last executing test programs:

1.659923708s ago: executing program 0 (id=252):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x200}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r0, &(0x7f0000000780)}, 0x20)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x60, 0x3, 0x8, 0x201, 0x0, 0x0, {0x7}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xa}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xc82d}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x60}}, 0xd4)

1.569722767s ago: executing program 0 (id=254):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0)
r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000011000108000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="02100000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x0)
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x80800)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xb}]}, 0x94)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x68, r2, 0x1, 0x0, 0x50f2, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xffffffee, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x24, 0x3c, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x44000)

1.137860601s ago: executing program 2 (id=266):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = socket$kcm(0x10, 0x2, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x2, @local, 0x9}, 0x1c)
connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x3, 0x0, {0xa, 0x0, 0x6, @rand_addr=' \x01\x00', 0x200000}}}, 0x32)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70003000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0812080003000601ff1fbdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x24000810)

1.069802698s ago: executing program 2 (id=268):
r0 = socket$netlink(0x10, 0x3, 0x400000000000004)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
writev(r0, &(0x7f0000000000), 0x0)

1.068686187s ago: executing program 2 (id=270):
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000, '\x00', 0x0, 0x0}, 0x50)
syz_emit_ethernet(0x82, &(0x7f0000000000)={@multicast, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}}}}}}}}, 0x0) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x8, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xc}}]}, &(0x7f0000000080)='GPL\x00', 0xd, 0xff4, &(0x7f0000002e00)=""/4084, 0x0, 0xa1}, 0x94) (async)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x2dd, 0x0, r0, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) (async)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000000fc0)=[{&(0x7f0000000ac0)=""/244, 0xf4}], 0x1, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], <r5=>0x0, 0x2e, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xbf, 0x8, 0x8, &(0x7f0000000540)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x9, 0x1b, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfab, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x0, 0xc, 0xa, 0x6, 0x8}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x7, 0x1d, &(0x7f0000000300)=""/29, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x9, r4, 0x8, &(0x7f0000000340)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x6, 0x6, 0x8}, 0x10, r5, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[r0], 0x0, 0x10, 0x10}, 0x94)

960.291878ms ago: executing program 2 (id=271):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, r0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan1\x00'})
r1 = socket$key(0xf, 0x3, 0x2)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x2, 0xfffffefc, 0x6}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x480a0}, 0x0)

959.921082ms ago: executing program 2 (id=272):
r0 = socket$kcm(0x10, 0x3, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0)
r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x0, r0}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)}, 0x20)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x18, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@exit, @ldst={0x2, 0x1, 0x6, 0x7, 0x4, 0x6, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x101}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ldst={0x2, 0x0, 0x6, 0x0, 0x3, 0xfffffffffffffffc, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r4}, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a15aa2bfe", 0x14}], 0x1}, 0x0)
socket$kcm(0x10, 0x3, 0x10) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) (async)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x0, r0}, 0x18) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f00000001c0), &(0x7f0000000300)}, 0x20) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x18, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@exit, @ldst={0x2, 0x1, 0x6, 0x7, 0x4, 0x6, 0x8}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x101}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ldst={0x2, 0x0, 0x6, 0x0, 0x3, 0xfffffffffffffffc, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00'}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r4}, 0x10) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a15aa2bfe", 0x14}], 0x1}, 0x0) (async)

798.905887ms ago: executing program 2 (id=273):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80)
r2 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockname(r3, 0x0, &(0x7f0000000a80))
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r5=>0x0})
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', r5, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x8, 0x6, 0x520, 0x120, 0x0, 0x1f0, 0x1f0, 0x120, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff, 0xff000000, 0xffffffff], 'ipvlan1\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x9, 0x2, 0x2}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x5002}}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@private=0xa010100, 0x0, 0x32, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r7)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r7)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r10, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c)
connect$inet6(r10, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
r11 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x20}}, 0x1c}}, 0x0)
sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x0)
splice(r10, 0x0, r9, 0x0, 0x7ffff000, 0x6)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x1f4c, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x1f38, 0x1, [@m_pedit={0x1d74, 0xe, 0x0, 0x0, {{0xa}, {0x1d3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x1, 0xbc9e, 0x0, 0xffffffff, 0x1b}, 0xdd, 0xc4, [{0x5, 0x0, 0x2, 0xbd2, 0x5, 0x9}, {0x0, 0xa5, 0x0, 0x7, 0x0, 0x2}, {0x878, 0x4, 0x80000000, 0x7, 0x7, 0x100}]}, [{0x2, 0x7, 0x9, 0x9, 0x5}, {0x2, 0x9, 0xfffffff8, 0x4, 0xfffffffc, 0x3}, {0x8, 0x6, 0x2b, 0x6, 0xffffffff, 0x10001}, {0x7, 0x6, 0x85, 0x3c7, 0x1ff, 0x4}, {0x7, 0x5, 0x1, 0x100, 0x8001, 0x3}, {0xfffffffd, 0x25, 0xc21, 0x2, 0x8, 0x100}, {0x9, 0x9, 0x0, 0x2, 0x1, 0x1}, {0xde, 0xfffffffb, 0x9, 0x2, 0x3, 0x5}, {0xd, 0x8, 0xfffffeff, 0x6, 0x2, 0x7}, {0x2, 0x8d80, 0x3, 0x44, 0x5}, {0x9, 0x1, 0x65c, 0x4, 0x8, 0x2}, {0x800, 0x1, 0x8000, 0x1, 0x0, 0x4}, {0xf, 0x9d1, 0x400, 0xffff4734, 0x2, 0x3520}, {0xb0fd, 0x302, 0x3, 0x3, 0xfffffff8, 0xfffeffff}, {0x2, 0x5, 0x4, 0xcafb, 0xd55e}, {0x4, 0x7fff, 0x40, 0x1ff, 0x401, 0x3150}, {0xf775f906, 0x6, 0xc1, 0x0, 0x2, 0x39dc}, {0x2, 0x9, 0x7, 0x3, 0x9, 0x9886}, {0x0, 0x80000001, 0xed08, 0xf, 0x2fc8, 0x8001}, {0xaf6, 0xc, 0xa, 0x6, 0x9, 0x4}, {0x80, 0x7f, 0x8001, 0x14, 0x9, 0x4}, {0x2, 0x1, 0x5, 0x2, 0x3, 0x8001}, {0x4, 0x6, 0x3534, 0x8000, 0x5, 0x10}, {0x126, 0x6, 0x2de00000, 0x100, 0x9, 0x9000000}, {0x40, 0x3, 0x0, 0x5, 0x4, 0x3}, {0x99e7, 0x80000000, 0x401, 0x1d67bb0e, 0xd3, 0x2}, {0x3, 0xda, 0x0, 0xd1, 0x100, 0x7f}, {0x1, 0x100, 0x3, 0x0, 0xffffff56, 0x9}, {0x7, 0x8, 0xfffffffc, 0x81, 0x9, 0x3b4}, {0x9, 0xe00, 0x90, 0x18000, 0x4, 0xa}, {0x21640f24, 0xfffffff0, 0x0, 0x2, 0x102, 0xffffeb66}, {0xe4, 0x800, 0x9, 0x7, 0x1, 0x5}, {0x5, 0x7, 0x1, 0xf4e8, 0x2, 0x5}, {0x4, 0xd037, 0x7fffffff, 0x8}, {0x6, 0x4, 0x1ff, 0xffffffd2, 0x8, 0x8}, {0x7, 0x6c6, 0xfffffff9, 0x9, 0x80000001, 0xfffffff7}, {0x3, 0x0, 0x5, 0xffff0001, 0x101, 0x5}, {0x6, 0x5, 0x3, 0x4, 0x1270, 0x6}, {0x3, 0x6e, 0x2, 0x0, 0x6, 0x9}, {0x6, 0xfffffffa, 0x3, 0xffff0001, 0x6, 0x7}, {0x15, 0x1, 0x2, 0x5, 0xd, 0x7}, {0x8, 0xc, 0xe6d7, 0x7, 0x7, 0x4}, {0x7f, 0x2, 0x7, 0xf2d, 0x3b30, 0x1}, {0x8001, 0x30000000, 0x0, 0x4, 0x9, 0x4}, {0x2, 0x8e, 0xb322, 0x3ff, 0x5, 0xc8aa}, {0x5, 0x1000, 0xfffffff8, 0x80000000, 0xb70, 0x9}, {0x8, 0x9, 0xfffffb17, 0x9, 0x8, 0x5}, {0x10000, 0x80000000, 0x2, 0x1, 0xa, 0x80000001}, {0x8, 0x7fffffff, 0x11, 0x3ff, 0x8000000, 0x6}, {0x100, 0x1000, 0x6c, 0x8, 0x4, 0x400}, {0x6c0b, 0x5, 0x1ee, 0x6, 0xffff7fff, 0x7}, {0x7fffffff, 0x2, 0x5751fa05, 0xffff7fff, 0x80000001, 0x800}, {0x9, 0x6, 0xe635, 0x5, 0x5, 0x5}, {0x769, 0x0, 0x1, 0x5, 0x2, 0xc2f3}, {0x3, 0x9, 0x0, 0x4, 0x1, 0x5}, {0xa, 0x4, 0xe0000, 0x6, 0x7f, 0xc}, {0x0, 0xf, 0x6, 0x9, 0x3, 0x9}, {0xffffffff, 0x4, 0xa, 0x8001, 0x400, 0x9}, {0x4, 0x6, 0x8000, 0x101, 0x2, 0xdc5}, {0x5, 0xf6, 0x8001, 0x3, 0x6, 0xc}, {0xfd9, 0x9bb, 0x8, 0x2, 0x4, 0x1f}, {0x0, 0x3ff, 0x2, 0x7473, 0x1, 0x4}, {0x401, 0x3536, 0x8, 0x3, 0x10000, 0x400}, {0x5, 0xffffffff, 0x0, 0x6, 0x7ff, 0x56a3}, {0x2eb, 0x6, 0x938, 0x3, 0x6, 0x4}, {0x8001, 0xbb, 0x80000001, 0x5689, 0x3, 0xffffffff}, {0x1aa, 0xfffffff9, 0x401, 0x9, 0x3, 0xf}, {0xff, 0x8000, 0x200, 0x8b1ac340, 0xb0d, 0x100}, {0x8, 0x9, 0x5, 0x4, 0x7fffffff, 0xb77a}, {0x2, 0x1, 0x4, 0x4f, 0x7, 0xce}, {0x2, 0x3e9, 0xbc, 0x8, 0xff}, {0x800, 0x0, 0x4, 0x7, 0x9db8, 0x7c}, {0xfff, 0xfffffff8, 0x5, 0x1, 0x0, 0x8}, {0x1, 0x3, 0x3, 0xb, 0x1, 0x4}, {0x3, 0xfff, 0x0, 0xff, 0x0, 0x2}, {0x3, 0x9, 0xd771, 0x3, 0x9, 0x10000}, {0xe, 0x7, 0x8, 0x9, 0x1, 0x10000}, {0x9, 0x7c6a, 0x1, 0x3, 0x0, 0xcc}, {0x2, 0x1, 0x8, 0x81, 0x7fff, 0xc55e}, {0x7ff, 0x7fff, 0x9, 0x9, 0x7fffffff}, {0x6, 0x54ef6b22, 0x9, 0x9, 0x1, 0x7f}, {0x9, 0x10000, 0x2, 0x1, 0x568e, 0x100}, {0x5, 0x8001, 0x0, 0x85, 0x8, 0x7}, {0x2, 0x5, 0x7, 0x35d685c6, 0x8, 0x4}, {0x4, 0x6, 0xb12, 0x3, 0xff, 0xc4cc}, {0x6, 0x0, 0x4, 0x7, 0x314, 0x61dbfd5c}, {0x101, 0x80, 0x1, 0x7, 0x9, 0x3}, {0xff, 0x9, 0x0, 0x1, 0x3, 0xfff}, {0x5, 0x5, 0x4e, 0x2, 0x0, 0x8}, {0x0, 0x9, 0x4, 0x3, 0x2, 0x6}, {0xa37c, 0x7, 0x8, 0x0, 0x3, 0x8bf4}, {0x2, 0x1fe00, 0x9, 0x6, 0x3, 0x6}, {0xd, 0x6, 0x100, 0x4, 0xd, 0x2f}, {0x3, 0x9, 0x9, 0x100, 0x1252, 0x8}, {0x3e, 0x6, 0x9, 0x4, 0xfffe, 0x19}, {0x6f40, 0x7, 0x9, 0x8e2, 0x401, 0x8}, {0x4, 0x4a1, 0x81, 0x5, 0xfffffff9, 0x9}, {0x0, 0x6, 0xf, 0x5, 0xffffffff, 0x8}, {0x7, 0x2, 0x5, 0x9, 0x7, 0x7ff}, {0x4, 0x59, 0x5, 0x69804ea, 0x2, 0x42c}, {0xbb, 0x8, 0xfa, 0x3, 0xe52}, {0x1, 0xffffff65, 0xffffffc0, 0xac, 0x7, 0x101}, {0x7fff, 0xfffffffc, 0x7, 0xba8, 0xff, 0x4}, {0x52, 0x5, 0x10000, 0x5, 0xfffffff8}, {0x0, 0x7, 0x81, 0x0, 0x7ff, 0x6}, {0x4, 0x3, 0x2ec, 0x6, 0x53e8, 0x4}, {0x10000, 0x3ff, 0x9, 0xfffffffd, 0x2, 0x2}, {0x6, 0x7, 0x1, 0x3, 0x45, 0x8}, {0x1, 0x4, 0x8, 0x639b0d87, 0x3, 0x1}, {0x5, 0xe8a, 0x6, 0x5, 0x0, 0x800000}, {0x7, 0xb, 0x4, 0xb, 0x9, 0x4}, {0x5, 0x400, 0x6, 0x87, 0x5152c593}, {0xd29, 0x55cb8eb8, 0x9, 0x0, 0xf}, {0x4d, 0x9, 0x40, 0x3ff, 0x2, 0xffff}, {0xfcea, 0xa, 0x1, 0x8, 0x6, 0x8000}, {0x8, 0x9, 0x8fac, 0xffffffff, 0x6, 0xaa}, {0x575, 0x9, 0x3, 0x4, 0x8, 0x3}, {0xe71a, 0x9, 0x7f, 0x54, 0x82fb, 0x7f}, {0x5, 0x3, 0x2, 0x1, 0x2, 0x4}, {0x7, 0xfffffffb, 0x8, 0x6, 0x0, 0x6ba}, {0x5, 0x2, 0x8, 0xff, 0x6, 0x9}, {0xa, 0x7, 0x1000, 0x1ff, 0x5}, {0x1, 0x3ff, 0x27dd0704, 0xfffffffe, 0xd91, 0xee05}, {0x3, 0x5, 0xffff481c, 0x3ff, 0xfffffffe, 0x5}, {0x72b5, 0x9, 0x40, 0x2, 0x4, 0xb5}, {0x3ff, 0x6, 0x4, 0x0, 0xdcbd, 0x81}, {0x8, 0x8, 0x8, 0x6, 0x75, 0x2}, {0x9, 0x0, 0xb, 0xe, 0x1, 0x200000}], [{0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x6, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x3, 0x44b90430c68977f2}, {0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x7, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x4}, {0x3}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x4}, {0x2}, {0x5}, {0x4}, {0x3, 0x1}, {0x1}, {0xf4ddba21fef9609c, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {}, {0x5}, {0x4}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x2}, {0x3}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x6, 0x1}, {0x1}, {0x3}, {0x1}, {0x5}, {0x1}, {0x3}, {0x4}, {0x8b2d8945bcb0c5ce}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0xf, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x6, 0x6, 0x10000000, 0x7, 0x3}, 0xfa, 0x8e, [{0x200, 0xd, 0x6, 0x3, 0x8, 0xb}, {0x8001, 0x6, 0x6, 0x7, 0x70d0, 0xf80}, {0x7c, 0xeb, 0x7, 0xc, 0x6, 0x7}]}, [{0x9, 0x1, 0x4, 0x10000000, 0x10000, 0x101}, {0x3, 0x3, 0x8001, 0x9, 0x5, 0xffffffff}, {0x657b, 0x200, 0x77980ca2, 0xe, 0x0, 0xfffffff8}, {0x9, 0x3, 0x9, 0x177, 0xd, 0x9}, {0x8, 0x4, 0x0, 0xc00, 0x622d, 0x8}, {0x1, 0x4, 0x0, 0x4, 0x5, 0x1}, {0xd, 0x1, 0x3, 0x7, 0x7, 0x9c4}, {0x7272b356, 0x6f, 0x1, 0x9, 0x8, 0x3}, {0x9, 0x5, 0x7, 0x1000, 0x8, 0x4}, {0x7, 0x3, 0x6, 0x2, 0x1, 0x3}, {0xe113, 0xff, 0x2, 0xa7e, 0x9, 0x9}, {0x401, 0x3, 0x200000, 0x6, 0x3, 0x8}, {0x800, 0x9, 0x3, 0x81ba, 0x36, 0x7f}, {0x5, 0x0, 0xe9, 0x6, 0x8}, {0x3ff, 0x5, 0x8, 0xf1, 0xe, 0xe}, {0xff, 0x9, 0x4, 0x1, 0x1, 0x5}, {0x80, 0x6, 0x7, 0xa, 0x800, 0xf}, {0x1, 0x0, 0x100, 0x3bfd, 0x1, 0x401}, {0x1, 0x8, 0x10, 0x8, 0x4, 0xfd1d}, {0xfffffffc, 0x8, 0x4, 0x6, 0x7, 0x8}, {0x6, 0x8, 0xa, 0x8, 0x400, 0x5}, {0x92, 0x4, 0x5, 0x7, 0x8731, 0x3}, {0x2, 0x4, 0x54, 0x1, 0xfffffffe, 0x6}, {0x5, 0x0, 0x2, 0x29, 0xfffffffe, 0xe1b}, {0x1, 0x469, 0x1, 0x800, 0x8, 0xa027}, {0x28e, 0x4, 0x2, 0x8, 0x35, 0x5}, {0x7d, 0x9, 0x10000, 0x6, 0x1000, 0x400}, {0xe2f, 0x6, 0x7, 0x3, 0xffffff5a, 0xd}, {0x3cebc8e0, 0x14a9, 0x7, 0x76, 0xf2a, 0x2}, {0x9, 0xbc7, 0x7f, 0x0, 0x6, 0x5}, {0x2, 0x51, 0xaf, 0x5, 0x0, 0x9}, {0x7f, 0x3, 0x3b10, 0x8, 0x10000, 0x400}, {0x3, 0x6, 0x2, 0x6, 0x8, 0x6}, {0x8, 0x4, 0x8, 0x9, 0x8, 0x1ff}, {0xa8, 0xc, 0x7, 0x7ff, 0x3, 0x5}, {0x3, 0x9, 0x7ac3, 0x5, 0x8, 0x800}, {0x80000001, 0x4, 0x3, 0x4, 0x8, 0x8}, {0x9, 0x4, 0x4, 0xade, 0xffffffff, 0x7}, {0x1, 0x6, 0x2, 0x9, 0x9, 0x9}, {0x4, 0x0, 0xd, 0x7, 0x4, 0xd}, {0x394bead6, 0x2, 0x5, 0x9, 0x76, 0x6}, {0xfffffffd, 0x2, 0x3a, 0xc5, 0xfffff800, 0xc}, {0x9, 0x6, 0x7f, 0x1db8, 0x10000, 0x397}, {0x40f49bf7, 0x3, 0x3, 0x400, 0x3, 0x1}, {0x0, 0x2ee, 0x9, 0x8, 0x5c, 0x3}, {0x7, 0x7, 0x101, 0x9, 0x401, 0x1000000}, {0x7, 0x4, 0xf, 0x7fff, 0x2, 0x1}, {0x2, 0xdbdb, 0xf, 0xfffff801, 0x3, 0xf}, {0x0, 0x6, 0x9, 0x4, 0x6, 0x8001}, {0x616be788, 0x5, 0xffffb225, 0x6, 0xb5b, 0x4}, {0x6c, 0xf1d, 0x8, 0x7487c3b4, 0x4, 0x4}, {0x9, 0x56f1be8c, 0x8, 0x9, 0x7, 0x23}, {0x8, 0x2, 0x10000, 0x8, 0x6, 0xffffffff}, {0x4, 0x0, 0x3, 0x506, 0x14, 0x4}, {0x81, 0x6, 0x7, 0x38e2, 0x23bd, 0x3}, {0xfffffffa, 0xe, 0x41e, 0x3, 0x9721, 0x6}, {0x5, 0xffff3723, 0x7, 0x3, 0x3, 0xab5b}, {0xd, 0x400, 0x8001, 0x80000000, 0x8, 0x3}, {0xc256, 0x5, 0x2, 0x1, 0x81, 0x7f}, {0x1, 0x9b7, 0x9, 0x1, 0x3, 0x3ff}, {0xb, 0x4, 0x5, 0x10001, 0x7, 0x7}, {0x9, 0x7f, 0x20, 0x8, 0xfffffffb, 0xc}, {0x5034a9eb, 0x9, 0xfffffff7, 0x2, 0xfffffffe, 0x4a3}, {0x3, 0x4, 0x8000, 0x1, 0x1, 0xfffffff8}, {0x10000, 0x7, 0x7fffffff, 0x9, 0x74c3, 0xfffffff2}, {0xbb, 0x9d, 0x40, 0x8, 0x0, 0x5}, {0xd, 0x8, 0xee05cb0b, 0x4, 0x3, 0x1}, {0x100, 0x9, 0x2, 0x2, 0x8, 0x6}, {0x2, 0x80, 0xf14, 0xda5, 0x0, 0x3}, {0x80000000, 0x7f, 0x0, 0x4bff, 0x1, 0x101}, {0x0, 0x1, 0x9, 0x1, 0x9, 0x10001}, {0xac9, 0x0, 0xfffffff8, 0x8001, 0x9, 0x401}, {0x1, 0x8, 0x7, 0x6, 0x39, 0x1}, {0xffffb510, 0x2, 0x0, 0x6, 0x0, 0x8}, {0x1, 0x7, 0xa, 0xb, 0x4, 0x5}, {0xfffffffb, 0x7, 0x1, 0x0, 0x7ae9, 0xfffffffe}, {0x5, 0x3, 0x47, 0x12c, 0x2, 0x3}, {0x2, 0x7, 0x3, 0xd, 0x2b, 0x3}, {0x9, 0x4, 0x2, 0x200, 0x2, 0x4}, {0x7, 0x6, 0x7fff, 0x7, 0x7fffffff, 0xffffffff}, {0x9, 0x8, 0x6, 0x7f, 0x80000001, 0x3}, {0x6, 0x463, 0x6, 0x2, 0x0, 0x8}, {0x0, 0x23607ceb, 0x9, 0x2, 0x5, 0x6e}, {0x9, 0x1, 0x7, 0x7, 0x525}, {0x800, 0x101, 0xa, 0x200, 0xffff229e, 0x7}, {0xa3a, 0x80, 0x0, 0xd, 0x9, 0x3}, {0x3, 0x4, 0x4, 0x9, 0xc, 0x20000000}, {0x6036e0b5, 0x0, 0x3, 0x2, 0x5, 0x3}, {0x2, 0x5, 0x50e, 0xdb2, 0x9d33, 0x4}, {0x9, 0x9, 0x100, 0x6, 0xfff, 0x7f}, {0x9, 0xfffffffe, 0xc1, 0x401, 0xe93, 0x5}, {0x1, 0x6, 0x8000, 0x4, 0xe868, 0x5}, {0x8, 0xe, 0x4a, 0x7, 0x7, 0x4}, {0x6, 0x2, 0x6, 0x1c0, 0xa7, 0xffffffff}, {0x5, 0x9, 0x5, 0x2, 0x10, 0x1}, {0x0, 0x5, 0x0, 0x3ff, 0x901, 0x2}, {0x6, 0x81, 0x30fa, 0xfffffffc, 0xffffffff, 0x73e}, {0x7, 0x0, 0x5, 0x2, 0x990, 0x40}, {0x101, 0x7, 0x9, 0x3, 0x41, 0x50}, {0x7, 0x3, 0x5, 0x1, 0x7, 0x2}, {0xfffffffd, 0xd, 0x2, 0x80, 0xffffff80, 0xb6ff}, {0xf, 0xc, 0x0, 0x3, 0x1, 0x6}, {0xfff, 0xfff, 0x0, 0x7, 0xaae, 0x1}, {0x6, 0x3, 0x6, 0x1, 0x1, 0xde0}, {0x1, 0x7fffffff, 0x2, 0x9, 0x1f, 0x7fff}, {0x0, 0x9, 0x72, 0x10001, 0x8000, 0x7}, {0x7f, 0x9, 0x10000, 0x3, 0x9, 0x5}, {0x5d, 0x6, 0x200, 0x14, 0x7, 0x2}, {0x0, 0x9, 0xfffffffb, 0x7, 0xbd5d, 0x2}, {0x36f, 0x2, 0xffffffff, 0x0, 0x5c, 0x2}, {0x7fffffff, 0x2, 0x3, 0x7, 0x14, 0x7f}, {0x92e9, 0xacf0, 0x9, 0x7, 0x5}, {0x8, 0xfffffff7, 0x0, 0x2, 0x9, 0x7}, {0x5, 0x4, 0x800, 0x5, 0x80000001}, {0x10, 0x40, 0x6, 0x2, 0x0, 0x7}, {0xd5, 0x6, 0x212d, 0x5300000, 0x1, 0x6789}, {0x7, 0x1, 0x4, 0xfffffffe, 0x6, 0x1}, {0x2, 0xfffffffb, 0xc51, 0x80, 0x0, 0x9}, {0x0, 0xff, 0x3, 0xd, 0x2, 0x7}, {0x0, 0x8001, 0x4, 0x1, 0x7fff, 0xfffff18d}, {0x8, 0x9, 0x2, 0x7, 0x5, 0x800}, {0xfffffffc, 0x9, 0x0, 0x0, 0x6, 0x2}, {0x5, 0x3, 0x3, 0x3, 0x1000, 0x81}, {0x2, 0x3ff, 0x0, 0x6, 0x101, 0x1}, {0x1, 0xaf5, 0x1ff, 0x0, 0x800, 0x800}, {0x8000, 0x80000000, 0x4, 0x0, 0x9, 0x10}, {0x5, 0x6, 0x4, 0x4, 0x3, 0x9}, {0x10001, 0x9, 0x451, 0x9, 0xc5, 0x5}], [{0x6f227dd5fbb89258}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x5}, {0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x4}, {0x4}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0xecaefec7bd8b500e, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x5}, {0x1}, {0x3}, {}, {0x3}, {0x1}, {}, {0x5, 0x1}, {0x1b66d2f93de71bf9, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x7, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x3}, {0x5}, {0x2b25f6afc49a4e6a, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x91b033b5974c5f9e}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x4}, {0x5}, {0x2}, {0x4}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}]}}]}, {0xd, 0x6, "94df3d47c40bc115fc"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_csum={0x1c0, 0xa, 0x0, 0x0, {{0x9}, {0x100, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x17fc, 0x1, 0x40, 0x2}, 0x2a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xc7, 0x5, 0x0, 0x9, 0x800}, 0x7a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x7, 0x7, 0xc53, 0x7}, 0x12}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x8, 0x3, 0x8000, 0x2}, 0x1f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x100, 0x8000, 0x8, 0x1, 0xfffffffa}, 0x7d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xd, 0x6, 0x8, 0x3aba2bce}, 0x29}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1000, 0xf68e, 0x8, 0x7ff, 0x1}, 0x6}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x7, 0x10000000, 0x5, 0x4}, 0x2a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4ccd, 0x6fc, 0xffffffffffffffff, 0x69, 0x2e}, 0x62}}]}, {0x97, 0x6, "7b831eaea929179f915a56da2e8198c5819536ab60a6de92757c55a68114092870e820e9fd9c5a6b59d3341128ecc113650f442affac0e7cf5b378356ae4190ff642c582386f6b00bc4bd2332992f42bb9ff28b46d21ff837883e4083c80be360d320a7b691172cce9dff78cfd882d5a264e4c6dbeba0690d65935ee6c7f5b8331f0b93edffe2b990dc20a92cf6b262d412001"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x4cb067c47f8863f6}}}}]}]}, 0x1f4c}}, 0x0)

729.041309ms ago: executing program 1 (id=274):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x24000810)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xc1, 0x0, &(0x7f00000006c0)="00000000000000c88526faac0646563c4e323964227c143d0c8461f3163f71c3651d15b81100004a7de1ae68bf3601b166655a35903dc0d7e44868a9e29a339af0ea176ca80057abe4fefcd5c41e6dce6b2a2ac7a08b75d9644c2626a6c1c093bac86787ed691f2ff4fa70fc3344f8c1d017d4935fbb3c46697f4894ead3f6abd395a64464318b757e0735d59401c3d5910225a638d382a409e1119abe451e4db98acb58399b77280b319cf0c3e58b95d4b5bb74e76a266256014ae0522bcf23e4", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

728.473039ms ago: executing program 0 (id=275):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0xffe}, 0x10)
write(r2, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x4, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004040}, 0x24004000)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r6, 0x0, 0xfffffffffffffffe}, 0x18)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x801, 0x84)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180002000000000000000000000000ae8168843eda7b97afac5e009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sendmsg$TEAM_CMD_OPTIONS_SET(r7, 0x0, 0x8080)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r8}, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240))
r11 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x28)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12], 0x90}}, 0x0)

610.096261ms ago: executing program 1 (id=276):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f00000000c0)=@assoc_value={<r2=>0x0}, &(0x7f0000000080)=0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r5=>0x0})
accept4$unix(r0, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x800)
r6 = socket$inet(0xa, 0x80000, 0x2)
connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r6, 0x8)
r7 = accept4(r6, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000380)={0x0, 0x6}, &(0x7f0000000440)=0x8)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = gettid()
r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r11=>0x0})
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="30b7950000001c00deb37912d2bbc8c9242bbd70", @ANYRES32=r11, @ANYBLOB="80001e0a0a000200aaaaaaaaaa1b000008000f0001000000"], 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x10dc, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@nested={0x10a6, 0x11c, 0x0, 0x1, [@nested={0x20, 0xb6, 0x0, 0x1, [@nested={0x4, 0x94}, @nested={0x4, 0x147}, @nested={0x4, 0x35}, @nested={0x4, 0x1b}, @typed={0x8, 0x29, 0x0, 0x0, @fd=r3}, @nested={0x4, 0xc1}]}, @typed={0x8, 0x69, 0x0, 0x0, @fd=r7}, @nested={0x6c, 0xef, 0x0, 0x1, [@typed={0x8, 0x4e, 0x0, 0x0, @pid=r9}, @nested={0x4, 0x26}, @nested={0x4, 0x14d}, @typed={0x8, 0x116, 0x0, 0x0, @fd=r6}, @typed={0x8, 0x16, 0x0, 0x0, @ipv4=@private=0xa010101}, @typed={0xc, 0xa9, 0x0, 0x0, @u64=0x2}, @generic="a7f03d0600", @generic="33699f5af95f936cb521fa32c8f925cdeed1cef459de1a619b9d526a64aff0baef62c5ccf9ab724c7479d16719c3602a96879ca36413ae"]}, @generic="f79d838231033ee79fa1744dabae", @generic, @generic="c165abd982137173aed1dce30434b44c1c980b849688ce7baca7f15b3435a937a43632340d703bfbd2cdfc50f6a58b8d9b3d3fc7b73917298a1980bb4e17d1a02d15a382cce3267d36919b1f70af17bfe4e593492f92a6943e3d807536692ef37bde41097f8bd6b9baae2588d8a30d08938935496d92575b43e8cd40dc3e6cbf48d994d282705389f55b949bb2c4cf119083a9ea3642340bc3c590bfbe5c3a04f4cdf3dd465ba313f8ded5a950244fb14085a04a0e8db2adafd675208e9d960475baac1122054b5f8f13f88341502b4b66d83a6a59fa9d10ab7a144e339bd5a4ce929b2fe7a3d14925975e086ba705ec379f6f00c0e2fabb9876d7483c3c6030c0fb8797453d4e73836243262ab1d005345016468fe3bcd066a5602f28870d53e7942fbe0829a9479328b91afbe65af2ce27a3fbabc841df9cab4b00b3976b391cbe3e9922ba0c39db3dbca63b8f5d2cd54573b20f04b336df60c12a681b13acdfdaf2420ca3eeaa7650ab84d2126fe5ee8b4b8121a54fdd0ceda3675e291ac7b652c169b528f565d9f8e8c71f84db2794299c11fc2f29bca6ab022f3e44188aff23badc53d69d2d6b563146e1b98f03fe1a9be1af1550fcf1123f7047a28fb461313f8fadd35aab592223e9995f04afc8d6e54398bea9b0723d1cce83e2303943035bbd9c5d3984af4dee62fae28ba33a167c5b4a8bf849f78c948b0438937e491b36d8b2755025976597fbc5ca030474204c8005b372dc50164e3923738957efcca95527dcdd6b7669c60e38afeac3dd98d2d001aa0660dc98a75ac040c40d6be0f95ec30cd9145945bfec2a29051c3ec3af7b9f236eeed46fa06ccb5d631f92801ff5c580786208bb44c55e1d683044ea5e88cbdb1e9a5168abe0ba7c49141b21bf59f15da022aa093e9a0de9b7b604f61a79a3cd51807e5ab436dff124093c37ac69f523ad604e42cb73df5603fc6f936cea6ffa6adc6aebcc67af10ac0ae140241a6d86ce0aab179b181354ab223d977bac21042f9e9427630028061f4c895ca967b3eb489e0b07d9ce9253f4c0bcecee9200d068fc49400dacbe35e77f702df3c3b7ed9ff127cd36e5af54ead403e96644666423fffc0c8525995bcf79bf20316e86501302f0499a90894ebef02f2a370350c4ed89e58bb8f9a90d53b95579c7ba73d3f42bf73ba11201c62dfbacdbe0b940bdc8718b318dfb288a5ac518c55bf4b8ed96f1501896ca1d9c63976fa9c7aed98251de0868eb6d4c6c704fc474a867b17422b2c20b83a7c6146f173bbe1c6b21333c3ccdf509f1317823d374438f3c33af062dbe3b01efc53c1efa4eafe9bb6ea9598dc10f6d338ff202e3d661d6798e5da4e12c16709f791ff59b952cc145bfbc63dbf74f7ff9412e1b6275ff0130d4176a09977cef8384032eb476256ea597dda7ef490e371812abddf3e377c941699efed4537b86ee654d38e69a0b0fa3d907ea9104663d7d873e084c0543791318c1107c221ff61f859d0b9750a463c92d2f0185400c171e72ba8802f38be8d36089499dd6d4edb2dc35b08ecfd2d511466b1decb88cc6a54b95447617e2b4922f90e25fd6222d52c62c8fcee5644661a82bcae7089f51b93da6f3526319ffee8bb6eec847ce76231c372f4de79744aa11b7d5ff4b696644e88a21dbf8351de078fa4896828de2331b3795619723be2f60a19dda9c5ea7cc4d285bb17a6ea5af3ce60c614805d4cb51f72347cd35eaa154adf7f64ad8f62a1bc33411bc5585b3a35fde0ee436e98de3f8e420588f79a4fd2697e9634bb3ce75a90d6aeb238f64c8443ef6311481166e16a84d875062383cd37a69c01fe236ff12571926be267c2aa81196a89f7e51d1336146e380ef9a17475fa5a3851f1e25a4ea94f4f90c17b575ce0c8d19dbaa71667b45eee11ee9a3c98693dde380abe8c3b421bcc3958dffe55d44b9ee7175fa356948607d271bf75390de6c5c47c6ad95a64fee17d2cdb2bb2dba30a32fdb08fc97237d9a1d4fb37840d45300c8203170f184c7af51b77d06e3cd3aec7c670a1586ceb6d9ef5d9d406bd3c80f890bbe75fcad27f318771cf693eef33328c468b0c0cb5a411c7f318dc414ca33722137c147e8bb769c9b167660ba02cd80bd3f8bdb70d0d9c1a7e6e09cac04ee281b0506cc5964e8ccac5304535524643b790b93a45c1ad5defd0d22d1ff059e48110971f97eaf5dc9f195e1b4a77f30bf5c55f4aded46e804e5388d8309e52898c080ed95d645e4b1c4b28250f6229308a422535861ba639ea3f55d64171ac431ee554f5a5fbdb7238787a29dd90e63d2e6f820a94f2dcb676e94ea7661abf76bf9b402816f8cd9903fdc08cfb2fe627bcc64b82df6f452e100fdb3416dc747c1a19590fe8bae656e7ed9fc1516a840b3a455e2fec1569cc197239af39b590092c8fd4f8b9db06b6c1eed7fa042f5f6624f374d43e2126e54c1a2e7dd9c8d44ed666b5b0324e55a2fa8351f550ce340578f59660f2f7f0020ae52eb76ab24681268486066d4a5edb939a12e771e39e62243529b68647c23172c4ef1def0b4cb3188a167451ecac0841ae31a841a04d96a99082cb8c7b499ff1d9f8dd7fe7f765bdb2089066942cc9ba845179c6840cfb57bb9640eee66be89afea496bb441d5617d4e2fbe448449c767e83353962b9cdba004fd9de2af1ff05f5b010b5ef9f19ad1f8503ad00d53489116a6801f002a493d2c154965f07b74a8873cae73381d81a1714f4d21ef006a9675cbbfce87a2f1320810d5ec6dcd4e11475f8ff3f928eb9b680a03ba85ec29c17d80dfac89cb768cfd6798ec1ad88664717e5e0d9e3cbc10e5de9c32f9e53c067cd0a20e3fbd20f562027f81bf02a9e22076f3a80cab6089ff4aebd6ded1b79db436b9b097a1d01c7dce2f1cad954b567a0d013f2ec2f2e0b94f499057959a3423e2e0d223dc9099396233a060e63fb6a8a82e4e4e77fba25b4f15733d50341594ff48dacc00339a66fbfad74204738188e2c3a05668eabb8286bd73d6326bddb33d9f8f197c4e6d11f28bd9196247d489ba32583574ade411fe7c4c3f791185410fa88a8eb84eefc6a53d80b81139811f9ab0664899ebc92bc2eb8f4aa240262ad832d00641c2a3f5cab008848ea45ff4dae2da93b8914782626f92a49054d6b3e5389e57cc0ee4bc12593186ec5bbeabf4e18ba4f5c42a8f7fd724c6ab17636c41305c6f1a0921c812d59085dae539babd3e6a55005eb686618d2de72d8082df368c9be8c050b66bfe0c41739f69db38a7d113b12a69cd6c096ce08719b338d61b4ff6359012292efd315bfeab563d1b017e6e161143fcf53d8618fa8f8f75d5fdb4128ea60654096a7e95745dfe87010aaa6d42de687bfbcccf9fc5fc3d15b0ff00fc8778ac3d56eaea3a96ed5fbace922e535b4a05f0d4571155999e7d2aee0dd537329f0db511c9c530e63e97b013180e2801ea936e79cc0f804d53b97f98bb02f035fd15a42e3ab0514ed3522a70958c74a668bf11d3b40e34524cf58c9347700e766e5895451f451fb294f0b0d8bf433190f19d0634f6e26784cf7d72652c14e2b6ed33f140d8e4c8a03a539e9f1bb5697af1bb7a701634c491f0715b057a8cc50c473367c75c4efafb363fc8e26f2a86c4d45bb8c06fb9912e9d61e65b18545ade27b6663404f587b80e7d25b63528ee33f2a0f708cb302a413bb2d30ebe0fbe2b3707a6fe74be451ba472b0ebc9a6c1beef2f069ff4415d662cfbb3bdbbbb420e12fbe64a2ae97d341052b822b13f2ebf7959668ca07a41d03122829caf645130ebe33f5207f7713cd95425d31d5b23af2d416805263d02811b542baf5cf2db283584f96a73a45284c0d542615b5c59581fb8972becad8684b9b005680f25a5f1f4d5d1035e8d289799207f47c6a0a58324536994c16c8498c41a31bf8049d2eadee163ac72779a78be509d0c15925c7ba1b75eb32b672e6ae0617e76d1ebbcab3c94b144211fb95235506535e8541f7e9d8fb5ca37eff28b500cf3ad1b0d8152d2b917cb19a0407d895c0cdb3da4f84fa25245e60c29bb32cf71ea67e79198083c14690add5bb60526746d904c2865be89ed8d078ca2a5739c2651e678658f810ea59b04ab36b5fdcf07345b8ece6c6c77df67f0b70b7096e84929d372a875bfd1a38763bdfb79ed276e3d831b1d7b6373e7d97cd920f101cc4e2a23872feacab5814ad384bbb16080a256365ac935ba91b080c53913694ec2d585426258e4d2045c0f8215264374e4747f98966380eff6e5aa2815b427c614c40f8c1cfdd24490da643359f252c32f742e4acea94bbc7d4c5b30bbf3c4ee323de8590f06c7599146e599647db602bc0ad114024691256a4e67655355710548c2e3aca5f6cb8ed633d4d40f56a2877c00e4b2f14c9e72efd9ee0ead80250ffbfbc139ef1f5ae68394921ecbd4c9f6866d11051c510c89c4b784803ea2eda776827ae71d1135adf2f0b5ea55879ddbb26409c110fe2963ddc7660abe3c64535eb6624cb0e9ac9323de146ce53ec37f140e005efc60db685fc8ab5294e83db4a0fa7dfc93d948b36a19e64d3a1f3c95737c3af4c949eddafabc203f14e222dd5b346011f19dd747b578fbaaaeb74879a17af8378290175d2b6ae9affd57f7749667102efde8936cd33538b22086f1001b3a972de840ac0086f9e08b705c736d185b248a3da9d2804177b6cfd40d7784c3759f44b6685ee7122971d146eb026fb2c273e139a83786fb3c52c6f27ced0b26c70aaa4c4a79f0e140c7964093ef66a1aec065fbc3377c545386608548f9e35f9808d7cb4b9bfc9de147be86fa3eaa5704e4e3f1d9fc491e75fca59ff8f422f7dbb7623c3d8fd33ca7baecd94813eee8a51224cf9251fc1cf59280abfebaeeaf6b919ff1a9394fe668c42095a17092f1ff75e8f09569187cc8d389ae4bee63290d8bc924f898d2a1f82173f0e092d8bcc562b25958cbfc8095c0cc75cadff2e4908fefdf5d0a4e271d68b2b51f4e31c3ca4e6adff74fe901b2cea7ab77451ee3d4ea2c4b784b0753acb211d21187bd4f465d1f5dd30a6281d1cd644722bdf3106e917f5372646431c13df0e23d5c395a49b8019c9a3a634321ab87f8895fe6e3315a0944ba982e6ba564677b1a4302cf365426a71f8f0aca4674218893571edacff88e0e4680b4c9af83415349362c2148f218dd92a42c42837bab3b3cfcfbb52919e72982fe679786da4ffb10fd3de5db885d5808cb6606117cc9427bd08feecc5704716d0441d60a034001d00db5ea71a480bf4b8fbce3788690f45f98f70002049239fc1f2dcf0149112b9bf264e6a4f4a8db59a58ac256e277fa8dbc443dc68773b082bca9c4e6a07f08da1d3ea847dc40d98cf12d2d3c894ef0799f623fc3294acbbb60afb2ad046390e82ce51960d17d06932cb5213afaed300fa7fb39893a27694bad041ea210e247690019277080831c2aba19dc2c6ceca82bb7fdb452813a92b4f866ce2dd0a9deeffef64df45f57f1d8266b64a35884ed6c1a5e3c67633c67541f1604aad1e47efb006f7afe5a3638e1c7c12b807e584fcbcefaa2c18da8813c7ab756b454c1963dabaebd280a538f6009faa4e94ccdcbe81c2304ef85d5a8d2f8ada7cea7bd5d31e1723dae3253c8a8e958945c6b8988fab46d4ef3486fcc5a472d9e2b360c8a3309f0fce5e5f66b36453da3cba6e80a20beea3f9d0631e66b2ce2327d42bcc00d7ba5e950ea5605027ed99e57664b7dc2c8cda93ae7cde912dcd796f15d1ff0610c"]}, @nested={0x20, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @u32=0x5}, @typed={0x14, 0x15, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}]}]}, 0x10dc}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r4, @ANYBLOB="050000000000fdffffff0600000008000300", @ANYRES32=r5, @ANYBLOB="08000500060000000a00e8"], 0xac}, 0x1, 0x0, 0x0, 0x4800}, 0xc810)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000500)={r2, 0x7}, 0xc)
r13 = socket$inet6_sctp(0xa, 0x5, 0x84)
r14 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020200091a000000000000000000000005000600000000000a000000000000002001000000000000000000000000000100000000000000000200010000000000000000020000230005000500000000000a0000000000000020010000000000000000000000000001010001000000000002001000000004d6000004d40000000001001400030000000800120003000000b36b6e00003c980106003200021f000005000000000000000a010102000000000000000000000000fe8000000000000000000000000000aa010016"], 0xd0}}, 0x40)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000200)=0x8, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
socket$nl_route(0x10, 0x3, 0x0)

258.9112ms ago: executing program 1 (id=277):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="0a00f500ffffffffffff0000"], 0x28}, 0x1, 0x0, 0x0, 0x20000494}, 0x8000)

258.385815ms ago: executing program 0 (id=278):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10)
sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4044051)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c)
r4 = socket$inet6(0xa, 0x80002, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r6 = socket$tipc(0x1e, 0x2, 0x0)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000004f40)={'tunl0\x00', &(0x7f0000004ec0)={'gretap0\x00', 0x0, 0x1, 0x20, 0x0, 0x4, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x67, 0x0, 0xdb, 0x4, 0x0, @empty, @empty}}}})
setsockopt$TIPC_CONN_TIMEOUT(r6, 0x10f, 0x82, &(0x7f0000000000)=0x2, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006c00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r8 = socket$kcm(0x10, 0x400000002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011"], 0x0, 0x1, 0x0, 0x0, 0x40f00}, 0x94)
write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'syzkaller0\x00', &(0x7f0000000240)=@ethtool_drvinfo={0x3, "12e5f23c2edf2cacbf8058fa31f144f84f2dcba667379c8e384d6463521ed7af", "9f5deca0afe9202756c24bd4e443651dd70a66d3aedac133c8c91c1b6929650f", "c5de61f1f74246f02300", "bbae26cf7cd15c056d1883c15387ca0e318e864aa47894870783407051fe8fc9", "9f91b68a21397390a69336dd21f1bb4bce429ec6a6ffd1d50190629200c5b21a", "adf5052cc5f020faec2d00", 0x4, 0x0, 0x200002, 0x2d252087}})
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r3, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000340)="84", 0x1}, {&(0x7f0000000240)="7300fac5050e21099900e64f93f84b", 0xf}, {&(0x7f0000000440)="d99f8e1375e1059e690b7fbbe52179934a04ffcecf00d34ae1122f814ea816ddeea3e9f092cdde2b2b06c8187d8140bcaad436e26b75acf39849b92292e0d93b1e223dfe1b09f1c8d2a25c804a0c52e8ffcff510589d8a3bf46418", 0x5b}, {&(0x7f0000000280)="613cf2512217e3cfd3a17b65a9", 0xd}], 0x4}}], 0x1, 0x4400c800)
sendto$inet6(r3, &(0x7f0000000300), 0xa6, 0x3b00, 0x0, 0xfffffffffffffdfd)

199.950463ms ago: executing program 1 (id=279):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000240))
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b"], 0x24}}, 0x0)

179.93213ms ago: executing program 1 (id=280):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
close(r0)
socket$pppl2tp(0x18, 0x1, 0x1)
sendto$netrom(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000000)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}, 0x48)
ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})

79.7937ms ago: executing program 1 (id=281):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0)
r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000011000108000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="02100000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x0)
accept4$phonet_pipe(r0, 0x0, &(0x7f0000000140), 0x80800)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xb}]}, 0x94)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x68, r2, 0x1, 0x0, 0x50f2, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xffffffee, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x24, 0x3c, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x44000)

79.318306ms ago: executing program 0 (id=282):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
listen(r0, 0x1ad72f7)

0s ago: executing program 0 (id=283):
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="18000000240001037b9333bd998f6cc8010000000400aefb7d3002065c1cf22a0ccf219fc5b29ddcb3b43abb0e58b52a0cce557b0468194c3c529656411682bb074cb5ff110831c1988e13593f42ac9be74a3ed76e15e4d9e17818b63aa38f628fa0fc9df23a910c69cdc61d7c722ae2eb2f6b2af73a3377110ac70dec37"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$rds(0x15, 0x5, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000001c0)={0x0, 'veth0\x00', {0x1}, 0x6})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x24, r2, 0x5, 0xfffffffd, 0x2, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4810)
socket$alg(0x26, 0x5, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000020000000400000005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, 0x0, &(0x7f00000002c0)}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r5}, 0x18)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r8}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="fdffff6491b95500000040000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:30895' (ED25519) to the list of known hosts.
syzkaller login: [   48.371657][ T5740] cgroup: Unknown subsys name 'net'
[   48.479630][ T5740] cgroup: Unknown subsys name 'cpuset'
[   48.485348][ T5740] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.323754][ T5740] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.877193][ T5811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.881966][ T5811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.885022][ T5811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.888552][ T5811] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.891350][ T5811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.923338][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.927835][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.931398][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.936119][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.940567][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.014938][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.019658][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.023291][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.036022][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.055580][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.261478][ T5808] chnl_net:caif_netlink_parms(): no params data found
[   55.423165][ T5812] chnl_net:caif_netlink_parms(): no params data found
[   55.488213][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.492190][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.497087][ T5808] bridge_slave_0: entered allmulticast mode
[   55.501556][ T5808] bridge_slave_0: entered promiscuous mode
[   55.523570][ T5817] chnl_net:caif_netlink_parms(): no params data found
[   55.535206][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.538386][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.541460][ T5808] bridge_slave_1: entered allmulticast mode
[   55.545279][ T5808] bridge_slave_1: entered promiscuous mode
[   55.595038][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.622825][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.643544][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.647884][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.650631][ T5812] bridge_slave_0: entered allmulticast mode
[   55.653807][ T5812] bridge_slave_0: entered promiscuous mode
[   55.695853][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.698732][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.701868][ T5812] bridge_slave_1: entered allmulticast mode
[   55.704786][ T5812] bridge_slave_1: entered promiscuous mode
[   55.722672][ T5808] team0: Port device team_slave_0 added
[   55.729152][ T5808] team0: Port device team_slave_1 added
[   55.800739][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.804025][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.807670][ T5817] bridge_slave_0: entered allmulticast mode
[   55.811967][ T5817] bridge_slave_0: entered promiscuous mode
[   55.819290][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.822578][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.826400][ T5817] bridge_slave_1: entered allmulticast mode
[   55.830937][ T5817] bridge_slave_1: entered promiscuous mode
[   55.837153][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.853206][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.856659][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.868331][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.887326][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.891452][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.894780][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.906506][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.933799][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.939659][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.949325][ T5812] team0: Port device team_slave_0 added
[   55.972168][ T5812] team0: Port device team_slave_1 added
[   55.987728][ T5817] team0: Port device team_slave_0 added
[   56.001476][ T5817] team0: Port device team_slave_1 added
[   56.023189][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.026457][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.036153][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.053936][ T5808] hsr_slave_0: entered promiscuous mode
[   56.057159][ T5808] hsr_slave_1: entered promiscuous mode
[   56.060284][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.063277][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.072196][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.100952][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.103898][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.115305][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.132387][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.135216][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.145515][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.155116][ T5812] hsr_slave_0: entered promiscuous mode
[   56.157970][ T5812] hsr_slave_1: entered promiscuous mode
[   56.160387][ T5812] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.163699][ T5812] Cannot create hsr debugfs directory
[   56.240032][ T5817] hsr_slave_0: entered promiscuous mode
[   56.242538][ T5817] hsr_slave_1: entered promiscuous mode
[   56.244933][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.249108][ T5817] Cannot create hsr debugfs directory
[   56.558219][ T5808] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.568967][ T5808] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.581456][ T5808] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.593678][ T5808] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.641466][ T5812] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.657824][ T5812] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.666548][ T5812] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.698307][ T5812] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.741598][ T5817] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.758788][ T5817] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.773980][ T5817] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.793121][ T5817] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.904868][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.937761][ T5808] 8021q: adding VLAN 0 to HW filter on device team0
[   56.950524][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.969536][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.972803][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.987638][ T5811] Bluetooth: hci1: command tx timeout
[   56.990222][ T5811] Bluetooth: hci0: command tx timeout
[   56.999128][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.002383][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.030269][ T5812] 8021q: adding VLAN 0 to HW filter on device team0
[   57.057876][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.061066][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.077285][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.083671][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.086492][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.125083][ T5817] 8021q: adding VLAN 0 to HW filter on device team0
[   57.156693][   T54] Bluetooth: hci2: command tx timeout
[   57.164634][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.167720][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.180111][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.183170][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.424854][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.539640][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.549027][ T5808] veth0_vlan: entered promiscuous mode
[   57.559634][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.573676][ T5808] veth1_vlan: entered promiscuous mode
[   57.620271][ T5808] veth0_macvtap: entered promiscuous mode
[   57.639652][ T5808] veth1_macvtap: entered promiscuous mode
[   57.660054][ T5812] veth0_vlan: entered promiscuous mode
[   57.670560][ T5812] veth1_vlan: entered promiscuous mode
[   57.677366][ T5817] veth0_vlan: entered promiscuous mode
[   57.684994][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.694967][ T5817] veth1_vlan: entered promiscuous mode
[   57.700588][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.712018][ T5808] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.715222][ T5808] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.722366][ T5808] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.725974][ T5808] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.766974][ T5812] veth0_macvtap: entered promiscuous mode
[   57.792902][ T5812] veth1_macvtap: entered promiscuous mode
[   57.810653][ T5817] veth0_macvtap: entered promiscuous mode
[   57.832993][ T5817] veth1_macvtap: entered promiscuous mode
[   57.839830][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.843198][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.861158][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.873626][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.879249][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.892778][ T5812] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.898240][ T5812] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.901478][ T5812] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.904928][ T5812] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.918850][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.923218][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.924464][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.939219][ T5817] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.943076][ T5817] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.953282][ T5817] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.963181][ T5817] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.026688][ T5808] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.086679][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.090082][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.167054][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.170611][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.228248][ T5878] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2'.
[   58.231879][ T5878] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   58.237654][ T3881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.238094][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.240541][ T3881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.251841][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.551981][ T5902] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.591131][ T5902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'.
[   58.651638][ T5905] veth3: entered promiscuous mode
[   58.728573][ T5908] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   58.731534][ T5908] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   58.734410][ T5908] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   58.737810][ T5908] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   58.750306][ T5908] Zero length message leads to an empty skb
[   58.846609][ T5914] 8021q: VLANs not supported on gre0
[   59.076590][   T54] Bluetooth: hci0: command tx timeout
[   59.079155][   T54] Bluetooth: hci1: command tx timeout
[   59.231363][ T5811] Bluetooth: hci2: command tx timeout
[   59.247867][ T5925] ip6tnl1: entered promiscuous mode
[   59.250392][ T5925] ip6tnl1: entered allmulticast mode
[   59.254937][ T5925] team0: Device ip6tnl1 is of different type
[   59.297871][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17'.
[   59.357791][ T5928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18'.
[   59.364131][ T5928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'.
[   59.374134][ T5928] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.760369][ T5951] netlink: 164 bytes leftover after parsing attributes in process `syz.2.26'.
[   59.793454][ T5951] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   59.804744][ T5952] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   59.852849][ T5957] netlink: 16 bytes leftover after parsing attributes in process `syz.0.28'.
[   59.856817][ T5957] netlink: 92 bytes leftover after parsing attributes in process `syz.0.28'.
[   59.882690][    C1] Illegal XDP return value 16128 on prog  (id 8) dev lo, expect packet loss!
[   59.969561][ T5966] netlink: 'syz.2.29': attribute type 83 has an invalid length.
[   60.011408][ T5964] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   60.014406][ T5964] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   60.017532][ T5964] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   60.021232][ T5964] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   60.057518][ T5964] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   60.063347][ T5964] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.187231][ T5978] ip6tnl1: entered promiscuous mode
[   60.189355][ T5978] ip6tnl1: entered allmulticast mode
[   60.191959][ T5978] team0: Device ip6tnl1 is of different type
[   60.250490][ T5981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33'.
[   60.261503][ T5983] netlink: 'syz.2.34': attribute type 1 has an invalid length.
[   60.264538][ T5983] netlink: 224 bytes leftover after parsing attributes in process `syz.2.34'.
[   60.446745][ T5993] netlink: 'syz.0.38': attribute type 4 has an invalid length.
[   60.613070][ T6000] ip6tnl1: entered promiscuous mode
[   60.615505][ T6000] ip6tnl1: entered allmulticast mode
[   60.620906][ T6000] team0: Device ip6tnl1 is of different type
[   61.119372][ T5964] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   61.124121][ T5964] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.146571][ T5811] Bluetooth: hci1: command tx timeout
[   61.148693][   T54] Bluetooth: hci0: command tx timeout
[   61.186198][ T5964] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   61.190468][ T5964] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.272582][ T5964] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   61.280614][ T5964] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.315596][   T54] Bluetooth: hci2: command tx timeout
[   61.361294][ T6009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   61.372894][ T5964] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   61.378467][ T5964] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.392102][ T5964] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   61.396105][ T5964] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.408708][ T5964] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   61.412593][ T5964] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.425282][ T5964] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   61.429291][ T5964] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.446167][ T6044] xt_recent: hitcount (4294967292) is larger than allowed maximum (65535)
[   62.728961][ T6069] netlink: 'syz.2.60': attribute type 3 has an invalid length.
[   63.164075][ T6032] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[   63.239177][   T54] Bluetooth: hci1: command tx timeout
[   63.319745][ T6161] netlink: 'syz.2.68': attribute type 1 has an invalid length.
[   63.322969][ T6161] __nla_validate_parse: 4 callbacks suppressed
[   63.322978][ T6161] netlink: 600 bytes leftover after parsing attributes in process `syz.2.68'.
[   63.387279][   T54] Bluetooth: hci2: command tx timeout
[   63.391964][ T6166] sctp: [Deprecated]: syz.2.70 (pid 6166) Use of int in max_burst socket option.
[   63.391964][ T6166] Use struct sctp_assoc_value instead
[   63.472993][ T6174] netlink: 'syz.0.73': attribute type 3 has an invalid length.
[   63.478563][ T6174] netlink: 156 bytes leftover after parsing attributes in process `syz.0.73'.
[   63.488045][ T6172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.72'.
[   63.491649][ T6172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.72'.
[   63.810457][ T6196] netlink: 156 bytes leftover after parsing attributes in process `syz.0.80'.
[   63.929139][ T6204] 8021q: VLANs not supported on sit0
[   63.970475][ T6207] dvmrp0: entered allmulticast mode
[   64.322026][ T6235] x_tables: duplicate underflow at hook 1
[   64.423141][ T6248] netlink: 'syz.2.97': attribute type 3 has an invalid length.
[   64.426672][ T6248] netlink: 156 bytes leftover after parsing attributes in process `syz.2.97'.
[   64.732083][ T6261] netlink: 'syz.2.103': attribute type 5 has an invalid length.
[   64.737380][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.103'.
[   65.503730][ T6303] 8021q: VLANs not supported on sit0
[   65.569398][ T6305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.118'.
[   65.573917][ T6305] netlink: 20 bytes leftover after parsing attributes in process `syz.0.118'.
[   65.761958][ T6310] netlink: 256 bytes leftover after parsing attributes in process `syz.0.120'.
[   66.335811][ T6332] bond0: entered promiscuous mode
[   66.339613][ T6332] bond_slave_0: entered promiscuous mode
[   66.342218][ T6332] bond_slave_1: entered promiscuous mode
[   66.346514][ T6332] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   66.376895][ T6332] bond0: left promiscuous mode
[   66.379547][ T6332] bond_slave_0: left promiscuous mode
[   66.386292][ T6332] bond_slave_1: left promiscuous mode
[   66.637463][ T6349] x_tables: duplicate underflow at hook 2
[   66.641823][ T6349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   66.675987][ T6352] 8021q: VLANs not supported on sit0
[   66.688532][ T6353] erspan0: entered allmulticast mode
[   66.808045][ T6359] bond0: entered promiscuous mode
[   66.810163][ T6359] bond_slave_0: entered promiscuous mode
[   66.812621][ T6359] bond_slave_1: entered promiscuous mode
[   66.820769][ T6359] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   66.828580][ T6359] bond0: left promiscuous mode
[   66.837738][ T6359] bond_slave_0: left promiscuous mode
[   66.837774][ T6363] TCP: TCP_TX_DELAY enabled
[   66.840782][ T6359] bond_slave_1: left promiscuous mode
[   67.204341][ T6381] netlink: 'syz.1.146': attribute type 1 has an invalid length.
[   67.379038][ T6390] syz.0.149 uses obsolete (PF_INET,SOCK_PACKET)
[   67.407227][ T6391] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.411238][ T6391] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.301926][ T6421] 8021q: VLANs not supported on sit0
[   68.492248][ T6425] bond0: entered promiscuous mode
[   68.494359][ T6425] bond_slave_0: entered promiscuous mode
[   68.511003][ T6425] bond_slave_1: entered promiscuous mode
[   68.513959][ T6425] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   68.536800][ T6425] bond0: left promiscuous mode
[   68.538930][ T6425] bond_slave_0: left promiscuous mode
[   68.542960][ T6425] bond_slave_1: left promiscuous mode
[   68.676300][  T790] hid-generic 0005:04F3:8002.0001: collection stack underflow
[   68.679893][  T790] hid-generic 0005:04F3:8002.0001: item 0 0 0 12 parsing failed
[   68.683579][  T790] hid-generic 0005:04F3:8002.0001: probe with driver hid-generic failed with error -22
[   68.896954][ T6455] nbd0: detected capacity change from 0 to 63
[   68.950164][   T55] block nbd0: Receive control failed (result -104)
[   69.080831][ T6465] netlink: 'syz.1.177': attribute type 1 has an invalid length.
[   69.086968][ T6465] __nla_validate_parse: 6 callbacks suppressed
[   69.086978][ T6465] netlink: 36 bytes leftover after parsing attributes in process `syz.1.177'.
[   69.217001][ T6481] tipc: Enabling of bearer <ib:pim6reg1> rejected, failed to enable media
[   69.321790][ T6486] bond0: entered promiscuous mode
[   69.323607][ T6486] bond_slave_0: entered promiscuous mode
[   69.325891][ T6486] bond_slave_1: entered promiscuous mode
[   69.328216][ T6486] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   69.331568][ T6486] bond0: left promiscuous mode
[   69.333331][ T6486] bond_slave_0: left promiscuous mode
[   69.340195][ T6486] bond_slave_1: left promiscuous mode
[   69.353040][ T6488] netlink: 52 bytes leftover after parsing attributes in process `syz.1.184'.
[   69.387831][ T6492] ip6tnl2: entered promiscuous mode
[   69.389772][ T6492] ip6tnl2: entered allmulticast mode
[   69.454339][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'.
[   69.478448][ T6499] netlink: 'syz.2.188': attribute type 3 has an invalid length.
[   69.481026][ T6499] netlink: 224 bytes leftover after parsing attributes in process `syz.2.188'.
[   69.483306][ T6497] bond0: entered promiscuous mode
[   69.488597][ T6497] bond_slave_0: entered promiscuous mode
[   69.491550][ T6497] bond_slave_1: entered promiscuous mode
[   69.499557][ T6497] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   69.503325][ T6497] bond0: left promiscuous mode
[   69.505220][ T6497] bond_slave_0: left promiscuous mode
[   69.508994][ T6497] bond_slave_1: left promiscuous mode
[   69.542873][ T6504] netlink: 12 bytes leftover after parsing attributes in process `syz.2.188'.
[   69.791588][ T6499] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.188'.
[   70.060740][ T6514] tls_set_device_offload_rx: netdev not found
[   70.741818][ T6552] netlink: 40 bytes leftover after parsing attributes in process `syz.2.206'.
[   70.885063][ T6557] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.949646][ T6557] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.990150][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.993528][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.044111][ T6557] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.126983][ T6557] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.208907][ T6557] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.226143][ T6557] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.228653][ T1114] block nbd0: Connection timed out, retrying (0/1 alive)
[   71.232775][ T1114] block nbd0: Connection timed out, retrying (0/1 alive)
[   71.235115][ T1114] block nbd0: Connection timed out, retrying (0/1 alive)
[   71.238246][ T1114] block nbd0: Connection timed out, retrying (0/1 alive)
[   71.240677][ T1114] block nbd0: Dead connection, failed to find a fallback
[   71.241489][ T6557] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.243159][ T1114] block nbd0: shutting down sockets
[   71.243264][ T1114] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   71.251901][ T1114] Buffer I/O error on dev nbd0, logical block 3, async page read
[   71.255080][ T1114] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   71.258856][ T1114] Buffer I/O error on dev nbd0, logical block 2, async page read
[   71.261456][ T1114] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   71.264543][ T1114] Buffer I/O error on dev nbd0, logical block 1, async page read
[   71.267503][ T1114] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   71.270638][ T1114] Buffer I/O error on dev nbd0, logical block 0, async page read
[   71.270804][ T6557] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.277731][ T5809] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   71.281194][ T5809] Buffer I/O error on dev nbd0, logical block 0, async page read
[   71.285165][ T5809] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   71.288641][ T5809] Buffer I/O error on dev nbd0, logical block 1, async page read
[   71.291301][ T5809] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   71.294174][ T5809] Buffer I/O error on dev nbd0, logical block 2, async page read
[   71.297569][ T5809] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   71.301817][ T5809] Buffer I/O error on dev nbd0, logical block 3, async page read
[   71.306523][ T5809] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   71.312360][ T5809] Buffer I/O error on dev nbd0, logical block 0, async page read
[   71.321992][ T5809] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   71.328849][ T5809] Buffer I/O error on dev nbd0, logical block 1, async page read
[   71.334170][ T5809] ldm_validate_partition_table(): Disk read failed.
[   71.337789][ T5809] Dev nbd0: unable to read RDB block 0
[   71.340491][ T5809]  nbd0: unable to read partition table
[   71.364378][ T5809] ldm_validate_partition_table(): Disk read failed.
[   71.376771][ T5809] Dev nbd0: unable to read RDB block 0
[   71.379491][ T5809]  nbd0: unable to read partition table
[   71.691181][ T6594] syzkaller0: entered promiscuous mode
[   71.694322][ T6594] syzkaller0: entered allmulticast mode
[   72.305980][ T6601] netlink: 156 bytes leftover after parsing attributes in process `syz.0.224'.
[   72.551093][ T6599] 8021q: VLANs not supported on sit0
[   72.786409][ T6620] netlink: 'syz.0.231': attribute type 11 has an invalid length.
[   72.810390][ T6624] netlink: 36 bytes leftover after parsing attributes in process `syz.2.233'.
[   72.855031][ T6626] netlink: 'syz.2.234': attribute type 22 has an invalid length.
[   72.948024][ T6630] bond0: entered promiscuous mode
[   72.949870][ T6630] bond_slave_0: entered promiscuous mode
[   72.952181][ T6630] bond_slave_1: entered promiscuous mode
[   72.954799][ T6630] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   72.959724][ T6630] bond0: left promiscuous mode
[   72.961405][ T6630] bond_slave_0: left promiscuous mode
[   72.963732][ T6630] bond_slave_1: left promiscuous mode
[   73.952247][ T6648] netlink: 'syz.2.241': attribute type 3 has an invalid length.
[   73.955684][ T6648] netlink: 156 bytes leftover after parsing attributes in process `syz.2.241'.
[   74.001270][ T6646] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   74.416862][ T6664] xt_time: unknown flags 0x4
[   75.144850][ T6672] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.250'.
[   75.156967][ T6672] netlink: 'syz.1.250': attribute type 1 has an invalid length.
[   75.159404][ T6672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.250'.
[   75.162468][ T6672] netlink: 28 bytes leftover after parsing attributes in process `syz.1.250'.
[   75.166730][ T6673] netlink: 'syz.1.250': attribute type 1 has an invalid length.
[   75.181554][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.250'.
[   75.195545][ T6673] netlink: 28 bytes leftover after parsing attributes in process `syz.1.250'.
[   75.351545][ T6688] bridge1: entered allmulticast mode
[   75.375349][ T6688] netlink: 20 bytes leftover after parsing attributes in process `syz.1.255'.
[   75.379070][ T6688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.255'.
[   75.381953][ T6688] netlink: 31 bytes leftover after parsing attributes in process `syz.1.255'.
[   75.387458][ T6688] netlink: 'syz.1.255': attribute type 3 has an invalid length.
[   75.390401][ T6688] netlink: 'syz.1.255': attribute type 2 has an invalid length.
[   75.393408][ T6688] netlink: 31 bytes leftover after parsing attributes in process `syz.1.255'.
[   75.404358][ T6688] netlink: 'syz.1.255': attribute type 2 has an invalid length.
[   75.470638][ T6701] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.258'.
[   75.701962][ T6714] netlink: 'syz.1.264': attribute type 3 has an invalid length.
[   76.378116][ T6750] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   76.384373][ T6737] bridge_slave_1: left allmulticast mode
[   76.387968][ T6737] bridge_slave_1: left promiscuous mode
[   76.391334][ T6737] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.403825][ T6737] bridge_slave_0: left allmulticast mode
[   76.407907][ T6737] bridge_slave_0: left promiscuous mode
[   76.410903][ T6737] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.559305][ T6745] batadv0: entered promiscuous mode
[   76.563064][ T6745] batadv0: left promiscuous mode
[   76.758319][ T6759] warning: `syz.1.280' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   77.132372][ T6768] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN PTI
[   77.137553][ T6768] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027]
[   77.141948][ T6768] CPU: 0 UID: 0 PID: 6768 Comm: syz.0.284 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   77.147398][ T6768] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   77.151933][ T6768] RIP: 0010:qdisc_tree_reduce_backlog+0x223/0x480
[   77.154611][ T6768] Code: 89 ef e8 00 80 b3 f8 4d 89 ef 85 db 74 0d e8 34 fc 4f f8 4c 89 f5 e9 88 00 00 00 48 8b 6d 00 48 8d 45 20 48 89 c3 48 c1 eb 03 <42> 80 3c 33 00 48 89 04 24 74 0d 48 8b 3c 24 e8 c9 7f b3 f8 48 8b
[   77.162461][ T6768] RSP: 0018:ffffc90002f5f128 EFLAGS: 00010202
[   77.165179][ T6768] RAX: 0000000000000020 RBX: 0000000000000004 RCX: 0000000000000000
[   77.168731][ T6768] RDX: ffff888020ea8000 RSI: 0000000000000000 RDI: 0000000000000000
[   77.172134][ T6768] RBP: 0000000000000000 R08: ffff888020ea8000 R09: 0000000000000002
[   77.175349][ T6768] R10: 00000000ffffffff R11: 0000000000000000 R12: 00000000000a0009
[   77.178471][ T6768] R13: ffff888039ec4800 R14: dffffc0000000000 R15: ffff888039ec4800
[   77.181577][ T6768] FS:  00007fa1a541d6c0(0000) GS:ffff8880b8650000(0000) knlGS:0000000000000000
[   77.185348][ T6768] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   77.187919][ T6768] CR2: 00007fa1a53fcd58 CR3: 0000000028e98000 CR4: 00000000000006f0
[   77.191484][ T6768] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   77.194995][ T6768] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   77.198331][ T6768] Call Trace:
[   77.199842][ T6768]  <TASK>
[   77.201273][ T6768]  ? qdisc_tree_reduce_backlog+0x3c/0x480
[   77.204206][ T6768]  hhf_change+0x764/0xad0
[   77.206220][ T6768]  ? __pfx_hhf_change+0x10/0x10
[   77.208359][ T6768]  ? __pfx_hhf_init+0x10/0x10
[   77.210329][ T6768]  hhf_init+0x213/0x950
[   77.212068][ T6768]  ? __pfx_hhf_init+0x10/0x10
[   77.214021][ T6768]  qdisc_create+0x7ac/0xea0
[   77.215944][ T6768]  tc_modify_qdisc+0x1426/0x2010
[   77.218017][ T6768]  ? __pfx_tc_modify_qdisc+0x10/0x10
[   77.220100][ T6768]  ? __pfx_tc_modify_qdisc+0x10/0x10
[   77.222255][ T6768]  rtnetlink_rcv_msg+0x77c/0xb70
[   77.224074][ T6768]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[   77.225713][ T6768]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   77.227443][ T6768]  ? ref_tracker_free+0x63a/0x7d0
[   77.229063][ T6768]  ? __copy_skb_header+0xa7/0x550
[   77.230810][ T6768]  ? __pfx_ref_tracker_free+0x10/0x10
[   77.232916][ T6768]  ? __skb_clone+0x63/0x7a0
[   77.234565][ T6768]  netlink_rcv_skb+0x208/0x470
[   77.236222][ T6768]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   77.238376][ T6768]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   77.240559][ T6768]  ? netlink_deliver_tap+0x2e/0x1b0
[   77.243066][ T6768]  ? netlink_deliver_tap+0x2e/0x1b0
[   77.245323][ T6768]  netlink_unicast+0x75b/0x8d0
[   77.247376][ T6768]  netlink_sendmsg+0x805/0xb30
[   77.249388][ T6768]  ? __pfx_netlink_sendmsg+0x10/0x10
[   77.251576][ T6768]  ? aa_sock_msg_perm+0x94/0x160
[   77.253598][ T6768]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   77.256018][ T6768]  ? __pfx_netlink_sendmsg+0x10/0x10
[   77.258090][ T6768]  __sock_sendmsg+0x21c/0x270
[   77.259692][ T6768]  ____sys_sendmsg+0x505/0x830
[   77.261240][ T6768]  ? __pfx_____sys_sendmsg+0x10/0x10
[   77.263053][ T6768]  ? import_iovec+0x74/0xa0
[   77.264502][ T6768]  ___sys_sendmsg+0x21f/0x2a0
[   77.265987][ T6768]  ? __pfx____sys_sendmsg+0x10/0x10
[   77.267661][ T6768]  ? __fget_files+0x2a/0x420
[   77.269105][ T6768]  ? __fget_files+0x3a0/0x420
[   77.270613][ T6768]  __x64_sys_sendmsg+0x19b/0x260
[   77.272596][ T6768]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   77.274938][ T6768]  ? rcu_is_watching+0x15/0xb0
[   77.277076][ T6768]  ? do_syscall_64+0xbe/0x3b0
[   77.279049][ T6768]  do_syscall_64+0xfa/0x3b0
[   77.280999][ T6768]  ? lockdep_hardirqs_on+0x9c/0x150
[   77.283156][ T6768]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.285734][ T6768]  ? exc_page_fault+0x9f/0xf0
[   77.287799][ T6768]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   77.290575][ T6768] RIP: 0033:0x7fa1a458e929
[   77.292549][ T6768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   77.300412][ T6768] RSP: 002b:00007fa1a541d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   77.303886][ T6768] RAX: ffffffffffffffda RBX: 00007fa1a47b5fa0 RCX: 00007fa1a458e929
[   77.307468][ T6768] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003
[   77.310845][ T6768] RBP: 00007fa1a4610b39 R08: 0000000000000000 R09: 0000000000000000
[   77.314186][ T6768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   77.317480][ T6768] R13: 0000000000000000 R14: 00007fa1a47b5fa0 R15: 00007ffc64e47158
[   77.320984][ T6768]  </TASK>
[   77.322468][ T6768] Modules linked in:
[   77.324486][ T6768] ---[ end trace 0000000000000000 ]---
[   77.326890][ T6768] RIP: 0010:qdisc_tree_reduce_backlog+0x223/0x480
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   77.329677][ T6768] Code: 89 ef e8 00 80 b3 f8 4d 89 ef 85 db 74 0d e8 34 fc 4f f8 4c 89 f5 e9 88 00 00 00 48 8b 6d 00 48 8d 45 20 48 89 c3 48 c1 eb 03 <42> 80 3c 33 00 48 89 04 24 74 0d 48 8b 3c 24 e8 c9 7f b3 f8 48 8b
[   77.338283][ T6768] RSP: 0018:ffffc90002f5f128 EFLAGS: 00010202
[   77.340854][ T6768] RAX: 0000000000000020 RBX: 0000000000000004 RCX: 0000000000000000
[   77.344118][ T6768] RDX: ffff888020ea8000 RSI: 0000000000000000 RDI: 0000000000000000
[   77.347797][ T6768] RBP: 0000000000000000 R08: ffff888020ea8000 R09: 0000000000000002
[   77.351247][ T6768] R10: 00000000ffffffff R11: 0000000000000000 R12: 00000000000a0009
[   77.354484][ T6768] R13: ffff888039ec4800 R14: dffffc0000000000 R15: ffff888039ec4800
[   77.357734][ T6768] FS:  00007fa1a541d6c0(0000) GS:ffff8880b8650000(0000) knlGS:0000000000000000
[   77.361364][ T6768] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   77.364287][ T6768] CR2: 00007fa1a53fcd58 CR3: 0000000028e98000 CR4: 00000000000006f0
[   77.367385][ T6768] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   77.369906][ T6768] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   77.373468][ T6768] Kernel panic - not syncing: Fatal exception in interrupt
[   77.377365][ T6768] Kernel Offset: disabled
[   77.379451][ T6768] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:13:31  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002f5e950
R8 =ffff888107f98237 R9 =1ffff11020ff3046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48fa R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa1a541d6c0 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa1a53fcd58 CR3=0000000028e98000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fa1a4784478 00007fa1a4784450 XMM03=00007fa1a4784488 00007fa1a4784480
XMM04=00007fa1a52ed100 00007fa1a4784440 XMM05=00007fa1a4784458 00007fa1a47844a0
XMM06=00007fa1a4784498 00007fa1a4784490 XMM07=00007fa1a4784488 00007fa1a4784480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fa1a4611c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff868e0935 RBX=ffff8881095016b8 RCX=ffffffff868e09d9 RDX=0000000000000100
RSI=0000000000000008 RDI=ffff8881095016b8 RBP=ffffc900001e0c28 RSP=ffffc900001e0a78
R8 =ffff88810d4e3980 R9 =0000000000000003 R10=0000000000000002 R11=0000000000000100
R12=dffffc0000000000 R13=0000000000004e20 R14=0000000000000001 R15=0000000000000000
RIP=ffffffff8223d4aa RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fdeff96a800 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000056395f534000 CR3=000000002860a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
