last executing test programs:

1.425038839s ago: executing program 1 (id=644):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x80}, 0x1, 0x7}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffc}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xf68}]}}}]}]}], {0x14}}, 0x78}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x2, 0x7, 0x5, 0x101, 0x4, 0x6, 0x10001, 0x0, <r3=>0x0}, &(0x7f0000000280)=0x20)
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e23, @loopback}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000540)={r3, 0x6, 0xfffffff2, 0xefc, 0x6, 0x7, 0x8, 0x408, {r5, @in={{0x2, 0x4e20, @remote}}, 0x7, 0x8, 0x0, 0xe, 0x400}}, &(0x7f00000002c0)=0xb0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x6b, 0x1, 0x1, 0x9b}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000e0cf49f769b9a9bb6ade9dea00000000000000"], 0x50)
r9 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r9, 0x29, 0xc8, 0x0, 0xc000000)
setsockopt$MRT6_FLUSH(r9, 0x29, 0xd1, &(0x7f0000000340), 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000780)={0x0, r6}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x40, 0x0)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000006c0)={0x0, 0x0, 0x8}, 0x8)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x10106, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r8}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r10, &(0x7f0000000a80), 0x0}, 0x20)
sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
getsockopt$XDP_STATISTICS(r9, 0x11b, 0x7, &(0x7f0000000a40), &(0x7f0000000a80)=0x30)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23e}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x2b}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)

1.300340695s ago: executing program 2 (id=648):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a30000000000800"], 0x6c}}, 0x0) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) (async)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r1, 0x89e3, 0x0) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newsa={0x168, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x33}, {@in=@broadcast, 0x0, 0x33}, @in=@remote, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1ff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @encap={0x1c, 0x4, {0x1, 0x4e22, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x38}}}, @coaddr={0x14, 0xe, @in=@loopback}]}, 0x168}}, 0x0)

1.238559405s ago: executing program 2 (id=649):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000002000000000000000000000008000000"], 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000080000002360a11ee0330098d7e6c5de9a612a307a00c622f2d5be1074e829a0b2f775e068637d0048c3b12084954df5fb517f762cd44e3c1d98753293", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000181f0000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf91000000000000b702000003000000850000002a000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x2f}, 0x94)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10)
getsockname$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640)=0xffffffffffffffff, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x17, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xd09}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x1, 0xbe, &(0x7f0000000500)=""/190, 0x41100, 0x10, '\x00', r4, 0x25, r5, 0x8, &(0x7f0000000740)={0x3, 0x6}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0xb, 0x80000000, 0x7f}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000800)=[r0], &(0x7f0000000840)=[{0x4, 0x3, 0x9, 0x8}]}, 0x94)
setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f0000000080), 0x8)
sendmmsg$sock(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@txtime={{0x18, 0x1, 0x3d, 0x5d9}}], 0x18}}], 0x1, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @rand_addr=0x64010101}, {0x2, 0x0, @broadcast}, {0x2, 0x2000, @empty}, 0x2a0})
ioctl$sock_inet_SIOCDELRT(r6, 0x890c, &(0x7f0000000940)={0xfffffffffffffdfd, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1})
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={<r7=>0x0, @in={{0x2, 0x4e21, @empty}}, 0xe, 0x3ff, 0xcb, 0x13fa, 0x0, 0x608, 0x2a}, &(0x7f0000000000)=0x9c)
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x9, 0x3}, {0x0, 0xffff}, {0x9, 0xfff1}}}, 0x24}}, 0x4044004)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000c80)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0xb8, 0xb8, 0xb8, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x5, 0x0, {[{{@ip={@remote, @remote, 0xff, 0xff000000, 'geneve1\x00', 'pimreg1\x00', {}, {0xff}, 0x11, 0x0, 0x10}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private=0xa010101, @broadcast, 0xffffffff, 0xffffff00, 'veth1_macvtap\x00', 'rose0\x00', {}, {}, 0xa, 0x1}, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8)
r10 = socket(0x10, 0x803, 0x0)
setsockopt$sock_int(r10, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4)
sendto(r10, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
setsockopt$sock_int(r10, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4)
recvmmsg(r10, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @ldst={0x3, 0x0, 0x4, 0x1, 0x4, 0x1, 0xffffffffffffffff}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x42}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x33}, 0x94)
r11 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r11, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r7, 0x40, 0x400}, 0xc)
socket$key(0xf, 0x3, 0x2)
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@deltclass={0x34, 0x29, 0x4, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x2}, {0xb, 0x9}, {0xb, 0x6}}, [@tclass_kind_options=@c_fq_codel={0xd}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)

1.178106739s ago: executing program 2 (id=650):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x5b}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4, 0x40}, {}, {}, {}, {}, {0x0, 0x0, 0xd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x0, 0x401}, {}, {0x80}, {0x0, 0x0, 0x9}, {}, {}, {}, {0x0, 0x0, 0x7ff}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {0x0, 0xfffffffd}, {}, {0x0, 0x101}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x2000000}, {}, {}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x80000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0xfffffffa}], [{}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x20004000)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffdf2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60352105000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
close(r6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))

555.12666ms ago: executing program 1 (id=664):
r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @netrom}, [@null, @bcast, @rose]}, &(0x7f0000000080)=0x48, 0x80000)
shutdown(r0, 0x1)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c80)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x6ecb22e0}, 0x0, 0x0, 0x0, 0x5}}}]}, 0x78}}, 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r6=>0x0})
connect$can_bcm(r5, &(0x7f0000000080)={0x1d, r6}, 0x10)
r7 = socket(0x28, 0x5, 0x0)
r8 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r8, 0x4)
connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
sendmmsg(r7, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0)
r10 = accept4$unix(r8, 0x0, 0x0, 0x800)
recvfrom$unix(r10, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0)
sendmsg$can_bcm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0)
socket(0x2, 0x80805, 0x0)
close(0x3)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000280)={'ip6gre0\x00', r4, 0x4, 0x9, 0x1, 0x401, 0x4a, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x700, 0x7, 0x2d42, 0x9}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x6, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18020000040000000000000000000002180000000100008000000000060000003c2200f10000000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x1f00, 0x3}, 0x94)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newsa={0x154, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@private2, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @empty}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x800000000}, {0x10, 0xd29}, 0x70bd27, 0x0, 0xa, 0x1, 0xfe}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x10000000}}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x154}}, 0x0)
r11 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r11, 0x11, 0x67, &(0x7f0000000000)=0x3ff, 0x4)

454.647587ms ago: executing program 1 (id=666):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}}, 0x4000800)

370.946413ms ago: executing program 0 (id=668):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x80}, 0x1, 0x7}, 0x0) (async)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) (async)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000540)={0x198, r3, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1d0}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x72df}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3fc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0xfffffffffffffd47, 0x1, 0x2aa6}]}, @TIPC_NLA_NODE={0xd0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xca, 0x3, "e1cd3e26bf50873e9baab45a613d0374842b0de3452b4901dd5333f6c60ea432f0145c009d3c3c90b1369903b9324cc97788cbfc3df6de30ee9fe3a1fcce66b4b1aa92b840463fb696183d63a95243f59deb50c6484aaf4afb665e5b95524d9d386b93a86f58fbb17951ae7ead1d67a18f14d6b6195d64e902f9ba5c26d6a492bc569820431ea9b47c6a661230032827d7e50e3f842c1e174f380f7db597b813dfec044669fa95d9f07d30f992311bb9cba24384394ff5a713f93ccc7285e8a1afbf5368a3ff"}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x0, 0x3, 0xf}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x7, 0x4, 0xfffffff5}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x2d2e7f4741227b6a}, 0x40000) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23e}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x2b}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000400)={0x5, 0x1})

370.120176ms ago: executing program 1 (id=669):
socket$packet(0x11, 0xa, 0x300)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000080)={'geneve0\x00'})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x8100}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="600100000000000000aa000000000000000000000000000000000040000000000000000000010000000000000000000000000000000000de7800000000ece1da731701443f2b354c1d9f2fa284cee781f97210d1bd8518ab0454037e284a8031df7c5b77fe9d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000330000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000006d001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000801000000000000b2be4bc53e13496458a584878298a2d3700dcd538a87e8351c1a6bd53d255bd04d000000"], 0x160}}, 0x0)

368.164786ms ago: executing program 0 (id=670):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113380000000000bf1000000000000025000200091b00003d030000000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200001400000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590ac99b798f8125f1c322c2a154a8a8d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{}, &(0x7f0000000200), &(0x7f0000000d80)='%-010d \x00'}, 0xffffffffffffff3b)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)

300.505901ms ago: executing program 2 (id=671):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000340)=@random="05000000", 0x4, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, 0x1, 0x4, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xd}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_MODE={0xa, 0x2, {0x101, 0x2}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x80}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40055}, 0x40000)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d0000000190001000000000000000000ac14140d000000000000000000000000000000020000000000000000000000004e2300004e2600000a00000000000000218ade4109ff03b4f8eab907382cbf0627403371f5d50fab304d81c475d357", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffffffffffff0000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000600000000000000fcffffffffffffff000000000000000000000000000000000000000000000000010100000000000000000000000000000c00150059073500e40c00000c0008000800080001080000"], 0xd0}, 0x1, 0x0, 0x0, 0x4}, 0x20004800)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000140), 0x4)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r10=>0x0})
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000140001002bbd7000fedbdf250a088000", @ANYRES32, @ANYBLOB="08000800e0feffff130002"], 0x34}, 0x1, 0x2}, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r10, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0)
r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan0\x00', <r13=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x54, r12, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000)
sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x208}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="000229bd0063bc6d294a816487b33bbbcda5", @ANYRES32=r13, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4040800)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x38, r7, 0x8, 0x870bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}, 0x1, 0x0, 0x0, 0xc040}, 0x40000)
getsockopt$bt_hci(r1, 0x11a, 0x2, 0x0, &(0x7f0000000000))
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000000000a010101000000000000000000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES8=r0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048460000000000000000000000000008001d00000000000800220003"], 0x148}}, 0x0)

298.770918ms ago: executing program 0 (id=672):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x120}}, 0x84)

295.898892ms ago: executing program 1 (id=673):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', <r2=>0x0})
r3 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
sendmsg$can_raw(r3, &(0x7f0000000180)={&(0x7f00000005c0)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@can={{}, 0xfb, 0x0, 0x4, 0x0, "500000b74b958e56"}, 0x10}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=@newsa={0x150, 0x10, 0x713, 0x0, 0x25dfdbfe, {{@in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in6=@local}, {@in=@broadcast, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x4, 0xa}, [@algo_auth_trunc={0x5d, 0x14, {{'cmac(aes)\x00'}, 0x88, 0x0, "35f6fd8fd57fd44aa5074c50bcc4059acb"}}]}, 0x150}}, 0x44000)

220.245376ms ago: executing program 0 (id=674):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x57}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000780)={'macsec0\x00', 0x646})
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800a000100717565756500000014000280080004400000001006000340000300000900010073797a30000000000900020073797a32"], 0xa0}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925001900fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048460000000000000000000000000008001d00000000000800220003"], 0x148}}, 0x0)

78.950697ms ago: executing program 1 (id=675):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4014)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000001080)=0x8)
sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f00000014c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001340)={0x124, r1, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x30}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1f0}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7ff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6aa}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffff7}]}, @NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0xfff, 0x7, 0x3, 0xc9c, 0x7, 0x3]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5a3}]}, @NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0xb, 0x7, 0x7, 0x4, 0x8, 0x8, 0x80000000, 0x0]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x67}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x317}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7fffffff}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x708}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6df}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4e}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x23}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ec}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x8001}, 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = accept$inet(r3, &(0x7f00000010c0)={0x2, 0x0, @private}, &(0x7f0000001100)=0x10)
getsockopt$sock_buf(r6, 0x1, 0x3b, &(0x7f0000001140)=""/137, &(0x7f0000001240)=0x89)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0xb4, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x110, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x9}]}}]}, 0x140}, 0x1, 0x0, 0x0, 0x51}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, 0x0, 0x0)
unshare(0x6a040000)
socket(0x8, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006911bc00000000008510000002000000850800008b00000095000000000000009500a50500000000699b43160164f7d8c18db44ce3cf122c2d74e3c1b081c16865a27cd49574c26244542623f02a5e19f2aba86f807a3b25c228c3cae180920fc8dba13064e95243659a6a2355e361a2d17b47c4f7044cc168d2a93340ecbce95e922dcf4259932d2d25198c032df2700688ffbbf0d97ccecea92abf074d8dd932426e7dd470472a9b80bfa515d611ef8e7b18b5bcfc5f7b3bcf89bd8b88c9351c1ab6f92bf13a5bc2c7d1fd1c1b148404f8d416483603c238ef00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r8}, 0x8)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r10, 0x1, 0x7, &(0x7f00000000c0)=0x41004, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000080)=0x2, 0xfffffffffffffe96)
connect$inet(r10, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)

78.115073ms ago: executing program 0 (id=676):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}}, 0x4000800)

77.2574ms ago: executing program 2 (id=677):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x20048004)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0x110, r2, 0x60e2e000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x200, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r3)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008840}, 0x20040800)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000480)={0x260, r6, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x5d}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x11}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x230, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x204, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0xaf}, @NL80211_WOWLAN_TCP_SRC_PORT={0x6, 0x4, 0xa30b}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @empty}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x3a, 0x6, "fa4332eab366d44397850d1c6e347477cc4d173c893e1dada3076a1a12f71976f4821883e26d2451e60d0abd8d17af18ddc28163f653"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD={0x31, 0x6, "b4a5682d9db12ed6841abe5371f41829387c76336bacba0216a59f8063af631a2b3f8821bd92a4ed7e719368e9"}, @NL80211_WOWLAN_TCP_WAKE_MASK={0x94, 0xb, "d7b0879c639a0ecdf74b55a2fbee4b78950cf33c340ff157265416a412d4da0bc7c6507df50724b90285cdb7d6192a11e5373555bb250f8a92eaa39c8fb45382c1199885d34f9cad0dce28a8e3d62f9ff30de92176149ed5b128f301e7f04eaaf04e4fdf18d0b1fc6e411f03ca256ebf9c8d4d554505827c7d1299eae85941a2cc11ac4735c31a0e77cece0bb150c155"}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_TOKEN={0xe4, 0x8, {0x4, 0xfffffff9, "43e595729afb51bdf310c03c80eeba30b551c7e853ed5fcbaad03979585250854f617711ef308cc63f3c23259961e512ef936e6f9e6d9ac3c0dfffdcb6ea063c7973dafdef159425a21dceb1a0fb3337888fdb0ed45ddf78cffe100987df72f8a4cce75393e806bf6ef6650d711be037bb4f22e8a6ce025e3df7163f74445a5dd39c427f3276d96ffda14b9a137da4915577c625a8a13e5a0a8e9eaff2149b1b8d9388e2fbfbe60baab48635820929093372e643c6ddfc7febef9e33e68c28194a7d682b85da4af013409f0d84261d7a5f976a1f6cd61e81"}}]}, @NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x1c, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @broadcast}, @NL80211_WOWLAN_TCP_DATA_PAYLOAD_SEQ={0x10, 0x7, {0x1, 0x3, 0x5}}]}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x40008c4}, 0x0)
r8 = accept4(0xffffffffffffffff, &(0x7f0000000780)=@can, &(0x7f0000000800)=0x80, 0x80000)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000840)={<r9=>0x0, @in6={{0xa, 0x4e21, 0x4, @local, 0x3ff}}, 0xc, 0x2, 0x5, 0x200, 0x5}, &(0x7f0000000900)=0x98)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x6d, &(0x7f0000000940)={r9, 0x52, "87d725cbe4dd71f80f0272c69af0ca4b6415cb841689b1103e1079ddcb4821a10a6da9c9ee7a3659ad328007538e63cf271e3859f213e1d990d0d6805193d547d58eeb8c7f5e22340d87b1781ddc009e07b8"}, &(0x7f00000009c0)=0x5a)
sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, r4, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x6}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x3}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x7}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xf1c}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048895}, 0x4001)
sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0xcd81e81fa4b7cb23}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x28, r6, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x49}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x2040000}, 0x8000)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r8, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x2c, r5, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x2c}}, 0x52)
sendmsg$ETHTOOL_MSG_EEE_SET(r8, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044000}, 0x4)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2404c000}, 0x41)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000f00)=<r10=>0x0)
connect$nfc_raw(r8, &(0x7f0000000f40)={0x27, r10, 0x0, 0x1}, 0x10)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x48, 0x1406, 0x200, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x8004)
pipe(&(0x7f00000010c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001100)={r11, 0xffffffffffffffff, 0x4}, 0x10)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_AUTHENTICATE(r12, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x3c, r6, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xf, 0x1c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="cb12a673bca5"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048814}, 0x90)
sendmsg$NL80211_CMD_DEL_PMKSA(r12, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x34, r6, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0x18, 0x34, @random="1f4ed8e6a17f4e5af07fb9616f5b7dbd5d845db4"}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x3c, r6, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xee, 0x55}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c040)

622.207µs ago: executing program 0 (id=678):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x5b}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4, 0x40}, {}, {}, {}, {}, {0x0, 0x0, 0xd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x0, 0x401}, {}, {0x80}, {0x0, 0x0, 0x9}, {}, {}, {}, {0x0, 0x0, 0x7ff}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {0x0, 0xfffffffd}, {}, {0x0, 0x101}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x2000000}, {}, {}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x80000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0xfffffffa}], [{}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x20004000)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffdf2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60354105000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
close(r6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))

0s ago: executing program 2 (id=679):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)

kernel console output (not intermixed with test programs):

syzkaller login: [   81.166120][   T51] cfg80211: failed to load regulatory.db
Warning: Permanently added '[localhost]:53236' (ED25519) to the list of known hosts.
[  211.078680][ T5851] cgroup: Unknown subsys name 'net'
[  211.206444][ T5851] cgroup: Unknown subsys name 'cpuset'
[  211.210381][ T5851] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  212.870113][ T5851] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  216.907291][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  216.910455][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  216.913198][ T5862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  216.915930][ T5862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  216.918545][ T5862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  216.982271][ T5862] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  216.985565][ T5862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  216.991833][ T5866] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  216.995745][ T5866] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  216.998541][ T5866] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  217.003632][ T5866] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  217.006462][ T5866] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  217.021124][ T5868] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  217.024709][ T5868] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  217.027437][ T5868] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  217.249439][ T5859] chnl_net:caif_netlink_parms(): no params data found
[  217.271695][ T5863] chnl_net:caif_netlink_parms(): no params data found
[  217.359914][ T5864] chnl_net:caif_netlink_parms(): no params data found
[  217.424767][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.427178][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.429735][ T5859] bridge_slave_0: entered allmulticast mode
[  217.432644][ T5859] bridge_slave_0: entered promiscuous mode
[  217.440974][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.443633][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.446009][ T5863] bridge_slave_0: entered allmulticast mode
[  217.448744][ T5863] bridge_slave_0: entered promiscuous mode
[  217.452105][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.454996][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.457263][ T5863] bridge_slave_1: entered allmulticast mode
[  217.462477][ T5863] bridge_slave_1: entered promiscuous mode
[  217.466479][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.469208][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.471948][ T5859] bridge_slave_1: entered allmulticast mode
[  217.475974][ T5859] bridge_slave_1: entered promiscuous mode
[  217.558792][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  217.565809][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  217.571434][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  217.575616][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.577935][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.580196][ T5864] bridge_slave_0: entered allmulticast mode
[  217.582878][ T5864] bridge_slave_0: entered promiscuous mode
[  217.588432][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  217.604919][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.607271][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.609629][ T5864] bridge_slave_1: entered allmulticast mode
[  217.612499][ T5864] bridge_slave_1: entered promiscuous mode
[  217.650357][ T5859] team0: Port device team_slave_0 added
[  217.654235][ T5863] team0: Port device team_slave_0 added
[  217.666970][ T5859] team0: Port device team_slave_1 added
[  217.670364][ T5863] team0: Port device team_slave_1 added
[  217.675860][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  217.705079][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  217.708582][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0
[  217.710775][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.718976][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  217.732316][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0
[  217.735873][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.743784][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  217.756821][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1
[  217.758983][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.766925][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  217.770853][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1
[  217.773357][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.781222][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  217.802163][ T5864] team0: Port device team_slave_0 added
[  217.825626][ T5864] team0: Port device team_slave_1 added
[  217.848722][ T5859] hsr_slave_0: entered promiscuous mode
[  217.851383][ T5859] hsr_slave_1: entered promiscuous mode
[  217.865233][ T5863] hsr_slave_0: entered promiscuous mode
[  217.867640][ T5863] hsr_slave_1: entered promiscuous mode
[  217.869805][ T5863] debugfs: 'hsr0' already exists in 'hsr'
[  217.871681][ T5863] Cannot create hsr debugfs directory
[  217.883064][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0
[  217.885847][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.894901][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  217.900832][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1
[  217.903853][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.912374][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  218.000095][ T5864] hsr_slave_0: entered promiscuous mode
[  218.002470][ T5864] hsr_slave_1: entered promiscuous mode
[  218.005047][ T5864] debugfs: 'hsr0' already exists in 'hsr'
[  218.006896][ T5864] Cannot create hsr debugfs directory
[  218.179326][ T5863] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  218.185946][ T5863] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  218.206289][ T5863] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  218.232678][ T5863] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  218.262170][ T5859] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  218.277275][ T5859] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  218.292770][ T5859] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  218.307490][ T5859] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  218.347298][ T5864] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  218.372885][ T5864] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  218.380362][ T5864] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  218.385034][ T5864] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  218.435777][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0
[  218.472440][ T5863] 8021q: adding VLAN 0 to HW filter on device team0
[  218.482349][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.485192][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  218.495051][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0
[  218.502430][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.504852][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  218.521760][ T5859] 8021q: adding VLAN 0 to HW filter on device team0
[  218.539647][   T83] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.541907][   T83] bridge0: port 1(bridge_slave_0) entered forwarding state
[  218.563496][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.565728][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  218.590775][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0
[  218.627690][ T5864] 8021q: adding VLAN 0 to HW filter on device team0
[  218.642809][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.645115][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  218.675166][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.677429][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[  218.703036][ T5864] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  218.707191][ T5864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  218.762529][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0
[  218.807170][ T5863] veth0_vlan: entered promiscuous mode
[  218.820545][ T5863] veth1_vlan: entered promiscuous mode
[  218.847747][ T5863] veth0_macvtap: entered promiscuous mode
[  218.857121][ T5863] veth1_macvtap: entered promiscuous mode
[  218.868446][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0
[  218.882629][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0
[  218.891078][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0
[  218.901503][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1
[  218.916253][ T5888] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  218.918965][ T5889] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  218.925818][ T5889] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  218.928591][ T5889] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  218.955927][ T5864] veth0_vlan: entered promiscuous mode
[  218.969680][ T5859] veth0_vlan: entered promiscuous mode
[  218.978977][ T5864] veth1_vlan: entered promiscuous mode
[  218.984687][ T5859] veth1_vlan: entered promiscuous mode
[  219.004330][ T5868] Bluetooth: hci0: command tx timeout
[  219.029382][ T5864] veth0_macvtap: entered promiscuous mode
[  219.047486][ T5864] veth1_macvtap: entered promiscuous mode
[  219.064588][ T5859] veth0_macvtap: entered promiscuous mode
[  219.068673][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.071112][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.076642][ T5859] veth1_macvtap: entered promiscuous mode
[  219.083648][ T5868] Bluetooth: hci1: command tx timeout
[  219.083683][ T5234] Bluetooth: hci2: command tx timeout
[  219.102846][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0
[  219.115044][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.117402][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.117798][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1
[  219.135826][ T5889] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.144880][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0
[  219.161083][ T5889] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.168247][ T5889] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.172427][ T5863] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  219.181765][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1
[  219.185978][ T5889] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.200835][ T5889] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.221819][ T5889] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.227217][ T5924] netlink: 'syz.2.3': attribute type 8 has an invalid length.
[  219.248453][ T5889] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.251138][ T5889] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.327720][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.331203][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.363306][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.369110][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.394769][ T5930] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  219.405750][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.409496][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.412077][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.417203][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.578126][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7'.
[  219.584551][ T5941] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  219.631973][ T5942] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1'.
[  219.662697][ T5953] netlink: 120 bytes leftover after parsing attributes in process `syz.2.10'.
[  219.741770][ T5961] team0: No ports can be present during mode change
[  219.788715][ T5962] Zero length message leads to an empty skb
[  219.868547][ T5976] netlink: 100 bytes leftover after parsing attributes in process `syz.2.17'.
[  219.967940][ T5983] netlink: 32 bytes leftover after parsing attributes in process `syz.2.19'.
[  219.979888][ T5983] netlink: 88 bytes leftover after parsing attributes in process `syz.2.19'.
[  220.044310][ T5979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15'.
[  220.050376][ T5979] bridge_slave_1: left allmulticast mode
[  220.052173][ T5979] bridge_slave_1: left promiscuous mode
[  220.057866][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.064512][ T5979] bridge_slave_0: left allmulticast mode
[  220.066325][ T5979] bridge_slave_0: left promiscuous mode
[  220.068153][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.170147][ T5995] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24'.
[  220.235535][ T6000] warning: `syz.2.25' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  220.279694][ T6003] netlink: 112 bytes leftover after parsing attributes in process `syz.2.26'.
[  220.748716][ T6026] syzkaller0: entered promiscuous mode
[  220.750419][ T6026] syzkaller0: entered allmulticast mode
[  220.895933][ T6036] netlink: 'syz.2.35': attribute type 2 has an invalid length.
[  221.094374][ T5234] Bluetooth: hci0: command tx timeout
[  221.163359][ T5234] Bluetooth: hci2: command tx timeout
[  221.163436][ T5868] Bluetooth: hci1: command tx timeout
[  221.497502][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.37'.
[  221.714434][ T6050] 8021q: VLANs not supported on xfrm0
[  221.721577][ T6050] pimreg: tun_chr_ioctl cmd 2147767506
[  222.388713][ T6121] netlink: 'syz.2.62': attribute type 1 has an invalid length.
[  222.392685][ T6121] netlink: 'syz.2.62': attribute type 1 has an invalid length.
[  222.397010][ T6122] netlink: 'syz.2.62': attribute type 1 has an invalid length.
[  222.399292][ T6122] netlink: 'syz.2.62': attribute type 1 has an invalid length.
[  222.449228][ T6125] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.451762][ T6125] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.858562][ T6180] syz.1.74 uses obsolete (PF_INET,SOCK_PACKET)
[  223.083191][ T6194] delete_channel: no stack
[  223.166717][ T5868] Bluetooth: hci0: command tx timeout
[  223.245579][ T5868] Bluetooth: hci1: command tx timeout
[  223.247324][ T5868] Bluetooth: hci2: command tx timeout
[  223.359311][ T6224] team0: No ports can be present during mode change
[  223.409738][ T6227] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  223.418368][ T6227] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  223.467687][ T6230] netlink: 'syz.0.90': attribute type 10 has an invalid length.
[  223.475887][ T6230] 8021q: adding VLAN 0 to HW filter on device batadv0
[  223.482237][ T6230] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  223.490757][ T6230] syz.0.90 (6230) used greatest stack depth: 18808 bytes left
[  223.680281][ T6254] team0: No ports can be present during mode change
[  223.940612][ T6277] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  224.503295][ T6331] team0: No ports can be present during mode change
[  224.776679][ T6343] __nla_validate_parse: 47 callbacks suppressed
[  224.776690][ T6343] netlink: 140 bytes leftover after parsing attributes in process `syz.1.124'.
[  224.852909][ T6350] batadv_slave_0: entered promiscuous mode
[  224.868144][ T6351] batadv_slave_0: left promiscuous mode
[  225.008317][ T6365] netlink: 'syz.2.131': attribute type 27 has an invalid length.
[  225.241005][ T6386] netlink: 104 bytes leftover after parsing attributes in process `syz.2.139'.
[  225.244503][ T5234] Bluetooth: hci0: command tx timeout
[  225.334676][ T5868] Bluetooth: hci1: command tx timeout
[  225.336530][ T5234] Bluetooth: hci2: command tx timeout
[  225.565629][ T6382] netlink: 'syz.0.137': attribute type 6 has an invalid length.
[  225.616433][ T6399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.142'.
[  225.741217][ T6403] netlink: 'syz.2.144': attribute type 1 has an invalid length.
[  225.744472][ T6403] netlink: 'syz.2.144': attribute type 2 has an invalid length.
[  225.747774][ T6403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.144'.
[  225.901788][ T6408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.145'.
[  226.020672][ T6410] netlink: 2 bytes leftover after parsing attributes in process `syz.1.146'.
[  226.025779][ T6410] batadv_slave_1: entered promiscuous mode
[  226.034519][ T6410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.146'.
[  226.311986][ T6425] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  226.342568][ T6424] syzkaller0: entered promiscuous mode
[  226.345405][ T6424] syzkaller0: entered allmulticast mode
[  226.362131][ T5293] udevd[5293]: worker [5985] terminated by signal 33 (Unknown signal 33)
[  226.365578][ T5293] udevd[5293]: worker [5985] failed while handling '/devices/virtual/bluetooth/hci2/hci2:200/input4/event3'
[  227.227206][ T6449] netlink: 'syz.0.159': attribute type 10 has an invalid length.
[  227.235019][ T6449] 8021q: adding VLAN 0 to HW filter on device team0
[  227.239608][ T6449] bond0: (slave team0): Enslaving as an active interface with an up link
[  227.242480][ T6441] netlink: 248 bytes leftover after parsing attributes in process `syz.2.157'.
[  227.262346][ T6449] netlink: 104 bytes leftover after parsing attributes in process `syz.0.159'.
[  227.312505][ T6452] netlink: 88 bytes leftover after parsing attributes in process `syz.1.160'.
[  227.512782][ T6478] team0: No ports can be present during mode change
[  227.654292][ T6489] tipc: Started in network mode
[  227.656811][ T6489] tipc: Node identity , cluster identity 4711
[  227.659323][ T6489] tipc: Failed to obtain node identity
[  227.661331][ T6489] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[  227.698506][ T6483] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96
[  227.708811][ T6492] IPVS: set_ctl: invalid protocol: 51 10.1.1.0:20002
[  227.825485][ T6505] team0: No ports can be present during mode change
[  228.192015][ T6544] sctp: [Deprecated]: syz.0.185 (pid 6544) Use of int in max_burst socket option.
[  228.192015][ T6544] Use struct sctp_assoc_value instead
[  228.313384][ T6559] tipc: Started in network mode
[  228.316187][ T6559] tipc: Node identity 3205b1b6a52c, cluster identity 4711
[  228.320872][ T6559] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  228.324805][ T6559] syzkaller0: entered promiscuous mode
[  228.326994][ T6559] syzkaller0: entered allmulticast mode
[  228.346941][ T6559] tipc: Resetting bearer <eth:syzkaller0>
[  228.367762][ T6558] tipc: Resetting bearer <eth:syzkaller0>
[  228.392456][ T6558] tipc: Disabling bearer <eth:syzkaller0>
[  228.496457][ T6573] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  228.546560][ T5889] bond0: (slave bond_slave_0): interface is now down
[  228.547346][ T6579] netlink: 'syz.0.197': attribute type 10 has an invalid length.
[  228.548756][ T5889] bond0: (slave bond_slave_1): interface is now down
[  228.566126][ T5889] bond0: (slave batadv0): interface is now down
[  228.568001][ T5889] bond0: (slave team0): interface is now down
[  228.574988][ T6579] syz_tun: entered promiscuous mode
[  228.587974][ T6579] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  228.595254][ T5889] bond0: (slave bond_slave_0): interface is now down
[  228.597405][ T5889] bond0: (slave bond_slave_1): interface is now down
[  228.599415][ T5889] bond0: (slave batadv0): interface is now down
[  228.607619][ T5889] bond0: (slave team0): interface is now down
[  228.609532][ T5889] bond0: (slave syz_tun): interface is now down
[  228.619585][ T5889] bond0: now running without any active interface!
[  228.986904][ T6625] netlink: 'syz.1.213': attribute type 4 has an invalid length.
[  229.009496][ T6626] tipc: Started in network mode
[  229.011272][ T6626] tipc: Node identity ce7ac34d27c9, cluster identity 4711
[  229.015506][ T6626] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  229.020248][ T6626] syzkaller0: entered promiscuous mode
[  229.022107][ T6626] syzkaller0: entered allmulticast mode
[  229.032930][ T6626] tipc: Resetting bearer <eth:syzkaller0>
[  229.039169][ T6624] tipc: Resetting bearer <eth:syzkaller0>
[  229.046437][ T6624] tipc: Disabling bearer <eth:syzkaller0>
[  229.198423][ T6631] netlink: 'syz.0.217': attribute type 4 has an invalid length.
[  230.109936][ T6676] __nla_validate_parse: 16 callbacks suppressed
[  230.109949][ T6676] netlink: 20 bytes leftover after parsing attributes in process `syz.1.234'.
[  230.169424][ T6679] ip6tnl1: entered promiscuous mode
[  230.171221][ T6679] ip6tnl1: entered allmulticast mode
[  230.177215][ T6679] team0: Device ip6tnl1 is of different type
[  230.187910][ T6681] netlink: 104 bytes leftover after parsing attributes in process `syz.1.236'.
[  230.232238][ T6684] netlink: 'syz.1.237': attribute type 1 has an invalid length.
[  230.252412][ T6684] 8021q: adding VLAN 0 to HW filter on device bond1
[  230.272252][ T6684] netlink: 28 bytes leftover after parsing attributes in process `syz.1.237'.
[  230.293319][ T6684] gretap1: entered promiscuous mode
[  230.434767][ T6701] netlink: 240 bytes leftover after parsing attributes in process `syz.1.237'.
[  230.579183][ T6715] netlink: 248 bytes leftover after parsing attributes in process `syz.1.248'.
[  230.606834][ T6715] (unnamed net_device) (uninitialized): option arp_validate: invalid value (1048579)
[  230.687227][ T6720] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.250'.
[  230.955226][ T6734] netlink: 24 bytes leftover after parsing attributes in process `syz.1.252'.
[  231.007279][ T5868] Bluetooth: hci2: command 0x0405 tx timeout
[  231.749774][ T6750] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  231.951038][ T6764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.256'.
[  232.052976][ T6763] syzkaller0: entered promiscuous mode
[  232.064485][ T6763] syzkaller0: entered allmulticast mode
[  233.009493][ T6650] Set syz1 is full, maxelem 65536 reached
[  234.064791][ T6796] netlink: 88 bytes leftover after parsing attributes in process `syz.2.264'.
acpid: input device has been disconnected, fd 9
[  235.058298][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.290'.
[  235.109096][ T6867] IPVS: Scheduler module ip_vs_sip not found
[  235.151699][ T6873] netlink: 96 bytes leftover after parsing attributes in process `syz.2.292'.
[  235.201357][ T6881] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  235.348075][ T6901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.299'.
[  235.556646][ T6923] IPVS: Error joining to the multicast group
[  235.559961][ T6923] netlink: 104 bytes leftover after parsing attributes in process `syz.1.308'.
[  235.598640][ T6930] netlink: 212280 bytes leftover after parsing attributes in process `syz.1.310'.
[  235.815235][ T6943] netlink: 104 bytes leftover after parsing attributes in process `syz.2.314'.
[  235.872737][ T6947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.316'.
[  235.979022][ T6955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.318'.
[  236.005318][ T6957] netlink: 104 bytes leftover after parsing attributes in process `syz.0.320'.
[  236.225671][ T6933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  236.350895][ T6969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.326'.
[  236.796383][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'.
[  236.973475][ T6980] raw_sendmsg: syz.0.329 forgot to set AF_INET. Fix it!
[  237.259280][ T6987] netlink: 'syz.0.333': attribute type 8 has an invalid length.
[  237.410226][ T6998] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  237.424270][ T6998] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  237.619277][ T7010] Driver unsupported XDP return value 0 on prog  (id 82) dev N/A, expect packet loss!
[  237.855503][ T7024] macsec1: entered promiscuous mode
[  237.857767][ T7024] macsec1: entered allmulticast mode
[  238.167842][ T7040] netlink: 'syz.2.349': attribute type 3 has an invalid length.
[  238.171179][ T7040] netlink: 'syz.2.349': attribute type 3 has an invalid length.
[  238.212318][ T7048] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  238.288128][ T7048] syzkaller0: entered promiscuous mode
[  238.289948][ T7048] syzkaller0: entered allmulticast mode
[  238.303464][ T7057] netlink: 'syz.2.356': attribute type 142 has an invalid length.
[  238.307422][ T7057] syz_tun: entered allmulticast mode
[  238.317183][ T7057] dvmrp1: entered allmulticast mode
[  238.332218][ T7054] syz_tun: left allmulticast mode
[  240.268261][ T7126] __nla_validate_parse: 12 callbacks suppressed
[  240.268275][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.378'.
[  240.275231][ T7126] netlink: 'syz.1.378': attribute type 29 has an invalid length.
[  240.278555][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.378'.
[  240.565941][ T7137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.381'.
[  240.640602][ T7142] netlink: 132 bytes leftover after parsing attributes in process `syz.2.383'.
[  240.682688][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.384'.
[  240.729274][ T7144] netlink: 120 bytes leftover after parsing attributes in process `syz.1.384'.
[  240.802969][ T7153] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  240.809979][ T7153] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  240.951646][ T7164] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  240.981099][ T7170] netlink: ct family unspecified
[  241.001075][ T7170] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  241.187060][ T7183] netlink: 112 bytes leftover after parsing attributes in process `syz.0.398'.
[  241.322332][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.399'.
[  241.515167][ T7194] openvswitch: netlink: IPv4 tun info is not correct
[  242.071063][ T7214] netlink: 'syz.1.410': attribute type 6 has an invalid length.
[  242.082233][ T7214] netlink: 185280 bytes leftover after parsing attributes in process `syz.1.410'.
[  242.128645][ T7220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.411'.
[  242.328652][ T7235] netlink: 'syz.1.418': attribute type 1 has an invalid length.
[  242.331827][ T7235] netlink: 'syz.1.418': attribute type 1 has an invalid length.
[  242.422179][ T7244] bond2: entered promiscuous mode
[  242.426643][ T7244] bond2: entered allmulticast mode
[  242.428915][ T7244] 8021q: adding VLAN 0 to HW filter on device bond2
[  242.567491][ T7257] netlink: 'syz.1.422': attribute type 10 has an invalid length.
[  242.588903][ T7257] team0: Port device dummy0 added
[  242.597882][ T7257] netlink: 'syz.1.422': attribute type 10 has an invalid length.
[  242.603074][ T7257] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  242.620556][ T7257] team0: Failed to send options change via netlink (err -105)
[  242.624342][ T7257] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  242.628069][ T7257] team0: Port device dummy0 removed
[  242.635420][ T7257] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  242.721608][ T7261] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  242.738210][ T7261] bridge_slave_0: left allmulticast mode
[  242.740395][ T7261] bridge_slave_0: left promiscuous mode
[  242.743047][ T7261] bridge0: port 1(bridge_slave_0) entered disabled state
[  242.751078][ T7261] bridge_slave_1: left allmulticast mode
[  242.754114][ T7261] bridge_slave_1: left promiscuous mode
[  242.756747][ T7261] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.769065][ T7261] bond0: (slave bond_slave_0): Releasing backup interface
[  242.778881][ T7261] bond0: (slave bond_slave_1): Releasing backup interface
[  242.796739][ T7261] team0: Port device team_slave_0 removed
[  242.807251][ T7261] team0: Port device team_slave_1 removed
[  242.810315][ T7261] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  242.813922][ T7261] batman_adv: batadv0: Removing interface: batadv_slave_0
[  242.819000][ T7261] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  242.822021][ T7261] batman_adv: batadv0: Removing interface: batadv_slave_1
[  242.853016][ T7261] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  242.862547][ T7261] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  242.976821][ T7271] vxlan0: entered promiscuous mode
[  242.979115][ T7271] vxlan0: entered allmulticast mode
[  242.982053][ T5888] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  242.986888][ T5888] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  242.991776][ T5888] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  242.996802][ T5888] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  243.738777][ T7314] netlink: 'syz.0.442': attribute type 1 has an invalid length.
[  243.768763][ T7314] bond1 (unregistering): Released all slaves
[  244.217735][ T7335] tc_dump_action: action bad kind
[  244.827643][ T7363] netlink: 'syz.0.461': attribute type 1 has an invalid length.
[  245.198147][ T7410] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  245.329765][ T7420] __nla_validate_parse: 15 callbacks suppressed
[  245.329785][ T7420] netlink: 100 bytes leftover after parsing attributes in process `syz.1.479'.
[  245.889747][ T7461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.489'.
[  245.893982][ T7461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.489'.
[  246.077578][ T7460] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  246.099869][ T7460] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  246.104095][ T7460] batadv_slave_1: left promiscuous mode
[  246.297539][ T7468] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  246.300935][ T7469] syzkaller0: entered promiscuous mode
[  246.303689][ T7469] syzkaller0: entered allmulticast mode
[  246.308278][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  246.312149][   T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  246.321353][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  246.326011][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  246.338563][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  246.342117][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  246.347755][ T7465] tipc: Resetting bearer <eth:syzkaller0>
[  246.351103][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  246.355664][   T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  246.589079][ T7489] netlink: 88 bytes leftover after parsing attributes in process `syz.1.493'.
[  246.641230][ T7493] netlink: 76 bytes leftover after parsing attributes in process `syz.1.494'.
[  246.649222][ T7493] netlink: 120 bytes leftover after parsing attributes in process `syz.1.494'.
[  246.776333][ T7464] tipc: Resetting bearer <eth:syzkaller0>
[  246.794572][ T7464] tipc: Disabling bearer <eth:syzkaller0>
[  246.808234][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.498'.
[  246.814031][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.498'.
[  247.000445][ T7516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.504'.
[  247.380724][ T7536] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  247.456739][ T7539] 8021q: VLANs not supported on ip6tnl0
[  247.460487][ T7539] Bluetooth: MGMT ver 1.23
[  247.470233][ T7539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.512'.
[  247.568641][ T7545] netlink: 'syz.1.515': attribute type 4 has an invalid length.
[  247.799331][ T5909] IPVS: starting estimator thread 0...
[  247.893587][ T7552] IPVS: using max 38 ests per chain, 91200 per kthread
[  248.436349][ T7584] netlink: 'syz.2.525': attribute type 26 has an invalid length.
[  249.438790][ T7620] IPVS: Unknown mcast interface: veth0_virt_wifi
[  249.609733][ T7627] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  250.004349][ T7650] 8021q: adding VLAN 0 to HW filter on device team0
[  250.008424][ T7650] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  250.427604][ T7681] __nla_validate_parse: 8 callbacks suppressed
[  250.427617][ T7681] netlink: 96 bytes leftover after parsing attributes in process `syz.2.563'.
[  250.505421][ T7679] nbd0: detected capacity change from 0 to 127
[  250.564345][ T7678] nbd1: detected capacity change from 0 to 127
[  250.599548][   T56] block nbd1: Receive control failed (result -104)
[  250.599799][ T7682] block nbd0: Receive control failed (result -32)
[  250.607282][ T7696] block nbd1: Dead connection, failed to find a fallback
[  250.610253][ T7696] block nbd1: shutting down sockets
[  250.612663][ T7696] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  250.640479][ T7696] Buffer I/O error on dev nbd1, logical block 0, async page read
[  250.644618][ T7696] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  250.648554][ T7696] Buffer I/O error on dev nbd1, logical block 1, async page read
[  250.661628][ T7696] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  250.667894][ T7696] Buffer I/O error on dev nbd1, logical block 2, async page read
[  250.671496][ T7696] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  250.680959][ T7696] Buffer I/O error on dev nbd1, logical block 3, async page read
[  250.688375][ T7696] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  250.694406][ T7696] Buffer I/O error on dev nbd1, logical block 0, async page read
[  250.698419][ T7696] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  250.702242][ T7696] Buffer I/O error on dev nbd1, logical block 1, async page read
[  250.710608][ T7696] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  250.714827][ T7696] Buffer I/O error on dev nbd1, logical block 2, async page read
[  250.717253][ T7704] netlink: 104 bytes leftover after parsing attributes in process `syz.0.567'.
[  250.718436][ T7696] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  250.725485][ T7696] Buffer I/O error on dev nbd1, logical block 3, async page read
[  250.729346][ T7696] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  250.733056][ T7696] Buffer I/O error on dev nbd1, logical block 0, async page read
[  250.737280][ T7696] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  250.741324][ T7696] Buffer I/O error on dev nbd1, logical block 1, async page read
[  250.748018][ T7696] ldm_validate_partition_table(): Disk read failed.
[  250.755408][ T7696] Dev nbd1: unable to read RDB block 0
[  250.760914][ T7696]  nbd1: unable to read partition table
[  250.779913][ T7696] ldm_validate_partition_table(): Disk read failed.
[  250.787976][ T7696] Dev nbd1: unable to read RDB block 0
[  250.792234][ T7696]  nbd1: unable to read partition table
[  250.847149][ T7713] netlink: 104 bytes leftover after parsing attributes in process `syz.0.571'.
[  251.101974][ T7724] syzkaller1: entered promiscuous mode
[  251.105453][ T7724] syzkaller1: entered allmulticast mode
[  251.111319][ T7724] netlink: 'syz.0.576': attribute type 15 has an invalid length.
[  251.301192][ T7729] netlink: 28 bytes leftover after parsing attributes in process `syz.0.577'.
[  251.305864][ T7729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.577'.
[  251.312110][ T7726] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  251.768956][ T7760] netlink: 48 bytes leftover after parsing attributes in process `syz.2.591'.
[  251.787749][ T7760] team0: Device gtp0 is up. Set it down before adding it as a team port
[  251.876744][ T7760] netlink: 140 bytes leftover after parsing attributes in process `syz.2.591'.
[  251.924262][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.592'.
[  252.200310][  T793] hid-generic 0005:046D:FFF9.0001: reserved main item tag 0xd
[  252.204466][  T793] hid-generic 0005:046D:FFF9.0001: unknown main item tag 0x0
[  252.211042][  T793] hid-generic 0005:046D:FFF9.0001: unknown main item tag 0x6
[  252.215185][  T793] hid-generic 0005:046D:FFF9.0001: unknown main item tag 0x0
[  252.218074][  T793] hid-generic 0005:046D:FFF9.0001: unknown main item tag 0x5
[  252.221015][  T793] hid-generic 0005:046D:FFF9.0001: item fetching failed at offset 50/67
[  252.225147][  T793] hid-generic 0005:046D:FFF9.0001: probe with driver hid-generic failed with error -22
[  252.245581][ T7776] netlink: 88 bytes leftover after parsing attributes in process `syz.2.597'.
[  252.367761][ T7788] netlink: 36 bytes leftover after parsing attributes in process `syz.2.600'.
[  252.578461][ T7802] netlink: 'syz.0.606': attribute type 15 has an invalid length.
[  252.581786][ T7802] netlink: 'syz.0.606': attribute type 15 has an invalid length.
[  253.228921][ T7862] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  253.232445][ T7862] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  253.636568][ T7883] openvswitch: netlink: Multiple metadata blocks provided
[  253.806562][   T60] block nbd0: Connection timed out, retrying (0/1 alive)
[  253.809904][   T60] block nbd0: Connection timed out, retrying (0/1 alive)
[  253.812587][   T60] block nbd0: Connection timed out, retrying (0/1 alive)
[  253.815686][   T60] block nbd0: Connection timed out, retrying (0/1 alive)
[  253.818660][   T60] block nbd0: Dead connection, failed to find a fallback
[  253.821585][   T60] block nbd0: shutting down sockets
[  253.829709][ T7690] ldm_validate_partition_table(): Disk read failed.
[  253.843933][ T7690] Dev nbd0: unable to read RDB block 0
[  253.847600][ T7690]  nbd0: unable to read partition table
[  253.866773][ T7690] ldm_validate_partition_table(): Disk read failed.
[  253.871453][ T7690] Dev nbd0: unable to read RDB block 0
[  253.882171][ T7690]  nbd0: unable to read partition table
[  254.078031][ T7919] netlink: 'syz.0.645': attribute type 1 has an invalid length.
[  254.317876][ T7942] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  254.321568][ T7942] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  255.259054][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  255.261215][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  255.307098][ T8001] netlink: 'syz.0.674': attribute type 25 has an invalid length.
[  255.499702][ T8024] __nla_validate_parse: 16 callbacks suppressed
[  255.499753][ T8024] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.678'.
[  255.499814][ T8023] ------------[ cut here ]------------
[  255.501746][ T8024] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  255.505003][ T8023] WARNING: CPU: 1 PID: 8023 at net/mac80211/rate.c:53 rate_control_rate_init+0x64a/0x6e0
[  255.505028][ T8023] Modules linked in:
[  255.505085][ T8023] CPU: 1 UID: 0 PID: 8023 Comm: syz.2.680 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  255.505096][ T8023] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  255.505102][ T8023] RIP: 0010:rate_control_rate_init+0x64a/0x6e0
[  255.505148][ T8023] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 32 ad d0 f6 90 0f 0b 90 eb e1 e8 27 ad d0 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00
[  255.505156][ T8023] RSP: 0018:ffffc90021b56f70 EFLAGS: 00010293
[  255.505165][ T8023] RAX: ffffffff8aeefe89 RBX: ffff888122ca8000 RCX: ffff88801ef3b980
[  255.505171][ T8023] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  255.505177][ T8023] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8aeef9a3
[  255.505182][ T8023] R10: dffffc0000000000 R11: ffffed1024595031 R12: 1ffff1102459500a
[  255.505189][ T8023] R13: ffff888122898e40 R14: 0000000000000001 R15: ffffffff8aeef9a3
[  255.505195][ T8023] FS:  00007f81b367f6c0(0000) GS:ffff8881a3c21000(0000) knlGS:0000000000000000
[  255.505202][ T8023] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  255.505207][ T8023] CR2: 00007f88f996bd58 CR3: 0000000021638000 CR4: 00000000000006f0
[  255.505231][ T8023] Call Trace:
[  255.505236][ T8023]  <TASK>
[  255.505245][ T8023]  rate_control_rate_init_all_links+0x109/0x1a0
[  255.505260][ T8023]  sta_apply_auth_flags+0x1c2/0x400
[  255.505272][ T8023]  sta_apply_parameters+0xe4b/0x15b0
[  255.505291][ T8023]  ieee80211_add_station+0x424/0x6a0
[  255.505304][ T8023]  rdev_add_station+0x108/0x290
[  255.505316][ T8023]  nl80211_new_station+0x1755/0x1b70
[  255.505334][ T8023]  ? __pfx_nl80211_new_station+0x10/0x10
[  255.505343][ T8023]  ? netdev_run_todo+0xe1d/0xea0
[  255.505364][ T8023]  ? nl80211_pre_doit+0x4f1/0x930
[  255.505380][ T8023]  genl_family_rcv_msg_doit+0x215/0x300
[  255.505393][ T8023]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  255.505409][ T8023]  ? bpf_lsm_capable+0x9/0x20
[  255.505421][ T8023]  ? security_capable+0x7e/0x2e0
[  255.505436][ T8023]  genl_rcv_msg+0x60e/0x790
[  255.505448][ T8023]  ? __pfx_genl_rcv_msg+0x10/0x10
[  255.505455][ T8023]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  255.505467][ T8023]  ? __pfx_nl80211_new_station+0x10/0x10
[  255.505476][ T8023]  ? __pfx_nl80211_post_doit+0x10/0x10
[  255.505489][ T8023]  ? __asan_memcpy+0x40/0x70
[  255.505500][ T8023]  ? __pfx_ref_tracker_free+0x10/0x10
[  255.505515][ T8023]  netlink_rcv_skb+0x208/0x470
[  255.505525][ T8023]  ? __lock_acquire+0xab9/0xd20
[  255.505538][ T8023]  ? __pfx_genl_rcv_msg+0x10/0x10
[  255.505547][ T8023]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  255.505566][ T8023]  ? down_read+0x1ad/0x2e0
[  255.505580][ T8023]  genl_rcv+0x28/0x40
[  255.505592][ T8023]  netlink_unicast+0x82f/0x9e0
[  255.505606][ T8023]  ? __pfx_netlink_unicast+0x10/0x10
[  255.505616][ T8023]  ? netlink_sendmsg+0x642/0xb30
[  255.505626][ T8023]  ? skb_put+0x11b/0x210
[  255.505645][ T8023]  netlink_sendmsg+0x805/0xb30
[  255.505660][ T8023]  ? __pfx_netlink_sendmsg+0x10/0x10
[  255.505672][ T8023]  ? aa_sock_msg_perm+0xf1/0x1d0
[  255.505686][ T8023]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  255.505696][ T8023]  ? __pfx_netlink_sendmsg+0x10/0x10
[  255.505707][ T8023]  __sock_sendmsg+0x21c/0x270
[  255.505751][ T8023]  ____sys_sendmsg+0x505/0x830
[  255.505767][ T8023]  ? __pfx_____sys_sendmsg+0x10/0x10
[  255.505784][ T8023]  ? import_iovec+0x74/0xa0
[  255.505794][ T8023]  ___sys_sendmsg+0x21f/0x2a0
[  255.505808][ T8023]  ? __pfx____sys_sendmsg+0x10/0x10
[  255.505836][ T8023]  ? __fget_files+0x2a/0x420
[  255.509605][ T8024] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  255.510307][ T8023]  ? __fget_files+0x3a0/0x420
[  255.636872][ T8023]  __x64_sys_sendmsg+0x19b/0x260
[  255.638434][ T8023]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  255.640212][ T8023]  ? rcu_is_watching+0x15/0xb0
[  255.641737][ T8023]  ? do_syscall_64+0xbe/0x3b0
[  255.643346][ T8023]  do_syscall_64+0xfa/0x3b0
[  255.644886][ T8023]  ? lockdep_hardirqs_on+0x9c/0x150
[  255.646560][ T8023]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.648631][ T8023]  ? exc_page_fault+0x9f/0xf0
[  255.650349][ T8023]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.652475][ T8023] RIP: 0033:0x7f81b278ebe9
[  255.654070][ T8023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  255.660894][ T8023] RSP: 002b:00007f81b367f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  255.664520][ T8023] RAX: ffffffffffffffda RBX: 00007f81b29b5fa0 RCX: 00007f81b278ebe9
[  255.667379][ T8023] RDX: 0000000004000004 RSI: 0000200000000200 RDI: 0000000000000003
[  255.670323][ T8023] RBP: 00007f81b2811e19 R08: 0000000000000000 R09: 0000000000000000
[  255.673352][ T8023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  255.676752][ T8023] R13: 00007f81b29b6038 R14: 00007f81b29b5fa0 R15: 00007fffa18b94e8
[  255.680160][ T8023]  </TASK>
[  255.681522][ T8023] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  255.684478][ T8023] CPU: 1 UID: 0 PID: 8023 Comm: syz.2.680 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  255.688955][ T8023] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  255.692356][ T8023] Call Trace:
[  255.693782][ T8023]  <TASK>
[  255.695047][ T8023]  dump_stack_lvl+0x99/0x250
[  255.696904][ T8023]  ? __asan_memcpy+0x40/0x70
[  255.698914][ T8023]  ? __pfx_dump_stack_lvl+0x10/0x10
[  255.700625][ T8023]  ? __pfx__printk+0x10/0x10
[  255.702246][ T8023]  vpanic+0x281/0x750
[  255.703687][ T8023]  ? __pfx__printk+0x10/0x10
[  255.705464][ T8023]  ? __pfx_vpanic+0x10/0x10
[  255.707123][ T8023]  ? is_bpf_text_address+0x292/0x2b0
[  255.708865][ T8023]  panic+0xb9/0xc0
[  255.710044][ T8023]  ? __pfx_panic+0x10/0x10
[  255.711538][ T8023]  __warn+0x31b/0x4b0
[  255.712830][ T8023]  ? rate_control_rate_init+0x64a/0x6e0
[  255.714729][ T8023]  ? rate_control_rate_init+0x64a/0x6e0
[  255.716669][ T8023]  report_bug+0x2be/0x4f0
[  255.718248][ T8023]  ? rate_control_rate_init+0x64a/0x6e0
[  255.720117][ T8023]  ? rate_control_rate_init+0x64a/0x6e0
[  255.721920][ T8023]  ? rate_control_rate_init+0x64c/0x6e0
[  255.723858][ T8023]  handle_bug+0x84/0x160
[  255.725193][ T8023]  exc_invalid_op+0x1a/0x50
[  255.726846][ T8023]  asm_exc_invalid_op+0x1a/0x20
[  255.728604][ T8023] RIP: 0010:rate_control_rate_init+0x64a/0x6e0
[  255.730737][ T8023] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 32 ad d0 f6 90 0f 0b 90 eb e1 e8 27 ad d0 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00
[  255.737841][ T8023] RSP: 0018:ffffc90021b56f70 EFLAGS: 00010293
[  255.740561][ T8023] RAX: ffffffff8aeefe89 RBX: ffff888122ca8000 RCX: ffff88801ef3b980
[  255.744538][ T8023] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  255.747522][ T8023] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8aeef9a3
[  255.750371][ T8023] R10: dffffc0000000000 R11: ffffed1024595031 R12: 1ffff1102459500a
[  255.753108][ T8023] R13: ffff888122898e40 R14: 0000000000000001 R15: ffffffff8aeef9a3
[  255.755649][ T8023]  ? rate_control_rate_init+0x163/0x6e0
[  255.757459][ T8023]  ? rate_control_rate_init+0x163/0x6e0
[  255.759290][ T8023]  ? rate_control_rate_init+0x649/0x6e0
[  255.761042][ T8023]  rate_control_rate_init_all_links+0x109/0x1a0
[  255.762999][ T8023]  sta_apply_auth_flags+0x1c2/0x400
[  255.764607][ T8023]  sta_apply_parameters+0xe4b/0x15b0
[  255.766222][ T8023]  ieee80211_add_station+0x424/0x6a0
[  255.767865][ T8023]  rdev_add_station+0x108/0x290
[  255.769421][ T8023]  nl80211_new_station+0x1755/0x1b70
[  255.771194][ T8023]  ? __pfx_nl80211_new_station+0x10/0x10
[  255.773444][ T8023]  ? netdev_run_todo+0xe1d/0xea0
[  255.775094][ T8023]  ? nl80211_pre_doit+0x4f1/0x930
[  255.776799][ T8023]  genl_family_rcv_msg_doit+0x215/0x300
[  255.778959][ T8023]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  255.781015][ T8023]  ? bpf_lsm_capable+0x9/0x20
[  255.782678][ T8023]  ? security_capable+0x7e/0x2e0
[  255.784317][ T8023]  genl_rcv_msg+0x60e/0x790
[  255.785973][ T8023]  ? __pfx_genl_rcv_msg+0x10/0x10
[  255.787796][ T8023]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  255.789608][ T8023]  ? __pfx_nl80211_new_station+0x10/0x10
[  255.791359][ T8023]  ? __pfx_nl80211_post_doit+0x10/0x10
[  255.793096][ T8023]  ? __asan_memcpy+0x40/0x70
[  255.794564][ T8023]  ? __pfx_ref_tracker_free+0x10/0x10
[  255.796211][ T8023]  netlink_rcv_skb+0x208/0x470
[  255.797806][ T8023]  ? __lock_acquire+0xab9/0xd20
[  255.799348][ T8023]  ? __pfx_genl_rcv_msg+0x10/0x10
[  255.800926][ T8023]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  255.802589][ T8023]  ? down_read+0x1ad/0x2e0
[  255.803999][ T8023]  genl_rcv+0x28/0x40
[  255.805263][ T8023]  netlink_unicast+0x82f/0x9e0
[  255.806782][ T8023]  ? __pfx_netlink_unicast+0x10/0x10
[  255.808442][ T8023]  ? netlink_sendmsg+0x642/0xb30
[  255.810007][ T8023]  ? skb_put+0x11b/0x210
[  255.811334][ T8023]  netlink_sendmsg+0x805/0xb30
[  255.812846][ T8023]  ? __pfx_netlink_sendmsg+0x10/0x10
[  255.814491][ T8023]  ? aa_sock_msg_perm+0xf1/0x1d0
[  255.816041][ T8023]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  255.817751][ T8023]  ? __pfx_netlink_sendmsg+0x10/0x10
[  255.819463][ T8023]  __sock_sendmsg+0x21c/0x270
[  255.820975][ T8023]  ____sys_sendmsg+0x505/0x830
[  255.822479][ T8023]  ? __pfx_____sys_sendmsg+0x10/0x10
[  255.824161][ T8023]  ? import_iovec+0x74/0xa0
[  255.825580][ T8023]  ___sys_sendmsg+0x21f/0x2a0
[  255.827008][ T8023]  ? __pfx____sys_sendmsg+0x10/0x10
[  255.828660][ T8023]  ? __fget_files+0x2a/0x420
[  255.830295][ T8023]  ? __fget_files+0x3a0/0x420
[  255.831878][ T8023]  __x64_sys_sendmsg+0x19b/0x260
[  255.833531][ T8023]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  255.835231][ T8023]  ? rcu_is_watching+0x15/0xb0
[  255.836678][ T8023]  ? do_syscall_64+0xbe/0x3b0
[  255.838118][ T8023]  do_syscall_64+0xfa/0x3b0
[  255.839497][ T8023]  ? lockdep_hardirqs_on+0x9c/0x150
[  255.841072][ T8023]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.843005][ T8023]  ? exc_page_fault+0x9f/0xf0
[  255.844434][ T8023]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.846298][ T8023] RIP: 0033:0x7f81b278ebe9
[  255.847685][ T8023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  255.853642][ T8023] RSP: 002b:00007f81b367f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  255.856830][ T8023] RAX: ffffffffffffffda RBX: 00007f81b29b5fa0 RCX: 00007f81b278ebe9
[  255.859585][ T8023] RDX: 0000000004000004 RSI: 0000200000000200 RDI: 0000000000000003
[  255.863155][ T8023] RBP: 00007f81b2811e19 R08: 0000000000000000 R09: 0000000000000000
[  255.867353][ T8023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  255.870925][ T8023] R13: 00007f81b29b6038 R14: 00007f81b29b5fa0 R15: 00007fffa18b94e8
[  255.874643][ T8023]  </TASK>
[  255.877113][ T8023] Kernel Offset: disabled
[  255.879403][ T8023] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:14:50  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffffffff9016b794 RCX=ffffffff9016b798 RDX=ffffffff90c2754e
RSI=ffffffff90c2754e RDI=ffffffff8be32620 RBP=dffffc0000000000 RSP=ffffc90000006b78
R8 =0000000000000001 R9 =ffffffff8172c195 R10=ffffc90000006c98 R11=ffffffff81ac3890
R12=ffffffff90c27552 R13=ffffffff90c27553 R14=ffffc90000006c48 R15=ffffffff9016b794
RIP=ffffffff8172c464 RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb5146b2800 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3c1628 CR3=0000000029108000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bd260 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99de9770 RSP=ffffc90021b56650
R8 =ffff888107d18237 R9 =1ffff11020fa3046 R10=dffffc0000000000 R11=ffffffff854e7100
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e7177 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f81b367f6c0 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f88f996bd58 CR3=0000000021638000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ff00000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007f81b34ed100 00007f81b2987460 XMM05=00007f81b2987478 00007f81b29874c0
XMM06=00007f81b29874b8 00007f81b29874b0 XMM07=00007f81b29874a8 00007f81b29874a0
XMM08=0000000000000000 00007f81b2812ee7 XMM09=0000000000000000 00007f81b2812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
