last executing test programs:

1.071409259s ago: executing program 2 (id=236):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r2=>0x0})
pipe(&(0x7f0000000c00)={<r3=>0xffffffffffffffff})
r4 = epoll_create(0x4)
socket$inet6(0xa, 0x0, 0x8)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000240))
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f00000004c0)={0xe0000012})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c40)=@mpls_getroute={0x350, 0x1a, 0x2, 0x70bd28, 0x25dfdbff, {0x1c, 0x14, 0x20, 0x0, 0xfe, 0x3, 0xfd, 0x5, 0x1400}, [@RTA_NEWDST={0x84, 0x13, [{0xffff8}, {0x5}, {0xffffd}, {0x4}, {0x200, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x7}, {0x3}, {}, {0xff, 0x0, 0x1}, {0x8}, {0x7}, {}, {0x5, 0x0, 0x1}, {0x400, 0x0, 0x1}, {0x9}, {}, {0x800}, {0x81}, {0xff}, {0x9, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x40}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0xf01b1}, {0x8}, {0x6, 0x0, 0x1}, {0x7}, {0x6}, {0x8, 0x0, 0x1}, {0x5, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x2}, @RTA_NEWDST={0x84, 0x13, [{0x10}, {0x2}, {0x0, 0x0, 0x1}, {0x2000, 0x0, 0x1}, {0x5000}, {0x401, 0x0, 0x1}, {0xa}, {0x6}, {0x8}, {0x8, 0x0, 0x1}, {0x800}, {0x4}, {0x40, 0x0, 0x1}, {}, {0x937}, {0x3, 0x0, 0x1}, {0x3}, {0x8399, 0x0, 0x1}, {0x14}, {0xdf4, 0x0, 0x1}, {0xffffa}, {0xfff, 0x0, 0x1}, {0x101, 0x0, 0x1}, {0x7}, {0x400}, {0x5}, {0x9, 0x0, 0x1}, {0x5}, {0xffff, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x7c5, 0x0, 0x1}, {0x4a, 0x0, 0x1}]}, @RTA_NEWDST={0x84, 0x13, [{0xfff0a, 0x0, 0x1}, {0x2}, {0x7}, {0x4}, {0xfff}, {0xfffd1, 0x0, 0x1}, {0x5}, {0x1}, {0xffffb}, {}, {0x38c9, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x8000}, {0x4, 0x0, 0x1}, {0x81}, {0xffff8, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x8}, {0x2}, {0x100, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x4}, {0x6, 0x0, 0x1}, {0xc206}, {}, {0x4}, {0x9}, {0x5}, {0xb}, {0x6, 0x0, 0x1}]}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x0, 0x8, r2}}, @RTA_NEWDST={0x84, 0x13, [{0x401}, {0x5, 0x0, 0x1}, {0x6}, {0x4, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x3}, {0xf, 0x0, 0x1}, {0x5}, {0x435f, 0x0, 0x1}, {0x5}, {0xfe000, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x1ff}, {0x1}, {0x3}, {0x188, 0x0, 0x1}, {0xdfc}, {0x72, 0x0, 0x1}, {0xa, 0x0, 0x1}, {0x4}, {0x8, 0x0, 0x1}, {0x5}, {0x5}, {0xb, 0x0, 0x1}, {0x20080, 0x0, 0x1}, {0xa}, {0x8, 0x0, 0x1}, {0x10}, {0x8}, {0x5, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x7}]}, @RTA_NEWDST={0x84, 0x13, [{0x5}, {0x1ff}, {0x5}, {0x36}, {0xffffc}, {0xe}, {0x10, 0x0, 0x1}, {0xa, 0x0, 0x1}, {0x6209}, {0x0, 0x0, 0x1}, {0x1}, {0x0, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xf}, {0x1, 0x0, 0x1}, {0xc, 0x0, 0x1}, {0x8bd2, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x1}, {0x7, 0x0, 0x1}, {0x6bc9, 0x0, 0x1}, {0x5}, {0x1}, {0x8df, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x8}, {0x9, 0x0, 0x1}, {0x100}, {0x3}, {0x296}]}, @RTA_DST={0x8, 0x1, {0x2, 0x0, 0x1}}, @RTA_NEWDST={0x84, 0x13, [{0x7}, {0x6, 0x0, 0x1}, {0x84e, 0x0, 0x1}, {0x400, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x79}, {0x1}, {0x52b9}, {0x8}, {0x8, 0x0, 0x1}, {0x8001, 0x0, 0x1}, {0x5}, {0x1, 0x0, 0x1}, {0x8}, {0x8, 0x0, 0x1}, {0x9}, {0xac2a}, {0xb7, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xc1, 0x0, 0x1}, {0x27f}, {0xb}, {}, {0x3, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x40, 0x0, 0x1}, {0xfff}, {0xb0, 0x0, 0x1}, {0x10, 0x0, 0x1}, {0x3}, {0x4, 0x0, 0x1}, {0x7, 0x0, 0x1}]}]}, 0x350}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r7)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', <r10=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x38, r8, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x2}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x80}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004850}, 0x4044014)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)

949.915567ms ago: executing program 2 (id=238):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a0102000000000000000002001a000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f28edd81ab64db88bebd7f17bd", @ANYRES8=r0, @ANYRES8=r0], 0xfc}}, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100003472fbd70000400000000000000", @ANYRES32=0x0, @ANYBLOB="3a000000a00102001c00128009000100766c616e000000000c000280060001000200000008000500", @ANYRES32=r2, @ANYBLOB="08002800fc560000080004"], 0x54}}, 0x800)

948.75047ms ago: executing program 2 (id=240):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'hsr0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="640003001000010400"/20, @ANYRES32=0x0, @ANYBLOB="ffc30000000000003c0012800c0001006d6163766c616e002c0002800a000900ffffbfffffff00000a000400aaaaaaaaaabb00000600020001000000440003000000000008000500", @ANYRES32=r1], 0x64}}, 0x0)

890.35706ms ago: executing program 2 (id=241):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00', <r3=>0x0})
connect$can_bcm(r2, &(0x7f00000001c0)={0x1d, r3}, 0x10)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtfilter={0x5c4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x6, 0x3, 0x9, 0x401, 0x1000, 0x8a3, 0xd5}}, @TCA_U32_ACT={0x58, 0x7, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x4, 0x7, 0x400000}, 0xc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @filter_kind_options=@f_u32={{0x8}, {0x518, 0x2, [@TCA_U32_SEL={0x514, 0x5, {0x9, 0x9, 0x26, 0x3, 0xc8, 0x0, 0x3, 0x7, [{0x6, 0x6f2, 0x4734, 0x6}, {0xfffff1d4, 0xd, 0xffff, 0xae5}, {0x5, 0x6, 0x4, 0x2}, {0x5, 0x6, 0x7f, 0x8}, {0x7fffffff, 0x7, 0x40, 0xc2}, {0x47ea, 0x7a6, 0x0, 0x8}, {0x401, 0x8000, 0x10, 0x1}, {0x441, 0x1, 0xffd, 0x969}, {0x7, 0x3ca, 0x400, 0xfffffffb}, {0xd432, 0x293e, 0x8, 0x8001}, {0x0, 0xbdb4, 0x5, 0x1}, {0xb3, 0x9, 0x5b99c932, 0xfffffff9}, {0x10000, 0x10001, 0x0, 0x1}, {0x659b, 0xffff, 0x7, 0x9}, {0x0, 0x8, 0x425aa579, 0x101}, {0x999, 0xfff, 0x8, 0x2}, {0x0, 0x9, 0x3, 0x8}, {0x3, 0x7, 0x9, 0xffffffff}, {0xbf6a, 0x0, 0x3, 0x7}, {0x4, 0x0, 0x5, 0x5d}, {0x1, 0x4, 0x8e8, 0x5}, {0x9, 0x4, 0xfffffff9, 0xd}, {0x94b1, 0x38, 0x7, 0x1}, {0xfffffff5, 0x400004, 0x80000000, 0x7}, {0x8, 0x156, 0x5, 0x4}, {0x7, 0x697, 0x8000, 0x5}, {0x1000005, 0x0, 0x100, 0x6}, {0x3, 0x3c, 0x0, 0x7ff}, {0xf6, 0x9, 0x5, 0xfffffffa}, {0x9, 0x84, 0x6, 0x1}, {0x2, 0x17b, 0x1, 0xffffffff}, {0x9, 0x100, 0xe, 0x4}, {0xf, 0xb066, 0x895, 0x7fffffff}, {0x9, 0x80, 0x8, 0x6}, {0x1, 0x4, 0x10, 0x1}, {0xb245, 0x5, 0x1, 0xc722}, {0x800, 0x7, 0x7ff, 0x3}, {0x3, 0x8001, 0x101}, {0x4, 0x8, 0x3ff, 0x8}, {0xfffffff6, 0x8001, 0xc, 0x800}, {0x3, 0x200, 0xa, 0xe}, {0x3, 0xc551, 0xc97, 0x5}, {0x10001, 0x40, 0x2, 0x2}, {0x7, 0x8001, 0xfffffffc, 0x5}, {0x7fff, 0x3}, {0x3, 0x140000, 0x7fffffff, 0x2}, {0x9, 0xa000, 0x3}, {0xfffffffe, 0x1, 0x5, 0x5}, {0x8, 0x3, 0x9, 0x5}, {0xa, 0x10001, 0x5, 0x3ff}, {0x8, 0x7400}, {0x6, 0x1, 0x5, 0x40}, {0x7, 0x7, 0x4, 0xd}, {0x401, 0xc2, 0x6, 0x6b}, {0x6, 0x9, 0x96, 0xb}, {0x7fff, 0x1, 0x2, 0x1}, {0x9, 0x7f, 0x401, 0xfffffc00}, {0x3, 0x10000, 0x53}, {0xc7, 0x0, 0x8, 0x1}, {0x1, 0x7, 0xd79, 0xf542}, {0x100, 0x5, 0x4, 0x8000}, {0x4, 0x4d54, 0x1377}, {0x3, 0x653, 0x2, 0x5}, {0x4, 0x39a, 0x1, 0x7}, {0x3, 0x0, 0x4, 0x76d5}, {0xda, 0x1, 0x3, 0x9}, {0x8, 0x9, 0xe54, 0x9}, {0xba000, 0x2, 0x8, 0x6}, {0x3, 0x1, 0x1, 0x40}, {0x70, 0x3d3, 0x4, 0x2}, {0x47a2, 0x4, 0x1, 0xfff}, {0x2, 0xba, 0x4, 0x9a9}, {0x1, 0xd45, 0x2, 0x7}, {0x5, 0x5, 0x4, 0x35}, {0x68d4, 0x2, 0x26, 0x7}, {0x2, 0xffff, 0x3, 0x4}, {0x5, 0x6, 0xc, 0x4}, {0x200, 0xfffffffa, 0x8, 0x7}, {0x1ff, 0x1, 0x9, 0x874}, {0x10, 0x5, 0x2, 0x10000}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x5c4}, 0x1, 0x0, 0x0, 0x81}, 0x800)
r7 = socket$inet6(0xa, 0x800000000000002, 0x0)
getsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, 0x0, &(0x7f0000000100))
socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0xa}}]}}]}, 0x40}}, 0x2004c850)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'gre0\x00', <r8=>0x0, 0x80, 0x40, 0x2d800, 0x1, {{0xa, 0x4, 0x0, 0x4, 0x28, 0x68, 0x0, 0xa9, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0xc}, {[@timestamp_addr={0x44, 0x14, 0x88, 0x1, 0x3, [{@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x7}]}]}}}}})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0xe4, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd}]}}}]}, 0x50}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0x104, r1, 0x10, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000)
r12 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'bond0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x0)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
r15 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_deladdrlabel={0x38, 0x48, 0x101, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_LABEL={0x8, 0x2, 0xffffffff}]}, 0x38}}, 0x0)
r16 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r16, 0x6, 0x24, &(0x7f0000000040)=0x100000001, 0x4)
recvfrom$inet6(r16, 0x0, 0xffffffffffffff32, 0x40010043, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r14, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x20}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800)

840.258381ms ago: executing program 2 (id=244):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000000)="10", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x7, 0xe, 0x9, 0x0, 0x1, 0x8, 0xa7, 0x4, 0x5, 0xf1, 0xb, 0x7, 0x0, 0x7}, 0xe)
poll(&(0x7f0000000080)=[{r0, 0x46a8}], 0x1, 0x400)
shutdown(r0, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000001c0)={<r2=>0x0, 0x100, 0x0, 0x8, 0x6}, &(0x7f0000000200)=0x18)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000300)={r2, @in6={{0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x19}, 0xc}}, [0x3, 0x9, 0xf, 0x0, 0x9, 0x4, 0x990f, 0x1eb61ef8, 0x9, 0xc00000000, 0x7, 0xd, 0x9, 0x8001, 0xc97]}, &(0x7f0000000240)=0x100)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffcbe, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042801d000180060006dae21600000000c3801c000b8004"], 0x44}}, 0xc000)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0)
socket(0x2b, 0x1, 0xfffffffc)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}}, 0x80)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001a00100026bd7000ffdbdf250280000dfc03000b000200001b4a010daa7e9bc329fe65f85ebfcda3f2ad456202ff9b4f85e27a77702cd9f6c8515cc52b4b10fae2115288eaf663d7d1ad0814ee0582aa83ba1916e3247d4898145645795e5f513f6945f8ec1e4eaf75f1c1f6b584b199008602f1a8a6bf918d05b67d65f252b8cc4fb44d128df6a56e6523cd356349dc6427ec9e74442cefe8445406f9"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000)
getsockname$packet(r6, &(0x7f00000005c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000680000000080000004000400080001000100000000000000"], 0x24}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32=r7, @ANYBLOB="890c04000000000020001280080001006774700014000280050005"], 0x40}}, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r9, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10)

469.663617ms ago: executing program 1 (id=255):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'hsr0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="640009001000010400"/20, @ANYRES32=0x0, @ANYBLOB="ffc30000000000003c0012800c0001006d6163766c616e002c0002800a000900ffffbfffffff00000a000400aaaaaaaaaabb00000600020001000000440003000000000008000500", @ANYRES32=r1], 0x64}}, 0x0)

469.025104ms ago: executing program 1 (id=256):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7080000000000007b9a00fe000000006609ffff00000000dbaaf0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000006a0001012dbd7000fddbdf25bad0e4"], 0x18}}, 0x0)
ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000000000))

468.873345ms ago: executing program 1 (id=257):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async)
r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0x4) (async)
r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet6(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_PROTOCOL(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x1, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x1)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10)
sendto$inet6(r4, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) (async)
sendto$inet6(r4, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newnexthop={0x18, 0x68, 0x1, 0x100003, 0x7ffffffd}, 0x18}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) (async)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newnexthop={0x18, 0x68, 0x1, 0x100003, 0x7ffffffd}, 0x18}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="040000000400000004000000050001000008"], 0x50) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="040000000400000004000000050001000008"], 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r7, 0x58, &(0x7f0000000340)={0x0, <r8=>0x0}}, 0x10)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r8}, 0xc)
close(r9)
connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e21, @empty}, 0x10)

390.759028ms ago: executing program 1 (id=258):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x780, 0x1d0, 0x5c8, 0x0, 0x5c8, 0x0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x2b, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x0, 0x0, 0x0, [@dev, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x81, 0x10, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x2}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e0)

389.698653ms ago: executing program 1 (id=259):
r0 = socket(0x10, 0x803, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r8}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
getsockopt$packet_int(r5, 0x107, 0x7, 0x0, &(0x7f00000004c0))
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r4, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket(0x1, 0x803, 0x0)
r11 = accept$inet(r10, &(0x7f0000000080)={0x2, 0x0, @multicast1}, &(0x7f0000000180)=0x10)
r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r12, 0x0, &(0x7f00000000c0)=<r13=>0x0)
r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r14)
sendmsg$NFC_CMD_DEV_UP(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r12, @ANYRES16=r15, @ANYBLOB="010023010000310200000200000008000100", @ANYRES32=r13], 0x1c}}, 0x80)
sendmmsg$sock(r11, &(0x7f0000001ac0)=[{{&(0x7f0000000580)=@nfc_llcp={0x27, r13, 0xffffffffffffffff, 0x2, 0x40, 0x80, "c2d402203a0bd7e81905278dcb1ab5087c3ef0997e764969ac04426a90d93854a3e5d424295b953b3ff50a2e9445585fbc1736ec51e7b3d3cf7ffe34fabf63", 0x2e}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000006c0)="6a84e7b60ad6f43205bd388df1ddf1331cbce029c063c5562dd082a4cf3daa4552eddb9d6f80906ea436a368ed3cf8cc577536660661ffa8f234982ca5a5655ffcbf9a1cec228d64e520394668b57b45c2d74b47f3977c10692ceb18649eb6fa32e60dd6b5c906f899691d0bdaee463bb3f94bf466bc0437ab8a6f93113d2546a5a30bdbc9cf59277a48747f12fd749fcf135d7dda08846c2ef761108812176824c1965eda52dc0f20cadf96b2e3280da6599b1840c573f245c2c8f8701ede3afc1c98f8198a1dfe2d1a242f5d2e758fa9f4ff0f97ef2e6ade4896a7c764f5cdd0e672beec2c167d45da1f204b5feaa3bd9b12a02028c0b4d65e0b8afbff56e624a2b566e23cfd63472ac994205e5c6e887b62e6bd479937122e33eb4eac6d0c9338c0ddde7682bc9422f41a42108ef1407e8b302882df5ade06b0a444f059fc515e4a0921572da775fc5028845213ebda6bb015916c0fd74a1816edb148069eb8e6f02ecb0db59010188b79e55f3e1aeb4a5d368bf7d61d24cfc5f6f5ba6de469abc252f9da638fa8848e37ffa7416f6e38289584b0b1a84be4f053911254d3b3576fd5852ac04968fc39b24f585aec6e840a8c76102c7cabaab574b9617c8eda0549596dd6d9ff0d7eb0a6f916d925257234664366a051d111c98d2cea7e06b6c431fb59bde94715088dec132294098a204ef25f61dd2e309eb37246910592993dc85a5c98b5ee7107a3c8f9996ff2268d37773be55d386f1f13e29a48ec28883d83df25aee118ae5c97dfef9117fee5cc8d64c3b39bab182a5e34104c3f223699dd48475f6f314291da7f23432554bbb572c4cb84ba0f481f9e1b244a8e7d6fc222bbec859e149582a507cba37c235a9810b1919163e26093bd5bb68fa59007c6e8cdb71c657b53c738b233ed86c55aa012c8b4f98356c440b034dd64073e2f085415b8121597c8842a59090d5816abff9e636c023b297553159e5006528cd27b5abf567d09c6e5c9b58f63ff9c2f8825faaf16720d85897d11c2e41f5c7ec8304efd369d8d1b994591db8ba08a4d1913420c03de29173f761916ff2b8ab8cb217e28453c71fef90f3466566f9facec3455091fcf8bfbb13aff14e6d8d36c0ebe85510258e38a52934e701110d7951c884d1acf5318bf6045035e44e55fe7e4578a7a91da30e086374ba993faf0fcbe4939fe70081345904d1cd57f7a294af7711b5401c8e8023912b4bf7981b816f8d1a9e00285bdb142c96df4b338af0f5b1b76ef27144df80454adff6b4581e50e92f6104f96774482036b7da28dead823a5aa331fe1a0f85214693586f050e2a9e01ee581c7ea5fafde71dca10fab10fd9b2d6a7121924c4200cdfafe8f203ed730b2e6b72d9a2d96aabfab4ad1e406da4a78f4897901b60a18b41069268fcbb7f0c6d2aee845d9008a9923eddf743ea589e9c837c42792147929696f5917f83cd6aef53871b81ca8ae84edc7d2fe79b1358dc3dff9ce987961e1f92abffdf8df4325c9b7a3aab59c1c217b5b90178d5a4e83a7d8b99a2dc8ee321681d8efea07334aeadb6f08607e3aa9923a998d893987a3959626f7854c3315156fef6d4fd72fe856395e0158214df44f0766a941547cb1ce8ee39d6b0ddaa85d85ca3795dbe97f39a2c2bf65236388be4caa68b77febdb3e70bfc8b9d65c838fc0c8e1a68d956a75b8daf0e917f12f8d80156dbfa4cb9b0b6b1fdb7fe255e63d801e3205a80d4dbffbd504f2dfff5c848aa41f2704bffd69021da8eef5ce5df398d1963ea7ed122ced0ccfc5f6bb4c91757064bed40c057ee4c37f0e5d2ae3a23045f61f3d43ed55cb72ee9de529187a6fc2e6ea749795047341379ee55e3ee7ed6301869face5a335ed7f58158a23c518873ec5292d415c6645be43fb2df8ac1be5de31a09d5a878501d1daa4e10431410b91bb0b865b8f264c6d0170b3a0ff01da4579bd8f90c3652221a8c04c48fced425b7c0e5d80ebaf1de853ec6fbd055fdffbc6c9a2978021a6a3feb11039ed43e5b21ced66631114d2a2469c6f0c1cb83da72701b8e94b4684045806f232030aea12d917a9ea6b3ea0dc2afbcbb1a90e382c66914dac9e9128d01e484f4999752f2d8e211ffc74d349cd09478dffc7c90b8a2ebafbd04d0079612af1614b008083aab9e45120320e8d0522da5ff0d381c5530d9ef2f28745ce232eedcf0685b2dc56f3bb6bad5e775dbf309eb22416098f00be1a277d4d320e6fce48a50989b9d26adcd018a06f1c37a38970ca9b8ceba752f6b6efffef44ac1ebece9450e68b902383bb8a66924cad94e553cd4b738b5904ce91ba7b9401df6916b0f4a167d1ff53f7af4a5270bc34ba9a09a14573bbea3b3abf3426378e59d285700dea1996776c56144d496f39bcd46bece326bac532cfb94f37513e801d332180460147b645c7e1aea54e80713d0a518c1c08a1f2773ae90800ff24c93ff9fd77ef1ab80fb87980e3421c3a822f94def8f1adcf64adc50978a0599e3793aef16cd04b4c7232c3091a953a400cc832378675f10cc86229384f4ec6d80cff761c130aed71e9ef85f7d93afe5da7214e0583d30c87a4e5e2ff00092aa9337c509f2ffa36aebb29b7057e18917f6adbfc649ca598a25a4f1111c9e3458d7cecfd9a44bd5b11fd4f652602bc6de4b3c3bb7be9b237812c81b061c7a8df31053a4b790f6b48ba357243796527bfeed6387d4e74eedc8fcbd386f3a395ee885d3b8cd0242d675dfafab0646700908d7c4d9dcdb268b906fe74a80df46fd4cf710a96794df11568c657eedb3fabc6788bed1fa3d521450221fbbf84703f68b4a293e6ca9dd418f6e34df3484789ebaf41b293e56d35f57a970b7f43227ac23de1252d46ee32def0b416c9b270dbb16d71dad94b6079ec03891959c4c204e180c51121392ab878fbf6da3b40e13ab90479e82971e8c4b3fca91556164585d88f86783f9754cd6d82b6d174031efd7dfef20185972c2fc100ba455871004e6691f8cc05eec5e8a518250509f562ea15531a810ed7fa3591dcd7505d0419f443b3b3d6f2a84bf037ea5d82746ccc7506578ec46ae92c3382524a36305ea0e274f1fc4506c6f47e77956136b0570b44040bbf01c5fd9ac0ba52054df0675367efd53a9b0c6b62034e449722f763975a01217c05f0ea469865a0c1ca257f95bb3fc757f403cf987689170275f36fcfc2b025e85d2def6ce348d4e01e87b27d6ec17a09143703f2584e8bf1046293906be9fcfab5911a2a14eca42284cf19e9c21a328aa4fb5a9261c0a24950fa0869118453becf63ad55325a6a7330c34440e15e834372e6a161027dc3b52395395961c05bbe1b563888019cd1307cdbeca4779bb492a1f3f168787b34337d4e72073a8f735a2b048c63b6f46e7a4f3d584328c22153919e22e1e7a67acc5c48373e1752ead401db757c5877dbd040827575f71e3ad3df639ae363e23d7b013bae763162dfccf9aaa36c8d20d2e572477a3a50d181f7bc9b09bbf6d1b8a26b74f323c14ca298f517f61d9a847ac64783be0b778b075bc77eff558f539a1204438ba755a91600d44378be750555eb88689704be4a0d61742e521dd44042ce9183efb30efb3ec8a6e2ea6cab5f4d0099115603653b5a06912edf0b3f7db2fc105f0fc4b03aa61fa948d07cd764e29e08d56b48d2c527e6a49a01826e283db766790acd2c90a035d65753d7577d15cf3466b8b41c9fa181ec61446a67f251e8fa2e4cc855e50c8e6ced546b557c044e8d421176e8bb54857c642e45dbb2ea48b68f1e92fc2d3c0a7d0386e695e4508f22738dbd16a7d86214983042e9db2ead4443a072f3f6103c587790c9a5639c82d3733cfdddc35bacd2e7708c12a646d7ee67a96450a4ec020693953e4cd3a908006f8de86674ff798b9d62e65584e2fd3bb4503312ce1acbc6b1aa33d7e19dd14363e46d1b46a65c079a38f6360b668b9bdf73db09c90a0f2672c812d7274690bff8d657a2e336d9d41244edbbf0f670f7fda9b10586b760f77b757771df3e7d2190f5ca0478919a2379e14705ef67579177a42ef8f7ad85139406e4ca42095c3f19f7788ea699b46dda49ab26e36e1931c8f7249d189a5612068b59560b15d5b813180ee3876fb18ac67fb62bf8c5554995ab22fb3c7a24e829ba609f46251b0bfad0fff17f70aff01e648964589973255cccee7d7165f3b84c2132dfbb0baa8931e7180ea888b22f4adf0944da971ad1467a778c511e86b05e4a27808021951447aad22671f77da128747de5c79f055137ada53a514901540119bb5e3154227fb02948524da2fa2f60940e15145c9e0cf1da16d0fb139f06ab07c51708f0d9d2151ac4ac8ac1c6aa302dbfe48fc9b104b31b98a3457c2bf0ca30de7235b73ef4b609203c0ce17fdef6d104ca0bf143c0ac374a741b7966de9c37574c5adbf0c0297c6379065922b366b1db250d119ae02ecc0574cc6e40975746f50a74e3082b88cb5c5ff81f2b85f112cad609072634c7d8c9488aa719f95b42571a0e96ce2ab4dd7ee723231fbee9ac2889ddfd8c9416c8fd9091b5470643f6bc067927cedadd10e88e1ff25155fdb7882430a305d9d6fa3dfd1b37f49f83b534854928245ce2bc6333e1d69aebdea426d96bc8d72533daa7ff637c7481270f09613556c178def5c44d13b45d99844303968cdf996620231d3e6289fb71c02a3a71b297301149eeb7d92ba7e6877637196b5ee0df407c796a68988dc75a3f6f7a928d98c920929b820ca2be07c953b185625433f2f245ea1bef57d8a830892aa9e568dd34a6a51a53901a77810016936d62b3e677d03304852c831580947c7889026b9ed093b7866fe9aaa64352db4401e501e4db05d439d1e3175816a7fb6983a9158629b62992dc42da25cb92dba2484682662846cfe2d67595a836b3c5ce776a923a3da58b8f57a32a46222150ef1ca074935996d201ad0028760558e0560e9439055b18f2e5dec56dccc1bb1e39e12c4b9e71ba0805b89fad05bec4a53f446cff87d4d2f632cc2770126c93e6b07462fba87c1d44cd7336b2076daabbb623bea23769ca4e3831c5c615b94651c96f1409cd68768cc07b08f8b15845d29eb8998df4f527eb4ea0dc60162ef0cebc54413193e901ce38d6d456a31308e30e10b7b777b2a31c8d3c6991510808c59740bd4207e92680bbea4fa4ba7d2c07dbab76538db98ceaf7b010ed4abfb0c23b5d18cb1da284af4f29b565d6960e82bab7379d3fd9910ef576ddc496370d79ff348f9b5847d6ee7306f8bb400367ca32efa322722651c2325bdccfb85c9c65a0f3857b2d1a6c72910423126add796746fa90837dbee1622e61a62054fbf76aab2c179b5f3923f1bb2e686d87c61dfe7554f0c319c9259786ecdbc2ccc3a871cdc8216a8b1ceb9af3c35ddcb719b089a2b7ed8ac983592e2d5c9229045d6a6243db5361a7113fc48b364cfcbbb43cfb854eb83c2d294a33eff35ddf929c36e9f877236164192802924e0458d5975600d81e8997f30cc8f79285ea88b43d984ce6a59c9750ded3c739cb9ff38cc2c833ff09f25573183315389515f68a41f4642147095633cd35065560499db5a4ff1f3ccdebb1953d341f325ccc746d9fe9bf081d0c6a8f321e7b2ae4cdb66cc6c13722e59c6cd0ffecf14104216f3c4119fb3894a38999435955485edff14f4dd815efa25f234cc1d1f2e27aafca55bdb9be692cfb755e83931a331178ff36fbf660ee55419ec51663b5cefd088d381aa1c046bcd756ec6099086d", 0x1000}, {&(0x7f00000016c0)="f9808877e8375b5ba731a77af197eda4ffd9699fa6422b81e360555bdb2d84082f5c3ec070d71558bcc00325a251a419be76d276ddb29a57aee7324feb8ea1629e5741762d6576ab35370f5acebabf16c4687d06743b1932131150966ac937f1f55ff84f70a447d4001a2c0bf9ff92b4acd21491a21412c0bde9a4f390418dc74fcf1492", 0x84}], 0x2, &(0x7f0000000600)=[@txtime={{0x18, 0x1, 0x3d, 0x25}}, @txtime={{0x18, 0x1, 0x3d, 0x100}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x567c}}], 0x78}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001780)="751ebe758c5978e028a356f780a8dc90a8dced6949f5a6aee83042252d5106594c29b1000f1373076e7cc5d070201b98e0856063407376a0c93b4ef091889011d60e374475f6957df19ae59b04d6bcc6b94990a0e4d4b0eade497c3d23cb644acc3ae096e6296a6db3887614a4397f15a958827940b09936c6a93fc5c284bc824ed80426c7e9ed88737492dfb1be530bbe2be0db", 0x94}, {&(0x7f0000001840)="ce76b421d47fb83cc7516d2646c80e3f4fcf02c721d1031d2c96762f74f220bd62c5e3b66d3f7df2fdf23c4e60c13c2ac305eee540dfb84246fb4d68e9ce9ae05b5140e9081c94e7ee20206485b90c0a401c3917745d4cd3ab8996f822a64bd9fd15f28a638e9ff2e08f66ad20c3699d6c572462f0fa8877568702e187a98c636b359bbc890cb83df287331ee1cd6a3daf051bfe782c82b250f701cdb0204ce05eb903bafaf0a27de70d4d254a234991820b596d6d6cbc6c5ec743d5f97c97dc31eac299d28d46dbde35f5", 0xcb}, {&(0x7f0000001940)="1d695374778dd6936b2a433c1b87b8acd5cbca91ff49470687b32edfff153c37aadc95ac252cd2e0f696358284d4fb87b53f2f26388bf5957fbc5c98f746819bba04a2246214baddedb5bf4b4aeeafbeb0469aab77336f9bc39a0bd1964f99149862e9e3a9430bc91bab760621988c2031133f1cc2afe866820ae65fb9c33b5fac4c7bb3ff271b5808238951be77a6fce77281eb527027ce2b0692", 0x9b}], 0x3, &(0x7f0000001a00)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x3f0}}, @timestamping={{0x14, 0x1, 0x25, 0x1ff}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0xb631}}, @mark={{0x14, 0x1, 0x24, 0xfff}}], 0xa8}}], 0x2, 0x40)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r16], 0x54}}, 0x0)
getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, <r17=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xa)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r17], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0)

329.337653ms ago: executing program 1 (id=261):
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x3, 0x2)
socket(0x1, 0x803, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='svcrdma_decode_short_err\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='svcrdma_decode_short_err\x00', r2, 0x0, 0xffffffffffffffff}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES16=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
socket$netlink(0x10, 0x3, 0x10) (async)
r6 = socket$netlink(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats})
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)

170.753923ms ago: executing program 0 (id=262):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007400), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01142dbd7000fbdbdf251a0000000700210030610000080022"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

169.666662ms ago: executing program 0 (id=263):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'hsr0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="64000a001000010400"/20, @ANYRES32=0x0, @ANYBLOB="ffc30000000000003c0012800c0001006d6163766c616e002c0002800a000900ffffbfffffff00000a000400aaaaaaaaaabb00000600020001000000440003000000000008000500", @ANYRES32=r1], 0x64}}, 0x0)

169.073308ms ago: executing program 0 (id=264):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000190001002dbd7040000000001c140001fe03000100000000"], 0x1c}, 0x1, 0x0, 0x0, 0x200000c4}, 0x4040080)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x12040, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5, 0x40000000}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)='O', 0x1}, {&(0x7f0000000600)="7b06ed531bd7ca479a9d3e4091bfef3d6ee0ffc2e83404c202fc9f14767da5bdd63ae2d92d294f54dba81439816afd7f9fdbbd685a1e2fc155edd7e190ba71630195091f488cdc0ffcaa11cd45ed0457ec284e4cd7eb28b2dcd4d172be7d2d9d6bb40500ec5fe77d066b1d79e3a88f8cd63eaee249c88b36dc7f39ff2dfa16171b9222404060eba4ab78adab332cb1d5d3732ad7e8057f7638", 0x99}, {&(0x7f0000000780)="739973482264a1ec60e8cfe3ed896b2cb3cebe587cdb2065039f033c3be4f858c4252e324ca332e851ac5b344b0038aea88d78f676cac22948b26d369fa2271bc9182d118b9e6146ccb9902dcf1eb175d6557e65a74b84c224795c5f9baed7d85855d39c3d7bb1a6dd5e8899e6a5f76c97acfb54817e1a3ff0f675852e30a978c3536c8c04676bed63d9fc094664a7ffb29b839e45", 0x95}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000000840)="3f23238262cac951bd5205836b64b901725fd81dd29f96879f3e35af7d49e84613237adcbfe6f758d00f73e9944dd8fa0ceadb752f98ca2d271e6f9e84df0137e599ea87879ad20ce38129e2461f6968d929a6298ddaf5eac8c7e9e1b16138469a55d2b1f80ef9d97061ff", 0x6b}], 0x5}}], 0x1, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r7 = getpid()
syz_open_procfs$namespace(r7, &(0x7f0000000000)='ns/pid\x00')
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0)
write$tun(r8, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0)
r9 = syz_open_procfs$namespace(r7, &(0x7f0000000140)='ns/uts\x00')
mkdirat$cgroup(r9, &(0x7f0000000000)='syz0\x00', 0x1ff)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r6, @ANYBLOB="3a804d207e5c6ea5c48b712ed151eff8110b59291c31f91f592b9e0007375c87e671850ad0fdb9b84a54f031c56dc085216883659e106d830bcac44bb11603f4bdc4e4307a1167d1b0780507a70889d53f44fa28c3706121e67e795e91cfbefe58d39e393817e8688a68f1cefe601ff77d0350a6a0cb2e4b563c6b1e4093373f8feefa8e90839965fca13847e9d6f6fac31c4a1969f5dbf364f093801eb8c67f4580f4aa9a0386e69ff83badf215c34def3e1d780b3f77ada8bc32078685ba3767ead7906bf87f92f35dee740f4b712595e1e97843af"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x1, 0x803, 0x0)
r12 = accept$inet(r2, 0x0, &(0x7f0000000240))
ioctl$sock_inet_SIOCGIFDSTADDR(r12, 0x8917, &(0x7f0000000340)={'vxcan1\x00', {0x2, 0x0, @loopback}})
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r10, 0x0, 0x8000)

90.153792ms ago: executing program 0 (id=265):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x780, 0x1d0, 0x5c8, 0x0, 0x5c8, 0x0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0xea, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x0, 0x0, 0x0, [@dev, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x81, 0x10, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x2}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e0)

89.55905ms ago: executing program 0 (id=266):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x8, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x90)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x3, 0x0, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x20000040)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
openat$cgroup_type(r3, &(0x7f0000000040), 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000006a000d0e26bd7000fcdbdf25004003000000000008000a000000000004000900080005"], 0x2c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'})

554.216µs ago: executing program 0 (id=267):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r0)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r3=>0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={<r5=>0x0, @in6={{0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffabc}}, 0x2, 0x3, 0x1000, 0x0, 0x20, 0x200}, &(0x7f0000000140)=0x9c)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000002c0)={r5, 0x80, 0x3, 0xf}, &(0x7f0000000300)=0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)
sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x86}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x4}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x10}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000084)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @empty}, 0x2}}, 0x2e)
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800), 0xffffffffffffffff)
setsockopt$inet6_IPV6_HOPOPTS(r10, 0x29, 0x36, &(0x7f00000002c0)={0x2b}, 0x8)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002c00701004000000050000000600010005000000080009000200000008000b000000000008000c"], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="54000400", @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf250700000014000200ff020000000000000000000000000001080004006401010214000300fe8000000000000000000000000000aa"], 0x44}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0)

0s ago: executing program 2 (id=268):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', <r1=>0x0, 0x8, 0x10, 0xe, 0x2, {{0x20, 0x4, 0x0, 0x24, 0x80, 0x66, 0x0, 0x8, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@timestamp={0x44, 0x8, 0x9d, 0x0, 0x7, [0x8]}, @cipso={0x86, 0x35, 0x1, [{0x6, 0x10, "c2e7b1dfda9e38b9d9318b9038aa"}, {0x0, 0x10, "69b1f583e037c00214d92c9866a8"}, {0x1, 0xf, "62cf5dda596cd4d71b273eee24"}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x36, 0x1, 0xc, [{@rand_addr=0x64010102, 0x442fe75a}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x8e}]}, @timestamp={0x44, 0x14, 0xd6, 0x0, 0xa, [0x7, 0x6, 0x9, 0x6b29]}, @end]}}}}})
sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2020010}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@bridge_delneigh={0x54, 0x1d, 0x100, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x2, 0x9, 0x2}, [@NDA_LINK_NETNSID={0x8, 0xa, 0xffff8001}, @NDA_DST_IPV6={0x14, 0x1, @private2}, @NDA_DST_MAC={0xa, 0x1, @broadcast}, @NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x64010102}, @NDA_LINK_NETNSID={0x8, 0xa, 0x8c}]}, 0x54}, 0x1, 0x0, 0x0, 0x8011}, 0x40011)
r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0xe, 0x800)
connect$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x37a, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x1}, 0xe)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000300)=0xa, 0x12)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r3)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r3)
sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x54, r4, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x51}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4048000}, 0x4004000)
bind$alg(r2, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r4, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20000040)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000700)=@nat={'nat\x00', 0x1b, 0x5, 0x390, 0x0, 0x0, 0xffffffff, 0x1a8, 0x0, 0x2f8, 0x2f8, 0xffffffff, 0x2f8, 0x2f8, 0x5, &(0x7f0000000680), {[{{@ip={@rand_addr=0x64010102, @local, 0xff000000, 0xffffffff, 'vcan0\x00', 'vcan0\x00', {}, {0xd206e2405d603c2c}, 0x89, 0x3, 0x60}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x16, @multicast2, @empty, @port=0x4e22, @gre_key=0xfffa}}}}, {{@ip={@broadcast, @multicast2, 0xffffffff, 0xff000000, 'dvmrp1\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x11}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x408, 0x100, 0x1, 0x1}}, @common=@icmp={{0x28}, {0x11, "04c4", 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x1a, @private=0xa010100, @rand_addr=0x64010102, @port=0x4e21, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x19, @empty, @multicast2, @icmp_id=0x67, @icmp_id=0xa}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @dev={0xac, 0x14, 0x14, 0xc}, @rand_addr=0x64010102, @port=0x4e20, @icmp_id=0x67}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x4010, r5, 0xae1f0000)
syz_genetlink_get_family_id$tipc(&(0x7f0000000b00), r3)
r6 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f0000000b40)={0x0, 0x1, 0x1, r1, 0xc}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x26, &(0x7f0000000b80)=0x10000, 0x4)
shutdown(r3, 0x0)
setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000bc0)=0x2, 0x4)
r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_WANTACK(r7, 0x0, 0x0, &(0x7f0000000c00), &(0x7f0000000c40)=0x4)
setsockopt$sock_int(r2, 0x1, 0x26, &(0x7f0000000c80)=0xfffffffd, 0x4)
ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x30, 0x1404, 0x100, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
r9 = accept$inet6(r6, 0x0, &(0x7f0000000dc0))
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000e00)=<r10=>0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000e40)={{{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x4a9, 0x4e23, 0x80, 0x2, 0x20, 0xa0, 0x5c, r1, r10}, {0xea7, 0x6, 0x20d, 0x1, 0x4, 0x101, 0x9, 0x9}, {0x80000000, 0x8, 0x2, 0x7}, 0x1000, 0x6e6bb8, 0x0, 0x0, 0x1, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d2, 0xd4}, 0x2, @in6=@local, 0x3504, 0x0, 0x3, 0x4, 0x6, 0x1, 0x64a}}, 0xe8)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:45355' (ED25519) to the list of known hosts.
syzkaller login: [   40.769544][ T5766] cgroup: Unknown subsys name 'net'
[   40.896633][ T5766] cgroup: Unknown subsys name 'cpuset'
[   40.900551][ T5766] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.137380][ T5766] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.563514][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.577785][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.580411][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.582779][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.585783][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.588430][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.603412][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.604313][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.608701][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.609502][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.613950][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.615347][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.618811][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.621189][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.626293][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.827447][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   45.861492][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   45.895293][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   45.953971][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.956785][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.959466][ T5836] bridge_slave_0: entered allmulticast mode
[   45.962289][ T5836] bridge_slave_0: entered promiscuous mode
[   45.966757][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.969183][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.971584][ T5836] bridge_slave_1: entered allmulticast mode
[   45.974927][ T5836] bridge_slave_1: entered promiscuous mode
[   45.998866][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.001253][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.003665][ T5832] bridge_slave_0: entered allmulticast mode
[   46.006844][ T5832] bridge_slave_0: entered promiscuous mode
[   46.032487][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.035105][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.037509][ T5832] bridge_slave_1: entered allmulticast mode
[   46.040251][ T5832] bridge_slave_1: entered promiscuous mode
[   46.044372][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.049102][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.087867][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.090281][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.092635][ T5838] bridge_slave_0: entered allmulticast mode
[   46.095869][ T5838] bridge_slave_0: entered promiscuous mode
[   46.106795][ T5836] team0: Port device team_slave_0 added
[   46.109160][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.111539][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.114415][ T5838] bridge_slave_1: entered allmulticast mode
[   46.117213][ T5838] bridge_slave_1: entered promiscuous mode
[   46.128596][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.132480][ T5836] team0: Port device team_slave_1 added
[   46.142705][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.173832][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.178478][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.180724][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.189461][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.194577][ T5832] team0: Port device team_slave_0 added
[   46.198189][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.201547][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.203754][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.212394][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.217341][ T5832] team0: Port device team_slave_1 added
[   46.267336][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.269713][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.278609][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.283557][ T5838] team0: Port device team_slave_0 added
[   46.288910][ T5836] hsr_slave_0: entered promiscuous mode
[   46.291743][ T5836] hsr_slave_1: entered promiscuous mode
[   46.295620][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.297905][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.306570][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.311680][ T5838] team0: Port device team_slave_1 added
[   46.357884][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.360266][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.369056][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.383899][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.386335][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.394504][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.405711][ T5832] hsr_slave_0: entered promiscuous mode
[   46.408033][ T5832] hsr_slave_1: entered promiscuous mode
[   46.410153][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.412716][ T5832] Cannot create hsr debugfs directory
[   46.465275][ T5838] hsr_slave_0: entered promiscuous mode
[   46.467601][ T5838] hsr_slave_1: entered promiscuous mode
[   46.469695][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.472058][ T5838] Cannot create hsr debugfs directory
[   46.599061][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.611358][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.621379][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.633459][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.665500][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.676696][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.681625][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.687329][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.707552][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.709895][ T5836] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.712551][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.715014][ T5836] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.733492][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.735847][ T5832] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.738607][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.740908][ T5832] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.749586][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.758091][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.765089][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.769195][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.810048][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.818854][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.821752][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.825947][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.829206][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.849353][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   46.855706][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.866412][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.868782][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.875106][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   46.887637][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.889980][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.893265][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.895691][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.907288][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.909647][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.929948][ T5832] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   46.933424][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   46.988758][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.000984][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.015780][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   47.026643][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.029054][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.046644][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.049049][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.073822][ T5838] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   47.077665][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.108591][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.153030][ T5832] veth0_vlan: entered promiscuous mode
[   47.160769][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.167052][ T5832] veth1_vlan: entered promiscuous mode
[   47.183596][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.201686][ T5832] veth0_macvtap: entered promiscuous mode
[   47.206065][ T5832] veth1_macvtap: entered promiscuous mode
[   47.227832][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.237585][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.240505][ T5838] veth0_vlan: entered promiscuous mode
[   47.247201][ T5836] veth0_vlan: entered promiscuous mode
[   47.254002][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.258429][ T5838] veth1_vlan: entered promiscuous mode
[   47.265411][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.268357][ T5836] veth1_vlan: entered promiscuous mode
[   47.279255][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.293518][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.316541][ T5836] veth0_macvtap: entered promiscuous mode
[   47.333998][ T5838] veth0_macvtap: entered promiscuous mode
[   47.340596][ T5838] veth1_macvtap: entered promiscuous mode
[   47.347700][ T5836] veth1_macvtap: entered promiscuous mode
[   47.352174][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.357526][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.359541][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.368857][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.377042][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.388284][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.391358][ T5887] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.396556][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.404959][ T5887] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.409624][ T5887] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.416272][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.418781][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.425664][ T5887] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.431307][ T5887] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.445409][ T5887] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.456322][ T5865] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.486334][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.488973][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.498796][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.516912][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.519516][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.533857][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.538163][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.560152][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.563021][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.620372][ T5904] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   47.688243][ T5914] netlink: 112 bytes leftover after parsing attributes in process `syz.2.6'.
[   47.696492][ T5840] Bluetooth: hci2: command tx timeout
[   47.696570][ T5834] Bluetooth: hci1: command tx timeout
[   47.698514][ T5840] Bluetooth: hci0: command tx timeout
[   47.740591][ T5920] netlink: 'syz.2.7': attribute type 9 has an invalid length.
[   47.743337][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7'.
[   47.750772][ T5920] hsr0: entered promiscuous mode
[   47.752526][ T5920] macvlan2: entered promiscuous mode
[   47.755579][ T5920] macvlan2: entered allmulticast mode
[   47.757313][ T5920] hsr0: entered allmulticast mode
[   47.759059][ T5920] hsr_slave_0: entered allmulticast mode
[   47.760998][ T5920] hsr_slave_1: entered allmulticast mode
[   47.803983][ T5922] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8'.
[   47.937755][ T5929] netlink: 'syz.2.11': attribute type 13 has an invalid length.
[   47.940778][ T5929] netlink: 'syz.2.11': attribute type 17 has an invalid length.
[   47.970262][ T5929] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   48.099712][ T5929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   48.154830][ T5929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   48.209478][ T5929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   48.436871][ T5939] warning: `syz.1.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   48.476766][ T5941] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   48.570982][ T5945] Zero length message leads to an empty skb
[   48.604862][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'.
[   48.607807][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17'.
[   48.844537][ T5973] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.22'.
[   48.909467][ T5975] netlink: 16 bytes leftover after parsing attributes in process `syz.2.24'.
[   49.108558][ T5995] netlink: 'syz.2.32': attribute type 1 has an invalid length.
[   49.168883][ T6003] Unsupported ieee802154 address type: 0
[   49.222353][ T6007] pim6reg1: entered promiscuous mode
[   49.225139][ T6007] pim6reg1: entered allmulticast mode
[   49.232334][ T6007] netlink: 'syz.1.35': attribute type 1 has an invalid length.
[   49.307241][ T6009] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.310189][ T6009] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.319326][ T6009] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   49.400054][ T6013] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.428398][ T6018] pim6reg: entered allmulticast mode
[   49.430730][ T6018] pim6reg: left allmulticast mode
[   49.433464][ T6022] netlink: 28 bytes leftover after parsing attributes in process `syz.0.40'.
[   49.471040][ T6024] veth1_macvtap: left promiscuous mode
[   49.473022][ T6024] macsec0: entered allmulticast mode
[   49.478706][ T6024] veth1_macvtap: entered promiscuous mode
[   49.480614][ T6024] veth1_macvtap: entered allmulticast mode
[   49.482826][ T6024] macsec0: left allmulticast mode
[   49.485787][ T6024] veth1_macvtap: left allmulticast mode
[   49.490195][ T6024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.41'.
[   49.617603][ T6035] netlink: 'syz.2.45': attribute type 1 has an invalid length.
[   49.620243][ T6035] netlink: 224 bytes leftover after parsing attributes in process `syz.2.45'.
[   49.721388][ T6047] sctp: [Deprecated]: syz.2.48 (pid 6047) Use of struct sctp_assoc_value in delayed_ack socket option.
[   49.721388][ T6047] Use struct sctp_sack_info instead
[   49.775944][ T5840] Bluetooth: hci0: command tx timeout
[   49.784486][ T5840] Bluetooth: hci1: command tx timeout
[   49.786687][ T5840] Bluetooth: hci2: command tx timeout
[   50.269617][ T6095] infiniband syz1: set active
[   50.271359][ T6095] infiniband syz1: added bond0
[   50.295993][ T6095] RDS/IB: syz1: added
[   50.297695][ T6095] smc: adding ib device syz1 with port count 1
[   50.299946][ T6095] smc:    ib device syz1 port 1 has pnetid 
[   50.645905][ T6141] tc_dump_action: action bad kind
[   50.739417][ T6152] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20004
[   50.743675][ T6151] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20004
[   51.067980][ T6013] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.115500][ T6013] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.132477][ T6174] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   51.173377][ T6013] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.247913][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.256733][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.265296][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.272550][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.318869][ T6178] macsec1: entered promiscuous mode
[   51.390200][ T6180] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   51.527292][ T6182] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   51.539482][ T6182] siw: device registration error -23
[   51.785385][ T6206] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   51.796548][ T6206] bridge_slave_0: left allmulticast mode
[   51.798581][ T6206] bridge_slave_0: left promiscuous mode
[   51.801766][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.807859][ T6206] bridge_slave_1: left allmulticast mode
[   51.809775][ T6206] bridge_slave_1: left promiscuous mode
[   51.811717][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.817850][ T6206] bond0: (slave bond_slave_0): Releasing backup interface
[   51.823113][ T6206] bond0: (slave bond_slave_1): Releasing backup interface
[   51.830557][ T6206] team0: Port device team_slave_0 removed
[   51.835758][ T6206] team0: Port device team_slave_1 removed
[   51.838206][ T6206] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   51.840661][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_0
[   51.845031][ T6207] netlink: 'syz.1.97': attribute type 10 has an invalid length.
[   51.845583][ T6206] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   51.850184][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_1
[   51.860864][ T6207] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   51.865103][ T5840] Bluetooth: hci2: command tx timeout
[   51.866946][ T5840] Bluetooth: hci1: command tx timeout
[   51.866997][ T6207] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   51.868763][ T5840] Bluetooth: hci0: command tx timeout
[   52.078685][ T6219] ieee802154 phy0 wpan0: encryption failed: -22
[   52.360807][ T6239] netlink: 'syz.2.106': attribute type 7 has an invalid length.
[   52.363879][ T6240] netlink: 'syz.2.106': attribute type 7 has an invalid length.
[   52.366800][ T6239] netlink: 'syz.2.106': attribute type 8 has an invalid length.
[   52.560886][ T6258] vlan2: entered allmulticast mode
[   52.562735][ T6258] gretap0: entered allmulticast mode
[   52.707532][ T6276] __nla_validate_parse: 22 callbacks suppressed
[   52.707543][ T6276] netlink: 60 bytes leftover after parsing attributes in process `syz.0.118'.
[   52.715628][ T6276] netlink: 60 bytes leftover after parsing attributes in process `syz.0.118'.
[   52.767534][ T6280] netlink: 24 bytes leftover after parsing attributes in process `syz.0.121'.
[   52.781360][ T6283] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode broadcast(3)
[   52.970115][ T6306] netlink: 100 bytes leftover after parsing attributes in process `syz.0.130'.
[   52.973697][ T6310] validate_nla: 3 callbacks suppressed
[   52.973705][ T6310] netlink: 'syz.2.131': attribute type 3 has an invalid length.
[   52.999462][ T6312] bond0: (slave wlan1): Releasing backup interface
[   53.088393][ T6316] trusted_key: syz.2.133 sent an empty control message without MSG_MORE.
[   53.091844][ T6316] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.133'.
[   53.122394][ T6326] netlink: 24 bytes leftover after parsing attributes in process `syz.1.137'.
[   53.132850][ T6329] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.136'.
[   53.202813][ T6333] ieee802154 phy0 wpan0: encryption failed: -22
[   53.248575][ T6345] netlink: 40 bytes leftover after parsing attributes in process `syz.1.140'.
[   53.257598][ T6345] netlink: 324 bytes leftover after parsing attributes in process `syz.1.140'.
[   53.271291][ T6345] netlink: 'syz.1.140': attribute type 3 has an invalid length.
[   53.276413][ T6345] netlink: 'syz.1.140': attribute type 1 has an invalid length.
[   53.278904][ T6345] netlink: 220 bytes leftover after parsing attributes in process `syz.1.140'.
[   53.567729][   T33] audit: type=1107 audit(1753407340.155:2): pid=6372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='>z9'
[   53.572415][ T6373] openvswitch: netlink: IPv6 tunnel dst address is zero
[   53.648043][ T6381] tipc: Started in network mode
[   53.649772][ T6381] tipc: Node identity 963e8ce67108, cluster identity 4711
[   53.652502][ T6381] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   53.656450][ T6381] syzkaller0: entered promiscuous mode
[   53.658423][ T6381] syzkaller0: entered allmulticast mode
[   53.670662][ T6381] tipc: Resetting bearer <eth:syzkaller0>
[   53.680580][ T6381] vlan3: entered promiscuous mode
[   53.682283][ T6381] dummy0: entered promiscuous mode
[   53.686233][ T6381] bridge0: port 3(vlan3) entered blocking state
[   53.689548][ T6381] bridge0: port 3(vlan3) entered disabled state
[   53.706913][ T6381] vlan3: entered allmulticast mode
[   53.710007][ T6381] dummy0: entered allmulticast mode
[   53.718076][ T6385] ip6gre1: entered allmulticast mode
[   53.721160][ T6380] tipc: Resetting bearer <eth:syzkaller0>
[   53.728513][ T6380] tipc: Disabling bearer <eth:syzkaller0>
[   53.790205][ T6395] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   53.825015][ T6397] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.858191][ T6397] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.890364][ T6404] lo speed is unknown, defaulting to 1000
[   53.893245][ T6404] lo speed is unknown, defaulting to 1000
[   53.906081][ T6397] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.912022][ T6404] lo speed is unknown, defaulting to 1000
[   53.934374][ T5839] Bluetooth: hci0: command tx timeout
[   53.936327][ T5839] Bluetooth: hci1: command tx timeout
[   53.938071][ T5839] Bluetooth: hci2: command tx timeout
[   53.948882][ T6405] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   53.964470][ T6397] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.016893][ T6404] infiniband syz0: set active
[   54.019194][ T6404] infiniband syz0: added lo
[   54.024805][ T5887] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.027762][ T5887] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.035524][   T73] lo speed is unknown, defaulting to 1000
[   54.040861][ T5865] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.052216][ T5865] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.067269][ T6404] RDS/IB: syz0: added
[   54.070728][ T6404] smc: adding ib device syz0 with port count 1
[   54.073012][ T6404] smc:    ib device syz0 port 1 has pnetid 
[   54.076396][   T73] lo speed is unknown, defaulting to 1000
[   54.079956][ T6404] lo speed is unknown, defaulting to 1000
[   54.115927][ T6411] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.197692][ T6411] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.209839][ T6404] lo speed is unknown, defaulting to 1000
[   54.239794][ T6411] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.299159][ T6411] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.318948][ T6404] lo speed is unknown, defaulting to 1000
[   54.484994][ T6404] syz.0.158 (6404) used greatest stack depth: 19296 bytes left
[   54.485437][ T6435] tipc: Started in network mode
[   54.489674][ T6435] tipc: Node identity 7eee838764ad, cluster identity 4711
[   54.492581][ T6435] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   54.498914][ T6435] syzkaller0: entered promiscuous mode
[   54.500873][ T6435] syzkaller0: entered allmulticast mode
[   54.510590][ T6435] tipc: Resetting bearer <eth:syzkaller0>
[   54.513732][ T6434] tipc: Resetting bearer <eth:syzkaller0>
[   54.521085][ T6434] tipc: Disabling bearer <eth:syzkaller0>
[   54.987788][ T5887] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.993727][ T5887] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.001392][ T5887] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.008511][ T5887] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.093626][ T6484] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.136767][ T6487] syz.0.173 uses obsolete (PF_INET,SOCK_PACKET)
[   55.166474][ T6484] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.267555][ T6484] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.316401][ T6484] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   55.382657][ T5865] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.391432][ T6495] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   55.393914][ T5887] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.409030][ T5887] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.418187][ T5887] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.463386][ T5887] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[   56.235207][ T6507] netlink: 'syz.1.181': attribute type 1 has an invalid length.
[   56.540020][ T6536] bond2: entered promiscuous mode
[   56.541742][ T6536] bond2: entered allmulticast mode
[   56.543608][ T6536] 8021q: adding VLAN 0 to HW filter on device bond2
[   57.485734][ T6547] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   57.489568][ T6547] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   57.595782][ T6552] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20003
[   57.676549][ T6558] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   58.399950][ T6582] netlink: 'syz.2.204': attribute type 13 has an invalid length.
[   58.402743][ T6582] netlink: 'syz.2.204': attribute type 17 has an invalid length.
[   58.407592][ T6582] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.409863][ T6582] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.412496][ T6582] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.414984][ T6582] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.420380][ T6582] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   58.486359][ T6588] __nla_validate_parse: 11 callbacks suppressed
[   58.486368][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.204'.
[   58.492813][ T6588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   58.523749][ T6582] lo speed is unknown, defaulting to 1000
[   58.548833][ T6588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   58.603586][ T6588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   58.786605][ T6593] netlink: 68 bytes leftover after parsing attributes in process `syz.1.206'.
[   58.817165][ T6595] bridge2: entered promiscuous mode
[   58.824726][ T6595] netlink: 28 bytes leftover after parsing attributes in process `syz.1.207'.
[   59.159150][ T6597] netlink: 136 bytes leftover after parsing attributes in process `syz.2.208'.
[   59.162179][ T6597] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[   59.430504][ T6626] xt_l2tp: invalid flags combination: 8
[   59.432962][ T6626] xt_l2tp: invalid flags combination: 8
[   59.438391][ T6626] xt_l2tp: invalid flags combination: 8
[   59.443922][ T6626] xt_l2tp: invalid flags combination: 8
[   59.443947][ T6630] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.220'.
[   59.448360][ T6626] xt_l2tp: invalid flags combination: 8
[   59.450962][ T6626] xt_l2tp: invalid flags combination: 8
[   59.453615][ T6626] xt_l2tp: invalid flags combination: 8
[   59.455731][ T6626] xt_l2tp: invalid flags combination: 8
[   59.457583][ T6626] xt_l2tp: invalid flags combination: 8
[   59.459471][ T6626] xt_l2tp: invalid flags combination: 8
[   59.526385][ T6641] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[   59.611303][ T6654] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.225'.
[   59.699633][ T6658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.227'.
[   59.706996][ T6658] pim6reg: entered allmulticast mode
[   59.891729][ T6682] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   59.901808][ T6684] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.234'.
[   59.912074][ T6669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.230'.
[   59.962399][ T6696] netlink: 28 bytes leftover after parsing attributes in process `syz.1.237'.
[   59.968926][ T6696] netlink: 'syz.1.237': attribute type 7 has an invalid length.
[   59.971994][ T6696] netlink: 'syz.1.237': attribute type 8 has an invalid length.
[   60.053067][ T6701] ip6gre1: entered allmulticast mode
[   60.109333][ T6711] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   60.110089][ T6707] netem: change failed
[   60.221944][ T6725] vxlan0: entered promiscuous mode
[   60.223932][ T6725] vxlan0: entered allmulticast mode
[   60.226840][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   60.229577][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   60.236146][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   60.239272][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   60.241913][ T6714] openvswitch: netlink: Flow actions attr not present in new flow.
[   60.248036][ T6714] siw: device registration error -23
[   60.278837][ T6731] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   60.333679][ T6733] Bluetooth: MGMT ver 1.23
[   60.579238][ T6753] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   60.659880][ T6758] bridge_slave_0: left allmulticast mode
[   60.661809][ T6758] bridge_slave_0: left promiscuous mode
[   60.663747][ T6758] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.669564][ T6758] bridge_slave_1: left allmulticast mode
[   60.671444][ T6758] bridge_slave_1: left promiscuous mode
[   60.673352][ T6758] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.680335][ T6758] bond0: (slave bond_slave_0): Releasing backup interface
[   60.689268][ T6760] netlink: 'syz.1.261': attribute type 25 has an invalid length.
[   60.691897][ T6758] bond0: (slave bond_slave_1): Releasing backup interface
[   60.701580][ T6758] team0: Port device team_slave_0 removed
[   60.708289][ T6758] team0: Port device team_slave_1 removed
[   60.711649][ T6758] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   60.714501][ T6758] batman_adv: batadv0: Removing interface: batadv_slave_0
[   60.718030][ T6758] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.721267][ T6758] batman_adv: batadv0: Removing interface: batadv_slave_1
[   60.729557][ T6758] vlan3: left allmulticast mode
[   60.731205][ T6758] dummy0: left allmulticast mode
[   60.733144][ T6758] bridge0: port 3(vlan3) entered disabled state
[   60.740305][   T73] lo speed is unknown, defaulting to 1000
[   60.746329][ T6761] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   60.749551][ T6761] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.807863][ T6761] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   60.811076][ T6761] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.857115][ T6761] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   60.860312][ T6761] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.885378][ T6771] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   60.910151][ T6761] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   60.913404][ T6761] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.982309][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   60.988353][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.000085][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   61.002744][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.010750][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   61.013423][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.022872][ T5865] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   61.025857][ T5865] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.030157][ T6762] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   61.033429][ T6762] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.041255][ T5865] ==================================================================
[   61.043859][ T5865] BUG: KASAN: slab-use-after-free in __mutex_lock+0x144/0xe80
[   61.046190][ T5865] Read of size 8 at addr ffff88810f7cb8b0 by task kworker/u8:3/5865
[   61.049548][ T5865] 
[   61.050378][ T5865] CPU: 0 UID: 0 PID: 5865 Comm: kworker/u8:3 Not tainted 6.16.0-rc7-syzkaller-01630-g8b5a19b4ff6a-dirty #0 PREEMPT(full) 
[   61.050390][ T5865] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   61.050395][ T5865] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[   61.050406][ T5865] Call Trace:
[   61.050410][ T5865]  <TASK>
[   61.050415][ T5865]  dump_stack_lvl+0x189/0x250
[   61.050424][ T5865]  ? __kasan_check_byte+0x12/0x40
[   61.050435][ T5865]  ? __pfx_dump_stack_lvl+0x10/0x10
[   61.050443][ T5865]  ? lock_release+0x4b/0x3e0
[   61.050451][ T5865]  ? __virt_addr_valid+0x4a5/0x5c0
[   61.050461][ T5865]  print_report+0xca/0x230
[   61.050468][ T5865]  ? __mutex_lock+0x144/0xe80
[   61.050475][ T5865]  kasan_report+0x118/0x150
[   61.050485][ T5865]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   61.050496][ T5865]  ? __mutex_lock+0x144/0xe80
[   61.050504][ T5865]  __mutex_lock+0x144/0xe80
[   61.050512][ T5865]  ? __lock_acquire+0xab9/0xd20
[   61.050518][ T5865]  ? __mutex_lock+0x51b/0xe80
[   61.050526][ T5865]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[   61.050534][ T5865]  ? __pfx___mutex_lock+0x10/0x10
[   61.050542][ T5865]  ? __lock_acquire+0xab9/0xd20
[   61.050550][ T5865]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[   61.050559][ T5865]  ? process_scheduled_works+0x9ef/0x17b0
[   61.050566][ T5865]  ? process_scheduled_works+0x9ef/0x17b0
[   61.050574][ T5865]  process_scheduled_works+0xae1/0x17b0
[   61.050586][ T5865]  ? __pfx_process_scheduled_works+0x10/0x10
[   61.050596][ T5865]  worker_thread+0x8a0/0xda0
[   61.050605][ T5865]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   61.050616][ T5865]  ? __kthread_parkme+0x7b/0x200
[   61.050626][ T5865]  kthread+0x711/0x8a0
[   61.050636][ T5865]  ? __pfx_worker_thread+0x10/0x10
[   61.050644][ T5865]  ? __pfx_kthread+0x10/0x10
[   61.050653][ T5865]  ? _raw_spin_unlock_irq+0x23/0x50
[   61.050663][ T5865]  ? lockdep_hardirqs_on+0x9c/0x150
[   61.050670][ T5865]  ? __pfx_kthread+0x10/0x10
[   61.050679][ T5865]  ret_from_fork+0x3fc/0x770
[   61.050687][ T5865]  ? __pfx_ret_from_fork+0x10/0x10
[   61.050699][ T5865]  ? __switch_to_asm+0x39/0x70
[   61.050708][ T5865]  ? __switch_to_asm+0x33/0x70
[   61.050716][ T5865]  ? __pfx_kthread+0x10/0x10
[   61.050725][ T5865]  ret_from_fork_asm+0x1a/0x30
[   61.050736][ T5865]  </TASK>
[   61.050739][ T5865] 
[   61.123126][ T5865] Allocated by task 6761:
[   61.124484][ T5865]  kasan_save_track+0x3e/0x80
[   61.125983][ T5865]  __kasan_kmalloc+0x93/0xb0
[   61.127521][ T5865]  __kmalloc_noprof+0x27a/0x4f0
[   61.129134][ T5865]  udp_tunnel_nic_netdevice_event+0x854/0x19f0
[   61.131103][ T5865]  notifier_call_chain+0x1b6/0x3e0
[   61.132762][ T5865]  register_netdevice+0x1608/0x1ae0
[   61.134462][ T5865]  nsim_create+0xae8/0xf10
[   61.135880][ T5865]  __nsim_dev_port_add+0x6b6/0xb10
[   61.137507][ T5865]  nsim_dev_port_add_all+0x37/0xf0
[   61.139194][ T5865]  nsim_dev_reload_up+0x451/0x780
[   61.140797][ T5865]  devlink_reload+0x4ec/0x8d0
[   61.142351][ T5865]  devlink_nl_reload_doit+0xb35/0xd50
[   61.144067][ T5865]  genl_family_rcv_msg_doit+0x215/0x300
[   61.145868][ T5865]  genl_rcv_msg+0x60e/0x790
[   61.147341][ T5865]  netlink_rcv_skb+0x208/0x470
[   61.148901][ T5865]  genl_rcv+0x28/0x40
[   61.150193][ T5865]  netlink_unicast+0x82f/0x9e0
[   61.151688][ T5865]  netlink_sendmsg+0x805/0xb30
[   61.153223][ T5865]  __sock_sendmsg+0x21c/0x270
[   61.154720][ T5865]  ____sys_sendmsg+0x505/0x830
[   61.156273][ T5865]  ___sys_sendmsg+0x21f/0x2a0
[   61.157839][ T5865]  __x64_sys_sendmsg+0x19b/0x260
[   61.159486][ T5865]  do_syscall_64+0xfa/0x3b0
[   61.161007][ T5865]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.162945][ T5865] 
[   61.163719][ T5865] Freed by task 6762:
[   61.164971][ T5865]  kasan_save_track+0x3e/0x80
[   61.166498][ T5865]  kasan_save_free_info+0x46/0x50
[   61.168185][ T5865]  __kasan_slab_free+0x62/0x70
[   61.169785][ T5865]  kfree+0x18e/0x440
[   61.171105][ T5865]  udp_tunnel_nic_netdevice_event+0x1332/0x19f0
[   61.173128][ T5865]  notifier_call_chain+0x1b6/0x3e0
[   61.174754][ T5865]  unregister_netdevice_many_notify+0x14d7/0x1ff0
[   61.176869][ T5865]  unregister_netdevice_queue+0x33c/0x380
[   61.178698][ T5865]  nsim_destroy+0x1dd/0x670
[   61.180219][ T5865]  __nsim_dev_port_del+0x14d/0x1b0
[   61.181847][ T5865]  nsim_dev_reload_destroy+0x288/0x490
[   61.183626][ T5865]  nsim_dev_reload_down+0x8a/0xc0
[   61.185245][ T5865]  devlink_reload+0x1b6/0x8d0
[   61.186752][ T5865]  devlink_nl_reload_doit+0xb35/0xd50
[   61.188515][ T5865]  genl_family_rcv_msg_doit+0x215/0x300
[   61.190361][ T5865]  genl_rcv_msg+0x60e/0x790
[   61.191847][ T5865]  netlink_rcv_skb+0x208/0x470
[   61.193418][ T5865]  genl_rcv+0x28/0x40
[   61.194718][ T5865]  netlink_unicast+0x82f/0x9e0
[   61.196254][ T5865]  netlink_sendmsg+0x805/0xb30
[   61.197740][ T5865]  __sock_sendmsg+0x21c/0x270
[   61.199268][ T5865]  ____sys_sendmsg+0x505/0x830
[   61.200820][ T5865]  ___sys_sendmsg+0x21f/0x2a0
[   61.202313][ T5865]  __x64_sys_sendmsg+0x19b/0x260
[   61.203878][ T5865]  do_syscall_64+0xfa/0x3b0
[   61.205321][ T5865]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.207223][ T5865] 
[   61.208011][ T5865] Last potentially related work creation:
[   61.209833][ T5865]  kasan_save_stack+0x3e/0x60
[   61.211352][ T5865]  kasan_record_aux_stack+0xbd/0xd0
[   61.213071][ T5865]  insert_work+0x3d/0x330
[   61.214495][ T5865]  __queue_work+0xbd9/0xfe0
[   61.215962][ T5865]  queue_work_on+0x181/0x270
[   61.217497][ T5865]  __udp_tunnel_nic_add_port+0xb71/0xd60
[   61.219295][ T5865]  udp_tunnel_push_rx_port+0x180/0x200
[   61.221081][ T5865]  geneve_offload_rx_ports+0xd7/0x160
[   61.222808][ T5865]  geneve_netdevice_event+0x6a/0x80
[   61.224474][ T5865]  notifier_call_chain+0x1b6/0x3e0
[   61.226102][ T5865]  call_netdevice_notifiers+0x88/0xc0
[   61.227809][ T5865]  udp_tunnel_nic_netdevice_event+0x134d/0x19f0
[   61.229814][ T5865]  notifier_call_chain+0x1b6/0x3e0
[   61.231502][ T5865]  register_netdevice+0x1608/0x1ae0
[   61.233174][ T5865]  nsim_create+0xae8/0xf10
[   61.234605][ T5865]  __nsim_dev_port_add+0x6b6/0xb10
[   61.236270][ T5865]  nsim_dev_port_add_all+0x37/0xf0
[   61.237860][ T5865]  nsim_dev_reload_up+0x451/0x780
[   61.239527][ T5865]  devlink_reload+0x4ec/0x8d0
[   61.241048][ T5865]  devlink_nl_reload_doit+0xb35/0xd50
[   61.242796][ T5865]  genl_family_rcv_msg_doit+0x215/0x300
[   61.244575][ T5865]  genl_rcv_msg+0x60e/0x790
[   61.246100][ T5865]  netlink_rcv_skb+0x208/0x470
[   61.247684][ T5865]  genl_rcv+0x28/0x40
[   61.249004][ T5865]  netlink_unicast+0x82f/0x9e0
[   61.250594][ T5865]  netlink_sendmsg+0x805/0xb30
[   61.252217][ T5865]  __sock_sendmsg+0x21c/0x270
[   61.253773][ T5865]  ____sys_sendmsg+0x505/0x830
[   61.255359][ T5865]  ___sys_sendmsg+0x21f/0x2a0
[   61.256919][ T5865]  __x64_sys_sendmsg+0x19b/0x260
[   61.258555][ T5865]  do_syscall_64+0xfa/0x3b0
[   61.260077][ T5865]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.261958][ T5865] 
[   61.262743][ T5865] Second to last potentially related work creation:
[   61.264815][ T5865]  kasan_save_stack+0x3e/0x60
[   61.266350][ T5865]  kasan_record_aux_stack+0xbd/0xd0
[   61.268008][ T5865]  insert_work+0x3d/0x330
[   61.269402][ T5865]  __queue_work+0xcfc/0xfe0
[   61.270886][ T5865]  queue_work_on+0x181/0x270
[   61.272414][ T5865]  __udp_tunnel_nic_add_port+0xb71/0xd60
[   61.274227][ T5865]  udp_tunnel_push_rx_port+0x180/0x200
[   61.275979][ T5865]  vxlan_offload_rx_ports+0x139/0x200
[   61.277759][ T5865]  vxlan_netdevice_event+0x111/0x470
[   61.279434][ T5865]  notifier_call_chain+0x1b6/0x3e0
[   61.281074][ T5865]  call_netdevice_notifiers+0x88/0xc0
[   61.282775][ T5865]  udp_tunnel_nic_netdevice_event+0x134d/0x19f0
[   61.284758][ T5865]  notifier_call_chain+0x1b6/0x3e0
[   61.286373][ T5865]  register_netdevice+0x1608/0x1ae0
[   61.288100][ T5865]  nsim_create+0xae8/0xf10
[   61.289579][ T5865]  __nsim_dev_port_add+0x6b6/0xb10
[   61.291276][ T5865]  nsim_dev_port_add_all+0x37/0xf0
[   61.292943][ T5865]  nsim_dev_reload_up+0x451/0x780
[   61.294612][ T5865]  devlink_reload+0x4ec/0x8d0
[   61.296208][ T5865]  devlink_nl_reload_doit+0xb35/0xd50
[   61.297977][ T5865]  genl_family_rcv_msg_doit+0x215/0x300
[   61.299783][ T5865]  genl_rcv_msg+0x60e/0x790
[   61.301245][ T5865]  netlink_rcv_skb+0x208/0x470
[   61.302789][ T5865]  genl_rcv+0x28/0x40
[   61.304132][ T5865]  netlink_unicast+0x82f/0x9e0
[   61.305734][ T5865]  netlink_sendmsg+0x805/0xb30
[   61.307323][ T5865]  __sock_sendmsg+0x21c/0x270
[   61.308890][ T5865]  ____sys_sendmsg+0x505/0x830
[   61.310480][ T5865]  ___sys_sendmsg+0x21f/0x2a0
[   61.312006][ T5865]  __x64_sys_sendmsg+0x19b/0x260
[   61.313609][ T5865]  do_syscall_64+0xfa/0x3b0
[   61.315114][ T5865]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.316960][ T5865] 
[   61.317760][ T5865] The buggy address belongs to the object at ffff88810f7cb800
[   61.317760][ T5865]  which belongs to the cache kmalloc-256 of size 256
[   61.322077][ T5865] The buggy address is located 176 bytes inside of
[   61.322077][ T5865]  freed 256-byte region [ffff88810f7cb800, ffff88810f7cb900)
[   61.326486][ T5865] 
[   61.327266][ T5865] The buggy address belongs to the physical page:
[   61.329294][ T5865] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10f7ca
[   61.332116][ T5865] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   61.334852][ T5865] ksm flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[   61.337377][ T5865] page_type: f5(slab)
[   61.338694][ T5865] raw: 057ff00000000040 ffff88801a441b40 ffffea000438e500 dead000000000003
[   61.341448][ T5865] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[   61.344166][ T5865] head: 057ff00000000040 ffff88801a441b40 ffffea000438e500 dead000000000003
[   61.346888][ T5865] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[   61.349612][ T5865] head: 057ff00000000001 ffffea00043df281 00000000ffffffff 00000000ffffffff
[   61.352379][ T5865] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[   61.355193][ T5865] page dumped because: kasan: bad access detected
[   61.357300][ T5865] page_owner tracks the page as allocated
[   61.359181][ T5865] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5832, tgid 5832 (syz-executor), ts 47107963393, free_ts 47104363926
[   61.366050][ T5865]  post_alloc_hook+0x240/0x2a0
[   61.367570][ T5865]  get_page_from_freelist+0x21e4/0x22c0
[   61.369350][ T5865]  __alloc_frozen_pages_noprof+0x181/0x370
[   61.371217][ T5865]  alloc_pages_mpol+0x232/0x4a0
[   61.372819][ T5865]  allocate_slab+0x8a/0x3b0
[   61.374330][ T5865]  ___slab_alloc+0xbfc/0x1480
[   61.375815][ T5865]  __kmalloc_noprof+0x305/0x4f0
[   61.377344][ T5865]  fib_create_info+0x1728/0x3210
[   61.379012][ T5865]  fib_table_insert+0xc6/0x1b50
[   61.380633][ T5865]  fib_magic+0x2c4/0x390
[   61.382054][ T5865]  fib_add_ifaddr+0x144/0x5f0
[   61.383613][ T5865]  fib_netdev_event+0x382/0x490
[   61.385220][ T5865]  notifier_call_chain+0x1b6/0x3e0
[   61.386916][ T5865]  __dev_notify_flags+0x18d/0x2e0
[   61.388535][ T5865]  netif_change_flags+0xe8/0x1a0
[   61.390165][ T5865]  do_setlink+0xc55/0x41c0
[   61.391652][ T5865] page last free pid 5832 tgid 5832 stack trace:
[   61.393746][ T5865]  __free_frozen_pages+0xc71/0xe70
[   61.395405][ T5865]  pagetable_dtor_free+0x2d2/0x3b0
[   61.397122][ T5865]  __mmdrop+0xb5/0x460
[   61.398467][ T5865]  finish_task_switch+0x3ee/0x950
[   61.400114][ T5865]  __schedule+0x1705/0x4cf0
[   61.401604][ T5865]  schedule+0x165/0x360
[   61.402917][ T5865]  schedule_preempt_disabled+0x13/0x30
[   61.404612][ T5865]  __mutex_lock+0x724/0xe80
[   61.406081][ T5865]  inet_rtm_newaddr+0x3b0/0x18b0
[   61.407710][ T5865]  rtnetlink_rcv_msg+0x7cf/0xb70
[   61.409342][ T5865]  netlink_rcv_skb+0x208/0x470
[   61.410840][ T5865]  netlink_unicast+0x82f/0x9e0
[   61.412405][ T5865]  netlink_sendmsg+0x805/0xb30
[   61.413940][ T5865]  __sock_sendmsg+0x21c/0x270
[   61.415461][ T5865]  __sys_sendto+0x3bd/0x520
[   61.416959][ T5865]  __x64_sys_sendto+0xde/0x100
[   61.418479][ T5865] 
[   61.419304][ T5865] Memory state around the buggy address:
[   61.421160][ T5865]  ffff88810f7cb780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   61.423654][ T5865]  ffff88810f7cb800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   61.426140][ T5865] >ffff88810f7cb880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   61.428667][ T5865]                                      ^
[   61.430467][ T5865]  ffff88810f7cb900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   61.433003][ T5865]  ffff88810f7cb980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   61.435606][ T5865] ==================================================================
[   61.444714][ T5865] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   61.447004][ T5865] CPU: 0 UID: 0 PID: 5865 Comm: kworker/u8:3 Not tainted 6.16.0-rc7-syzkaller-01630-g8b5a19b4ff6a-dirty #0 PREEMPT(full) 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   61.451092][ T5865] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   61.454498][ T5865] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[   61.456887][ T5865] Call Trace:
[   61.458027][ T5865]  <TASK>
[   61.459024][ T5865]  dump_stack_lvl+0x99/0x250
[   61.460551][ T5865]  ? __asan_memcpy+0x40/0x70
[   61.462050][ T5865]  ? __pfx_dump_stack_lvl+0x10/0x10
[   61.463667][ T5865]  ? __pfx__printk+0x10/0x10
[   61.465159][ T5865]  panic+0x2db/0x790
[   61.466454][ T5865]  ? __pfx_panic+0x10/0x10
[   61.467930][ T5865]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[   61.469884][ T5865]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   61.471960][ T5865]  ? print_memory_metadata+0x314/0x400
[   61.473764][ T5865]  ? __mutex_lock+0x144/0xe80
[   61.475330][ T5865]  check_panic_on_warn+0x89/0xb0
[   61.476972][ T5865]  ? __mutex_lock+0x144/0xe80
[   61.478478][ T5865]  end_report+0x78/0x160
[   61.479847][ T5865]  kasan_report+0x129/0x150
[   61.481375][ T5865]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   61.483342][ T5865]  ? __mutex_lock+0x144/0xe80
[   61.484903][ T5865]  __mutex_lock+0x144/0xe80
[   61.486369][ T5865]  ? __lock_acquire+0xab9/0xd20
[   61.487874][ T5865]  ? __mutex_lock+0x51b/0xe80
[   61.489423][ T5865]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[   61.491478][ T5865]  ? __pfx___mutex_lock+0x10/0x10
[   61.493139][ T5865]  ? __lock_acquire+0xab9/0xd20
[   61.494751][ T5865]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[   61.496697][ T5865]  ? process_scheduled_works+0x9ef/0x17b0
[   61.498470][ T5865]  ? process_scheduled_works+0x9ef/0x17b0
[   61.500368][ T5865]  process_scheduled_works+0xae1/0x17b0
[   61.502213][ T5865]  ? __pfx_process_scheduled_works+0x10/0x10
[   61.504112][ T5865]  worker_thread+0x8a0/0xda0
[   61.505626][ T5865]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   61.507714][ T5865]  ? __kthread_parkme+0x7b/0x200
[   61.509359][ T5865]  kthread+0x711/0x8a0
[   61.510721][ T5865]  ? __pfx_worker_thread+0x10/0x10
[   61.512423][ T5865]  ? __pfx_kthread+0x10/0x10
[   61.513967][ T5865]  ? _raw_spin_unlock_irq+0x23/0x50
[   61.515699][ T5865]  ? lockdep_hardirqs_on+0x9c/0x150
[   61.517349][ T5865]  ? __pfx_kthread+0x10/0x10
[   61.518827][ T5865]  ret_from_fork+0x3fc/0x770
[   61.520373][ T5865]  ? __pfx_ret_from_fork+0x10/0x10
[   61.522082][ T5865]  ? __switch_to_asm+0x39/0x70
[   61.523678][ T5865]  ? __switch_to_asm+0x33/0x70
[   61.525295][ T5865]  ? __pfx_kthread+0x10/0x10
[   61.526835][ T5865]  ret_from_fork_asm+0x1a/0x30
[   61.528435][ T5865]  </TASK>
[   61.530120][ T5865] Kernel Offset: disabled
[   61.531560][ T5865] Rebooting in 86400 seconds..

VM DIAGNOSIS:
01:35:47  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000066 RBX=0000000000000066 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000436f150
R8 =ffff888020cd8237 R9 =1ffff1100419b046 R10=dffffc0000000000 R11=ffffffff85464660
R12=dffffc0000000000 R13=ffffffff99aff8b0 R14=ffffffff99e044c0 R15=0000000000000000
RIP=ffffffff854646dc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4262f76d58 CR3=0000000025d9a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f4262386478 00007f4262386450 XMM03=00007f4262386488 00007f4262386480
XMM04=00007f4262eed100 00007f4262386440 XMM05=00007f4262386458 00007f42623864a0
XMM06=00007f4262386498 00007f4262386490 XMM07=00007f4262386488 00007f4262386480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f4262211ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=4e17b9c3a0673f00 RBX=ffffffff81976a18 RCX=4e17b9c3a0673f00 RDX=0000000000000001
RSI=ffffffff8d99ef91 RDI=ffffffff8be28d80 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa235f0 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d4000
RIP=ffffffff8b7044f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4262f74fb8 CR3=0000000029a76000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffff0000 000000ff00000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007f4262eed100 00007f4262386440 XMM05=00007f4262386458 00007f42623864a0
XMM06=00007f4262386498 00007f4262386490 XMM07=00007f4262386488 00007f4262386480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f4262211ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
