last executing test programs:

2.473411089s ago: executing program 0 (id=428):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001680)={0x14, 0x3a, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0)
r2 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c0503"], 0x30}, 0x40880)
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000040)=[{{0x2, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x1, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x1}, {0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x1}}, {{0x2, 0x1, 0x1}, {0x4}}], 0x30)
sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000006580)={0x0, 0x0, &(0x7f0000006540)={&(0x7f0000006500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="250525bd7000fddbdf254b0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x40)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000200), 0x10)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000080))
socket$netlink(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) (async)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001680)={0x14, 0x3a, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) (async)
socket$kcm(0x2, 0x1000000000000002, 0x0) (async)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000180)=r1, 0x4) (async)
sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c0503"], 0x30}, 0x40880) (async)
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000040)=[{{0x2, 0x0, 0x1}, {0x1, 0x1}}, {{0x4, 0x1, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x1}, {0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x1}}, {{0x2, 0x1, 0x1}, {0x4}}], 0x30) (async)
sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000006580)={0x0, 0x0, &(0x7f0000006540)={&(0x7f0000006500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="250525bd7000fddbdf254b0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x8}, 0x40) (async)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000200), 0x10) (async)
syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async)
ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000080)) (async)

2.472053708s ago: executing program 2 (id=429):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711871000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8000000, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.470273493s ago: executing program 0 (id=431):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4020000)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', <r1=>0x0})
r2 = socket$kcm(0x10, 0x2, 0x10)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000080)=0x5, 0x4)
sendmsg$kcm(r2, 0x0, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r3, 0x0)
poll(&(0x7f0000000040)=[{r3, 0x2124}, {r3, 0xb0c4}], 0x2, 0x11ff)
shutdown(r3, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bind$xdp(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, 0x4, r1, 0x6}, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="74010000", @ANYRES16, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088048010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a0000000000080009000000000008000a000000000008000a000000000008000a000000"], 0x174}}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r0, 0xbdd94000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x0, &(0x7f0000000180)}, 0x10)
ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000000)={'veth0_macvtap\x00', 0x6})
r6 = socket(0x10, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, 0x0, &(0x7f0000000400))
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x80, 0x5}, &(0x7f0000000140)=0x8)
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r8, &(0x7f0000000780), 0x12)
bind$x25(r7, &(0x7f0000000080), 0x12)
r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000700)={'bond0\x00'})

2.46968224s ago: executing program 2 (id=432):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="8b3300000000000000000500000008000300", @ANYRES64=r1], 0x38}}, 0x0) (async)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x8, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001d80)={r3, 0xe0, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000001c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf0, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000001d00), 0x8, 0xbf, 0x8, 0x8, &(0x7f0000001d40)}}, 0x10)
sendmsg$inet(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f00000004c0)="0e0bd7dd7bee30338dca77dcb9caabff2abfd8b5e4dfecd8c6f0fd38208f685dacf533d2d71c4af905d34ecbcba81646e31c5a928533c81c1e2bfaeb0e6ad6be5ee1d4487c99b568d8c8c05931c26ca5b84cb75ceaffd8118d85d4076bf50a286aa7eb8391fbcbd3faa5c81ed5f60795a9f1f5e1a5316f63b08874088d61b1c2c01f086e2895b8a6a72361a2ef36ca14b126ac7aef63f271205faaac1ae37f5c0f2c3f8b6ce1bc2094d1776d62a8c28ffeb88ef788d3e881", 0xb8}, {&(0x7f0000000680)="0bbf80ffe6afc1f41010986647c4c7832a67bce4909575938a7c43770044b8234c12a68adf8a807274a83e9557d1ebe81ae471a23ad6351ec9a76cb17fb56e497f4977aef7ef17c6d34e0883f00d84885c04e72905d6b2763a0c276b09ff2954d1d77ddb014062be9b5583aed1ce0632300fcfcaa2c646d6918745eadc6f1cfe8299e77e2eed40a1de00bc9e121de4c4b31eaa61e3438eee8b3df30c3e3294b114b94b71b8e94d96546b8fbd4df125b84b606f85486c969ab1a2ac31e0d7b2084a8d423f41d61a48c4ce3d6b4e49283f1720eb", 0xd3}, {&(0x7f0000000780)="d788086e28e8225c58def3b98950fb384eed86bf3acc62afc6d46dbd50a68a025486eef212a8e9b7e7b3114a4ea358e532ac52e6947791b3dd94aeb01be4a90608c2ad554cad240f6249626c9e5ea27eebd0e1c7daa68b43973f39853323bd11cb58e1387767473c3feec9be08db9a7397ddafb2d27cf5da98c94ba836a63f124531ef4a4f36b7b757339e3ff13a3569d9562c8bc0dd151f4b1fcef36a0411fb81804d42df172c3a23fb166ff31316227ac79341b515205b7131d428fb707e58e7031243c19790b97a304259a16270ef1a6b6a796e279a08aa71", 0xda}, {&(0x7f00000001c0)="4a9c78c1037a345767833def5dd9dbc8cc313ea06972cdeca636b4257dd4f3a389235d31adcdf897598a7a43134e81f7aa95daae2005a22490c0eb1db20fb6252e0948f0abd886974b59e784ce3f62c8781131edd818eabde5a28e7f06880851e34d49db", 0x64}, {&(0x7f0000000580)="55f7271a28e5211062dda5c90e76ea420ef354487004389936b30fc82a66c045b94cc7eaed43591d059032ea5157c4c3f497fb18b3ad51718097da53028e65839b540563ada489cca81c560106564288b096fb7f3a829a5b2482cfabfd64d36f03c121cd439832747d4a8f916ef5288cd836e918223de087122dea4b40436e00f234ca", 0x83}, {&(0x7f0000000880)="7a4cd7f260961ebb511bc6b2a51542d6342982a6382366557791e57727c35c7b48e8b9668bfe365c58fee22936896f206da8a56b92781431f0b7b7c81553b2a816bc71d17663fe0fae8a96aa776e3ef631f8e3daee23c83a5ef9ae62c3559d316b5b27de1757de45166744e53c7ea0cf2eaee711e4a7cc9f7ac41b9ebc5497ca93cb4793ba67929fe18eefa4414f5a3f050d475ab77d5117e4122a314fad2664bec1e932ec5db6b126fa121cfc8dbf5b01a9c38f9287714049d66cdd4fe2cbc5f79f15d97d0cff5474fafa2c08e2f75c55a4b051235ec3b4ac8e36d5a65ec89dee39b9c600bb7cdf2bae158e04b90c7c", 0xf0}, {&(0x7f0000000980)="3b5b5ae94f2ea0f31f732807ebfbe863aca08128f0f5417ce80f6358f099b1f21704a5c70e05a1527e69fd48e1162663b810127a92e0376ffa9772e32a6fb3eccb610c7e849f37150f645985868f60bcbc8d0c3fa872a5ccd723878486d1122cf02a5e67115370222763f19e8050d35a54c9098e32b3cc20496a6dc70810d0a6c356d85a597a6ecfc8222cdc79abf77a194f85113e6c66", 0x97}, {&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000001ac0)="9aee3d4f457c1698dc371c8fcc8c3007b638dfd776e44c13e0c13e650fdd3686fef644f37365685271ec7cbf768c7807897cca545b88d550e829b6f26d2775b17dd5c628771297ebc5244182c0cc7c1b25dffef1e78500938fe202caef1385d25cd01d5205a3bcb521cb3290eb546267ffc13a72a68599dafb09a420c3c821132f9e62cfdfe550b9b56d8ec0a481055493df9996528225ea3b595bb5e75a72c221da6db2285a1ed4154f045831595b9d986ac732a580da7705926949430f3c9cd0b7d4", 0xc3}], 0x9, &(0x7f0000002f00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@lsrr={0x83, 0xf, 0xd9, [@rand_addr=0x64010100, @local, @remote]}, @timestamp_prespec={0x44, 0xc, 0x7c, 0x3, 0x0, [{@empty, 0x10001}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@end, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast1, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}], 0xd0}, 0x85)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000040), 0x6) (async)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) (async)
setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000140), 0x4) (async)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) (async)
sendto(r8, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) (async, rerun: 32)
ioctl$sock_bt_hci(r7, 0x400448e6, &(0x7f0000000240)="7c773d39aeef000000") (rerun: 32)
ioctl$sock_bt_hci(r7, 0x400448e7, &(0x7f0000000080)) (async)
syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x32, 0x0, @loopback, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr, 0x4e210000}]}, @timestamp_addr={0x44, 0x24, 0x0, 0x1, 0x0, [{@multicast1, 0x1}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) (async, rerun: 64)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xfd}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2=0xac141400}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}]}, 0x70}}, 0x0) (rerun: 64)
ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000440)={0x7ffffffe, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]})

2.383738985s ago: executing program 2 (id=433):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
listen(r4, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
setsockopt$sock_timeval(r5, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x8, 0x40, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r6}, 0x38)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r7, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}}], 0x1, 0x4040005)
r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r8, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48)
listen(r7, 0x1ad72f7)
r9 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_opts(r9, 0x29, 0x48, &(0x7f0000000000)=@srh={0x3a, 0x0, 0x4, 0x0, 0xf7, 0x40, 0x4}, 0x8)
accept4(r7, 0x0, 0x0, 0x80000)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x50)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000000}, 0x40880)
r10 = accept4$netrom(r7, 0x0, 0x0, 0x80000)
writev(r10, &(0x7f00000001c0), 0x7)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r6, &(0x7f0000000280), &(0x7f0000000600)=""/98}, 0x20)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x7, 0x0, 0x25dfdbfd, {{0x8}, {@void, @val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

2.382538125s ago: executing program 0 (id=434):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000009600000000000a20000000000a01040000000000000000010000000900010073797a300000000060000000030a01014000000000000000010000001c0008800c00024000000000000000000c00014000000000000000000900010073797a300000000008000a4000000002140004800800024000000000080001400000000008000b"], 0xa8}}, 0x20000000)
ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000540)={{'\x00', 0x1}, {0x3}, 0x9, 0x0, 0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000400)="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", 0x10b, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="020000002d010000010000000cd0000000a15ee1b145ef56d02c8ad9c49f864f080afebc86cdb070c18291b8adc47abcccbac066b6d0e1542b63349d4eda9e25ff9c06c6d3e7911b6f9a4dadd07c2b97b53eaf486f6ded4f5dd58f34ffe56f8ddce8188b93793ced433e56ac855df5fbed23640602700799e50101fa87612c4bf1a204ed268f4177f869af1bd2de9d29bbc25d9bb8881213d693c20ce0b0157b65b775c861c3f9298f99d42ccc574b0190ad4c6fd5b10716a150e0d342edceb1867fe2de21b1bbc78ee38f5de96992c35266f0ca85e96806802a7d83b95217c86d5000000012f22948b44ddd367720b8d19fa85fa1574946372b92153b1a9c58c68240df87cffc76c457923094e6c35459809d4b9853f40d550c80900dd122147632ff983fb32957e3af4f5cad8e8d7e3bf7cd41be00100000854198537ea08b41b601b7631a9343d5b10be567cf21143c3735764daef43554fe9076b6297f54feb16446608b9342eef90a8eab004c6ea6330eeea31684501dd9e01eea70506fea8c258318c9900111969ee2fad3bcc2f858c5cc0fdf4c80fbdc6a64b40b442860aa9d072d28e5d138865042b229189a3db4b108ef869ea1ff87378e6d27dfdb71b95e19dfde346958640cf79403db2adcc9ad968bc91c6ff4230302c8663d40b323e71399e270f8ef9d1f13df8959cf8380883cee36c6b2c1d95e4fb19707ab3bb4fce10ed75178c6db02303ae460316d4b417faaac07b80b17e4f21ac484071a2dc83558d7d1dd6a4e6f0d2e7edc89bb045fe7d7f3247570ffdbdadcee866b879d4469ad2cdcba1e4f558b14eb1d44c49554275129b57bf9e05476adea8a7088cdfe4504cacfba0354b5ab9e3d63f51c46aa35e7bf6c4588dd50dbba35da110d2c8317f8a2d20b1dce4aa2a07c29fe346549f23dd83047d2f2ebca452f710a9c967dc56915a620688df8d9fe01b914a48c425346dd71543e26d5ae18415e1880ac428df00811311b3c757bccc4d3643866b44c3c43e436da5ffef1f995fe638b09159f398fb642fe369bfb6b7881101e514ca3d5f67d298101b1f5a7a2963a8098fcedf463ff2776bb03eee986c4d40287b68c8e5b462629cdf1a3811ab8a31e3bfcc7fe8d8b286ac7df73d5aa226d70acf01a9c48a156c7d254ef38ab0195dbd2cccd892705179fb8b428b71266a623573dedc84f842600557ae8a14f06b99d8b179506d9f9b2f2bd38e7a642d14ec5e24e9b909d1ec4c75861353cab0e86099279aacd2673969c6b8c9f3768c4679048245158b7dc31905e669e2041086ab4351cac0cd11c05f9ddd753996744ae42d10dcb735d4bfb1ef904ae037d56b8c608d2a2dfd91f5f4d48b481ae65af044c8f9be5a375582f0bfc5a60ec1d34bef15eeacc15cd45f6cd7841f8c5b557f6bc51d5247f850fb21f699a4f07b0a0e2babc587acbbac8b6afd244641fc03cd3ef31a1ec739305ffafae497115c861358e61a0966ac2c49e8a36c585a75d45956cccd187901bfc804c6dc9a8d913ead59057bf8afd0c4191f4e6e53479927b8416630fbb0450dac7f0fd0866c0bfbea15b20384bc41ac74a020386b4cc01807304de0ac1410e9205c9d6b052ab2b49eb7b8d18a672617b8812376590b31934c98a697a509df29ce3967745698ebed34904d5b2d17d3571fa80e6e97a8a3d86ccff095c6ed6c24c15e64e54843e23d7cc7c4016129643184e50d4a4a2eb667273fe713eba624c1fa83d9d236fb68876bd31cfa69487768175fd559efbdc151b68233a5028a5461517e8b943872737c0f48d3a163f3925a6784017439851c0c5446efc0f9e573c0f06dc85805ca57dd8bc8031be91f485c4213b24291635e82c999c43adddd94ff99ffe8827be1ba5c1d19e816b0a17475efbb6e76835205b230926ddfa95817a35c392a6dc8dd60fccfb1d1251031f03775182f3ecf1ec8494c02912acc7a60b41f017f3a707cf85a59faf01a6094fcd36fccda94a86fdce98b9986ca8b4ef14b8425a67279d3cb5ae109c57360378a3093b9c4ba0fd7cf465f7a142c27a20015c7250face8ac991f72358169e6348d0743ed31e35fac60f729daecadba7b0b507e0a6b10ae14efaed7c06771b0ce1d5e3bb13ca3d5ad77af006065520ff4b64a711d363f4be3de47fd09e40e65df9c24b0ef4c00cdcef6ce502c59a05899c8520c57144c54616a8788b4d419fee78779b5c4f91062ec15581244c1b1762074cb4d01d968515346aa71df8870fc3ab1f45c6184081ed74729b7d2274a5ea9026f97d6450376fe6c13ddec57f58c5504931e595d70afb4d13e3bb2cbeffc496250227ffcc6401ba4eba2222caa917896baacc26dd794e64151a116b818937244b4d826997512399e7a3291158f6a5c031a5ac29409ba02fb73ac574ac123a53536af939a5b160bd3a96c117d98d8795e84c5e75d6af9a8c4a05fc0262d8e071dad53e158371e12510fbed2bc6714e092b3d19170c42befa83c478e580c8b9fe7db879335934cb19abc4f4dbb8279e35bc5f27f7bdde7efcc3b17fd9faaebc1f46d8315c48444a00c7386142dcad9ccdb5d3709916e7b1ad881b77fc8cfb013b971fd9fa7200bdb73813b3f4f2af9ed888c2b125bc92612a4fd3ca5848afb509c0362e7f5bc7a924346629b739b3df10379f3994a7e98930ab06acdbd41eb0015f500e6a1533b07825d063edeb50f3495b463e4c28e29aeae6e85665d0a78266830ba8554e9c95f325e6b893d78ca07e8347036ad2cd727ebdf0ca070cee7720f6f4385205ce72b0fcb357d7c5b0323ecba4ecec25979ee551fbbfd3c4a03493d6d863521cde7f1f32e9b4fda96c27ada7d7a3e75f0a6eafbeca9459d37b6163c16e98803ea97e73a99361cf1c84415c08b955c4d357b0c07ea265379e3348a0912eb022c648a70ff3e70995775df68c9485ab5092430b5a7264e72c1e845d51d4957a22a3f735ac9a0522ef1898ddd71e5333a437cdd838a73f1a0914f2fb03809a9615197bcf46a920710a3ea6a97855ce2bee8c37b7150a372cc4bdc3506431fc107e5aedff31a93653ed7bc397279dbc9f9f7144f506fa4a1c7f044d5740fd2b64d5d13e16049104e0dd759453a2ac4923e8d63c10088fa3c21dc77800ab54a241b333bc9bb54a60d13ec152dc8a105d001b8593b7df16d689475741f2a4b9512751ec9f741d897cdb2aa03da2ff41cb6b43943a44553686e09173fb2a413a3983a35653e8dbec4f793c92086e98d91cdfd935ad6e070de257d794c601f3fa763415ea563fba3fc426c830ecf0a486d160d5f214efe96c6e58ced162d39a2fc173691b56608fae9d6c8d898feead866461f2b97013eaa2b8d1975b8f97868dd803e683fc9c1bd230b228b762a89253f3987793f729f96bb9fbc6ef50872b7432d6387e4e6b7909715a900538a29526660b9b874d2133e0e97dfe2f4777b611a02efc2e19ae3e0f2fa326df03af512168336866d75c5c298d2b9d13d8dac97eb07f60456fb95b42e019d35466b294533d2b715e3968768a6810d39d116046a0430d794155f7a5cb66cad2a39d803fcd9ceb1238d4f6daee31ff42adabe6f74edd605e697af2d72dc2265f14bafe941307ab0260461ef0e7dac79a338741c19da78e8fd5e80546ccbd1495a339b3ee1891141966e616127edff9b99f095042c165508007dcc9ed92d9950576a906bafa392f2228e6eab96329ffcf4ff7276eec2fe3d49b4cd1e20626f92e9f14e45c5ae588c4642662d3b9067953b9e612ca589c9ba76b7a01be71c9b0875b74fcd7beb73e30aae23698988dcfab649bb2c5391d9bb7358c6f114b78c6541c827b1beedf7966a46d33b752012aa6a67999c46b9c3779128649679bcf36a3f3e203c855b567956a7d9b7d1805307d04517630ee413c5d1b958d56f24d00387159b000b7e43913748b7276a918be0bd0cf0256110bb3f0a43cb5d44f8284a1eef7cecece8aee68ee0c831f11f0e0eed71466523755badebefcfc6850b91988ed0f11511e9ec314238dc81b1d56056bd796dd6c4040e201b9db03a08f5a0a9af74109910d2ca8e5ba4b320073736a0900a0ea40f47ddd857510c1d709dc6692d8be90008bcb0919820a54dfc55dfe8df4a107dfd38ffa731ba3e0a298e0ceaa3faa8b999cb8718dbc5b636e2dc99881ea2e0f2b9931215a860a72e436041b583a5348382a9a0f5528487712c91c0f21e3b40909f3f2c5fd63408806e80529e2094e0bedb70314cb713b80b520969626f47b0e78fb2ceee6e3d6f6a4ee729536b6a7e79c96f9dcc4ab3cc86d3f6f4c2f7fe810c2a1e6e1672c22ca81a64d3f9d0e7f2023be447419c80099de617b1f987ac8c04c7f4deb34d8a767c5002ac335548aa8b98f63c71918267386d1608db6994d56b1952b18046a1a329482e729a80957d5ab082b521ad6b0b5f1d18f9cb745dd39576f6e8b115fad235fc39ad37fc4ff35fd489f7f3dcc9400a9b1d17799191a7f2ea8195bde028750209ddaf3a1c7a8902070e8a9615931b65f81929a6eb38fec4cfeed3979698548f647c2cf0f2bf0e90965c954494071c4d50e35d46a5062c134680d6faba1f92b7e38c34aaf36c81164ee7cb62a23c614420c6158e3c91b19648952ab804572faf17ed01ef19af052cc2f395c98c81a6e8f32bd1efad1686c20ba32b111511a4d13e606c369b2fb04fea11a4c85d560d91c82d1f3e517a7438cc0f6be86a0116734ae981f137a7e901602e7e356b1732480cb30a8c886caba97fbccc0e2aea67d65d4d198fe10494e0e96cf3f8c90dc91dcac40f2f9770caee6b6bb1bf6578b84057356318aaf14ac07e25ed77a1ee3cc3450a388aa942a526c52037e3e39c8fc5162ca5964a82b6c9ecc6b2d7e6bcba36d77a245ca37a415d06053e9623c5dd146ba8c2c91afbd21fa78a7d2f3c49b85bc6ab2cccfaf1531dd87424fca5a0248ceb274c7ad28e0634c007126f2b5f5d8f1db37503f503da8e4f3e8efd1ce0468ac22db0c988d54b5b51dfbe067dba9e027bb1752081faa1cecfe5094e3a33afea4934d16594d1aa196bbca87d95ac82c1630f627a71dbb04f8f16717b0c55d67c222acb3fc342394fb90d4c12fc220c688cb45be138e88f68b42f0cdc72da81813f361675e6f6d665191d7906c1e7613bcd4210118e7210ceff477376caf5a5d3729ecde0179982f6c2b2ad5e4f7f069e68193eeab536f602b55ce92af2185a9cc5e13d8dc343ce4e1d0191d9665ad4fceb1ef81f3b2fedc01cae57097989e5f2655a04a4f220d4f1efcb36ebf13f24ea3d65643716fe914906804b832a1e8fb48563d3190cfe5137a7c07801b5e5babfa9f290de0c7a80e0b665b4f2879051676cbcfd818e8e15e18cc9d4949038564ea3fbc49bf2779a1b4a2567449ed23a027ea8a267df809b381b5529ad45467100dda68b766bb0f4e09a32b7529d3864665d97ba55e702f20f374a7913a76da9f73247b907d184d871e4d3b5406a2bc124558e9365903e15526c59f8996e19b374ad1115c39c6db8e218442e9e1866b89fac2988ab314eb1fad0a41fc0ccc8977e0081dd2f6a8bd24f062e9b176f55f25187ea0a7682ae386631338244423460674fd07dc5ea7efd4dfae91fccb3ce212249f4aee923d010d73d1097200742a7b0c674899c25bd1f406da18a9c54a97f8c2f907e1f2861bf0f7ee407ed6156d1c4becdfe8c5bb2152667efa45b9e45aac0ec5f98eb60b3347db7794dabbf41d738d18119a10bcfdb1be6cb50086a6d5cb1e766b4ef87c48731a5b754a39e573df0ad9b65ad6932ae63bc3041cf4d79c35c281a115e0461f5c4f7aca1d2b1fac78229d2abbf69c181313db6479603fde86c24e30131ed1ce03a41a2ea330b082e4cd5daaf1560320cd537759822cd1e040cb98e76baa5367724aeb0c1c43aab382baf0ea3fa86f19e3101421f1c26a334b998cbc1a061a3db8b5c524187497bce7f05d3db335f1206fc854e00051ed3b5af9d565654bcc0e4165b73efd1a41509ee646a163d5b349f101ea0875215ad161a4f84549135a8b3d1f31affca1b6b47e7956e7b33462e74745c581f0a05cbe3a7b5fc4bc1d02a00322809b91aa6634295dfe46ec41b5e83511c0e72c725a5343c82e6360bd1d0c1bad71da751379f578a175baddbde291d9dc1e14a7eb22e1bb36480b4729bba6a4624343207a4f8297d5ec8f82dd89542ac3aa"], 0x1139})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}})
close(0x3)
socket$inet6_udp(0xa, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000004000000000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=<r7=>0x0)
connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000380)={0x27, r7, 0x4, 0x7, 0x4, 0x2, "bb2338bcf5c7e6c3bacb08a5810524477ec9dd08e2700260065d4da56753303e503cbbbad03b1927c4f150ef7a704c1f66001ec10cfb6c03ed8e253509af85", 0x40000000b}, 0x60)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000280))
r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x220200, 0x0)
close(r8)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r9, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'})
ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"})

1.602070693s ago: executing program 1 (id=435):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0xb2, 0xe9, 0x8, 0x7f}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async)
r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r8, 0x891b, 0x0)

1.014167691s ago: executing program 2 (id=436):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket(0x8, 0x80000, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4844}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140), 0x4)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0xffff, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]})
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]})
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000030000000900010073797a310000000014000000020a010400000000000000080000000034000000140a03000000000000000000030000000800e19b2ef000090000000000000031000000000900020073797a3000000000140000001100010000000000000000000000000a338c03f24f0f9cff363289f93c8eb93ab6170ca8f621224e96b662da9f8a9fe4629d7357009fa4a8c91ba61a53d5e834c448931d18ff3d5ddf207f47e91be8deaada6aa92f36a2b18ea4056453580fdb6f253d69deaa7ae7358e9d3af444"], 0x90}}, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000600), &(0x7f0000000640)=0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e006f9721acbd0848ab8b27000000f32700000505f600040b00000020400000ceb51321b283eceded2694787ce15243e5210056ca4454e727ca8c2da9e6a773902036442e85dc21b1793d3ad5f11de42e1cd3e6a2603a06ebf1b0255bf9d2469adf", @ANYRES32=r4, @ANYBLOB="1000"/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0100000000000000020000000300"/28], 0x50)
setsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f00000005c0)=0x3, 0x4)
r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={<r7=>0x0}, &(0x7f0000000200)=0xc)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)=<r8=>0x0)
sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000dc0)=@RTM_NEWNSID={0x54, 0x58, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NETNSA_FD={0x8, 0x3, r6}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_PID={0x8, 0x2, r7}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_PID={0x8}, @NETNSA_PID={0x8, 0x2, r8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4)

1.013010093s ago: executing program 0 (id=437):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0xa000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x3}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0xfff}]}}}]}, 0x4c}}, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'})

934.26213ms ago: executing program 1 (id=438):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711871000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa000000, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

933.092533ms ago: executing program 0 (id=439):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a060000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="e4e806396f1deac847f6928b3a11bc7e623da9af5864aec94d096e397e99c047b509ebd426a08ba97bbd749b5f58b0c144ca00f9dbaf2b"], 0x0, 0xfffffef8, 0x0, 0x0, 0x200000}, 0x28)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000038000107fcffffff0000000006000000cfed860235d618f5811a5da23e45dc378203f42eeb19409f747a1ebe0a05f28719da075f8d1af69b683d7b534a7f9daedcad6bcb94343d36d3373960e5a5df732ef9039d1d1444d1eacbbd9b5115eda762adf7ae3fbc15c9d54e280d7e2e"], 0x14}}, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r4, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
accept(r3, 0x0, &(0x7f0000000200))
connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRESDEC=r3, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000010000009500"/24], &(0x7f0000000140)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x9, &(0x7f0000000280)={0xfffffffe}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)
epoll_create1(0x80000)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)

931.528762ms ago: executing program 2 (id=440):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0)
write$nci(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="61e7054b0502818102cea102"], 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000240)='kfree_skb\x00', r0, 0x0, 0x8}, 0x18)
r5 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=0x10, 0x80000)
recvmsg(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)=""/50, 0x32}, {&(0x7f00000004c0)=""/249, 0xf9}, {&(0x7f0000000840)=""/219, 0xdb}, {&(0x7f00000005c0)=""/166, 0xa6}, {&(0x7f0000000940)=""/44, 0x2c}], 0x5}, 0x2)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f0000000140)=""/201, &(0x7f0000000000)=0xc9)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES16], 0x7c}}, 0x44801)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a01040000000000000000020000001400048010000180fc00010068617368000000000900010073797a30000000000900020073797a32000000000500010000000000000000001100010000000000000000000000000a"], 0x70}}, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r8, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f00000002c0))
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000680)=ANY=[@ANYBLOB="61122800000000006113140000000000bf1000000000000025000200091b00003d030100000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200001400000007030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700004c0040ec1e00000000000000bf54000000000000070500000300f9ffae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43d55578aae820b236dcb695dbfd737cbf5a9506d2d6b05fe70305863f970eac3590ac99b798f8125f1c322c2a154a8a8d0365fdda010639139b2fae1ed40d1a2fceed193688898e4aeb8f7dec07f68fe3c434e8c4e4fa7892190d97f56627b3771c5d76ff8dd66c147cca4ec32864aaefdfd0ffe5565d4ec3605d97949f2ccb1a3898cc0a08c5877605492d271cae8e1c687ea0c937e1bc47a195abe7ce32b5e802e5075a53f7064603236800"/389], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffee8}, 0x48)
syz_emit_ethernet(0x2a, &(0x7f0000000e00)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x300, 0x4e20, 0x8}}}}}, 0x0)
connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48)

874.347315ms ago: executing program 1 (id=441):
socket$xdp(0x2c, 0x3, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="38010000100001000000000000000000e0000001000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}}, 0x0) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="38010000100001000000000000000000e0000001000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000000000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000008000340000000000800024000000000080007400000000008000840000000130900010073797a30000000000900020073797a3200"], 0x9c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000008000340000000000800024000000000080007400000000008000840000000130900010073797a30000000000900020073797a3200"], 0x9c}}, 0x0)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00'})
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@deltclass={0x24, 0x29, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xa, 0x10}, {0x3, 0xa}, {0xf, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0c5}, 0x20040084)
sendmmsg$inet(r3, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, 0x0) (async)
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, 0x0)

814.136666ms ago: executing program 1 (id=442):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async, rerun: 64)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 64)
r1 = socket(0x29, 0x2, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4844}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140), 0x4)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a3200000000f70007404884b24b02a8a7758a688958ed60ecfd057e10926ba77e5596b13e43cd4488e4aa68af5f7236ec205b6e4cac2a0d86c336bf07dbe861f4f57bcef92dcf818d532d4475b5daa4dadc1690f228e860bba5a0b5d9bde86862e8f7fc08f0debd4974c6fae7d737a0007ec948ac4d8714ebff6b25648fb910e0d6d07f023cf5fa4051627b9c5b69e265538f9ba683bf172a5ff815afa543c12e550a1bcc9287080c7c12cc89d216c56febb0b06134672ea6b0077c846396169475f271319988f49ec94f2996e5d0e1cb151fb223e556f10fb681d068e055eb34e5f8fc7a524ffe5f4632a6c74ad0fe0b1542497d76a5a4416c47805e001c0005800800014008000008080002"], 0x1ec}}, 0x0) (async)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0xffff, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) (async)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) (async)
r3 = socket$inet_sctp(0x2, 0x5, 0x84) (async)
syz_emit_ethernet(0x35, &(0x7f0000000340)={@remote, @multicast, @void, {@llc_tr={0x11, {@llc={0xf8, 0xbc, '#:', "1bbe2d2527dca6aa0ced8345106c9a72f47810595b6ab8cec7d25006438f6c97a254e8"}}}}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x28}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000030000000900010073797a310000000014000000020a010400000000000000080000000034000000140a03000000000000000000030000000800e19b2ef000090000000000000031000000000900020073797a3000000000140000001100010000000000000000000000000a338c03f24f0f9cff363289f93c8eb93ab6170ca8f621224e96b662da9f8a9fe4629d7357009fa4a8c91ba61a53d5e834c448931d18ff3d5ddf207f47e91be8deaada6aa92f36a2b18ea4056453580fdb6f253d69deaa7ae7358e9d3af444"], 0x90}}, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000600), &(0x7f0000000640)=0x4) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e006f9721acbd0848ab8b27000000f32700000505f600040b00000020400000ceb51321b283eceded2694787ce15243e5210056ca4454e727ca8c2da9e6a773902036442e85dc21b1793d3ad5f11de42e1cd3e6a2603a06ebf1b0255bf9d2469adf", @ANYRES32=r3, @ANYBLOB="1000"/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0100000000000000020000000300"/28], 0x50)
setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000005c0)=0x3, 0x4) (async, rerun: 32)
r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (rerun: 32)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={<r7=>0x0}, &(0x7f0000000200)=0xc)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)=<r8=>0x0)
sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000dc0)=@RTM_NEWNSID={0x54, 0x58, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NETNSA_FD={0x8, 0x3, r6}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_PID={0x8, 0x2, r7}, @NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_PID={0x8}, @NETNSA_PID={0x8, 0x2, r8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) (async)
setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4)

724.285127ms ago: executing program 1 (id=443):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a00", @ANYRES32=r3], 0x3c}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0)
bpf$PROG_LOAD(0x5, &(0x7f0000003780)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="7912b8000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000003c6500bf000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)
socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010400"/20, @ANYRES32=r7, @ANYBLOB='\a'], 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x0)

1.903089ms ago: executing program 1 (id=444):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
write(0xffffffffffffffff, &(0x7f0000000340), 0x11000)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r1}, 0x18)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f00000058c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x440c1}], 0x1, 0x40)
recvmmsg(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x1d}, 0x12}], 0x1, 0x2101, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r3, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x100, 0x78c, 0xed4b, 0x8000, r3, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1, 0x7, @value=r3}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r6, 0x5133c4bf67cd92a7}, 0x38)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0)
write$cgroup_pid(r7, &(0x7f0000000000), 0xffffff98)
splice(r2, 0x0, r7, 0x0, 0x80, 0x8)
write(r4, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c340e67e00a01010000000000000000070000000900020073797a310000000009"], 0x54}}, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, 0x0)

606.02µs ago: executing program 0 (id=445):
r0 = socket$netlink(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r2, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40051}, 0xc) (async)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
r4 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') (async)
r5 = socket(0x18, 0x0, 0x1)
getsockopt$nfc_llcp(r5, 0x111, 0x0, 0x0, 0x90aa62107f0000) (async, rerun: 64)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={<r6=>0x0, 0x39, "a3ce3b408cf96562cfc4cbf4daf5621509949d790bf0bafce6ac8ed792932606ec6a8c82cf839df4dd8c145256582160ef2776dc6253127d4b"}, &(0x7f0000000080)=0x41) (rerun: 64)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000200)={r6, 0x1}, 0x8) (async, rerun: 64)
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x80) (rerun: 64)

0s ago: executing program 2 (id=446):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x5)
socket$packet(0x11, 0x2, 0x300)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="6400000002060108000000000000000000000009140007800800114000080000050015000c000000050005000a000000050001000700000005000400000000000900020073797a320000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x3, 0x0, 0x2000000, 0x0, 0x1}})
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', <r5=>0x0})
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x8, 0x3f9a, 0x0, 0x8000000010001, 0x3}, 0x0, 0x0)
connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48)
connect$netrom(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:45201' (ED25519) to the list of known hosts.
syzkaller login: [   56.430076][ T5807] cgroup: Unknown subsys name 'net'
[   56.551551][ T5807] cgroup: Unknown subsys name 'cpuset'
[   56.557865][ T5807] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.655336][ T5807] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.410570][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.423623][ T5860] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.427466][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.428363][ T5860] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.433381][ T5860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.436679][ T5860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.441664][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.441702][ T5860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.448245][ T5860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.451132][ T5860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.489291][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.492185][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.495449][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.505208][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.509451][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.786099][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   64.800080][ T5856] chnl_net:caif_netlink_parms(): no params data found
[   65.034550][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.038800][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.042305][ T5856] bridge_slave_0: entered allmulticast mode
[   65.046223][ T5856] bridge_slave_0: entered promiscuous mode
[   65.054749][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.058631][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.061548][ T5852] bridge_slave_0: entered allmulticast mode
[   65.065467][ T5852] bridge_slave_0: entered promiscuous mode
[   65.071532][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.074408][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.077529][ T5852] bridge_slave_1: entered allmulticast mode
[   65.081575][ T5852] bridge_slave_1: entered promiscuous mode
[   65.085844][ T5862] chnl_net:caif_netlink_parms(): no params data found
[   65.100832][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.103825][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.106378][ T5856] bridge_slave_1: entered allmulticast mode
[   65.109897][ T5856] bridge_slave_1: entered promiscuous mode
[   65.169191][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.189755][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.195922][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.208636][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.278781][ T5852] team0: Port device team_slave_0 added
[   65.298673][ T5856] team0: Port device team_slave_0 added
[   65.315912][ T5852] team0: Port device team_slave_1 added
[   65.323322][ T5856] team0: Port device team_slave_1 added
[   65.339532][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.342600][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.345521][ T5862] bridge_slave_0: entered allmulticast mode
[   65.350039][ T5862] bridge_slave_0: entered promiscuous mode
[   65.396269][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.399342][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.409575][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.415342][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.418582][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.421520][ T5862] bridge_slave_1: entered allmulticast mode
[   65.425361][ T5862] bridge_slave_1: entered promiscuous mode
[   65.429435][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.432089][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.442662][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.447945][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.450175][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.460433][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.465716][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.469093][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.478498][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.514417][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.530901][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.577183][ T5856] hsr_slave_0: entered promiscuous mode
[   65.580329][ T5856] hsr_slave_1: entered promiscuous mode
[   65.605821][ T5862] team0: Port device team_slave_0 added
[   65.613866][ T5852] hsr_slave_0: entered promiscuous mode
[   65.618121][ T5852] hsr_slave_1: entered promiscuous mode
[   65.621199][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   65.623613][ T5852] Cannot create hsr debugfs directory
[   65.628024][ T5862] team0: Port device team_slave_1 added
[   65.680315][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.682700][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.692395][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.724965][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.728286][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.736249][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.854697][ T5862] hsr_slave_0: entered promiscuous mode
[   65.858044][ T5862] hsr_slave_1: entered promiscuous mode
[   65.860903][ T5862] debugfs: 'hsr0' already exists in 'hsr'
[   65.863155][ T5862] Cannot create hsr debugfs directory
[   66.120173][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   66.134894][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   66.154358][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   66.171554][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.221887][ T5856] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.238120][ T5856] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.260098][ T5856] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.266710][ T5856] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.333657][ T5862] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   66.361753][ T5862] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   66.376712][ T5862] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   66.383675][ T5862] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   66.500821][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.513127][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.545572][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   66.549405][ T5855] Bluetooth: hci2: command tx timeout
[   66.551198][   T54] Bluetooth: hci1: command tx timeout
[   66.559091][   T54] Bluetooth: hci0: command tx timeout
[   66.570120][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.573106][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.595063][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.598010][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.618478][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   66.629565][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.632372][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.648972][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.651953][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.661687][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.714142][ T5862] 8021q: adding VLAN 0 to HW filter on device team0
[   66.750102][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.752972][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.771940][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.774648][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.903764][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.975736][ T5852] veth0_vlan: entered promiscuous mode
[   67.004480][ T5852] veth1_vlan: entered promiscuous mode
[   67.048847][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.062978][ T5852] veth0_macvtap: entered promiscuous mode
[   67.082249][ T5852] veth1_macvtap: entered promiscuous mode
[   67.134792][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.150482][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.154284][ T5856] veth0_vlan: entered promiscuous mode
[   67.169846][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.189947][ T5856] veth1_vlan: entered promiscuous mode
[   67.196425][ T5722] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.204623][ T5722] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.218591][ T5722] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.236431][ T5722] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.265641][ T5862] veth0_vlan: entered promiscuous mode
[   67.287806][ T5862] veth1_vlan: entered promiscuous mode
[   67.293848][ T5856] veth0_macvtap: entered promiscuous mode
[   67.304307][ T5856] veth1_macvtap: entered promiscuous mode
[   67.356330][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.364844][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.379814][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.387148][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.400703][ T5880] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.406539][ T5880] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.424854][ T5880] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.428214][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.430482][ T5880] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.435298][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.455345][ T5862] veth0_macvtap: entered promiscuous mode
[   67.491515][ T5862] veth1_macvtap: entered promiscuous mode
[   67.534466][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.543380][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.597956][ T3558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.605999][ T3558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.612360][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.646208][ T5722] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.650084][ T5722] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.653767][ T5722] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.672092][ T5722] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.679539][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.688251][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.785538][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.789692][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.859493][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.862743][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.877447][ T5922] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'.
[   68.202519][ T5936] netlink: 'syz.1.5': attribute type 1 has an invalid length.
[   68.208085][ T5936] sit0: Master is either lo or non-ether device
[   68.258004][ T5938] Zero length message leads to an empty skb
[   68.442735][ T5945] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.459455][ T5944] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7'.
[   68.628279][   T54] Bluetooth: hci1: command tx timeout
[   68.630293][ T5855] Bluetooth: hci0: command tx timeout
[   68.632853][ T5855] Bluetooth: hci2: command tx timeout
[   69.344107][ T5988] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16'.
[   69.360498][ T5988] bridge0: port 3(erspan0) entered blocking state
[   69.373471][ T5988] bridge0: port 3(erspan0) entered disabled state
[   69.378745][ T5988] erspan0: entered allmulticast mode
[   69.391599][ T5988] erspan0: entered promiscuous mode
[   69.398721][ T5988] bridge0: port 3(erspan0) entered blocking state
[   69.401742][ T5988] bridge0: port 3(erspan0) entered forwarding state
[   69.465723][ T5990] syz.2.17 uses obsolete (PF_INET,SOCK_PACKET)
[   69.673749][ T5997] netlink: 56 bytes leftover after parsing attributes in process `syz.2.20'.
[   69.681255][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'.
[   69.695682][ T5997] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20'.
[   70.084172][ T6024] netlink: 'syz.1.31': attribute type 1 has an invalid length.
[   70.125589][ T6024] bridge0: port 3(vlan2) entered blocking state
[   70.129183][ T6024] bridge0: port 3(vlan2) entered disabled state
[   70.131822][ T6024] vlan2: entered allmulticast mode
[   70.133858][ T6024] bridge0: entered allmulticast mode
[   70.144413][ T6024] vlan2: left allmulticast mode
[   70.146537][ T6024] bridge0: left allmulticast mode
[   70.229084][ T6034] netlink: 36 bytes leftover after parsing attributes in process `syz.0.34'.
[   70.271547][ T6037] Bluetooth: MGMT ver 1.23
[   70.434856][ T6043] netlink: 40 bytes leftover after parsing attributes in process `syz.1.38'.
[   70.645749][ T6047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40'.
[   70.659761][ T6050] pim6reg1: entered promiscuous mode
[   70.662185][ T6050] pim6reg1: entered allmulticast mode
[   70.708463][ T5237] Bluetooth: hci1: command tx timeout
[   70.708514][   T54] Bluetooth: hci2: command tx timeout
[   70.710368][ T5237] Bluetooth: hci0: command tx timeout
[   70.794397][ T6059] netlink: 72 bytes leftover after parsing attributes in process `syz.1.42'.
[   71.051257][ T6061] syz.1.42: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   71.087272][ T6061] CPU: 1 UID: 0 PID: 6061 Comm: syz.1.42 Not tainted syzkaller #0 PREEMPT(full) 
[   71.087288][ T6061] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   71.087295][ T6061] Call Trace:
[   71.087308][ T6061]  <TASK>
[   71.087313][ T6061]  dump_stack_lvl+0x189/0x250
[   71.087332][ T6061]  ? __pfx_dump_stack_lvl+0x10/0x10
[   71.087341][ T6061]  ? __pfx__printk+0x10/0x10
[   71.087353][ T6061]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   71.087363][ T6061]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   71.087373][ T6061]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   71.087382][ T6061]  warn_alloc+0x214/0x310
[   71.087398][ T6061]  ? __pfx_warn_alloc+0x10/0x10
[   71.087414][ T6061]  ? __get_vm_area_node+0x28f/0x300
[   71.087425][ T6061]  ? xskq_create+0xbf/0x170
[   71.087440][ T6061]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   71.087464][ T6061]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   71.087477][ T6061]  ? __kasan_kmalloc+0x93/0xb0
[   71.087490][ T6061]  vmalloc_user_noprof+0xad/0xf0
[   71.087501][ T6061]  ? xskq_create+0xbf/0x170
[   71.087511][ T6061]  xskq_create+0xbf/0x170
[   71.087523][ T6061]  xsk_init_queue+0xb0/0x110
[   71.087535][ T6061]  xsk_setsockopt+0x57b/0x8d0
[   71.087547][ T6061]  ? __pfx_xsk_setsockopt+0x10/0x10
[   71.087557][ T6061]  ? __pfx_aa_sk_perm+0x10/0x10
[   71.087571][ T6061]  ? __fget_files+0x2a/0x420
[   71.087584][ T6061]  ? aa_sock_opt_perm+0xff/0x1b0
[   71.087593][ T6061]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[   71.087602][ T6061]  ? __pfx_xsk_setsockopt+0x10/0x10
[   71.087612][ T6061]  do_sock_setsockopt+0x17c/0x1b0
[   71.087624][ T6061]  __x64_sys_setsockopt+0x13f/0x1b0
[   71.087635][ T6061]  do_syscall_64+0xfa/0x3b0
[   71.087642][ T6061]  ? lockdep_hardirqs_on+0x9c/0x150
[   71.087653][ T6061]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.087660][ T6061]  ? exc_page_fault+0x9f/0xf0
[   71.087677][ T6061]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   71.087684][ T6061] RIP: 0033:0x7f318cd8ebe9
[   71.087694][ T6061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   71.087701][ T6061] RSP: 002b:00007f318db62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   71.087711][ T6061] RAX: ffffffffffffffda RBX: 00007f318cfc6180 RCX: 00007f318cd8ebe9
[   71.087716][ T6061] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000007
[   71.087721][ T6061] RBP: 00007f318ce11e19 R08: 0000000000000004 R09: 0000000000000000
[   71.087725][ T6061] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000
[   71.087730][ T6061] R13: 00007f318cfc6218 R14: 00007f318cfc6180 R15: 00007ffdd92ab2f8
[   71.087742][ T6061]  </TASK>
[   71.087746][ T6061] Mem-Info:
[   71.189109][ T6061] active_anon:7992 inactive_anon:0 isolated_anon:0
[   71.189109][ T6061]  active_file:1041 inactive_file:38223 isolated_file:0
[   71.189109][ T6061]  unevictable:1768 dirty:1421 writeback:0
[   71.189109][ T6061]  slab_reclaimable:9531 slab_unreclaimable:53337
[   71.189109][ T6061]  mapped:19083 shmem:5248 pagetables:985
[   71.189109][ T6061]  sec_pagetables:0 bounce:0
[   71.189109][ T6061]  kernel_misc_reclaimable:0
[   71.189109][ T6061]  free:296187 free_pcp:20041 free_cma:0
[   71.192339][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.213277][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.244498][ T6061] Node 0 active_anon:16912kB inactive_anon:0kB active_file:2596kB inactive_file:146772kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:45336kB dirty:4892kB writeback:0kB shmem:10416kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4368kB pagetables:2256kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   71.337692][ T6061] Node 1 active_anon:9616kB inactive_anon:0kB active_file:1568kB inactive_file:6120kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:26576kB dirty:792kB writeback:0kB shmem:4728kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7080kB pagetables:1684kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   71.385307][ T6061] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   71.406733][ T6061] lowmem_reserve[]: 0 811 811 811 811
[   71.409050][ T6061] Node 0 DMA32 free:273996kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11608kB inactive_anon:0kB active_file:2596kB inactive_file:146772kB unevictable:3536kB writepending:4892kB present:1556484kB managed:830928kB mlocked:0kB bounce:0kB free_pcp:32652kB local_pcp:19488kB free_cma:0kB
[   71.457132][ T6061] lowmem_reserve[]: 0 0 0 0 0
[   71.458901][ T6061] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[   71.481114][ T6061] lowmem_reserve[]: 0 0 854 854 854
[   71.483375][ T6061] Node 1 Normal free:450628kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9752kB inactive_anon:0kB active_file:1568kB inactive_file:6120kB unevictable:3536kB writepending:792kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:42316kB local_pcp:20128kB free_cma:0kB
[   71.543261][ T6061] lowmem_reserve[]: 0 0 0 0 0
[   71.545152][ T6061] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   71.572618][ T6061] Node 0 DMA32: 1311*4kB (UME) 544*8kB (UME) 167*16kB (UME) 16*32kB (UM) 22*64kB (UM) 8*128kB (UME) 5*256kB (UM) 6*512kB (ME) 6*1024kB (UME) 7*2048kB (ME) 57*4096kB (M) = 273516kB
[   71.580626][ T6061] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   71.586434][ T6061] Node 1 Normal: 71*4kB (M) 89*8kB (UM) 78*16kB (ME) 161*32kB (UME) 58*64kB (UME) 18*128kB (UM) 8*256kB (UM) 5*512kB (UM) 6*1024kB (UM) 6*2048kB (ME) 101*4096kB (M) = 450148kB
[   71.594046][ T6061] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   71.607536][ T6061] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   71.610314][ T6061] 41707 total pagecache pages
[   71.611767][ T6061] 0 pages in swap cache
[   71.614060][ T6061] Free swap  = 124996kB
[   71.615785][ T6061] Total swap = 124996kB
[   71.625962][ T6061] 786301 pages RAM
[   71.627856][ T6061] 0 pages HighMem/MovableOnly
[   71.629462][ T6061] 241337 pages reserved
[   71.631082][ T6061] 0 pages cma reserved
[   71.737702][ T6099] bridge0: entered promiscuous mode
[   71.739552][ T6099] macsec1: entered promiscuous mode
[   71.743054][ T6099] bridge0: port 4(macsec1) entered blocking state
[   71.745574][ T6099] bridge0: port 4(macsec1) entered disabled state
[   71.757071][ T6099] macsec1: entered allmulticast mode
[   71.760233][ T6099] bridge0: entered allmulticast mode
[   71.798823][ T6099] macsec1: left allmulticast mode
[   71.800865][ T6099] bridge0: left allmulticast mode
[   71.813537][ T6099] bridge0: left promiscuous mode
[   71.866192][ T6107] 8021q: VLANs not supported on vcan0
[   72.297049][ T6142] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.787412][ T5237] Bluetooth: hci2: command tx timeout
[   72.788078][ T5855] Bluetooth: hci1: command tx timeout
[   72.797027][ T5855] Bluetooth: hci0: command tx timeout
[   73.029725][ T6204] warning: `syz.1.77' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   73.055993][ T5296] udevd[5296]: worker [6077] terminated by signal 33 (Unknown signal 33)
[   73.062631][ T5296] udevd[5296]: worker [6077] failed while handling '/devices/virtual/block/loop0'
[   73.089413][ T6211] __nla_validate_parse: 14 callbacks suppressed
[   73.089426][ T6211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.79'.
[   73.158178][ T6215] netlink: 20 bytes leftover after parsing attributes in process `syz.1.80'.
[   73.396262][ T6236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.87'.
[   73.416352][ T6235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.85'.
[   73.434390][ T6236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.87'.
[   73.438784][ T6235] vlan2: entered allmulticast mode
[   73.440390][ T6235] veth1_to_hsr: entered allmulticast mode
[   73.442293][ T6235] bridge1: port 1(vlan2) entered blocking state
[   73.444551][ T6235] bridge1: port 1(vlan2) entered disabled state
[   73.448071][ T6235] vlan2: entered promiscuous mode
[   73.449900][ T6235] veth1_to_hsr: entered promiscuous mode
[   73.455687][ T6235] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[   73.608758][ T6244] IPVS: length: 29 != 8
[   73.684828][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.90'.
[   73.694228][ T6250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.90'.
[   73.766365][ T6250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.90'.
[   73.909029][ T6272] netlink: 36 bytes leftover after parsing attributes in process `syz.0.94'.
[   74.567431][ T6256] atomic_op ffff88811a971198 conn xmit_atomic 0000000000000000
[   74.714684][ T6305] netlink: 56 bytes leftover after parsing attributes in process `syz.2.103'.
[   74.978387][ T6323] netlink: 'syz.1.109': attribute type 1 has an invalid length.
[   74.980900][ T6323] netlink: 'syz.1.109': attribute type 1 has an invalid length.
[   75.101209][ T6323] netlink: 'syz.1.109': attribute type 1 has an invalid length.
[   75.135430][ T6323] 8021q: adding VLAN 0 to HW filter on device bond1
[   75.146116][ T6323] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[   75.153026][ T6323] bond1: (slave wlan0): Enslaving as an active interface with a down link
[   75.228274][ T6336] netlink: 'syz.1.112': attribute type 1 has an invalid length.
[   75.263979][ T6336] 8021q: adding VLAN 0 to HW filter on device bond2
[   76.188921][ T6356] tipc: Started in network mode
[   76.190859][ T6356] tipc: Node identity 867effd982be, cluster identity 4711
[   76.193488][ T6356] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.198665][ T6356] syzkaller0: entered promiscuous mode
[   76.200543][ T6356] syzkaller0: entered allmulticast mode
[   76.206344][ T6356] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   76.220649][ T6356] tipc: Resetting bearer <eth:syzkaller0>
[   76.224697][ T6355] tipc: Resetting bearer <eth:syzkaller0>
[   76.235464][ T6355] tipc: Disabling bearer <eth:syzkaller0>
[   76.267088][ T6358] tipc: Started in network mode
[   76.268975][ T6358] tipc: Node identity e633e041d48b, cluster identity 4711
[   76.272165][ T6358] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.275134][ T6358] syzkaller0: entered promiscuous mode
[   76.279661][ T6358] syzkaller0: entered allmulticast mode
[   76.291611][ T6358] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) !
[   76.303446][ T6357] tipc: Resetting bearer <eth:syzkaller0>
[   76.342479][ T6357] tipc: Disabling bearer <eth:syzkaller0>
[   76.415727][ T6367] netlink: 'syz.0.121': attribute type 22 has an invalid length.
[   76.421220][ T6368] netlink: 'syz.0.121': attribute type 22 has an invalid length.
[   76.458110][ T6368] netlink: 'syz.0.121': attribute type 22 has an invalid length.
[   76.458159][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   76.464758][ T6367] netlink: 'syz.0.121': attribute type 22 has an invalid length.
[   76.471819][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   76.491106][ T6371] batadv0: entered promiscuous mode
[   76.493489][ T6371] macsec1: entered promiscuous mode
[   76.507763][ T6371] batadv0: left promiscuous mode
[   76.525931][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   76.530175][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   76.654530][ T5296] udevd[5296]: worker [5853] terminated by signal 33 (Unknown signal 33)
[   76.660878][ T5296] udevd[5296]: worker [5853] failed while handling '/devices/virtual/block/loop0'
[   76.738626][ T6389] netlink: 'syz.0.128': attribute type 1 has an invalid length.
[   76.756132][ T6391] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   76.924711][ T6398] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.930926][ T6398] syzkaller0: entered promiscuous mode
[   76.933217][ T6398] syzkaller0: entered allmulticast mode
[   76.942937][ T6398] tipc: Resetting bearer <eth:syzkaller0>
[   76.952900][ T6397] tipc: Resetting bearer <eth:syzkaller0>
[   76.969698][ T6397] tipc: Disabling bearer <eth:syzkaller0>
[   76.997295][ T6408] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   77.004544][ T6410] netlink: 'syz.2.136': attribute type 10 has an invalid length.
[   77.022320][ T6410] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.026023][ T6410] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.035857][ T6410] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.039023][ T6410] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.042307][ T6410] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.044695][ T6410] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.056453][ T6410] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   77.065252][ T6411] bridge_slave_1: left allmulticast mode
[   77.077162][ T6411] bridge_slave_1: left promiscuous mode
[   77.081386][ T6411] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.095745][ T6411] bridge_slave_0: left allmulticast mode
[   77.102556][ T6411] bridge_slave_0: left promiscuous mode
[   77.104835][ T6411] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.128970][ T6411] bond0: (slave bridge0): Releasing backup interface
[   77.185700][ T6422] 8021q: adding VLAN 0 to HW filter on device bond1
[   77.205424][ T6422] bond1: (slave veth3): Enslaving as an active interface with a down link
[   77.243567][ T6422] gretap1: entered promiscuous mode
[   77.252661][ T6422] bond1: (slave gretap1): making interface the new active one
[   77.260784][ T6422] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   77.288329][ T6422] macvlan2: entered promiscuous mode
[   77.290493][ T6422] macvlan2: entered allmulticast mode
[   77.293355][ T6422] bond1: entered promiscuous mode
[   77.303718][ T6422] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   77.307513][ T6422] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   77.314626][ T6422] bond1: left promiscuous mode
[   77.356653][ T6427] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   77.473418][ T6427] openvswitch: netlink: Key type 29 is not supported
[   77.473822][ T6429] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   78.382532][ T6472] tipc: Started in network mode
[   78.384301][ T6472] tipc: Node identity 36613eab0e6f, cluster identity 4711
[   78.390753][ T6472] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.394304][ T6470] syzkaller0: entered promiscuous mode
[   78.396604][ T6470] syzkaller0: entered allmulticast mode
[   78.423533][ T6470] tipc: Resetting bearer <eth:syzkaller0>
[   78.441007][ T6470] tipc: Disabling bearer <eth:syzkaller0>
[   78.512172][ T6475] lo: entered allmulticast mode
[   78.524921][ T6475] dvmrp1: entered allmulticast mode
[   78.622108][ T6474] lo: left allmulticast mode
[   78.773227][ T6482] __nla_validate_parse: 18 callbacks suppressed
[   78.773247][ T6482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.155'.
[   78.877585][ T6484] bond1: (slave ip6gretap2): Enslaving as a backup interface with an up link
[   78.889576][ T5722] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   78.890136][ T6484] 8021q: adding VLAN 0 to HW filter on device bond1
[   78.914447][ T6488] netlink: 28 bytes leftover after parsing attributes in process `syz.0.157'.
[   79.000572][   T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   79.040352][ T6506] netlink: 248 bytes leftover after parsing attributes in process `syz.0.162'.
[   79.087623][ T6509] netlink: 76 bytes leftover after parsing attributes in process `syz.0.162'.
[   79.178937][ T6519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.163'.
[   79.189115][ T6519] vlan2: entered allmulticast mode
[   79.190778][ T6519] bond2: entered allmulticast mode
[   79.289160][ T6526] macsec1: entered promiscuous mode
[   79.290981][ T6526] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[   79.294570][ T6526] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[   79.431738][ T6532] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   79.434134][ T6532] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   79.676036][ T6549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.169'.
[   79.875468][ T6564] netlink: 56 bytes leftover after parsing attributes in process `syz.2.171'.
[   79.879768][ T6564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.171'.
[   79.897332][ T6564] netlink: 24 bytes leftover after parsing attributes in process `syz.2.171'.
[   80.025818][ T6580] netlink: 28 bytes leftover after parsing attributes in process `syz.0.174'.
[   80.113557][ T6585] validate_nla: 5 callbacks suppressed
[   80.113591][ T6585] netlink: 'syz.0.175': attribute type 1 has an invalid length.
[   80.121017][ T6585] netlink: 'syz.0.175': attribute type 1 has an invalid length.
[   80.224191][ T6585] netlink: 'syz.0.175': attribute type 1 has an invalid length.
[   80.244819][ T6585] 8021q: adding VLAN 0 to HW filter on device bond3
[   80.257560][ T6585] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[   80.271961][ T6585] bond3: (slave wlan0): Enslaving as an active interface with a down link
[   80.321741][ T6585] vlan2: entered allmulticast mode
[   80.323613][ T6585] veth1: entered allmulticast mode
[   80.326452][ T6585] veth1: entered promiscuous mode
[   80.331143][ T6585] veth1: left promiscuous mode
[   80.343760][ T6585] bond3: (slave vlan2): making interface the new active one
[   80.346527][ T6585] bond3: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[   80.355020][ T6585] veth1: entered promiscuous mode
[   80.357189][ T6585] vlan2: entered promiscuous mode
[   80.359429][ T6585] bond3: (slave vlan2): Enslaving as an active interface with an up link
[   80.497263][ T6609] erspan0: left allmulticast mode
[   80.499319][ T6609] erspan0: left promiscuous mode
[   80.501478][ T6609] bridge0: port 3(erspan0) entered disabled state
[   80.523643][ T6609] bridge_slave_1: left allmulticast mode
[   80.525967][ T6609] bridge_slave_1: left promiscuous mode
[   80.534042][ T6609] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.539997][ T6609] bridge_slave_0: left allmulticast mode
[   80.541906][ T6609] bridge_slave_0: left promiscuous mode
[   80.543857][ T6609] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.621277][ T6613] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.624093][ T6613] syzkaller0: entered promiscuous mode
[   80.625975][ T6613] syzkaller0: entered allmulticast mode
[   80.639600][ T6613] tipc: Resetting bearer <eth:syzkaller0>
[   80.646327][ T6612] tipc: Resetting bearer <eth:syzkaller0>
[   80.660182][ T6612] tipc: Disabling bearer <eth:syzkaller0>
[   81.329228][ T6654] bridge0: port 3(syz_tun) entered blocking state
[   81.331927][ T6654] bridge0: port 3(syz_tun) entered disabled state
[   81.367686][ T6654] syz_tun: entered allmulticast mode
[   81.370878][ T6654] syz_tun: entered promiscuous mode
[   81.373596][ T6654] bridge0: port 3(syz_tun) entered blocking state
[   81.376135][ T6654] bridge0: port 3(syz_tun) entered forwarding state
[   81.384816][ T6654] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   81.403083][ T6651] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   81.665902][ T6681] netlink: 'syz.1.197': attribute type 1 has an invalid length.
[   81.742047][ T6686] netlink: 'syz.2.198': attribute type 2 has an invalid length.
[   81.805037][ T6685] 8021q: adding VLAN 0 to HW filter on device bond4
[   81.818089][ T6685] bond3: (slave bond4): making interface the new active one
[   81.820889][ T6685] bond3: (slave bond4): Enslaving as an active interface with an up link
[   81.851760][ T6685] 8021q: adding VLAN 0 to HW filter on device bond3
[   81.895658][ T6693] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   82.133106][ T6706] netlink: 'syz.1.202': attribute type 10 has an invalid length.
[   82.159137][ T6706] team0: Port device dummy0 added
[   82.162513][ T6706] netlink: 'syz.1.202': attribute type 10 has an invalid length.
[   82.177775][ T6706] team0: Port device dummy0 removed
[   82.185067][ T6706] bond0: (slave dummy0): Enslaving as an active interface with an up link
[   82.461092][ T6722] netlink: 'syz.0.207': attribute type 1 has an invalid length.
[   82.489535][ T6722] 8021q: adding VLAN 0 to HW filter on device bond4
[   82.508846][ T6722] bond4: (slave bridge0): making interface the new active one
[   82.513054][ T6722] bond4: (slave bridge0): Enslaving as an active interface with an up link
[   82.526740][ T6722] bond4: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   82.791989][ T6730] netlink: 'syz.2.209': attribute type 10 has an invalid length.
[   82.794460][ T6730] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   82.879061][ T6733] netlink: 'syz.1.210': attribute type 4 has an invalid length.
[   83.184892][ T6746] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[   83.510997][ T6756] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.514356][ T6756] syzkaller0: entered promiscuous mode
[   83.522278][ T6756] syzkaller0: entered allmulticast mode
[   83.557387][ T6756] tipc: Resetting bearer <eth:syzkaller0>
[   83.577219][ T6755] tipc: Resetting bearer <eth:syzkaller0>
[   83.620919][ T6755] tipc: Disabling bearer <eth:syzkaller0>
[   84.049989][ T6788] lo: entered allmulticast mode
[   84.056314][ T6788] dvmrp8: entered allmulticast mode
[   84.114600][ T6788] lo: left allmulticast mode
[   84.116587][ T6788] dvmrp8: left allmulticast mode
[   84.620516][ T6797] __nla_validate_parse: 21 callbacks suppressed
[   84.620534][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.227'.
[   84.630436][ T6797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.227'.
[   84.795511][ T6805] netlink: 224 bytes leftover after parsing attributes in process `syz.1.230'.
[   84.924865][ T6815] netlink: 56 bytes leftover after parsing attributes in process `syz.1.233'.
[   84.930768][ T6815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'.
[   84.935543][ T6815] netlink: 24 bytes leftover after parsing attributes in process `syz.1.233'.
[   85.043791][ T6820] netlink: 56 bytes leftover after parsing attributes in process `syz.1.234'.
[   85.048785][ T6820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'.
[   85.281520][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.238'.
[   85.286526][ T6835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.238'.
[   85.456123][ T6845] validate_nla: 5 callbacks suppressed
[   85.456134][ T6845] netlink: 'syz.0.242': attribute type 1 has an invalid length.
[   85.478669][ T6845] 8021q: adding VLAN 0 to HW filter on device bond5
[   85.540711][ T6845] bond5: (slave bridge2): making interface the new active one
[   85.545052][ T6845] bond5: (slave bridge2): Enslaving as an active interface with an up link
[   85.564249][ T6845] bond5: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   85.864922][ T6861] netlink: 'syz.0.246': attribute type 1 has an invalid length.
[   86.341834][ T6878] vlan0: entered promiscuous mode
[   86.343740][ T6878] bond0: entered promiscuous mode
[   86.345595][ T6878] bond_slave_0: entered promiscuous mode
[   86.347627][ T6878] bond_slave_1: entered promiscuous mode
[   86.349810][ T6878] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[   86.550842][   T24] cfg80211: failed to load regulatory.db
[   87.827121][ T5855] Bluetooth: hci2: command tx timeout
[   87.936592][ T6941] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.013900][ T6941] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.092960][ T6941] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.166421][ T6941] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.262905][ T5880] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.276497][ T5880] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.290690][ T5880] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.303690][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.362057][ T6944] netlink: 'syz.2.267': attribute type 1 has an invalid length.
[   88.396322][ T6944] 8021q: adding VLAN 0 to HW filter on device bond2
[   88.418489][ T6944] bond2: (slave bridge1): making interface the new active one
[   88.423200][ T6944] bond2: (slave bridge1): Enslaving as an active interface with an up link
[   88.439284][ T6944] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   89.004115][ T6969] netlink: 'syz.0.275': attribute type 1 has an invalid length.
[   89.025387][ T6969] 8021q: adding VLAN 0 to HW filter on device bond6
[   89.041389][ T6969] bond6: (slave bridge3): making interface the new active one
[   89.045178][ T6969] bond6: (slave bridge3): Enslaving as an active interface with an up link
[   89.057870][ T6969] bond6: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   89.579834][ T7004] tipc: Enabled bearer <eth:macvtap0>, priority 10
[   89.651070][ T7004] hsr_slave_1 (unregistering): left promiscuous mode
[   89.663440][ T7008] tipc: Enabling of bearer <eth:macvtap0> rejected, already enabled
[   89.826219][ T7020] netlink: zone id is out of range
[   89.833169][ T7020] netlink: zone id is out of range
[   89.835208][ T7020] netlink: zone id is out of range
[   89.841252][ T7020] netlink: zone id is out of range
[   89.845330][ T7020] netlink: zone id is out of range
[   89.848266][ T7020] netlink: zone id is out of range
[   89.850585][ T7020] netlink: zone id is out of range
[   89.853157][ T7020] netlink: zone id is out of range
[   89.855562][ T7020] netlink: zone id is out of range
[   89.858379][ T7020] netlink: zone id is out of range
[   89.935826][ T7023] __nla_validate_parse: 23 callbacks suppressed
[   89.935840][ T7023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.284'.
[   90.085862][ T7036] netlink: 76 bytes leftover after parsing attributes in process `syz.2.289'.
[   90.184863][ T7041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.292'.
[   90.194287][ T7041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.292'.
[   90.258138][ T7048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'.
[   90.278740][ T5296] udevd[5296]: worker [6075] terminated by signal 33 (Unknown signal 33)
[   90.282176][ T5296] udevd[5296]: worker [6075] failed while handling '/devices/virtual/block/loop0'
[   90.422456][ T7050] netlink: 28 bytes leftover after parsing attributes in process `syz.2.291'.
[   90.558829][ T7064] bridge0: entered allmulticast mode
[   90.660861][   T13] bond4: (slave bridge0): link status definitely down, disabling slave
[   90.665575][   T13] bond4: now running without any active interface!
[   90.698473][ T7074] netlink: 'syz.0.299': attribute type 39 has an invalid length.
[   90.708157][ T5889] tipc: Node number set to 79757273
[   90.891195][ T7082] netlink: 'syz.0.302': attribute type 1 has an invalid length.
[   90.919854][ T7082] 8021q: adding VLAN 0 to HW filter on device bond7
[   90.933503][ T7082] bond7: (slave bridge4): making interface the new active one
[   90.937430][ T7082] bond7: (slave bridge4): Enslaving as an active interface with an up link
[   90.949452][ T7082] bond7: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   91.104890][ T7096] netlink: 24 bytes leftover after parsing attributes in process `syz.0.305'.
[   91.249339][ T7105] netlink: 56 bytes leftover after parsing attributes in process `syz.0.309'.
[   91.252411][ T7110] netlink: 24 bytes leftover after parsing attributes in process `syz.2.310'.
[   91.255075][ T7105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.309'.
[   91.333424][ T7119] netlink: 'syz.0.314': attribute type 1 has an invalid length.
[   91.341498][ T7121] netlink: 'syz.2.315': attribute type 1 has an invalid length.
[   91.342216][ T7119] netlink: 'syz.0.314': attribute type 1 has an invalid length.
[   91.363025][ T7119] netlink: 'syz.0.314': attribute type 1 has an invalid length.
[   91.368413][ T7121] 8021q: adding VLAN 0 to HW filter on device bond3
[   91.391289][ T7119] 8021q: adding VLAN 0 to HW filter on device bond8
[   91.404521][ T7121] 8021q: adding VLAN 0 to HW filter on device bond3
[   91.407291][ T7121] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[   91.411922][ T7121] bond3: (slave vxcan3): Error -95 calling set_mac_address
[   91.421463][ T7119] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[   91.438954][ T7124] veth3: entered promiscuous mode
[   91.448179][ T7124] bond3: (slave veth3): Enslaving as an active interface with a down link
[   91.461865][ T7121] erspan0: entered allmulticast mode
[   91.473379][ T7121] bond3: (slave erspan0): making interface the new active one
[   91.476465][ T7121] bond3: (slave erspan0): Enslaving as an active interface with an up link
[   91.541176][ T7132] Driver unsupported XDP return value 0 on prog  (id 99) dev N/A, expect packet loss!
[   91.579720][ T5880] vlan2: left promiscuous mode
[   91.724012][ T7157] netlink: 'syz.0.326': attribute type 1 has an invalid length.
[   91.780281][ T7157] 8021q: adding VLAN 0 to HW filter on device bond9
[   91.807871][ T7157] bond9: (slave bridge5): making interface the new active one
[   91.812253][ T7157] bond9: (slave bridge5): Enslaving as an active interface with an up link
[   91.830567][ T7157] bond9: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   92.719966][ T5880] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   92.723171][ T5880] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   92.727264][ T5880] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   92.730445][ T5880] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   93.336032][ T7219] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.340751][ T7219] batadv_slave_0: entered promiscuous mode
[   93.352735][ T7219] trusted_key: syz.0.340 sent an empty control message without MSG_MORE.
[   93.414319][ T7221] netlink: 'syz.0.341': attribute type 1 has an invalid length.
[   93.436452][ T7221] 8021q: adding VLAN 0 to HW filter on device bond10
[   93.453412][ T7221] 8021q: adding VLAN 0 to HW filter on device bond10
[   93.456158][ T7221] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address
[   93.460726][ T7221] bond10: (slave vxcan3): Error -95 calling set_mac_address
[   93.509177][ T7223] veth5: entered promiscuous mode
[   93.515593][ T7223] bond10: (slave veth5): Enslaving as an active interface with a down link
[   93.531733][ T7221] 8021q: adding VLAN 0 to HW filter on device bond10
[   93.622201][ T7236] netlink: 'syz.0.345': attribute type 1 has an invalid length.
[   93.649156][ T7236] 8021q: adding VLAN 0 to HW filter on device bond11
[   93.680894][ T7236] bond11: (slave bridge6): making interface the new active one
[   93.688998][ T7236] bond11: (slave bridge6): Enslaving as an active interface with an up link
[   93.710196][ T7236] bond11: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   94.116567][ T7279] tipc: MTU too low for tipc bearer
[   94.156479][ T7277] delete_channel: no stack
[   94.263706][ T7292] netlink: 'syz.2.362': attribute type 4 has an invalid length.
[   94.557734][ T7313] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   94.959406][ T7344] __nla_validate_parse: 26 callbacks suppressed
[   94.959419][ T7344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.374'.
[   94.978386][ T7346] netlink: 56 bytes leftover after parsing attributes in process `syz.2.375'.
[   94.981470][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.375'.
[   94.994647][ T7346] netlink: 24 bytes leftover after parsing attributes in process `syz.2.375'.
[   95.101440][ T7353] netlink: 56 bytes leftover after parsing attributes in process `syz.2.378'.
[   95.104587][ T7353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.378'.
[   95.308235][ T7364] 8021q: adding VLAN 0 to HW filter on device bond4
[   95.333502][ T7364] bond4: (slave bridge2): making interface the new active one
[   95.337186][ T7364] bond4: (slave bridge2): Enslaving as an active interface with an up link
[   95.351154][ T7364] bond4: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   95.682990][ T7380] netlink: 24 bytes leftover after parsing attributes in process `syz.2.384'.
[   95.846279][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.388'.
[   95.853500][ T7391] macvlan2: entered promiscuous mode
[   95.864355][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.388'.
[   95.873370][ T7395] macvlan3: entered promiscuous mode
[   96.004170][ T7406] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.010658][ T7406] syzkaller0: entered promiscuous mode
[   96.012717][ T7406] syzkaller0: entered allmulticast mode
[   96.018193][ T7408] netlink: 224 bytes leftover after parsing attributes in process `syz.0.393'.
[   96.020033][ T7406] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   96.039050][ T7406] tipc: Resetting bearer <eth:syzkaller0>
[   96.054447][ T7405] tipc: Resetting bearer <eth:syzkaller0>
[   96.055922][ T7408] validate_nla: 2 callbacks suppressed
[   96.055933][ T7408] netlink: 'syz.0.393': attribute type 1 has an invalid length.
[   96.072036][ T7405] tipc: Disabling bearer <eth:syzkaller0>
[   96.378449][ T7421] netlink: 'syz.0.396': attribute type 8 has an invalid length.
[   96.553386][ T7435] netlink: 'syz.2.401': attribute type 3 has an invalid length.
[   97.382948][ T7452] net_ratelimit: 13 callbacks suppressed
[   97.382988][ T7452] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.273508][ T7468] netlink: 'syz.2.410': attribute type 21 has an invalid length.
[   98.276655][ T7468] netlink: 'syz.2.410': attribute type 4 has an invalid length.
[   98.282252][ T7468] netlink: 'syz.2.410': attribute type 5 has an invalid length.
[   98.327172][ T7477] netlink: 'syz.1.413': attribute type 7 has an invalid length.
[   98.343925][ T7468] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   98.388312][ T7477] 8021q: adding VLAN 0 to HW filter on device bond5
[   98.391565][ T7477] bridge5: port 1(bond5) entered blocking state
[   98.394165][ T7477] bridge5: port 1(bond5) entered disabled state
[   98.399689][ T7477] bond5: entered allmulticast mode
[   98.405480][ T7477] bridge5: port 1(bond5) entered blocking state
[   98.408813][ T7477] bridge5: port 1(bond5) entered forwarding state
[   98.442029][   T27] bridge5: port 1(bond5) entered disabled state
[   98.529781][ T7495] netlink: 'syz.1.417': attribute type 1 has an invalid length.
[   98.554711][ T7495] 8021q: adding VLAN 0 to HW filter on device bond6
[   98.575909][ T7495] bond6: (slave bridge6): making interface the new active one
[   98.579835][ T7495] bond6: (slave bridge6): Enslaving as an active interface with an up link
[   98.592608][ T7495] bond6: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   99.429165][ T7526] netlink: 'syz.0.426': attribute type 1 has an invalid length.
[   99.453786][ T7526] 8021q: adding VLAN 0 to HW filter on device bond12
[   99.470426][ T7526] bond12: (slave bridge8): making interface the new active one
[   99.478203][ T7526] bond12: (slave bridge8): Enslaving as an active interface with an up link
[   99.491930][ T7526] bond12: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  101.052623][ T7563] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  101.072299][ T7563] tipc: Disabling bearer <eth:syzkaller0>
[  101.081239][ T7566] netlink: 'syz.2.436': attribute type 21 has an invalid length.
[  101.084192][ T7566] __nla_validate_parse: 17 callbacks suppressed
[  101.084206][ T7566] netlink: 128 bytes leftover after parsing attributes in process `syz.2.436'.
[  101.096048][ T7566] netlink: 'syz.2.436': attribute type 4 has an invalid length.
[  101.099083][ T7566] netlink: 'syz.2.436': attribute type 5 has an invalid length.
[  101.101887][ T7566] netlink: 3 bytes leftover after parsing attributes in process `syz.2.436'.
[  101.109184][ T7566] netlink: 56 bytes leftover after parsing attributes in process `syz.2.436'.
[  101.113604][ T7566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.436'.
[  101.121030][ T7566] netlink: 24 bytes leftover after parsing attributes in process `syz.2.436'.
[  101.130246][ T7568] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  101.225748][ T7580] netlink: 72 bytes leftover after parsing attributes in process `syz.1.441'.
[  101.231945][ T7581] netlink: 72 bytes leftover after parsing attributes in process `syz.1.441'.
[  101.241484][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.441'.
[  101.281332][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  101.290104][ T7583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.440'.
[  101.373636][ T7591] netlink: 'syz.1.443': attribute type 1 has an invalid length.
[  101.401461][ T7591] bond7: (slave vcan1): The slave device specified does not support setting the MAC address
[  101.405200][ T7591] bond7: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  101.410596][ T7591] bond7: (slave vcan1): making interface the new active one
[  101.413848][ T7591] bond7: (slave vcan1): Enslaving as an active interface with an up link
[  101.424013][ T7591] bond7: (slave vcan2): The slave device specified does not support setting the MAC address
[  101.432956][ T7591] bond7: (slave vcan2): Enslaving as a backup interface with an up link
[  101.495764][ T7595] 8021q: adding VLAN 0 to HW filter on device bond7
[  102.169145][ T7602] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  102.172615][ T7602] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.249614][ T7602] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  102.253119][ T7602] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.333701][ T7602] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  102.337887][ T7602] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.421118][ T7602] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  102.425300][ T7602] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.496537][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  102.500593][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  102.523484][ T5880] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  102.526785][ T5880] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  102.541039][ T5880] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  102.544635][ T5880] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  102.563130][ T6946] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  102.569618][ T6946] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  102.576222][ T7602] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  102.580264][ T7602] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.590589][ T6946] ==================================================================
[  102.593832][ T6946] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350
[  102.596788][ T6946] Read of size 8 at addr ffff8881100950b0 by task kworker/u8:4/6946
[  102.600097][ T6946] 
[  102.601209][ T6946] CPU: 0 UID: 0 PID: 6946 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  102.601221][ T6946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  102.601227][ T6946] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  102.601243][ T6946] Call Trace:
[  102.601250][ T6946]  <TASK>
[  102.601256][ T6946]  dump_stack_lvl+0x189/0x250
[  102.601270][ T6946]  ? __kasan_check_byte+0x12/0x40
[  102.601282][ T6946]  ? __pfx_dump_stack_lvl+0x10/0x10
[  102.601291][ T6946]  ? lock_release+0x4b/0x3e0
[  102.601303][ T6946]  ? __virt_addr_valid+0x4a5/0x5c0
[  102.601313][ T6946]  print_report+0xca/0x240
[  102.601322][ T6946]  ? __mutex_lock+0x147/0x1350
[  102.601328][ T6946]  kasan_report+0x118/0x150
[  102.601338][ T6946]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  102.601349][ T6946]  ? __mutex_lock+0x147/0x1350
[  102.601356][ T6946]  __mutex_lock+0x147/0x1350
[  102.601363][ T6946]  ? __mutex_lock+0x5bb/0x1350
[  102.601370][ T6946]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  102.601381][ T6946]  ? __pfx___mutex_lock+0x10/0x10
[  102.601388][ T6946]  ? __lock_acquire+0xab9/0xd20
[  102.601401][ T6946]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  102.601413][ T6946]  ? process_scheduled_works+0x9ef/0x17b0
[  102.601420][ T6946]  ? process_scheduled_works+0x9ef/0x17b0
[  102.601427][ T6946]  process_scheduled_works+0xae1/0x17b0
[  102.601438][ T6946]  ? __pfx_process_scheduled_works+0x10/0x10
[  102.601448][ T6946]  worker_thread+0x8a0/0xda0
[  102.601456][ T6946]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  102.601472][ T6946]  ? __kthread_parkme+0x7b/0x200
[  102.601481][ T6946]  kthread+0x711/0x8a0
[  102.601491][ T6946]  ? __pfx_worker_thread+0x10/0x10
[  102.601497][ T6946]  ? __pfx_kthread+0x10/0x10
[  102.601506][ T6946]  ? _raw_spin_unlock_irq+0x23/0x50
[  102.601515][ T6946]  ? lockdep_hardirqs_on+0x9c/0x150
[  102.601526][ T6946]  ? __pfx_kthread+0x10/0x10
[  102.601556][ T6946]  ret_from_fork+0x3fc/0x770
[  102.601565][ T6946]  ? __pfx_ret_from_fork+0x10/0x10
[  102.601573][ T6946]  ? __switch_to_asm+0x39/0x70
[  102.601582][ T6946]  ? __switch_to_asm+0x33/0x70
[  102.601591][ T6946]  ? __pfx_kthread+0x10/0x10
[  102.601600][ T6946]  ret_from_fork_asm+0x1a/0x30
[  102.601612][ T6946]  </TASK>
[  102.601615][ T6946] 
[  102.671391][ T6946] Allocated by task 7602:
[  102.672776][ T6946]  kasan_save_track+0x3e/0x80
[  102.674258][ T6946]  __kasan_kmalloc+0x93/0xb0
[  102.675756][ T6946]  __kmalloc_noprof+0x27a/0x4f0
[  102.677308][ T6946]  udp_tunnel_nic_netdevice_event+0x854/0x19f0
[  102.679492][ T6946]  notifier_call_chain+0x1b6/0x3e0
[  102.681092][ T6946]  register_netdevice+0x1608/0x1ae0
[  102.682737][ T6946]  nsim_create+0xae8/0xf10
[  102.684123][ T6946]  __nsim_dev_port_add+0x6b6/0xb10
[  102.685702][ T6946]  nsim_dev_port_add_all+0x37/0xf0
[  102.687324][ T6946]  nsim_dev_reload_up+0x451/0x780
[  102.688945][ T6946]  devlink_reload+0x4ec/0x8d0
[  102.690455][ T6946]  devlink_nl_reload_doit+0x9c2/0xd50
[  102.692235][ T6946]  genl_family_rcv_msg_doit+0x215/0x300
[  102.694039][ T6946]  genl_rcv_msg+0x60e/0x790
[  102.695761][ T6946]  netlink_rcv_skb+0x208/0x470
[  102.697369][ T6946]  genl_rcv+0x28/0x40
[  102.698655][ T6946]  netlink_unicast+0x82f/0x9e0
[  102.700173][ T6946]  netlink_sendmsg+0x805/0xb30
[  102.701775][ T6946]  __sock_sendmsg+0x21c/0x270
[  102.703293][ T6946]  ____sys_sendmsg+0x505/0x830
[  102.704927][ T6946]  ___sys_sendmsg+0x21f/0x2a0
[  102.706426][ T6946]  __x64_sys_sendmsg+0x19b/0x260
[  102.708025][ T6946]  do_syscall_64+0xfa/0x3b0
[  102.709487][ T6946]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.711340][ T6946] 
[  102.712114][ T6946] Freed by task 7602:
[  102.713367][ T6946]  kasan_save_track+0x3e/0x80
[  102.714900][ T6946]  kasan_save_free_info+0x46/0x50
[  102.716503][ T6946]  __kasan_slab_free+0x5b/0x80
[  102.718057][ T6946]  kfree+0x18e/0x440
[  102.719312][ T6946]  udp_tunnel_nic_netdevice_event+0x1332/0x19f0
[  102.721237][ T6946]  notifier_call_chain+0x1b6/0x3e0
[  102.722800][ T6946]  unregister_netdevice_many_notify+0x14d7/0x1ff0
[  102.724783][ T6946]  unregister_netdevice_queue+0x33c/0x380
[  102.726539][ T6946]  nsim_destroy+0x1dd/0x670
[  102.727927][ T6946]  __nsim_dev_port_del+0x14d/0x1b0
[  102.729505][ T6946]  nsim_dev_reload_destroy+0x288/0x490
[  102.731265][ T6946]  nsim_dev_reload_down+0x8a/0xc0
[  102.732877][ T6946]  devlink_reload+0x1b6/0x8d0
[  102.734341][ T6946]  devlink_nl_reload_doit+0x9c2/0xd50
[  102.735978][ T6946]  genl_family_rcv_msg_doit+0x215/0x300
[  102.737703][ T6946]  genl_rcv_msg+0x60e/0x790
[  102.739149][ T6946]  netlink_rcv_skb+0x208/0x470
[  102.740711][ T6946]  genl_rcv+0x28/0x40
[  102.741980][ T6946]  netlink_unicast+0x82f/0x9e0
[  102.743499][ T6946]  netlink_sendmsg+0x805/0xb30
[  102.745005][ T6946]  __sock_sendmsg+0x21c/0x270
[  102.746444][ T6946]  ____sys_sendmsg+0x505/0x830
[  102.747913][ T6946]  ___sys_sendmsg+0x21f/0x2a0
[  102.749362][ T6946]  __x64_sys_sendmsg+0x19b/0x260
[  102.750954][ T6946]  do_syscall_64+0xfa/0x3b0
[  102.752459][ T6946]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.754255][ T6946] 
[  102.755045][ T6946] Last potentially related work creation:
[  102.756851][ T6946]  kasan_save_stack+0x3e/0x60
[  102.758376][ T6946]  kasan_record_aux_stack+0xbd/0xd0
[  102.759980][ T6946]  insert_work+0x3d/0x330
[  102.761331][ T6946]  __queue_work+0xbaf/0xfb0
[  102.762755][ T6946]  queue_work_on+0x181/0x270
[  102.764203][ T6946]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  102.766000][ T6946]  udp_tunnel_push_rx_port+0x180/0x200
[  102.767707][ T6946]  geneve_offload_rx_ports+0xd7/0x160
[  102.769325][ T6946]  geneve_netdevice_event+0x6a/0x80
[  102.770901][ T6946]  notifier_call_chain+0x1b6/0x3e0
[  102.772644][ T6946]  call_netdevice_notifiers+0x88/0xc0
[  102.774482][ T6946]  udp_tunnel_nic_netdevice_event+0x134d/0x19f0
[  102.776478][ T6946]  notifier_call_chain+0x1b6/0x3e0
[  102.778038][ T6946]  register_netdevice+0x1608/0x1ae0
[  102.779664][ T6946]  nsim_create+0xae8/0xf10
[  102.781086][ T6946]  __nsim_dev_port_add+0x6b6/0xb10
[  102.782725][ T6946]  nsim_dev_port_add_all+0x37/0xf0
[  102.784406][ T6946]  nsim_dev_reload_up+0x451/0x780
[  102.785981][ T6946]  devlink_reload+0x4ec/0x8d0
[  102.787427][ T6946]  devlink_nl_reload_doit+0x9c2/0xd50
[  102.789068][ T6946]  genl_family_rcv_msg_doit+0x215/0x300
[  102.790852][ T6946]  genl_rcv_msg+0x60e/0x790
[  102.792231][ T6946]  netlink_rcv_skb+0x208/0x470
[  102.793732][ T6946]  genl_rcv+0x28/0x40
[  102.795006][ T6946]  netlink_unicast+0x82f/0x9e0
[  102.796498][ T6946]  netlink_sendmsg+0x805/0xb30
[  102.798024][ T6946]  __sock_sendmsg+0x21c/0x270
[  102.799555][ T6946]  ____sys_sendmsg+0x505/0x830
[  102.801045][ T6946]  ___sys_sendmsg+0x21f/0x2a0
[  102.802556][ T6946]  __x64_sys_sendmsg+0x19b/0x260
[  102.804379][ T6946]  do_syscall_64+0xfa/0x3b0
[  102.806321][ T6946]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.808703][ T6946] 
[  102.809740][ T6946] Second to last potentially related work creation:
[  102.812366][ T6946]  kasan_save_stack+0x3e/0x60
[  102.814199][ T6946]  kasan_record_aux_stack+0xbd/0xd0
[  102.816498][ T6946]  insert_work+0x3d/0x330
[  102.818321][ T6946]  __queue_work+0xcd2/0xfb0
[  102.820315][ T6946]  queue_work_on+0x181/0x270
[  102.822253][ T6946]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  102.824762][ T6946]  udp_tunnel_push_rx_port+0x180/0x200
[  102.827000][ T6946]  vxlan_offload_rx_ports+0x139/0x200
[  102.829306][ T6946]  vxlan_netdevice_event+0x111/0x470
[  102.831611][ T6946]  notifier_call_chain+0x1b6/0x3e0
[  102.833865][ T6946]  call_netdevice_notifiers+0x88/0xc0
[  102.836035][ T6946]  udp_tunnel_nic_netdevice_event+0x134d/0x19f0
[  102.838832][ T6946]  notifier_call_chain+0x1b6/0x3e0
[  102.840988][ T6946]  register_netdevice+0x1608/0x1ae0
[  102.843451][ T6946]  nsim_create+0xae8/0xf10
[  102.845492][ T6946]  __nsim_dev_port_add+0x6b6/0xb10
[  102.847681][ T6946]  nsim_dev_port_add_all+0x37/0xf0
[  102.849788][ T6946]  nsim_dev_reload_up+0x451/0x780
[  102.851400][ T6946]  devlink_reload+0x4ec/0x8d0
[  102.852867][ T6946]  devlink_nl_reload_doit+0x9c2/0xd50
[  102.854787][ T6946]  genl_family_rcv_msg_doit+0x215/0x300
[  102.856831][ T6946]  genl_rcv_msg+0x60e/0x790
[  102.858280][ T6946]  netlink_rcv_skb+0x208/0x470
[  102.859832][ T6946]  genl_rcv+0x28/0x40
[  102.861077][ T6946]  netlink_unicast+0x82f/0x9e0
[  102.862604][ T6946]  netlink_sendmsg+0x805/0xb30
[  102.864094][ T6946]  __sock_sendmsg+0x21c/0x270
[  102.865603][ T6946]  ____sys_sendmsg+0x505/0x830
[  102.867119][ T6946]  ___sys_sendmsg+0x21f/0x2a0
[  102.868616][ T6946]  __x64_sys_sendmsg+0x19b/0x260
[  102.870175][ T6946]  do_syscall_64+0xfa/0x3b0
[  102.871657][ T6946]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.873565][ T6946] 
[  102.874487][ T6946] The buggy address belongs to the object at ffff888110095000
[  102.874487][ T6946]  which belongs to the cache kmalloc-256 of size 256
[  102.879439][ T6946] The buggy address is located 176 bytes inside of
[  102.879439][ T6946]  freed 256-byte region [ffff888110095000, ffff888110095100)
[  102.884397][ T6946] 
[  102.885190][ T6946] The buggy address belongs to the physical page:
[  102.887227][ T6946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110094
[  102.890026][ T6946] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  102.892666][ T6946] ksm flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  102.895331][ T6946] page_type: f5(slab)
[  102.896851][ T6946] raw: 057ff00000000040 ffff88801a441b40 ffffea0004570a80 dead000000000003
[  102.899530][ T6946] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  102.902185][ T6946] head: 057ff00000000040 ffff88801a441b40 ffffea0004570a80 dead000000000003
[  102.905197][ T6946] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  102.908786][ T6946] head: 057ff00000000001 ffffea0004402501 00000000ffffffff 00000000ffffffff
[  102.912239][ T6946] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  102.915989][ T6946] page dumped because: kasan: bad access detected
[  102.918589][ T6946] page_owner tracks the page as allocated
[  102.920847][ T6946] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5852, tgid 5852 (syz-executor), ts 66721421852, free_ts 66695865402
[  102.929628][ T6946]  post_alloc_hook+0x240/0x2a0
[  102.931569][ T6946]  get_page_from_freelist+0x21e4/0x22c0
[  102.934055][ T6946]  __alloc_frozen_pages_noprof+0x181/0x370
[  102.936626][ T6946]  alloc_pages_mpol+0x232/0x4a0
[  102.938693][ T6946]  allocate_slab+0x8a/0x370
[  102.940566][ T6946]  ___slab_alloc+0xbeb/0x1410
[  102.942554][ T6946]  __kmalloc_noprof+0x305/0x4f0
[  102.944633][ T6946]  fib_create_info+0x1728/0x3210
[  102.946567][ T6946]  fib_table_insert+0xc6/0x1b50
[  102.948651][ T6946]  fib_magic+0x2c4/0x390
[  102.950323][ T6946]  fib_add_ifaddr+0x144/0x5f0
[  102.952377][ T6946]  fib_inetaddr_event+0x12e/0x190
[  102.954417][ T6946]  notifier_call_chain+0x1b6/0x3e0
[  102.956557][ T6946]  blocking_notifier_call_chain+0x6a/0x90
[  102.958909][ T6946]  __inet_insert_ifa+0xa13/0xbf0
[  102.961168][ T6946]  inet_rtm_newaddr+0xf3a/0x18b0
[  102.963184][ T6946] page last free pid 5862 tgid 5862 stack trace:
[  102.965879][ T6946]  __free_frozen_pages+0xbc4/0xd30
[  102.967921][ T6946]  __slab_free+0x303/0x3c0
[  102.969968][ T6946]  qlist_free_all+0x97/0x140
[  102.971924][ T6946]  kasan_quarantine_reduce+0x148/0x160
[  102.974384][ T6946]  __kasan_slab_alloc+0x22/0x80
[  102.976634][ T6946]  __kmalloc_cache_noprof+0x1be/0x3d0
[  102.978885][ T6946]  netdevice_event+0x3a1/0x8a0
[  102.981040][ T6946]  notifier_call_chain+0x1b6/0x3e0
[  102.983088][ T6946]  __dev_notify_flags+0x18d/0x2e0
[  102.985486][ T6946]  netif_change_flags+0xe8/0x1a0
[  102.987562][ T6946]  do_setlink+0xc55/0x41c0
[  102.989059][ T6946]  rtnl_newlink+0x160b/0x1c70
[  102.990703][ T6946]  rtnetlink_rcv_msg+0x7cf/0xb70
[  102.992417][ T6946]  netlink_rcv_skb+0x208/0x470
[  102.994316][ T6946]  netlink_unicast+0x82f/0x9e0
[  102.996280][ T6946]  netlink_sendmsg+0x805/0xb30
[  102.997920][ T6946] 
[  102.998751][ T6946] Memory state around the buggy address:
[  103.000667][ T6946]  ffff888110094f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  103.003326][ T6946]  ffff888110095000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  103.006056][ T6946] >ffff888110095080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  103.008824][ T6946]                                      ^
[  103.010751][ T6946]  ffff888110095100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  103.013467][ T6946]  ffff888110095180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  103.017017][ T6946] ==================================================================
[  103.035228][ T6946] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  103.038547][ T6946] CPU: 0 UID: 0 PID: 6946 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  103.042818][ T6946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  103.047438][ T6946] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  103.050593][ T6946] Call Trace:
[  103.052248][ T6946]  <TASK>
[  103.053643][ T6946]  dump_stack_lvl+0x99/0x250
[  103.055728][ T6946]  ? __asan_memcpy+0x40/0x70
[  103.057623][ T6946]  ? __pfx_dump_stack_lvl+0x10/0x10
[  103.059809][ T6946]  ? __pfx__printk+0x10/0x10
[  103.061777][ T6946]  vpanic+0x281/0x750
[  103.063377][ T6946]  ? preempt_schedule+0xae/0xc0
[  103.065570][ T6946]  ? __pfx_vpanic+0x10/0x10
[  103.067375][ T6946]  ? preempt_schedule_common+0x83/0xd0
[  103.069753][ T6946]  ? preempt_schedule+0xae/0xc0
[  103.071725][ T6946]  ? __pfx_preempt_schedule+0x10/0x10
[  103.073905][ T6946]  panic+0xb9/0xc0
[  103.075422][ T6946]  ? __pfx_panic+0x10/0x10
[  103.077477][ T6946]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  103.079875][ T6946]  ? __mutex_lock+0x147/0x1350
[  103.081931][ T6946]  check_panic_on_warn+0x89/0xb0
[  103.083998][ T6946]  ? __mutex_lock+0x147/0x1350
[  103.086139][ T6946]  end_report+0x78/0x160
[  103.087506][ T6946]  kasan_report+0x129/0x150
[  103.088949][ T6946]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  103.090879][ T6946]  ? __mutex_lock+0x147/0x1350
[  103.092682][ T6946]  __mutex_lock+0x147/0x1350
[  103.094221][ T6946]  ? __mutex_lock+0x5bb/0x1350
[  103.095819][ T6946]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  103.097717][ T6946]  ? __pfx___mutex_lock+0x10/0x10
[  103.099246][ T6946]  ? __lock_acquire+0xab9/0xd20
[  103.100750][ T6946]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  103.102618][ T6946]  ? process_scheduled_works+0x9ef/0x17b0
[  103.104374][ T6946]  ? process_scheduled_works+0x9ef/0x17b0
[  103.106141][ T6946]  process_scheduled_works+0xae1/0x17b0
[  103.107821][ T6946]  ? __pfx_process_scheduled_works+0x10/0x10
[  103.109661][ T6946]  worker_thread+0x8a0/0xda0
[  103.111110][ T6946]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  103.113298][ T6946]  ? __kthread_parkme+0x7b/0x200
[  103.114965][ T6946]  kthread+0x711/0x8a0
[  103.116291][ T6946]  ? __pfx_worker_thread+0x10/0x10
[  103.117940][ T6946]  ? __pfx_kthread+0x10/0x10
[  103.119428][ T6946]  ? _raw_spin_unlock_irq+0x23/0x50
[  103.121035][ T6946]  ? lockdep_hardirqs_on+0x9c/0x150
[  103.122655][ T6946]  ? __pfx_kthread+0x10/0x10
[  103.124204][ T6946]  ret_from_fork+0x3fc/0x770
[  103.126204][ T6946]  ? __pfx_ret_from_fork+0x10/0x10
[  103.128231][ T6946]  ? __switch_to_asm+0x39/0x70
[  103.130269][ T6946]  ? __switch_to_asm+0x33/0x70
[  103.132163][ T6946]  ? __pfx_kthread+0x10/0x10
[  103.134059][ T6946]  ret_from_fork_asm+0x1a/0x30
[  103.136174][ T6946]  </TASK>
[  103.138308][ T6946] Kernel Offset: disabled
[  103.140080][ T6946] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:26:21  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000061 RBX=0000000000000061 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003c3f130
R8 =ffff888107540237 R9 =1ffff11020ea8046 R10=dffffc0000000000 R11=ffffffff854f38c0
R12=dffffc0000000000 R13=ffffffff99afd904 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f393c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055d159ffa600 CR3=00000001159dc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ffffffff00000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007fe9a5cfd100 00007fe9a5197460 XMM05=00007fe9a5197478 00007fe9a51974c0
XMM06=00007fe9a51974b8 00007fe9a51974b0 XMM07=00007fe9a51974a8 00007fe9a51974a0
XMM08=0000000000000000 00007fe9a5012ee7 XMM09=0000000000000000 00007fe9a5012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=cb3970142e5e1800 RBX=ffffffff819683c8 RCX=cb3970142e5e1800 RDX=0000000000000001
RSI=ffffffff8d9b8065 RDI=ffffffff8be33800 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa38e30 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d0000
RIP=ffffffff8b79c3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055d159ffb680 CR3=00000001159dc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=06269392d78eace6 fcbaf00b799d9409
XMM02=4b7d125362dc7627 ef6021585652148c XMM03=ddf49d83cf828c6a ec06269392d78eac
XMM04=00007fe9a5cfd100 00007fe9a5197460 XMM05=00007fe9a5197478 00007fe9a51974c0
XMM06=00007fe9a51974b8 00007fe9a51974b0 XMM07=00007fe9a51974a8 00007fe9a51974a0
XMM08=0000000000000000 00007fe9a5012ee7 XMM09=0000000000000000 00007fe9a5012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
