last executing test programs:

862.400186ms ago: executing program 0 (id=235):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x5, 0x800, 0x3, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0x8, 0xc, 0x1, 0x51, @mcast1, @loopback={0x300, 0x460c6}, 0x8000, 0x700, 0x5, 0x4}})
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000003c0)={<r4=>0x0, 0xd8, "e6d708f385bcff49df02f31b5e30dca7a72b3794d816720de5d689d8ba15f7acd604d0846139fd2e04f294d1dff388e193f4281ed3dd9e916ea417f9d841d29f4a2f61323aef5344091349ec32bbe7678653bb3dc81f3a7482ae827323ab9f040c804b28b9cbe835ed82ff0cf2923ee464c7a389a64226f411fb8f7f230c1d522a5b7a5e5a8f4614d9b6ed1eda4a3cbabf768e2599aaaa66950977735ec6345d9df8932be01027cb33e635f68bf449c7e1c3b70944787f981a4052c4b3ceeee22bf89964f8e0ce94b8f0ffa58305f9107b0046406d82f499"}, &(0x7f0000000240)=0xe0)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000002c0)={r4, 0xfffd}, 0x8)
r5 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x100000000000009, 0x7})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000300)={<r6=>r1, 0x7, 0xfffffffffffffffe, 0x1})
accept4$nfc_llcp(r6, &(0x7f00000000c0), &(0x7f00000001c0)=0x60, 0x180000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a0b040000000080000000020000040900020073797a30000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x60}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0)

812.473543ms ago: executing program 0 (id=236):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0xe)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r1, 0xffff, 0x5}, &(0x7f0000000140)=0x8)

807.921597ms ago: executing program 0 (id=237):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090500000000fddbdf25020000cb", @ANYRES32=r2, @ANYBLOB="08000400ac1414230800080011030000080001006401010008000200ffffffff080002007f00000108000900ff"], 0x48}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r3)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0)

807.83257ms ago: executing program 0 (id=238):
r0 = socket$inet(0xa, 0x801, 0x84)
listen(r0, 0x5)
listen(0xffffffffffffffff, 0xfffffffd)
r1 = socket$inet(0xa, 0x801, 0x84)
listen(r1, 0x8)
listen(0xffffffffffffffff, 0x0)
r2 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r2, &(0x7f0000000140)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)

740.477648ms ago: executing program 0 (id=239):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x11, &(0x7f00000001c0)=ANY=[@ANYBLOB="188500000000000000020000000000801863000000000000000000000900000099b300011000000018100000", @ANYRES32=0x1, @ANYBLOB="0000000000000000950000000000000018110000", @ANYRES32=0x1, @ANYBLOB="000000001d000000b702000008000000850000008600000018110000", @ANYRES32, @ANYBLOB="000000000000000018240000", @ANYRES32, @ANYBLOB="00000000820200009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, 0x24}, 0x94)

739.777477ms ago: executing program 0 (id=241):
socket$netlink(0x10, 0x3, 0x9)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x2}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94)
ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000))
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b405000000000000711038000000000006000000000000009500000000000000c5c6542c5aa06e6530890b00554a42a6c72680203a0ea474f1f81c404b54f855"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000103ff", @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c00028014000500"/51], 0x60}}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r7, @ANYBLOB="08002700851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x4000804)
connect$rose(r4, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40)

682.375418ms ago: executing program 2 (id=242):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r0, 0x8000000000000000, 0x3, 0x100000})
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)='vxcan1\x00')
sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d009539b7f360604dc0df250510000008000a"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000086)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_mreqsrc(r2, 0x0, 0x25, &(0x7f0000000140)={@local, @empty, @private}, &(0x7f0000000040)=0xc) (async)
sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="f6f746fe61e0daa50576e1888465c9d6140000000002010800000000000000000a000000"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
r3 = socket(0x840000000002, 0x3, 0xff) (async)
r4 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r4, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x2, 0x1}}, 0x10)
r5 = socket$inet6(0xa, 0x80002, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB="080004000001"], 0x4c}}, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)
socket$xdp(0x2c, 0x3, 0x0) (async)
setsockopt$inet6_int(r5, 0x29, 0x11, &(0x7f0000000040)=0xaf1d, 0x4) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff}) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) (async)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001200)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="05"], 0x10) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), &(0x7f0000000700)=r8}, 0x20) (async)
sendmmsg$inet(r3, &(0x7f0000000140), 0x1e, 0x40040085)

449.217594ms ago: executing program 2 (id=243):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4)

448.980262ms ago: executing program 2 (id=244):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0xe)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r1, 0xffff, 0x5}, &(0x7f0000000140)=0x8)

380.36975ms ago: executing program 2 (id=245):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan1\x00', <r3=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0xef, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x48080)

320.946826ms ago: executing program 2 (id=247):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164aa93cc5800075557165397000a63f6b9b3f427f6ba6b34f98125f30e697fffffffffffffffa30b273683626e0003254d570dca6b78ad833488cfe4109eaf009edd3e69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c759da324a39f7f51b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6ff000000000000006ffbfe5ca32142b0195531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257b84000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c5341877386ec55d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73adb6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6542e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2635c7bfbf5c0d586cda5e1e88a4d41dee7cc74f822278d124638fec58faeb48afe324369cc51204158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a635edb2dd163e863315e84498dfb52b7f54da6398cbedaa42cc17c4563c859656a357770289a61faa95a82bf1cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b9f4bddd5e328661f4046e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4db2b870000000000000000000000000000000000000000009b777883a0f9cf4ad155110cd3ace2b322ac31bfa27847dc99c8a69a1ea5b98e525e6393ad7fd9795170e7b11e4fa990b9386910a6a1a66a70eaff01247603c2ff49d3979676bffb3049166ab84a0f061991bd57c2566c10c282352a5105b6164e3f2491e4793e590dcc71de10da96fdff40dd44a2c9882d3aa0f8a797b8fea6efcfb5046b7679f15559cdaa977504c40b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60400fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e3af923e8738d93d583a9cf00b946960fc38cf85aae7cf708f9a9d166f2e352a06d99b8be476d1cc2a53a859ae4fdab2a987925d12422474ac044ffe9fe2bf9bf9bbdf36c4ca89c516647542ac45545337829fa7039d155ebda42d4c14f4ca7f8b5d5842658c62d0a03092b94fa1b19f190000000000000000000000000000009e75a32b9fafeffd890f2759b0fe3add33fa43a4c3995458f86a926ad56b23571c46728c039cd3b4bb7d69dfa27782b953a7b81cc161912b3e5716360686e126311a7e21bfa2efd0f57b90c203528c8f620d3c7b31c7abcffae382f53500f7cd5d00159e5f741d3e2d2cbd1a04b3f39b50a4683daa7d117b7f4a149c954d69d8ab001339e464c8eb5f0c63899010757c9a3b69f4920531b83f71d5a34ef9405819afee15b77c015ea755c95127ff2274bb9a8463ce4b8c08ad70596ad2b2b044e660ed144b9dce372450ea69d25da2b6deed67fac26e765aa7d5532ba1044f62db049486acde2294127cb767c23da7d8f9844d3be5b6aa83ee4ce1876af5130efe1b64ccb6bbd349bcc0e8deec8ab3bd1b35bbc8ab8a152771744baa576b9223d26b5603a7f091be1264cabaf661fe2dbe7990a61f710f923f2337818a3983d06c11a6bee7fccb78a53c56db5c18f920d2194374db665dcadf53b8d0014e682ec721d67a7ab6c817fe53c86f8900000000000000000000000000000060b7b827c56e973a2ab5bc5c558ada68c4ec3762f5957b20b919af5d53c87de056a397bdcb614c34761e2c815698e1f9f5521a385c2910850929040a4eba573e91ca21fc855358120ecd79a5d7007693ef3ff9d2b993d114443d53c53094e516f675b2a7074584714e7a2015e05e507811b4ca89c39281c9ada5f58ceb55893cca783ab09c9a19836a3a2c715b10436a5731549e364679ecd8461a68433ab52b1108831edb9654dc602183c1170d6881647f6dca15d57fb76357d815c5f1000000000000000000f49e327c0b6e511494466cec78650f0a6267"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x803, 0x6)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0})
sendmmsg$inet(r1, &(0x7f0000003dc0)=[{{0x0, 0xb6c3, &(0x7f0000000300)=[{&(0x7f0000000680)="ff0ee53409d3c8b8", 0x8}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000002a40)=[{&(0x7f0000000bc0)="d365e35d", 0x4}, {0x0}], 0x2}}], 0x2, 0x2000000)

320.676087ms ago: executing program 2 (id=248):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x20000003}}, 0x2e)
socket$packet(0x11, 0x3, 0x300)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', <r3=>0x0, 0x40, 0x7800, 0x9, 0x40, {{0x16, 0x4, 0x1, 0x9, 0x58, 0x67, 0x0, 0x80, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x33, 0x3, [{0x2, 0x2}, {0x0, 0x9, "86194dbec711af"}, {0x0, 0xb, "bb6e03b40dff07425c"}, {0x1, 0xc, "41129e13174384eb348c"}, {0x0, 0x9, "d594ba79b8e13e"}, {0x2, 0x2}]}, @timestamp={0x44, 0x10, 0xfa, 0x0, 0x7, [0xffff2207, 0x6, 0x2]}]}}}}})
bind$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x11, r3, 0x1, 0x88}, 0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r6, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4000000000000007910480000000000710000000000000095007400000000000389c0dc1b1e8fcc938d01cf519bb9961bd83651f709c94ff5ae1b8970b266a297034656858dc13d3dc6e7203903445d797181deb467614fe3"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37)
recvmmsg(r6, &(0x7f00000002c0), 0x220, 0x100, 0x0)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f00000008c0)=0x2, 0x4)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x41, 0x0, 0x10820, 0x400}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}]}, 0x34}}, 0x4084)
r8 = socket(0x2a, 0x2, 0x0)
bind$netlink(r8, &(0x7f0000000540)={0x10, 0x0, 0x25dfdbfd, 0x24000100}, 0xc)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg0\x00', <r9=>0x0})
setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000180)={r9, 0x1, 0x6}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7ab684a40000", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4)

261.972267ms ago: executing program 1 (id=249):
r0 = socket(0x10, 0x3, 0xc)
write(r0, &(0x7f0000000040)="effd00201000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00)

202.597651ms ago: executing program 1 (id=250):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000c000780080012400006000014000300686173683a69702c706f72742c697000050005000a00000005000400000000000900020073797a3100000000050001"], 0x58}}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0207040b0200000006bd7000fcdbdf25"], 0x10}}, 0x80)
sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000300)=@int=0x615a, 0x4)

201.850758ms ago: executing program 1 (id=251):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='bridge0\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000700)={'bond0\x00', 0x2000})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bond0\x00', 0x1})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={<r1=>r0, 0x4, 0x6, 0x1})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c)
connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0)
splice(r5, 0x0, r4, 0x0, 0x7ffff000, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x27, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_val={0x18, 0xb, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @generic={0x5, 0xc, 0xa, 0x3, 0x4}, @jmp={0x5, 0x0, 0x4, 0x9, 0x4, 0x8, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94)

151.968826ms ago: executing program 1 (id=252):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x280a01, 0x0)
ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000080))
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x25}}}]}, 0x38}}, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000060c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006140)=@delchain={0x2c, 0x65, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0xb, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
r10 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="a00000001a006d8700000000000000001c000000000000000000000084001e"], 0xa0}}, 0x0)
sendmsg$key(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2, 0x7, 0xf, 0x9, 0x48, 0x0, 0x70bd2d, 0x25dfdbfb, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e22}, @sadb_key={0x10, 0x9, 0x390, 0x0, "0096eacf5fc8a5b83394cbd16098708df5b4a662e248cedf64d5c55f0a407dde26f5ba72f616fcee0f809fb62391bbefeb1e80447663b2361f7a1e1e0633b186af24fdc025a0a60884e6e36aab8844e40a6736e2bd1d3b3b50c6be9b491f5c9a734dd091244e349f9092fece6bd86cfa151d"}, @sadb_key={0xe, 0x9, 0x318, 0x0, "09b450df53d1783b1ff1d0f12b734e05edb28a398a341777473121268e38dfa99ffd4c5a9b880a6c80433c864166a38377c388df169816082ece83709c349ce33195eb2dbbaba0dcc330495dead5427eb59756059c393970ba893c4fcfec2d0c355b21"}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e22, @multicast1}}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd2a, 0x3501}, @sadb_sa={0x2, 0x1, 0x4d4, 0xf9, 0x4, 0x11, 0x0, 0x80000000}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d2}, @sadb_key={0x14, 0x9, 0x4b0, 0x0, "6079a17ea6cab355f8bbc3c327ab6b88d69bf6cc4e28306cb725555985d3fb0ebd96277f7ab33266bcd246be1ee67dcefc53a64ee922b2a34007f0bd966f61d8701aca4121100c613d912ec4a57830c8da819b01b4dc66d1ff91498fcf2cd21b95484e034f53d6e85434b7618d69992b5850298e8c1f633799bc71c485148b3e37705d1b09a78f2a953801e9443a4bfa00510fda23ee"}, @sadb_x_policy={0x8, 0x12, 0x2, 0xe14730ee697d888, 0x0, 0x6e6bbc, 0xa0, {0x6, 0xff, 0x7, 0x75, 0x0, 0x3, 0x0, @in=@multicast1, @in=@private=0xa010101}}]}, 0x240}}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', <r11=>0x0})
r12 = socket$netlink(0x10, 0x3, 0x8)
sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000b0000000000060002404e22000008000500", @ANYRES32=r11], 0x4c}}, 0x20000004)

367.628µs ago: executing program 1 (id=253):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002301000034020000020000000800010086ecbbac8251b293c302f56812c91c77af707b0c88de7ad72c92654b6b1adc5743e90d38f8dd54958b00958b7d09805c22c7d479f70d3ed2a7aeaf30777170", @ANYRES32, @ANYBLOB], 0x1c}}, 0x0)

0s ago: executing program 1 (id=254):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="44000000100003050000000089b6005a72a9e2e80000000004", @ANYRES32=0x0, @ANYBLOB="15010000000000002400128009000100626f6e64000000001400028005000e000200000008000f003e0b0000"], 0x44}}, 0x0)
r1 = socket(0x1e, 0x80000, 0x7)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x26e1, 0x0)
close(r3)
getpid()
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0)
r5 = socket$netlink(0x10, 0x3, 0x9)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000020000014001a80100004800c000ac0"], 0x34}}, 0x60040050)
r8 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001400)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r9, {0x4, 0x4}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0xe}}, @TCA_FW_MASK={0x8, 0x5, 0x4}]}}]}, 0x40}}, 0x24044010)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001200), r10)
r12 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt(r0, 0x7, 0x3, &(0x7f0000002f40)=""/175, &(0x7f0000003000)=0xaf)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000140)={'macsec0\x00', <r13=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r14 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r14, &(0x7f0000000380)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x50}}, 0x200c00ca)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r10, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001280)=ANY=[@ANYBLOB='<d', @ANYRES16=r11, @ANYBLOB="010028bd7000ffdbdf25150000000c00018008000100", @ANYRES32=r13, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20000040)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl2\x00', <r15=>0x0, 0x4, 0xa, 0x8, 0x1ff, 0x20, @mcast1, @remote, 0x8000, 0x10, 0x2, 0x800}})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002480))
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000028c0)={'tunl0\x00', &(0x7f00000024c0)={'sit0\x00', <r16=>0x0, 0x0, 0x7, 0xfffffcc9, 0x10, {{0x12, 0x4, 0x3, 0x15, 0x48, 0x66, 0x0, 0x4, 0x2f, 0x0, @rand_addr=0x64010102, @empty, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x1f, 0x4d, [@multicast2, @private=0xa010101, @empty, @rand_addr=0x64010100, @broadcast, @local, @multicast1]}, @timestamp={0x44, 0x10, 0x2a, 0x0, 0x7, [0xd11, 0x0, 0x1]}]}}}}})
sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000002f00)={&(0x7f0000000200), 0xc, &(0x7f0000002ec0)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r4, @ANYBLOB="000229bd7000fedbdf251000000008000700660b0000080009000200000008000800020000005000018008000100", @ANYRES32=r7, @ANYBLOB="1400020073797a5f74756e00000000000000000014000200626174616476300000000000000000001400020074756e6c30000000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="08000800010000000800080004000000080007000700000048000180080003000200000008000100", @ANYRES32=r13, @ANYBLOB="080003000300000008000100", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="140002006d61637365633000000000000000000008000700070000000800096b07000000"], 0xec}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @broadcast})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:17351' (ED25519) to the list of known hosts.
syzkaller login: [   40.722924][ T5760] cgroup: Unknown subsys name 'net'
[   40.829697][ T5760] cgroup: Unknown subsys name 'cpuset'
[   40.833186][ T5760] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.082499][ T5760] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.214352][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.217339][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.220124][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.222685][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.225659][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.228201][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.238329][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.244557][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.248534][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.251332][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.269083][ T5218] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.271802][ T5218] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.274346][ T5218] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.277835][ T5218] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.280402][ T5218] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.402718][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   45.510342][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.513209][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.516596][ T5830] bridge_slave_0: entered allmulticast mode
[   45.519310][ T5830] bridge_slave_0: entered promiscuous mode
[   45.525786][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   45.530862][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.533414][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.536590][ T5830] bridge_slave_1: entered allmulticast mode
[   45.539826][ T5830] bridge_slave_1: entered promiscuous mode
[   45.568766][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   45.576673][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.593932][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.647920][ T5830] team0: Port device team_slave_0 added
[   45.650180][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.652496][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.654764][ T5826] bridge_slave_0: entered allmulticast mode
[   45.658143][ T5826] bridge_slave_0: entered promiscuous mode
[   45.665297][ T5830] team0: Port device team_slave_1 added
[   45.667420][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.669750][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.672054][ T5826] bridge_slave_1: entered allmulticast mode
[   45.674746][ T5826] bridge_slave_1: entered promiscuous mode
[   45.715481][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.717684][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.726088][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.731565][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.742252][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.744552][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.752847][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.760804][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.763777][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.766347][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.768664][ T5836] bridge_slave_0: entered allmulticast mode
[   45.771408][ T5836] bridge_slave_0: entered promiscuous mode
[   45.775552][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.777832][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.780193][ T5836] bridge_slave_1: entered allmulticast mode
[   45.783504][ T5836] bridge_slave_1: entered promiscuous mode
[   45.809277][ T5826] team0: Port device team_slave_0 added
[   45.819860][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.824399][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.835825][ T5826] team0: Port device team_slave_1 added
[   45.873023][ T5830] hsr_slave_0: entered promiscuous mode
[   45.875505][ T5830] hsr_slave_1: entered promiscuous mode
[   45.878208][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.880349][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.888841][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.893969][ T5836] team0: Port device team_slave_0 added
[   45.903785][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.906230][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.914268][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.920738][ T5836] team0: Port device team_slave_1 added
[   45.957737][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   45.959969][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.968486][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   45.973025][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.975807][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.984250][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.038795][ T5826] hsr_slave_0: entered promiscuous mode
[   46.041155][ T5826] hsr_slave_1: entered promiscuous mode
[   46.043392][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.046728][ T5826] Cannot create hsr debugfs directory
[   46.060751][ T5836] hsr_slave_0: entered promiscuous mode
[   46.063114][ T5836] hsr_slave_1: entered promiscuous mode
[   46.065440][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.067848][ T5836] Cannot create hsr debugfs directory
[   46.170302][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.189356][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.205979][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.211440][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.254336][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.259617][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.265164][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.270834][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.287488][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.289840][ T5830] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.292391][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.294672][ T5830] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.321807][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.331268][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.338194][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.340492][ T5836] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.342860][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.345198][ T5836] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.349625][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.353693][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.396067][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.398456][ T5826] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.400892][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.403255][ T5826] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.412450][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.427047][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.432307][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.436877][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.442197][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.445789][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.449286][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.452571][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.465612][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   46.472060][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.474392][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.486921][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   46.493956][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.496346][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.500485][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.502745][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.515869][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.518183][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.558425][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.578311][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   46.608204][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.610672][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.617540][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.619890][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.659089][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.686624][ T5836] veth0_vlan: entered promiscuous mode
[   46.691787][ T5836] veth1_vlan: entered promiscuous mode
[   46.718951][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.723740][ T5836] veth0_macvtap: entered promiscuous mode
[   46.737928][ T5836] veth1_macvtap: entered promiscuous mode
[   46.747742][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.754232][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.758528][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.761410][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.764234][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.768209][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.800706][ T5830] veth0_vlan: entered promiscuous mode
[   46.804692][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.818169][ T5830] veth1_vlan: entered promiscuous mode
[   46.850164][ T5830] veth0_macvtap: entered promiscuous mode
[   46.857039][ T5830] veth1_macvtap: entered promiscuous mode
[   46.867746][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.870418][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.878085][ T5826] veth0_vlan: entered promiscuous mode
[   46.888109][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.899111][ T5826] veth1_vlan: entered promiscuous mode
[   46.903199][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.906624][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.906926][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.916526][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.919351][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.922193][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.925472][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.942139][ T5826] veth0_macvtap: entered promiscuous mode
[   46.947748][ T5826] veth1_macvtap: entered promiscuous mode
[   46.959538][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   46.975994][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.989551][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.014179][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.018125][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.021262][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.024149][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.030632][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.035948][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.051296][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.058359][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.113730][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.119893][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.147199][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.149873][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.151251][ T5898] netlink: 'syz.0.1': attribute type 1 has an invalid length.
[   47.180150][ T5901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5'.
[   47.219435][ T5904] Zero length message leads to an empty skb
[   47.232392][ T5904] veth0_to_team: entered promiscuous mode
[   47.234351][ T5904] veth0_to_team: entered allmulticast mode
[   47.305946][ T5218] Bluetooth: hci1: command tx timeout
[   47.307883][ T5218] Bluetooth: hci2: command tx timeout
[   47.322162][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'.
[   47.540537][ T5932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13'.
[   47.549269][ T5932] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[   48.071186][ T5909] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   48.103999][ T5939] netlink: 'syz.2.14': attribute type 1 has an invalid length.
[   48.321026][ T5953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20'.
[   48.407168][ T5961] netlink: 'syz.0.23': attribute type 5 has an invalid length.
[   48.418699][ T5961] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.23'.
[   48.433157][ T5961] bridge0: port 3(vlan2) entered blocking state
[   48.435989][ T5961] bridge0: port 3(vlan2) entered disabled state
[   48.438783][ T5961] vlan2: entered allmulticast mode
[   48.440964][ T5961] bond0: entered allmulticast mode
[   48.443333][ T5961] bond_slave_0: entered allmulticast mode
[   48.455424][ T5961] bond_slave_1: entered allmulticast mode
[   48.459702][ T5961] vlan2: entered promiscuous mode
[   48.461776][ T5961] bond0: entered promiscuous mode
[   48.463412][ T5961] bond_slave_0: entered promiscuous mode
[   48.468131][ T5961] bond_slave_1: entered promiscuous mode
[   48.510014][ T5970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28'.
[   48.560738][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29'.
[   48.629229][ T5978] netlink: 'syz.0.33': attribute type 1 has an invalid length.
[   48.856598][ T6005] netlink: 'syz.0.41': attribute type 1 has an invalid length.
[   48.859552][ T6005] netlink: 'syz.0.41': attribute type 1 has an invalid length.
[   48.888633][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41'.
[   48.891559][ T6005] netlink: 20 bytes leftover after parsing attributes in process `syz.0.41'.
[   49.181147][ T6025] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.49'.
[   49.385805][ T5831] Bluetooth: hci2: command tx timeout
[   49.385836][ T5218] Bluetooth: hci1: command tx timeout
[   50.228584][ T6055] netlink: 'syz.2.57': attribute type 1 has an invalid length.
[   50.332351][ T6063] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   50.373716][ T6068] netlink: 'syz.2.62': attribute type 1 has an invalid length.
[   50.377582][ T6068] netlink: 'syz.2.62': attribute type 10 has an invalid length.
[   50.378078][ T6072] netlink: 'syz.0.63': attribute type 1 has an invalid length.
[   50.600010][ T6100] warning: `syz.2.70' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   50.649344][ T6100] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.652186][ T6100] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.694219][ T6100] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   50.702696][ T6100] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   50.739083][ T6100] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   50.742050][ T6100] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   50.744866][ T6100] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   50.749078][ T6100] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   50.796586][ T6109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   50.920872][ T6116] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   51.465177][ T5218] Bluetooth: hci2: command tx timeout
[   51.475133][ T5218] Bluetooth: hci1: command tx timeout
[   51.533364][ T6139] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   52.037457][ T6185] openvswitch: netlink: Unknown VXLAN extension attribute 0
[   52.112169][ T6192] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[   52.149599][ T6196] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   52.214260][ T6209] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   52.306547][ T6215] __nla_validate_parse: 10 callbacks suppressed
[   52.306558][ T6215] netlink: 32 bytes leftover after parsing attributes in process `syz.1.107'.
[   52.354544][ T6225] trusted_key: syz.1.110 sent an empty control message without MSG_MORE.
[   52.395614][ T6223] netlink: zone id is out of range
[   52.398288][ T6223] netlink: zone id is out of range
[   52.400020][ T6223] netlink: zone id is out of range
[   52.411022][ T6223] netlink: zone id is out of range
[   52.412801][ T6223] netlink: zone id is out of range
[   52.452430][ T6223] netlink: set zone limit has 4 unknown bytes
[   52.471998][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.109'.
[   52.500270][ T6238] xt_hashlimit: size too large, truncated to 1048576
[   52.684421][ T6250] netlink: 248 bytes leftover after parsing attributes in process `syz.1.120'.
[   52.736985][ T6254] netlink: 28 bytes leftover after parsing attributes in process `syz.2.122'.
[   52.809291][ T6261] netlink: 16 bytes leftover after parsing attributes in process `syz.2.122'.
[   53.151698][ T6293] validate_nla: 4 callbacks suppressed
[   53.151708][ T6293] netlink: 'syz.1.130': attribute type 30 has an invalid length.
[   53.157543][ T6293] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[   53.160569][ T6293] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[   53.192538][ T6295] netlink: 'syz.1.131': attribute type 1 has an invalid length.
[   53.216928][ T6297] netlink: 256 bytes leftover after parsing attributes in process `syz.1.132'.
[   53.389743][ T6311] netlink: 52 bytes leftover after parsing attributes in process `syz.1.138'.
[   53.545251][ T5831] Bluetooth: hci1: command tx timeout
[   53.545432][   T54] Bluetooth: hci2: command tx timeout
[   53.576841][ T6335] netlink: 16 bytes leftover after parsing attributes in process `syz.0.145'.
[   53.690648][ T6355] netlink: 184 bytes leftover after parsing attributes in process `syz.0.149'.
[   53.869984][ T6370] syz.2.153 uses obsolete (PF_INET,SOCK_PACKET)
[   53.950288][ T6386] Bluetooth: MGMT ver 1.23
[   54.011853][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.157'.
[   54.084698][ T6391] af_packet: tpacket_rcv: packet too big, clamped from 584 to 4294967272. macoff=96
[   54.280556][ T6429] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   54.309721][ T6429] netlink: 'syz.2.166': attribute type 15 has an invalid length.
[   54.407998][ T6441] dvmrp0: entered allmulticast mode
[   54.871282][ T6486] netlink: 'syz.0.189': attribute type 8 has an invalid length.
[   55.107375][ T6503] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.110335][ T6503] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.115352][ T6503] netlink: 'syz.0.197': attribute type 8 has an invalid length.
[   55.573896][ T6539] syzkaller1: entered promiscuous mode
[   55.577172][ T6539] syzkaller1: entered allmulticast mode
[   55.626429][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[   55.885540][ T6559] netlink: 'syz.1.221': attribute type 4 has an invalid length.
[   55.971602][ T6563] netlink: 'syz.1.223': attribute type 21 has an invalid length.
[   56.022649][ T6569] netlink: 'syz.1.225': attribute type 10 has an invalid length.
[   56.036554][ T6569] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.039963][ T6569] team0: Port device bond0 added
[   56.324083][ T6589] pim6reg1: entered promiscuous mode
[   56.327557][ T6589] pim6reg1: entered allmulticast mode
[   56.480150][ T6595] netlink: 'syz.0.235': attribute type 30 has an invalid length.
[   57.014578][ T6639] pim6reg: entered allmulticast mode
[   57.021624][ T6639] pim6reg: left allmulticast mode
[   57.131495][ T6656] sctp: [Deprecated]: syz.1.250 (pid 6656) Use of int in max_burst socket option deprecated.
[   57.131495][ T6656] Use struct sctp_assoc_value instead
[   57.177812][ T6659] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.228949][ T6664] netlink: 'syz.1.252': attribute type 30 has an invalid length.
[   57.351264][ T6674] __nla_validate_parse: 22 callbacks suppressed
[   57.351276][ T6674] netlink: 36 bytes leftover after parsing attributes in process `syz.1.254'.
[   57.441202][ T6610] ==================================================================
[   57.443779][ T6610] BUG: KASAN: slab-use-after-free in rose_transmit_link+0x5c3/0x740
[   57.446274][ T6610] Read of size 1 at addr ffff888111b43c32 by task syz.0.241/6610
[   57.449610][ T6610] 
[   57.450415][ T6610] CPU: 1 UID: 0 PID: 6610 Comm: syz.0.241 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   57.450425][ T6610] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   57.450431][ T6610] Call Trace:
[   57.450436][ T6610]  <TASK>
[   57.450440][ T6610]  dump_stack_lvl+0x189/0x250
[   57.450474][ T6610]  ? __kasan_check_byte+0x12/0x40
[   57.450487][ T6610]  ? __pfx_dump_stack_lvl+0x10/0x10
[   57.450495][ T6610]  ? lock_release+0x4b/0x3e0
[   57.450504][ T6610]  ? __virt_addr_valid+0x4a5/0x5c0
[   57.450515][ T6610]  print_report+0xd2/0x2b0
[   57.450522][ T6610]  ? rose_transmit_link+0x5c3/0x740
[   57.450529][ T6610]  kasan_report+0x118/0x150
[   57.450539][ T6610]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[   57.450549][ T6610]  ? rose_transmit_link+0x5c3/0x740
[   57.450557][ T6610]  rose_transmit_link+0x5c3/0x740
[   57.450563][ T6610]  ? skb_put+0x11b/0x210
[   57.450574][ T6610]  rose_write_internal+0x11dc/0x1ac0
[   57.450585][ T6610]  ? __pfx_rose_write_internal+0x10/0x10
[   57.450593][ T6610]  ? __timer_delete+0x5d/0x390
[   57.450604][ T6610]  rose_release+0x24e/0x520
[   57.450615][ T6610]  sock_close+0xc3/0x240
[   57.450622][ T6610]  ? __pfx_sock_close+0x10/0x10
[   57.450629][ T6610]  __fput+0x44c/0xa70
[   57.450638][ T6610]  task_work_run+0x1d4/0x260
[   57.450649][ T6610]  ? __pfx_task_work_run+0x10/0x10
[   57.450660][ T6610]  ? task_work_add+0x377/0x420
[   57.450670][ T6610]  ? __pfx_task_work_add+0x10/0x10
[   57.450681][ T6610]  get_signal+0x11ed/0x1340
[   57.450698][ T6610]  arch_do_signal_or_restart+0x9a/0x750
[   57.450711][ T6610]  ? __pfx___sys_connect+0x10/0x10
[   57.450720][ T6610]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[   57.450735][ T6610]  ? exit_to_user_mode_loop+0x40/0x110
[   57.450743][ T6610]  exit_to_user_mode_loop+0x75/0x110
[   57.450751][ T6610]  do_syscall_64+0x2bd/0x3b0
[   57.450760][ T6610]  ? lockdep_hardirqs_on+0x9c/0x150
[   57.450767][ T6610]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.450774][ T6610]  ? exc_page_fault+0x9f/0xf0
[   57.450781][ T6610]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.450788][ T6610] RIP: 0033:0x7fb76398e929
[   57.450796][ T6610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   57.450802][ T6610] RSP: 002b:00007fb76480b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[   57.450812][ T6610] RAX: fffffffffffffe00 RBX: 00007fb763bb5fa0 RCX: 00007fb76398e929
[   57.450818][ T6610] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 000000000000000a
[   57.450823][ T6610] RBP: 00007fb763a10ca1 R08: 0000000000000000 R09: 0000000000000000
[   57.450828][ T6610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   57.450833][ T6610] R13: 0000000000000000 R14: 00007fb763bb5fa0 R15: 00007fff4cdfdb48
[   57.450840][ T6610]  </TASK>
[   57.450843][ T6610] 
[   57.538170][ T6610] Allocated by task 6232:
[   57.539566][ T6610]  kasan_save_track+0x3e/0x80
[   57.541046][ T6610]  __kasan_kmalloc+0x93/0xb0
[   57.542513][ T6610]  __kmalloc_cache_noprof+0x230/0x3d0
[   57.544196][ T6610]  rose_add_node+0x23a/0xde0
[   57.545674][ T6610]  rose_rt_ioctl+0xa48/0xfb0
[   57.547136][ T6610]  rose_ioctl+0x3ce/0x8b0
[   57.548536][ T6610]  sock_do_ioctl+0xdc/0x300
[   57.549975][ T6610]  sock_ioctl+0x576/0x790
[   57.551328][ T6610]  __se_sys_ioctl+0xfc/0x170
[   57.552801][ T6610]  do_syscall_64+0xfa/0x3b0
[   57.554236][ T6610]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.556107][ T6610] 
[   57.556896][ T6610] Freed by task 6659:
[   57.558203][ T6610]  kasan_save_track+0x3e/0x80
[   57.559726][ T6610]  kasan_save_free_info+0x46/0x50
[   57.561305][ T6610]  __kasan_slab_free+0x62/0x70
[   57.562850][ T6610]  kfree+0x18e/0x440
[   57.564090][ T6610]  rose_rt_device_down+0x473/0x4c0
[   57.565709][ T6610]  rose_device_event+0x603/0x6a0
[   57.567282][ T6610]  notifier_call_chain+0x1b6/0x3e0
[   57.568921][ T6610]  dev_close_many+0x29c/0x410
[   57.570389][ T6610]  netif_close+0x158/0x210
[   57.571823][ T6610]  dev_close+0x10a/0x220
[   57.573185][ T6610]  bpq_device_event+0x2f4/0x600
[   57.574719][ T6610]  notifier_call_chain+0x1b6/0x3e0
[   57.576349][ T6610]  __dev_notify_flags+0x18d/0x2e0
[   57.577944][ T6610]  netif_change_flags+0xe8/0x1a0
[   57.579497][ T6610]  dev_change_flags+0x130/0x260
[   57.581025][ T6610]  dev_ioctl+0x7b4/0x1150
[   57.582401][ T6610]  sock_do_ioctl+0x22c/0x300
[   57.583889][ T6610]  sock_ioctl+0x576/0x790
[   57.585256][ T6610]  __se_sys_ioctl+0xfc/0x170
[   57.586717][ T6610]  do_syscall_64+0xfa/0x3b0
[   57.588190][ T6610]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.590050][ T6610] 
[   57.590831][ T6610] The buggy address belongs to the object at ffff888111b43c00
[   57.590831][ T6610]  which belongs to the cache kmalloc-512 of size 512
[   57.595127][ T6610] The buggy address is located 50 bytes inside of
[   57.595127][ T6610]  freed 512-byte region [ffff888111b43c00, ffff888111b43e00)
[   57.599384][ T6610] 
[   57.600170][ T6610] The buggy address belongs to the physical page:
[   57.602187][ T6610] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888111b41000 pfn:0x111b40
[   57.605333][ T6610] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   57.608124][ T6610] flags: 0x57ff00000000240(workingset|head|node=1|zone=2|lastcpupid=0x7ff)
[   57.610923][ T6610] page_type: f5(slab)
[   57.612194][ T6610] raw: 057ff00000000240 ffff88801a441c80 ffffea000431f010 ffffea0004834510
[   57.614880][ T6610] raw: ffff888111b41000 0000000000100008 00000000f5000000 0000000000000000
[   57.617559][ T6610] head: 057ff00000000240 ffff88801a441c80 ffffea000431f010 ffffea0004834510
[   57.620258][ T6610] head: ffff888111b41000 0000000000100008 00000000f5000000 0000000000000000
[   57.622977][ T6610] head: 057ff00000000002 ffffea000446d001 00000000ffffffff 00000000ffffffff
[   57.625675][ T6610] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[   57.628385][ T6610] page dumped because: kasan: bad access detected
[   57.630384][ T6610] page_owner tracks the page as allocated
[   57.632157][ T6610] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5836, tgid 5836 (syz-executor), ts 46479968221, free_ts 46381022403
[   57.638138][ T6610]  post_alloc_hook+0x240/0x2a0
[   57.639698][ T6610]  get_page_from_freelist+0x21e4/0x22c0
[   57.641424][ T6610]  __alloc_frozen_pages_noprof+0x181/0x370
[   57.643259][ T6610]  alloc_pages_mpol+0x232/0x4a0
[   57.644833][ T6610]  allocate_slab+0x8a/0x3b0
[   57.646269][ T6610]  ___slab_alloc+0xbfc/0x1480
[   57.647750][ T6610]  __kmalloc_noprof+0x305/0x4f0
[   57.649293][ T6610]  fib6_info_alloc+0x30/0xf0
[   57.650790][ T6610]  ip6_route_info_create+0x142/0x860
[   57.652475][ T6610]  ip6_route_add+0x49/0x1b0
[   57.653928][ T6610]  addrconf_permanent_addr+0x67f/0x9d0
[   57.655662][ T6610]  addrconf_notify+0x887/0x1010
[   57.657217][ T6610]  notifier_call_chain+0x1b6/0x3e0
[   57.658844][ T6610]  __dev_notify_flags+0x18d/0x2e0
[   57.660429][ T6610]  netif_change_flags+0xe8/0x1a0
[   57.662031][ T6610]  do_setlink+0xc55/0x41c0
[   57.663431][ T6610] page last free pid 5836 tgid 5836 stack trace:
[   57.665403][ T6610]  __free_frozen_pages+0xc71/0xe70
[   57.667033][ T6610]  __slab_free+0x326/0x400
[   57.668470][ T6610]  qlist_free_all+0x97/0x140
[   57.669918][ T6610]  kasan_quarantine_reduce+0x148/0x160
[   57.671628][ T6610]  __kasan_slab_alloc+0x22/0x80
[   57.673166][ T6610]  __kmalloc_cache_noprof+0x1be/0x3d0
[   57.674860][ T6610]  ref_tracker_alloc+0x133/0x460
[   57.676493][ T6610]  fib_create_info+0x22f1/0x3210
[   57.678105][ T6610]  fib_table_insert+0xc6/0x1b50
[   57.679680][ T6610]  fib_magic+0x2c4/0x390
[   57.681036][ T6610]  fib_add_ifaddr+0x144/0x5f0
[   57.682526][ T6610]  fib_inetaddr_event+0x12e/0x190
[   57.684121][ T6610]  notifier_call_chain+0x1b6/0x3e0
[   57.685770][ T6610]  blocking_notifier_call_chain+0x6a/0x90
[   57.687614][ T6610]  __inet_insert_ifa+0xa13/0xbf0
[   57.689195][ T6610]  inet_rtm_newaddr+0xf3a/0x18b0
[   57.690818][ T6610] 
[   57.691614][ T6610] Memory state around the buggy address:
[   57.693375][ T6610]  ffff888111b43b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   57.695955][ T6610]  ffff888111b43b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   57.698469][ T6610] >ffff888111b43c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   57.700986][ T6610]                                      ^
[   57.702779][ T6610]  ffff888111b43c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   57.705298][ T6610]  ffff888111b43d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   57.707791][ T6610] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   57.740869][ T6610] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   57.743209][ T6610] CPU: 1 UID: 0 PID: 6610 Comm: syz.0.241 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   57.747192][ T6610] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   57.750325][ T6610] Call Trace:
[   57.751401][ T6610]  <TASK>
[   57.752370][ T6610]  dump_stack_lvl+0x99/0x250
[   57.753891][ T6610]  ? __asan_memcpy+0x40/0x70
[   57.755354][ T6610]  ? __pfx_dump_stack_lvl+0x10/0x10
[   57.756982][ T6610]  ? __pfx__printk+0x10/0x10
[   57.758463][ T6610]  panic+0x2db/0x790
[   57.759700][ T6610]  ? __pfx_preempt_schedule+0x10/0x10
[   57.761359][ T6610]  ? __pfx_panic+0x10/0x10
[   57.762807][ T6610]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[   57.764677][ T6610]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   57.766695][ T6610]  ? rose_transmit_link+0x5c3/0x740
[   57.768340][ T6610]  check_panic_on_warn+0x89/0xb0
[   57.769909][ T6610]  ? rose_transmit_link+0x5c3/0x740
[   57.771529][ T6610]  end_report+0x78/0x160
[   57.772851][ T6610]  kasan_report+0x129/0x150
[   57.774265][ T6610]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[   57.776170][ T6610]  ? rose_transmit_link+0x5c3/0x740
[   57.777824][ T6610]  rose_transmit_link+0x5c3/0x740
[   57.779400][ T6610]  ? skb_put+0x11b/0x210
[   57.780755][ T6610]  rose_write_internal+0x11dc/0x1ac0
[   57.782409][ T6610]  ? __pfx_rose_write_internal+0x10/0x10
[   57.784186][ T6610]  ? __timer_delete+0x5d/0x390
[   57.785701][ T6610]  rose_release+0x24e/0x520
[   57.787157][ T6610]  sock_close+0xc3/0x240
[   57.788539][ T6610]  ? __pfx_sock_close+0x10/0x10
[   57.790077][ T6610]  __fput+0x44c/0xa70
[   57.791347][ T6610]  task_work_run+0x1d4/0x260
[   57.792811][ T6610]  ? __pfx_task_work_run+0x10/0x10
[   57.794426][ T6610]  ? task_work_add+0x377/0x420
[   57.795970][ T6610]  ? __pfx_task_work_add+0x10/0x10
[   57.797645][ T6610]  get_signal+0x11ed/0x1340
[   57.799116][ T6610]  arch_do_signal_or_restart+0x9a/0x750
[   57.800904][ T6610]  ? __pfx___sys_connect+0x10/0x10
[   57.802584][ T6610]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[   57.804568][ T6610]  ? exit_to_user_mode_loop+0x40/0x110
[   57.806341][ T6610]  exit_to_user_mode_loop+0x75/0x110
[   57.808063][ T6610]  do_syscall_64+0x2bd/0x3b0
[   57.809531][ T6610]  ? lockdep_hardirqs_on+0x9c/0x150
[   57.811327][ T6610]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.813536][ T6610]  ? exc_page_fault+0x9f/0xf0
[   57.815082][ T6610]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.816963][ T6610] RIP: 0033:0x7fb76398e929
[   57.818364][ T6610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   57.824355][ T6610] RSP: 002b:00007fb76480b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[   57.827002][ T6610] RAX: fffffffffffffe00 RBX: 00007fb763bb5fa0 RCX: 00007fb76398e929
[   57.829492][ T6610] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 000000000000000a
[   57.831981][ T6610] RBP: 00007fb763a10ca1 R08: 0000000000000000 R09: 0000000000000000
[   57.834428][ T6610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   57.836935][ T6610] R13: 0000000000000000 R14: 00007fb763bb5fa0 R15: 00007fff4cdfdb48
[   57.839405][ T6610]  </TASK>
[   57.841082][ T6610] Kernel Offset: disabled
[   57.842465][ T6610] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:28:03  Registers:
info registers vcpu 0

CPU#0
RAX=dd1ed979a5a8f200 RBX=ffffffff81976c78 RCX=dd1ed979a5a8f200 RDX=0000000000000001
RSI=ffffffff8d995f8c RDI=ffffffff8be28c40 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1d5f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6d54d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2ee6de CR3=000000002929a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffff00 ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007f118f811df9
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000079 RBX=0000000000000079 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000118e RDI=000000000000118f RBP=00000000000003f8 RSP=ffffc900087ef210
R8 =ffff888108468237 R9 =1ffff1102108d046 R10=dffffc0000000000 R11=ffffffff85460dc0
R12=dffffc0000000000 R13=ffffffff99aee8c9 R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e3c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb76480b6c0 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3010aff8 CR3=0000000025f28000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8167849f ffffffff8167846b
XMM02=ffffffff8175e8ca ffffffff816aa941 XMM03=ffffffff8167849f ffffffff8167849f
XMM04=ffffffff823b6774 ffffffff823b660d XMM05=ffffffff823b5cac ffffffff823b5c24
XMM06=ffffffff823b5962 ffffffff823b590e XMM07=ffffffff8237ff75 ffffffff8237ff28
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fb763a11df9
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
