last executing test programs:

10.959336113s ago: executing program 0 (id=228):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180300000000008000000000001000008510000006000000180000000000000000000000000000006500000000000000180000000000000000000000000000009500000000000000840300000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) (async)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async)
setsockopt$inet6_udp_int(r3, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) (async)
setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) (async, rerun: 64)
getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x2, &(0x7f0000000100)=""/8, &(0x7f0000000140)=0x8) (async, rerun: 64)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) (async, rerun: 64)
bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) (async, rerun: 64)
write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netpci0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0xdc2, 0x1ff, 0x1, 0x6, 0x6, 0x8, 0x3}}) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x40003}}}})

10.880392207s ago: executing program 0 (id=229):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'virt_wifi0\x00', &(0x7f0000000240)=@ethtool_gfeatures})
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x800, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1, <r3=>0xffffffffffffffff}, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000010000000f000000080034000301000008000300", @ANYRES32=r6, @ANYBLOB="0500330002"], 0x2c}, 0x1, 0x0, 0x0, 0x8084}, 0x80)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@typedef={0x8, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x0, 0x5f, 0x30, 0x0, 0x61]}}, &(0x7f0000000540)=""/234, 0x2b, 0xea, 0x1, 0x80000000, 0x10000}, 0x28)
r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000740)=@o_path={&(0x7f0000000700)='./file0\x00', 0x0, 0x4000, r0}, 0x18)
r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000780), 0x8)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50)
r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x17, &(0x7f00000003c0)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xb}, @alu={0x4, 0x1, 0xb, 0x9, 0x0, 0x100, 0x8}, @map_val={0x18, 0x9, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xfffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @jmp={0x5, 0x1, 0x8, 0x9, 0x2, 0x100, 0xfffffffffffffffc}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xc}], &(0x7f0000000480)='GPL\x00', 0x2, 0x0, &(0x7f00000004c0), 0x40f00, 0x4, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000000680)={0x9, 0x21}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0xa, 0x2, 0x6}, 0x10, 0x20d22, r8, 0x5, &(0x7f0000000840)=[r9, 0x1, r10], &(0x7f0000000880)=[{0x4, 0x1, 0x8, 0x3}, {0x5, 0x1, 0x7, 0x5}, {0x3, 0x1, 0xa, 0x2}, {0x2, 0x4, 0xd}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r11, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r11}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
close(0x4)

10.800685275s ago: executing program 0 (id=231):
socket(0x10, 0x3, 0x6)
socket(0x10, 0x80002, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getpid()
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xfffffffffffffcb4, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f742f5f62726964676500140001007767320000000000000000000000000014000100766574683069746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x659e2417a3274cbf, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b702000008000000bfa300000000000007030000ffffffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000000000095000000000000006623848adf1dc9a764ab51a064caff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b81ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6b6981978d51514b00dcc4a2748b376358c33c9753beab62bdf27dc04e4cb4bc598affd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b770009524edd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd88345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1757b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c35af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d9900000011000003971b32fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d677d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc37e5aa23bff8cce0600000000000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68f536a03353a55a8a8e176e5d48887d31c8e0f77f2c1e68ec7c01bd5a2028a8fc107007f5f4c67600a6ade3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d9029f071fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2020ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a017ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f6c3652c423ce6ecc1be5d4e8133fc32f68ea86a2df1e7df98a0ae216c405d0ae9eed114ff2d6fe27dfdff1cf9194849c4cc0da9533e5983863e526a7dc0d8728f3b573ca4427bdb44df9341e9b8420e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9467b51d92e0993af4beaf1f3d47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c27c318475802e2c62681bd1a331422a6e47bbd40857d52c4894944fae5c5000000000000000000000000e0c47613e950b6aefeae054fc723f62ac7d13941de11b018f1f48ac50335df91c771729f81929128135b2803562c1171ee00a3f4a31281aa363e087d53d86dd85e3ff979a7e72d16fdd7e1a0f07a1c8e6085d280d760f74975ceb3a5be6cfb4da8e0aeb769b8b75f4aad803ed77d34872eed2711aa40a3b38099dc2752e8ec9b520faf39e416752aa0830206736570f5d41a4df848c9052551cf8dcb1be000000000eb2577188e8e96bd825d462350905d3eb916b397d2a46a64081e85661d7a5a2716cc87cb1976d15d9b6418e94f165911803e43830432226c660f4da67bb7c8ceb3755c07197d8b80b8d16b12c2ec63bebe107aa2350a7ae564bf69a6c52a2da1496016dd66a1c1b112"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xfffb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x12, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x0, 0x1, 0x9, 0x4, 0xffffffffffffffc0, 0x4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x14c2}}], &(0x7f00000000c0)='GPL\x00', 0x0, 0xa2, &(0x7f0000000180)=""/162, 0x40f00, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x8b4, 0x4}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000002c0)=[{0x5, 0x2, 0x6, 0x1}, {0x4, 0x6, 0xd, 0x3}, {0x3, 0x4, 0x1, 0x9}, {0x4, 0x2, 0x5, 0x6}]}, 0x94)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x18, &(0x7f00000003c0)=@raw=[@map_fd={0x18, 0x3, 0x1, 0x0, 0x1}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffe}, @generic={0xfc, 0x1, 0x6, 0x1, 0x6}, @generic={0xf9, 0x9, 0x4, 0x1ff, 0xb95}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @ringbuf_query, @btf_id={0x18, 0x7, 0x3, 0x0, 0x2}], &(0x7f0000000480)='GPL\x00', 0x1ff, 0x1000, &(0x7f00000006c0)=""/4096, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0xf, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000540)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000580)=[{0x2, 0x4, 0x5, 0x3}, {0x5, 0x1, 0xf, 0xc}], 0x10, 0x7}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001900)=@bpf_ext={0x1c, 0x7, &(0x7f00000005c0)=@raw=[@map_idx={0x18, 0xb, 0x5, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000600)='GPL\x00', 0xffffffff, 0xce, &(0x7f0000001780)=""/206, 0x41100, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001880)={0x2, 0xf, 0x5f50, 0xd50c}, 0x10, 0x24126, 0xffffffffffffffff, 0x0, &(0x7f00000018c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x54}, 0x94)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001bc0)=@bpf_tracing={0x1a, 0x8, &(0x7f00000019c0)=@raw=[@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5}, @ringbuf_query, @map_fd={0x18, 0x3, 0x1, 0x0, 0x1}], &(0x7f0000001a00)='syzkaller\x00', 0x0, 0x4d, &(0x7f0000001a40)=""/77, 0x0, 0x40, '\x00', 0x0, 0x1c, r1, 0x8, &(0x7f0000001ac0)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x2d0ca, 0xffffffffffffffff, 0x5, &(0x7f0000001b00)=[0x1, 0x1, 0x1], &(0x7f0000001b40)=[{0x2, 0x3, 0x8, 0x1}, {0x0, 0x5, 0x1, 0x1}, {0x5, 0x1, 0xa, 0x2}, {0x0, 0x2, 0x10, 0x5}, {0x3, 0x3, 0xf, 0x2}], 0x10, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x19, 0x7, &(0x7f0000001c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x10}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @alu={0x7, 0x0, 0xd, 0xb, 0x0, 0x126, 0x8}, @exit]}, &(0x7f0000001cc0)='GPL\x00', 0x9, 0x37, &(0x7f0000001d00)=""/55, 0x41000, 0x3a, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000001d40)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000001d80)={0x5, 0x3, 0x1, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001dc0)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, r1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ec0)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x80000000, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_XDP={0x3c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r4}, @IFLA_XDP_FD={0x8, 0x1, r5}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_FD={0x8, 0x1, r5}, @IFLA_XDP_FD={0x8, 0x1, r3}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

9.929407255s ago: executing program 0 (id=240):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={<r2=>0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)=ANY=[@ANYRESHEX=r2], 0x64}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r7, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000), 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
accept$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14)
sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000020000000002e00000008000300487570a5041508f4dbb7eba3317552d94ac5783261d6cd224ee31f00e9c8c7313301f3b6ffff6382f189b550abd63d5d26b51b849fdb48114ecad351e4ac00ac03e5557fcd96e637f479cfad16cecd90236b888988ea5873f3f4987c4487cebc41a96609b5486457af199c898d649d04e8e23180647b101aa2480a81b27d9ec830d5191272e640e8c6b2fd433e6da66b199600225940709ed941c8f25e213b869df4b6dc766f99e7d53a39b192a4a4fa9035e4fea0fb17a852c16a6acf3b861460c157e6cd9b1762522ad5a5", @ANYRES32=r10, @ANYBLOB="0a00340002020202020200000400930008003500000000000800350001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1088}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYRES8=r3], 0x2e)

9.179912833s ago: executing program 0 (id=243):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$inet(0x2b, 0x801, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x48f, &(0x7f0000000000)={0x11, @private, 0x0, 0x0, 'lc\x00', 0x0, 0x6000000}, 0x2c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

8.940232472s ago: executing program 0 (id=246):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0})
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r3, 0x6, 0x12, 0x0, 0x0)
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r4, &(0x7f0000000180)={0x1d, r2, 0x40000000000000, {0x1, 0xf0, 0x3}, 0xfd}, 0x18)
socketpair(0x8, 0x3, 0xad, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
setsockopt$inet_tcp_int(r3, 0x6, 0x12, 0x0, 0x0) (async)
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
bind$can_j1939(r4, &(0x7f0000000180)={0x1d, r2, 0x40000000000000, {0x1, 0xf0, 0x3}, 0xfd}, 0x18) (async)
socketpair(0x8, 0x3, 0xad, &(0x7f0000000000)) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) (async)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) (async)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async)

2.914670184s ago: executing program 1 (id=295):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x1, 0x51, &(0x7f0000000000)="1250a2cf40640dd1a625ed66683fb91d337607294f091c75b1b9ccd846bd45a5ec41fd6d3a7309290b47c3c413379146a98fd841dd916bff9144ec7b0c38370a844f9d9c79329c0f45e209a8abef77a447", 0x0, 0x1}, {0xec, 0x32, &(0x7f0000000080)="d27cf158a92f81f25152e4a405296a75cd583150646bf8e793816bef94e15cf554c221865af8c8ea23161ec7c86acb4a1ace", 0x1}]})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'gretap0\x00', <r1=>0x0, 0x7800, 0x7, 0x0, 0xc0000000, {{0xf, 0x4, 0x0, 0xc, 0x3c, 0x68, 0x0, 0x4, 0x29, 0x0, @multicast1, @empty, {[@ssrr={0x89, 0xf, 0x9f, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @end, @cipso={0x86, 0x14, 0xffffffffffffffff, [{0x5, 0xb, "b42f572db49f18dd8a"}, {0x1, 0x3, 's'}]}, @ra={0x94, 0x4}]}}}}}) (async)
r2 = getuid()
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x4e20, 0x0, 0x4e21, 0x28f, 0x2, 0x20, 0x0, 0x33, r1, r2}, {0x7, 0x401, 0x8000, 0x8, 0x0, 0x3, 0x0, 0xa}, {0x8d, 0x9, 0x7, 0x4}, 0xb5, 0x6e6bbe, 0x0, 0x1, 0x2, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d2, 0x6c}, 0xa, @in6=@local, 0x3502, 0x1, 0x1, 0x6, 0x0, 0x36, 0x5}}, 0xe8) (async)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000004c0)=<r4=>0x0) (async, rerun: 64)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, <r5=>0x0}, &(0x7f0000000540)=0xc) (async, rerun: 64)
r6 = socket$nl_crypto(0x10, 0x3, 0x15)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000580)=<r7=>0x0) (async)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0, <r8=>0x0}, &(0x7f0000000600)=0xc) (async)
r9 = gettid() (async)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0, <r10=>0x0}, &(0x7f0000000680)=0xc)
sendmsg$netlink(r3, &(0x7f0000000740)={&(0x7f0000000300)=@kern={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)=[{&(0x7f0000000340)={0x10c, 0x11, 0x300, 0x70bd29, 0x25dfdbfb, "", [@generic="e8e5bdfceb65cbe8677afa8a", @generic, @generic="27ae7a65662b33eac3b06e2b9c7cae1be8bbdd6aefdb320abf59b828869804d6876c3c70b3a0f6882d82d6f46f3ca222a4c11d466217d5738634b05067b59ce8add4784b5b0da479ea0d9eaf9d016919c8eda974a32d10d108a4a2c68452729e423167bcd76c6372142e155f09550f5b74e5efd6607ef161f46d132768195743888f575d81f24c9c60aac94c1f89a6109d64957f64d93d862c2e05e225643508c195cdbd6f218e9e4e966def82a3e378e634c72e2451269aea626ede91bf28eac9d60a80b361a18c110bab10c5a806c20ffc590368a27c3de3eb46450466d57c3d57da0b02e9f9d400c9c1fa6fa9"]}, 0x10c}], 0x1, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {r4, r2, r5}}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r6, r0]}}, @cred={{0x1c, 0x1, 0x2, {r7, r2, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r2, r10}}}], 0x80, 0x24008001}, 0x40000) (async)
sendto(r6, &(0x7f0000000780), 0x0, 0x400, &(0x7f00000007c0)=@qipcrtr={0x2a, 0x0, 0x7fff}, 0x80)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f0000000a80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a40)={&(0x7f00000008c0)={0x14c, r12, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x54, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x608f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xab88}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3547cb3c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77f0801a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x48db5d8e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x20fd}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x654b702f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfeb7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7e59}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0xa8, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f0f62b4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x406fe9a5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e142bad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1039da0c}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6c63}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6491f288}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ca0256}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2893d8d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdb44}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x51f9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1f1d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x48dc2b22}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x568a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa759}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x188bff93}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc50}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59bbc788}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x108ad99d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25ee409b}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x34, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xeb9ee65}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ead2166}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x19}]}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8011}, 0x4000000) (async)
unshare(0x28000000)
r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_DSTOPTS(r13, 0x29, 0x3b, &(0x7f0000000ac0)={0x4, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}]}, 0x20)
r14 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r14, 0x541b, &(0x7f0000000b00)) (async)
r15 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r15, 0x6, 0x16, &(0x7f0000000b40)=[@sack_perm, @sack_perm, @sack_perm, @sack_perm, @window={0x3, 0xa3}, @window={0x3, 0x8, 0xb}], 0x6) (async, rerun: 32)
r16 = bpf$ITER_CREATE(0x21, &(0x7f0000000b80), 0x8) (rerun: 32)
setsockopt$PNPIPE_INITSTATE(r16, 0x113, 0x4, &(0x7f0000000bc0), 0x4) (async)
r17 = socket$caif_stream(0x25, 0x1, 0x5)
setsockopt$CAIFSO_LINK_SELECT(r17, 0x116, 0x7f, &(0x7f0000000c00)=0x81, 0x4)
sendmsg$ETHTOOL_MSG_RINGS_GET(r16, &(0x7f0000000fc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f80)={&(0x7f0000000dc0)={0x19c, 0x0, 0x800, 0x7d, 0x25dfdbff, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40080}, 0x90)

2.800728854s ago: executing program 1 (id=296):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x38, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x38}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000100000000000000000000000000900000000000000000000000000000001000000000000000c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084010500ac141414000000000000000000000000000000003200000000000000fe8000000000000000000000000000bb013500000000ff00000000000400000001000000fe800000000000000000000000000025000000003200000000000000ffffffff0000000000000000000000000000000000000000000000000200000000000000ac1e0101000000000000000000000000000000003c00000002000000fe8800000000000000000000000001010000000001030000000000000000000000000000fe8000000000000000000000800000bb000000003c00000002000000fe800000000000000000000000000010000000000000ff00ff7f00000300000000000000ac141426000000000000000000000000000000002b00000002000000ac141400000000000000000000000000fcffffff00010000010000800000000000000000fe8000000000000000000000000000aa000000002b00000000000000fe8800000000000000000000000001010000000005"], 0x23c}}, 0x0)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_T4(r5, 0x103, 0x4, 0x0, &(0x7f00000000c0))
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
socket$rxrpc(0x21, 0x2, 0xa)
write$tun(r8, &(0x7f00000001c0)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x1, 0x7, 0x2c, 0x67, 0x0, 0x4, 0x6, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x1e}, {[@end]}}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x9, 0x0, 0x7}}}}}}}, 0x3e)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0xf}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

2.649455406s ago: executing program 1 (id=297):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r2 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r2, 0x107, 0x14, 0x0, &(0x7f0000000240))
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)={0x320, r3, 0x8, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x67}}}}, [@NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="51c9230686fe2e969d0e97c0e6612a2e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="0e52e80d9a7bbb97fb7b82bfefc24481"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "764080e3041c14dc"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c92c5bfa636c82b4"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6aa129df3c671dcb207205867a02737e"}]}, @NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="e77dbca2f18e056811db5e0e74a2508a9dcdd525391666d1f8d59342daa416ca"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8a60c293bdafd90a"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a5c5cb30c19fbffe"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="720dbf9b905282853eeb5f59f60abf0e3215ccfcb2193d8318515852636d27af"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="bae394b9872608609cc2f9c4fe9478ac"}]}, @NL80211_ATTR_REKEY_DATA={0xc4, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a8e6e7b109a3abc5cb23f9f5bc74eaa28f3cebef42f2b42ec148821ec90a95de"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "01a775c5c0becada"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="b0b578e3d6a9b4eff7ae9d9f47be3735"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c4d09cf6f988e263"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="36e6994c291c254728787ff056f1fb22f89dbc076499388415a579ef9cb20d4c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3a}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="8f9624f23c51100435aeb32fab38bdac"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ab63713b315968dc"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="3d03e9114803850af350d975ca76bcffb8e68508729ed709"}]}, @NL80211_ATTR_REKEY_DATA={0x9c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="7b7b7f1a369139e351d8f3f6392de39f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="64e075f3d6113b613e78e73f84a589a9"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="4e12bb696165735c06c062c388a4a8065fa7a196e6e069fd"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="1eca5f5397ec0f8a34fb53298cdf27ff"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="4d74dda6117197da282a1ff3663a049049c8c54ad9f44705b321c22147a79f12"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="b1eae53c1fe1f7736c72f0ff1bba6f80"}]}, @NL80211_ATTR_REKEY_DATA={0xb8, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="903dbe7934122e33a60340a0bd72c921aaeb5356f97c7aa5"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1f8e3b846cee7dab"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="7793617dfa80038f2f92ef7a59dee41868f22a0068449124f1fcecd96b746b4b"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="ca82da6e6c3e0f3dca0f9ba9d5ff4eda"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1aea0b16df56218c9e6b2734a10070c8755b5026c0976ef2fe93d89e765a9435"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2991117dce04e952"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="dbb59d9a4c925f1b66c43ae5324fe2c9f4cb431bc0693c9b45df9b839cc2a06a"}]}]}, 0x320}, 0x1, 0x0, 0x0, 0x8000}, 0x40040)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000001000010800000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="004004806400000008001b00000000000c002b8008000100d6edeaa7"], 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x0)

2.585403248s ago: executing program 2 (id=298):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x142ac1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}) (async)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=<r4=>0x0) (async)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="021004051400000026bd7000ffdbdf250800120002000000aa01feb56b6e00070000000600ab5fedca00003800000000000000ff02000000000000000000000000000120010000000000000000000000000002010014000300000002001000000004d4000004d30000000005001a00ac1414aa000000000000000000000000ffffffff0000000000000000000000000800001002001300900000002bbd700002350000623fea2cf3bfaecb1a23fa49018162cdd08781da67"], 0xa0}}, 0x8000) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000030a03000000000000000000030000000900030073797a30000000000900010073797a30000000001400048008000240000000000800014000000000"], 0xa4}}, 0x0) (async)
connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000380)={0x27, r4, 0x4, 0x7, 0x4, 0x2, "bb2338bcf5c7e6c3bacb08a5810524477ec9dd08e2700260065d4da56753303e503cbbbad03b1927c4f150ef7a704c1f66001ec10cfb6c03ed8e253509af85", 0x40000000b}, 0x60) (async)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000280)) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
close(r6) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r7) (async)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x3404008d) (async)
r8 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r8, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) (async)
r9 = socket(0x15, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r9, 0x114, 0x3f, &(0x7f0000000000)=0x1, 0x4) (async)
syz_emit_ethernet(0x74, &(0x7f0000000000)=ANY=[@ANYRESHEX=r3], 0x0)

2.584840946s ago: executing program 1 (id=299):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000340)="a4", 0x1, 0x4000, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @private1}, 0x1c)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x8, 0x3, 0xfffffff7}, &(0x7f0000000380)=0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x4d5, 0x0, 0x0, 0x8, 0x3}]}, 0x20}, 0x1, 0x7}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r2, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0)
syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000340)=@random='\r', 0x1, 0x0)

869.51688ms ago: executing program 1 (id=300):
r0 = socket$inet6(0xa, 0x5, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x5, @loopback, 0x1}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={r3, 0x2590}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={r3, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x7, @loopback, 0x9}]}, &(0x7f00000000c0)=0x10)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e28, 0x0, @mcast1, 0x1}}}, 0x7)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x190)
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r4, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$xdp(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c001)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r6, &(0x7f00000000c0), 0x9)
sendfile(r6, r5, 0x0, 0x10000)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000))
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r8}, 0x10)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r6}, 0x0, 0x0}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)

863.608703ms ago: executing program 2 (id=301):
unshare(0x22020400)
r0 = socket(0x23, 0x5, 0x0)
ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0)
connect$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg2\x00', <r5=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x609, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7, 0x10008}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL6={0x14, 0x8, @ipv4={'\x00', '\xff\xff', @empty}}]}}}]}, 0x4c}}, 0x20000040)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000040)={0x8000, 0x7, 0x7, 0xfffffffe, 0xf})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x44}}, 0x40)

779.625482ms ago: executing program 2 (id=302):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r1, 0x9, 0x2}, &(0x7f0000000140)=0x8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2, 0x3, 0x0, 0x3, 0x12, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}, @sadb_x_nat_t_type={0x1, 0x14, 0x2}]}, 0x90}, 0x1, 0x7}, 0x0)
sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000100)={0x34, 0x15, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c00030026ad3dc548f0d8e54d23edfcbe6d55b57cb15e63c10080000000000000abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084)

549.405131ms ago: executing program 2 (id=303):
socket$inet(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24040000}, 0x20004000) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000100)='blkio.throttle.write_bps_device\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000240)=0x10000, 0x12)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r4) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRES8=r2, @ANYBLOB="267445fd57871d512f249dd21c2ed4df510c1fcf4a63b15378e812317762ff3c3119"], 0x30}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="312000000000000014002b800800010038d9af12bfa92e69e321aad86d66f65c6ea5c6dbe8960cbc6d92d158768cf4ec7fe296abfd18ce88a3e30000000000000002b511d1c5b99f0bad4cde88df8bedb1a56f0ef4daf5614a8e6381e3d188ed45451f2fbf0a60585075410e535d27b1030316ff880e8e3ad8030b5f10c674e44fbc81c4df6d83e6916fbb41a55c340b475659cd6e31c07d51ec5bbc0bea8cdbd656bb118bc7a44f51cddb029c2d74e37ddcd0810d9e0fce4931f66bd4701fae78b6186d20f6b95dbc1e7ec0469e3db57fde51d6a546bfcfba27d8e56c2b9a37f4651bdc0da1ee52e4a5e2cf28c8ca297705518d88d5bec45ffb67bcb66591e07d4a215c3ac7d8ba5d8ff5ea781d1938564fb81413638fdbeb2a8f1849e8c1bb0e75", @ANYRES32=r5, @ANYBLOB="080003000200000008001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) (async)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[], 0x28}}, 0x20004030)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f00000002800000", 0x2c}], 0x1}, 0x0) (async)
close(0xffffffffffffffff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r9 = openat$cgroup_devices(r8, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r9, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tmm'], 0x3d) (async)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r10, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async)
socket$inet6_udp(0xa, 0x2, 0x0)

480.352807ms ago: executing program 2 (id=304):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0)
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x8)
setsockopt$ax25_int(r3, 0x101, 0xa, &(0x7f0000000080)=0x9, 0x4)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11, 0x1, 0x0, 0x40}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x34}}, 0x20)
socket$pppl2tp(0x18, 0x1, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10)
getsockopt$inet_mreq(r1, 0x0, 0x3, &(0x7f0000000140)={@loopback, @initdev}, &(0x7f0000000280)=0x8)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r6, 0x9)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r9, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r9, 0x1, 0x70bd2c, 0x25dbdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x54)

387.539579ms ago: executing program 2 (id=305):
socket$nl_generic(0x10, 0x3, 0x10)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x10) (async)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x20000}, 0xc)
socket$kcm(0x2, 0x1000000000000002, 0x0) (async)
socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x7a28, 0x4) (async)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x7a28, 0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000400)=0x101, 0x4) (async)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000400)=0x101, 0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0) (async)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x8, 0x6, @remote}, 0x14)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r5=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) (async)
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10)
sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x1c4, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x24040980}, 0x40)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

0s ago: executing program 1 (id=306):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r0 = socket(0x10, 0x2, 0x0)
sendto$inet6(r0, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160012000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x2251197285d76a80, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840)
socket$netlink(0x10, 0x3, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, 0x0, 0x0) (async)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x4, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r2, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) (async)
sendto$inet6(r2, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='reno\x00', 0x5) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='reno\x00', 0x5)
sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4008800)
shutdown(r2, 0x1)
sendto$inet(0xffffffffffffffff, &(0x7f0000000400)="003d79911bb4b283a5d353eae455d97e46f02995d813d6e6050000000000000066370451f1", 0x44, 0x4800, 0x0, 0x25)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000640)="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", 0x138}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c00000000005000"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000a0000010900010073797a3100000000200004801c0001800b00010065787468647200000c00028008000640000000020900020073797a32000000edfecb05bee16400140000001100010000000000000000000000000a218c6208f9586c6e7df3"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x8050)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000600)={0x24, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000600)={0x24, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x24}}, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:40792' (ED25519) to the list of known hosts.
syzkaller login: [   56.505163][ T5811] cgroup: Unknown subsys name 'net'
[   56.661347][ T5811] cgroup: Unknown subsys name 'cpuset'
[   56.667167][ T5811] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.922232][ T5811] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.924908][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.938720][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.942197][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.945138][ T5234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.948191][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.011704][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.015001][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.018532][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.022612][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.026577][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.052141][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.055828][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.060065][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.063392][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.065988][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.374474][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   64.439853][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   64.477404][ T5856] chnl_net:caif_netlink_parms(): no params data found
[   64.536881][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.540342][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.543319][ T5850] bridge_slave_0: entered allmulticast mode
[   64.547165][ T5850] bridge_slave_0: entered promiscuous mode
[   64.580480][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.583417][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.586289][ T5850] bridge_slave_1: entered allmulticast mode
[   64.590918][ T5850] bridge_slave_1: entered promiscuous mode
[   64.646532][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.649448][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.651979][ T5855] bridge_slave_0: entered allmulticast mode
[   64.655495][ T5855] bridge_slave_0: entered promiscuous mode
[   64.686045][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.690237][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.693127][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.696007][ T5855] bridge_slave_1: entered allmulticast mode
[   64.700944][ T5855] bridge_slave_1: entered promiscuous mode
[   64.716833][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.720567][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.723455][ T5856] bridge_slave_0: entered allmulticast mode
[   64.727323][ T5856] bridge_slave_0: entered promiscuous mode
[   64.731353][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.733976][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.736821][ T5856] bridge_slave_1: entered allmulticast mode
[   64.740890][ T5856] bridge_slave_1: entered promiscuous mode
[   64.746300][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.799766][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.815624][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.821336][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.826902][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.831850][ T5850] team0: Port device team_slave_0 added
[   64.866085][ T5850] team0: Port device team_slave_1 added
[   64.884308][ T5856] team0: Port device team_slave_0 added
[   64.888515][ T5855] team0: Port device team_slave_0 added
[   64.910177][ T5856] team0: Port device team_slave_1 added
[   64.913959][ T5855] team0: Port device team_slave_1 added
[   64.927783][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.930019][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.938128][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.962907][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.965063][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.975236][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.979835][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.982350][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.991457][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.996239][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.999063][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.008057][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.037716][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.040043][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.049433][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.054485][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.056631][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.065762][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.091662][ T5856] hsr_slave_0: entered promiscuous mode
[   65.094835][ T5856] hsr_slave_1: entered promiscuous mode
[   65.154344][ T5850] hsr_slave_0: entered promiscuous mode
[   65.159961][ T5850] hsr_slave_1: entered promiscuous mode
[   65.162285][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   65.164123][ T5850] Cannot create hsr debugfs directory
[   65.212916][ T5855] hsr_slave_0: entered promiscuous mode
[   65.215984][ T5855] hsr_slave_1: entered promiscuous mode
[   65.219039][ T5855] debugfs: 'hsr0' already exists in 'hsr'
[   65.221297][ T5855] Cannot create hsr debugfs directory
[   65.518355][ T5856] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.530975][ T5856] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.537036][ T5856] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.552070][ T5856] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.594708][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.612012][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.625704][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.635221][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.717050][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.732662][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.744279][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.756594][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.834481][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.872270][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.893602][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   65.909811][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.912818][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.931877][  T999] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.934866][  T999] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.942687][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   65.957496][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.960478][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.980700][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.983588][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.027203][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.031026][   T54] Bluetooth: hci0: command tx timeout
[   66.081342][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   66.103695][  T999] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.106193][  T999] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.109620][   T54] Bluetooth: hci2: command tx timeout
[   66.109773][ T5234] Bluetooth: hci1: command tx timeout
[   66.130809][  T999] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.133715][  T999] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.192255][ T5850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.321211][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.374157][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.411913][ T5856] veth0_vlan: entered promiscuous mode
[   66.415342][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.427428][ T5856] veth1_vlan: entered promiscuous mode
[   66.455107][ T5855] veth0_vlan: entered promiscuous mode
[   66.472435][ T5855] veth1_vlan: entered promiscuous mode
[   66.476831][ T5856] veth0_macvtap: entered promiscuous mode
[   66.488012][ T5856] veth1_macvtap: entered promiscuous mode
[   66.504982][ T5850] veth0_vlan: entered promiscuous mode
[   66.522533][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.526293][ T5850] veth1_vlan: entered promiscuous mode
[   66.537148][ T5855] veth0_macvtap: entered promiscuous mode
[   66.543172][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.561792][ T5879] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.566595][ T5855] veth1_macvtap: entered promiscuous mode
[   66.574149][ T5714] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.588225][ T5714] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.591411][ T5714] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.623215][ T5850] veth0_macvtap: entered promiscuous mode
[   66.633908][ T5850] veth1_macvtap: entered promiscuous mode
[   66.646313][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.665355][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.685848][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.690170][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.703845][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.712871][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.716354][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.723909][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.725979][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.730152][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.768433][ T5879] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.771962][ T5879] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.775395][ T5879] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.780084][ T5879] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.809378][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.818840][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.863520][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.867702][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.891515][   T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.894085][   T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.915627][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.923066][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.943267][ T5856] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.949699][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.955162][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.080820][ T5923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'.
[   67.083654][ T5923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'.
[   67.088935][ T5921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   67.109156][ T5921] macvlan2: entered allmulticast mode
[   67.111106][ T5921] veth1_vlan: entered allmulticast mode
[   67.114671][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   67.120542][ T5923] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'.
[   67.194300][ T5926] Zero length message leads to an empty skb
[   67.203268][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[   67.206161][ T5923] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'.
[   67.212849][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   67.216029][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   67.231774][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   67.250184][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   67.296334][ T5931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5'.
[   67.309323][ T5931] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.359664][ T5931] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   67.403739][ T5934] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6'.
[   67.476638][ T5940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'.
[   67.480656][ T5943] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.492275][ T5943] netlink: 'syz.2.9': attribute type 1 has an invalid length.
[   67.679424][ T5959] netlink: 'syz.0.12': attribute type 1 has an invalid length.
[   67.723801][ T5959] bridge0: port 3(veth3) entered blocking state
[   67.725941][ T5961] netlink: 'syz.1.13': attribute type 1 has an invalid length.
[   67.726290][ T5959] bridge0: port 3(veth3) entered disabled state
[   67.732035][ T5959] veth3: entered allmulticast mode
[   67.735396][ T5959] veth3: entered promiscuous mode
[   67.774689][ T5961] veth3: entered promiscuous mode
[   67.847524][ T5966] warning: `syz.2.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.855629][ T5966] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   67.864861][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.868648][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.906292][ T5974] pimreg: entered allmulticast mode
[   67.947525][ T5976] syz.2.17 uses obsolete (PF_INET,SOCK_PACKET)
[   68.101173][ T5234] Bluetooth: hci0: command tx timeout
[   68.167342][ T5976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   68.175504][ T5976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   68.179207][ T5234] Bluetooth: hci2: command tx timeout
[   68.188917][ T5234] Bluetooth: hci1: command tx timeout
[   68.197417][ T5976] bond0 (unregistering): Released all slaves
[   68.226782][ T5992] tipc: Started in network mode
[   68.229637][ T5992] tipc: Node identity de0a196393f5, cluster identity 4711
[   68.233055][ T5992] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   68.241357][ T5986] syzkaller0: entered promiscuous mode
[   68.243510][ T5986] syzkaller0: entered allmulticast mode
[   68.289354][ T5986] tipc: Resetting bearer <eth:syzkaller0>
[   68.384598][ T5983] tipc: Resetting bearer <eth:syzkaller0>
[   68.399384][ T5983] tipc: Disabling bearer <eth:syzkaller0>
[   68.419768][ T5996] bridge_slave_0: left allmulticast mode
[   68.422345][ T5996] bridge_slave_0: left promiscuous mode
[   68.425823][ T5996] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.433898][ T5996] bridge_slave_1: left allmulticast mode
[   68.436072][ T5996] bridge_slave_1: left promiscuous mode
[   68.440954][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.446121][ T5996] bond0: (slave bond_slave_0): Releasing backup interface
[   68.464785][ T5996] bond0: (slave bond_slave_1): Releasing backup interface
[   68.496763][ T5996] team0: Port device team_slave_0 removed
[   68.504443][ T5996] team0: Port device team_slave_1 removed
[   68.507042][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.510299][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_0
[   68.515241][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.523614][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_1
[   68.541855][ T5996] veth3: left allmulticast mode
[   68.544033][ T5996] veth3: left promiscuous mode
[   68.546452][ T5996] bridge0: port 3(veth3) entered disabled state
[   68.642313][ T5996] ieee802154 phy1 wpan1: encryption failed: -22
[   69.092109][ T6019] netlink: 'syz.0.30': attribute type 1 has an invalid length.
[   69.392386][ T6027] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.395517][ T6027] syzkaller0: entered promiscuous mode
[   69.397409][ T6027] syzkaller0: entered allmulticast mode
[   69.418656][ T6027] tipc: Resetting bearer <eth:syzkaller0>
[   69.446305][ T6026] tipc: Resetting bearer <eth:syzkaller0>
[   69.456155][ T6026] tipc: Disabling bearer <eth:syzkaller0>
[   69.510716][ T6034] tipc: Started in network mode
[   69.512721][ T6034] tipc: Node identity 020c6ea571b8, cluster identity 4711
[   69.515691][ T6034] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.527990][ T6034] syzkaller0: entered promiscuous mode
[   69.535235][ T6034] syzkaller0: entered allmulticast mode
[   69.562226][ T6034] tipc: Resetting bearer <eth:syzkaller0>
[   69.571473][ T6033] tipc: Resetting bearer <eth:syzkaller0>
[   69.583413][ T6033] tipc: Disabling bearer <eth:syzkaller0>
[   69.691699][ T6046] batadv1: entered promiscuous mode
[   69.695846][ T6046] batadv1: entered allmulticast mode
[   69.726504][ T6048] macvtap1: entered allmulticast mode
[   69.730805][ T6048] bridge0: entered allmulticast mode
[   69.734771][ T6048] bridge0: port 3(macvtap1) entered blocking state
[   69.737768][ T6048] bridge0: port 3(macvtap1) entered disabled state
[   69.747194][ T6048] bridge0: left allmulticast mode
[   69.955514][ T6055] team0: Port device team_slave_0 removed
[   69.985406][ T6058] _Z`Ԁ@: entered promiscuous mode
[   70.178026][ T5234] Bluetooth: hci0: command tx timeout
[   70.257832][ T5234] Bluetooth: hci2: command tx timeout
[   70.268447][ T5234] Bluetooth: hci1: command tx timeout
[   70.336059][ T6063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   70.497162][ T5714] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   70.501711][ T5714] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   70.517807][   T51] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   70.540499][ T6085] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   70.748349][ T6106] batadv_slave_1: entered promiscuous mode
[   70.762100][ T6106] bridge_slave_1: left allmulticast mode
[   70.764309][ T6106] bridge_slave_1: left promiscuous mode
[   70.766409][ T6106] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.772015][ T6106] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.857839][   T51] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   71.032852][ T6104] batadv_slave_1: left promiscuous mode
[   71.223248][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.297804][   T51] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   71.313858][ T6125] netem: change failed
[   71.341389][ T6125] netlink: 'syz.0.58': attribute type 4 has an invalid length.
[   71.420934][ T6134] _Z`Ԁ@S!: entered promiscuous mode
[   71.423099][ T6137] geneve0: entered allmulticast mode
[   71.462877][ T6141] netlink: 'syz.0.62': attribute type 13 has an invalid length.
[   71.465904][ T6141] netlink: 'syz.0.62': attribute type 17 has an invalid length.
[   71.479541][ T6141] gretap0: refused to change device tx_queue_len
[   71.481831][ T6141] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   71.490864][ T6141] netlink: 'syz.0.62': attribute type 12 has an invalid length.
[   71.706348][ T6162] netlink: 'syz.2.67': attribute type 3 has an invalid length.
[   71.717375][ T6162] netlink: 'syz.2.67': attribute type 3 has an invalid length.
[   71.899117][ T6157] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   71.904088][ T6157] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.003883][ T6179] bond1: (slave bridge2): making interface the new active one
[   72.010467][ T6179] bond1: (slave bridge2): Enslaving as an active interface with an up link
[   72.061507][ T6157] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   72.077900][ T6157] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.215413][ T6157] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   72.219817][ T6157] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.259844][ T5234] Bluetooth: hci0: command tx timeout
[   72.275972][ T6186] bond1: (slave bridge2): Releasing active interface
[   72.315778][ T6157] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   72.322646][ T6157] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   72.338712][ T5234] Bluetooth: hci1: command tx timeout
[   72.341058][ T5234] Bluetooth: hci2: command tx timeout
[   72.368395][ T6192] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.373007][ T6189] syzkaller0: entered promiscuous mode
[   72.375314][ T6189] syzkaller0: entered allmulticast mode
[   72.403844][ T6193] __nla_validate_parse: 69 callbacks suppressed
[   72.403889][ T6193] netlink: 68 bytes leftover after parsing attributes in process `syz.0.73'.
[   72.431773][ T6189] tipc: Resetting bearer <eth:syzkaller0>
[   72.447496][ T6188] tipc: Resetting bearer <eth:syzkaller0>
[   72.504351][ T6188] tipc: Disabling bearer <eth:syzkaller0>
[   72.528325][ T5714] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   72.531211][ T5714] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.543329][ T5714] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   72.546885][ T5714] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.570437][ T5714] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   72.578780][ T5714] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.621236][ T5714] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   72.624363][ T5714] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.701426][ T6205] Bluetooth: MGMT ver 1.23
[   72.707145][ T6205] trusted_key: syz.1.76 sent an empty control message without MSG_MORE.
[   72.938445][ T6223] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   72.954269][ T6223] syzkaller0: entered promiscuous mode
[   72.956273][ T6223] syzkaller0: entered allmulticast mode
[   72.960173][ T6223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.81'.
[   72.966925][ T6223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.81'.
[   73.096362][ T6223] tipc: Resetting bearer <eth:syzkaller0>
[   73.116943][ T6222] tipc: Resetting bearer <eth:syzkaller0>
[   73.163512][ T6222] tipc: Disabling bearer <eth:syzkaller0>
[   73.170809][ T6232] netlink: 'syz.2.84': attribute type 11 has an invalid length.
[   73.176391][ T6232] netlink: 244 bytes leftover after parsing attributes in process `syz.2.84'.
[   73.182740][ T6228] syzkaller0: entered promiscuous mode
[   73.185482][ T6228] syzkaller0: entered allmulticast mode
[   73.327167][ T6241] netlink: 24 bytes leftover after parsing attributes in process `syz.1.86'.
[   73.493308][ T6254] validate_nla: 32 callbacks suppressed
[   73.493343][ T6254] netlink: 'syz.0.89': attribute type 1 has an invalid length.
[   73.532392][ T6254] bond2: (slave geneve2): making interface the new active one
[   73.535897][ T6254] bond2: (slave geneve2): Enslaving as an active interface with an up link
[   73.541473][ T6256] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   73.547172][ T5879] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[   73.547669][ T6254] netlink: 28 bytes leftover after parsing attributes in process `syz.0.89'.
[   73.556431][ T6254] 8021q: adding VLAN 0 to HW filter on device bond2
[   73.564818][ T5879] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[   73.574332][ T6260] netlink: 24 bytes leftover after parsing attributes in process `syz.1.90'.
[   73.585135][ T5879] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[   73.596504][ T5879] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[   73.719143][ T6272] Driver unsupported XDP return value 0 on prog  (id 21) dev N/A, expect packet loss!
[   73.731865][ T6272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.93'.
[   73.944741][ T6278] netlink: 36 bytes leftover after parsing attributes in process `syz.1.94'.
[   73.947780][ T6278] netlink: 16 bytes leftover after parsing attributes in process `syz.1.94'.
[   74.151048][ T6291] batadv_slave_1: entered promiscuous mode
[   74.170086][ T6293] team0: Port device team_slave_0 removed
[   74.183395][ T6293] team0: Port device team_slave_1 removed
[   74.186174][ T6293] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.191556][ T6293] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.196605][ T6293] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.203529][ T6293] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.248074][   T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   74.257710][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   74.419249][   T54] Bluetooth: hci2: command tx timeout
[   74.458882][ T6290] batadv_slave_1: left promiscuous mode
[   74.550799][ T6317] netlink: 'syz.0.103': attribute type 10 has an invalid length.
[   74.582691][ T6317] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   74.681550][ T6318] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.684985][ T6318] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.838622][ T5893] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   74.910680][ T6318] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.948227][ T6318] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.076289][ T6318] geneve0: left allmulticast mode
[   75.178879][ T5879] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[   75.182236][ T5879] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.185497][ T5879] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[   75.194951][ T5879] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.204254][ T5879] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[   75.207043][ T5879] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.211752][ T5879] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[   75.214803][ T5879] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.649298][ T6352] netlink: 'syz.0.109': attribute type 13 has an invalid length.
[   75.668102][ T6352] netlink: 'syz.0.109': attribute type 17 has an invalid length.
[   75.746681][ T6352] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   75.760074][ T6357] IPVS: sync thread started: state = MASTER, mcast_ifn = wlan0, syncid = 1, id = 0
[   75.765089][ T6351] xfrm0: entered promiscuous mode
[   75.777802][ T6351] xfrm0: entered allmulticast mode
[   75.865796][ T6359] netlink: 'syz.2.111': attribute type 30 has an invalid length.
[   75.872070][ T6353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   75.930584][ T6351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   76.049325][ T6362] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.137033][ T6362] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.220879][ T6362] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.294453][ T6362] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.415894][ T6337] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.437701][ T5879] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.447017][ T5879] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.459694][ T6337] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.552531][ T6376] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[   76.554867][ T6376] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[   76.745210][ T6387] unknown channel width for channel at 909000KHz?
[   76.775751][ T6385] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.882660][ T6395] netlink: 'syz.0.123': attribute type 1 has an invalid length.
[   76.903516][ T6395] 8021q: adding VLAN 0 to HW filter on device bond3
[   76.966297][ T6395] bond3 (unregistering): Released all slaves
[   77.071698][ T6399] netlink: 'syz.0.124': attribute type 17 has an invalid length.
[   77.074889][ T6399] netlink: 'syz.0.124': attribute type 27 has an invalid length.
[   77.273492][ T6403] tipc: Started in network mode
[   77.275821][ T6403] tipc: Node identity 080211000001, cluster identity 4711
[   77.280496][ T6403] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.289031][ T6403] tipc: Resetting bearer <eth:syzkaller0>
[   77.804688][ T6408] __nla_validate_parse: 15 callbacks suppressed
[   77.804704][ T6408] netlink: 24 bytes leftover after parsing attributes in process `syz.2.127'.
[   78.035579][ T6415] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   78.074050][ T6419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.130'.
[   78.079909][ T6417] netlink: 28 bytes leftover after parsing attributes in process `syz.2.128'.
[   78.124695][ T6422] netlink: 24 bytes leftover after parsing attributes in process `syz.0.131'.
[   78.128996][ T6422] netlink: 'syz.0.131': attribute type 1 has an invalid length.
[   78.139808][ T6422] bridge3: entered promiscuous mode
[   78.142335][ T6422] bridge3: entered allmulticast mode
[   78.318692][   T10] tipc: Node number set to 134418688
[   78.407118][ T6429] netlink: 'syz.0.134': attribute type 13 has an invalid length.
[   78.420322][ T6429] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   78.616277][ T6433] IPVS: Scheduler module ip_vs_sip not found
[   78.621825][ T6433] IPVS: length: 141 != 8
[   78.902778][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.137'.
[   78.905725][ T6438] netlink: 16 bytes leftover after parsing attributes in process `syz.2.137'.
[   78.918664][ T6438] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   78.921587][ T6438] syzkaller0: entered promiscuous mode
[   78.923516][ T6438] syzkaller0: entered allmulticast mode
[   78.939510][ T6438] tipc: Resetting bearer <eth:syzkaller0>
[   78.942798][ T6437] tipc: Resetting bearer <eth:syzkaller0>
[   78.952816][ T6437] tipc: Disabling bearer <eth:syzkaller0>
[   79.163328][ T6440] netlink: 224 bytes leftover after parsing attributes in process `syz.1.138'.
[   79.167223][ T6441] netlink: 224 bytes leftover after parsing attributes in process `syz.1.138'.
[   79.182662][ T6440] validate_nla: 1 callbacks suppressed
[   79.182678][ T6440] netlink: 'syz.1.138': attribute type 1 has an invalid length.
[   79.215263][ T6440] 8021q: adding VLAN 0 to HW filter on device bond1
[   79.234018][ T6441] bond1: (slave gretap1): making interface the new active one
[   79.240145][ T6441] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   79.301740][ T6444] netlink: 224 bytes leftover after parsing attributes in process `syz.1.139'.
[   79.323336][ T6444] sctp: [Deprecated]: syz.1.139 (pid 6444) Use of struct sctp_assoc_value in delayed_ack socket option.
[   79.323336][ T6444] Use struct sctp_sack_info instead
[   79.396608][ T6448] netlink: 'syz.1.141': attribute type 1 has an invalid length.
[   79.428873][ T6448] bond2: entered promiscuous mode
[   79.431037][ T6448] 8021q: adding VLAN 0 to HW filter on device bond2
[   79.436676][ T6448] netlink: 3 bytes leftover after parsing attributes in process `syz.1.141'.
[   79.445642][ T6448] batadv1: entered promiscuous mode
[   79.447460][ T6448] batadv1: entered allmulticast mode
[   79.451165][ T6448] 8021q: adding VLAN 0 to HW filter on device batadv1
[   79.454984][ T6448] bond2: (slave batadv1): making interface the new active one
[   79.459174][ T6448] bond2: (slave batadv1): Enslaving as an active interface with an up link
[   79.566932][ T6456] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20001
[   79.692785][ T6459] 8021q: adding VLAN 0 to HW filter on device bond3
[   80.055847][ T6479] : entered promiscuous mode
[   80.101856][ T5234] Bluetooth: hci2: command 0x0405 tx timeout
[   80.105613][ T6482] netlink: 'syz.0.151': attribute type 1 has an invalid length.
[   80.130656][ T6482] 8021q: adding VLAN 0 to HW filter on device bond4
[   80.153594][ T6482] bond4: (slave batadv1): Opening slave failed
[   80.376201][ T6491] bond0: (slave wlan1): Releasing backup interface
[   80.391356][ T6491] bond2: (slave geneve2): Releasing active interface
[   80.423430][ T5714] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[   80.430136][ T5714] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[   80.434269][ T5714] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[   80.448103][ T6337] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[   80.503069][ T6505] netlink: 'syz.1.156': attribute type 39 has an invalid length.
[   80.608843][ T6505] netlink: 'syz.1.156': attribute type 39 has an invalid length.
[   80.615301][ T6505] netlink: 'syz.1.156': attribute type 39 has an invalid length.
[   80.624623][ T6505] netlink: 'syz.1.156': attribute type 39 has an invalid length.
[   80.636401][ T6505] netlink: 'syz.1.156': attribute type 39 has an invalid length.
[   80.640983][ T6505] netlink: 'syz.1.156': attribute type 39 has an invalid length.
[   80.643639][ T6505] netlink: 'syz.1.156': attribute type 39 has an invalid length.
[   80.719082][ T6514] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.755618][ T6519] 8021q: adding VLAN 0 to HW filter on device bond4
[   80.803626][ T6519] bond4: (slave gretap3): making interface the new active one
[   80.810787][ T6519] bond4: (slave gretap3): Enslaving as an active interface with an up link
[   80.956679][ T6529] 8021q: adding VLAN 0 to HW filter on device bond5
[   81.609103][ T6557] nbd0: detected capacity change from 0 to 63
[   81.625459][   T55] block nbd0: Receive control failed (result -104)
[   81.643615][ T6563] geneve2: entered promiscuous mode
[   81.672268][ T5879] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.675523][ T5879] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.680618][ T5879] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.684957][ T5879] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.097803][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   82.152345][ T6578] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   82.257751][ T6578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   82.353533][ T6591] hsr0: entered promiscuous mode
[   82.355994][ T6591] macvlan0: entered promiscuous mode
[   82.360524][ T6591] macvlan0: entered allmulticast mode
[   82.362938][ T6591] hsr0: entered allmulticast mode
[   82.365005][ T6591] hsr_slave_0: entered allmulticast mode
[   82.367263][ T6591] hsr_slave_1: entered allmulticast mode
[   82.452231][ T6597] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   82.626454][ T6604] bond0: (slave bond_slave_1): Releasing backup interface
[   82.765352][ T6609] veth5: entered allmulticast mode
[   82.953317][ T6614] __nla_validate_parse: 28 callbacks suppressed
[   82.953334][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.183'.
[   82.961062][ T6614] netlink: 24 bytes leftover after parsing attributes in process `syz.1.183'.
[   83.378009][ T6629] netlink: 108 bytes leftover after parsing attributes in process `syz.0.187'.
[   83.381591][ T6629] netlink: 108 bytes leftover after parsing attributes in process `syz.0.187'.
[   83.385187][ T6629] netlink: 48 bytes leftover after parsing attributes in process `syz.0.187'.
[   83.393622][ T6629] netlink: 108 bytes leftover after parsing attributes in process `syz.0.187'.
[   83.397223][ T6629] netlink: 108 bytes leftover after parsing attributes in process `syz.0.187'.
[   83.401968][ T6629] netlink: 48 bytes leftover after parsing attributes in process `syz.0.187'.
[   83.406868][ T6629] netlink: 108 bytes leftover after parsing attributes in process `syz.0.187'.
[   83.411234][ T6629] netlink: 108 bytes leftover after parsing attributes in process `syz.0.187'.
[   83.767394][ T6649] 8021q: adding VLAN 0 to HW filter on device bond6
[   83.929806][ T6663] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[   86.584597][  T793] cfg80211: failed to load regulatory.db
[   98.099834][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  112.180422][   T11] block nbd0: Possible stuck request ffff888022500000: control (read@0,1024B). Runtime 30 seconds
[  112.184739][   T11] block nbd0: Possible stuck request ffff888022500200: control (read@1024,1024B). Runtime 30 seconds
[  112.188527][   T11] block nbd0: Possible stuck request ffff888022500400: control (read@2048,1024B). Runtime 30 seconds
[  112.192151][   T11] block nbd0: Possible stuck request ffff888022500600: control (read@3072,1024B). Runtime 30 seconds
[  122.863225][ T6687] __nla_validate_parse: 8 callbacks suppressed
[  122.863246][ T6687] netlink: 12 bytes leftover after parsing attributes in process `syz.2.202'.
[  122.877147][ T6685] bond0: (slave batadv_slave_0): Releasing backup interface
[  122.884882][ T6689] netlink: 28 bytes leftover after parsing attributes in process `syz.1.201'.
[  122.937051][ T6687] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  122.938975][ T6689] validate_nla: 38 callbacks suppressed
[  122.938992][ T6689] netlink: 'syz.1.201': attribute type 12 has an invalid length.
[  122.943414][ T6687] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  122.952492][ T6689] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.201'.
[  122.968292][ T6691] macvlan3: entered promiscuous mode
[  122.970436][ T6691] macvlan3: entered allmulticast mode
[  122.973053][ T6691] bond1: (slave macvlan3): Error -98 calling set_mac_address
[  123.000946][ T6685] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  123.064488][ T6696] netlink: 36 bytes leftover after parsing attributes in process `syz.0.203'.
[  123.110822][ T6696] macsec1: entered promiscuous mode
[  123.117676][ T6696] macsec1: entered allmulticast mode
[  123.129944][ T6698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.204'.
[  123.133240][ T6698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.204'.
[  123.137831][ T6696] netlink: 'syz.0.203': attribute type 21 has an invalid length.
[  123.140202][ T6696] netlink: 156 bytes leftover after parsing attributes in process `syz.0.203'.
[  123.195405][ T6702] netlink: 'syz.0.206': attribute type 1 has an invalid length.
[  123.221702][ T6702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.206'.
[  123.229621][ T6705] netlink: 'syz.1.205': attribute type 13 has an invalid length.
[  123.232984][ T6705] netlink: 'syz.1.205': attribute type 17 has an invalid length.
[  123.236685][ T6702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.206'.
[  123.321901][ T6702] chnl_net:caif_netlink_parms(): no params data found
[  123.406874][ T6709] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  123.421794][ T6709] netlink: 28 bytes leftover after parsing attributes in process `syz.1.207'.
[  123.444749][ T6712] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  123.590416][ T6723] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  123.982516][ T6737] netlink: 'syz.0.214': attribute type 1 has an invalid length.
[  124.017290][ T6737] 8021q: adding VLAN 0 to HW filter on device bond5
[  124.017846][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  124.031077][ T6737] bond5: (slave bridge3): making interface the new active one
[  124.034969][ T6737] bond5: (slave bridge3): Enslaving as an active interface with an up link
[  124.062134][ T6739] veth3: entered promiscuous mode
[  124.088588][ T6737] bond5: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  124.192899][ T6748] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  124.208543][ T6748] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  124.393842][ T6768] netlink: 'syz.1.220': attribute type 13 has an invalid length.
[  124.396976][ T6768] netlink: 'syz.1.220': attribute type 17 has an invalid length.
[  124.465775][ T6768] 8021q: adding VLAN 0 to HW filter on device bond0
[  124.488662][ T6768] 8021q: adding VLAN 0 to HW filter on device team0
[  124.510476][ T6768] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  124.546223][ T6777] IPv6: sit2: Disabled Multicast RS
[  125.057820][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  125.433747][ T6798] netlink: 'syz.0.227': attribute type 83 has an invalid length.
[  125.497372][ T6801] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  125.571192][ T6809] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  125.644842][ T6815] netlink: 'syz.1.232': attribute type 33 has an invalid length.
[  125.725184][ T6817] 8021q: adding VLAN 0 to HW filter on device bond7
[  125.744235][ T6817] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  125.753254][ T6817] bond7: (slave macvlan3): Enslaving as a backup interface with an up link
[  125.766879][ T6817] bridge_slave_0: left allmulticast mode
[  125.773075][ T6817] bridge_slave_0: left promiscuous mode
[  125.776633][ T6817] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.786797][ T6817] bridge_slave_1: left allmulticast mode
[  125.795455][ T6817] bridge_slave_1: left promiscuous mode
[  125.798539][ T6817] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.828421][   T13] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  125.835985][ T6817] bond0: (slave bond_slave_0): Releasing backup interface
[  125.843461][ T6817] team0: Port device team_slave_1 removed
[  125.846143][ T6817] batman_adv: batadv0: Removing interface: batadv_slave_0
[  125.851553][ T6817] batman_adv: batadv0: Removing interface: batadv_slave_1
[  125.856525][ T6817] bond1: (slave gretap1): Releasing active interface
[  125.865959][ T6817] bond2: (slave batadv1): Releasing active interface
[  125.898051][ T6817] bond4: (slave gretap3): Releasing active interface
[  125.903934][ T6817] bond7: (slave macvlan3): Removing an active aggregator
[  125.913549][ T6817] bond7: (slave macvlan3): Releasing backup interface
[  125.956792][ T6828] batadv_slave_1: entered promiscuous mode
[  126.046948][ T6831] macvlan4: entered promiscuous mode
[  126.049251][ T6831] bond0: entered promiscuous mode
[  126.051335][ T6831] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  126.097750][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  126.111352][ T6827] batadv_slave_1: left promiscuous mode
[  126.603990][ T6842] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  126.701491][ T6842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  127.137685][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  127.405333][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  127.425142][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  127.471817][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  127.514728][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  127.571780][ T6859] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  127.586115][ T6859] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.666416][ T6859] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  127.673885][ T6859] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.749035][ T6859] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  127.753143][ T6859] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.806780][ T6859] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  127.812816][ T6859] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  127.957840][ T5714] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  127.961158][ T5714] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.979243][ T6337] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  127.986018][ T6337] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  128.005553][ T6876] __nla_validate_parse: 21 callbacks suppressed
[  128.005571][ T6876] netlink: 248 bytes leftover after parsing attributes in process `syz.1.253'.
[  128.013283][ T6337] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  128.018559][ T6337] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  128.066477][ T6337] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  128.071061][ T6337] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  128.172844][ T6879] validate_nla: 6 callbacks suppressed
[  128.172866][ T6879] netlink: 'syz.2.254': attribute type 1 has an invalid length.
[  128.178048][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  128.269119][ T6886] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  128.275915][ T6886] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  128.302134][ T6888] ipvlan3: entered promiscuous mode
[  128.306231][ T6888] bridge0: port 1(ipvlan3) entered blocking state
[  128.311693][ T6888] bridge0: port 1(ipvlan3) entered disabled state
[  128.315021][ T6888] ipvlan3: entered allmulticast mode
[  128.317490][ T6888] gretap0: entered allmulticast mode
[  128.324992][ T6888] ipvlan3: left allmulticast mode
[  128.327464][ T6888] gretap0: left allmulticast mode
[  128.361191][ T6879] gretap1: entered promiscuous mode
[  128.373016][ T6879] bond2: (slave gretap1): making interface the new active one
[  128.376539][ T6879] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  128.575798][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.258'.
[  128.584926][ T6900] pim6reg99999995: entered allmulticast mode
[  128.684190][ T6908] netlink: 'syz.2.261': attribute type 1 has an invalid length.
[  128.714575][ T6908] 8021q: adding VLAN 0 to HW filter on device bond3
[  128.720699][ T6908] netlink: 28 bytes leftover after parsing attributes in process `syz.2.261'.
[  128.893988][ T6914] syzkaller0: entered promiscuous mode
[  128.896120][ T6914] syzkaller0: entered allmulticast mode
[  128.904816][ T6914] netlink: 'syz.2.262': attribute type 1 has an invalid length.
[  128.927425][ T6914] 8021q: adding VLAN 0 to HW filter on device bond4
[  128.940915][ T6914] bond4: (slave geneve2): making interface the new active one
[  128.945189][ T6914] bond4: (slave geneve2): Enslaving as an active interface with an up link
[  129.217665][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  129.457735][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  130.257644][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  130.508309][ T6921] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  130.765453][ T6933] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.265'.
[  131.297680][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  131.305364][ T6941] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  131.453493][ T6946] netlink: 'syz.1.268': attribute type 11 has an invalid length.
[  131.562614][ T6952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.270'.
[  131.587462][ T6952] netlink: 'syz.1.270': attribute type 1 has an invalid length.
[  131.593642][ T6952] netlink: 'syz.1.270': attribute type 1 has an invalid length.
[  131.669501][ T6954] netlink: 36 bytes leftover after parsing attributes in process `syz.1.271'.
[  131.673056][ T6954] netlink: 16 bytes leftover after parsing attributes in process `syz.1.271'.
[  131.676871][ T6954] netlink: 36 bytes leftover after parsing attributes in process `syz.1.271'.
[  131.680933][ T6954] netlink: 36 bytes leftover after parsing attributes in process `syz.1.271'.
[  131.733592][ T6956] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20002
[  131.791726][ T6958] netlink: 'syz.1.273': attribute type 4 has an invalid length.
[  131.797407][ T6958] netlink: 'syz.1.273': attribute type 4 has an invalid length.
[  131.996295][ T6971] netlink: 'syz.1.277': attribute type 16 has an invalid length.
[  132.000730][ T6971] netlink: 'syz.1.277': attribute type 17 has an invalid length.
[  132.084729][ T6971] bond0: left promiscuous mode
[  132.097428][ T6972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.277'.
[  132.103643][   T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.106317][   T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.110129][   T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.113504][   T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  132.154708][ T6972] IPv6: NLM_F_REPLACE set, but no existing node found!
[  132.337697][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  132.547106][ T6981] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  132.671289][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.975595][ T7007] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.985706][ T7007] syzkaller0: entered promiscuous mode
[  132.988262][ T7007] syzkaller0: entered allmulticast mode
[  133.005832][ T7007] tipc: Resetting bearer <eth:syzkaller0>
[  133.012829][ T7005] tipc: Resetting bearer <eth:syzkaller0>
[  133.029984][ T7005] tipc: Disabling bearer <eth:syzkaller0>
[  133.081102][ T7011] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  133.186437][ T7017] __nla_validate_parse: 4 callbacks suppressed
[  133.186453][ T7017] netlink: 36 bytes leftover after parsing attributes in process `syz.2.289'.
[  133.192378][ T7017] netlink: 16 bytes leftover after parsing attributes in process `syz.2.289'.
[  133.195505][ T7017] netlink: 36 bytes leftover after parsing attributes in process `syz.2.289'.
[  133.200688][ T7017] netlink: 36 bytes leftover after parsing attributes in process `syz.2.289'.
[  133.233485][ T7018] netlink: 6 bytes leftover after parsing attributes in process `syz.1.288'.
[  133.236676][ T7018] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  133.250840][ T7018] netlink: 'syz.1.288': attribute type 10 has an invalid length.
[  133.254861][ T7018] bond0: (slave wlan1): refused to change device type
[  133.377905][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  133.432573][ T7033] netlink: 36 bytes leftover after parsing attributes in process `syz.1.293'.
[  133.529924][ T7038] netlink: 'syz.2.292': attribute type 12 has an invalid length.
[  133.533159][ T7038] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.292'.
[  133.653735][ T7048] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  133.822830][ T7057] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  134.427668][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  135.467702][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  135.611118][ T7072] bond5: entered promiscuous mode
[  135.714457][ T7082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.302'.
[  135.727915][ T7082] netlink: 24 bytes leftover after parsing attributes in process `syz.2.302'.
[  135.901009][ T7090] netlink: 16 bytes leftover after parsing attributes in process `syz.2.303'.
[  136.121219][ T7096] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  136.125491][ T7096] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.183907][ T7096] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  136.191688][ T7096] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.250379][ T7096] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  136.255376][ T7096] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.326223][ T7096] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  136.330942][ T7096] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.425661][ T5878] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  136.432548][ T5878] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.451518][ T6922] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  136.454831][ T6922] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.471894][ T5878] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  136.481952][ T5878] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  136.495139][ T5878] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  136.499074][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  136.509518][ T5878] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  136.515981][ T7097] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  136.522292][ T7097] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.532274][ T5878] ==================================================================
[  136.535601][ T5878] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350
[  136.538506][ T5878] Read of size 8 at addr ffff8880275cecb0 by task kworker/u8:3/5878
[  136.543227][ T5878] 
[  136.544227][ T5878] CPU: 0 UID: 0 PID: 5878 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  136.544245][ T5878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  136.544260][ T5878] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  136.544284][ T5878] Call Trace:
[  136.544292][ T5878]  <TASK>
[  136.544300][ T5878]  dump_stack_lvl+0x189/0x250
[  136.544318][ T5878]  ? __kasan_check_byte+0x12/0x40
[  136.544338][ T5878]  ? __pfx_dump_stack_lvl+0x10/0x10
[  136.544352][ T5878]  ? lock_release+0x4b/0x3e0
[  136.544372][ T5878]  ? __virt_addr_valid+0x4a5/0x5c0
[  136.544390][ T5878]  print_report+0xca/0x240
[  136.544403][ T5878]  ? __mutex_lock+0x147/0x1350
[  136.544417][ T5878]  kasan_report+0x118/0x150
[  136.544433][ T5878]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  136.544453][ T5878]  ? __mutex_lock+0x147/0x1350
[  136.544466][ T5878]  __mutex_lock+0x147/0x1350
[  136.544479][ T5878]  ? __mutex_lock+0x5bb/0x1350
[  136.544491][ T5878]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  136.544504][ T5878]  ? __pfx___mutex_lock+0x10/0x10
[  136.544518][ T5878]  ? __lock_acquire+0xab9/0xd20
[  136.544539][ T5878]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  136.544553][ T5878]  ? process_scheduled_works+0x9ef/0x17b0
[  136.544566][ T5878]  ? process_scheduled_works+0x9ef/0x17b0
[  136.544578][ T5878]  process_scheduled_works+0xae1/0x17b0
[  136.544600][ T5878]  ? __pfx_process_scheduled_works+0x10/0x10
[  136.544618][ T5878]  worker_thread+0x8a0/0xda0
[  136.544640][ T5878]  kthread+0x711/0x8a0
[  136.544658][ T5878]  ? __pfx_worker_thread+0x10/0x10
[  136.544670][ T5878]  ? __pfx_kthread+0x10/0x10
[  136.544685][ T5878]  ? _raw_spin_unlock_irq+0x23/0x50
[  136.544703][ T5878]  ? lockdep_hardirqs_on+0x9c/0x150
[  136.544716][ T5878]  ? __pfx_kthread+0x10/0x10
[  136.544731][ T5878]  ret_from_fork+0x3fc/0x770
[  136.544747][ T5878]  ? __pfx_ret_from_fork+0x10/0x10
[  136.544789][ T5878]  ? __switch_to_asm+0x39/0x70
[  136.544807][ T5878]  ? __switch_to_asm+0x33/0x70
[  136.544823][ T5878]  ? __pfx_kthread+0x10/0x10
[  136.544837][ T5878]  ret_from_fork_asm+0x1a/0x30
[  136.544859][ T5878]  </TASK>
[  136.544865][ T5878] 
[  136.618680][ T5878] Allocated by task 7096:
[  136.620086][ T5878]  kasan_save_track+0x3e/0x80
[  136.621581][ T5878]  __kasan_kmalloc+0x93/0xb0
[  136.623055][ T5878]  __kmalloc_noprof+0x27a/0x4f0
[  136.624694][ T5878]  udp_tunnel_nic_netdevice_event+0x4c3/0x1810
[  136.626719][ T5878]  notifier_call_chain+0x1b6/0x3e0
[  136.628290][ T5878]  register_netdevice+0x1608/0x1ae0
[  136.630439][ T5878]  nsim_create+0xae8/0xf10
[  136.632268][ T5878]  __nsim_dev_port_add+0x6b6/0xb10
[  136.634355][ T5878]  nsim_dev_port_add_all+0x37/0xf0
[  136.636441][ T5878]  nsim_dev_reload_up+0x451/0x780
[  136.638175][ T5878]  devlink_reload+0x4ec/0x8d0
[  136.639681][ T5878]  devlink_nl_reload_doit+0xb35/0xd50
[  136.641419][ T5878]  genl_family_rcv_msg_doit+0x215/0x300
[  136.643029][ T5878]  genl_rcv_msg+0x60e/0x790
[  136.644687][ T5878]  netlink_rcv_skb+0x208/0x470
[  136.646593][ T5878]  genl_rcv+0x28/0x40
[  136.648103][ T5878]  netlink_unicast+0x82f/0x9e0
[  136.649892][ T5878]  netlink_sendmsg+0x805/0xb30
[  136.651854][ T5878]  __sock_sendmsg+0x21c/0x270
[  136.653791][ T5878]  ____sys_sendmsg+0x505/0x830
[  136.655711][ T5878]  ___sys_sendmsg+0x21f/0x2a0
[  136.657622][ T5878]  __x64_sys_sendmsg+0x19b/0x260
[  136.659627][ T5878]  do_syscall_64+0xfa/0x3b0
[  136.661511][ T5878]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.663914][ T5878] 
[  136.664803][ T5878] Freed by task 7097:
[  136.666058][ T5878]  kasan_save_track+0x3e/0x80
[  136.667689][ T5878]  kasan_save_free_info+0x46/0x50
[  136.669576][ T5878]  __kasan_slab_free+0x5b/0x80
[  136.671315][ T5878]  kfree+0x18e/0x440
[  136.672817][ T5878]  udp_tunnel_nic_netdevice_event+0x11ab/0x1810
[  136.675294][ T5878]  notifier_call_chain+0x1b6/0x3e0
[  136.677368][ T5878]  unregister_netdevice_many_notify+0x14d7/0x1ff0
[  136.680082][ T5878]  unregister_netdevice_queue+0x33c/0x380
[  136.682295][ T5878]  nsim_destroy+0x1dd/0x670
[  136.683624][ T5878]  __nsim_dev_port_del+0x14d/0x1b0
[  136.685177][ T5878]  nsim_dev_reload_destroy+0x288/0x490
[  136.687048][ T5878]  nsim_dev_reload_down+0x8a/0xc0
[  136.688866][ T5878]  devlink_reload+0x1b6/0x8d0
[  136.690638][ T5878]  devlink_nl_reload_doit+0xb35/0xd50
[  136.692541][ T5878]  genl_family_rcv_msg_doit+0x215/0x300
[  136.694318][ T5878]  genl_rcv_msg+0x60e/0x790
[  136.695973][ T5878]  netlink_rcv_skb+0x208/0x470
[  136.697603][ T5878]  genl_rcv+0x28/0x40
[  136.699202][ T5878]  netlink_unicast+0x82f/0x9e0
[  136.700917][ T5878]  netlink_sendmsg+0x805/0xb30
[  136.702588][ T5878]  __sock_sendmsg+0x21c/0x270
[  136.704138][ T5878]  ____sys_sendmsg+0x505/0x830
[  136.705845][ T5878]  ___sys_sendmsg+0x21f/0x2a0
[  136.707412][ T5878]  __x64_sys_sendmsg+0x19b/0x260
[  136.709324][ T5878]  do_syscall_64+0xfa/0x3b0
[  136.711224][ T5878]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.713314][ T5878] 
[  136.714317][ T5878] Last potentially related work creation:
[  136.716119][ T5878]  kasan_save_stack+0x3e/0x60
[  136.718017][ T5878]  kasan_record_aux_stack+0xbd/0xd0
[  136.720311][ T5878]  insert_work+0x3d/0x330
[  136.722122][ T5878]  __queue_work+0xbaf/0xfb0
[  136.723978][ T5878]  queue_work_on+0x181/0x270
[  136.725650][ T5878]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  136.727540][ T5878]  udp_tunnel_push_rx_port+0x180/0x200
[  136.729332][ T5878]  geneve_offload_rx_ports+0xd7/0x160
[  136.730935][ T5878]  geneve_netdevice_event+0x6a/0x80
[  136.732638][ T5878]  notifier_call_chain+0x1b6/0x3e0
[  136.734334][ T5878]  call_netdevice_notifiers+0x88/0xc0
[  136.736452][ T5878]  udp_tunnel_nic_netdevice_event+0xdff/0x1810
[  136.738899][ T5878]  notifier_call_chain+0x1b6/0x3e0
[  136.740559][ T5878]  register_netdevice+0x1608/0x1ae0
[  136.742324][ T5878]  nsim_create+0xae8/0xf10
[  136.743791][ T5878]  __nsim_dev_port_add+0x6b6/0xb10
[  136.745419][ T5878]  nsim_dev_port_add_all+0x37/0xf0
[  136.747050][ T5878]  nsim_dev_reload_up+0x451/0x780
[  136.748871][ T5878]  devlink_reload+0x4ec/0x8d0
[  136.750325][ T5878]  devlink_nl_reload_doit+0xb35/0xd50
[  136.752178][ T5878]  genl_family_rcv_msg_doit+0x215/0x300
[  136.754221][ T5878]  genl_rcv_msg+0x60e/0x790
[  136.755610][ T5878]  netlink_rcv_skb+0x208/0x470
[  136.757283][ T5878]  genl_rcv+0x28/0x40
[  136.758689][ T5878]  netlink_unicast+0x82f/0x9e0
[  136.760253][ T5878]  netlink_sendmsg+0x805/0xb30
[  136.761948][ T5878]  __sock_sendmsg+0x21c/0x270
[  136.763704][ T5878]  ____sys_sendmsg+0x505/0x830
[  136.765262][ T5878]  ___sys_sendmsg+0x21f/0x2a0
[  136.766796][ T5878]  __x64_sys_sendmsg+0x19b/0x260
[  136.768643][ T5878]  do_syscall_64+0xfa/0x3b0
[  136.770412][ T5878]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.772825][ T5878] 
[  136.773841][ T5878] Second to last potentially related work creation:
[  136.776494][ T5878]  kasan_save_stack+0x3e/0x60
[  136.778422][ T5878]  kasan_record_aux_stack+0xbd/0xd0
[  136.780449][ T5878]  insert_work+0x3d/0x330
[  136.782285][ T5878]  __queue_work+0xcd2/0xfb0
[  136.784134][ T5878]  queue_work_on+0x181/0x270
[  136.785944][ T5878]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  136.788084][ T5878]  udp_tunnel_push_rx_port+0x180/0x200
[  136.790239][ T5878]  vxlan_offload_rx_ports+0x139/0x200
[  136.792419][ T5878]  vxlan_netdevice_event+0x111/0x470
[  136.794537][ T5878]  notifier_call_chain+0x1b6/0x3e0
[  136.796557][ T5878]  call_netdevice_notifiers+0x88/0xc0
[  136.798739][ T5878]  udp_tunnel_nic_netdevice_event+0xdff/0x1810
[  136.801281][ T5878]  notifier_call_chain+0x1b6/0x3e0
[  136.803374][ T5878]  register_netdevice+0x1608/0x1ae0
[  136.805484][ T5878]  nsim_create+0xae8/0xf10
[  136.807304][ T5878]  __nsim_dev_port_add+0x6b6/0xb10
[  136.809294][ T5878]  nsim_dev_port_add_all+0x37/0xf0
[  136.811331][ T5878]  nsim_dev_reload_up+0x451/0x780
[  136.813373][ T5878]  devlink_reload+0x4ec/0x8d0
[  136.815317][ T5878]  devlink_nl_reload_doit+0xb35/0xd50
[  136.817457][ T5878]  genl_family_rcv_msg_doit+0x215/0x300
[  136.819643][ T5878]  genl_rcv_msg+0x60e/0x790
[  136.821633][ T5878]  netlink_rcv_skb+0x208/0x470
[  136.823590][ T5878]  genl_rcv+0x28/0x40
[  136.825215][ T5878]  netlink_unicast+0x82f/0x9e0
[  136.827267][ T5878]  netlink_sendmsg+0x805/0xb30
[  136.829289][ T5878]  __sock_sendmsg+0x21c/0x270
[  136.831230][ T5878]  ____sys_sendmsg+0x505/0x830
[  136.833165][ T5878]  ___sys_sendmsg+0x21f/0x2a0
[  136.835010][ T5878]  __x64_sys_sendmsg+0x19b/0x260
[  136.836920][ T5878]  do_syscall_64+0xfa/0x3b0
[  136.838457][ T5878]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.840663][ T5878] 
[  136.841681][ T5878] The buggy address belongs to the object at ffff8880275cec00
[  136.841681][ T5878]  which belongs to the cache kmalloc-256 of size 256
[  136.846856][ T5878] The buggy address is located 176 bytes inside of
[  136.846856][ T5878]  freed 256-byte region [ffff8880275cec00, ffff8880275ced00)
[  136.851389][ T5878] 
[  136.852374][ T5878] The buggy address belongs to the physical page:
[  136.854427][ T5878] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x275ce
[  136.857307][ T5878] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  136.860012][ T5878] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  136.862644][ T5878] page_type: f5(slab)
[  136.863867][ T5878] raw: 00fff00000000040 ffff88801a441b40 dead000000000122 0000000000000000
[  136.866811][ T5878] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  136.869465][ T5878] head: 00fff00000000040 ffff88801a441b40 dead000000000122 0000000000000000
[  136.872816][ T5878] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  136.876233][ T5878] head: 00fff00000000001 ffffea00009d7381 00000000ffffffff 00000000ffffffff
[  136.879663][ T5878] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  136.882990][ T5878] page dumped because: kasan: bad access detected
[  136.885494][ T5878] page_owner tracks the page as allocated
[  136.887706][ T5878] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7096, tgid 7095 (syz.2.305), ts 136396390023, free_ts 123803670792
[  136.896126][ T5878]  post_alloc_hook+0x240/0x2a0
[  136.897986][ T5878]  get_page_from_freelist+0x21e4/0x22c0
[  136.900226][ T5878]  __alloc_frozen_pages_noprof+0x181/0x370
[  136.902616][ T5878]  alloc_pages_mpol+0x232/0x4a0
[  136.904579][ T5878]  allocate_slab+0x8a/0x370
[  136.906334][ T5878]  ___slab_alloc+0xbeb/0x1410
[  136.908182][ T5878]  __kmalloc_cache_noprof+0x296/0x3d0
[  136.910350][ T5878]  devl_region_create+0x14f/0x380
[  136.912407][ T5878]  nsim_dev_reload_up+0x2c9/0x780
[  136.914431][ T5878]  devlink_reload+0x4ec/0x8d0
[  136.916321][ T5878]  devlink_nl_reload_doit+0xb35/0xd50
[  136.918454][ T5878]  genl_family_rcv_msg_doit+0x215/0x300
[  136.920782][ T5878]  genl_rcv_msg+0x60e/0x790
[  136.922661][ T5878]  netlink_rcv_skb+0x208/0x470
[  136.924640][ T5878]  genl_rcv+0x28/0x40
[  136.926339][ T5878]  netlink_unicast+0x82f/0x9e0
[  136.928301][ T5878] page last free pid 6732 tgid 6730 stack trace:
[  136.931521][ T5878]  __free_frozen_pages+0xbc4/0xd30
[  136.933566][ T5878]  __put_partials+0x156/0x1a0
[  136.935461][ T5878]  put_cpu_partial+0x17c/0x250
[  136.937562][ T5878]  __slab_free+0x2d5/0x3c0
[  136.939266][ T5878]  qlist_free_all+0x97/0x140
[  136.941128][ T5878]  kasan_quarantine_reduce+0x148/0x160
[  136.943217][ T5878]  __kasan_slab_alloc+0x22/0x80
[  136.945099][ T5878]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  136.947253][ T5878]  create_new_namespaces+0x31/0x720
[  136.949439][ T5878]  __se_sys_setns+0x2dc/0x17a0
[  136.951384][ T5878]  do_syscall_64+0xfa/0x3b0
[  136.953203][ T5878]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  136.955727][ T5878] 
[  136.956759][ T5878] Memory state around the buggy address:
[  136.959047][ T5878]  ffff8880275ceb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  136.962310][ T5878]  ffff8880275cec00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  136.965512][ T5878] >ffff8880275cec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  136.968794][ T5878]                                      ^
[  136.971071][ T5878]  ffff8880275ced00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  136.974300][ T5878]  ffff8880275ced80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  136.977655][ T5878] ==================================================================
[  136.984808][ T5878] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  136.987932][ T5878] CPU: 1 UID: 0 PID: 5878 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  136.991643][ T5878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  136.995801][ T5878] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  136.998766][ T5878] Call Trace:
[  137.000139][ T5878]  <TASK>
[  137.001658][ T5878]  dump_stack_lvl+0x99/0x250
[  137.003533][ T5878]  ? __asan_memcpy+0x40/0x70
[  137.005448][ T5878]  ? __pfx_dump_stack_lvl+0x10/0x10
[  137.007530][ T5878]  ? __pfx__printk+0x10/0x10
[  137.009387][ T5878]  vpanic+0x281/0x750
[  137.010986][ T5878]  ? preempt_schedule+0xae/0xc0
[  137.012921][ T5878]  ? __pfx_vpanic+0x10/0x10
[  137.014658][ T5878]  ? preempt_schedule_common+0x83/0xd0
[  137.016871][ T5878]  ? preempt_schedule+0xae/0xc0
[  137.018791][ T5878]  ? __pfx_preempt_schedule+0x10/0x10
[  137.020996][ T5878]  panic+0xb9/0xc0
[  137.022547][ T5878]  ? __pfx_panic+0x10/0x10
[  137.024354][ T5878]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  137.026807][ T5878]  ? __mutex_lock+0x147/0x1350
[  137.028787][ T5878]  check_panic_on_warn+0x89/0xb0
[  137.030806][ T5878]  ? __mutex_lock+0x147/0x1350
[  137.032753][ T5878]  end_report+0x78/0x160
[  137.034470][ T5878]  kasan_report+0x129/0x150
[  137.036279][ T5878]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  137.038415][ T5878]  ? __mutex_lock+0x147/0x1350
[  137.039897][ T5878]  __mutex_lock+0x147/0x1350
[  137.041262][ T5878]  ? __mutex_lock+0x5bb/0x1350
[  137.042754][ T5878]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  137.045226][ T5878]  ? __pfx___mutex_lock+0x10/0x10
[  137.047266][ T5878]  ? __lock_acquire+0xab9/0xd20
[  137.049225][ T5878]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  137.051639][ T5878]  ? process_scheduled_works+0x9ef/0x17b0
[  137.053922][ T5878]  ? process_scheduled_works+0x9ef/0x17b0
[  137.056222][ T5878]  process_scheduled_works+0xae1/0x17b0
[  137.058452][ T5878]  ? __pfx_process_scheduled_works+0x10/0x10
[  137.060885][ T5878]  worker_thread+0x8a0/0xda0
[  137.062772][ T5878]  kthread+0x711/0x8a0
[  137.064244][ T5878]  ? __pfx_worker_thread+0x10/0x10
[  137.065943][ T5878]  ? __pfx_kthread+0x10/0x10
[  137.067583][ T5878]  ? _raw_spin_unlock_irq+0x23/0x50
[  137.069600][ T5878]  ? lockdep_hardirqs_on+0x9c/0x150
[  137.071637][ T5878]  ? __pfx_kthread+0x10/0x10
[  137.073504][ T5878]  ret_from_fork+0x3fc/0x770
[  137.075377][ T5878]  ? __pfx_ret_from_fork+0x10/0x10
[  137.077390][ T5878]  ? __switch_to_asm+0x39/0x70
[  137.079315][ T5878]  ? __switch_to_asm+0x33/0x70
[  137.081352][ T5878]  ? __pfx_kthread+0x10/0x10
[  137.083291][ T5878]  ret_from_fork_asm+0x1a/0x30
[  137.085226][ T5878]  </TASK>
[  137.087241][ T5878] Kernel Offset: disabled
[  137.088989][ T5878] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:42:48  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000063 RBX=0000000000000063 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900043bf130
R8 =ffff888021090237 R9 =1ffff11004212046 R10=dffffc0000000000 R11=ffffffff854f3d80
R12=dffffc0000000000 R13=ffffffff99aff8fa R14=ffffffff99df4420 R15=0000000000000000
RIP=ffffffff854f3dfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8616000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fba67974c40 CR3=00000000286ee000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 000000316e616c77
XMM02=00007fba67b97498 00007fba67b97470 XMM03=00007fba67b974a8 00007fba67b974a0
XMM04=00007fba686fd100 00007fba67b97460 XMM05=00007fba67b97478 00007fba67b974c0
XMM06=00007fba67b974b8 00007fba67b974b0 XMM07=00007fba67b974a8 00007fba67b974a0
XMM08=0000000000000000 00007fba67a12ee7 XMM09=0000000000000000 00007fba67a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff8b79e01a RBX=ffffc90008aaeec0 RCX=4320f2d2426bdf00 RDX=0000000000000001
RSI=ffffffff8b79e01a RDI=ffffc90008aaeec0 RBP=ffffc90008aaee90 RSP=ffffc90008aaee00
R8 =ffffc90008aafee0 R9 =0000000000000000 R10=ffffc90008aaee58 R11=ffffffff81ac3820
R12=ffff888106ca5640 R13=1ffff92001155dec R14=ffffffff81ac3820 R15=ffffc90008aaee08
RIP=ffffffff81ac3820 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f77c6d366c0 ffffffff 00c00000
GS =0000 ffff8881a3c16000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f77c41f5fc8 CR3=000000010fa8a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f77c6012e53
XMM06=0000000000000000 00007f77c6012e4d XMM07=0000000000000000 00007f77c6012e61
XMM08=0000000000000000 00007f77c6012ee7 XMM09=0000000000000000 00007f77c6012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
