T6513] validate_nla: 3 callbacks suppressed
[   58.159395][ T6513] netlink: 'syz.2.176': attribute type 1 has an invalid length.
[   58.207291][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.178'.
[   58.210731][ T6518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.178'.
[   58.230397][ T6520] IPVS: set_ctl: invalid protocol: 135 100.1.1.3:0
[   58.876532][ T6562] netlink: 16 bytes leftover after parsing attributes in process `syz.1.191'.
[   59.165122][ T6565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.192'.
[   59.168031][ T6565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.192'.
[   59.194266][ T6567] netlink: 24 bytes leftover after parsing attributes in process `syz.2.193'.
[   59.198805][ T6567] netlink: 24 bytes leftover after parsing attributes in process `syz.2.193'.
[   59.349050][ T6577] netlink: 'syz.0.196': attribute type 29 has an invalid length.
[   59.385457][ T6583] netlink: 16 bytes leftover after parsing attributes in process `syz.0.198'.
[   59.439110][ T6586] syzkaller1: entered promiscuous mode
[   59.441626][ T6586] syzkaller1: entered allmulticast mode
[   59.729555][ T6591] netlink: 'syz.1.200': attribute type 4 has an invalid length.
[   59.867154][ T6595] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[   60.369242][ T6627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.210'.
[   60.536403][ T6626] Bluetooth: MGMT ver 1.23
[   60.563823][ T6640] net_ratelimit: 4 callbacks suppressed
[   60.563833][ T6640] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   60.606920][ T6638] netlink: zone id is out of range
[   60.608716][ T6638] netlink: zone id is out of range
[   60.610435][ T6638] netlink: zone id is out of range
[   60.612114][ T6638] netlink: zone id is out of range
[   60.613808][ T6638] netlink: zone id is out of range
[   60.618636][ T6638] netlink: zone id is out of range
[   60.621422][ T6638] netlink: zone id is out of range
[   60.629209][ T6638] netlink: zone id is out of range
[   60.630981][ T6638] netlink: zone id is out of range
[   60.780712][ T6653] netlink: 'syz.1.218': attribute type 11 has an invalid length.
[   61.114246][ T6663] netlink: 'syz.0.221': attribute type 13 has an invalid length.
[   61.679269][ T6693] syzkaller1: entered promiscuous mode
[   61.681131][ T6693] syzkaller1: entered allmulticast mode
[   61.830849][ T6703] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.833723][ T6703] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.892421][ T6706] tipc: Can't bind to reserved service type 2
[   61.916204][ T6710] netlink: 'syz.1.237': attribute type 1 has an invalid length.
[   62.368213][ T6751] lo speed is unknown, defaulting to 1000
[   62.927458][ T6799] netlink: 'syz.0.261': attribute type 10 has an invalid length.
[   62.937811][ T6799] team0: Port device dummy0 added
[   63.975145][ T6820] __nla_validate_parse: 60 callbacks suppressed
[   63.975154][ T6820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.267'.
[   63.980269][ T6820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.267'.
[   63.983105][ T6820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.267'.
[   63.988893][ T6820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.267'.
[   63.992721][ T6820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.267'.
[   64.017573][ T6824] netlink: 20 bytes leftover after parsing attributes in process `syz.2.269'.
[   65.044584][ T6852] netlink: 16 bytes leftover after parsing attributes in process `syz.1.276'.
[   65.056122][ T6852] netlink: 16 bytes leftover after parsing attributes in process `syz.1.276'.
[   65.082921][ T6854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.277'.
[   65.093336][ T6854] tls_set_device_offload: netdev not found
[   65.282715][ T6869] trusted_key: syz.2.283 sent an empty control message without MSG_MORE.
[   65.461808][ T6880] netlink: 16 bytes leftover after parsing attributes in process `syz.2.285'.
[   65.926012][ T6915] net_ratelimit: 32 callbacks suppressed
[   65.926022][ T6915] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   66.037223][ T6919] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   66.080085][ T6922] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   66.196346][ T6932] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   66.544193][ T6962] openvswitch: netlink: Key 0 has unexpected len 20 expected 0
[   66.628697][ T6968] netlink: 'syz.0.311': attribute type 1 has an invalid length.
[   66.631373][ T6968] netlink: 'syz.0.311': attribute type 3 has an invalid length.
[   66.634848][ T6968] openvswitch: netlink: Key 0 has unexpected len 20 expected 0
[   66.842961][ T6979] pimreg3: entered allmulticast mode
[   66.887264][ T6984] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   67.400314][ T7024] bond0: entered promiscuous mode
[   67.402901][ T7024] bond_slave_0: entered promiscuous mode
[   67.406768][ T7024] bond_slave_1: entered promiscuous mode
[   67.576474][ T7038] netlink: 'syz.2.333': attribute type 10 has an invalid length.
[   67.579260][ T7038] dummy0: entered promiscuous mode
[   67.585728][ T7038] bridge0: port 3(dummy0) entered blocking state
[   67.587946][ T7038] bridge0: port 3(dummy0) entered disabled state
[   67.592333][ T7038] bridge0: port 3(dummy0) entered blocking state
[   67.594568][ T7038] bridge0: port 3(dummy0) entered forwarding state
[   67.781229][ T7053] openvswitch: netlink: Tunnel attr 0 has unexpected len 4 expected 8
[   68.107962][ T7094] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   68.179097][ T7100] openvswitch: netlink: Tunnel attr 0 has unexpected len 4 expected 8
[   68.206518][ T7106] wg1 speed is unknown, defaulting to 1000
[   68.209678][ T7106] wg1 speed is unknown, defaulting to 1000
[   68.212649][ T7106] wg1 speed is unknown, defaulting to 1000
[   68.309057][    T9] wg1 speed is unknown, defaulting to 1000
[   68.311090][ T7106] infiniband syz1: set active
[   68.312772][ T7106] infiniband syz1: added wg1
[   68.340478][ T7106] RDS/IB: syz1: added
[   68.342992][ T7106] smc: adding ib device syz1 with port count 1
[   68.354666][ T7106] smc:    ib device syz1 port 1 has pnetid 
[   68.362463][ T7106] wg1 speed is unknown, defaulting to 1000
[   68.366475][   T24] wg1 speed is unknown, defaulting to 1000
[   68.457546][ T7106] wg1 speed is unknown, defaulting to 1000
[   68.550713][ T7106] wg1 speed is unknown, defaulting to 1000
[   68.622536][ T7127] lo speed is unknown, defaulting to 1000
[   68.652408][ T7106] wg1 speed is unknown, defaulting to 1000
[   68.662577][ T7129] ieee802154 phy0 wpan0: encryption failed: -22
[   69.000085][ T7141] sock: sock_timestamping_bind_phc: sock not bind to device
[   69.101785][ T7153] __nla_validate_parse: 52 callbacks suppressed
[   69.101797][ T7153] netlink: 16 bytes leftover after parsing attributes in process `syz.1.367'.
[   69.216137][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.368'.
[   69.426663][ T7171] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[   69.583821][ T7185] netlink: 16 bytes leftover after parsing attributes in process `syz.2.377'.
[   69.799421][ T7193] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[   69.836887][ T7195] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[   69.870761][ T7197] netlink: 'syz.0.381': attribute type 7 has an invalid length.
[   69.963435][ T7201] netlink: 36 bytes leftover after parsing attributes in process `syz.2.382'.
[   69.970245][ T7201] netlink: 36 bytes leftover after parsing attributes in process `syz.2.382'.
[   69.973102][ T7201] netlink: 36 bytes leftover after parsing attributes in process `syz.2.382'.
[   69.977883][ T7201] netlink: 36 bytes leftover after parsing attributes in process `syz.2.382'.
[   69.980793][ T7201] netlink: 36 bytes leftover after parsing attributes in process `syz.2.382'.
[   69.987581][ T7201] netlink: 36 bytes leftover after parsing attributes in process `syz.2.382'.
[   69.990913][ T7201] netlink: 36 bytes leftover after parsing attributes in process `syz.2.382'.
[   70.009210][ T7201] bridge0: port 3(dummy0) entered disabled state
[   70.011377][ T7201] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.013867][ T7201] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.021055][    T9] lo speed is unknown, defaulting to 1000
[   70.024183][    T9] syz2: Port: 1 Link DOWN
[   70.156991][ T7213] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   70.226130][ T7213] netlink: 'syz.2.385': attribute type 1 has an invalid length.
[   70.585581][ T7239] netlink: 'syz.2.393': attribute type 3 has an invalid length.
[   70.808113][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   70.810354][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   70.826081][ T7257] netlink: 'syz.2.398': attribute type 10 has an invalid length.
[   70.838038][ T7257] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   71.253955][ T7277] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.256533][ T7277] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.485844][ T7293] vxcan1: entered allmulticast mode
[   71.487808][ T7293] net_ratelimit: 11 callbacks suppressed
[   71.487816][ T7293] openvswitch: netlink: Tunnel attr 0 has unexpected len 4 expected 8
[   71.517970][ T7298] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   71.702267][ T7316] netlink: 'syz.1.417': attribute type 2 has an invalid length.
[   71.702620][ T7317] openvswitch: netlink: Tunnel attr 0 has unexpected len 4 expected 8
[   72.696509][ T7350] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[   72.766604][ T7358] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   72.771070][ T7358] netlink: 'syz.2.431': attribute type 2 has an invalid length.
[   72.773609][ T7358] netlink: 'syz.2.431': attribute type 5 has an invalid length.
[   72.781437][ T7360] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[   72.833964][ T7362] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   73.141006][ T7393] netlink: 'syz.2.443': attribute type 5 has an invalid length.
[   74.053553][ T7444] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   74.360296][ T7463] __nla_validate_parse: 70 callbacks suppressed
[   74.360306][ T7463] netlink: 16 bytes leftover after parsing attributes in process `syz.0.462'.
[   74.400234][ T7468] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   74.490064][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.465'.
[   74.492843][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.465'.
[   74.496273][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.465'.
[   74.499535][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.465'.
[   74.502556][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.465'.
[   74.671969][ T7488] openvswitch: netlink: Tunnel attr 0 has unexpected len 4 expected 8
[   74.699568][ T7490] openvswitch: netlink: Key 0 has unexpected len 20 expected 0
[   74.771222][ T7499] netlink: 16 bytes leftover after parsing attributes in process `syz.2.473'.
[   74.775829][ T7499] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   75.040974][ T7512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.478'.
[   75.046876][ T7512] netlink: 36 bytes leftover after parsing attributes in process `syz.2.478'.
[   75.056934][ T7512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.478'.
[   75.150842][ T7520] syzkaller0: entered promiscuous mode
[   75.152746][ T7520] syzkaller0: entered allmulticast mode
[   76.015975][ T7536] netlink: 'syz.0.486': attribute type 13 has an invalid length.
[   76.015976][ T7543] netlink: 'syz.0.486': attribute type 13 has an invalid length.
[   76.015990][ T7543] netlink: 'syz.0.486': attribute type 17 has an invalid length.
[   76.034345][ T7536] netlink: 'syz.0.486': attribute type 17 has an invalid length.
[   76.059353][ T7543] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.061667][ T7543] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.064103][ T7543] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.066447][ T7543] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.173061][ T5209] Bluetooth: hci2: command 0x0405 tx timeout
[   76.200198][ T7565] netlink: 'syz.2.494': attribute type 18 has an invalid length.
[   76.211304][ T7565] netlink: 'syz.2.494': attribute type 18 has an invalid length.
[   76.211454][ T5852] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   76.217324][ T5852] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   76.222349][ T5852] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   76.226501][ T5852] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   76.281041][ T7569] raw_sendmsg: syz.1.496 forgot to set AF_INET. Fix it!
[   76.585753][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   76.599354][ T7613] net_ratelimit: 8 callbacks suppressed
[   76.599493][ T7613] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   77.283818][ T7599] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   77.358077][ T7624] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   77.381642][ T7625] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   77.427355][ T7636] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   77.510959][ T7641] IPv6: NLM_F_REPLACE set, but no existing node found!
[   77.610683][ T7640] lo speed is unknown, defaulting to 1000
[   77.613570][ T7640] wg1 speed is unknown, defaulting to 1000
[   77.686718][ T7672] lo speed is unknown, defaulting to 1000
[   77.730983][ T7685] unsupported nla_type 65024
[   77.741910][ T7672] wg1 speed is unknown, defaulting to 1000
[   77.856600][ T7690] netlink: 'syz.1.531': attribute type 83 has an invalid length.
[   77.881605][ T7693] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   77.930646][ T7690] lo speed is unknown, defaulting to 1000
[   77.951734][ T7695] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   77.954132][ T7695] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   77.959631][ T7690] wg1 speed is unknown, defaulting to 1000
[   78.016232][ T7695] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   78.023648][ T7695] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   78.037041][ T7695] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   78.147842][ T7722] netlink: 'syz.0.538': attribute type 15 has an invalid length.
[   78.167709][ T7723] lo speed is unknown, defaulting to 1000
[   78.214170][ T7723] wg1 speed is unknown, defaulting to 1000
[   78.526307][ T7742] veth1_to_team: entered allmulticast mode
[   79.666128][ T7799] __nla_validate_parse: 32 callbacks suppressed
[   79.666138][ T7799] netlink: 28 bytes leftover after parsing attributes in process `syz.1.560'.
[   79.673407][ T7799] netlink: 48 bytes leftover after parsing attributes in process `syz.1.560'.
[   79.678735][ T7799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.560'.
[   79.809032][ T7810] lo speed is unknown, defaulting to 1000
[   79.811728][ T7810] wg1 speed is unknown, defaulting to 1000
[   80.201968][ T7817] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   80.336998][ T7828] netlink: 16 bytes leftover after parsing attributes in process `syz.0.566'.
[   80.342420][ T7828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.566'.
[   80.348325][ T7829] netlink: 16 bytes leftover after parsing attributes in process `syz.1.568'.
[   80.383652][ T7831] smc: net device bond0 applied user defined pnetid SYZ2
[   80.386567][ T7831] smc: net device bond0 erased user defined pnetid SYZ2
[   80.508706][ T7838] netlink: 76 bytes leftover after parsing attributes in process `syz.1.572'.
[   80.611681][ T7849] netlink: 16 bytes leftover after parsing attributes in process `syz.1.577'.
[   80.642532][ T7852] netlink: 128 bytes leftover after parsing attributes in process `syz.2.578'.
[   80.742407][ T7856] netlink: 16 bytes leftover after parsing attributes in process `syz.1.580'.
[   81.052266][  T789] cfg80211: failed to load regulatory.db
[   81.065133][ T7885] netlink: 'syz.1.587': attribute type 11 has an invalid length.
[   81.684785][    C1] net_ratelimit: 13 callbacks suppressed
[   81.684795][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   82.353569][ T7966] tipc: Started in network mode
[   82.359856][ T7966] tipc: Node identity ac14142f, cluster identity 4711
[   82.362300][ T7966] tipc: New replicast peer: 0.0.0.0
[   82.364333][ T7966] tipc: Enabled bearer <udp:syz2>, priority 10
[   82.367699][ T7966] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[   82.691971][ T7991] openvswitch: netlink: Tunnel attr 0 has unexpected len 4 expected 8
[   82.745060][ T7999] hsr0: entered promiscuous mode
[   82.824302][ T8005] syzkaller0: entered promiscuous mode
[   82.828147][ T8005] syzkaller0: entered allmulticast mode
[   82.901425][ T8013] geneve3: entered promiscuous mode
[   82.903237][ T8013] geneve3: entered allmulticast mode
[   83.451420][ T8050] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   83.454329][ T8051] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   83.484709][    T9] tipc: Node number set to 2886997039
[   84.205572][ T8081] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   84.242881][ T8085] team0: Port device dummy0 removed
[   84.248832][ T8085] bridge_slave_0: left allmulticast mode
[   84.250834][ T8085] bridge_slave_0: left promiscuous mode
[   84.252821][ T8085] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.258545][ T8085] bridge_slave_1: left allmulticast mode
[   84.260367][ T8085] bridge_slave_1: left promiscuous mode
[   84.262219][ T8085] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.267543][ T8085] bond0: (slave bond_slave_0): Releasing backup interface
[   84.272828][ T8085] bond0: (slave bond_slave_1): Releasing backup interface
[   84.279142][ T8085] team0: Port device team_slave_0 removed
[   84.283837][ T8085] team0: Port device team_slave_1 removed
[   84.286749][ T8085] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.289188][ T8085] batman_adv: batadv0: Removing interface: batadv_slave_0
[   84.292940][ T8085] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.296518][ T8085] batman_adv: batadv0: Removing interface: batadv_slave_1
[   84.305675][ T5886] wg1 speed is unknown, defaulting to 1000
[   84.326415][   T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   84.393003][ T8090] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   84.645846][ T8103] lo speed is unknown, defaulting to 1000
[   84.648692][ T8103] wg1 speed is unknown, defaulting to 1000
[   84.694530][   T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   84.796995][ T8103] netlink: 'syz.0.652': attribute type 2 has an invalid length.
[   84.958690][ T8115] __nla_validate_parse: 10 callbacks suppressed
[   84.958700][ T8115] netlink: 16 bytes leftover after parsing attributes in process `syz.1.655'.
[   84.983904][ T8111] syzkaller0: entered promiscuous mode
[   84.986303][ T8111] syzkaller0: entered allmulticast mode
[   84.989114][ T8114] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   85.062061][ T8121] netlink: 16 bytes leftover after parsing attributes in process `syz.1.657'.
[   85.942409][ T8143] netlink: 16 bytes leftover after parsing attributes in process `syz.1.661'.
[   85.959113][ T8143] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   85.982973][ T8146] netlink: 16 bytes leftover after parsing attributes in process `syz.0.664'.
[   86.549926][ T8152] netlink: 28 bytes leftover after parsing attributes in process `syz.1.665'.
[   86.553772][ T8152] netlink: 28 bytes leftover after parsing attributes in process `syz.1.665'.
[   86.559048][ T8152] netlink: 48 bytes leftover after parsing attributes in process `syz.1.665'.
[   86.594234][ T8159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.667'.
[   86.847602][ T8179] netlink: 24 bytes leftover after parsing attributes in process `syz.2.674'.
[   86.847976][ T8180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.674'.
[   87.048675][ T8201] syzkaller0: entered promiscuous mode
[   87.051247][ T8201] syzkaller0: entered allmulticast mode
[   87.209702][ T8205] lo speed is unknown, defaulting to 1000
[   87.212430][ T8205] wg1 speed is unknown, defaulting to 1000
[   87.674223][ T8214] net_ratelimit: 1 callbacks suppressed
[   87.674232][ T8214] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   87.957663][ T8246] sctp: [Deprecated]: syz.1.695 (pid 8246) Use of struct sctp_assoc_value in delayed_ack socket option.
[   87.957663][ T8246] Use struct sctp_sack_info instead
[   88.035181][   T47] hid-generic 0005:0C45:FFF9.0001: item fetching failed at offset 0/1
[   88.038119][   T47] hid-generic 0005:0C45:FFF9.0001: probe with driver hid-generic failed with error -22
[   89.075741][ T8287] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   90.061908][ T8315] __nla_validate_parse: 14 callbacks suppressed
[   90.061917][ T8315] netlink: 16 bytes leftover after parsing attributes in process `syz.0.715'.
[   90.792992][ T8359] netlink: 16 bytes leftover after parsing attributes in process `syz.0.723'.
[   90.799026][ T8359] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   90.853633][ T8364] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[   90.964038][ T8376] netlink: 20 bytes leftover after parsing attributes in process `syz.0.730'.
[   90.977497][ T8378] netlink: 16 bytes leftover after parsing attributes in process `syz.1.731'.
[   90.981022][ T8378] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   91.040288][ T8384] openvswitch: netlink: Tunnel attr 0 has unexpected len 4 expected 8
[   91.099743][ T8386] netlink: 16 bytes leftover after parsing attributes in process `syz.0.735'.
[   91.110894][ T8386] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   91.176793][ T8398] delete_channel: no stack
[   91.215301][ T8402] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[   91.240150][ T8403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.740'.
[   91.243525][ T8403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.740'.
[   91.340876][ T8415] openvswitch: netlink: Tunnel attr 0 has unexpected len 4 expected 8
[   91.562838][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.747'.
[   91.565821][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.747'.
[   91.568686][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz.1.747'.
[   92.058388][ T8428] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   93.059131][ T8469] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_vlan, syncid = 0, id = 0
[   93.136130][ T8482] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   93.266765][ T8495] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[   93.309358][ T8499] netlink: 'syz.1.773': attribute type 1 has an invalid length.
[   93.316511][ T8498] openvswitch: netlink: Tunnel attr 0 has unexpected len 4 expected 8
[   93.391898][ T8514] openvswitch: netlink: Key 0 has unexpected len 20 expected 0
[   93.464005][ T8525] netlink: 'syz.2.780': attribute type 5 has an invalid length.
[   93.534224][ T8530] netlink: 'syz.1.781': attribute type 1 has an invalid length.
[   93.540377][ T8530] openvswitch: netlink: Key 0 has unexpected len 20 expected 0
[   93.576562][ T8532] openvswitch: netlink: Tunnel attr 0 has unexpected len 4 expected 8
[   94.669404][ T8572] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   94.726077][ T8561] block nbd0: server does not support multiple connections per device.
[   94.730515][ T8561] block nbd0: shutting down sockets
[   94.749466][ T8577] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   94.812837][ T8585] lo speed is unknown, defaulting to 1000
[   94.816346][ T8585] wg1 speed is unknown, defaulting to 1000
[   95.169858][ T8609] syzkaller0: entered promiscuous mode
[   95.171777][ T8609] syzkaller0: entered allmulticast mode
[   95.175475][ T8608] tipc: Started in network mode
[   95.177327][ T8608] tipc: Node identity 2e7fee754ff, cluster identity 4711
[   95.179829][ T8608] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.189278][ T8608] tipc: Resetting bearer <eth:syzkaller0>
[   95.192718][ T8607] tipc: Resetting bearer <eth:syzkaller0>
[   95.200708][ T8607] tipc: Disabling bearer <eth:syzkaller0>
[   95.271260][ T8616] __nla_validate_parse: 79 callbacks suppressed
[   95.271270][ T8616] netlink: 16 bytes leftover after parsing attributes in process `syz.0.806'.
[   95.278793][ T8616] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   95.307719][ T8618] netlink: 52 bytes leftover after parsing attributes in process `syz.0.807'.
[   95.312110][ T8618] netlink: 16 bytes leftover after parsing attributes in process `syz.0.807'.
[   95.316600][ T8618] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   95.364528][ T5829] Bluetooth: hci0: command tx timeout
[   95.622592][ T8635] netlink: 16 bytes leftover after parsing attributes in process `syz.2.812'.
[   95.721101][ T8650] netlink: 16 bytes leftover after parsing attributes in process `syz.0.818'.
[   96.055453][ T8685] 8021q: adding VLAN 0 to HW filter on device bond2
[   96.135363][ T8697] netlink: 28 bytes leftover after parsing attributes in process `syz.0.834'.
[   96.143885][ T8697] netlink: 28 bytes leftover after parsing attributes in process `syz.0.834'.
[   96.149640][ T8698] netlink: 56 bytes leftover after parsing attributes in process `syz.2.831'.
[   96.379662][ T8717] netlink: 60 bytes leftover after parsing attributes in process `syz.1.838'.
[   96.382783][ T8716] netlink: 60 bytes leftover after parsing attributes in process `syz.1.838'.
[   97.550345][ T8765] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.321938][ T8763] tipc: Disabling bearer <eth:syzkaller0>
[   98.451804][ T8799] netlink: 'syz.1.863': attribute type 1 has an invalid length.
[   98.456579][ T8798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   99.852068][ T8860] netlink: 'syz.2.883': attribute type 10 has an invalid length.
[   99.978770][ T8872] net_ratelimit: 9 callbacks suppressed
[   99.978778][ T8872] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  100.010564][ T8874] openvswitch: netlink: Tunnel attr 0 has unexpected len 4 expected 8
[  100.051492][ T8882] openvswitch: netlink: Key 0 has unexpected len 20 expected 0
[  100.108603][ T8889] netlink: 'syz.2.892': attribute type 10 has an invalid length.
[  100.119863][ T8889] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  100.251778][ T8901] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  100.295945][ T8908] tls_set_device_offload: netdev not found
[  100.509117][ T8917] sctp: [Deprecated]: syz.2.900 (pid 8917) Use of struct sctp_assoc_value in delayed_ack socket option.
[  100.509117][ T8917] Use struct sctp_sack_info instead
[  100.587430][ T8921] lo speed is unknown, defaulting to 1000
[  100.593448][ T8921] wg1 speed is unknown, defaulting to 1000
[  100.769880][ T8932] team0 (unregistering): Port device team_slave_0 removed
[  100.779304][ T8932] team0 (unregistering): Port device team_slave_1 removed
[  100.865678][ T8944] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  100.914789][ T8948] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20004
[  100.978348][ T8957] netlink: 'syz.2.912': attribute type 10 has an invalid length.
[  100.980948][ T8957] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  101.043711][ T8962] netlink: 'syz.1.914': attribute type 4 has an invalid length.
[  101.118594][ T8970] __nla_validate_parse: 27 callbacks suppressed
[  101.118603][ T8970] netlink: 16 bytes leftover after parsing attributes in process `syz.0.916'.
[  101.123876][ T8971] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  101.125382][ T8973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.917'.
[  101.175112][ T8978] lo speed is unknown, defaulting to 1000
[  101.176655][ T8980] netlink: 16 bytes leftover after parsing attributes in process `syz.2.919'.
[  101.177639][ T8978] wg1 speed is unknown, defaulting to 1000
[  101.190928][ T8973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.917'.
[  101.210747][ T5829] Bluetooth: hci2: link tx timeout
[  101.212625][ T5829] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  101.216419][ T5209] Bluetooth: hci2: link tx timeout
[  101.218144][ T5209] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  101.220687][ T5209] Bluetooth: hci2: link tx timeout
[  101.222415][ T5209] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  101.356020][ T8993] netlink: 'syz.2.920': attribute type 12 has an invalid length.
[  101.392281][ T8996] netlink: 16 bytes leftover after parsing attributes in process `syz.0.922'.
[  101.409182][ T8996] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  101.477893][ T9000] openvswitch: netlink: Key 0 has unexpected len 20 expected 0
[  101.524795][ T5209] Bluetooth: hci2: link tx timeout
[  101.526666][ T5209] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  101.571869][ T9005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.926'.
[  101.620230][ T9011] syz.0.927: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  101.627566][ T9011] CPU: 0 UID: 0 PID: 9011 Comm: syz.0.927 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10-dirty #0 PREEMPT(full) 
[  101.627578][ T9011] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  101.627582][ T9011] Call Trace:
[  101.627585][ T9011]  <TASK>
[  101.627589][ T9011]  dump_stack_lvl+0x189/0x250
[  101.627602][ T9011]  ? __pfx_dump_stack_lvl+0x10/0x10
[  101.627609][ T9011]  ? __pfx__printk+0x10/0x10
[  101.627619][ T9011]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  101.627627][ T9011]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  101.627635][ T9011]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  101.627644][ T9011]  warn_alloc+0x214/0x310
[  101.627654][ T9011]  ? __pfx_warn_alloc+0x10/0x10
[  101.627664][ T9011]  ? __get_vm_area_node+0x28f/0x300
[  101.627675][ T9011]  ? hash_netportnet_create+0x354/0xf90
[  101.627689][ T9011]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  101.627695][ T9011]  ? do_syscall_64+0xfa/0x3b0
[  101.627717][ T9011]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  101.627726][ T9011]  ? rcu_is_watching+0x15/0xb0
[  101.627738][ T9011]  ? hash_netportnet_create+0x354/0xf90
[  101.627748][ T9011]  ? hash_netportnet_create+0x354/0xf90
[  101.627758][ T9011]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  101.627769][ T9011]  ? hash_netportnet_create+0x354/0xf90
[  101.627780][ T9011]  ? hash_netportnet_create+0x2fa/0xf90
[  101.627792][ T9011]  hash_netportnet_create+0x354/0xf90
[  101.627806][ T9011]  ? __nla_parse+0x40/0x60
[  101.627814][ T9011]  ? __pfx_hash_netportnet_create+0x10/0x10
[  101.627826][ T9011]  ip_set_create+0xa97/0x1940
[  101.627835][ T9011]  ? ip_set_create+0x4a2/0x1940
[  101.627848][ T9011]  ? __pfx_ip_set_create+0x10/0x10
[  101.627870][ T9011]  nfnetlink_rcv_msg+0xb4d/0x1130
[  101.627879][ T9011]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  101.627895][ T9011]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  101.627903][ T9011]  ? kasan_save_free_info+0x46/0x50
[  101.627930][ T9011]  netlink_rcv_skb+0x208/0x470
[  101.627941][ T9011]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  101.627951][ T9011]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  101.627966][ T9011]  ? bpf_lsm_capable+0x9/0x20
[  101.627975][ T9011]  ? security_capable+0x7e/0x2e0
[  101.627988][ T9011]  nfnetlink_rcv+0x26a/0x2520
[  101.627998][ T9011]  ? __dev_queue_xmit+0x1d79/0x3b50
[  101.628011][ T9011]  ? __dev_queue_xmit+0x27b/0x3b50
[  101.628046][ T9011]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  101.628057][ T9011]  ? __pfx___dev_queue_xmit+0x10/0x10
[  101.628070][ T9011]  ? ref_tracker_free+0x63a/0x7d0
[  101.628078][ T9011]  ? __asan_memcpy+0x40/0x70
[  101.628086][ T9011]  ? __pfx_ref_tracker_free+0x10/0x10
[  101.628100][ T9011]  ? skb_clone+0x246/0x3a0
[  101.628109][ T9011]  ? __netlink_deliver_tap+0x807/0x850
[  101.628119][ T9011]  ? netlink_deliver_tap+0x2e/0x1b0
[  101.628132][ T9011]  ? netlink_deliver_tap+0x2e/0x1b0
[  101.628145][ T9011]  netlink_unicast+0x82f/0x9e0
[  101.628158][ T9011]  ? __pfx_netlink_unicast+0x10/0x10
[  101.628168][ T9011]  ? netlink_sendmsg+0x642/0xb30
[  101.628177][ T9011]  ? skb_put+0x11b/0x210
[  101.628185][ T9011]  netlink_sendmsg+0x805/0xb30
[  101.628199][ T9011]  ? __pfx_netlink_sendmsg+0x10/0x10
[  101.628211][ T9011]  ? aa_sock_msg_perm+0x94/0x160
[  101.628221][ T9011]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  101.628229][ T9011]  ? __pfx_netlink_sendmsg+0x10/0x10
[  101.628240][ T9011]  __sock_sendmsg+0x21c/0x270
[  101.628251][ T9011]  ____sys_sendmsg+0x505/0x830
[  101.628260][ T9011]  ? __pfx_____sys_sendmsg+0x10/0x10
[  101.628271][ T9011]  ? import_iovec+0x74/0xa0
[  101.628282][ T9011]  ___sys_sendmsg+0x21f/0x2a0
[  101.628291][ T9011]  ? __pfx____sys_sendmsg+0x10/0x10
[  101.628312][ T9011]  ? __fget_files+0x2a/0x420
[  101.628319][ T9011]  ? __fget_files+0x3a0/0x420
[  101.628330][ T9011]  __x64_sys_sendmsg+0x19b/0x260
[  101.628338][ T9011]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  101.628353][ T9011]  ? do_syscall_64+0xbe/0x3b0
[  101.628364][ T9011]  do_syscall_64+0xfa/0x3b0
[  101.628374][ T9011]  ? lockdep_hardirqs_on+0x9c/0x150
[  101.628383][ T9011]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.628390][ T9011]  ? exc_page_fault+0x9f/0xf0
[  101.628400][ T9011]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.628407][ T9011] RIP: 0033:0x7efcb0d8ebe9
[  101.628414][ T9011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  101.628420][ T9011] RSP: 002b:00007efcb1b39038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  101.628428][ T9011] RAX: ffffffffffffffda RBX: 00007efcb0fb5fa0 RCX: 00007efcb0d8ebe9
[  101.628433][ T9011] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004
[  101.628438][ T9011] RBP: 00007efcb0e11e19 R08: 0000000000000000 R09: 0000000000000000
[  101.628442][ T9011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  101.628446][ T9011] R13: 00007efcb0fb6038 R14: 00007efcb0fb5fa0 R15: 00007ffd8309f108
[  101.628458][ T9011]  </TASK>
[  101.628461][ T9011] Mem-Info:
[  101.789393][ T9011] active_anon:9674 inactive_anon:0 isolated_anon:0
[  101.789393][ T9011]  active_file:1328 inactive_file:38230 isolated_file:0
[  101.789393][ T9011]  unevictable:1768 dirty:215 writeback:0
[  101.789393][ T9011]  slab_reclaimable:9682 slab_unreclaimable:84115
[  101.789393][ T9011]  mapped:18392 shmem:2450 pagetables:984
[  101.789393][ T9011]  sec_pagetables:0 bounce:0
[  101.789393][ T9011]  kernel_misc_reclaimable:0
[  101.789393][ T9011]  free:262556 free_pcp:23363 free_cma:0
[  101.804252][ T9011] Node 0 active_anon:24900kB inactive_anon:0kB active_file:4664kB inactive_file:148836kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30688kB dirty:820kB writeback:0kB shmem:4772kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6496kB pagetables:2156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  101.815728][ T9011] Node 1 active_anon:13796kB inactive_anon:0kB active_file:648kB inactive_file:4084kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:42880kB dirty:40kB writeback:0kB shmem:5028kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5036kB pagetables:1780kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  101.826520][ T9011] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  101.836078][ T9011] lowmem_reserve[]: 0 814 814 814 814
[  101.837918][ T9011] Node 0 DMA32 free:264376kB boost:0kB min:33720kB low:42148kB high:50576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24900kB inactive_anon:0kB active_file:4664kB inactive_file:148836kB unevictable:3536kB writepending:820kB present:1556484kB managed:834028kB mlocked:0kB bounce:0kB free_pcp:51000kB local_pcp:32676kB free_cma:0kB
[  101.848525][ T9011] lowmem_reserve[]: 0 0 0 0 0
[  101.850158][ T9011] Node 1 DMA32 free:458492kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  101.859942][ T9011] lowmem_reserve[]: 0 0 854 854 854
[  101.861771][ T9011] Node 1 Normal free:311996kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13796kB inactive_anon:0kB active_file:648kB inactive_file:4084kB unevictable:3536kB writepending:40kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:42444kB local_pcp:15712kB free_cma:0kB
[  101.872371][ T9011] lowmem_reserve[]: 0 0 0 0 0
[  101.873977][ T9011] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  101.878430][ T9011] Node 0 DMA32: 618*4kB (UME) 40*8kB (UME) 13*16kB (UM) 224*32kB (UME) 38*64kB (UME) 23*128kB (UM) 26*256kB (UME) 15*512kB (UM) 3*1024kB (UME) 3*2048kB (UME) 55*4096kB (M) = 264376kB
[  101.884663][ T9011] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  101.890121][ T9011] Node 1 Normal: 591*4kB (UME) 768*8kB (UME) 552*16kB (UME) 123*32kB (UME) 143*64kB (UME) 94*128kB (UME) 35*256kB (UME) 21*512kB (UME) 12*1024kB (UM) 8*2048kB (UM) 54*4096kB (UM) = 312028kB
[  101.896589][ T9011] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  101.899679][ T9011] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  101.902732][ T9011] 42008 total pagecache pages
[  101.904336][ T9011] 0 pages in swap cache
[  101.906007][ T9011] Free swap  = 124996kB
[  101.907402][ T9011] Total swap = 124996kB
[  101.908806][ T9011] 786301 pages RAM
[  101.910045][ T9011] 0 pages HighMem/MovableOnly
[  101.911662][ T9011] 240546 pages reserved
[  101.913692][ T9011] 0 pages cma reserved
[  102.205475][ T9033] syzkaller1: entered promiscuous mode
[  102.207319][ T9033] syzkaller1: entered allmulticast mode
[  102.286991][ T9044] netlink: 16 bytes leftover after parsing attributes in process `syz.0.936'.
[  102.290134][ T9044] netlink: 16 bytes leftover after parsing attributes in process `syz.0.936'.
[  102.293188][ T9044] netlink: 16 bytes leftover after parsing attributes in process `syz.0.936'.
[  102.309493][ T9044] netlink: 16 bytes leftover after parsing attributes in process `syz.0.936'.
[  102.352761][ T9042] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  102.470296][ T9055] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  102.567346][ T9069] ip_vti0: entered promiscuous mode
[  102.569132][ T9069] ip_vti0: entered allmulticast mode
[  102.664102][ T5209] Bluetooth: hci2: link tx timeout
[  102.666150][ T5209] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  102.893076][ T9115] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  102.949865][ T9124] netlink: 'syz.1.960': attribute type 21 has an invalid length.
[  102.952502][ T9124] netlink: 'syz.1.960': attribute type 5 has an invalid length.
[  102.956137][ T9124] netlink: 'syz.1.960': attribute type 6 has an invalid length.
[  103.237848][ T9148] bond0: Device is already in use.
[  103.284750][ T5209] Bluetooth: hci2: command 0x0405 tx timeout
[  103.430420][ T9160] netlink: 'syz.2.972': attribute type 29 has an invalid length.
[  104.275953][ T9183] netlink: 'syz.0.981': attribute type 1 has an invalid length.
[  104.952511][ T9300] netlink: 'syz.1.1016': attribute type 20 has an invalid length.
[  104.958949][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  104.958986][ T9300] netlink: 'syz.1.1016': attribute type 20 has an invalid length.
[  104.969062][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  104.971953][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  104.979272][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  105.136214][ T9315] net_ratelimit: 81 callbacks suppressed
[  105.136226][ T9315] openvswitch: netlink: Tunnel attr 0 has unexpected len 4 expected 8
[  105.349936][ T9337] : renamed from batadv_slave_1 (while UP)
[  105.358130][ T9341] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  105.387920][ T9343] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  105.562512][ T9357] syzkaller1: entered promiscuous mode
[  105.564696][ T9357] syzkaller1: entered allmulticast mode
[  106.154146][ T9375] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  106.160407][ T9375] __nla_validate_parse: 71 callbacks suppressed
[  106.160415][ T9375] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1040'.
[  106.731502][ T9393] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1046'.
[  106.749764][ T9393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1046'.
[  106.752758][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1046'.
[  106.818640][ T9398] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1048'.
[  106.846417][ T9403] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1049'.
[  106.850116][ T9403] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  106.886550][ T9405] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1050'.
[  106.889942][ T9405] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  107.071896][ T9418] tls_set_device_offload: netdev not found
[  107.156655][ T9425] netlink: 'syz.1.1056': attribute type 2 has an invalid length.
[  107.166343][ T9426] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1052'.
[  107.229741][ T9433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1058'.
[  107.247703][ T9433] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1058'.
[  107.337911][ T9439] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  107.483064][ T9445] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  107.529476][   T33] audit: type=1800 audit(1754524310.297:2): pid=9450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1065" name="memory.events" dev="tmpfs" ino=1908 res=0 errno=0
[  107.538297][ T9451] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  107.773217][ T9469] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  107.929426][ T9488] netlink: 'syz.0.1077': attribute type 1 has an invalid length.
[  107.942856][ T9488] 8021q: adding VLAN 0 to HW filter on device bond3
[  108.141754][ T9505] xt_socket: unknown flags 0xfc
[  109.888627][ T9618] netlink: 'syz.0.1118': attribute type 11 has an invalid length.
[  110.293485][ T9646] net_ratelimit: 8 callbacks suppressed
[  110.293494][ T9646] openvswitch: netlink: Key 0 has unexpected len 20 expected 0
[  110.496649][ T9662] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  110.507487][ T9662] batman_adv: batadv0: Interface deactivated: 26
[  110.626058][ T5848] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  110.629126][ T5848] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.632302][ T5848] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  110.636460][ T5848] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.639361][ T5848] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  110.642212][ T5848] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  110.645908][ T5848] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  110.648821][ T5848] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  111.247422][ T9694] __nla_validate_parse: 84 callbacks suppressed
[  111.247432][ T9694] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1144'.
[  111.252878][ T9694] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  111.351625][ T9699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1146'.
[  111.355504][ T9699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1146'.
[  111.358394][ T9699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1146'.
[  111.361689][ T9699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1146'.
[  111.365008][ T9699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1146'.
[  111.628626][ T9706] netlink: 'syz.1.1148': attribute type 2 has an invalid length.
[  111.645210][ T9708] netlink: 'syz.0.1149': attribute type 83 has an invalid length.
[  111.819161][ T9724] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1154'.
[  111.869406][ T9734] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  111.871925][ T9735] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  111.909938][ T9738] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  112.154863][ T9764] netdevsim netdevsim2: Direct firmware load for 2Q failed with error -2
[  112.154886][ T9762] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1164'.
[  112.157560][ T9764] netdevsim netdevsim2: Falling back to sysfs fallback for: 2Q
[  112.188319][ T9766] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  112.271360][ T9779] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1169'.
[  112.278338][ T9779] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  112.421778][ T9790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1173'.
[  112.986676][ T9803] syzkaller0: entered promiscuous mode
[  112.988541][ T9803] syzkaller0: entered allmulticast mode
[  113.844938][ T9846] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  113.891650][ T9851] openvswitch: netlink: Key 0 has unexpected len 20 expected 0
[  114.857295][ T9883] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  114.865384][ T9883] syzkaller0: entered promiscuous mode
[  114.867240][ T9883] syzkaller0: entered allmulticast mode
[  114.877361][ T9882] tipc: Resetting bearer <eth:syzkaller0>
[  114.892567][ T9882] tipc: Disabling bearer <eth:syzkaller0>
[  115.155357][ T9908] openvswitch: netlink: IPv4 tun info is not correct
[  115.951827][ T9958] can: request_module (can-proto-0) failed.
[  115.955898][ T9958] netlink: 'syz.0.1218': attribute type 11 has an invalid length.
[  115.974653][ T9966] netlink: 'syz.2.1221': attribute type 4 has an invalid length.
[  116.298445][ T9986] openvswitch: netlink: Key 0 has unexpected len 20 expected 0
[  116.348533][ T9990] __nla_validate_parse: 14 callbacks suppressed
[  116.348542][ T9990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1229'.
[  116.551743][T10003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1233'.
[  116.554783][T10003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1233'.
[  116.557724][T10003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1233'.
[  116.560944][T10003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1233'.
[  116.563834][T10003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1233'.
[  117.041893][T10023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1238'.
[  117.191178][T10043] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1245'.
[  117.388194][T10053] netlink: 'syz.0.1246': attribute type 13 has an invalid length.
[  117.390770][T10053] netlink: 'syz.0.1246': attribute type 17 has an invalid length.
[  117.410263][T10053] ip_vti0: left promiscuous mode
[  117.412069][T10053] ip_vti0: left allmulticast mode
[  117.437747][T10053] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  117.484766][T10048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  117.619501][T10068] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1254'.
[  117.622536][T10068] netlink: 'syz.1.1254': attribute type 1 has an invalid length.
[  117.763584][T10087] netlink: 'syz.1.1259': attribute type 1 has an invalid length.
[  117.901325][T10106] openvswitch: netlink: Key 0 has unexpected len 20 expected 0
[  117.902224][T10109] netlink: 'syz.1.1265': attribute type 1 has an invalid length.
[  117.907370][T10109] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1265'.
[  117.910752][T10109] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  118.135201][T10126] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  118.498454][T10153] lo speed is unknown, defaulting to 1000
[  118.502553][T10153] wg1 speed is unknown, defaulting to 1000
[  119.144070][T10196] lo speed is unknown, defaulting to 1000
[  119.149158][T10196] wg1 speed is unknown, defaulting to 1000
[  119.381744][T10196] netlink: 'syz.1.1287': attribute type 13 has an invalid length.
[  119.384344][T10196] netlink: 'syz.1.1287': attribute type 17 has an invalid length.
[  119.441077][T10216] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  119.460400][T10226] netlink: 'syz.1.1290': attribute type 1 has an invalid length.
[  119.484951][T10226] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.560434][T10232] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  119.823089][T10248] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  119.826872][T10248] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  120.724533][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  121.647547][T10329] __nla_validate_parse: 21 callbacks suppressed
[  121.647557][T10329] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1322'.
[  121.652783][T10329] net_ratelimit: 1 callbacks suppressed
[  121.652789][T10329] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  121.657489][T10329] openvswitch: netlink: Message has 6332 unknown bytes.
[  121.739087][T10340] netlink: 276 bytes leftover after parsing attributes in process `syz.1.1326'.
[  121.770570][T10345] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1327'.
[  121.927873][T10358] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1331'.
[  122.315049][T10362] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1332'.
[  122.786491][T10373] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1337'.
[  122.789895][T10373] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  122.793380][T10373] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1337'.
[  122.873527][T10381] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1339'.
[  122.876641][T10381] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1339'.
[  122.879555][T10381] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1339'.
[  122.943918][T10392] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  122.956695][T10391] lo speed is unknown, defaulting to 1000
[  122.959423][T10391] wg1 speed is unknown, defaulting to 1000
[  123.118765][T10409] netlink: 'syz.1.1344': attribute type 1 has an invalid length.
[  123.121383][T10409] netlink: 'syz.1.1344': attribute type 2 has an invalid length.
[  123.445010][ T5829] Bluetooth: hci2: command 0x0405 tx timeout
[  124.018397][T10428] openvswitch: netlink: Key 0 has unexpected len 20 expected 0
[  124.508046][T10473] ==================================================================
[  124.510729][T10473] BUG: KASAN: slab-use-after-free in __xfrm_state_insert+0x8af/0x1450
[  124.513357][T10473] Read of size 1 at addr ffff88811b40c330 by task syz.0.1364/10473
[  124.516577][T10473] 
[  124.517394][T10473] CPU: 0 UID: 0 PID: 10473 Comm: syz.0.1364 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10-dirty #0 PREEMPT(full) 
[  124.517404][T10473] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  124.517409][T10473] Call Trace:
[  124.517412][T10473]  <TASK>
[  124.517416][T10473]  dump_stack_lvl+0x189/0x250
[  124.517425][T10473]  ? __virt_addr_valid+0x1c8/0x5c0
[  124.517434][T10473]  ? rcu_is_watching+0x15/0xb0
[  124.517446][T10473]  ? __pfx_dump_stack_lvl+0x10/0x10
[  124.517452][T10473]  ? rcu_is_watching+0x15/0xb0
[  124.517463][T10473]  ? lock_release+0x4b/0x3e0
[  124.517473][T10473]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  124.517484][T10473]  ? __virt_addr_valid+0x1c8/0x5c0
[  124.517491][T10473]  ? __virt_addr_valid+0x4a5/0x5c0
[  124.517500][T10473]  print_report+0xca/0x240
[  124.517510][T10473]  ? __xfrm_state_insert+0x8af/0x1450
[  124.517517][T10473]  kasan_report+0x118/0x150
[  124.517529][T10473]  ? __xfrm_state_insert+0x8af/0x1450
[  124.517539][T10473]  __xfrm_state_insert+0x8af/0x1450
[  124.517547][T10473]  ? xfrm_state_insert+0x44/0x60
[  124.517555][T10473]  xfrm_state_insert+0x54/0x60
[  124.517562][T10473]  ipcomp6_init_state+0x655/0x900
[  124.517570][T10473]  __xfrm_init_state+0xa76/0x13f0
[  124.517578][T10473]  ? __xfrm_init_state+0x7ef/0x13f0
[  124.517586][T10473]  xfrm_add_sa+0x2f5b/0x4070
[  124.517596][T10473]  ? __pfx_xfrm_add_sa+0x10/0x10
[  124.517603][T10473]  ? apparmor_capable+0x137/0x1b0
[  124.517611][T10473]  ? __nla_parse+0x40/0x60
[  124.517619][T10473]  xfrm_user_rcv_msg+0x7a3/0xab0
[  124.517628][T10473]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  124.517641][T10473]  ? __pfx___mutex_trylock_common+0x10/0x10
[  124.517649][T10473]  ? rcu_is_watching+0x15/0xb0
[  124.517659][T10473]  ? trace_contention_end+0x39/0x120
[  124.517666][T10473]  ? __mutex_lock+0x335/0x1340
[  124.517677][T10473]  netlink_rcv_skb+0x208/0x470
[  124.517687][T10473]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  124.517696][T10473]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  124.517707][T10473]  ? netlink_deliver_tap+0x2e/0x1b0
[  124.517717][T10473]  ? netlink_deliver_tap+0x2e/0x1b0
[  124.517727][T10473]  xfrm_netlink_rcv+0x79/0x90
[  124.517735][T10473]  netlink_unicast+0x82f/0x9e0
[  124.517745][T10473]  ? __pfx_netlink_unicast+0x10/0x10
[  124.517754][T10473]  ? netlink_sendmsg+0x642/0xb30
[  124.517764][T10473]  ? skb_put+0x11b/0x210
[  124.517772][T10473]  netlink_sendmsg+0x805/0xb30
[  124.517783][T10473]  ? __pfx_netlink_sendmsg+0x10/0x10
[  124.517794][T10473]  ? aa_sock_msg_perm+0x94/0x160
[  124.517803][T10473]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  124.517811][T10473]  ? __pfx_netlink_sendmsg+0x10/0x10
[  124.517821][T10473]  __sock_sendmsg+0x21c/0x270
[  124.517831][T10473]  ____sys_sendmsg+0x505/0x830
[  124.517839][T10473]  ? __pfx_____sys_sendmsg+0x10/0x10
[  124.517847][T10473]  ? import_iovec+0x74/0xa0
[  124.517857][T10473]  ___sys_sendmsg+0x21f/0x2a0
[  124.517864][T10473]  ? __pfx____sys_sendmsg+0x10/0x10
[  124.517876][T10473]  ? __fget_files+0x2a/0x420
[  124.517882][T10473]  ? __fget_files+0x3a0/0x420
[  124.517890][T10473]  __x64_sys_sendmsg+0x19b/0x260
[  124.517897][T10473]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  124.517906][T10473]  ? rcu_is_watching+0x15/0xb0
[  124.517917][T10473]  ? do_syscall_64+0xbe/0x3b0
[  124.517927][T10473]  do_syscall_64+0xfa/0x3b0
[  124.517961][T10473]  ? lockdep_hardirqs_on+0x9c/0x150
[  124.517972][T10473]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.517979][T10473]  ? exc_page_fault+0x9f/0xf0
[  124.517990][T10473]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.517998][T10473] RIP: 0033:0x7efcb0d8ebe9
[  124.518005][T10473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  124.518011][T10473] RSP: 002b:00007efcb1b39038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  124.518020][T10473] RAX: ffffffffffffffda RBX: 00007efcb0fb5fa0 RCX: 00007efcb0d8ebe9
[  124.518026][T10473] RDX: 0000000020000000 RSI: 00002000000035c0 RDI: 0000000000000008
[  124.518030][T10473] RBP: 00007efcb0e11e19 R08: 0000000000000000 R09: 0000000000000000
[  124.518035][T10473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  124.518040][T10473] R13: 00007efcb0fb6038 R14: 00007efcb0fb5fa0 R15: 00007ffd8309f108
[  124.518047][T10473]  </TASK>
[  124.518050][T10473] 
[  124.652759][T10473] Allocated by task 6098:
[  124.654227][T10473]  kasan_save_track+0x3e/0x80
[  124.655794][T10473]  __kasan_slab_alloc+0x6c/0x80
[  124.657404][T10473]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  124.659210][T10473]  xfrm_state_alloc+0x24/0x2f0
[  124.660810][T10473]  __find_acq_core+0x8a7/0x1c00
[  124.662440][T10473]  xfrm_find_acq+0x78/0xa0
[  124.663919][T10473]  xfrm_alloc_userspi+0x6b3/0xc90
[  124.665612][T10473]  xfrm_user_rcv_msg+0x7a3/0xab0
[  124.667259][T10473]  netlink_rcv_skb+0x208/0x470
[  124.668845][T10473]  xfrm_netlink_rcv+0x79/0x90
[  124.670411][T10473]  netlink_unicast+0x82f/0x9e0
[  124.671963][T10473]  netlink_sendmsg+0x805/0xb30
[  124.673541][T10473]  __sock_sendmsg+0x21c/0x270
[  124.675077][T10473]  ____sys_sendmsg+0x505/0x830
[  124.676601][T10473]  ___sys_sendmsg+0x21f/0x2a0
[  124.678171][T10473]  __x64_sys_sendmsg+0x19b/0x260
[  124.679770][T10473]  do_syscall_64+0xfa/0x3b0
[  124.681280][T10473]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.683232][T10473] 
[  124.684047][T10473] Freed by task 5886:
[  124.685373][T10473]  kasan_save_track+0x3e/0x80
[  124.686955][T10473]  kasan_save_free_info+0x46/0x50
[  124.688624][T10473]  __kasan_slab_free+0x62/0x70
[  124.690232][T10473]  kmem_cache_free+0x18f/0x400
[  124.691818][T10473]  xfrm_state_gc_task+0x518/0x6a0
[  124.693491][T10473]  process_scheduled_works+0xae1/0x17b0
[  124.695332][T10473]  worker_thread+0x8a0/0xda0
[  124.696867][T10473]  kthread+0x711/0x8a0
[  124.698235][T10473]  ret_from_fork+0x3fc/0x770
[  124.699766][T10473]  ret_from_fork_asm+0x1a/0x30
[  124.701360][T10473] 
[  124.702166][T10473] The buggy address belongs to the object at ffff88811b40c000
[  124.702166][T10473]  which belongs to the cache xfrm_state of size 928
[  124.706564][T10473] The buggy address is located 816 bytes inside of
[  124.706564][T10473]  freed 928-byte region [ffff88811b40c000, ffff88811b40c3a0)
[  124.711042][T10473] 
[  124.711844][T10473] The buggy address belongs to the physical page:
[  124.713957][T10473] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88811b40c900 pfn:0x11b40c
[  124.717252][T10473] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  124.720013][T10473] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  124.722466][T10473] page_type: f5(slab)
[  124.723773][T10473] raw: 057ff00000000040 ffff888104e5b3c0 dead000000000122 0000000000000000
[  124.726585][T10473] raw: ffff88811b40c900 00000000800e000b 00000000f5000000 0000000000000000
[  124.729361][T10473] head: 057ff00000000040 ffff888104e5b3c0 dead000000000122 0000000000000000
[  124.732200][T10473] head: ffff88811b40c900 00000000800e000b 00000000f5000000 0000000000000000
[  124.735044][T10473] head: 057ff00000000002 ffffea00046d0301 00000000ffffffff 00000000ffffffff
[  124.737873][T10473] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  124.740625][T10473] page dumped because: kasan: bad access detected
[  124.742726][T10473] page_owner tracks the page as allocated
[  124.744614][T10473] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6098, tgid 6097 (syz.0.52), ts 51091597228, free_ts 51046445294
[  124.750722][T10473]  post_alloc_hook+0x240/0x2a0
[  124.752336][T10473]  get_page_from_freelist+0x21e4/0x22c0
[  124.754152][T10473]  __alloc_frozen_pages_noprof+0x181/0x370
[  124.756084][T10473]  alloc_pages_mpol+0x232/0x4a0
[  124.757708][T10473]  allocate_slab+0x8a/0x3b0
[  124.759224][T10473]  ___slab_alloc+0xbfc/0x1480
[  124.760781][T10473]  kmem_cache_alloc_noprof+0x283/0x3c0
[  124.762594][T10473]  xfrm_state_alloc+0x24/0x2f0
[  124.764197][T10473]  __find_acq_core+0x8a7/0x1c00
[  124.765806][T10473]  xfrm_find_acq+0x78/0xa0
[  124.767300][T10473]  xfrm_alloc_userspi+0x6b3/0xc90
[  124.768977][T10473]  xfrm_user_rcv_msg+0x7a3/0xab0
[  124.770612][T10473]  netlink_rcv_skb+0x208/0x470
[  124.772198][T10473]  xfrm_netlink_rcv+0x79/0x90
[  124.773704][T10473]  netlink_unicast+0x82f/0x9e0
[  124.775299][T10473]  netlink_sendmsg+0x805/0xb30
[  124.776813][T10473] page last free pid 6095 tgid 6094 stack trace:
[  124.778889][T10473]  __free_frozen_pages+0xc71/0xe70
[  124.780592][T10473]  stack_depot_save_flags+0x445/0x900
[  124.782376][T10473]  kasan_save_track+0x4f/0x80
[  124.783950][T10473]  __kasan_kmalloc+0x93/0xb0
[  124.785490][T10473]  __kmalloc_node_noprof+0x276/0x4e0
[  124.787251][T10473]  allocate_slab+0x17c/0x3b0
[  124.788782][T10473]  ___slab_alloc+0xbfc/0x1480
[  124.790359][T10473]  kmem_cache_alloc_lru_noprof+0x288/0x3d0
[  124.792239][T10473]  alloc_inode+0xb8/0x1b0
[  124.793618][T10473]  path_from_stashed+0x200/0x5c0
[  124.795199][T10473]  proc_ns_get_link+0xec/0x210
[  124.796778][T10473]  pick_link+0x636/0xe80
[  124.798175][T10473]  step_into+0xc5d/0xf30
[  124.799585][T10473]  path_openat+0x1bc6/0x3830
[  124.801125][T10473]  do_filp_open+0x1fa/0x410
[  124.802634][T10473]  do_sys_openat2+0x121/0x1c0
[  124.804215][T10473] 
[  124.805025][T10473] Memory state around the buggy address:
[  124.806869][T10473]  ffff88811b40c200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  124.809493][T10473]  ffff88811b40c280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  124.812128][T10473] >ffff88811b40c300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  124.814740][T10473]                                      ^
[  124.816596][T10473]  ffff88811b40c380: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  124.819236][T10473]  ffff88811b40c400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  124.821843][T10473] ==================================================================
[  124.824618][T10473] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  124.827132][T10473] CPU: 0 UID: 0 PID: 10473 Comm: syz.0.1364 Not tainted 6.16.0-syzkaller-06600-g1dbf1d590d10-dirty #0 PREEMPT(full) 
[  124.831090][T10473] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  124.834418][T10473] Call Trace:
[  124.835539][T10473]  <TASK>
[  124.836532][T10473]  dump_stack_lvl+0x99/0x250
[  124.838075][T10473]  ? __asan_memcpy+0x40/0x70
[  124.839606][T10473]  ? __pfx_dump_stack_lvl+0x10/0x10
[  124.841303][T10473]  ? __pfx__printk+0x10/0x10
[  124.842780][T10473]  panic+0x2db/0x790
[  124.844104][T10473]  ? lockdep_hardirqs_on+0x9c/0x150
[  124.845824][T10473]  ? __pfx_panic+0x10/0x10
[  124.847312][T10473]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  124.849267][T10473]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  124.851230][T10473]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  124.853306][T10473]  ? __xfrm_state_insert+0x8af/0x1450
[  124.855074][T10473]  check_panic_on_warn+0x89/0xb0
[  124.856708][T10473]  ? __xfrm_state_insert+0x8af/0x1450
[  124.858490][T10473]  end_report+0x78/0x160
[  124.859894][T10473]  kasan_report+0x129/0x150
[  124.861393][T10473]  ? __xfrm_state_insert+0x8af/0x1450
[  124.863108][T10473]  __xfrm_state_insert+0x8af/0x1450
[  124.864824][T10473]  ? xfrm_state_insert+0x44/0x60
[  124.866407][T10473]  xfrm_state_insert+0x54/0x60
[  124.868018][T10473]  ipcomp6_init_state+0x655/0x900
[  124.869677][T10473]  __xfrm_init_state+0xa76/0x13f0
[  124.871356][T10473]  ? __xfrm_init_state+0x7ef/0x13f0
[  124.873078][T10473]  xfrm_add_sa+0x2f5b/0x4070
[  124.874612][T10473]  ? __pfx_xfrm_add_sa+0x10/0x10
[  124.876256][T10473]  ? apparmor_capable+0x137/0x1b0
[  124.877923][T10473]  ? __nla_parse+0x40/0x60
[  124.879430][T10473]  xfrm_user_rcv_msg+0x7a3/0xab0
[  124.881074][T10473]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  124.882896][T10473]  ? __pfx___mutex_trylock_common+0x10/0x10
[  124.884861][T10473]  ? rcu_is_watching+0x15/0xb0
[  124.886463][T10473]  ? trace_contention_end+0x39/0x120
[  124.888214][T10473]  ? __mutex_lock+0x335/0x1340
[  124.889769][T10473]  netlink_rcv_skb+0x208/0x470
[  124.891377][T10473]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  124.893182][T10473]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  124.894926][T10473]  ? netlink_deliver_tap+0x2e/0x1b0
[  124.896671][T10473]  ? netlink_deliver_tap+0x2e/0x1b0
[  124.898393][T10473]  xfrm_netlink_rcv+0x79/0x90
[  124.899963][T10473]  netlink_unicast+0x82f/0x9e0
[  124.901558][T10473]  ? __pfx_netlink_unicast+0x10/0x10
[  124.903309][T10473]  ? netlink_sendmsg+0x642/0xb30
[  124.904975][T10473]  ? skb_put+0x11b/0x210
[  124.906390][T10473]  netlink_sendmsg+0x805/0xb30
[  124.907998][T10473]  ? __pfx_netlink_sendmsg+0x10/0x10
[  124.909745][T10473]  ? aa_sock_msg_perm+0x94/0x160
[  124.911396][T10473]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  124.913141][T10473]  ? __pfx_netlink_sendmsg+0x10/0x10
[  124.914858][T10473]  __sock_sendmsg+0x21c/0x270
[  124.916385][T10473]  ____sys_sendmsg+0x505/0x830
[  124.917958][T10473]  ? __pfx_____sys_sendmsg+0x10/0x10
[  124.919698][T10473]  ? import_iovec+0x74/0xa0
[  124.921221][T10473]  ___sys_sendmsg+0x21f/0x2a0
[  124.922783][T10473]  ? __pfx____sys_sendmsg+0x10/0x10
[  124.924523][T10473]  ? __fget_files+0x2a/0x420
[  124.926070][T10473]  ? __fget_files+0x3a0/0x420
[  124.927596][T10473]  __x64_sys_sendmsg+0x19b/0x260
[  124.929247][T10473]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  124.931053][T10473]  ? rcu_is_watching+0x15/0xb0
[  124.932652][T10473]  ? do_syscall_64+0xbe/0x3b0
[  124.934232][T10473]  do_syscall_64+0xfa/0x3b0
[  124.935746][T10473]  ? lockdep_hardirqs_on+0x9c/0x150
[  124.937478][T10473]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.939475][T10473]  ? exc_page_fault+0x9f/0xf0
[  124.941027][T10473]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.942892][T10473] RIP: 0033:0x7efcb0d8ebe9
[  124.944392][T10473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  124.950686][T10473] RSP: 002b:00007efcb1b39038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  124.953427][T10473] RAX: ffffffffffffffda RBX: 00007efcb0fb5fa0 RCX: 00007efcb0d8ebe9
[  124.956043][T10473] RDX: 0000000020000000 RSI: 00002000000035c0 RDI: 0000000000000008
[  124.958651][T10473] RBP: 00007efcb0e11e19 R08: 0000000000000000 R09: 0000000000000000
[  124.961246][T10473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  124.963841][T10473] R13: 00007efcb0fb6038 R14: 00007efcb0fb5fa0 R15: 00007ffd8309f108
[  124.966464][T10473]  </TASK>
[  124.968260][T10473] Kernel Offset: disabled
[  124.969625][T10473] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:52:07  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000066 RBX=0000000000000066 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000130a RDI=000000000000130b RBP=00000000000003f8 RSP=ffffc90006b3e9f0
R8 =ffff888021208237 R9 =1ffff11004241046 R10=dffffc0000000000 R11=ffffffff854c1d90
R12=dffffc0000000000 R13=ffffffff99a95911 R14=ffffffff99d9a4e0 R15=0000000000000000
RIP=ffffffff854c1e0c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007efcb1b396c0 ffffffff 00c00000
GS =0000 ffff8880b8680000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000035c0 CR3=000000010aa1a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=b719c9bad7c28d00 RBX=ffffffff81969b18 RCX=b719c9bad7c28d00 RDX=0000000000000001
RSI=ffffffff8d9792eb RDI=ffffffff8be30a00 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa07bf0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110201d8000
RIP=ffffffff8b6fc4f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c80000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007efcb1b38fc8 CR3=00000001100dc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007efcb0e12e53
XMM06=0000000000000000 00007efcb0e12e4d XMM07=0000000000000000 00007efcb0e12e61
XMM08=0000000000000000 00007efcb0e12ee7 XMM09=0000000000000000 00007efcb0e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
