last executing test programs:

2.09072346s ago: executing program 1 (id=123):
r0 = socket$inet(0x2, 0x5, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000140)=0x8)
r3 = socket$inet(0x2, 0x2, 0x73)
setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0)
sendmmsg$sock(r3, &(0x7f0000001740)=[{{&(0x7f0000000140)=@nl=@unspec, 0x80, 0x0}}], 0x1, 0x0)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES64=r4], 0x10c}}, 0x20040000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x0, 0x7, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x31, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private}}}})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r8 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r8, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000040)=[@ip_retopts={{0x20, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0xc, 0x0, 0xb, [0x2, 0xff, 0x8]}]}}}], 0x20}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40)
close(r7)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x16, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}})
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001a00690126bd7000000000001c000004ff07000400f10000"], 0x1c}}, 0x0)

2.088230347s ago: executing program 1 (id=126):
r0 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000002000010000000000000000000200200005000000000000001400110076657468305f6d61637674617000000008000200ac1e0001080018004e"], 0x54}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x54}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}]}, 0x34}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000040)=0xb6, 0x4)
connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x21, @fixed}, 0xe)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2})
ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000000)=0x505c63ca)
ioctl$TUNSETLINK(r2, 0x400454cd, 0x100)

1.190721258s ago: executing program 2 (id=139):
r0 = socket$netlink(0x10, 0x3, 0xc)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000240)=0xfffffff4, 0x4)
r1 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x81, 0xd, 0x403}]})
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f00), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r5, @ANYBLOB="010026bd7000ffdadf251d0000000c000600010000000100000084002f800c000200000000000000000018000100070000006c00038005000200030000003800038008000200"], 0xa4}, 0x1, 0x0, 0x0, 0x880}, 0x40)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = accept(r6, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x80)
setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f00000000c0)=0x4140, 0x4)

1.129049639s ago: executing program 1 (id=142):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071105300000000009500000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10)
listen(r1, 0x1ad72f7)
accept4(r1, 0x0, 0x0, 0x80000)
accept4$netrom(r1, 0x0, 0x0, 0x80000)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xfff3, 0xf}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x34, 0x2, [@TCA_MATCHALL_ACT={0x30, 0x2, [@m_ife={0x2c, 0x21, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40045}, 0x0)

1.128626865s ago: executing program 2 (id=143):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0x4, 0x4, 0x398, 0xffffffff, 0x1a8, 0x1a8, 0xd0, 0xfeffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private2, [0x0, 0x0, 0x0, 0xff000000], [0xff000000], 'pim6reg0\x00', 'team_slave_1\x00', {}, {}, 0x6, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x0, 0x1}, {0x4, 0x5, 0x7}, 0x1, 0xf0f}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0x10, 0x58}}, @common=@eui64={{0x28}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYRES8=r0, @ANYRESDEC=r0, @ANYRES16=r0], 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="a020000004ae030008000500", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x45}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0xb}, {0x0, 0xc}, {0x6, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x40054)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x3100, 0x11, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair(0x5, 0x6, 0x7ff, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000080000000850000007b0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010001000000000000000008000000b70300000600000085000000060000009500"/96], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x51}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000100)={0x11, 0x101, 0x6, 0x7, 0x6, 0x81})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xb8}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r11=>0x0})
r12 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x89, 0x0, 0x0, 0x0, @empty, @empty}}}})
sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000780)=ANY=[@ANYBLOB="02b1a8b2c25203c0185b8186c32a7e7cb0f66dd63262365ac3f341218cf6aa633ed1824cc370115b33cc641a40a84534086b8299ce382ef3fb1ee872fbe5ec173208fb506d335918517b6306923982a4faa55a30e4ed2fc86d06696f704acb5e8c5212c884b1fe8cf301afbe5667e44002c65463da6a705c454cea5b858acd41359bbcb26a30d0f90de22966e5a1a31425920f39ced6e8dfbfcb996d10592dabe635308bf06e460e81744a992da8b06a4c705a23dacad358011c807dc1c3e778dec0b2b84876c558a7bbec852535caef9c2801364ad7a33444a060", @ANYRESOCT=r11, @ANYRESDEC=r2, @ANYRES64=r4, @ANYRES16=r5, @ANYBLOB="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", @ANYRESOCT=r10, @ANYRES64=r8], 0x6f4}}, 0x0)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r9)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0x2c, r13, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x15}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x24000880)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="080026bd7008ffdbdf255300000008000300", @ANYRES32=r11, @ANYBLOB="0c009900fcf8ffff3876aa0d"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20008000)

1.126462388s ago: executing program 0 (id=144):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x80801, 0x1)
socket$inet6(0xa, 0x80003, 0xff)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x6, 0xa}, 0x50)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x2000004)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6(0xa, 0x5, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6(0xa, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32, @ANYBLOB="71e79fd80000000014001280", @ANYRES32=r3], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000280012800b00010065727370616e0000180002800400120005001600020000000500170083"], 0x48}, 0x1, 0x0, 0x0, 0x28055}, 0x20008090)

1.00961051s ago: executing program 2 (id=145):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x80, 0x10, 0x5, 0x0, 0x3, 0x0, 0xb, 0x3000}, [@RTA_DST={0x8, 0x1, @remote}]}, 0x24}}, 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x8000000000000c, &(0x7f0000000080), 0x0)
r3 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e20, @multicast2}], 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='rpcgss_oid_to_mech\x00', r1, 0x0, 0x2}, 0x18)
getsockopt$inet_opts(r2, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000000)=0x28)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r6, 0x0, 0x2, 0x0)
ioctl$sock_qrtr_TIOCINQ(r6, 0x541b, &(0x7f0000000040))
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10)
socket$inet_udplite(0x2, 0x2, 0x88)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0x90}}, 0x40040)

1.008601847s ago: executing program 0 (id=146):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d120c2f0081e949b93897bc3b0000000000007d01ff02000000000000003bee0000000001120022"], 0xfdef)

857.372469ms ago: executing program 0 (id=147):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001600)=""/4098, 0x1002}, {&(0x7f0000001300)=""/200, 0xc8}, {&(0x7f0000000140)=""/185, 0xb9}], 0x3}, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x21}, 0x94)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, <r4=>0x0}, 0x8)
r5 = socket$inet_icmp(0x2, 0x2, 0x1)
sendmmsg$inet(r5, &(0x7f0000000340)=[{{&(0x7f0000000200)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1, 0x0, 0x5e}}, {}], 0x2, 0x4000)
r6 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r4, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000440)={r7, r3}, 0xc)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x4}, 0x300)

853.116077ms ago: executing program 2 (id=148):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r1, 0x0, 0x200, 0x0)
vmsplice(r3, &(0x7f0000000100)=[{&(0x7f00000003c0)="89a25031b0f94f0cd90348a0d21ee413fa36ee8608f0844238e86d19f73752712e44cf133f8e6f0d32d614bbc3926a2e37f261021dd991c941e3e6f1f3856cc68dfe41ae7eaf23ba91d8cbfbb99cae9c90c9dcac5cf843794592a5d408bd312d70e145a62181e3aaa9c243d775a318fc99b7", 0x72}, {&(0x7f0000002c40)="9478c03da986c8917ac188d57dfe2d81772faa04b076834e076131c31c48decbb84f4ae61fbdad0adfeebf690cd98e00dc4e09c31e1acd29123eda33867ac2db2b06749b5348c785985c17947b08349d385f1b31c0edce31faf4adc2f1d39ab252210c6b35f7ea67d525044c20326e328fdd28f3d3a04dd3a7e4ad6ec9db6b78cb28dcecadc27f7765ebfcf3214fdef0dd672e4942d2d51365fd1bd724428c2453a82dc24b9b5ea2650267dc772aeed140331e388393821011521cf33cec66130398a2143ee088f0099a460d383c2dfd842e7e5b05fe2fb08f2746aa4183e7d94c7998fa198c30b1d5a156e191be8d194e645c6e1add171913b7e1e9af5d65d618c0da6878cce85538b78cc30b53befbc9c3b746f3b6f1990a512de078a8729cd2916cbede4b48cbdc31d6c4eb0fc384533a4b27b54d1a242bb4b3b0e9ab668915e46a4aedf19c363e6365c935d8a3b3f1d8c4ee8686ad954b62e9a083f9b0cb391d44f6e638b2c3688897fef4a2cceabe2c24540c0816ce7ad05cf3d22822f275c8c5960ccad8a044d6297c810869", 0x18f}], 0x2, 0xa)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000000900020000000000000000030000060900010073797a3000000000300002002c00bf57b5050300ff02000000000000000000000000000114000400fc00"/80], 0x50}, 0x1, 0x0, 0x0, 0x10048804}, 0xc000)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
pipe(&(0x7f00000000c0)) (async)
pipe(&(0x7f0000000300)) (async)
splice(r2, 0x0, r1, 0x0, 0x200, 0x0) (async)
vmsplice(r3, &(0x7f0000000100)=[{&(0x7f00000003c0)="89a25031b0f94f0cd90348a0d21ee413fa36ee8608f0844238e86d19f73752712e44cf133f8e6f0d32d614bbc3926a2e37f261021dd991c941e3e6f1f3856cc68dfe41ae7eaf23ba91d8cbfbb99cae9c90c9dcac5cf843794592a5d408bd312d70e145a62181e3aaa9c243d775a318fc99b7", 0x72}, {&(0x7f0000002c40)="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", 0x18f}], 0x2, 0xa) (async)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000000900020000000000000000030000060900010073797a3000000000300002002c00bf57b5050300ff02000000000000000000000000000114000400fc00"/80], 0x50}, 0x1, 0x0, 0x0, 0x10048804}, 0xc000) (async)

729.216057ms ago: executing program 0 (id=149):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x100, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0xeb, 0x6, "5926bc06417bd9dae956c2123f8fc2d840f30562ac8ff0b1fb789132f6ab977c6ab2e112d10da762fae1a1d0628674a9c014ea541643a71b7eeae9294e98a2cdc51be3456de5cf8861d7fea7aa82b5d25ed340b0e514bda4e9c8b77cb31e174b4723878e8daeff7ccb4af55daa198a9d04def4d3aafec79ebcebca529240836ff04b1cdf78e23d5a6899b8c0ad59a9561d1230940fc911ee8d247ee9c82bc927b203c0a500aa19577b3ea527586010d0df16f44fc7d26b1d8f655c49e1adc52ea6fdac12fc7299a6d80619193be67cdc0e1832f3ff894960c70c498347d3bac6ca3719f66d2a71"}]}, @NFT_MSG_NEWCHAIN={0xac, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x89, 0xc, "878fc99b692ab19de26291e9f2fa3d550269222db4530d6b781c748ba32181e5feb34af0f3be689725a019465df55427de33170afb44c859c8d1fe25006c486da678859c981cb504cf3795bee9d1a5d9b092ef57a7a7df55d6d7ce67d73fe4b21743a79479064f0bff0d02bca42bcefb44412c0f6c1bab5a72c3a3fccc1301f0eccb5960eb"}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xf3}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "00da"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x274}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x48)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r3}, 0x38)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x64, r5, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8004}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'netpci0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0xc7}, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408048000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c00001f", @ANYRES16=r7, @ANYBLOB="010000000000fcdbdf2524000000180001801400020064756d6d793000"/38], 0x2c}}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000007c0)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6782ddaf27b8eab653d900000000", @ANYRES16=r7, @ANYBLOB="000427bd7000fddbdf25160000000500040000000000050004000000000005000300010000000500040001000000"], 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c00000042000b0026bd70000040000003000000080002"], 0x3c}, 0x1, 0x0, 0x0, 0x24000091}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001000)={0x0, 0xffffffffffffffff, 0x0, 0x10b, &(0x7f0000001280)='cgroup\x00\xcek\x11\xfch\xd2\xb4\x83<\xb5\xad\xc4\xec?:\xe8U*\xaf\x8c~Sx`AF\xa4~/W\a\xaa\xd1\xdf\xc8\xfa\x15f^\x1f5h-\x04\xdb\xee\x8enW\xda\xe4\x1cI%\"`%\xaec\x0f\xb1\x85\xbd\x06\x1d\xce\x92\xa9\xd9\xb7\x04\xdf\xf8`<\x1a|k\x83h\xa3%\x06\xd4F\xd0\xc3\xee\x81d\xb3\x01\xcf\xcb\xe4a/[K=\xb6\x11t\xc4\x87\xd0\xa9\xd3\x1e\v\xec\xba\xee\x8a{\x98\x05\x94\xf5K\x1c\xbdd\x96\xb1dd!\xd2\x18\xd8f\xb1\xdb\x1b\xc2\xeb\xbdu\xe2\xee\x03,L\x94\xc6\xff\xac\x01&\x12b\n\xa0\x8fCW\x10A-\xfa\xd8F\xd6|\x83\xc8\xa2A\xa0\x84+\xf4\xd0\xa8\x10\x97\xb0\x023N\xb3\xa7j\xa7<\xdb$\x98c\x98(\x1a\xb9Q\xd5h\xa3\x1bj\xdb@\xfe\xd6Y4`\xcd\xf4\xea\xcd\xca=F\xaf\x12zVt:\x1c\x18\xab\x17?l\x19\x92bdtP\xe3`YN\xe0\x9a\x8b\xb6Z}\x1d\x92\x86\x81C\x80n\x89\x16\xcd\xaf}\xeb\xd2\xffb1\xe9'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r9, 0x0, 0xf69}, 0x18)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r11, 0x0, 0xf69}, 0x18)
sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)

720.212481ms ago: executing program 2 (id=150):
r0 = socket$alg(0x26, 0x5, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001340), r2)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x800002}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x14, r4, 0x100, 0x70bd26, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r3, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001200), r2)
sendmsg$IEEE802154_START_REQ(r2, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x3c, r6, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x7}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x4}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0xa}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x41)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, 0x3e, 0x107, 0x3, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x8, 0x0, 0x0, @u64=0x1000}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sendmmsg$inet(r1, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010001fff00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8bbfffff420105003b00128009000100626f6e64000000000c00028005001100060000009501869a7c39fc7153125dd57a0eedec3e6dd5288d"], 0x3c}, 0x1, 0x0, 0x0, 0x20048040}, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r8, 0x27, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xfc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)
r9 = accept4$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @initdev}, &(0x7f0000000f80)=0x10, 0x80000)
getsockopt$sock_buf(r9, 0x1, 0x3b, &(0x7f0000000fc0)=""/208, &(0x7f00000010c0)=0xd0)
r10 = accept4(r0, 0x0, 0x0, 0x800)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x29, 0xeb, 0x8, 0x700000, 0x17, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, @private1, 0x40, 0x7800, 0x5, 0x9}})

371.105542ms ago: executing program 0 (id=151):
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x73)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRES32=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r2}, 0x18)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, 0x0, 0x0)
write(r3, &(0x7f0000000140)="41000200010001", 0x7)
setsockopt$sock_attach_bpf(r1, 0x29, 0x21, &(0x7f0000000200), 0x4)
sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x28}, 0x20008000)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
r6 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r6, &(0x7f0000001900)={0x0, 0xffffffea, 0x0}, 0x20040005)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000002c0)={'bond0\x00'})
sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x0, 0x3}, 0x10)
r8 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r8, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x20004000)
socket$tipc(0x1e, 0x2, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0x20000000, 0x3c, 0x3}, 0xb}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xdc}}, 0x20000840)

250.263908ms ago: executing program 0 (id=152):
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000005001000050000000500000001000000", @ANYRES32, @ANYBLOB="000000000000000000000000ebffffff00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680))
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001740)=@newtaction={0x11f4, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x11e0, 0x1, [@m_sample={0x30, 0x20, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}, @m_mirred={0x100, 0x15, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7fff, 0x2257, 0x4, 0xdcd9, 0xffffffb2}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x800, 0x8, 0x8, 0xc44, 0x9}, 0x2}}]}, {0x94, 0x6, "ed037d0d31c84370eaf75d758dca629c67adc66fff6c4ca6792a76989b8a1c7b00c18b7dafaea1c5e9f154a0ab6fbc6ad96ecdf83c5805b9b96702237539768590ddb5482e1b9c61ded8314318c96a923fc11e5e1ee196cdd3d6128bc1d37400243c9920441637c2b5f2fa504d4a3beffacd150661ef6a2af9e1a411100ffd25f3e4bfbecbe4094fa723e203e9fea2d0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_mirred={0x1050, 0x10, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0xb0c5, 0x2, 0x9, 0xd}, 0x1}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0x5c, 0xa, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xdf51}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x6, 0x0, 0x0, 0x1}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6df8dda6}]}, {0x5, 0x6, '['}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x11f4}}, 0x20040000)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000100)=0x4)
syz_80211_inject_frame(0x0, &(0x7f0000000000)=ANY=[], 0xb5)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r1 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x1, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2000, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x5}, 0x10}, 0x94)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000700)={&(0x7f00000003c0)=@ieee802154={0x24, @none={0x0, 0x1}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000440)="48eda5e1eefd2f7787d77a957aa36e5388f869fc8a3dc5f646a4", 0x1a}, {&(0x7f0000000480)="26897d8c47a2b1e835", 0x9}, {&(0x7f00000004c0)="6adc59f0d066756e088878a8dca8596616f9363f1b3a70ab071e6b023f71530056c1eb1da4a1fd39a1fda5b82c9cfb4d47b5128ffd6eab7a491ad56abc5808437a7ad051da9f8536526a1988aea8", 0x4e}, {&(0x7f0000000540)="caadeab9c53e4c64b97dba3044cf8f80c0a0a045aec6078a4498cb2f5369a9df4e330cf3c0ccb1589be96537cffc23b31fe89b467267118bdb9ce86b0b50", 0x3e}, {&(0x7f0000000640)="2a72357eea6c106178a942be3a202441b9c4ba6291e6e494e0206bcdc192ac1883b838e3772ad4e6dbd13531a49bbd1a466ac19dd39f5f6fe87c82ae2d4a0a2db9b1e006cf00dc51379e8ae93135560af471c52f5955de61cbe4b781620cf5e38712bea6412fca5971f89be72a45bb0b2cdbc7d516848eaca6d2cc66cc8e7436967f1dccaccd4d0ea1423c2b327577ba654fcbcd3cc81a688a9e410abe9447afe4c86659457c92c234371c54ddac65674d481e6371c0c270c296", 0xba}], 0x5, &(0x7f0000001300)=ANY=[@ANYBLOB="d00000000000000008010000f200000046763c98da97b3a20def87b853f80e2395321082510fa64a60e043ae6378dd601089592b6f6fe4fd6994ae22bec55db08c041daf37738da0e1a93143f96c129d86824d72a9e48a895d9e917c4950c1bfd15cfc5e4e50dac5cd9f8e8b10e5d0cb2f2c43139d3063ad8888fc84dd42c63e2f2d7fbdb767e2a8404bddcfb92272000ff939e3196b3613266ffb7f51a7556aa585fac2d6bacc9e451dd02605c2f4391aaa156895b27d96eda3b4b78e1dfa31b4c7431c9e845da2c47df4dc86b96200"], 0xd0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000140)=@raw=[@map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb54}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ldst={0x2, 0x1, 0x3, 0x1, 0x2, 0x138, 0x10}], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x4, 0x6, 0x0, 0x80000000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x1, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x4dc2}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000420000003c00128008000100677470003000028008000200", @ANYRES32=r3], 0x5c}, 0x1, 0xba01}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000000000000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007b9f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a2301ff00000000000000000014d6d930dfe1d9c322fe040000007025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0xc0)
close(0x4)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r5, 0x8946, &(0x7f0000000340)={'veth0_to_bond\x00', @ifru_ivalue=0xc})
ioctl$sock_netdev_private(r5, 0x8943, &(0x7f0000000000))

249.070331ms ago: executing program 1 (id=153):
socket$netlink(0x10, 0x3, 0x1)
socket$isdn_base(0x22, 0x3, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000021c0), 0x5b, 0x40, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet6(0xa, 0x5, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'caif0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r2, 0x1, 0x1000, 0x0, {0x2a}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
listen(r1, 0xe9c) (async)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000140), 0x10)
sendmmsg$sock(r4, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="024468f75872dc275c4a865167ce141180f86d6d2d2b667592a3c33936462143e78071d6c161acbb6e42171be6f3bb2c71676866c351e658a3e643566881df0577a462feffaafa974e3e86985e3ae7dbd8b6bc88af3374be083ced9a2b1f3b847103a9ad492dabf2f341cf7c9d27d81972b94be151e7a3c9487c087f8a25", 0x7e}, {&(0x7f0000000340)="da653e6368ca3086947a7cd9f675fec207fa0522eb427678a26306d4d58e3174157055bad9d94baf2b8a476ed0798d84173e4d6a8c03e3ad87f36f69e2d254f2fc17dc5260b177829e93e8de0efe7be1837255949efb5d662b4b", 0x5a}], 0x2}}], 0x1, 0x200000c1) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000180)=@base={0x19, 0x0, 0x7fffffff, 0x2000, 0x440}, 0x50)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async)
sendmmsg(r6, &(0x7f00000007c0)=[{{&(0x7f00000004c0)=@ieee802154={0x24, @long={0x3, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x20}}], 0x1, 0xc0d0) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003200000000000000e000000100"/289], 0x23c}}, 0x0) (async)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000040)={0x3c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60040800}, 0x40000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r8=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x0, 0xc}, {0xfff3}}}, 0x24}}, 0x0)

110.948625ms ago: executing program 2 (id=154):
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000004, 0x3032, 0xffffffffffffffff, 0xffffc000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x480000000102, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x25, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x1}, @jmp={0x5, 0x1, 0xa, 0x7, 0x4, 0x40, 0xffffffffffffffff}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
pwritev(r4, 0x0, 0x0, 0x4000000, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000040)=0x8)
syz_emit_ethernet(0x6a, &(0x7f0000000080)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0x3, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x8}}}}}}}}, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000000c0)={0x1ff, 0x8, 0x2, 0xe, r6}, &(0x7f0000000100)=0x10)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000040010000000000000101410000001c001700060000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@exit, @call={0x85, 0x0, 0x0, 0x92}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x24, 0x0, 0x1, 0x400, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="141026bd7000fcc8df25540000000a00060008021100000000000a0006000802110000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40804)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r11}, 0x10)
r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), r10)
sendmsg$NFC_CMD_DEV_DOWN(r10, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010028bd7000fbdbdf2503000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
writev(r3, &(0x7f0000001880)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000001940)="147c000000000000000066c9824bb25cb9048c6fee30", 0x16}], 0x2)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)

125.7µs ago: executing program 1 (id=155):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x4, 0x0, 0x3}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)='\x00'/10, 0xa}, {&(0x7f0000000d00)="3ed2", 0x2}], 0x2}, 0x24000008)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000feffffff00000000017c0000040042800c00018006000600800a0000100002800c001480080006800400018000"/61], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r2 = accept4$llc(0xffffffffffffffff, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000200)=0x10, 0x800)
recvfrom(r2, &(0x7f0000000240)=""/221, 0xdd, 0x2000, &(0x7f0000000340)=@x25, 0x80)
socket$kcm(0x11, 0x3, 0x0) (async)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) (async)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x4, 0x0, 0x3}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)='\x00'/10, 0xa}, {&(0x7f0000000d00)="3ed2", 0x2}], 0x2}, 0x24000008) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000feffffff00000000017c0000040042800c00018006000600800a0000100002800c001480080006800400018000"/61], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
accept4$llc(0xffffffffffffffff, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000200)=0x10, 0x800) (async)
recvfrom(r2, &(0x7f0000000240)=""/221, 0xdd, 0x2000, &(0x7f0000000340)=@x25, 0x80) (async)

0s ago: executing program 1 (id=156):
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000))
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x6c, r3, 0x1, 0x70bd2a, 0x1, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x108}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44081}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:15252' (ED25519) to the list of known hosts.
syzkaller login: [   41.958442][ T5772] cgroup: Unknown subsys name 'net'
[   42.059919][ T5772] cgroup: Unknown subsys name 'cpuset'
[   42.063504][ T5772] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   43.331050][ T5772] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   47.008294][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   47.012415][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   47.014770][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   47.017843][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   47.020515][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   47.022932][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   47.037716][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   47.041228][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   47.047433][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   47.050620][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   47.053506][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   47.056042][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   47.059378][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   47.068805][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   47.072145][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   47.201672][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   47.287468][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.290198][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.292705][ T5843] bridge_slave_0: entered allmulticast mode
[   47.295518][ T5843] bridge_slave_0: entered promiscuous mode
[   47.301837][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.304285][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.306674][ T5843] bridge_slave_1: entered allmulticast mode
[   47.311557][ T5843] bridge_slave_1: entered promiscuous mode
[   47.322581][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   47.345638][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.362065][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.397144][ T5843] team0: Port device team_slave_0 added
[   47.421477][ T5843] team0: Port device team_slave_1 added
[   47.462061][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.464449][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.466756][ T5847] bridge_slave_0: entered allmulticast mode
[   47.471477][ T5847] bridge_slave_0: entered promiscuous mode
[   47.475556][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.478210][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.486657][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.492115][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.494332][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.502697][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.509724][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.512218][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.514487][ T5847] bridge_slave_1: entered allmulticast mode
[   47.517369][ T5847] bridge_slave_1: entered promiscuous mode
[   47.525123][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   47.566331][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.579663][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.586119][ T5843] hsr_slave_0: entered promiscuous mode
[   47.589540][ T5843] hsr_slave_1: entered promiscuous mode
[   47.637880][ T5847] team0: Port device team_slave_0 added
[   47.658668][ T5847] team0: Port device team_slave_1 added
[   47.696496][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.699025][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.701544][ T5852] bridge_slave_0: entered allmulticast mode
[   47.704489][ T5852] bridge_slave_0: entered promiscuous mode
[   47.708595][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.711250][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.713539][ T5852] bridge_slave_1: entered allmulticast mode
[   47.716300][ T5852] bridge_slave_1: entered promiscuous mode
[   47.722723][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.725093][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.734520][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.749205][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.751987][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.762100][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.791356][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.821322][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.831870][ T5847] hsr_slave_0: entered promiscuous mode
[   47.834112][ T5847] hsr_slave_1: entered promiscuous mode
[   47.836252][ T5847] debugfs: 'hsr0' already exists in 'hsr'
[   47.838880][ T5847] Cannot create hsr debugfs directory
[   47.864041][ T5852] team0: Port device team_slave_0 added
[   47.870906][ T5852] team0: Port device team_slave_1 added
[   47.919044][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.921329][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.929578][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.941787][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.944056][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.952574][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.988570][ T5852] hsr_slave_0: entered promiscuous mode
[   47.990964][ T5852] hsr_slave_1: entered promiscuous mode
[   47.993095][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   47.994883][ T5852] Cannot create hsr debugfs directory
[   48.037705][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   48.055667][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   48.063951][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   48.079649][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   48.131855][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.134255][ T5843] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.137071][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.139432][ T5843] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.143374][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   48.154746][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   48.165603][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   48.171076][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   48.210035][ T1090] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.214551][ T1090] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.273197][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   48.282298][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   48.292861][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   48.299292][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   48.341287][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.373176][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   48.383828][  T152] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.386172][  T152] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.394824][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.400433][  T152] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.403148][  T152] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.432662][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   48.462392][  T152] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.465550][  T152] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.471340][  T152] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.474522][  T152] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.498704][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   48.579435][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.600774][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   48.614707][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.617120][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.644336][ T5852] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   48.647943][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   48.654874][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.658063][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.705346][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.717726][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.774052][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.783947][ T5843] veth0_vlan: entered promiscuous mode
[   48.809280][ T5843] veth1_vlan: entered promiscuous mode
[   48.829445][ T5847] veth0_vlan: entered promiscuous mode
[   48.835810][ T5847] veth1_vlan: entered promiscuous mode
[   48.843884][ T5852] veth0_vlan: entered promiscuous mode
[   48.855098][ T5852] veth1_vlan: entered promiscuous mode
[   48.869916][ T5843] veth0_macvtap: entered promiscuous mode
[   48.886301][ T5852] veth0_macvtap: entered promiscuous mode
[   48.895742][ T5843] veth1_macvtap: entered promiscuous mode
[   48.901015][ T5847] veth0_macvtap: entered promiscuous mode
[   48.912822][ T5852] veth1_macvtap: entered promiscuous mode
[   48.916905][ T5847] veth1_macvtap: entered promiscuous mode
[   48.931284][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.941378][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.945367][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.965779][ T5876] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.970249][ T5876] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.974799][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.981616][ T5876] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.988748][ T5876] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.995415][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.001933][ T5876] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.005973][ T5876] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.016635][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.020396][ T5876] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.023770][ T5876] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.051172][ T5876] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.059632][ T5876] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.070178][ T5876] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.073672][ T5876] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.090546][ T5850] Bluetooth: hci2: command tx timeout
[   49.097540][ T5850] Bluetooth: hci1: command tx timeout
[   49.097611][ T5238] Bluetooth: hci0: command tx timeout
[   49.144962][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.149316][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.168098][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.170784][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.193937][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.198165][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.224484][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.233864][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.235041][  T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.251653][  T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.264063][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   49.290778][  T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.304964][  T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.307698][ T5914] netlink: 'syz.2.3': attribute type 21 has an invalid length.
[   49.310428][ T5914] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3'.
[   49.319184][ T5914] netlink: 'syz.2.3': attribute type 4 has an invalid length.
[   49.324478][ T5914] netlink: 'syz.2.3': attribute type 5 has an invalid length.
[   49.327046][ T5914] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3'.
[   49.330342][ T5915] batman_adv: batadv0: Adding interface: dummy0
[   49.332389][ T5915] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   49.350494][ T5915] batman_adv: batadv0: Interface activated: dummy0
[   49.400373][ T5921] openvswitch: netlink: Key 32 has unexpected len 4 expected 2
[   49.404571][ T5923] veth0_to_bridge: entered promiscuous mode
[   49.412729][  T152] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.442603][ T5925] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5'.
[   49.442628][ T5924] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5'.
[   49.471888][ T5930] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.532312][ T5937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'.
[   49.536191][    C1] vcan0: j1939_session_tx_dat: 0xffff88802fa48000: queue data error: -100
[   49.567562][ T5933] warning: `syz.1.7' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   49.684794][ T5943] syz.2.10 uses obsolete (PF_INET,SOCK_PACKET)
[   49.691143][ T5943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'.
[   49.694261][ T5943] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10'.
[   49.853167][ T5949] Zero length message leads to an empty skb
[   50.444543][ T5975] tipc: Started in network mode
[   50.446462][ T5975] tipc: Node identity ba52c838c255, cluster identity 4711
[   50.454535][ T5975] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   50.631767][ T5975] syzkaller0: entered promiscuous mode
[   50.633715][ T5975] syzkaller0: entered allmulticast mode
[   50.653102][ T5975] tipc: Resetting bearer <eth:syzkaller0>
[   50.663628][ T5974] tipc: Resetting bearer <eth:syzkaller0>
[   50.682365][ T5974] tipc: Disabling bearer <eth:syzkaller0>
[   50.951776][ T5989] netlink: 16 bytes leftover after parsing attributes in process `syz.0.22'.
[   50.999120][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24'.
[   51.055370][ T5999] syzkaller1: entered promiscuous mode
[   51.058423][ T5999] syzkaller1: entered allmulticast mode
[   51.064747][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25'.
[   51.168070][ T5238] Bluetooth: hci1: command tx timeout
[   51.168086][ T5850] Bluetooth: hci2: command tx timeout
[   51.169891][ T5850] Bluetooth: hci0: command tx timeout
[   51.851486][ T6066] syz.0.34 (6066) used greatest stack depth: 20824 bytes left
[   51.999106][ T6080] netlink: del zone limit has 4 unknown bytes
[   52.037115][ T6078] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   52.040726][ T6078] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   52.120785][ T6084] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   52.123608][ T6084] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   52.370093][ T6099] openvswitch: netlink: Flow actions attr not present in new flow.
[   52.620802][ T6106] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   52.672905][ T6114] netlink: 'syz.0.50': attribute type 1 has an invalid length.
[   52.676722][ T6114] netlink: 'syz.0.50': attribute type 3 has an invalid length.
[   52.679728][ T6114] netlink: 'syz.0.50': attribute type 1 has an invalid length.
[   52.682258][ T6114] NCSI netlink: No device for ifindex 0
[   52.722155][ T6107] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[   52.818093][ T6119] netlink: 'syz.0.51': attribute type 6 has an invalid length.
[   52.865265][ T6124] openvswitch: netlink: Key 32 has unexpected len 4 expected 2
[   52.916335][ T6128] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   52.957712][ T6127] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.960818][ T6127] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.972647][ T6127] batman_adv: batadv0: Interface deactivated: dummy0
[   53.032205][ T6133] netlink: 'syz.1.55': attribute type 5 has an invalid length.
[   53.104533][ T6140] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   53.214036][ T6150] openvswitch: netlink: Key 32 has unexpected len 4 expected 2
[   53.247547][ T5850] Bluetooth: hci0: command tx timeout
[   53.262146][ T5850] Bluetooth: hci1: command tx timeout
[   53.262228][ T5845] Bluetooth: hci2: command tx timeout
[   53.341296][ T6162] Set syz0 is full, maxelem 0 reached
[   53.420109][ T6165] syz.0.64 uses old SIOCAX25GETINFO
[   53.424179][ T6165] netlink: 'syz.0.64': attribute type 10 has an invalid length.
[   53.439091][ T6165] veth0_vlan: left promiscuous mode
[   53.441916][ T6165] veth0_vlan: entered promiscuous mode
[   53.446232][ T6165] team0: Device veth0_vlan failed to register rx_handler
[   53.508098][ T6165] syz.0.64 (6165) used greatest stack depth: 19896 bytes left
[   53.580571][ T6175] netlink: 'syz.2.67': attribute type 9 has an invalid length.
[   53.608850][ T6177] openvswitch: netlink: Key 32 has unexpected len 4 expected 2
[   53.772738][ T6194] tc_dump_action: action bad kind
[   54.012632][ T6204] openvswitch: netlink: Key 32 has unexpected len 4 expected 2
[   54.150895][ T6210] batman_adv: batadv0: Adding interface: dummy0
[   54.153158][ T6210] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.163370][ T6210] batman_adv: batadv0: Interface activated: dummy0
[   54.422164][  T792] IPVS: starting estimator thread 0...
[   54.507258][ T6217] IPVS: using max 77 ests per chain, 184800 per kthread
[   54.513388][ T6220] __nla_validate_parse: 56 callbacks suppressed
[   54.513400][ T6220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.84'.
[   54.586143][ T6227] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20002
[   54.605081][ T6194] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   54.798132][ T6237] gtp0: entered promiscuous mode
[   54.810951][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.91'.
[   54.845612][ T6237] syzkaller0: entered promiscuous mode
[   54.849083][ T6237] syzkaller0: entered allmulticast mode
[   55.327427][ T5845] Bluetooth: hci1: command tx timeout
[   55.327606][ T5850] Bluetooth: hci0: command tx timeout
[   55.338626][ T5850] Bluetooth: hci2: command tx timeout
[   55.685458][ T6262] Bluetooth: MGMT ver 1.23
[   55.685459][ T6264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.96'.
[   55.693438][ T6264] netlink: 'syz.1.96': attribute type 1 has an invalid length.
[   55.722462][ T6264] netlink: 20 bytes leftover after parsing attributes in process `syz.1.96'.
[   55.725489][ T6264] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   55.732784][ T6262] syzkaller1: entered promiscuous mode
[   55.734995][ T6262] syzkaller1: entered allmulticast mode
[   55.765431][ T6266] netlink: 216 bytes leftover after parsing attributes in process `syz.1.97'.
[   55.769231][ T6266] netlink: 24 bytes leftover after parsing attributes in process `syz.1.97'.
[   55.773054][ T6266] netlink: 16 bytes leftover after parsing attributes in process `syz.1.97'.
[   55.843964][ T6273] netlink: 'syz.1.99': attribute type 1 has an invalid length.
[   55.870238][ T6276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.100'.
[   55.876331][ T6276] netlink: 32 bytes leftover after parsing attributes in process `syz.0.100'.
[   55.887424][ T6276] netlink: 'syz.0.100': attribute type 1 has an invalid length.
[   55.887963][ T6273] 8021q: adding VLAN 0 to HW filter on device bond1
[   55.914539][ T6280] netlink: 28 bytes leftover after parsing attributes in process `syz.2.102'.
[   55.914656][ T6273] bond1: (slave ip6erspan0): making interface the new active one
[   55.942134][ T6273] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link
[   56.004830][ T6287] netlink: 'syz.2.102': attribute type 13 has an invalid length.
[   56.009173][ T6287] netlink: 'syz.2.102': attribute type 17 has an invalid length.
[   56.039459][ T6287] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   56.045104][ T6288] sctp: [Deprecated]: syz.0.104 (pid 6288) Use of int in maxseg socket option.
[   56.045104][ T6288] Use struct sctp_assoc_value instead
[   56.079593][ T6292] netlink: 'syz.2.106': attribute type 11 has an invalid length.
[   56.133052][ T6299] netlink: 'syz.2.107': attribute type 12 has an invalid length.
[   56.176116][ T6301] tipc: Started in network mode
[   56.179184][ T6301] tipc: Node identity a2ce65dd3e49, cluster identity 4711
[   56.181943][ T6301] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   56.184745][ T6302] syzkaller0: entered promiscuous mode
[   56.186874][ T6302] syzkaller0: entered allmulticast mode
[   56.201834][ T6302] tipc: Resetting bearer <eth:syzkaller0>
[   56.212386][ T6302] tipc: Disabling bearer <eth:syzkaller0>
[   56.341394][ T6308] batman_adv: batadv0: Adding interface: dummy0
[   56.349043][ T6308] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.358968][ T6308] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[   56.523833][ T6319] netlink: 'syz.2.113': attribute type 83 has an invalid length.
[   57.166317][ T6359] syzkaller1: tun_chr_ioctl cmd 1074025684
[   57.168723][ T6359] syzkaller1: tun_chr_ioctl cmd 1074025677
[   57.170833][ T6359] syzkaller1: linktype set to 256
[   57.358655][ T6369] team0: Device gtp0 is of different type
[   57.407437][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout
[   57.674601][ T6389] netlink: 'syz.0.134': attribute type 4 has an invalid length.
[   57.679433][ T6389] netlink: 'syz.0.134': attribute type 4 has an invalid length.
[   57.818429][   T10] cfg80211: failed to load regulatory.db
[   57.985052][ T6405] netlink: 'syz.2.139': attribute type 1 has an invalid length.
[   58.051910][ T6413] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   58.532058][ T6436] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   58.905903][ T6446] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   58.986886][ T6445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   59.041373][ T6455] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   59.542681][ T6462] 
[   59.543528][ T6462] ======================================================
[   59.545711][ T6462] WARNING: possible circular locking dependency detected
[   59.548023][ T6462] 6.16.0-syzkaller-12063-g37816488247d-dirty #0 Not tainted
[   59.551423][ T6462] ------------------------------------------------------
[   59.554191][ T6462] syz.1.156/6462 is trying to acquire lock:
[   59.556508][ T6462] ffff88801b6f0188 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove+0x30/0x60
[   59.559717][ T6462] 
[   59.559717][ T6462] but task is already holding lock:
[   59.562106][ T6462] ffff8881098458f8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10
[   59.565735][ T6462] 
[   59.565735][ T6462] which lock already depends on the new lock.
[   59.565735][ T6462] 
[   59.569414][ T6462] 
[   59.569414][ T6462] the existing dependency chain (in reverse order) is:
[   59.572972][ T6462] 
[   59.572972][ T6462] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[   59.575826][ T6462]        lock_acquire+0x120/0x360
[   59.577572][ T6462]        blk_alloc_queue+0x538/0x620
[   59.579422][ T6462]        __blk_mq_alloc_disk+0x15c/0x340
[   59.581602][ T6462]        nbd_dev_add+0x46c/0xae0
[   59.583270][ T6462]        nbd_init+0x168/0x1f0
[   59.584800][ T6462]        do_one_initcall+0x236/0x820
[   59.586487][ T6462]        do_initcall_level+0x104/0x190
[   59.588242][ T6462]        do_initcalls+0x59/0xa0
[   59.589915][ T6462]        kernel_init_freeable+0x334/0x4b0
[   59.592291][ T6462]        kernel_init+0x1d/0x1d0
[   59.594051][ T6462]        ret_from_fork+0x3fc/0x770
[   59.595754][ T6462]        ret_from_fork_asm+0x1a/0x30
[   59.597527][ T6462] 
[   59.597527][ T6462] -> #1 (fs_reclaim){+.+.}-{0:0}:
[   59.599860][ T6462]        lock_acquire+0x120/0x360
[   59.601554][ T6462]        fs_reclaim_acquire+0x72/0x100
[   59.603315][ T6462]        kmem_cache_alloc_lru_noprof+0x49/0x3d0
[   59.605320][ T6462]        alloc_inode+0xb8/0x1b0
[   59.606902][ T6462]        iget_locked+0xf0/0x570
[   59.608653][ T6462]        kernfs_get_inode+0x4f/0x780
[   59.610537][ T6462]        kernfs_get_tree+0x5a9/0x920
[   59.612797][ T6462]        sysfs_get_tree+0x46/0x110
[   59.614534][ T6462]        vfs_get_tree+0x92/0x2b0
[   59.616203][ T6462]        do_new_mount+0x2a2/0x9e0
[   59.617908][ T6462]        __se_sys_mount+0x317/0x410
[   59.619634][ T6462]        do_syscall_64+0xfa/0x3b0
[   59.621347][ T6462]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.623454][ T6462] 
[   59.623454][ T6462] -> #0 (&root->kernfs_rwsem){++++}-{4:4}:
[   59.626132][ T6462]        validate_chain+0xb9b/0x2140
[   59.627882][ T6462]        __lock_acquire+0xab9/0xd20
[   59.629671][ T6462]        lock_acquire+0x120/0x360
[   59.631678][ T6462]        down_write+0x96/0x1f0
[   59.633589][ T6462]        kernfs_remove+0x30/0x60
[   59.635260][ T6462]        __kobject_del+0xe1/0x300
[   59.636988][ T6462]        kobject_del+0x45/0x60
[   59.638835][ T6462]        elevator_change_done+0xf2/0x470
[   59.641001][ T6462]        elevator_set_none+0x42/0xb0
[   59.643001][ T6462]        blk_mq_update_nr_hw_queues+0x68f/0x1890
[   59.645382][ T6462]        nbd_start_device+0x17f/0xb10
[   59.647437][ T6462]        nbd_genl_connect+0x135b/0x18f0
[   59.649531][ T6462]        genl_family_rcv_msg_doit+0x215/0x300
[   59.651861][ T6462]        genl_rcv_msg+0x60e/0x790
[   59.653757][ T6462]        netlink_rcv_skb+0x208/0x470
[   59.655768][ T6462]        genl_rcv+0x28/0x40
[   59.657510][ T6462]        netlink_unicast+0x82f/0x9e0
[   59.659547][ T6462]        netlink_sendmsg+0x805/0xb30
[   59.661542][ T6462]        __sock_sendmsg+0x21c/0x270
[   59.663522][ T6462]        ____sys_sendmsg+0x505/0x830
[   59.665598][ T6462]        ___sys_sendmsg+0x21f/0x2a0
[   59.667627][ T6462]        __x64_sys_sendmsg+0x19b/0x260
[   59.669725][ T6462]        do_syscall_64+0xfa/0x3b0
[   59.671657][ T6462]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.674092][ T6462] 
[   59.674092][ T6462] other info that might help us debug this:
[   59.674092][ T6462] 
[   59.677912][ T6462] Chain exists of:
[   59.677912][ T6462]   &root->kernfs_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#49
[   59.677912][ T6462] 
[   59.683051][ T6462]  Possible unsafe locking scenario:
[   59.683051][ T6462] 
[   59.685865][ T6462]        CPU0                    CPU1
[   59.687912][ T6462]        ----                    ----
[   59.689935][ T6462]   lock(&q->q_usage_counter(io)#49);
[   59.691976][ T6462]                                lock(fs_reclaim);
[   59.694409][ T6462]                                lock(&q->q_usage_counter(io)#49);
[   59.697464][ T6462]   lock(&root->kernfs_rwsem);
[   59.699338][ T6462] 
[   59.699338][ T6462]  *** DEADLOCK ***
[   59.699338][ T6462] 
[   59.702353][ T6462] 6 locks held by syz.1.156/6462:
[   59.704252][ T6462]  #0: ffffffff8f59a1b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[   59.707238][ T6462]  #1: ffffffff8f599fc8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[   59.710506][ T6462]  #2: ffff88810888f188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa6/0x1890
[   59.714626][ T6462]  #3: ffff88810888f0d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xb9/0x1890
[   59.718534][ T6462]  #4: ffff8881098458f8 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10
[   59.722429][ T6462]  #5: ffff888109845930 (&q->q_usage_counter(queue)){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10
[   59.726330][ T6462] 
[   59.726330][ T6462] stack backtrace:
[   59.728556][ T6462] CPU: 1 UID: 0 PID: 6462 Comm: syz.1.156 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[   59.728569][ T6462] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   59.728575][ T6462] Call Trace:
[   59.728579][ T6462]  <TASK>
[   59.728584][ T6462]  dump_stack_lvl+0x189/0x250
[   59.728598][ T6462]  ? __pfx_dump_stack_lvl+0x10/0x10
[   59.728610][ T6462]  ? __pfx__printk+0x10/0x10
[   59.728625][ T6462]  ? print_lock_name+0xde/0x100
[   59.728638][ T6462]  print_circular_bug+0x2ee/0x310
[   59.728651][ T6462]  check_noncircular+0x134/0x160
[   59.728663][ T6462]  validate_chain+0xb9b/0x2140
[   59.728678][ T6462]  __lock_acquire+0xab9/0xd20
[   59.728694][ T6462]  ? kernfs_remove+0x30/0x60
[   59.728705][ T6462]  lock_acquire+0x120/0x360
[   59.728718][ T6462]  ? kernfs_remove+0x30/0x60
[   59.728730][ T6462]  down_write+0x96/0x1f0
[   59.728743][ T6462]  ? kernfs_remove+0x30/0x60
[   59.728753][ T6462]  ? __pfx_down_write+0x10/0x10
[   59.728770][ T6462]  ? kernfs_root+0x1c/0x230
[   59.728778][ T6462]  ? kernfs_root+0x1c/0x230
[   59.728787][ T6462]  ? kernfs_root+0x1ea/0x230
[   59.728796][ T6462]  kernfs_remove+0x30/0x60
[   59.728807][ T6462]  __kobject_del+0xe1/0x300
[   59.728819][ T6462]  kobject_del+0x45/0x60
[   59.728830][ T6462]  elevator_change_done+0xf2/0x470
[   59.728868][ T6462]  elevator_set_none+0x42/0xb0
[   59.728880][ T6462]  blk_mq_update_nr_hw_queues+0x68f/0x1890
[   59.728897][ T6462]  ? __mutex_unlock_slowpath+0x1a1/0x760
[   59.728910][ T6462]  ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10
[   59.728926][ T6462]  ? sysfs_add_file_mode_ns+0x259/0x300
[   59.728943][ T6462]  nbd_start_device+0x17f/0xb10
[   59.728956][ T6462]  ? device_create_file+0xf4/0x1c0
[   59.728970][ T6462]  nbd_genl_connect+0x135b/0x18f0
[   59.728984][ T6462]  ? __pfx_nbd_genl_connect+0x10/0x10
[   59.728997][ T6462]  ? __nla_parse+0x40/0x60
[   59.729009][ T6462]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[   59.729020][ T6462]  genl_family_rcv_msg_doit+0x215/0x300
[   59.729030][ T6462]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   59.729041][ T6462]  ? stack_trace_save+0x9c/0xe0
[   59.729053][ T6462]  genl_rcv_msg+0x60e/0x790
[   59.729062][ T6462]  ? __pfx_genl_rcv_msg+0x10/0x10
[   59.729069][ T6462]  ? __pfx_nbd_genl_connect+0x10/0x10
[   59.729082][ T6462]  netlink_rcv_skb+0x208/0x470
[   59.729093][ T6462]  ? __lock_acquire+0xab9/0xd20
[   59.729105][ T6462]  ? __pfx_genl_rcv_msg+0x10/0x10
[   59.729113][ T6462]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   59.729127][ T6462]  ? down_read+0x1ad/0x2e0
[   59.729139][ T6462]  genl_rcv+0x28/0x40
[   59.729152][ T6462]  netlink_unicast+0x82f/0x9e0
[   59.729163][ T6462]  ? __pfx_netlink_unicast+0x10/0x10
[   59.729174][ T6462]  ? netlink_sendmsg+0x642/0xb30
[   59.729184][ T6462]  ? skb_put+0x11b/0x210
[   59.729198][ T6462]  netlink_sendmsg+0x805/0xb30
[   59.729211][ T6462]  ? __pfx_netlink_sendmsg+0x10/0x10
[   59.729223][ T6462]  ? aa_sock_msg_perm+0xf1/0x1d0
[   59.729236][ T6462]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   59.729245][ T6462]  ? __pfx_netlink_sendmsg+0x10/0x10
[   59.729256][ T6462]  __sock_sendmsg+0x21c/0x270
[   59.729267][ T6462]  ____sys_sendmsg+0x505/0x830
[   59.729280][ T6462]  ? __pfx_____sys_sendmsg+0x10/0x10
[   59.729295][ T6462]  ? import_iovec+0x74/0xa0
[   59.729303][ T6462]  ___sys_sendmsg+0x21f/0x2a0
[   59.729316][ T6462]  ? __pfx____sys_sendmsg+0x10/0x10
[   59.729335][ T6462]  ? __fget_files+0x2a/0x420
[   59.729348][ T6462]  ? __fget_files+0x3a0/0x420
[   59.729362][ T6462]  __x64_sys_sendmsg+0x19b/0x260
[   59.729375][ T6462]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   59.729390][ T6462]  ? rcu_is_watching+0x15/0xb0
[   59.729399][ T6462]  ? do_syscall_64+0xbe/0x3b0
[   59.729412][ T6462]  do_syscall_64+0xfa/0x3b0
[   59.729422][ T6462]  ? lockdep_hardirqs_on+0x9c/0x150
[   59.729432][ T6462]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.729441][ T6462]  ? exc_page_fault+0x9f/0xf0
[   59.729451][ T6462]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   59.729460][ T6462] RIP: 0033:0x7f012198ebe9
[   59.729470][ T6462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   59.729477][ T6462] RSP: 002b:00007f011fbf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   59.729487][ T6462] RAX: ffffffffffffffda RBX: 00007f0121bb6090 RCX: 00007f012198ebe9
[   59.729494][ T6462] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 0000000000000006
[   59.729500][ T6462] RBP: 00007f0121a11e19 R08: 0000000000000000 R09: 0000000000000000
[   59.729505][ T6462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   59.729511][ T6462] R13: 00007f0121bb6128 R14: 00007f0121bb6090 R15: 00007ffc73a76db8
[   59.729521][ T6462]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   60.164192][ T6464] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[   60.362067][ T5857] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.440442][ T5857] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.500098][ T5857] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.562240][ T5857] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.647736][ T5857] bridge_slave_1: left allmulticast mode
[   60.651272][ T5857] bridge_slave_1: left promiscuous mode
[   60.653533][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.657805][ T5857] bridge_slave_0: left allmulticast mode
[   60.659988][ T5857] bridge_slave_0: left promiscuous mode
[   60.662207][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.854671][ T5857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   60.859417][ T5857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   60.863709][ T5857] bond0 (unregistering): (slave wlan1): Releasing backup interface
[   60.870271][ T5857] bond0 (unregistering): Released all slaves
[   60.876196][ T5857] bond1 (unregistering): Released all slaves
[   60.930420][ T5857] tipc: Left network mode
[   61.131720][ T5857] hsr_slave_0: left promiscuous mode
[   61.134581][ T5857] hsr_slave_1: left promiscuous mode
[   61.137452][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.140573][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_0
[   61.144181][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.150439][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_1
[   61.153080][ T5857] batman_adv: batadv0: Removing interface: dummy0
[   61.156129][ T5857] veth1_macvtap: left promiscuous mode
[   61.158115][ T5857] veth0_macvtap: left promiscuous mode
[   61.159980][ T5857] veth1_vlan: left promiscuous mode
[   61.270474][ T5857] team0 (unregistering): Port device team_slave_1 removed
[   61.285303][ T5857] team0 (unregistering): Port device team_slave_0 removed
[   61.644433][ T5857] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.682108][ T5857] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.720037][ T5857] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.752011][ T5857] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.819764][ T5857] bridge_slave_1: left allmulticast mode
[   61.822197][ T5857] bridge_slave_1: left promiscuous mode
[   61.824678][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.831441][ T5857] bridge_slave_0: left allmulticast mode
[   61.833858][ T5857] bridge_slave_0: left promiscuous mode
[   61.838158][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.013311][ T5857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   62.018299][ T5857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   62.022191][ T5857] bond0 (unregistering): Released all slaves
[   62.073385][ T5857] tipc: Left network mode
[   62.191780][ T5857] hsr_slave_0: left promiscuous mode
[   62.196710][ T5857] hsr_slave_1: left promiscuous mode
[   62.200829][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.203540][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_0
[   62.206739][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   62.212967][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_1
[   62.216071][ T5857] batman_adv: batadv0: Removing interface: dummy0
[   62.220633][ T5857] veth1_macvtap: left promiscuous mode
[   62.222829][ T5857] veth0_macvtap: left promiscuous mode
[   62.226798][ T5857] veth1_vlan: left promiscuous mode
[   62.229241][ T5857] veth0_vlan: left promiscuous mode
[   62.346514][ T5857] team0 (unregistering): Port device team_slave_1 removed
[   62.361347][ T5857] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
05:56:02  Registers:
info registers vcpu 0

CPU#0
RAX=32add855a9f3a200 RBX=ffffffff81968308 RCX=32add855a9f3a200 RDX=0000000000000001
RSI=ffffffff8be32660 RDI=ffffffff81968308 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa34930 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b78b3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f59f0436fc8 CR3=000000002777a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f59ef612e53
XMM06=0000000000000000 00007f59ef612e4d XMM07=0000000000000000 00007f59ef612e61
XMM08=0000000000000000 00007f59ef612ee7 XMM09=0000000000000000 00007f59ef612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000072dc RDI=00000000000072dd RBP=00000000000003f8 RSP=ffffc9000682e490
R8 =ffff88801f738237 R9 =1ffff11003ee7046 R10=dffffc0000000000 R11=ffffffff854e71d0
R12=dffffc0000000000 R13=ffffffff99af48f2 R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e724c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f011fbf66c0 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f59ef7b7dac CR3=0000000031d90000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f0121b87498 00007f0121b87470 XMM03=00007f0121b874a8 00007f0121b874a0
XMM04=00007f01226ed100 00007f0121b87460 XMM05=00007f0121b87478 00007f0121b874c0
XMM06=00007f0121b874b8 00007f0121b874b0 XMM07=00007f0121b874a8 00007f0121b874a0
XMM08=0000000000000000 00007f0121a12ee7 XMM09=0000000000000000 00007f0121a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
