last executing test programs:

1.586415401s ago: executing program 2 (id=448):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x12, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x3c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}, @sadb_x_nat_t_type={0x1, 0x14, 0x8}]}, 0x90}, 0x1, 0x7}, 0x0)

1.525442411s ago: executing program 2 (id=449):
socket$kcm(0xa, 0x922000000003, 0x11)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1a12ff000000004fa100000000000007010000f8ffffffb702000008000000b703000000000000850000009900000095"], &(0x7f0000000000)='syzkaller\x00', 0xa}, 0x94)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000012000501"], 0x40}, 0x13, 0x0, 0x0, 0x881}, 0x20040840)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x5}, 0xfffffffffffffeb0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)

1.466977536s ago: executing program 2 (id=450):
socket(0x21, 0x3, 0xa) (async, rerun: 32)
r0 = socket(0xa, 0x3, 0x3a) (rerun: 32)
ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}) (async)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async)
r1 = socket$inet6(0xa, 0x4, 0x7)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 64)
setsockopt$sock_int(r4, 0x1, 0xb, &(0x7f0000000000)=0x40093, 0x4) (async, rerun: 64)
syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "87fb89", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, {[@routing={0x0, 0x0, 0x1, 0x4, 0x300}]}}}}}, 0x0) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, r3) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0)

1.404177821s ago: executing program 2 (id=452):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x843}, 0x44040) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000cbfdd5fd9f3a98756fba587524d3"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/155}, 0x20) (async)
bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r1}, &(0x7f0000001780)=0x4, &(0x7f00000017c0)='%pS    \x00'}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket(0x1e, 0x4, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000005007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) (async)
r6 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079003000000000009500000000000000db74589d4b38cc306ac390649f8edea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475be393b1f1e4aba75a0750472719cc516eec8b02df8ef39db6e67fa14b769e7f385ba72c64242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba7000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb1, &(0x7f000000cf3d)=""/173, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x53)
r7 = socket$netlink(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000840)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={0x204, r8, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xfff4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xe36d}, {0x6, 0x11, 0xe5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6f00}, {0x6, 0x11, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xffff7fff}, {0x6, 0x11, 0xe}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x58a2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xac}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x200}, {0x6, 0x11, 0x5}}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040) (async)
sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0xfdff)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=ANY=[@ANYBLOB="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"], 0x1128}}, 0x20000000)
r9 = socket(0x8, 0x0, 0x8000)
ioctl$sock_netrom_SIOCADDRT(r9, 0x6180, 0x0)
sendmmsg$inet6(r9, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f00000033c0)=[{0x0}], 0x1}}], 0x1, 0xc0000)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x1ff, 0x8}, &(0x7f0000000280)=0x8) (async)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r9, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x124, 0x3, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x5, 0x1, 0x80000001]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_TUPLE_REPLY={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}, @CTA_NAT_DST={0x4c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x19}}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x8}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}]}, @CTA_TUPLE_MASTER={0x20, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_LABELS_MASK={0xc, 0x17, [0x1, 0x8]}]}, 0x124}, 0x1, 0x0, 0x0, 0x800}, 0x20080000) (async)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xbc, 0x21, 0x1, 0x70bd2a, 0x4, {{@in6=@private1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffff}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in6=@empty, @in=@rand_addr=0x6, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e24, 0x4e23, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0xbc}}, 0x0)

1.286796856s ago: executing program 0 (id=456):
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={0x0, 0x40}}, 0x0) (async)
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0x6}, 0x9c) (async)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
unshare(0x400)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x2c, 0x2, 0x3, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x29}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x10}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r6=>0x0}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, 0x0, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) (async, rerun: 64)
close(0xffffffffffffffff) (async, rerun: 64)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c0007"], 0xd0}}, 0x0) (async)
sendmsg$nl_generic(r3, 0x0, 0xc000) (async)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$inet6(r9, &(0x7f0000000040)={0x1d, 0x4e24, 0x2, @remote, 0x2}, 0x1c)
r10 = socket$phonet_pipe(0x23, 0x5, 0x2)
recvfrom$phonet(r10, 0x0, 0x0, 0x40010102, 0x0, 0x57) (async)
sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x1fc, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x180, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@rand_addr=0x64010102, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x3, 0x0, 0x3504, 0xa, 0x2}, {@in=@private=0xa010102, @in6=@private0, @in6=@remote, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0xa, 0xa}, {@in=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6c, 0x2, 0x0, 0x3507, 0x0, 0xa}, {@in6=@dev={0xfe, 0x80, '\x00', 0x42}, @in6=@initdev={0xfe, 0x88, '\x00', 0x41, 0x0}, @in=@empty, @in=@empty, 0x32, 0x3, 0x0, 0x3504, 0xf, 0x6}]}, @user_kmaddress={0x2c, 0x13, {@in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x2}}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.226332671s ago: executing program 0 (id=458):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_DEL_RULE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"/1078], 0x420}}, 0x40040)
recvmmsg(r1, &(0x7f00000002c0), 0x220, 0x100, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000000000)=0xb, 0x4)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000006c0)=0x14)
sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0xf3}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae9}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007000000000000000000fe80000000000000000000000000001be0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000b4000000000000020000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a00020070000000000000e813000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0)
sendto$unix(r3, &(0x7f0000000240)="0014", 0x2, 0x4040081, 0x0, 0x0)
recvfrom$unix(r4, 0x0, 0x0, 0x10102, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r7 = accept$ax25(0xffffffffffffffff, &(0x7f0000000640)={{0x3, @default}, [@default, @bcast, @null, @bcast, @rose, @null, @rose, @default]}, &(0x7f00000000c0)=0x48)
setsockopt$ax25_SO_BINDTODEVICE(r7, 0x101, 0x19, &(0x7f0000000280)=@rose={'rose', 0x0}, 0x10)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xb, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x40002}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r9 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010002070000000000000900020073797a25000000000800410072786500140033"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$AUDIT_USER_TTY(r9, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000780)={0x48, 0x464, 0x300, 0x70bd2a, 0x25dfdbff, "f4871202d2441e7b78be09000000a29e1fb39713f6433c62b1250979d7718cd584c336e57b0c25d0fff84e9693998204f77fec3938809c", [""]}, 0x48}, 0x1, 0x0, 0x0, 0x4004880}, 0x4008040)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
r11 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r11, &(0x7f0000000080)={{0x3, @default, 0x4}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default]}, 0x48)
connect$ax25(r11, &(0x7f00000001c0)={{0x3, @default}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
sendmmsg$inet6(r10, &(0x7f0000007cc0)=[{{&(0x7f0000000800)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}, 0x6}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000340)='(', 0x1}], 0x1, &(0x7f00000019c0)=ANY=[@ANYBLOB="24000000000000002001000000000000000000000000000e14b65b156c4d1400", @ANYRES32=0x0, @ANYBLOB="00000000400000000000000029000000360000001d04000000000000000100c90300000000000000000000ffffac1414aac910fe8800000000000000000000000001010014000000000000008400000008000000070000000000000014000000000000002900000008000000060000000000000014"], 0xb0}}], 0x1, 0x931766f6319eed40)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r12 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0)

1.031614204s ago: executing program 1 (id=464):
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={0x0, 0x40}}, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
unshare(0x400)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c0007"], 0xd0}}, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}, 0x1c)
sendmsg$nl_generic(r1, 0x0, 0xc000)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="fc0100002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc000000002f2050d38af9ef01b116fa679c00000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x800}, 0x0)

957.104479ms ago: executing program 1 (id=465):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711220000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"})
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000440)={@local, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1={0xff, 0x5}, 0x200003, 0x5, 0x0, 0x100, 0xfc8, 0x20c201a3})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x0, 0x2}, 0x28)
r8 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x890b, &(0x7f0000000000))
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@rand_addr=' \x01\x00', 0xfbfd, 0x0, 0x0, 0x0, 0x2, 0x100, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x403, 0x3}, {0xfffffffffffffffc, 0x0, 0x0, 0x2}, 0x10000000, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f966cccbd8f1827f971e7b5e301443f3cbd0f851cf437814d5", @ANYRES16=0x0, @ANYBLOB="00022abd7004fcdbdf250100000006000a004e24000014000700ff02000000000000000000000000000108000800e000000214000900"/70], 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x0)
socket(0x10, 0x3, 0xc)
unshare(0x40020000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000280)={0x6, 'veth0\x00', {}, 0x5})

621.713059ms ago: executing program 1 (id=466):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETVIFCNT(r0, 0x89e0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="50010000100013040000000200000000fc020000000000000000000000000000200100000000000000000000000000000006000000000000000000202b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="e00000020000000000000000000000000000000032000000ff0200000000000000020000000000010000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000700000000000000000000000000000000000000000000000400000000000000cc000000000000000000000000000000f6000000000000000000000000000000000000000a00040100000000000000005f001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800000080"], 0x150}, 0x1, 0x0, 0x0, 0x1}, 0x0)

620.968004ms ago: executing program 1 (id=467):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r2}, 0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r2, 0xe}, &(0x7f00000001c0)=0x8)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000000000006000000000000000000000000810021970000f5e3fafe22775188d62be000000100"/62, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/112], 0xb8}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000002000000e0000001000000000000000000000000e00000010000000000000000000000004e24000000000000020000100000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000f9ffff3f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000325b6b3fcac1d56300"/101], 0xb8}}, 0x0)

562.973593ms ago: executing program 1 (id=468):
socket(0x21, 0x3, 0xa) (async)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async)
r0 = socket$inet6(0xa, 0x4, 0x7) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) (async)
r2 = socket$netlink(0x10, 0x3, 0x10) (async)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0xb, &(0x7f0000000000)=0x40093, 0x4)
syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "87fb89", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, {[@routing={0x0, 0x0, 0x1, 0x4, 0x300}]}}}}}, 0x0) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (async)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25250000000e0001006e6574646576c424067f6e000f0002006e657464657673696d30007a52515a00c9f2e04718557d12569d7abd642defca837261eea1428e17b2599d52bf09a26fefebcfe5be75fe65f0bacaa8d0aa0b466c1202f417433c39ac22b045d4a0c48726ccdd7ae0ef3aa996708bef281c752dbb4d7aa2296d5aaace39df4ce0d37bcac5357074d7833562971700654a9401bbf3ac0b7c54d15d6ffde5dbf3cdf83db54365c70025040433050d16e71ee2ae03a067bf3055f19ea15a13b830c699240cdfe9b8320e6c"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async, rerun: 64)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$devlink(0x0, r2)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0)

562.119249ms ago: executing program 1 (id=469):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x20, r1, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002d0001000000ea001000000004000080050011802efff20004001d"], 0x20}], 0x1}, 0x300)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x7, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES64=r2], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4044004)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000083c0)=[{{0x0, 0x0, 0x0}, 0x8000}, {{0x0, 0x0, 0x0}, 0x8000}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x10008}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000007c0)=""/273, 0x111}, {&(0x7f00000000c0)=""/76, 0x4c}, {&(0x7f0000005c00)=""/4113, 0x1011}, {&(0x7f00000005c0)=""/236, 0xec}, {0x0}], 0x5}, 0x80000000}], 0x4, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
readv(r3, &(0x7f0000000b80)=[{&(0x7f00000009c0)=""/218, 0xda}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000000740)=""/90, 0x5a}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000000580)=""/59, 0x3b}, {&(0x7f0000000ac0)=""/172, 0xac}], 0x8)
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$nl_generic(r3, &(0x7f00000004c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000dc0)={0x1c, 0x10, 0x200, 0x70bd27, 0x25dfdbfd, {0xe}, [@typed={0x8, 0xff, 0x0, 0x0, @u32=0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x401c895}, 0x4000010)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r8}, 0x10)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000)
pselect6(0x40, &(0x7f0000000400)={0x0, 0x6, 0x2, 0x100000001, 0x0, 0xa, 0x3, 0x80000001}, 0x0, 0x0, 0x0, &(0x7f0000002880)={&(0x7f0000002840)={[0x81]}, 0x8})
setsockopt$sock_int(r7, 0x1, 0x21, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet_int(r7, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4)
bind$inet(r7, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10)
write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
r9 = socket(0x2c, 0x2, 0x2)
getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000340)={<r10=>0x0, 0x7}, &(0x7f0000000380)=0x8)
getsockopt$inet_sctp6_SCTP_MAXSEG(r9, 0x84, 0xd, &(0x7f00000003c0)=@assoc_value={r10, 0x8}, &(0x7f0000000440)=0x8)
r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_lsm={0x1d, 0x19, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000ff0100000000190006000000181100000039a4d27bf7e20d2fd5e0918f086e50e350797be99e634411caa9c6f6ce22e68ecea32269a577cedfef156d0d1e07ca44425ddfebf078640d41fefdb727d2dbffefd3efd6fe562aafbdfc040e4b9c7669ff970ea83713137104113a5e3bf678a2083e96079518a88cc6bf4160c98ff6a7f1a38a92ebddf377915bddeea83f8c757370207eae6f47900c44021059e6e07e238a0100aa67bdc9c6746e24dd04f781ef0e7c3365614eb4000d8617e5669b88dd9acd43edaf1da25ecb8c6de9", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000006000000852000000300000085100000fcffffffbf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x800, 0x0, &(0x7f0000000140), 0x40f00, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x6, 0xe37b, 0x1000}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000006c0)=[{0x2, 0x2, 0x4, 0x2}, {0x0, 0x1, 0x10, 0x1}, {0x0, 0x2, 0xe, 0x2}, {0x2, 0x4, 0xf, 0x8}, {0x0, 0x5, 0xc, 0xa}, {0x0, 0x2, 0x9, 0x9}, {0x2, 0x5, 0xb, 0x8}, {0x0, 0x5, 0x0, 0x9}], 0x10, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000002c0)={0x0, r11}, 0x10)
sendmsg$nl_xfrm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e00)=@getsadinfo={0x138, 0x23, 0x4, 0x70bd2a, 0x25dfdbfc, 0x0, [@algo_auth_trunc={0xcf, 0x14, {{'sha384-avx2\x00'}, 0x418, 0x0, "2017bebf0a9fff5c77aa44a61f210260d7a9f8889c4bd70824c77827d21b296bfea0567dfe65b86d6e6073909622c74dfeae3436da4db80aaf2c649cef6f0ea82a31d3893ec1dd4cd84374f1c2bc7e628b2a1b8e4b02ec83e3d8cbad328eb1f25ddce83323c3b15736ed3d1716a82b08a0f8058f62099d6f8fde018bb579689926290e"}}, @etimer_thresh={0x8, 0xc, 0x3}, @XFRMA_SET_MARK={0x8, 0x1d, 0x2}, @srcaddr={0x14, 0xd, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}, @lifetime_val={0x24, 0x9, {0x10000, 0xffffffffffffffff, 0x2, 0x8d5}}, @mark={0xc, 0x15, {0x35075a, 0x1}}]}, 0x138}}, 0x8a4)

365.7871ms ago: executing program 0 (id=470):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="50010000100013040000000200000000fc020000000000000000000000000000200100000000000000000000000000000006000000000000000000202b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="e00000020000000000000000000000000000000032000000ff0200000000000000020000000000010000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000700000000000000000000000000000000000000000000000400000000000000cc000000000000000000000000000000f6000000000000000000000000000000000000000a00040100000000000000005f001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800000080"], 0x150}, 0x1, 0x0, 0x0, 0x1}, 0x0)

364.670455ms ago: executing program 0 (id=471):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x100, 0x4)
mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x200000d, 0x11, r2, 0x100000000)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000002040)="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", 0xfc1}], 0x1, 0xe)
close(0x3)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x400, 0x0, 0x25dfdbfc, {{@in6=@private1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000, 0x1}, 0x0, 0x0, 0x1, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0xc3b, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xb}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x48}}, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x200, {0x1d, 0x1, 0x8}, [@CGW_DST_IF={0x8, 0xa, r10}, @CGW_SRC_IF={0x8}]}, 0x24}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r11 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x4004881}, 0xc024030)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)

316.882601ms ago: executing program 0 (id=472):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000640)=0x6d93, 0x4)
sendmsg$sock(r1, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x41d, @remote, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x18, 0x1, 0x51, 0x1}}], 0x18}, 0x2004c0c1)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000600)=@newsa={0x140, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@local, @in=@loopback, 0x4e23, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0xc}, {@in=@rand_addr=0x64010101, 0x20, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, {0xfffffffffffffffe, 0x0, 0x0, 0x800000000000001, 0x10000000002c8, 0x6, 0x4000000000000}, {0x1fffffffffff, 0x8, 0x0, 0x4}, {0x0, 0x9}, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4075}, 0x4800)
r2 = socket$inet6(0xa, 0x3, 0x4)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x5}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}}, 0xe8)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}, 0x1, 0x9}, 0x90)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7}}}, 0x19)

315.384629ms ago: executing program 0 (id=473):
socket$netlink(0x10, 0x3, 0x10) (async)
r0 = socket$netlink(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)=ANY=[], 0x20) (async)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)=ANY=[], 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x44, 0x8, 0x0, 0x0}}, 0x10)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r2, &(0x7f0000000400), &(0x7f0000000440)=""/236}, 0x20)
socket$inet6(0xa, 0x2, 0x0) (async)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r4, &(0x7f0000001640)={@void, @void, @ipv6=@udp={0xd, 0x6, "6ff169", 0x8, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, {[], {0x4e25, 0x4e21, 0x8}}}}, 0x30)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt(r5, 0xff, 0x1, 0x0, &(0x7f0000000040))
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats})
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0xff7ffeff}, {0x6, 0xa, 0xfe, 0x8001}]})
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x4, 0x84)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r8}, 0x18)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8) (async)
r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8)
write$cgroup_int(r10, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x4000010, 0xffffffffffffffff, 0x54099000)

5.501409ms ago: executing program 2 (id=474):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_newrule={0x38, 0x1e, 0x1, 0xfffffffd, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'vlan0\x00'}, @FRA_DST={0x8, 0x1, @rand_addr=0x64010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x42812}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='fsi_master_acf_cmd_abs_addr\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffff90}, 0x18)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x4d5, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}, {{@in=@multicast1, 0x4d4, 0x3c}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x3504, 0x2, 0x2, 0x6, 0x0, 0x1}]}]}, 0x1ac}}, 0x0)

0s ago: executing program 2 (id=475):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28)
sendmsg$inet(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)="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", 0x18f}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f1ad325e0325bc473c3aeaf6709e5227bca1f7ba283d381d4f64e34fa77c5cac5d0bcf72850aaa9ea7f9144a008ae41f51262011dd0a3eb6eaf00da010b18a79f6917d0c25efbf1c56feb59cbf4683c026aa7aa1d65bea9ba31000000", 0x91}, {&(0x7f0000000940)="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", 0x105}, {&(0x7f0000000500)="0f1d547dfd011eee5ee96e9f1947841b6080ffadffd0f2ba53588a463cb08890097ea28302b894feb895cebb0e72a94c681955c3a39a1e5ebde1638c8f408cbb197ede5a6779e4732b685db9abb1184d1e4bf53bb5eafcc7d265002aeead4852d157cfb83a10f4d80f000000000000a7f702c9424df1ffbd0387c5e7777aa1bf37cbffb95d0daf", 0x87}, {&(0x7f0000000d40)="7a60507430110d45fba18e434184c81c9a10404af273af02537863cd4f9b455ba771ca5222198ae07333ef0d2beff796d017427138340fc2b1528610600c9b212beee90a7941df2f1ec90efc69156c30892b39b7b43f9ddf11e5949fede6ff979b7825229a356cc43023e2eb30577ca2725e6c1ce2e4557d4150336ac279203360ee37b013478d551d95f67dce3d0fa468aed602dc9f641bbacbeac908a860f4d02f22946a5a51f0bd6896b5fb16e75d3437356e3e8307aad07b767649101165270eb5c85ef394c82bc6cd3d2c5954f370361578736b68b2d8d89106b8798d0c28ddc5073e684f7eac3bf100b23c33b516a65aa43705cc1ee3eecea26ef77ec1cc614d8ff2c0e4deba0c70855cfcb08879e6a2928af4018abaeae2ba1e756b250e139ef07219eab5d412f7db8c6dea869cd9fb913f649ec5bd2e019227d678fb8cfdb9d7f5049b9bc9c1b444d76eab7ee99e2505c8fb7aad23b61ee7b04166561e37238ae844cf9ee6c948d485f4f738854f3116a97f531ad67cc4d6fb366dab973b77f54866b1a60fd91d61b86bf684be5392b00f3431f66432865ef46c34fcacfb30a9c685369cf52ccbdc1cecabfc12025b01f0b0236f9babd62f7535c2be61e92b580c061a3ce841eddb1b146c02556c92c5", 0x1d4}, {&(0x7f00000020c0)="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", 0x981}], 0x6}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
recvfrom$inet6(r0, &(0x7f0000000100)=""/19, 0xff1, 0x40, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=@newsa={0x164, 0x10, 0x1, 0x7fffffc, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@multicast2, 0x4, 0x6c}, @in6=@remote, {0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x5, 0x4, 0xd, 0xa}, {0x0, 0x400}, 0xfffffffc, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0x3, 0x10, 0x1, 0x1}}, @etimer_thresh={0x8, 0xc, 0x6}]}, 0x164}}, 0x20000000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:43411' (ED25519) to the list of known hosts.
syzkaller login: [   41.168740][ T5765] cgroup: Unknown subsys name 'net'
[   41.273622][ T5765] cgroup: Unknown subsys name 'cpuset'
[   41.277890][ T5765] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   43.032253][ T5765] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.577102][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.580297][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.583488][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.587665][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.590837][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.606776][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.609312][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.621487][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.624499][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.627249][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.645365][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.649112][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.652478][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.655938][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.659254][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.767655][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   46.837338][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.840509][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.844160][ T5837] bridge_slave_0: entered allmulticast mode
[   46.847006][ T5837] bridge_slave_0: entered promiscuous mode
[   46.856342][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.858968][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.862063][ T5837] bridge_slave_1: entered allmulticast mode
[   46.864848][ T5837] bridge_slave_1: entered promiscuous mode
[   46.883244][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   46.890391][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.904766][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.930506][ T5837] team0: Port device team_slave_0 added
[   46.936513][ T5837] team0: Port device team_slave_1 added
[   46.973594][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.976046][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.984477][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.988858][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.991163][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.000265][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.005758][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.008715][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.012287][ T5841] bridge_slave_0: entered allmulticast mode
[   47.015250][ T5841] bridge_slave_0: entered promiscuous mode
[   47.033776][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.036737][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.039596][ T5841] bridge_slave_1: entered allmulticast mode
[   47.042927][ T5841] bridge_slave_1: entered promiscuous mode
[   47.079465][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.086190][ T5837] hsr_slave_0: entered promiscuous mode
[   47.088650][ T5837] hsr_slave_1: entered promiscuous mode
[   47.092789][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.114817][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   47.120731][ T5841] team0: Port device team_slave_0 added
[   47.128614][ T5841] team0: Port device team_slave_1 added
[   47.177179][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.179909][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.190040][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.204264][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.207160][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.217408][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.256624][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.259030][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.262115][ T5845] bridge_slave_0: entered allmulticast mode
[   47.265164][ T5845] bridge_slave_0: entered promiscuous mode
[   47.269561][ T5841] hsr_slave_0: entered promiscuous mode
[   47.272234][ T5841] hsr_slave_1: entered promiscuous mode
[   47.274244][ T5841] debugfs: 'hsr0' already exists in 'hsr'
[   47.276168][ T5841] Cannot create hsr debugfs directory
[   47.287019][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.289857][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.294075][ T5845] bridge_slave_1: entered allmulticast mode
[   47.297239][ T5845] bridge_slave_1: entered promiscuous mode
[   47.323931][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.334689][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.337887][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.359290][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.363836][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.372778][ T5845] team0: Port device team_slave_0 added
[   47.378461][ T5845] team0: Port device team_slave_1 added
[   47.383330][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.403440][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.406228][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.417012][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.428902][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.431583][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.441684][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.493712][ T5845] hsr_slave_0: entered promiscuous mode
[   47.496511][ T5845] hsr_slave_1: entered promiscuous mode
[   47.499195][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   47.502274][ T5845] Cannot create hsr debugfs directory
[   47.507796][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.510179][ T5837] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.513060][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.515247][ T5837] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.586743][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.602520][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.613516][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.622141][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.644202][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.649445][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.658495][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.664218][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.678850][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.681155][ T5841] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.683474][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.685608][ T5841] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.690430][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.700994][ T1855] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.704086][ T1855] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.708460][ T1855] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.711333][ T1855] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.718165][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   47.744235][ T1855] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.747146][ T1855] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.750621][ T1855] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.752890][ T1855] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.806660][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.820142][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   47.842658][ T1855] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.845436][ T1855] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.861326][ T1855] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.863809][ T1855] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.882887][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.905784][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.916411][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   47.930536][ T5841] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   47.937017][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.951187][ T1855] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.953637][ T1855] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.969087][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.972150][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.008135][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   48.020294][ T5837] veth0_vlan: entered promiscuous mode
[   48.036205][ T5837] veth1_vlan: entered promiscuous mode
[   48.054252][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.098468][ T5841] veth0_vlan: entered promiscuous mode
[   48.105412][ T5837] veth0_macvtap: entered promiscuous mode
[   48.114617][ T5841] veth1_vlan: entered promiscuous mode
[   48.119222][ T5837] veth1_macvtap: entered promiscuous mode
[   48.140033][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.156986][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.166667][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.176626][ T5841] veth0_macvtap: entered promiscuous mode
[   48.182441][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.189576][ T5841] veth1_macvtap: entered promiscuous mode
[   48.192877][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.196350][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.199692][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.232847][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.240516][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.254318][ T5876] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.260582][ T5876] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.265482][ T5876] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.279019][ T5876] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.288397][ T5845] veth0_vlan: entered promiscuous mode
[   48.292596][ T1855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.296345][ T1855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.305511][ T5845] veth1_vlan: entered promiscuous mode
[   48.325142][ T1855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.328597][ T1855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.349173][ T5845] veth0_macvtap: entered promiscuous mode
[   48.366667][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.371657][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.374233][ T5845] veth1_macvtap: entered promiscuous mode
[   48.384180][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.415000][ T5905] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2'.
[   48.415166][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.426700][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.433451][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.436862][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.463191][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.472572][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.485978][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.514349][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.556195][ T5914] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.573718][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.576962][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.586487][ T5914] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.601850][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.604650][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.640341][ T5917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'.
[   48.651124][ T5839] Bluetooth: hci0: command tx timeout
[   48.656945][ T5914] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.661295][ T5839] Bluetooth: hci1: command tx timeout
[   48.664538][ T5919] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6'.
[   48.707421][ T5914] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.723841][ T5920] pim6reg: entered allmulticast mode
[   48.731533][ T5839] Bluetooth: hci2: command tx timeout
[   48.734352][ T5920] pim6reg: left allmulticast mode
[   48.739361][ T5921] netlink: 'syz.1.6': attribute type 10 has an invalid length.
[   48.789726][ T5921] team0: Port device dummy0 added
[   48.791660][ T5923] netlink: 'syz.1.6': attribute type 10 has an invalid length.
[   48.793152][ T5917] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3'.
[   48.797036][ T5923] team0: Port device dummy0 removed
[   48.801502][ T5923] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   49.110288][ T5928] warning: `syz.2.8' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   49.208679][ T5936] syz.2.9 uses obsolete (PF_INET,SOCK_PACKET)
[   49.490135][ T5949] netlink: 508 bytes leftover after parsing attributes in process `syz.2.13'.
[   49.738959][ T5983] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   49.743297][ T5983] tipc: Started in network mode
[   49.745367][ T5983] tipc: Node identity b6fe15f2eded, cluster identity 4711
[   49.747848][ T5983] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   49.750583][ T5983] syzkaller0: entered promiscuous mode
[   49.753668][ T5983] syzkaller0: entered allmulticast mode
[   49.759590][ T5983] tipc: Resetting bearer <eth:syzkaller0>
[   49.874069][ T5982] tipc: Resetting bearer <eth:syzkaller0>
[   49.879094][ T5982] tipc: Disabling bearer <eth:syzkaller0>
[   49.939350][ T6000] syzkaller1: entered promiscuous mode
[   49.942494][ T6000] syzkaller1: entered allmulticast mode
[   50.541686][ T5876] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.547766][ T5876] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.556501][ T5876] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.564873][ T5876] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.605648][ T6002] netlink: 'syz.0.24': attribute type 1 has an invalid length.
[   50.608604][ T6002] netlink: 'syz.0.24': attribute type 1 has an invalid length.
[   50.731790][ T5839] Bluetooth: hci1: command tx timeout
[   50.732406][   T55] Bluetooth: hci0: command tx timeout
[   50.811635][   T55] Bluetooth: hci2: command tx timeout
[   50.844314][ T6016] netlink: zone id is out of range
[   50.846490][ T6016] netlink: zone id is out of range
[   50.848495][ T6016] netlink: zone id is out of range
[   50.850591][ T6016] netlink: zone id is out of range
[   50.856970][ T6016] netlink: zone id is out of range
[   50.859076][ T6016] netlink: zone id is out of range
[   50.862150][ T6016] netlink: zone id is out of range
[   50.864355][ T6016] netlink: zone id is out of range
[   50.866467][ T6016] netlink: del zone limit has 8 unknown bytes
[   50.881769][ T6016] Zero length message leads to an empty skb
[   50.910186][ T6019] netlink: 'syz.0.28': attribute type 29 has an invalid length.
[   50.920406][ T6019] netlink: 'syz.0.28': attribute type 29 has an invalid length.
[   50.934258][ T6019] netlink: 500 bytes leftover after parsing attributes in process `syz.0.28'.
[   51.289606][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32'.
[   51.303305][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33'.
[   51.767503][ T6056] netlink: 148 bytes leftover after parsing attributes in process `syz.2.39'.
[   51.844632][ T6060] netlink: 164548 bytes leftover after parsing attributes in process `syz.0.41'.
[   51.863917][ T6061] ip6gre0: entered promiscuous mode
[   51.865967][ T6061] ip6gre0: entered allmulticast mode
[   52.030576][ T6082] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   52.811181][   T55] Bluetooth: hci0: command tx timeout
[   52.811891][ T5839] Bluetooth: hci1: command tx timeout
[   52.901632][ T5839] Bluetooth: hci2: command tx timeout
[   54.891637][ T5839] Bluetooth: hci1: command tx timeout
[   54.891780][   T55] Bluetooth: hci0: command tx timeout
[   54.971323][   T55] Bluetooth: hci2: command tx timeout
[   70.972729][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   70.975442][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   81.213346][   T24] cfg80211: failed to load regulatory.db
[   85.032114][ T6113] __nla_validate_parse: 37 callbacks suppressed
[   85.032129][ T6113] netlink: 16 bytes leftover after parsing attributes in process `syz.2.54'.
[   85.035364][ T6114] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[   85.075984][ T6120] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   85.180190][ T6131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.58'.
[   85.189849][ T6131] veth0_to_hsr: entered promiscuous mode
[   85.196424][ T6131] veth0_to_hsr: entered allmulticast mode
[   85.354524][ T6148] delete_channel: no stack
[   85.361692][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.62'.
[   85.406889][ T6152] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[   85.526538][ T6164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.69'.
[   85.558863][ T6169] trusted_key: syz.2.70 sent an empty control message without MSG_MORE.
[   85.568316][ T6169] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[   85.576884][ T6169] netlink: 'syz.2.70': attribute type 21 has an invalid length.
[   85.583316][ T6169] netlink: 132 bytes leftover after parsing attributes in process `syz.2.70'.
[   85.664325][ T6179] netlink: 96 bytes leftover after parsing attributes in process `syz.1.74'.
[   85.673440][ T6181] netlink: 80 bytes leftover after parsing attributes in process `syz.2.75'.
[   85.687216][ T6183] netlink: 'syz.1.76': attribute type 29 has an invalid length.
[   85.692086][ T6183] netlink: 'syz.1.76': attribute type 29 has an invalid length.
[   85.695593][ T6183] netlink: 500 bytes leftover after parsing attributes in process `syz.1.76'.
[   85.698496][ T6183] unsupported nla_type 58
[   85.784904][ T6192] openvswitch: netlink: Duplicate or invalid key (type 0).
[   85.788008][ T6192] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   85.870562][ T6202] netlink: 3 bytes leftover after parsing attributes in process `syz.2.82'.
[   85.878297][ T6202] batadv1: entered promiscuous mode
[   85.880194][ T6202] batadv1: entered allmulticast mode
[   86.185692][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.89'.
[   86.291985][ T6237] pim6reg: entered allmulticast mode
[   86.298432][ T6237] pim6reg: left allmulticast mode
[   86.440744][ T6253] IPv6: NLM_F_REPLACE set, but no existing node found!
[   86.587478][ T6271] netlink: 'syz.1.99': attribute type 10 has an invalid length.
[   86.615251][ T6275] netlink: 'syz.0.103': attribute type 10 has an invalid length.
[   86.635248][ T6275] team0: Port device geneve0 added
[   87.570096][ T6320] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   87.575130][ T6320] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   88.132415][ T6303] Set syz1 is full, maxelem 65536 reached
[   88.216947][ T6337] netlink: 'syz.0.123': attribute type 83 has an invalid length.
[   88.231593][ T6337] team0: Port device team_slave_0 removed
[   89.328279][ T6449] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.367762][ T6465] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.375345][ T6449] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.416268][ T6449] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.440593][ T6477] netlink: 'syz.1.135': attribute type 1 has an invalid length.
[   89.466408][ T6477] 8021q: adding VLAN 0 to HW filter on device bond1
[   89.472919][ T6449] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.483692][ T6477] bond1: (slave geneve2): making interface the new active one
[   89.487158][ T6477] bond1: (slave geneve2): Enslaving as an active interface with an up link
[   89.496598][ T6477] bond1: entered promiscuous mode
[   89.498627][ T6477] geneve2: entered promiscuous mode
[   89.530067][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.562843][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.568144][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.581394][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.192827][ T6537] __nla_validate_parse: 19 callbacks suppressed
[   90.192840][ T6537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.153'.
[   90.198325][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'.
[   90.319697][ T6545] netlink: 'syz.1.155': attribute type 10 has an invalid length.
[   90.701895][ T6555] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.756127][ T6555] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.835856][ T6555] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.884770][ T6555] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.199467][ T6567] netlink: 52 bytes leftover after parsing attributes in process `syz.1.162'.
[   91.264238][ T6570] netlink: 'syz.1.162': attribute type 10 has an invalid length.
[   91.267890][ T6570] bond0: (slave dummy0): Releasing backup interface
[   91.272797][ T6570] team0: Port device dummy0 added
[   91.275445][ T6570] netlink: 'syz.1.162': attribute type 10 has an invalid length.
[   91.280481][ T6570] team0: Port device dummy0 removed
[   91.287063][ T6570] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   91.576382][ T6587] netlink: 'syz.2.167': attribute type 10 has an invalid length.
[   91.586845][ T6587] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   91.803232][ T6590] IPv6: NLM_F_REPLACE set, but no existing node found!
[   92.016702][ T6602] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.058252][ T6602] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.086961][ T6602] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.145656][ T6602] bond0: (slave netdevsim0): Releasing backup interface
[   92.149308][ T6602] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.244558][ T5876] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.252175][ T5876] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.257438][ T5876] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.266024][ T5876] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.181457][ T6623] netlink: 32 bytes leftover after parsing attributes in process `syz.2.179'.
[   93.191826][ T6623] netlink: 'syz.2.179': attribute type 28 has an invalid length.
[   93.225413][ T6628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.181'.
[   93.268054][ T6634] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.324326][ T6636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.184'.
[   93.412135][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.420302][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.429057][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.439011][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.469983][ T6647] netlink: 'syz.0.187': attribute type 8 has an invalid length.
[   93.685534][ T6659] netlink: 80 bytes leftover after parsing attributes in process `syz.1.189'.
[   93.758938][ T6664] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   94.000290][ T6697] netlink: 308 bytes leftover after parsing attributes in process `syz.1.194'.
[   94.005824][ T6697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'.
[   94.009575][ T6697] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[   94.024592][ T6697] netlink: 124 bytes leftover after parsing attributes in process `syz.1.194'.
[   94.028442][ T6701] netlink: 'syz.0.196': attribute type 6 has an invalid length.
[   94.032760][ T6699] netlink: 'syz.0.196': attribute type 6 has an invalid length.
[   94.041650][ T6698] sctp: [Deprecated]: syz.0.196 (pid 6698) Use of int in max_burst socket option.
[   94.041650][ T6698] Use struct sctp_assoc_value instead
[   94.117101][ T6711] netlink: 'syz.0.198': attribute type 10 has an invalid length.
[   94.122109][ T6711] netlink: 'syz.0.198': attribute type 10 has an invalid length.
[   94.158346][ T6718] netlink: 'syz.0.199': attribute type 1 has an invalid length.
[   94.178266][ T6718] 8021q: adding VLAN 0 to HW filter on device bond1
[   94.453332][ T6741] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   94.493177][ T6743] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.498521][ T6743] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   94.504470][ T6743] batman_adv: batadv0: Removing interface: batadv_slave_0
[   94.510665][ T6743] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[   94.797459][ T6752] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.800057][ T6752] syzkaller0: entered promiscuous mode
[   94.802653][ T6752] syzkaller0: entered allmulticast mode
[   94.809397][ T6752] tipc: Resetting bearer <eth:syzkaller0>
[   95.407107][ T6795] __nla_validate_parse: 4 callbacks suppressed
[   95.407122][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.215'.
[   95.426928][ T6795] netlink: 16 bytes leftover after parsing attributes in process `syz.0.215'.
[   95.511961][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'.
[   95.523866][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'.
[   95.628763][ T6751] tipc: Resetting bearer <eth:syzkaller0>
[   95.636866][ T6751] tipc: Disabling bearer <eth:syzkaller0>
[   95.719473][ T6814] syzkaller1: entered allmulticast mode
[   95.726244][ T6814] syzkaller1: left allmulticast mode
[   95.732724][ T6814] netlink: 165 bytes leftover after parsing attributes in process `syz.0.219'.
[   95.883770][ T6819] 8021q: adding VLAN 0 to HW filter on device bond2
[   95.895219][ T6819] bond2: (slave geneve3): making interface the new active one
[   95.899436][ T6819] bond2: (slave geneve3): Enslaving as an active interface with an up link
[   95.934467][ T6822] netlink: 36 bytes leftover after parsing attributes in process `syz.1.222'.
[   96.022567][ T5839] Bluetooth: hci2: command 0x0405 tx timeout
[   96.335179][ T6827] veth1_to_bond: entered allmulticast mode
[   96.339098][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.224'.
[   96.345825][ T6827] bond0: (slave bond_slave_1): Releasing backup interface
[   96.354322][ T6827] veth1_to_bond (unregistering): left allmulticast mode
[   96.391122][ T6828] netlink: 12 bytes leftover after parsing attributes in process `syz.2.224'.
[   96.439474][   T10] IPVS: starting estimator thread 0...
[   96.523569][ T6838] validate_nla: 2 callbacks suppressed
[   96.523604][ T6838] netlink: 'syz.2.226': attribute type 15 has an invalid length.
[   96.531392][ T6833] IPVS: using max 92 ests per chain, 220800 per kthread
[   96.709462][ T6847] netlink: 'syz.2.229': attribute type 29 has an invalid length.
[   96.713668][ T6847] netlink: 'syz.2.229': attribute type 29 has an invalid length.
[   96.716911][ T6847] netlink: 500 bytes leftover after parsing attributes in process `syz.2.229'.
[   96.746958][ T6849] : renamed from wg2 (while UP)
[   96.755684][ T6848] delete_channel: no stack
[   96.800140][ T6853] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   96.806432][ T6853] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   96.901857][ T6866] syzkaller0: entered promiscuous mode
[   96.903782][ T6866] syzkaller0: entered allmulticast mode
[   97.181483][ T6876] xt_time: invalid argument - start or stop time greater than 23:59:59
[   98.071886][ T6897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.244'.
[   98.148593][ T6905] pim6reg: entered allmulticast mode
[   98.169097][ T6905] pim6reg: left allmulticast mode
[   98.663944][ T6940] netlink: 'syz.0.256': attribute type 9 has an invalid length.
[   98.682447][ T6940] netlink: 'syz.0.256': attribute type 10 has an invalid length.
[   98.713423][ T6940] team0: Port device dummy0 added
[   98.717414][ T6940] netlink: 'syz.0.256': attribute type 10 has an invalid length.
[   98.739236][ T6940] team0: Port device dummy0 removed
[   98.743704][ T6940] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   98.745750][ T6941] netlink: 'syz.1.257': attribute type 10 has an invalid length.
[   98.762085][ T6941] bond0: (slave dummy0): Releasing backup interface
[   98.777262][ T6941] team0: Port device dummy0 added
[   99.309160][ T6946] pim6reg: entered allmulticast mode
[   99.312584][ T6946] pim6reg: left allmulticast mode
[   99.498101][ T6953] netlink: 'syz.0.261': attribute type 1 has an invalid length.
[   99.544304][ T6956] Bluetooth: MGMT ver 1.23
[   99.555554][ T6953] 8021q: adding VLAN 0 to HW filter on device bond2
[   99.572395][ T6953] veth5: entered promiscuous mode
[   99.585157][ T6953] bond0: (slave dummy0): Releasing backup interface
[   99.592962][ T6953] bridge_slave_0: left allmulticast mode
[   99.595510][ T6953] bridge_slave_0: left promiscuous mode
[   99.598102][ T6953] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.604753][ T6953] bridge_slave_1: left allmulticast mode
[   99.607780][ T6953] bridge_slave_1: left promiscuous mode
[   99.610483][ T6953] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.617983][ T6953] bond0: (slave bond_slave_0): Releasing backup interface
[   99.626858][ T6953] bond0: (slave bond_slave_1): Releasing backup interface
[   99.630390][ T6957] netlink: 'syz.1.262': attribute type 10 has an invalid length.
[   99.636426][ T6953] team0: Port device team_slave_1 removed
[   99.640298][ T6953] bond0: (slave batadv_slave_0): Releasing backup interface
[   99.647564][ T6953] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.650693][ T6953] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.665139][ T6953] team0: Port device geneve0 removed
[   99.684125][ T6957] netlink: 'syz.1.262': attribute type 10 has an invalid length.
[   99.708408][ T6957] team0: Port device dummy0 removed
[   99.719585][ T6957] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   99.909779][ T6970] IPVS: set_ctl: invalid protocol: 0 172.20.20.30:20001
[  100.167343][ T6975] pim6reg: entered allmulticast mode
[  100.181977][ T6975] pim6reg: left allmulticast mode
[  100.470817][ T5876] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  100.475546][ T6982] __nla_validate_parse: 9 callbacks suppressed
[  100.475559][ T6982] netlink: 88 bytes leftover after parsing attributes in process `syz.1.268'.
[  100.684072][ T6991] netlink: 786 bytes leftover after parsing attributes in process `syz.0.271'.
[  100.758944][ T6993] netlink: 24 bytes leftover after parsing attributes in process `syz.0.272'.
[  100.794270][ T6999] netlink: 20 bytes leftover after parsing attributes in process `syz.0.273'.
[  100.942419][ T7008] netlink: 28 bytes leftover after parsing attributes in process `syz.0.275'.
[  101.280571][ T7013] bridge0: port 1(erspan0) entered blocking state
[  101.287741][ T7013] bridge0: port 1(erspan0) entered disabled state
[  101.294060][ T7013] erspan0: entered allmulticast mode
[  101.297477][ T7013] erspan0: entered promiscuous mode
[  101.300700][ T7013] bridge0: port 1(erspan0) entered blocking state
[  101.303491][ T7013] bridge0: port 1(erspan0) entered forwarding state
[  101.310017][ T7013] erspan0: left allmulticast mode
[  101.313465][ T7013] erspan0: left promiscuous mode
[  101.316056][ T7013] bridge0: port 1(erspan0) entered disabled state
[  101.395494][ T7023] tipc: Started in network mode
[  101.397561][ T7023] tipc: Node identity ac14140f, cluster identity 4711
[  101.400256][ T7023] tipc: New replicast peer: 255.255.255.255
[  101.414114][ T7023] tipc: Enabled bearer <udp:syz2>, priority 10
[  101.416833][ T7026] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  101.506220][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.285'.
[  101.604605][ T7054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.290'.
[  101.625151][ T7057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.292'.
[  101.642685][ T7057] netlink: 68 bytes leftover after parsing attributes in process `syz.2.292'.
[  101.646778][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.293'.
[  101.721941][ T7068] pim6reg: entered allmulticast mode
[  101.965493][ T7097] netlink: 'syz.2.304': attribute type 10 has an invalid length.
[  101.980491][ T7097] veth0_vlan: left promiscuous mode
[  101.985485][ T7097] veth0_vlan: entered promiscuous mode
[  101.988896][ T7097] team0: Device veth0_vlan failed to register rx_handler
[  102.027445][ T7102] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  102.036906][ T7101] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  102.087130][ T7111] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  102.154898][ T7123] netlink: 'syz.0.309': attribute type 11 has an invalid length.
[  102.242105][ T7129] macsec1: entered promiscuous mode
[  102.244165][ T7129] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  102.246824][ T7129] macsec1: entered allmulticast mode
[  102.248973][ T7129] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  102.259440][ T7130] macsec2: entered promiscuous mode
[  102.261699][ T7130] macsec2: entered allmulticast mode
[  102.444914][ T7141] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.505089][ T7141] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.531290][   T47] tipc: Node number set to 2886997007
[  102.559325][ T7141] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.618413][ T7171] bridge0: port 3(erspan0) entered blocking state
[  102.620609][ T7171] bridge0: port 3(erspan0) entered disabled state
[  102.623032][ T7171] erspan0: entered allmulticast mode
[  102.626078][ T7171] erspan0: entered promiscuous mode
[  102.628090][ T7171] bridge0: port 3(erspan0) entered blocking state
[  102.630224][ T7171] bridge0: port 3(erspan0) entered forwarding state
[  102.636899][ T7141] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.680513][ T5865] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.687616][ T5865] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.695082][ T5865] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.704205][ T5865] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.742980][ T7176] netlink: 'syz.1.320': attribute type 1 has an invalid length.
[  102.747179][ T7174] unsupported nlmsg_type 40
[  102.779118][ T7176] 8021q: adding VLAN 0 to HW filter on device bond4
[  102.784306][ T7176] netlink: 'syz.1.320': attribute type 1 has an invalid length.
[  102.840795][ T7180] bond4: entered promiscuous mode
[  102.899462][ T7188] netlink: 'syz.0.325': attribute type 1 has an invalid length.
[  102.904658][ T7188] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  102.940883][ T7194] erspan0: left allmulticast mode
[  102.960898][ T7194] erspan0: left promiscuous mode
[  102.963104][ T7194] bridge0: port 3(erspan0) entered disabled state
[  102.991489][ T7204] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  103.068490][ T7214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  103.076430][ T7214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  103.080717][ T7214] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  103.086417][ T7214] bond0 (unregistering): Released all slaves
[  103.104031][ T7216] netlink: 'syz.0.333': attribute type 2 has an invalid length.
[  103.108531][ T7216] k*]: entered promiscuous mode
[  103.240004][ T7225] netlink: 'syz.0.336': attribute type 1 has an invalid length.
[  103.267453][ T7225] 8021q: adding VLAN 0 to HW filter on device bond3
[  103.282071][ T7225] bond3: entered promiscuous mode
[  103.325645][ T7234] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  103.344544][ T7239] netlink: 'syz.1.341': attribute type 1 has an invalid length.
[  103.394303][ T7245] netlink: 'syz.1.343': attribute type 1 has an invalid length.
[  103.419690][ T7245] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.432360][ T7246] syzkaller1: entered promiscuous mode
[  103.434531][ T7246] syzkaller1: entered allmulticast mode
[  103.510606][ T7253] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.567535][ T7253] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.605022][ T7253] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.655341][ T7253] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.706603][ T5865] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  103.716977][ T5865] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  103.730174][ T5865] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  103.744544][ T5865] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  103.753650][ T7272] syzkaller1: entered promiscuous mode
[  103.756161][ T7272] syzkaller1: entered allmulticast mode
[  103.875716][ T7279] TCP: TCP_TX_DELAY enabled
[  104.029294][ T7305] syzkaller0: entered promiscuous mode
[  104.031541][ T7305] syzkaller0: entered allmulticast mode
[  104.035184][ T7304] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.039737][ T7305] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  104.053095][ T7304] tipc: Resetting bearer <eth:syzkaller0>
[  104.063701][ T7303] tipc: Resetting bearer <eth:syzkaller0>
[  104.066910][ T7303] tipc: Disabling bearer <eth:syzkaller0>
[  104.747535][ T7360] 8021q: VLANs not supported on ip_vti0
[  104.988606][ T7382] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:21
[  104.993409][ T7382] ieee802154 phy0 wpan0: encryption failed: -22
[  105.000506][  T794] IPVS: starting estimator thread 0...
[  105.101340][ T7384] IPVS: using max 92 ests per chain, 220800 per kthread
[  105.814271][ T7387] netlink: 'syz.1.380': attribute type 1 has an invalid length.
[  105.829730][ T7387] 8021q: adding VLAN 0 to HW filter on device bond5
[  105.853966][ T7387] bond5: (slave gretap1): making interface the new active one
[  105.857530][ T7387] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  105.992616][ T7396] macvtap1: entered promiscuous mode
[  105.994282][ T7396] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  106.161631][ T7405] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.206977][ T7405] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.257704][ T7405] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.296573][ T7405] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.359140][ T5865] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.367870][ T5865] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.377804][ T5865] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.386255][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.468076][ T7407] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  106.508643][ T7407] geneve0: entered promiscuous mode
[  106.510562][ T7407] geneve0: entered allmulticast mode
[  107.313173][ T7412] __nla_validate_parse: 41 callbacks suppressed
[  107.313185][ T7412] netlink: 24 bytes leftover after parsing attributes in process `syz.1.387'.
[  107.378145][ T7414] ieee802154 phy0 wpan0: encryption failed: -22
[  107.380268][  T794] IPVS: starting estimator thread 0...
[  107.385161][ T7414] IPVS: set_ctl: invalid protocol: 12 10.1.1.0:20003
[  107.472177][ T7416] IPVS: using max 53 ests per chain, 127200 per kthread
[  107.714889][ T7438] netlink: 'syz.0.395': attribute type 29 has an invalid length.
[  107.718430][ T7438] netlink: 'syz.0.395': attribute type 29 has an invalid length.
[  107.745350][ T7444] netlink: 'syz.0.396': attribute type 29 has an invalid length.
[  107.748970][ T7444] netlink: 'syz.0.396': attribute type 29 has an invalid length.
[  107.752191][ T7444] netlink: 500 bytes leftover after parsing attributes in process `syz.0.396'.
[  107.795051][ T7448] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.397'.
[  107.849222][ T7448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.397'.
[  107.854772][ T7448] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  107.858116][ T7448] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  108.243170][ T7479] netlink: 'syz.2.402': attribute type 1 has an invalid length.
[  108.269081][ T7483] netlink: 'syz.1.403': attribute type 1 has an invalid length.
[  108.279081][ T7483] 8021q: adding VLAN 0 to HW filter on device bond6
[  108.279657][ T7485] netlink: 'syz.2.404': attribute type 10 has an invalid length.
[  108.292520][ T7485] team0: Port device dummy0 added
[  108.303295][ T7489] netlink: 292 bytes leftover after parsing attributes in process `syz.1.405'.
[  108.323250][ T7491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.406'.
[  108.346059][   T12] IPVS: stop unused estimator thread 0...
[  108.364342][ T7495] netlink: 68 bytes leftover after parsing attributes in process `syz.1.408'.
[  108.368659][ T7495] tipc: Enabled bearer <eth:macsec0>, priority 10
[  108.383902][ T7496] pim6reg: entered allmulticast mode
[  108.391892][ T7496] pim6reg: left allmulticast mode
[  108.448350][ T7499] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.496990][ T7499] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.537077][ T7499] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.606065][ T7499] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.687155][ T7504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.411'.
[  108.816724][ T7510] netlink: 60 bytes leftover after parsing attributes in process `syz.0.414'.
[  108.993636][ T7522] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.004295][ T7523] netlink: 'syz.0.418': attribute type 22 has an invalid length.
[  109.007466][ T7523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.418'.
[  109.023136][ T7418] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  109.026452][ T7418] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  109.029944][ T7523] netlink: 'syz.0.418': attribute type 22 has an invalid length.
[  109.031562][ T7418] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  109.035880][ T7418] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  109.043221][ T7522] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.053695][ T7523] netlink: 'syz.0.418': attribute type 83 has an invalid length.
[  109.097155][ T7522] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.161833][ T7522] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.217735][ T7418] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.228710][ T7418] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.236349][ T7418] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.243275][ T7418] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.491333][    T9] tipc: Node number set to 1527977458
[  110.132418][ T7551] pim6reg: left allmulticast mode
[  110.528470][ T7576] syzkaller1: entered promiscuous mode
[  110.530657][ T7576] syzkaller1: entered allmulticast mode
[  110.535177][ T7576] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  110.946094][ T7588] sctp: [Deprecated]: syz.0.440 (pid 7588) Use of int in max_burst socket option deprecated.
[  110.946094][ T7588] Use struct sctp_assoc_value instead
[  111.047964][ T7590] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  111.055312][ T7590] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  111.057659][ T7590] sch_tbf: burst 2 is lower than device lo mtu (65550) !
[  111.063533][ T7590] xt_l2tp: unknown flags: 51
[  111.067469][ T7590] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  111.203771][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.208951][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.226629][ T5852] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.234629][ T5852] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.369601][ T7597] syzkaller1: entered promiscuous mode
[  111.371891][ T7597] syzkaller1: entered allmulticast mode
[  111.379503][ T7597] syzkaller0: entered promiscuous mode
[  111.384804][ T7597] syzkaller0: entered allmulticast mode
[  111.396465][ T7597] ip6gretap0: entered promiscuous mode
[  111.398919][ T7597] macsec1: entered promiscuous mode
[  111.408742][ T7597] ip6gretap0: left promiscuous mode
[  111.523818][ T7625] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.579666][ T7625] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.629055][ T7625] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.690238][ T7625] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.789761][ T7656] team0: Port device dummy0 added
[  111.951831][ T7672] !: renamed from dummy0
[  112.301964][ T7697] sctp: [Deprecated]: syz.1.467 (pid 7697) Use of struct sctp_assoc_value in delayed_ack socket option.
[  112.301964][ T7697] Use struct sctp_sack_info instead
[  112.308369][ T7697] sctp: [Deprecated]: syz.1.467 (pid 7697) Use of struct sctp_assoc_value in delayed_ack socket option.
[  112.308369][ T7697] Use struct sctp_sack_info instead
[  112.613382][ T7722] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.616474][ T7722] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.653943][ T7722] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.657195][ T7722] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.723488][ T7722] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.727338][ T7722] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.783720][ T7722] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.786940][ T7722] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.849850][ T7418] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.857408][ T7418] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  112.866192][ T5865] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.874101][ T5852] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.893636][ T5852] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  112.897794][ T5852] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.907158][ T7418] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  112.909996][ T7418] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  112.919809][ T7418] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  112.924313][ T7418] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.935784][ T7418] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  112.938937][ T7418] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.945803][ T7723] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  112.949647][ T7723] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.956211][ T7418] ==================================================================
[  112.958882][ T7418] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350
[  112.961515][ T7418] Read of size 8 at addr ffff8880356ff0b0 by task kworker/u8:5/7418
[  112.965723][ T7418] 
[  112.966696][ T7418] CPU: 1 UID: 0 PID: 7418 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) 
[  112.966712][ T7418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  112.966722][ T7418] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  112.966749][ T7418] Call Trace:
[  112.966773][ T7418]  <TASK>
[  112.966781][ T7418]  dump_stack_lvl+0x189/0x250
[  112.966801][ T7418]  ? __pfx_dump_stack_lvl+0x10/0x10
[  112.966817][ T7418]  ? lock_release+0x4b/0x3e0
[  112.966838][ T7418]  ? __virt_addr_valid+0x4a5/0x5c0
[  112.966856][ T7418]  print_report+0xca/0x240
[  112.966870][ T7418]  ? __mutex_lock+0x147/0x1350
[  112.966881][ T7418]  kasan_report+0x118/0x150
[  112.966899][ T7418]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  112.966918][ T7418]  ? __mutex_lock+0x147/0x1350
[  112.966933][ T7418]  __mutex_lock+0x147/0x1350
[  112.966947][ T7418]  ? __mutex_lock+0x5bb/0x1350
[  112.966961][ T7418]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  112.966996][ T7418]  ? __pfx___mutex_lock+0x10/0x10
[  112.967008][ T7418]  ? do_raw_spin_unlock+0x4d/0x240
[  112.967025][ T7418]  ? rcu_is_watching+0x15/0xb0
[  112.967043][ T7418]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  112.967096][ T7418]  ? process_scheduled_works+0x9ef/0x17b0
[  112.967108][ T7418]  ? process_scheduled_works+0x9ef/0x17b0
[  112.967121][ T7418]  process_scheduled_works+0xae1/0x17b0
[  112.967143][ T7418]  ? __pfx_process_scheduled_works+0x10/0x10
[  112.967161][ T7418]  worker_thread+0x8a0/0xda0
[  112.967182][ T7418]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  112.967202][ T7418]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  112.967220][ T7418]  ? __kthread_parkme+0x7b/0x200
[  112.967237][ T7418]  kthread+0x711/0x8a0
[  112.967253][ T7418]  ? __pfx_worker_thread+0x10/0x10
[  112.967266][ T7418]  ? __pfx_kthread+0x10/0x10
[  112.967280][ T7418]  ? rcu_is_watching+0x15/0xb0
[  112.967293][ T7418]  ? __pfx_kthread+0x10/0x10
[  112.967308][ T7418]  ret_from_fork+0x3fc/0x770
[  112.967322][ T7418]  ? __pfx_ret_from_fork+0x10/0x10
[  112.967336][ T7418]  ? __switch_to_asm+0x39/0x70
[  112.967353][ T7418]  ? __switch_to_asm+0x33/0x70
[  112.967367][ T7418]  ? __pfx_kthread+0x10/0x10
[  112.967381][ T7418]  ret_from_fork_asm+0x1a/0x30
[  112.967401][ T7418]  </TASK>
[  112.967406][ T7418] 
[  113.039629][ T7418] Allocated by task 7722:
[  113.041167][ T7418]  kasan_save_track+0x3e/0x80
[  113.042631][ T7418]  __kasan_kmalloc+0x93/0xb0
[  113.044109][ T7418]  __kmalloc_noprof+0x27a/0x4f0
[  113.045678][ T7418]  udp_tunnel_nic_netdevice_event+0x854/0x19f0
[  113.047714][ T7418]  notifier_call_chain+0x1b6/0x3e0
[  113.049548][ T7418]  register_netdevice+0x1608/0x1ae0
[  113.051356][ T7418]  nsim_create+0xae8/0xf10
[  113.052702][ T7418]  __nsim_dev_port_add+0x6b6/0xb10
[  113.054713][ T7418]  nsim_dev_port_add_all+0x37/0xf0
[  113.056582][ T7418]  nsim_dev_reload_up+0x451/0x780
[  113.058210][ T7418]  devlink_reload+0x4ec/0x8d0
[  113.059794][ T7418]  devlink_nl_reload_doit+0xb35/0xd50
[  113.061480][ T7418]  genl_family_rcv_msg_doit+0x215/0x300
[  113.063196][ T7418]  genl_rcv_msg+0x60e/0x790
[  113.064614][ T7418]  netlink_rcv_skb+0x208/0x470
[  113.066114][ T7418]  genl_rcv+0x28/0x40
[  113.067385][ T7418]  netlink_unicast+0x82f/0x9e0
[  113.068923][ T7418]  netlink_sendmsg+0x805/0xb30
[  113.070421][ T7418]  __sock_sendmsg+0x21c/0x270
[  113.071878][ T7418]  ____sys_sendmsg+0x505/0x830
[  113.073372][ T7418]  ___sys_sendmsg+0x21f/0x2a0
[  113.074884][ T7418]  __x64_sys_sendmsg+0x19b/0x260
[  113.076833][ T7418]  do_syscall_64+0xfa/0x3b0
[  113.078633][ T7418]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.081257][ T7418] 
[  113.082168][ T7418] Freed by task 7723:
[  113.083544][ T7418]  kasan_save_track+0x3e/0x80
[  113.085238][ T7418]  kasan_save_free_info+0x46/0x50
[  113.087313][ T7418]  __kasan_slab_free+0x5b/0x80
[  113.089270][ T7418]  kfree+0x18e/0x440
[  113.090901][ T7418]  udp_tunnel_nic_netdevice_event+0x1332/0x19f0
[  113.092875][ T7418]  notifier_call_chain+0x1b6/0x3e0
[  113.094525][ T7418]  unregister_netdevice_many_notify+0x14d7/0x1ff0
[  113.097032][ T7418]  unregister_netdevice_queue+0x33c/0x380
[  113.099350][ T7418]  nsim_destroy+0x1dd/0x670
[  113.101239][ T7418]  __nsim_dev_port_del+0x14d/0x1b0
[  113.103294][ T7418]  nsim_dev_reload_destroy+0x288/0x490
[  113.105596][ T7418]  nsim_dev_reload_down+0x8a/0xc0
[  113.107631][ T7418]  devlink_reload+0x1b6/0x8d0
[  113.109506][ T7418]  devlink_nl_reload_doit+0xb35/0xd50
[  113.111632][ T7418]  genl_family_rcv_msg_doit+0x215/0x300
[  113.113779][ T7418]  genl_rcv_msg+0x60e/0x790
[  113.115536][ T7418]  netlink_rcv_skb+0x208/0x470
[  113.117397][ T7418]  genl_rcv+0x28/0x40
[  113.118961][ T7418]  netlink_unicast+0x82f/0x9e0
[  113.121012][ T7418]  netlink_sendmsg+0x805/0xb30
[  113.123074][ T7418]  __sock_sendmsg+0x21c/0x270
[  113.124931][ T7418]  ____sys_sendmsg+0x505/0x830
[  113.126910][ T7418]  ___sys_sendmsg+0x21f/0x2a0
[  113.128755][ T7418]  __x64_sys_sendmsg+0x19b/0x260
[  113.130700][ T7418]  do_syscall_64+0xfa/0x3b0
[  113.132476][ T7418]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.134743][ T7418] 
[  113.135682][ T7418] Last potentially related work creation:
[  113.137839][ T7418]  kasan_save_stack+0x3e/0x60
[  113.139699][ T7418]  kasan_record_aux_stack+0xbd/0xd0
[  113.141661][ T7418]  insert_work+0x3d/0x330
[  113.143325][ T7418]  __queue_work+0xbaf/0xfb0
[  113.145091][ T7418]  queue_work_on+0x181/0x270
[  113.146840][ T7418]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  113.149024][ T7418]  udp_tunnel_push_rx_port+0x180/0x200
[  113.151146][ T7418]  geneve_offload_rx_ports+0xd7/0x160
[  113.153264][ T7418]  geneve_netdevice_event+0x6a/0x80
[  113.155341][ T7418]  notifier_call_chain+0x1b6/0x3e0
[  113.157394][ T7418]  call_netdevice_notifiers+0x88/0xc0
[  113.159395][ T7418]  udp_tunnel_nic_netdevice_event+0x134d/0x19f0
[  113.161790][ T7418]  notifier_call_chain+0x1b6/0x3e0
[  113.163733][ T7418]  register_netdevice+0x1608/0x1ae0
[  113.165770][ T7418]  nsim_create+0xae8/0xf10
[  113.167524][ T7418]  __nsim_dev_port_add+0x6b6/0xb10
[  113.169536][ T7418]  nsim_dev_port_add_all+0x37/0xf0
[  113.171504][ T7418]  nsim_dev_reload_up+0x451/0x780
[  113.173519][ T7418]  devlink_reload+0x4ec/0x8d0
[  113.175336][ T7418]  devlink_nl_reload_doit+0xb35/0xd50
[  113.177379][ T7418]  genl_family_rcv_msg_doit+0x215/0x300
[  113.179442][ T7418]  genl_rcv_msg+0x60e/0x790
[  113.181329][ T7418]  netlink_rcv_skb+0x208/0x470
[  113.183185][ T7418]  genl_rcv+0x28/0x40
[  113.184727][ T7418]  netlink_unicast+0x82f/0x9e0
[  113.186592][ T7418]  netlink_sendmsg+0x805/0xb30
[  113.188482][ T7418]  __sock_sendmsg+0x21c/0x270
[  113.190301][ T7418]  ____sys_sendmsg+0x505/0x830
[  113.192190][ T7418]  ___sys_sendmsg+0x21f/0x2a0
[  113.194012][ T7418]  __x64_sys_sendmsg+0x19b/0x260
[  113.195974][ T7418]  do_syscall_64+0xfa/0x3b0
[  113.197747][ T7418]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.200061][ T7418] 
[  113.201015][ T7418] Second to last potentially related work creation:
[  113.203596][ T7418]  kasan_save_stack+0x3e/0x60
[  113.205433][ T7418]  kasan_record_aux_stack+0xbd/0xd0
[  113.207518][ T7418]  insert_work+0x3d/0x330
[  113.209304][ T7418]  __queue_work+0xcd2/0xfb0
[  113.211080][ T7418]  queue_work_on+0x181/0x270
[  113.212891][ T7418]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  113.215018][ T7418]  udp_tunnel_push_rx_port+0x180/0x200
[  113.217095][ T7418]  vxlan_offload_rx_ports+0x139/0x200
[  113.219184][ T7418]  vxlan_netdevice_event+0x111/0x470
[  113.221240][ T7418]  notifier_call_chain+0x1b6/0x3e0
[  113.223254][ T7418]  call_netdevice_notifiers+0x88/0xc0
[  113.225274][ T7418]  udp_tunnel_nic_netdevice_event+0x134d/0x19f0
[  113.227656][ T7418]  notifier_call_chain+0x1b6/0x3e0
[  113.229610][ T7418]  register_netdevice+0x1608/0x1ae0
[  113.231613][ T7418]  nsim_create+0xae8/0xf10
[  113.233356][ T7418]  __nsim_dev_port_add+0x6b6/0xb10
[  113.235331][ T7418]  nsim_dev_port_add_all+0x37/0xf0
[  113.237324][ T7418]  nsim_dev_reload_up+0x451/0x780
[  113.239287][ T7418]  devlink_reload+0x4ec/0x8d0
[  113.241192][ T7418]  devlink_nl_reload_doit+0xb35/0xd50
[  113.243280][ T7418]  genl_family_rcv_msg_doit+0x215/0x300
[  113.245418][ T7418]  genl_rcv_msg+0x60e/0x790
[  113.247202][ T7418]  netlink_rcv_skb+0x208/0x470
[  113.249165][ T7418]  genl_rcv+0x28/0x40
[  113.250807][ T7418]  netlink_unicast+0x82f/0x9e0
[  113.252721][ T7418]  netlink_sendmsg+0x805/0xb30
[  113.254579][ T7418]  __sock_sendmsg+0x21c/0x270
[  113.256394][ T7418]  ____sys_sendmsg+0x505/0x830
[  113.258218][ T7418]  ___sys_sendmsg+0x21f/0x2a0
[  113.259979][ T7418]  __x64_sys_sendmsg+0x19b/0x260
[  113.261831][ T7418]  do_syscall_64+0xfa/0x3b0
[  113.263691][ T7418]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.265967][ T7418] 
[  113.266943][ T7418] The buggy address belongs to the object at ffff8880356ff000
[  113.266943][ T7418]  which belongs to the cache kmalloc-256 of size 256
[  113.272352][ T7418] The buggy address is located 176 bytes inside of
[  113.272352][ T7418]  freed 256-byte region [ffff8880356ff000, ffff8880356ff100)
[  113.277944][ T7418] 
[  113.278978][ T7418] The buggy address belongs to the physical page:
[  113.281100][ T7418] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x356fe
[  113.283839][ T7418] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  113.286558][ T7418] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  113.289103][ T7418] page_type: f5(slab)
[  113.290531][ T7418] raw: 00fff00000000040 ffff88801a441b40 ffffea000477d500 0000000000000006
[  113.293734][ T7418] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  113.296770][ T7418] head: 00fff00000000040 ffff88801a441b40 ffffea000477d500 0000000000000006
[  113.299865][ T7418] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  113.302543][ T7418] head: 00fff00000000001 ffffea0000d5bf81 00000000ffffffff 00000000ffffffff
[  113.305242][ T7418] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  113.308336][ T7418] page dumped because: kasan: bad access detected
[  113.310598][ T7418] page_owner tracks the page as allocated
[  113.312409][ T7418] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5841, tgid 5841 (syz-executor), ts 47347786901, free_ts 0
[  113.318756][ T7418]  post_alloc_hook+0x240/0x2a0
[  113.320400][ T7418]  get_page_from_freelist+0x21e4/0x22c0
[  113.322594][ T7418]  __alloc_frozen_pages_noprof+0x181/0x370
[  113.324793][ T7418]  alloc_pages_mpol+0x232/0x4a0
[  113.326623][ T7418]  allocate_slab+0x8a/0x370
[  113.328287][ T7418]  ___slab_alloc+0xbeb/0x1410
[  113.330105][ T7418]  __kmalloc_noprof+0x305/0x4f0
[  113.331841][ T7418]  __register_sysctl_table+0xba1/0x1340
[  113.333741][ T7418]  neigh_sysctl_register+0x9a2/0xa80
[  113.335537][ T7418]  addrconf_sysctl_register+0xb3/0x1c0
[  113.337321][ T7418]  ipv6_add_dev+0xd46/0x1370
[  113.339059][ T7418]  addrconf_notify+0x794/0x1010
[  113.340711][ T7418]  notifier_call_chain+0x1b6/0x3e0
[  113.342484][ T7418]  register_netdevice+0x1608/0x1ae0
[  113.344289][ T7418]  veth_newlink+0x5cc/0xa50
[  113.345961][ T7418]  rtnl_newlink_create+0x310/0xb00
[  113.347566][ T7418] page_owner free stack trace missing
[  113.349200][ T7418] 
[  113.349923][ T7418] Memory state around the buggy address:
[  113.351610][ T7418]  ffff8880356fef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  113.354367][ T7418]  ffff8880356ff000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  113.356882][ T7418] >ffff8880356ff080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  113.359647][ T7418]                                      ^
[  113.361497][ T7418]  ffff8880356ff100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  113.364004][ T7418]  ffff8880356ff180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  113.366464][ T7418] ==================================================================
[  113.375230][ T7418] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  113.377669][ T7418] CPU: 1 UID: 0 PID: 7418 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) 
[  113.380887][ T7418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  113.384755][ T7418] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  113.387580][ T7418] Call Trace:
[  113.388908][ T7418]  <TASK>
[  113.390092][ T7418]  dump_stack_lvl+0x99/0x250
[  113.391830][ T7418]  ? __asan_memcpy+0x40/0x70
[  113.393634][ T7418]  ? __pfx_dump_stack_lvl+0x10/0x10
[  113.395645][ T7418]  ? __pfx__printk+0x10/0x10
[  113.397237][ T7418]  vpanic+0x281/0x750
[  113.398886][ T7418]  ? preempt_schedule+0xae/0xc0
[  113.400601][ T7418]  ? __pfx_vpanic+0x10/0x10
[  113.402496][ T7418]  ? preempt_schedule_common+0x83/0xd0
[  113.404648][ T7418]  ? preempt_schedule+0xae/0xc0
[  113.406362][ T7418]  ? __pfx_preempt_schedule+0x10/0x10
[  113.408289][ T7418]  panic+0xb9/0xc0
[  113.409548][ T7418]  ? __pfx_panic+0x10/0x10
[  113.410948][ T7418]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  113.412980][ T7418]  ? __mutex_lock+0x147/0x1350
[  113.414794][ T7418]  check_panic_on_warn+0x89/0xb0
[  113.416357][ T7418]  ? __mutex_lock+0x147/0x1350
[  113.417777][ T7418]  end_report+0x78/0x160
[  113.419118][ T7418]  kasan_report+0x129/0x150
[  113.420473][ T7418]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  113.422209][ T7418]  ? __mutex_lock+0x147/0x1350
[  113.423819][ T7418]  __mutex_lock+0x147/0x1350
[  113.425330][ T7418]  ? __mutex_lock+0x5bb/0x1350
[  113.426833][ T7418]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  113.428721][ T7418]  ? __pfx___mutex_lock+0x10/0x10
[  113.430332][ T7418]  ? do_raw_spin_unlock+0x4d/0x240
[  113.432245][ T7418]  ? rcu_is_watching+0x15/0xb0
[  113.434041][ T7418]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  113.436089][ T7418]  ? process_scheduled_works+0x9ef/0x17b0
[  113.437950][ T7418]  ? process_scheduled_works+0x9ef/0x17b0
[  113.440065][ T7418]  process_scheduled_works+0xae1/0x17b0
[  113.441914][ T7418]  ? __pfx_process_scheduled_works+0x10/0x10
[  113.443826][ T7418]  worker_thread+0x8a0/0xda0
[  113.445324][ T7418]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  113.447754][ T7418]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  113.449778][ T7418]  ? __kthread_parkme+0x7b/0x200
[  113.451330][ T7418]  kthread+0x711/0x8a0
[  113.452632][ T7418]  ? __pfx_worker_thread+0x10/0x10
[  113.454345][ T7418]  ? __pfx_kthread+0x10/0x10
[  113.455877][ T7418]  ? rcu_is_watching+0x15/0xb0
[  113.457449][ T7418]  ? __pfx_kthread+0x10/0x10
[  113.458902][ T7418]  ret_from_fork+0x3fc/0x770
[  113.460464][ T7418]  ? __pfx_ret_from_fork+0x10/0x10
[  113.462143][ T7418]  ? __switch_to_asm+0x39/0x70
[  113.463929][ T7418]  ? __switch_to_asm+0x33/0x70
[  113.465533][ T7418]  ? __pfx_kthread+0x10/0x10
[  113.466996][ T7418]  ret_from_fork_asm+0x1a/0x30
[  113.468592][ T7418]  </TASK>
[  113.470490][ T7418] Kernel Offset: disabled
[  113.472144][ T7418] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:15:46  Registers:
info registers vcpu 0

CPU#0
RAX=539dc3cd8b75b900 RBX=ffffffff819683b8 RCX=539dc3cd8b75b900 RDX=0000000000000001
RSI=ffffffff8be33660 RDI=ffffffff819683b8 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38530 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b79f3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000000 CR3=0000000035e4a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002f RBX=000000000000002f RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000254f130
R8 =ffff888107d80237 R9 =1ffff11020fb0046 R10=dffffc0000000000 R11=ffffffff854f2340
R12=dffffc0000000000 R13=ffffffff99afb90f R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f23bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055557929d808 CR3=0000000109ce8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007facb7f87498 00007facb7f87470 XMM03=00007facb7f874a8 00007facb7f874a0
XMM04=00007facb8aed100 00007facb7f87460 XMM05=00007facb7f87478 00007facb7f874c0
XMM06=00007facb7f874b8 00007facb7f874b0 XMM07=00007facb7f874a8 00007facb7f874a0
XMM08=0000000000000000 00007facb7e12ee7 XMM09=0000000000000000 00007facb7e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
