last executing test programs:

3.600534155s ago: executing program 1 (id=2):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x3c, r1, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "0a976038860136919c39f9fc024e5659"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000054)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x40)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYRESDEC=r4], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r5 = socket(0xa, 0x3, 0x3a)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f00000001c0)={{0x2, 0x4e20, @multicast2}, {0x1, @remote}, 0x2, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}, 'bond0\x00'})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r7}, 0x10)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'})
setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, 0x0, 0x43)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0)
r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r10, &(0x7f0000000080)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14)
r11 = socket$inet(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x74, 0x0, 0x0, 0xfffff01c}]}, 0x10)

3.465049387s ago: executing program 1 (id=5):
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xfea7, 0xa)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r3, 0x303, 0x70bd29, 0x10000000, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3}, [@NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x98}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10)
clock_gettime(0xffffffea, 0x0)
syz_emit_ethernet(0xf87, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60f510000fc020000000000000000000000000001fe8000000000000000000000000000aa8400000000000000223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c8e3704d8e3c15b7e95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6ee93ea08d776ab566eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e96618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d40ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7cc735bd306c9ea5eb64f40752fd4c741d9b6e03cd41b636ef8f5e810047a21c0b24c6fde1f2e98f2f27730c90d93af9e7564e4e209a61ff626b666fcc4f75f7d560da688169ff0af5e674a0b89a99fb54bb438a65f953c2db0faec2ce09cec33b6d25620b5a0393ac473fed48a38beaca5223997419876d571ce969b83b5b3ae54de83dd89fd92ed2a93c087828bef49a24ed1a97778c47fdc691a94fd5b437dfe494b5c6fadf499d9d15583b0439d3d5ecb61a32a2508a6960be6009accfd1d5d75a16dbc4121c6ef07bda12646792449c18a56e7aa3893f3f0e55a8e09ca64193dd29ea24ed8614ee8e717f046dd99a8e3750506655331125a502aa89c0d7e8e30c36a4be22cd911322695144d3bf034f38ef32d49431d50da583d08a3e4c5862483cdd52d031b12c89fdaafc3334e877e464134baece883d301193a9c27311a987d4dae82a061f48182cc747cd64441e88b68e26e4975f0fdde3129a9e6af80009962581d5349676df9c73b81514b175709d9193749660f480bd4009b528c1db4f76f42b6a175126603c39a374e890f871c97b2eebb4500451d827cc15497dc5ae89edc6f47f25db7efa4b4b2afbbb2ee543e3db8d20fe93faf300247f59075921e8b2f2a025af8a1d46f274e0c6cb4be0293c7c16c88e98d7d189e9733e4c0e3b96be4aa3fa6ecf42732e0b1432d38aeaf2330d92713cd5580ce42bfe47fb98fea64783de23f456300dd193008211a5ba408d32dedbf12aa8237a6e1a2c9890a2c1011855241fea186906a5139d1c300be57dc7ff493de80010520d10fc3eda0ee9cd413e075d3dc02258fdab567a16e43edbeecc366a69d8d75512f43a2b79cbb9132cdcd00c531730d05f1eabf66613d6e7ebb8c4c3f4f7efd415d41049786352808b22a3bde40121968af39c8f00296001662adc72b7963c8bafab4a496b50f3237a29d19ad4a51a62b1c77a04c14004734189cf7ec49e3d041a1e5658d080f09df77f39782e7133968c1f39ab3ae2a5f24a60073288f3c5825dafd614a379b8b905aaf961caa14ffa38de0d632918d31e4a9291b0f0789248e232e4276840a1ed0257300e522d83111dffd424b1b33148981e3794b2b649ba9174e6697bcc96049f4f3dcc7cf4ca97e2006ec8a146014bb49184632e4fb159a34b6530e959e60a6b4e0427cc697f14cfe6bb7a662a6f5012744f3cf2307abc19c58449864d98fcfebc5d598cd32a1c38c207896468fe8da75eb1edb1d6e7cb1eab671e4e92f139c81d79f15df2a2dc075acc982dec769e2f49aad0fdf594cb590e054616e4f4582b6c4a149ae45d844903ef68d211df2a180178e178b7c7a5012ccf8a1e677586588620365e6111f5192ecfdbd97e2284128de02e08ebc13d4bb4d114faa1e6c16c51c12da2c52d68f73640ce866ce4e794b9fafdc392c91c1f824bc301b3069a02b9c86d2ffac3ed63ddee130cbc248d6a3345d3f9553db78077072d569a6633f8bdbdb1a209a8be9b6830225994f9021b57ddd6a44e8ea40b205c6cf437f45bffaef053a5916dcc6de62ee02bdb8ce3acec8ad97fc95dab1307d254790c71f32e4678957cf0121dccabe73a03c6cacbcbdaad8801b04d9836555a982c357a06e2db7e9bf62aed8cdebbb7a71a2410b929015b61f16e54bffd038996a717b9c7cc3696d8a1205e8266bf782c3a45b0e31461d6a3ed62396088833f69248b24fbf6f81dcc08b98826c3bd2325ade54f614f2d4a153e3e3527d93978483f2bfeada6b64bc43f2a725c30e843d13e6ab34cfc38d488b3ef50cd04318fac1f89905f017644cfa2de058ad399871d1316264813c2289d0b6cfeddfbca36ce93fd4a1bfc93bb74453cfbb9c6ca22320ffc9cb0a3fff046a5678c066e617cd3ac024dfead04b99877f448b78208938585c7563efe815ff0cc47da5fff521d9730ddc89f4aeceadd06f2ea6b9ae72c9407aa550a0155db3b4bc6aaa382a30552f699cb6a1af9972a8ccc483f98952dfbde3d712ea8673eacdbb77490d833fc90f0f02e7c073d2917db70831496a88defc10667dc4c1b7399191bdc7857eb090e79c332bf9f71bb5377178e6232800c93d22318dc5ab8d5dfa2f074a6c23acb61c89f2f078ec91e9817e11a4c8295c"], 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x1100, 0xc140}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x45844}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r8, @ANYBLOB='\b\x00&'], 0x2c}}, 0x0)

3.289305874s ago: executing program 1 (id=8):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000"], 0x48)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff02000000000081ffffffffffffff013a"], 0xfdef)

1.450447309s ago: executing program 1 (id=28):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f00000000c0)=@generic={0x0, 0xc, 0x7})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'vlan0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r6, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x24}}, 0x0)

914.792783ms ago: executing program 1 (id=35):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000"], 0x48)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff02000000000082ffffffffffffff013a"], 0xfdef)

861.89042ms ago: executing program 0 (id=36):
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xfea7, 0xa)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r3, 0x303, 0x70bd29, 0x10000000, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3}, [@NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x98}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10)
syz_emit_ethernet(0xf87, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x1100, 0xc140}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x45844}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r8, @ANYBLOB='\b\x00&'], 0x2c}}, 0x0)

707.846342ms ago: executing program 0 (id=38):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x26e1, 0x0)
ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000080))
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000300)="ebe3a0e9796cfd1647e299f4e376fd9a128280b372219d205e", 0x19}], 0x2, 0x0, 0x0, 0x800}], 0x1, 0x810)
ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'batadv0\x00', &(0x7f0000000040)=@ethtool_gstrings})

707.449654ms ago: executing program 0 (id=39):
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg0\x00', <r0=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000004000000000000000071122b000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x20, '\x00', r0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002b000b000000000000000000040000000800030004fd02000c000180"], 0x28}}, 0x8000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x8901, &(0x7f0000000100))
sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)='h', 0x1}], 0x1}, 0x4815)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="660a000000000000611149000000000095000000"], &(0x7f00000004c0)='GPL\x00'}, 0x94)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8001, '\x00', r0, 0xffffffffffffffff, 0x3, 0x1, 0x3}, 0x50)
pipe(&(0x7f0000000100)) (async)
pipe(&(0x7f0000000100)={<r6=>0xffffffffffffffff})
ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000000c00)={{}, {0x7}, 0x5, 0x0, 0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='./file0\x00', &(0x7f0000000980)="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", 0x17f, 0x0, &(0x7f0000000b00)={0x2, 0xc7, {0x0, 0xc, 0xf, "0997e4cae1347e04758c2285e3a44d", 0xab, "2515ef58aed7303a0b1ad695d0598055452c751f23b5a40715069eb350facf7348d03ae4e5e843758eb50b25921e597f0826af48166eb741777d4a5217b7ee6d814a66f433ca8b9ae764d4d2ff133df171e80b1fa1f717bcb321da1de4088329326075491949e9fd9211c470cd6d7d96191ba46f6ff3036adb9aa3cb3c26fd85274e4ff85b8f989c8af6a28d848d01f1d5973a4fb0ab802fdb57c5355fd8ea3d1af81058082b5b97ce3ea2"}, 0x29, "da0819fe87bde4a14cc98ef79aa4411f32c54c932c153be4f3ddd694fb0ee5ad676a9fc96ff6fa2ed3"}, 0xfc}) (async)
ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000000c00)={{}, {0x7}, 0x5, 0x0, 0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='./file0\x00', &(0x7f0000000980)="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", 0x17f, 0x0, &(0x7f0000000b00)={0x2, 0xc7, {0x0, 0xc, 0xf, "0997e4cae1347e04758c2285e3a44d", 0xab, "2515ef58aed7303a0b1ad695d0598055452c751f23b5a40715069eb350facf7348d03ae4e5e843758eb50b25921e597f0826af48166eb741777d4a5217b7ee6d814a66f433ca8b9ae764d4d2ff133df171e80b1fa1f717bcb321da1de4088329326075491949e9fd9211c470cd6d7d96191ba46f6ff3036adb9aa3cb3c26fd85274e4ff85b8f989c8af6a28d848d01f1d5973a4fb0ab802fdb57c5355fd8ea3d1af81058082b5b97ce3ea2"}, 0x29, "da0819fe87bde4a14cc98ef79aa4411f32c54c932c153be4f3ddd694fb0ee5ad676a9fc96ff6fa2ed3"}, 0xfc})
r7 = socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000141401"], 0x18}}, 0x0)
sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="9902000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f408000300040100000800050000000000", 0x5c}, {&(0x7f0000000700)="d557fc16674b56c0a96a733c232d6790c63ca969a688b06e3da58f3c4568bf0a77bdff6f41d7890e18defe94ef1a392dc00dea94a1bee64982de7cf1c91e1103cc1840210cbb57222bc2bfa30369992a6bc5156c00aeadd359a7991ad1de01feec401dba6d7694a14785839d3c2d67188cd07827c934897de4676743c192c4a4b24f7f8747141a1325d29da89694574c32eba56e5bbc8f80376f3325dd89937e990089294183a4829e21849004c538378d41066cb7de399450b3544067", 0xbd}, {&(0x7f0000000500)="5e191aea3468a5eab1c3d6024b43dece099475c81c53aa9244d866f68b8e31e93b41b432fb0454234620a25706bfb6f01ce01093b7ff634785d8b345ef8f7a928034820bbd37467d1049ac7a724c153c358d6f7efd919bb918734e846598b03733a6f4bbce06471d3a440e14dae67170cbfea76bc33481c28ec2cfad1f3d83ddece3006d5bb30dc4288dd40bd476cc7f94d143c56e54ed4d84b9c1ecc87fc035c7c992767edcfe2218bc6542a6a3a9b879e8aa6d652d277ee640cc15d2e9efe30584ed57ab208ca4db6cf63381804a5ee5", 0xd1}, {&(0x7f00000008c0)="fd7617adb877574c4a4489fcaccde0c97bdb2d9d89dba8ab9fc9ebbdcedc770661e1971989a787890de32eebe4008ac8bfafa034add91f6ea4acc741521abecc6cbb4fcfeb61d7d08a8911e59550055d00897194afc1ffd04c18c2506d41bec374a6e5b1ed5fd07db55483fef2dc9ad8ae7c6044b08a303f256ff7e7dd720c72fc0d513110468d44e31a8fcd833d521b95c3b04378ca1c67b4faca350009045628c7f7196510f14ebdc68ba7", 0xac}, {&(0x7f0000001880)="1439ea", 0x3}], 0x5, 0x0, 0x0, 0x1f00c00e}, 0x0)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r9, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) (async)
r10 = openat$cgroup_devices(r9, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
splice(r6, 0x0, r10, 0x0, 0xb, 0x0) (async)
splice(r6, 0x0, r10, 0x0, 0xb, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r6}, 0x8) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r6}, 0x8)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x145, 0x7, 0x7, 0x904, r5, 0x682, '\x00', 0x0, r6, 0x2, 0x3, 0x1, 0xc}, 0x50)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000001080021850000006d00000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94)
r13 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r13, 0x84, 0x4, &(0x7f0000000800), &(0x7f0000000840)=0x4) (async)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r13, 0x84, 0x4, &(0x7f0000000800), &(0x7f0000000840)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r12}, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r14 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r14, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write(r14, &(0x7f0000000080)="09000200010005", 0x7) (async)
write(r14, &(0x7f0000000080)="09000200010005", 0x7)

706.727287ms ago: executing program 0 (id=40):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x29, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x28, 0x8002}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x80}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x300, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x9}}]}, @IFLA_VLAN_PROTOCOL={0x0, 0x5, 0x8100}, @IFLA_VLAN_FLAGS={0x0, 0x2, {0xb, 0x1}}, @IFLA_VLAN_ID={0x0, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x6c}}, 0x0)

704.126552ms ago: executing program 0 (id=41):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="0200000000000000000004070200"], 0x14}, 0x1, 0x40030000000000}, 0x0) (async)
sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="0200000000000000000004070200"], 0x14}, 0x1, 0x40030000000000}, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'ipvlan1\x00'})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
r4 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r5, 0x89e4) (async)
ioctl$sock_rose_SIOCRSCLRRT(r5, 0x89e4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00', <r6=>0x0})
r7 = socket$inet6(0xa, 0x6, 0x20005)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2e}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x28, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x0, 0x4021}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2ac1}]}, 0x28}}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x28, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x0, 0x4021}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2ac1}]}, 0x28}}, 0x0)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0x150}, 0x1, 0x0, 0x0, 0x4001}, 0x8008090) (async)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0x150}, 0x1, 0x0, 0x0, 0x4001}, 0x8008090)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x6c}}, 0x40000)
r10 = socket$packet(0x11, 0x3, 0x300)
r11 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r11, 0x107, 0x12, 0x0, 0x0)
setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_netdev_private(r12, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a") (async)
ioctl$sock_netdev_private(r12, 0x8946, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a")
setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @local, 0x7}, {0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffc00}, 0xffffffffffffffff, {[0x401, 0xffffd7fb, 0xf, 0x1, 0x3, 0x200, 0x8001, 0x2]}}, 0x5c) (async)
setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000440)={{0xa, 0x4e21, 0x1, @local, 0x7}, {0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffc00}, 0xffffffffffffffff, {[0x401, 0xffffd7fb, 0xf, 0x1, 0x3, 0x200, 0x8001, 0x2]}}, 0x5c)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x60}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)

550.640647ms ago: executing program 2 (id=44):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x25, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x50) (async, rerun: 64)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x40}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x17}]}}}]}, 0x50}}, 0x0) (rerun: 64)

421.435195ms ago: executing program 0 (id=45):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write(r0, &(0x7f00000002c0), 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004)
accept4$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000480)=0x1c, 0x800) (async)
r5 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000480)=0x1c, 0x800)
getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000b00)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in6=@dev}}, {{@in6=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000680)=0xe8) (async)
getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000b00)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in6=@dev}}, {{@in6=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000680)=0xe8)
recvmmsg(r4, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000780)=""/260, 0x104}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000002900)=""/4114, 0x1012}, {&(0x7f00000017c0)=""/220, 0xdc}, {0x0}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f00000008c0)=""/234, 0xea}], 0x8}, 0x80000002}], 0x4, 0x0, 0x0) (async)
recvmmsg(r4, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000780)=""/260, 0x104}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000002900)=""/4114, 0x1012}, {&(0x7f00000017c0)=""/220, 0xdc}, {0x0}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f00000008c0)=""/234, 0xea}], 0x8}, 0x80000002}], 0x4, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_DISABLE_BEARER(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, r7, 0x12b084226d2dad07, 0x0, 0x0, {{}, {}, {0x10, 0x13, @udp='udp:syz0\x00'}}}, 0x2c}}, 0x0)
r8 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
socket$kcm(0x10, 0x400000002, 0x0) (async)
r9 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x0) (async)
sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xab, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x80)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r8, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x0) (async)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r8, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x0)
socket(0x20, 0xa, 0x7) (async)
r10 = socket(0x20, 0xa, 0x7)
setsockopt$RDS_GET_MR_FOR_DEST(r10, 0x114, 0x7, &(0x7f0000000a40)={@tipc=@id={0x1e, 0x3, 0x2, {0x4e21, 0x4}}, {&(0x7f0000000400)=""/114, 0x72}, &(0x7f00000001c0), 0x2}, 0xa0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)

388.581373ms ago: executing program 2 (id=46):
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xfea7, 0xa)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r3, 0x303, 0x70bd29, 0x10000000, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3}, [@NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x98}}, 0x0)
syz_emit_ethernet(0xf87, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x1100, 0xc140}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x45844}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r7, @ANYBLOB='\b\x00&'], 0x2c}}, 0x0)

331.363429ms ago: executing program 2 (id=47):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0xfffffffc, @local, 0x9}, 0x1c) (async)
setsockopt$sock_int(r1, 0x1, 0x14, &(0x7f0000000040), 0x50) (async)
listen(r1, 0x0) (async)
accept$inet6(r1, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c00014000000000800000000c00014000000000000000010c00014000000000000000050c"], 0x92fc}}, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="582000000206010800000000000000000100000005000100070000000900020073797a30000000000c00078008001240fffffffe050004000000000011000300686173689f00702c6d61726b00000000050005000a000000"], 0x58}, 0x1, 0x0, 0x0, 0x4028055}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc5, &(0x7f0000000100)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) (async, rerun: 32)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (rerun: 32)
bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0xe4, @fixed, 0x0, 0x1}, 0xe) (async)
sendmsg$inet(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
socket$inet6(0xa, 0x2, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r8, &(0x7f00000000c0)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x4, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x7, 0x4, 0x7, 0x0, 0x2, {[@window={0x9, 0x3}, @sack_perm={0x4, 0x2}]}}}}}}, 0x3e)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20)

330.755857ms ago: executing program 2 (id=48):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0)
r7 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast1, @in=@broadcast, 0xfffd, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x1d}, {0xffbffffffffffffe, 0x4, 0x1, 0x0, 0x0, 0x2009, 0xf0e, 0x10000}, {0x3, 0xb, 0x4053e5, 0x20}, 0x8, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in6=@remote, 0x1, 0x32}, 0xa, @in=@empty, 0x3502, 0x1, 0x0, 0x0, 0x2, 0x1, 0x3}}, 0xe8)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0xc0)
r10 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r10, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e)
sendmmsg(r10, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)

102.087246ms ago: executing program 2 (id=49):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000c215000008009f000d000000080026000816"], 0x40}}, 0x0)
r3 = socket(0x10, 0x22d81460e630c0cf, 0x0)
sendto$inet6(r3, &(0x7f0000000000)="7800000018002507de9881a1ffff00000204be04020506050e020409470009003f000c00100046000000850800000000000000653600648d0a00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e00000000000f66ed538f2523250", 0x78, 0x800, 0x0, 0x0)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast1, @broadcast}, &(0x7f0000000040)=0xc)
r4 = socket$inet(0xa, 0x801, 0x84)
r5 = socket$netlink(0x10, 0x3, 0x10)
r6 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="94000000000101040000000000000000f3fe9c86664c37abc23f0a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c000280050001000000fafa169a3fe15d99ee4546308fc72ebd57ea7aae4e4dec9d9beeb492c62c04481fac23728065646b4ab3913c4ba4067a7c42997c9ccd1b9a5756b384a0056c18fb39b6ea41d9e96ca34a5a78eb62df9cf8810884a5"], 0x94}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)
recvmsg(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40)
sendmsg$NFT_BATCH(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x48800}, 0xc080)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r4, 0xfffffffd)
r9 = accept4(r4, 0x0, 0x0, 0xc00)
recvmmsg(r9, &(0x7f0000001000), 0x581, 0x40000000, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r10, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2, 0x0, &(0x7f00000009c0)=[0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

1.874742ms ago: executing program 2 (id=50):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
close(0x4) (async)
unshare(0x6a040000) (async)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x4000041)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x2}, {0xfff1, 0xd}, {0xe, 0x10}}}, 0x24}}, 0x400c0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0) (async)
r3 = socket(0x2, 0x80805, 0x0) (async)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={0xffffffffffffffff, 0x18000000000002a0, 0x8, 0x0, &(0x7f0000000000)="b9ff03076844268c", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$unix(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) (async)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140)=0xffff8001, 0x4) (async)
recvmmsg(r7, &(0x7f0000001140), 0x74e, 0x0, 0x0) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00ccd1d6e6526b248c8304b06c24b24f56080000140008003f00ff000f0c3b938d4fae951fbdd39fb4c680b99a6866a644df364075276727b1465132af8c8ed394a1cf293166eadd4db9897870a5b7bfb01983303ed9"], 0x24}}, 0x8000)
sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYRES8=r2, @ANYRESOCT, @ANYBLOB="be79249aaafdbaa3de759a62206ce6a005ffb77a3100f97a07e733e264ea122a17b24818d326953ad727b7b6aa0de8f42a526ae82bc6bf282b10d56252e6a5ad666eb0dff1cd4abf00"/86], 0x28}}, 0x0)
bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300)
r9 = socket$kcm(0x29, 0x5, 0x0)
sendmmsg$inet(r9, &(0x7f0000001880)=[{{0x0, 0x1, &(0x7f00000010c0)=[{&(0x7f00000000c0)="c8", 0x1}], 0x1, 0x0, 0x0, 0x60ff}, 0x406}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001280)=',', 0x1}], 0x11}}], 0x2, 0x0)

0s ago: executing program 1 (id=51):
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r2, 0x1f4d2000)
write$tun(r2, &(0x7f0000000000)={@val={0x0, 0xf6}, @void, @eth={@empty, @local, @void, {@can={0xc, {{0x2, 0x1, 0x1, 0x1}, 0x4, 0x3, 0x0, 0x0, "6345afc09b81b5ef"}}}}}, 0x22)
close(r2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000008c0)={'pimreg\x00', @broadcast})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1, <r4=>0xffffffffffffffff}, 0x4)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000400)={'syztnl1\x00', <r5=>0x0, 0x2f, 0x4, 0x0, 0x3, 0x56, @mcast2, @private1, 0x8, 0x10, 0x2, 0x800}})
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x5, [@decl_tag={0xa, 0x0, 0x0, 0x11, 0x4, 0x6}, @var={0x4, 0x0, 0x0, 0xe, 0x2, 0x2}, @restrict={0x4, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x71, 0x2e, 0x2e]}}, &(0x7f0000000540)=""/31, 0x49, 0x1f, 0x1, 0x80}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000040), 0x0, <r7=>0x0, &(0x7f0000000080)=""/132, 0x84}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000600), 0x8)
r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@o_path={&(0x7f0000000640)='./file0\x00', 0x0, 0x4018, r1}, 0x18)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000840)={0x7, 0x8000, 0x2, 0x3}, &(0x7f0000000880)=0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0x1e, &(0x7f0000000300)=@raw=[@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @map_fd={0x18, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x39, &(0x7f00000001c0)=""/57, 0x40f00, 0x10, '\x00', r5, @fallback=0x8, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x4, 0x1, 0x1}, 0x10, r7, r8, 0x5, &(0x7f00000006c0)=[0xffffffffffffffff, r9], &(0x7f0000000700)=[{0x5, 0x3, 0xf, 0x7}, {0x9, 0x1, 0xf}, {0x4, 0x2}, {0x1, 0x1, 0x3, 0xb}, {0x1, 0x1, 0x9, 0x5}]}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:54837' (ED25519) to the list of known hosts.
syzkaller login: [   48.900896][ T5826] cgroup: Unknown subsys name 'net'
[   49.024892][ T5826] cgroup: Unknown subsys name 'cpuset'
[   49.029171][ T5826] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.888195][ T5826] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.936761][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.944368][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.948011][ T5861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.951589][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.955940][ T5861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.959388][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.969500][ T5862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.973039][ T5862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.976442][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.979700][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.979926][ T5862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.987965][ T5862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.992115][ T5862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.996638][ T5862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.000679][ T5862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.303657][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   56.363763][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   56.437379][ T5856] chnl_net:caif_netlink_parms(): no params data found
[   56.531623][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.534909][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.537333][ T5855] bridge_slave_0: entered allmulticast mode
[   56.540248][ T5855] bridge_slave_0: entered promiscuous mode
[   56.548088][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.550262][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.552993][ T5851] bridge_slave_0: entered allmulticast mode
[   56.555679][ T5851] bridge_slave_0: entered promiscuous mode
[   56.558865][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.561095][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.564480][ T5851] bridge_slave_1: entered allmulticast mode
[   56.567427][ T5851] bridge_slave_1: entered promiscuous mode
[   56.570015][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.572802][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.575435][ T5855] bridge_slave_1: entered allmulticast mode
[   56.578061][ T5855] bridge_slave_1: entered promiscuous mode
[   56.630475][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.635359][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.649260][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.654367][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.685648][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.687933][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.690364][ T5856] bridge_slave_0: entered allmulticast mode
[   56.693359][ T5856] bridge_slave_0: entered promiscuous mode
[   56.706924][ T5851] team0: Port device team_slave_0 added
[   56.718471][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.720745][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.723248][ T5856] bridge_slave_1: entered allmulticast mode
[   56.726448][ T5856] bridge_slave_1: entered promiscuous mode
[   56.730166][ T5851] team0: Port device team_slave_1 added
[   56.741300][ T5855] team0: Port device team_slave_0 added
[   56.767483][ T5855] team0: Port device team_slave_1 added
[   56.770026][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.772597][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.780806][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.786768][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.798519][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.800622][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.808843][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.814294][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.846653][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.848806][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.856968][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.869551][ T5856] team0: Port device team_slave_0 added
[   56.872915][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.875160][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.883406][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.897099][ T5856] team0: Port device team_slave_1 added
[   56.902700][ T5851] hsr_slave_0: entered promiscuous mode
[   56.905204][ T5851] hsr_slave_1: entered promiscuous mode
[   56.952781][ T5855] hsr_slave_0: entered promiscuous mode
[   56.955217][ T5855] hsr_slave_1: entered promiscuous mode
[   56.957373][ T5855] debugfs: 'hsr0' already exists in 'hsr'
[   56.959689][ T5855] Cannot create hsr debugfs directory
[   56.971390][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.974672][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.986015][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.996668][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.998779][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.010761][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.119875][ T5856] hsr_slave_0: entered promiscuous mode
[   57.122536][ T5856] hsr_slave_1: entered promiscuous mode
[   57.124761][ T5856] debugfs: 'hsr0' already exists in 'hsr'
[   57.126523][ T5856] Cannot create hsr debugfs directory
[   57.269980][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.276890][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.295529][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.318220][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.362602][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.375479][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.403762][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.411162][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.446762][ T5856] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.454334][ T5856] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.467323][ T5856] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.476047][ T5856] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.603849][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.634624][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.646633][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   57.668747][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.671808][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.683706][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.694127][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   57.706392][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   57.713373][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.716304][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.735362][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.738136][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.742696][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.745114][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.748928][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.751159][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.766476][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.769349][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.809047][ T5856] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   57.812543][ T5856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.983815][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.989547][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.996587][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.044260][ T5854] Bluetooth: hci1: command tx timeout
[   58.045175][ T5857] Bluetooth: hci0: command tx timeout
[   58.048496][ T5862] Bluetooth: hci2: command tx timeout
[   58.064584][ T5855] veth0_vlan: entered promiscuous mode
[   58.067990][ T5851] veth0_vlan: entered promiscuous mode
[   58.080359][ T5856] veth0_vlan: entered promiscuous mode
[   58.085892][ T5855] veth1_vlan: entered promiscuous mode
[   58.095398][ T5856] veth1_vlan: entered promiscuous mode
[   58.100137][ T5851] veth1_vlan: entered promiscuous mode
[   58.134893][ T5855] veth0_macvtap: entered promiscuous mode
[   58.149853][ T5855] veth1_macvtap: entered promiscuous mode
[   58.156837][ T5856] veth0_macvtap: entered promiscuous mode
[   58.163270][ T5851] veth0_macvtap: entered promiscuous mode
[   58.176507][ T5856] veth1_macvtap: entered promiscuous mode
[   58.179991][ T5851] veth1_macvtap: entered promiscuous mode
[   58.187746][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.195373][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.218374][ T5715] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.223343][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.225774][ T5715] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.234291][ T5715] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.240430][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.245729][ T5715] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.256283][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.265062][ T5715] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.280503][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.291287][ T5715] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.297961][ T5715] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.314028][ T5715] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.341376][ T5885] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.349345][ T5885] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.361409][ T5885] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.362714][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.367600][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.371816][ T5885] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.440859][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.449040][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.455167][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.459151][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.500682][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.510810][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.515922][  T744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.518974][  T744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.557188][ T5855] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.559423][  T744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.565665][  T744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.612799][ T5922] netlink: 'syz.0.1': attribute type 1 has an invalid length.
[   58.616185][ T5922] netlink: 'syz.0.1': attribute type 1 has an invalid length.
[   58.626477][ T5922] netlink: 'syz.0.1': attribute type 1 has an invalid length.
[   58.657569][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   58.706932][ T5932] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   58.788242][ T5935] tipc: Started in network mode
[   58.800184][ T5935] tipc: Node identity ac14140f, cluster identity 4711
[   58.812443][ T5935] tipc: New replicast peer: 255.255.255.255
[   58.818729][ T5935] tipc: Enabled bearer <udp:syz2>, priority 10
[   58.855058][ T5940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5'.
[   58.925550][ T5944] tipc: Started in network mode
[   58.927250][ T5944] tipc: Node identity a24280649eb5, cluster identity 4711
[   58.930003][ T5944] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.933087][ T5944] syzkaller0: entered promiscuous mode
[   58.934875][ T5944] syzkaller0: entered allmulticast mode
[   58.942591][ T5942] tipc: Resetting bearer <eth:syzkaller0>
[   58.956108][ T5942] tipc: Disabling bearer <eth:syzkaller0>
[   58.971000][ T5947] syz.1.8 uses obsolete (PF_INET,SOCK_PACKET)
[   59.056427][ T5949] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9'.
[   59.134987][ T5951] tls_set_device_offload_rx: netdev not found
[   59.204659][ T5957] trusted_key: syz.0.11 sent an empty control message without MSG_MORE.
[   59.210724][ T5957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11'.
[   59.270332][ T5964] netlink: 'syz.0.12': attribute type 11 has an invalid length.
[   59.274041][ T5964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'.
[   59.287756][ T5964] netlink: 'syz.0.12': attribute type 11 has an invalid length.
[   59.287785][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   59.290934][ T5964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'.
[   59.297516][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   59.301205][ T5964] Zero length message leads to an empty skb
[   59.305352][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   59.317773][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   59.392463][ T5970] netlink: 'syz.0.13': attribute type 8 has an invalid length.
[   59.395647][ T5970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'.
[   59.407449][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'.
[   59.469324][ T5978] syzkaller1: entered promiscuous mode
[   59.471043][ T5978] syzkaller1: entered allmulticast mode
[   59.597829][ T5990] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[   59.603289][ T5990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18'.
[   59.730721][ T5993] netlink: 388 bytes leftover after parsing attributes in process `syz.0.19'.
[   59.914737][ T6001] wg0 speed is unknown, defaulting to 1000
[   59.919343][ T6001] wg0 speed is unknown, defaulting to 1000
[   59.923742][ T6001] wg0 speed is unknown, defaulting to 1000
[   59.934505][ T5905] tipc: Node number set to 2886997007
[   60.039694][ T5905] wg0 speed is unknown, defaulting to 1000
[   60.043088][ T6001] infiniband syz2: set active
[   60.044769][ T6001] infiniband syz2: added wg0
[   60.069592][ T6001] RDS/IB: syz2: added
[   60.073286][ T6001] smc: adding ib device syz2 with port count 1
[   60.076326][ T6001] smc:    ib device syz2 port 1 has pnetid 
[   60.080135][   T24] wg0 speed is unknown, defaulting to 1000
[   60.085849][ T6001] wg0 speed is unknown, defaulting to 1000
[   60.122675][ T5862] Bluetooth: hci1: command tx timeout
[   60.132315][ T5862] Bluetooth: hci2: command tx timeout
[   60.133998][ T5862] Bluetooth: hci0: command tx timeout
[   60.208876][ T6001] wg0 speed is unknown, defaulting to 1000
[   60.317151][ T6001] wg0 speed is unknown, defaulting to 1000
[   60.461004][ T6005] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.868664][ T6021] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   60.879233][ T6021] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.322161][ T6048] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   61.333886][    C0] Illegal XDP return value 16128 on prog  (id 13) dev lo, expect packet loss!
[   61.424790][ T6056] netlink: 'syz.2.37': attribute type 10 has an invalid length.
[   61.439760][ T6056] veth0_vlan: left promiscuous mode
[   61.439971][ T6059] netlink: 'syz.0.39': attribute type 1 has an invalid length.
[   61.460354][ T6056] veth0_vlan: entered promiscuous mode
[   61.466045][ T6056] team0: Device veth0_vlan failed to register rx_handler
[   61.472684][ T6060] Bluetooth: MGMT ver 1.23
[   61.576111][ T6056] syz.2.37 (6056) used greatest stack depth: 18552 bytes left
[   61.610308][ T6071] ieee802154 phy0 wpan0: encryption failed: -22
[   61.693912][ T6068] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   61.707394][ T6068] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   61.711332][ T6068] bond0 (unregistering): Released all slaves
[   61.728277][ T6076] IPv6: sit1: Disabled Multicast RS
[   61.835413][ T6079] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   61.838901][ T6079] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.890790][ T6087] sock: sock_set_timeout: `syz.2.47' (pid 6087) tries to set negative timeout
[   61.892116][ T6086] netlink: 'syz.2.47': attribute type 1 has an invalid length.
[   61.936349][ T6079] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   61.940595][ T6079] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.978426][ T6090] netlink: 'syz.2.48': attribute type 10 has an invalid length.
[   61.985979][ T6090] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   62.023617][ T6079] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   62.027632][ T6079] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.077890][ T6079] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   62.081111][ T6079] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.190259][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   62.193672][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.206436][ T5857] Bluetooth: hci0: command tx timeout
[   62.208534][ T5862] Bluetooth: hci2: command tx timeout
[   62.208620][ T5854] Bluetooth: hci1: command tx timeout
[   62.216353][ T5715] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   62.220374][ T5715] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.252369][ T5715] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   62.254924][ T5715] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.272983][ T5715] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   62.276084][ T5715] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.284918][ T6078] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   62.288178][ T6078] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.300967][ T5715] ==================================================================
[   62.303597][ T5715] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1360
[   62.306193][ T5715] Read of size 8 at addr ffff88810f3644b0 by task kworker/u8:2/5715
[   62.309206][ T5715] 
[   62.310245][ T5715] CPU: 1 UID: 0 PID: 5715 Comm: kworker/u8:2 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[   62.310260][ T5715] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   62.310269][ T5715] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[   62.310294][ T5715] Call Trace:
[   62.310301][ T5715]  <TASK>
[   62.310309][ T5715]  dump_stack_lvl+0x189/0x250
[   62.310328][ T5715]  ? __kasan_check_byte+0x12/0x40
[   62.310347][ T5715]  ? __pfx_dump_stack_lvl+0x10/0x10
[   62.310360][ T5715]  ? lock_release+0x4b/0x3e0
[   62.310379][ T5715]  ? __virt_addr_valid+0x4a5/0x5c0
[   62.310397][ T5715]  print_report+0xca/0x240
[   62.310410][ T5715]  ? __mutex_lock+0x147/0x1360
[   62.310426][ T5715]  kasan_report+0x118/0x150
[   62.310443][ T5715]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   62.310459][ T5715]  ? __mutex_lock+0x147/0x1360
[   62.310477][ T5715]  __mutex_lock+0x147/0x1360
[   62.310489][ T5715]  ? __mutex_lock+0x5b6/0x1360
[   62.310499][ T5715]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[   62.310509][ T5715]  ? __pfx___mutex_lock+0x10/0x10
[   62.310519][ T5715]  ? __lock_acquire+0xab9/0xd20
[   62.310532][ T5715]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[   62.310574][ T5715]  ? process_scheduled_works+0x9ef/0x17b0
[   62.310582][ T5715]  ? process_scheduled_works+0x9ef/0x17b0
[   62.310589][ T5715]  process_scheduled_works+0xae1/0x17b0
[   62.310602][ T5715]  ? __pfx_process_scheduled_works+0x10/0x10
[   62.310612][ T5715]  worker_thread+0x8a0/0xda0
[   62.310625][ T5715]  kthread+0x711/0x8a0
[   62.310635][ T5715]  ? __pfx_worker_thread+0x10/0x10
[   62.310642][ T5715]  ? __pfx_kthread+0x10/0x10
[   62.310650][ T5715]  ? _raw_spin_unlock_irq+0x23/0x50
[   62.310658][ T5715]  ? lockdep_hardirqs_on+0x9c/0x150
[   62.310668][ T5715]  ? __pfx_kthread+0x10/0x10
[   62.310677][ T5715]  ret_from_fork+0x3fc/0x770
[   62.310685][ T5715]  ? __pfx_ret_from_fork+0x10/0x10
[   62.310694][ T5715]  ? __switch_to_asm+0x39/0x70
[   62.310703][ T5715]  ? __switch_to_asm+0x33/0x70
[   62.310712][ T5715]  ? __pfx_kthread+0x10/0x10
[   62.310720][ T5715]  ret_from_fork_asm+0x1a/0x30
[   62.310732][ T5715]  </TASK>
[   62.310756][ T5715] 
[   62.376187][ T5715] Allocated by task 6079:
[   62.377491][ T5715]  kasan_save_track+0x3e/0x80
[   62.378913][ T5715]  __kasan_kmalloc+0x93/0xb0
[   62.380319][ T5715]  __kmalloc_noprof+0x27a/0x4f0
[   62.381795][ T5715]  udp_tunnel_nic_netdevice_event+0x854/0x19f0
[   62.383885][ T5715]  notifier_call_chain+0x1b6/0x3e0
[   62.385614][ T5715]  register_netdevice+0x1608/0x1ae0
[   62.387176][ T5715]  nsim_create+0xae8/0xf10
[   62.388494][ T5715]  __nsim_dev_port_add+0x6b6/0xb10
[   62.390042][ T5715]  nsim_dev_port_add_all+0x37/0xf0
[   62.391583][ T5715]  nsim_dev_reload_up+0x451/0x780
[   62.393109][ T5715]  devlink_reload+0x4ec/0x8d0
[   62.394514][ T5715]  devlink_nl_reload_doit+0xb35/0xd50
[   62.396125][ T5715]  genl_family_rcv_msg_doit+0x215/0x300
[   62.397753][ T5715]  genl_rcv_msg+0x60e/0x790
[   62.399112][ T5715]  netlink_rcv_skb+0x208/0x470
[   62.400550][ T5715]  genl_rcv+0x28/0x40
[   62.401747][ T5715]  netlink_unicast+0x82f/0x9e0
[   62.403352][ T5715]  netlink_sendmsg+0x805/0xb30
[   62.405106][ T5715]  __sock_sendmsg+0x21c/0x270
[   62.406521][ T5715]  ____sys_sendmsg+0x505/0x830
[   62.407999][ T5715]  ___sys_sendmsg+0x21f/0x2a0
[   62.409421][ T5715]  __x64_sys_sendmsg+0x19b/0x260
[   62.410925][ T5715]  do_syscall_64+0xfa/0x3b0
[   62.412282][ T5715]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.414153][ T5715] 
[   62.414892][ T5715] Freed by task 6078:
[   62.416102][ T5715]  kasan_save_track+0x3e/0x80
[   62.417567][ T5715]  kasan_save_free_info+0x46/0x50
[   62.419125][ T5715]  __kasan_slab_free+0x5b/0x80
[   62.420586][ T5715]  kfree+0x18e/0x440
[   62.421762][ T5715]  udp_tunnel_nic_netdevice_event+0x1332/0x19f0
[   62.423859][ T5715]  notifier_call_chain+0x1b6/0x3e0
[   62.425700][ T5715]  unregister_netdevice_many_notify+0x14d7/0x1ff0
[   62.427607][ T5715]  unregister_netdevice_queue+0x33c/0x380
[   62.429344][ T5715]  nsim_destroy+0x1dd/0x670
[   62.430745][ T5715]  __nsim_dev_port_del+0x14d/0x1b0
[   62.432384][ T5715]  nsim_dev_reload_destroy+0x288/0x490
[   62.434181][ T5715]  nsim_dev_reload_down+0x8a/0xc0
[   62.435782][ T5715]  devlink_reload+0x1b6/0x8d0
[   62.437254][ T5715]  devlink_nl_reload_doit+0xb35/0xd50
[   62.438909][ T5715]  genl_family_rcv_msg_doit+0x215/0x300
[   62.440543][ T5715]  genl_rcv_msg+0x60e/0x790
[   62.441936][ T5715]  netlink_rcv_skb+0x208/0x470
[   62.443390][ T5715]  genl_rcv+0x28/0x40
[   62.444603][ T5715]  netlink_unicast+0x82f/0x9e0
[   62.446026][ T5715]  netlink_sendmsg+0x805/0xb30
[   62.447500][ T5715]  __sock_sendmsg+0x21c/0x270
[   62.448961][ T5715]  ____sys_sendmsg+0x505/0x830
[   62.450409][ T5715]  ___sys_sendmsg+0x21f/0x2a0
[   62.451852][ T5715]  __x64_sys_sendmsg+0x19b/0x260
[   62.453385][ T5715]  do_syscall_64+0xfa/0x3b0
[   62.454773][ T5715]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.456493][ T5715] 
[   62.457225][ T5715] Last potentially related work creation:
[   62.458979][ T5715]  kasan_save_stack+0x3e/0x60
[   62.460403][ T5715]  kasan_record_aux_stack+0xbd/0xd0
[   62.461964][ T5715]  insert_work+0x3d/0x330
[   62.463377][ T5715]  __queue_work+0xbaf/0xfb0
[   62.465157][ T5715]  queue_work_on+0x181/0x270
[   62.466654][ T5715]  __udp_tunnel_nic_add_port+0xb71/0xd60
[   62.468331][ T5715]  udp_tunnel_push_rx_port+0x180/0x200
[   62.469996][ T5715]  geneve_offload_rx_ports+0xd7/0x160
[   62.471619][ T5715]  geneve_netdevice_event+0x6a/0x80
[   62.473305][ T5715]  notifier_call_chain+0x1b6/0x3e0
[   62.474860][ T5715]  call_netdevice_notifiers+0x88/0xc0
[   62.476479][ T5715]  udp_tunnel_nic_netdevice_event+0x134d/0x19f0
[   62.478353][ T5715]  notifier_call_chain+0x1b6/0x3e0
[   62.479908][ T5715]  register_netdevice+0x1608/0x1ae0
[   62.481490][ T5715]  nsim_create+0xae8/0xf10
[   62.482908][ T5715]  __nsim_dev_port_add+0x6b6/0xb10
[   62.484927][ T5715]  nsim_dev_port_add_all+0x37/0xf0
[   62.486668][ T5715]  nsim_dev_reload_up+0x451/0x780
[   62.488146][ T5715]  devlink_reload+0x4ec/0x8d0
[   62.489538][ T5715]  devlink_nl_reload_doit+0xb35/0xd50
[   62.491117][ T5715]  genl_family_rcv_msg_doit+0x215/0x300
[   62.492745][ T5715]  genl_rcv_msg+0x60e/0x790
[   62.494182][ T5715]  netlink_rcv_skb+0x208/0x470
[   62.495605][ T5715]  genl_rcv+0x28/0x40
[   62.496848][ T5715]  netlink_unicast+0x82f/0x9e0
[   62.498327][ T5715]  netlink_sendmsg+0x805/0xb30
[   62.499812][ T5715]  __sock_sendmsg+0x21c/0x270
[   62.501269][ T5715]  ____sys_sendmsg+0x505/0x830
[   62.502748][ T5715]  ___sys_sendmsg+0x21f/0x2a0
[   62.504613][ T5715]  __x64_sys_sendmsg+0x19b/0x260
[   62.506175][ T5715]  do_syscall_64+0xfa/0x3b0
[   62.507595][ T5715]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.509372][ T5715] 
[   62.510147][ T5715] Second to last potentially related work creation:
[   62.512177][ T5715]  kasan_save_stack+0x3e/0x60
[   62.513707][ T5715]  kasan_record_aux_stack+0xbd/0xd0
[   62.515283][ T5715]  insert_work+0x3d/0x330
[   62.516586][ T5715]  __queue_work+0xcd2/0xfb0
[   62.517933][ T5715]  queue_work_on+0x181/0x270
[   62.519303][ T5715]  __udp_tunnel_nic_add_port+0xb71/0xd60
[   62.521001][ T5715]  udp_tunnel_push_rx_port+0x180/0x200
[   62.522646][ T5715]  vxlan_offload_rx_ports+0x139/0x200
[   62.524704][ T5715]  vxlan_netdevice_event+0x111/0x470
[   62.526431][ T5715]  notifier_call_chain+0x1b6/0x3e0
[   62.527992][ T5715]  call_netdevice_notifiers+0x88/0xc0
[   62.529614][ T5715]  udp_tunnel_nic_netdevice_event+0x134d/0x19f0
[   62.531463][ T5715]  notifier_call_chain+0x1b6/0x3e0
[   62.533199][ T5715]  register_netdevice+0x1608/0x1ae0
[   62.534860][ T5715]  nsim_create+0xae8/0xf10
[   62.536338][ T5715]  __nsim_dev_port_add+0x6b6/0xb10
[   62.537937][ T5715]  nsim_dev_port_add_all+0x37/0xf0
[   62.539559][ T5715]  nsim_dev_reload_up+0x451/0x780
[   62.541101][ T5715]  devlink_reload+0x4ec/0x8d0
[   62.542554][ T5715]  devlink_nl_reload_doit+0xb35/0xd50
[   62.544617][ T5715]  genl_family_rcv_msg_doit+0x215/0x300
[   62.546318][ T5715]  genl_rcv_msg+0x60e/0x790
[   62.547708][ T5715]  netlink_rcv_skb+0x208/0x470
[   62.549198][ T5715]  genl_rcv+0x28/0x40
[   62.550465][ T5715]  netlink_unicast+0x82f/0x9e0
[   62.551987][ T5715]  netlink_sendmsg+0x805/0xb30
[   62.553598][ T5715]  __sock_sendmsg+0x21c/0x270
[   62.555069][ T5715]  ____sys_sendmsg+0x505/0x830
[   62.556594][ T5715]  ___sys_sendmsg+0x21f/0x2a0
[   62.558076][ T5715]  __x64_sys_sendmsg+0x19b/0x260
[   62.559645][ T5715]  do_syscall_64+0xfa/0x3b0
[   62.561083][ T5715]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.562981][ T5715] 
[   62.563962][ T5715] The buggy address belongs to the object at ffff88810f364400
[   62.563962][ T5715]  which belongs to the cache kmalloc-256 of size 256
[   62.568351][ T5715] The buggy address is located 176 bytes inside of
[   62.568351][ T5715]  freed 256-byte region [ffff88810f364400, ffff88810f364500)
[   62.572537][ T5715] 
[   62.573415][ T5715] The buggy address belongs to the physical page:
[   62.575431][ T5715] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10f364
[   62.578054][ T5715] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   62.580615][ T5715] anon flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[   62.583054][ T5715] page_type: f5(slab)
[   62.584598][ T5715] raw: 057ff00000000040 ffff88801a441b40 0000000000000000 dead000000000001
[   62.587201][ T5715] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[   62.589822][ T5715] head: 057ff00000000040 ffff88801a441b40 0000000000000000 dead000000000001
[   62.592452][ T5715] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[   62.595779][ T5715] head: 057ff00000000001 ffffea00043cd901 00000000ffffffff 00000000ffffffff
[   62.598884][ T5715] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[   62.601550][ T5715] page dumped because: kasan: bad access detected
[   62.603827][ T5715] page_owner tracks the page as allocated
[   62.605788][ T5715] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5855, tgid 5855 (syz-executor), ts 57550521196, free_ts 57546515228
[   62.612534][ T5715]  post_alloc_hook+0x240/0x2a0
[   62.614099][ T5715]  get_page_from_freelist+0x21e4/0x22c0
[   62.616056][ T5715]  __alloc_frozen_pages_noprof+0x181/0x370
[   62.618008][ T5715]  alloc_pages_mpol+0x232/0x4a0
[   62.619548][ T5715]  allocate_slab+0x8a/0x370
[   62.621080][ T5715]  ___slab_alloc+0xbeb/0x1410
[   62.622596][ T5715]  __kmalloc_noprof+0x305/0x4f0
[   62.624467][ T5715]  fib_create_info+0x1728/0x3210
[   62.626057][ T5715]  fib_table_insert+0xc6/0x1b50
[   62.627588][ T5715]  fib_magic+0x2c4/0x390
[   62.628908][ T5715]  fib_add_ifaddr+0x3fb/0x5f0
[   62.630569][ T5715]  fib_netdev_event+0x382/0x490
[   62.632071][ T5715]  notifier_call_chain+0x1b6/0x3e0
[   62.633730][ T5715]  __dev_notify_flags+0x18d/0x2e0
[   62.635244][ T5715]  netif_change_flags+0xe8/0x1a0
[   62.636858][ T5715]  do_setlink+0xc55/0x41c0
[   62.638284][ T5715] page last free pid 5856 tgid 5856 stack trace:
[   62.640258][ T5715]  __free_frozen_pages+0xbc4/0xd30
[   62.641863][ T5715]  __put_partials+0x156/0x1a0
[   62.643467][ T5715]  put_cpu_partial+0x17c/0x250
[   62.645307][ T5715]  __slab_free+0x2d5/0x3c0
[   62.646705][ T5715]  qlist_free_all+0x97/0x140
[   62.648157][ T5715]  kasan_quarantine_reduce+0x148/0x160
[   62.649873][ T5715]  __kasan_slab_alloc+0x22/0x80
[   62.651385][ T5715]  __kmalloc_noprof+0x224/0x4f0
[   62.652910][ T5715]  fib_create_info+0x1728/0x3210
[   62.654452][ T5715]  fib_table_insert+0xc6/0x1b50
[   62.655991][ T5715]  fib_magic+0x2c4/0x390
[   62.657321][ T5715]  fib_add_ifaddr+0x144/0x5f0
[   62.658785][ T5715]  fib_netdev_event+0x382/0x490
[   62.660296][ T5715]  notifier_call_chain+0x1b6/0x3e0
[   62.661929][ T5715]  __dev_notify_flags+0x18d/0x2e0
[   62.663724][ T5715]  netif_change_flags+0xe8/0x1a0
[   62.665501][ T5715] 
[   62.666273][ T5715] Memory state around the buggy address:
[   62.668037][ T5715]  ffff88810f364380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   62.670527][ T5715]  ffff88810f364400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   62.673040][ T5715] >ffff88810f364480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   62.675751][ T5715]                                      ^
[   62.677435][ T5715]  ffff88810f364500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   62.679869][ T5715]  ffff88810f364580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   62.682347][ T5715] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   62.711967][ T5715] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   62.714242][ T5715] CPU: 1 UID: 0 PID: 5715 Comm: kworker/u8:2 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[   62.718212][ T5715] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   62.721468][ T5715] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[   62.724031][ T5715] Call Trace:
[   62.725225][ T5715]  <TASK>
[   62.726161][ T5715]  dump_stack_lvl+0x99/0x250
[   62.727577][ T5715]  ? __asan_memcpy+0x40/0x70
[   62.729395][ T5715]  ? __pfx_dump_stack_lvl+0x10/0x10
[   62.731073][ T5715]  ? __pfx__printk+0x10/0x10
[   62.732486][ T5715]  vpanic+0x281/0x750
[   62.734065][ T5715]  ? preempt_schedule+0xae/0xc0
[   62.735645][ T5715]  ? __pfx_vpanic+0x10/0x10
[   62.737076][ T5715]  ? preempt_schedule_common+0x83/0xd0
[   62.738864][ T5715]  ? preempt_schedule+0xae/0xc0
[   62.740326][ T5715]  ? __pfx_preempt_schedule+0x10/0x10
[   62.742018][ T5715]  panic+0xb9/0xc0
[   62.743318][ T5715]  ? __pfx_panic+0x10/0x10
[   62.744994][ T5715]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[   62.746819][ T5715]  ? __mutex_lock+0x147/0x1360
[   62.748791][ T5715]  check_panic_on_warn+0x89/0xb0
[   62.750524][ T5715]  ? __mutex_lock+0x147/0x1360
[   62.752049][ T5715]  end_report+0x78/0x160
[   62.753472][ T5715]  kasan_report+0x129/0x150
[   62.754898][ T5715]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   62.756726][ T5715]  ? __mutex_lock+0x147/0x1360
[   62.758344][ T5715]  __mutex_lock+0x147/0x1360
[   62.759809][ T5715]  ? __mutex_lock+0x5b6/0x1360
[   62.761308][ T5715]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[   62.763365][ T5715]  ? __pfx___mutex_lock+0x10/0x10
[   62.765260][ T5715]  ? __lock_acquire+0xab9/0xd20
[   62.766733][ T5715]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[   62.768938][ T5715]  ? process_scheduled_works+0x9ef/0x17b0
[   62.771221][ T5715]  ? process_scheduled_works+0x9ef/0x17b0
[   62.773117][ T5715]  process_scheduled_works+0xae1/0x17b0
[   62.774854][ T5715]  ? __pfx_process_scheduled_works+0x10/0x10
[   62.776737][ T5715]  worker_thread+0x8a0/0xda0
[   62.778223][ T5715]  kthread+0x711/0x8a0
[   62.779511][ T5715]  ? __pfx_worker_thread+0x10/0x10
[   62.781064][ T5715]  ? __pfx_kthread+0x10/0x10
[   62.782450][ T5715]  ? _raw_spin_unlock_irq+0x23/0x50
[   62.784434][ T5715]  ? lockdep_hardirqs_on+0x9c/0x150
[   62.786153][ T5715]  ? __pfx_kthread+0x10/0x10
[   62.787653][ T5715]  ret_from_fork+0x3fc/0x770
[   62.789525][ T5715]  ? __pfx_ret_from_fork+0x10/0x10
[   62.791144][ T5715]  ? __switch_to_asm+0x39/0x70
[   62.792660][ T5715]  ? __switch_to_asm+0x33/0x70
[   62.794365][ T5715]  ? __pfx_kthread+0x10/0x10
[   62.795808][ T5715]  ret_from_fork_asm+0x1a/0x30
[   62.797316][ T5715]  </TASK>
[   62.798992][ T5715] Kernel Offset: disabled
[   62.800334][ T5715] Rebooting in 86400 seconds..

VM DIAGNOSIS:
00:06:50  Registers:
info registers vcpu 0

CPU#0
RAX=e325606dc122f500 RBX=ffffffff81968308 RCX=e325606dc122f500 RDX=0000000000000001
RSI=ffffffff8d9b4ac5 RDI=ffffffff8be32680 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa34730 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b78e3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3e1900 CR3=000000002362c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f2e4be12e53
XMM06=0000000000000000 00007f2e4be12e4d XMM07=0000000000000000 00007f2e4be12e61
XMM08=0000000000000000 00007f2e4be12ee7 XMM09=0000000000000000 00007f2e4be12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000005d RBX=000000000000005d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002cdf130
R8 =ffff88801fd30237 R9 =1ffff11003fa6046 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=ffffffff99af48ce R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e724c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000010000 CR3=000000001f6dc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f2e4bf87498 00007f2e4bf87470 XMM03=00007f2e4bf874a8 00007f2e4bf874a0
XMM04=00007f2e4caed100 00007f2e4bf87460 XMM05=00007f2e4bf87478 00007f2e4bf874c0
XMM06=00007f2e4bf874b8 00007f2e4bf874b0 XMM07=00007f2e4bf874a8 00007f2e4bf874a0
XMM08=0000000000000000 00007f2e4be12ee7 XMM09=0000000000000000 00007f2e4be12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
