last executing test programs:

1.205744655s ago: executing program 2 (id=1669):
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x1, 0xf99, 0x1, @loopback, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7, 0x7800, 0x7fffffff, 0xfffeffff}})

1.134067372s ago: executing program 2 (id=1671):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x10, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffc0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x0, 0xfffffffe, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffff}]}, 0x24}}, 0x8000) (async)
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x28}}, 0x0) (async)
r6 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) (async)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x7, [@enum64={0xa, 0x3, 0x0, 0x13, 0x1, 0x3, [{0xa, 0xce24, 0x7}, {0x9, 0x3ff, 0x7f}, {0x6, 0x80000000, 0x7}]}, @func={0xe, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x30, 0x61, 0x10, 0x0, 0x5f]}}, &(0x7f0000000b40)=""/4096, 0x5b, 0x1000, 0x0, 0x7}, 0x28) (async)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x2, &(0x7f0000000600)=@raw=[@map_idx={0x18, 0x14, 0x5, 0x0, 0x2}], &(0x7f0000000640)='syzkaller\x00', 0x200000, 0x4e, &(0x7f0000000680)=""/78, 0x40e00, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0x4, 0xe, 0x10001}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[r4, r4, r4, r4, r4, r4], 0x0, 0x10, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0xa, 0x8, &(0x7f0000000140)=@raw=[@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x9, &(0x7f0000000440)=""/9, 0x41100, 0x41, '\x00', 0x0, @fallback=0x38, r7, 0x8, &(0x7f0000000580)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x1, 0xa0000000, 0x7}, 0x10, 0x0, r8, 0x4, &(0x7f00000008c0)=[r4], &(0x7f0000000900)=[{0x0, 0x1, 0x2, 0x9}, {0x3, 0x2, 0x2, 0x8}, {0x2, 0x4, 0x9, 0x2}, {0x0, 0x1, 0xe, 0x6}], 0x10, 0xf}, 0x94) (async)
r9 = socket$packet(0x11, 0x3, 0x300) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r11, &(0x7f0000000000)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r12, @ANYBLOB="059900f3ffffff111800128008000100677470000c000280050005"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async)
sendto$packet(r9, &(0x7f0000000740)='\x00', 0x1, 0x4c0c0, &(0x7f0000000300)={0x11, 0x86dd, r12}, 0x14) (async)
sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r2, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x4800) (async)
r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a80)={&(0x7f0000001d00)=@report={0xe8, 0x20, 0x800, 0x70bd26, 0x25dfdbfc, {0x33, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@empty, 0x4e24, 0x0, 0x4e24, 0x2, 0xa, 0x80, 0x80, 0x0, r12}}, [@sec_ctx={0x2b, 0x8, {0x27, 0x8, 0x1, 0x6, 0x1f, "0f5166d02f0d40ac82abedf2e4a02ceae1fc5348899efbee4dee0c67aedfa9"}}, @algo_aead={0x6d, 0x12, {{'generic-gcm-aesni\x00'}, 0x108, 0xa0, "7e2f4992bcd6171f3e0c5ce5c78aad137f0335add75a3aba71f454d3855c62cc5c"}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20000011}, 0x8050) (async)
sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, r13, 0x13, 0x0, 0x0, {0x8}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x3c}}, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x44}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000020000000f100000000000007a0000000000000095f305e49b243c69"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x9, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000040000000000000000711229000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)

1.044448505s ago: executing program 2 (id=1672):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x3d, 0x9, 0xffffffff, 0x0, {0x1}, [@typed={0x4, 0x11f}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x22, 0x0, 0x0, @str='\x05G'}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 64)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) (async, rerun: 64)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (rerun: 64)

966.00642ms ago: executing program 2 (id=1674):
r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r1=>0x0, 0x2f, 0x9, 0x4, 0x6, 0x23, @private1, @dev={0xfe, 0x80, '\x00', 0xe}, 0x7800, 0x40, 0x8, 0x7}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000140)={'erspan0\x00', <r2=>0x0, 0x10, 0x700, 0x7, 0x2, {{0xc, 0x4, 0x1, 0x31, 0x30, 0x65, 0x0, 0x5, 0x0, 0x0, @local, @remote, {[@end, @timestamp={0x44, 0x8, 0xe5, 0x0, 0xb, [0x1]}, @noop, @cipso={0x86, 0x11, 0x3, [{0x7, 0xb, "8c6beb77d388e518ac"}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', <r3=>0x0, 0x29, 0x1, 0x0, 0x6, 0x0, @loopback, @private1, 0x8000, 0x8000, 0xeed, 0x8}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'ip6tnl0\x00', <r4=>0x0, 0x4, 0x7, 0x3, 0xdba2, 0x31, @local, @empty, 0x8000, 0x20, 0x5, 0x3}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0x33, &(0x7f0000000440)=[{}], 0x8, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x15, 0x8, 0x8, &(0x7f0000000500)}}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'vcan0\x00', <r7=>0x0})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000780)={@ipv4={""/10, ""/2, @private}, <r8=>0x0}, &(0x7f00000007c0)=0x14)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000800)={'tunl0\x00', <r9=>0x0, 0x40, 0x8, 0x2, 0x5, {{0xa, 0x4, 0x1, 0x3, 0x28, 0x64, 0x0, 0x9, 0x17, 0x0, @broadcast, @loopback, {[@timestamp={0x44, 0x14, 0xba, 0x0, 0x5, [0x3e, 0xfffffffd, 0xdeb, 0x3]}]}}}}})
getpeername$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000900)=0x14)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000940)=<r11=>0x0, &(0x7f0000000980)=0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'vxcan1\x00', <r12=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a80)={'ip6tnl0\x00', &(0x7f0000000a00)={'ip6gre0\x00', <r13=>0x0, 0x2f, 0x1, 0xd, 0x78, 0x20, @private2, @empty, 0x40, 0x40, 0x5, 0xdf99}})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x1d0, r0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000)
r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wpan4\x00', <r16=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)={'wpan4\x00', <r17=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e40)={'wpan4\x00', <r18=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'wpan4\x00', <r19=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEV(r14, &(0x7f0000000f80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x60, r15, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r17}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r18}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r19}]}, 0x60}, 0x1, 0x0, 0x0, 0x1040}, 0x20044085)
r20 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r20, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x24, r0, 0xc02, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x24}}, 0x20008000)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r20, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x5c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
ioctl$FS_IOC_GETFSUUID(r20, 0x80111500, &(0x7f0000001200))
recvmmsg(r20, &(0x7f0000002e80)=[{{&(0x7f0000001240)=@qipcrtr, 0x80, &(0x7f0000001500)=[{&(0x7f00000012c0)=""/9, 0x9}, {&(0x7f0000001300)=""/200, 0xc8}, {&(0x7f0000001400)=""/101, 0x65}, {&(0x7f0000001480)=""/112, 0x70}], 0x4, &(0x7f0000001540)=""/232, 0xe8}, 0x6460}, {{&(0x7f0000001640)=@sco, 0x80, &(0x7f0000001c40)=[{&(0x7f00000016c0)=""/148, 0x94}, {&(0x7f0000001780)=""/204, 0xcc}, {&(0x7f0000001880)=""/104, 0x68}, {&(0x7f0000001900)=""/247, 0xf7}, {&(0x7f0000001a00)=""/96, 0x60}, {&(0x7f0000001a80)=""/8, 0x8}, {&(0x7f0000001ac0)=""/198, 0xc6}, {&(0x7f0000001bc0)=""/109, 0x6d}], 0x8, &(0x7f0000001cc0)=""/112, 0x70}, 0x3}, {{&(0x7f0000001d40)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001dc0)=""/127, 0x7f}], 0x1, &(0x7f0000001e80)=""/4096, 0x1000}, 0xc25}], 0x3, 0x0, &(0x7f0000002f40)={0x77359400})
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r14, &(0x7f0000003040)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003000)={&(0x7f0000002fc0)={0x30, r15, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r19}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r17}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x10)
socket$inet6(0xa, 0x6, 0x6)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000003080), 0x4)

516.254125ms ago: executing program 0 (id=1683):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001600010a000000040000000c000a", @ANYRES32=r0, @ANYRES8=r0], 0x24}}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

436.125531ms ago: executing program 0 (id=1685):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000600)={0x84, @multicast1, 0x4e23, 0x2, 'fo\x00', 0x20, 0x8, 0x48}, 0x2c) (async)
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010100000000000000000000000a58000000090a030000000000000000000004000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021080003400000005408000f400000000a0c000b400000ee"], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_delrule={0x1c, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0)
r4 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async)
setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002"], 0x18)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) (async)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x77, 0x0, [{0x0, 0xc, "e256b28c590300000052"}, {0x0, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "0000000000800000"}, {0x0, 0x12, "73bc23f9ffffffa30900a301c8460000"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r1)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000640)={0x44, r6, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x12}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc800}, 0x40)

434.332594ms ago: executing program 1 (id=1686):
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x8c612f044f7ba963, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1, 0x80000001}, 0x1a)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10080000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x14c, r2, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9d}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x760}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6225452a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1fc00}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffc}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4090}, 0x20008010)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x38, r2, 0x601, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x1}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000)

433.75583ms ago: executing program 1 (id=1687):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1f, '\x00', 0x0, @fallback=0x28}, 0x94)
getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000800)=""/98, &(0x7f0000000080)=0x62)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0xf, 0x0, 0x0, @u32=0x7fffffff}]}]}, 0x2c}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r5, &(0x7f0000000740), 0x0, 0x20000012)
shutdown(r5, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000000c0)={0x9, 0x40, 0x4000, 0x8, 0x9, 0xdcd, 0xc3}, &(0x7f0000000100)=0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r4}, &(0x7f00000007c0), &(0x7f0000000640)=r3}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r4, <r6=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pK    \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001340)={{r6}, &(0x7f00000012c0), &(0x7f0000001300)='%pi6   \x00'}, 0x20)
unshare(0x28000600)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_T1(r7, 0x103, 0x1, &(0x7f0000000080)=0x7, 0x4)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000a51a334d1c00000018000180140002006e657464657673696d30000000000000", @ANYRES64=r8, @ANYRESDEC=r1], 0x2c}}, 0x0)

365.729758ms ago: executing program 0 (id=1688):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x40}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r2, 0x8)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x4, 0x0, 0x6, 0xffffffff}, 0x10)
sendto$inet6(r3, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x0, 0x79}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x79}, 0x8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c000000100001002bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a921000001000500140003007465616d5f736c6176655f3000000000300016802c000180280001004ac2ffef"], 0x6c}}, 0xc800)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r5, 0x2, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}]}, 0x1c}}, 0xc8e0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)

352.990987ms ago: executing program 1 (id=1689):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, <r0=>0xffffffffffffffff}, 0x4)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6_vti0\x00', <r1=>0x0, 0x29, 0x0, 0x4, 0x7fffffff, 0x69, @mcast1, @loopback, 0x20, 0x40, 0x663, 0x5}})
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0xffffffff, 0x5, 0x9, 0xd085f488da4aff22, r0, 0x9c7, '\x00', r1, r2, 0x3, 0x0, 0x3, 0xb, @value=r3}, 0x50)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_int(r5, 0x1, 0x3, &(0x7f0000000200)=0x3, 0x4)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240)=<r7=>0x0, &(0x7f0000000280)=0x4)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'ip6_vti0\x00', r7, 0x4, 0x3, 0x9a, 0xa44, 0x42, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x1, 0x8000, 0x6}})
setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000380)={{0x87, @rand_addr=0x64010101, 0x4e21, 0x1, 'rr\x00', 0x1, 0x7, 0x74}, {@broadcast, 0x4e22, 0x10000, 0x0, 0x0, 0x4}}, 0x44)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$FICLONE(r6, 0x40049409, r8)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r9, 0x6, 0x7, &(0x7f0000000400), 0x4)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xf, &(0x7f0000000480)=@raw=[@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}, @alu={0x0, 0x0, 0x0, 0x7, 0x6, 0x40, 0xf}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}], &(0x7f0000000500)='GPL\x00', 0x400, 0x32, &(0x7f0000000540)=""/50, 0x41000, 0x42, '\x00', r7, 0x0, r3, 0x8, &(0x7f0000000580)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x10, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000600)=[r4], &(0x7f0000000640)=[{0x0, 0x3, 0xa, 0x5}, {0x4, 0x4, 0x3, 0x6}], 0x10, 0x7960}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000440)='nmi_noise\x00', r10, 0x0, 0x6}, 0x18)
r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='scmi_rx_done\x00', r10, 0x0, 0xffff}, 0x18)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000800), 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r13, 0x89fa, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000880)={@loopback, @empty, 0x19, 0x14}})
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000900)=@name={0x1e, 0x2, 0x3, {{0x43, 0x1}, 0x2}}, 0x10, &(0x7f0000001a80)=[{&(0x7f0000000940)="8e1c7ddabdf9a347b744e601fbfc789089a45992", 0x14}, {&(0x7f0000000980)="a38a28bf86079b8e1a057f50f8edc2c4b62a8f1c2cf8f07bfb071a45ae8fd4545262e2fed63930d7d604413d5fe7e9d4c381a486dcd9457a55e52ee3e3366212996ff81184d0adcb0987d69092a6c141130696e8d4487c5d8b3b75ccbb3e61671f", 0x61}, {&(0x7f0000000a00)="ee6736eb0dba9dc98a9a81055680b53360ffb76c6dc63c80c4604774d35735957ba7b6ca284db4dc21f3183d9402f14fd0591be3b441fb5e329e97c6c4b0acc0f3f1e02e0d238e358db2796aa4ce544dcc50c180d5e2eaac0473aa", 0x5b}, {&(0x7f0000000a80)="4fd6554b25a6c6be0fb5645b0000540af26b26597e2de72df1c82203a3624f9e0e764814731028ba8d1dc3af51adb7a6e5faf5ac8086c113c0b2a8010ee994799b6e2c80a790bb2d404897786a4a6d32ab71e066692d4d27f29b02f35283f6354f588d5ed19b20bff9e1d302c87e77277d8a311d1018ae2fee564367630d8bcf46b8712e4e564aee5676f2d1e0f9353340a90b4b3d47e8373088732dd7988a80405a6d8edf4ba0b6f93ff03031cd58afe36cafddab17191bd3c90b8a9679953a07d09ed81bf22f195ff61611110785f135f092bea36432565176cc0614c9acc0a44949a9cc19f60a665c2eabe28ccf3714a4a08c20e88080c56f4e3690486a25a2b452939ac59678f0e953d5598e38882ec46c5af0ccc50177b9dccf505f418be797d3b7f26f8bd750f56b8178888766353bc8ea98fc9e31a0d1cb90daadcd18ceb2380f4b7da2bf6537a4ea1360d39caaf8ab4e2e9a4123b1c5a6301153e48bc4d432bbf0ae1ab0abda330cfc245ab485f1b6898e5939fc18a919538481f3ebad17c4f16824a6caadc8133c0aabc5d0b548b46ea6dedfee48e9ac143384845ef3c7b1a6d9584d6787297635f18ec2199c6c535e09da53bafba7cfc484832f3aadbaa5e0b5821b5b5932b1f45f5afa39c1e4a9e35271d85efd422d7924aa767e03bac13f8aacec09e7e31d8d4827cf43a87992c50657556bd6219b901302051292030bd7772ea31e494f09cf3ce6c91f5802b30aff078bd2f9b44a9a4a2de56d1da96b2225181a79de99adf40de56133dab8f0ee9aa6b08636839402483c393326292ca819a61f2c662d8444fa7f7b22669a02f99020608c6c6aab4fac41562373ff43d1f5f55850d91521a731655dd7f6ea2db1e8d7dc0c78ceddd66e4cc2682acd062a99b614c619db596a013b27d9e5a2c344782938677d55ca22259f24603fe2c95cff610b2037e062165ea0b62fcfd32d1ad426804003891cc9b9e8c312722aca24f9299a4d9ccfaa9743fcabacc4ded7b6f863b209b19d9a1502ea2941f13212f83a9d602fd5f0140e7259deb6270e05ff8772e31d925a10f526d3a7109e16077111a60d4faac752cd5d6bb1e87f41e0b7ee914a76e755daa049d121d1eff7dbcffd2f21eac90fc65ca1d01f1b5eb0680e87586f6bf0aaa0c2bdb9a6067c2361bc0890b116e3652f778f18734dd7c7b54c919a26e49bb564148d64a41ed6b82e9cbe26995075bf3f04dde5ca85e8df5a339dbbf6d00ab5e5710672f0456ec9a1202073af2d01e44f565ff5b2f8a4f2b89e2638e7b498e46b3318cf54f58b1db20fc21ae99d9e223fde82f93cce58ea30f7f64185bde6de11736a432b7a03028f1ec9efd62b1a369518ee149c490329b4597d3325b2f6b5222e1837e758c389d03fda9f2e5fd2c4d9a5c0c7bbde89a6a1b9d61a8ba81881044792f6b7d17dd9b5df58d4da6b4609900283e9ec447df175114c646109f7798cd7518da55fa2252195390aeca3a9984939fa430be2b599db2e40d58d1f2df688ea07184e22d520eff2bb7362564e0d38e8e98dfd4f7f0ee967145dfc88387ef5427a942b0651e29e2d7a34b86f34a584a1fb5784fd208ac32da44af89205c05a8932c353e82e5402804bb735d469b8aaf25768a5cafd5eb83cc7d1fae6b096e798929829d921d09bd24446654ee11c2966b294f1ba908e17423022a755074a71ec1fd81dafce9bbc26ed4f915ed3078542d8c81a226431b477f6a5fb4ff9f80d0464b17dc7160a534e0f91f93f8d4f20246a4010cdfb87ce49691306abb59ce7ff44e428fac05302a01ae23ac3897a9763e8482587a5abf38a06d815ddf463d34aeb47fb5f6e48156f3be6b2fdd9a111cfd3fc396a3d7adb1af8ec139d4143ae4c242385fd15c89115cba005620f4105fb44e6cf7631db2077659f91f5b15f025ebb919e9b658780fa0e21aca64f8b4b53ad2c7daa4831998cbec5aba0c50f46ce721c2873f5fc59c05dc534c2a2cb1cfb5951deb198976289d8bb23257f0a7a68acfd6f22ee5e1bc0cd78e7de4bdf0e76b006e601a0d71d2c6c6b2b00034630b6cb57b2c873be2bd668c9731d15474f4ed1e95e058f28cf5ae1e41f9c13b8798cb5c80d88ec0652d4eaa5d2fd34494e6cfa17a921b9cfa87a86f7469124f98238f3bf359cebad96916452b0a5cdf47a69f981b280e4f14bf9e1a0a021a19bee02a614c3298934c9bc79dd042f138a7bc15e8890ff8823a193a26199a8b3fcd02906bb55fcf40eb9b6ba274be5621ae86e14df010ea3b781683057491ee3138897f1fbb74c4fe7ba784c3f0ad8fe42618547a8d61c8dda99cc5f702ba320db639de0538b20cf6ac7d396aa6854390f4940117effde0dd02b9a96eae461b92ab62313a873b4d2878a1efd3a117133b8f364f5a94cef30d7c62f1ec900205d4122880bdb0c37e33e04986125db60a688e72b0e4f54d35237eccf20615c78dd6fd1811224d28c5992a91b1216b88955beabd0f45b930be7a54219a5e58c83931ce2e00523f0cbf254a1edc0eb4628ad4d6035cce479c62a02f0c6b30ba8b8f03fe09a421631801ca117384873fe732827dec6cac036275b3dabbf62742dfe27218fe072db4fa709db71b1249ba027f8d3203a6917885084c35722c9c1d30082491a2d523cdac261a6589c4a6b1ad3987b7670e017835df84371c051611cfe3bd28c4ccc43074564a249d4b3126e044531aa37991abdc99aab84c0bfaa48a997e75b6d63967b15a69ee6f63a9c4df4a2be26fa09e31ea58ff2ffefbd8f30c3d03516aff69445b276b1d2d551ca704faca995cfb4898654697dcbc25d0cc5a06fec575a4836c34acfacf749955424fe44f96a2bd2f1d66a24bc1b81d6353b3894cf2657ce647d816a02650f928dc3d763a29393e7eb2491a20f810e58ecec4a6ede042b8c7eaced8455d9598f2628bd003f8db184a01cc0a9ebfbf81c6810122ba2b3938fd849232ead12966535716148758e89f81cfd0976b255f7a96a2dc4217b0c13f99fb473fe1a54bb757a67a1f5fdb313ae05bcbeb4ac9f3a3ceb8cbc6e877e1d84a3410c92c2ffea9d55903089b793ead55d428f680636ec354cba2100155bb1f2ee17b2d754613fe70b90aac480556f4d65a51ecc2707164e84ba31072a5517f6c12f6e8c496a4b2ec8672e0532bb5e57ccb0d28d0f7d32457c6e902b0f46752240a955be3051616dc661ffafb82d68d84714d01afa468e3479b6dd29fa1d7ed346a5a8f2aedb19bce7a66ef087341c001b53ae59313283d892ae2018852a9e6ef42308cfa7a7e334344c93d25609127be151ff247025f9baec9e052cd1c0a0d6562d765252060d0fd5f265d0d772a8ef22e330c870c7b87cf1b8057d2a5693ade8e7ef5e18a016e3ef92db1181b0d8f87365df76efe007c61d3357e0d697f52adf86d860cbe5e8ad3a5eb4e34c4d48debbcb9c4a3e82615fcb54b751189706c624044c6bd9b85b87d573b2f5204fc5c97b3f9b752e772b00ba0c12f4deada8ab272707c524c35181685753ad7e9b362e791f28b1fd0abcac4bc7a200917f88a25f111575d6e43044b380b3c2d647df8fe009440143f1110cb570f9e60a2690ff535cba6f00f1812b826d599b4ff52761f2eb349af19e98a8ecab77a407362ab046cdca5f2c06834e48e25ac9ad55df27f5498c869a6905f0fad4bb8029b052483e2b21ab1cbaba4edeebe3ff97fc9391acc051336ed4dc424a0d8635f72e410c6ca44e332e7f59453fc91ca710bd3e7fd27a8affdf27f802d03901b915ad3c57a560ea345048702eeeda33966d881c9647a02fc45bc40151be4d8a5696e0dd2127dff94a5cd4e796d02c9c2ddfa28f22c42d7bfec1d161c5b59a942d013449647def3eb5c9e9eca5675b0110a7f25bad68e6dcb4645eff3d0d25c5da2b9c1fd96f86b1eab1e8a8113c7b5059947c54e5e4ef791cabc3197cffd581c81d8839cea792e0996282d81c9c6034793b7a74f6a57229e276163f05e5b37583f167ebe99160787e053ccd61101bb0aa5f668ef761185ad9dd5f4c00bcd90e6a0f23771fd14b08bdd7fcd7cb51f98374ad9289995d0f451cf1abee3405bc14dd1d16cfda3654b2000e8891c4e9b9fe0e69132f5c5f1bfe7f66b258ecf360e1a1d2af2c32a2db4931a7c35b2d4f630c57c328281ea9a4855b5a49025cccf40705570e5e72c3bdf382ca68d3d643241d61c93ecf000558a769111451d94fd6aac683734f780ab48c939ed7b5505890ac15ded92cbcca5d652d95d1af0ad9be3bd8a79d1c3b344146a7994d0c3a9bc2081228747adba40cd0ef6c12477365f4cd69f19a4379e9315a53d4064aeff0b2caa118e351b50d42080e108e839329af541326e4269c1ead374da5c898a85c3861f41f27956508ba127689c2e91828b21c422ae708ee08778e31bd0ea400806f9be4b1efb35828164c4caee9088c3b4adf8e9b3e92dcf6187e460d73d670a15e5764d34478c2c66befa49ea7317d6f605d064594c4752a297b2b85e900a1ce4e2a8ff7b1d7217c2f61e49bacb355010be435081570664aca50a1151498e148b0f39e01eaa00a3314f06257a7aa1ee4ca59158f0b4b3ba5538cd6e96a5a91a26b7dbb84c1f222f395b36cba97da85895a4ac1c21b31d21db492b57506ff9ee40d55a960c33363dc6405a26c9a9eca8725199ff20596a2ba9d562dc454a918a00222ac0b81bd08a7642f1b2436cc008985e0cbd66147cfa44cf7d2f7fd34eaef2abffc0582928e83fa619caca505a5cd22138d903f0105ebbaa5c35e32d32694780cb0bf7ecceddd829439f4d78ba3d50138b96cebbd5aea08afafce8705a5ec70c31b090f34384f1ffaf55d4c78bc2417e249cbbe2e0a233eeaf5e06b084199200bbd6cd38b268e8503588ad2e9bc7adcb83ab36ed0a86c84ec39e07278044e857f91c891afce7690e6424d04489e9d5c8d10b5d1c4d75ee515ffeae86c94d8e2d9c328bf68ab57a3d2f28842564ef1840d506ab0f495fd3cc75b2f16c42ae995b10ee9eb39da76a20fecff7863cc92eb12acb8be36f621cfe6d00a4071e2eea587e2dec1059bfa62076742152ef8ee4bc8a5205bfac8bc33f8cef3d9862591359abea5031d112c09798da3a7070da92b03679922bdc6d0caa2fae9b8dfa167d5343b010b1aa611bba912d6a6a5391a61e2fe4b02f7b61e38d5693f3fc67b56a0a3509cbea0cb9cf316bf3d521a2e544184eaff2fab53e5866d9fbef5f4d5f4860c0171612436c435b573b7ca8331f4b56335a575c2949d1cb6c1662fd26a2c16c1692966c7f8beb9d09b22e9feb34f2d141ad05b6ea6e6f5d6f3b52375eafcf5c161552d938a424e8ab3a61c66dbf536e81e58ec3592d5d2ce58dc88e3259c1b14040142d270c45f216207e26bc635cdcbba245a5283a4c6432500985aab7c868a139758c8690b12323d78b55e55ad48ba17ee29fdaaee8738f0d29ca6d1646c064c67127ded5d709fb365ce5e107fdcf75ddad7d53ac6bfbfef93a346eb1affd5632bcd859a2ad66c0e95888367c68074264098add54368e86d677fbe463c3c0eed7f080a9e1a4e53f99f0c404f00366c79b1e48e441794c50ebc713c0959143d896c92be2f4d46231945c39ac2f708139c4172670ff06af813a58bf018aa006622b472629f163255ab98f1d3a86c65d02d55e7c1b1016e689f22288eeb2413491d2a0593bdc6e0ea33402ddf9a02de3e8c208338b7c92c436a1eaf5dfffc00f355f2e413c317d82b592ac6455e025556c773d1ea3ff5b199", 0x1000}], 0x4}, 0x84856)
ioctl$BTRFS_IOC_ADD_DEV(r13, 0x5000940a, &(0x7f0000001b00)={{r12}, "d4544ec179c03228ea985572bc71fd5ca77b2a25cbcec92af848a631eae14913b14bdcd5abbf68f670d9d72cac8d2161c3a76911a6764e066b720d4e6352e84533a8374bcf2a839578ad9104e22e487ad1c7d2121c47d32531d1859bf5127ccff6bb4e912169b6c47fe6355c7bd7ac2a588ff9ef410dd1246402972c4315a85b1879ca9a7ccfba4bc50b798cffb124ac2881d7ec9b95eb5e6d294810b66decf5b25da5172da5f13c57e32ca8fd494dd65878443380a8283502d4200ee0b0ee44b9fcec7ea0fa35a2e051b55f3698cab478b0e0ce999288fd317274c3bf7f2d3acaa9f8c54cbbebd43336e85fcf2fefba7a0ebeea7fbdb49f3332ecc96bec6d79e77175d9d4b8398cc03f6d20a464d00ce9a9271d1a5649164e87b46976beb3d0cc6cda4b87d3b135f02d1571eb0e3b9b97551220fbab57c2a1ec60624043e5eacbcfb99c4f1f2cad5b18bac865527ce5f0222f703ba2c72a66dc1998514a40c6672f3771c582153236b1ad7cf9cfe9520abc7a0d81b40cfdb099e50ac0a7a431c4836565fed695558c2b830c5383ad55315ce1b308e34e7891014887797eba2f4b43d02be63aa12bae6e60b58a68527a39caf16a26ea172e46b1f7693269db0c05a5bf674cc56cc3f7fadc33ab21235553aa67e592458525ba8a521b81ea0a2d548fe2357a32845ca59ed845f11467efeccb1860656ee47abf5749317dfa35837740efa81dbfeb943935112b568c6fa530b09eb944f268978bbc3f60759648e3cf01825377451c8f7450dc0a31ea909e0fc21d734d5c5298ef3ce2750637e26464abe11bb125f58db9aaf7f7a225a015121bf0cab9750376e5939ec6ab3ca851393ee4a9316ecab1c2bc4fd6094fa7e841925403408fad0d7adce2975e42e39a9de69225cce9ab7cd787c69197e10868d82e940cdc4ddd00c79a79e75f3bc9e1fe68a7b1de8b79c72523052ab6c2f98cf71d56ed72b960d3fc340956c707374836885c13d3ddae96147b0e7340de94339bfe9501741eead1c68f261f49537d3cce1e44e3b44c904b30341651cda69633af2c7b7ecb6591f285eeae8eb2dd091a4c91e3460656ab3c5eeb00467acad08dfcbc736f5146f5ed695a44f1dc44d029a21d2f3eb4799548e9411c75f9404bc094afcf1ce5ff434d02e9139b8a5e255a4807876a2f393086ced79bb2a4f5f15c73229560d866c428c0a67363e30f9f878788f4c482f301c3b552b3432a7b4891fa615bfeff7a8518397626c694bd1f74551bdddcd6f1c49d3b904ecea69ade7af0b0078dd124ab4d6937ea06d57dccd43892cae42b08fb39198262df39db20ba032dd9e353a5b5dfa43fbb5775f78861bb2f8e1b6f88ec9684aab10325b0594104b095ddc7e0da5e2ffa85ce1ae51058b6006393d80a7376fd499b79a3f6a9ae99b0d14dc703c5224c78bb90d087d6e1767f5761b86d904060e6a339f6045843e43efc0a301d85f1ed555532b055d6d533bb24bf34be0aece8468eef13ff9a23d30902c1843a9e4fd33b5c9e60046d9f5077e54a4e6a5ce8ebda2e04aff14d12266068edd814b4f0de180918acda78699c62cbb320c4fbfe5ed2d2c9ef52b5cf38254139b7eb8b8d80f5b328da725f18927db4d2441c0af969158057b0245b2e36738f2b392989b3da1e05550588fe4226d1cbb9b2c6b165f7602e8d2c7592dfef285c84592e7fe0ccb8480e1ce12c5af8e8d70a521e57779bf315c4a61ce0c9f30f32ceab1d95667367420f46094af72896d662c7735cb1e6f68b1db0234de8864b0d3fe0b50b3a117731fbb56dd7a7174061b0d840cbeb4552a37252c913cdfecc6cca1b19418d746a3c6b402e4d8ecb4151cfe7dfb3996dfbc99610448971d4c9bd99de1e90d07c0e66d743903c694218edb70e1585cf83ea8d2a44f6371ccbcbf5b1afdf5ce1d79a68e1e2b90c9aa409a66e43835012dbde5f83e37c6774250fd21cfa15b26459a3c3af0dbf7b57ed6764f5b24c3374ce9c6bac692533f3c862999ad287690ce37cb00bb6d67fa436beddbe646ab0578b75d0aa4af7e47264bb31a42077ef720c6ac4119dcbfc1967e4eddf785bf234327ffb728a647327bb54e6d685d73790eec1b9aa82c69035e5d0ec08c06fbbd1f7c235e8a924843ba73024a88672c0c6e9d1fc619a7cf7857b51303848dbef24bc73566ad7d527dbd4f024b5568e206f2a00a91969da2acffc8de8dc5207afc538256d621b9a70513f611f19afc23ee394f2c9e37b209d4072385c95a351958d1a188809ceec3fd5191366b4bbd337d1473f7a5eb11bd8ad9c232dad1f4020bdc87bd35fe63afdf0d9a013d78cc9753d6831100fd9b9529b3049cf07db04029aaae793d7afa8e34f61ef29e830519c07b02b3acbb0d6c5836aaeade7042f7055e6118160fd03e8a5049eabb6d2185a8e6f948e7c84c36080d52f6f52681b764e44de34b364529b353fa91da4ca03e8732ae5a8d6e5e97d06a470272bf28fd1a0a66f196aceddf5c6a974fc2532492395effc173b70a866aa0c72ead76e38d8b827175e29d62c5ce7aed7d58967c7bbbbdc0582734c043020c3abfa76d3ae06bb623fc5503549a41edf2f5c93f9e86e232d7a35b36b669199e816c4e68d0c7425d91f107a07c809238c7f783d4bae8ca6044b133d77a69356167bc43ef586be7d23ebb1cd28c5e9d67908ed49c660ce942704e6148d33c9c9322b6ffbb74062e23931c72154622b2764ede2ad256bd57ea810bed668eb1125684ea737feb5201ff13d557fc1e7f3914f5f5f5cc7611147ef4ef3631a099e8cafab0def3a222b366dce1771f9ec388590a74c6a671a80cff1088e4273e0aa889ca39fd0f1fe77b70f959111fb18dc45693d0afab25c9bb41d577acf404d822b848733608fe2a1ae0bc0a76232551acb663e160a4e5eabe423eb28fbf5d346c3cb9bb74de55afcee3bd8780dd7c02beb75aa82804e0b3ff47d1ce94717c67f89eecb371c03b4b966e66262ded7efa138c90cbe4a594ed25df6d681aaf7ff4e8474bcb8c0193ad3491a5ab6eb129e8168473a301acc15f5e97ecd041aa85395e56461e53f51762506ba946702aefd85092b51451fbef524f6d502154241f1a39d5fc18386ffbbf8f097301a8dc2a7c02a39ce03620b3686685f6c9c079b9a958fb47d0d7e9de71ed9c3c3aeda9e17fa782dc2829ab8af6093677ddef12b4c8768cf5fae286f6ab42bb784df3dea56300b78c58ccf218d0527e24a6042e8c19b47f316250f2922b281c69eb877d329f386ca303d0579e9701142993c2b2593d5f0fbd5907e26c5acefc3579f8c4e9108856de9408151cecd26d3e4ae5df655c7d05b9dd5750f1fabe5639786b8250c8d28fdebf06a662649a962fd9ed3873e9aaeabb3e42d833106fa75550058d753e6fc5c4a461f88d4f5b04f9dcd02ef43bf451442b104c8d3d15828441e3a644c717415c0f4de27c09a5380ef48d2683f966e20ef37d22c321afe16e57d1c0b4b152f1cd7fecf348c62fc3baa6e913356fed6a6fd0df8e8c9b3aa53103ac4cd84700e98a1c6d4de6b7c46deaad73b0e67e12ca39dbe39da1b9299c42e9f33535674ec56b10dd49344e85d3c765a4728fb7c995a1ffd8a8442adf76537ca222adb52eba65373ed713a6aa1d0ba01d28171b6a232d81f7828a51fdddf590b36175e1866974740f899a6959df85199126df81aa5280cb93180c885ddbb65f6aa76d39a300e669887d2aad3c83cde66c706a73712af314b7f4c07d454690960d128a10900edc2be328b2e162ae59d51f52b1d17b29813982b7985c33188c7aaa5c21b2e35ef97c2ff0f07c74e74128c3500e3d660404dddf893e12680b5e3ce1fc20a78607bde3a9121ff9011d49890741b59cf89ebd598170908d67c57f1968030b4be4611d618da0ddeb23278572be217626ad5707de1184a047136db45ac853994710c7ee8bc7c2ffe11689cd971e125f6f4d3adda370d8f8c34808e56031defe925b5675e8208c00bab0c63023f65bcbf6b0668b4d110d590142d657e949fea7be9e365b472d7288938875bbe4a36839fc6e7c54670af624ed24c22d78e83699d04926bb4dcdbbf85f068271ca7de6b121b8e473475c1aa842c9967f55639f0f92e0142ed36c569bd1816eea6358564fe9205d67e40e4f8381ed981842a9f8634a2849bd895e9f947ac96153625a1fb8aeb8ad2c50cd11ebbed2be6fbcbb2418e0bd44b30b7431edc8a897e54b6555e5cb924145f0cbdc228f90567d5f067c702562cd431f421ecffb8251a25f485c4f0fad388c2dbe1adde37db7796918f2f89d77f96655c09d8e557f226231815c5d00291fbb5bbe9af4afc284d19f57d2c3a2610abaca96c99f289702bfce83673edc0cbb375566bd274b6fe1d9dc60ce92dcd04a82e88b07c51d6f2d83cbaa307cba78d8024ee4cf2ba22fcb6fbf29e8df78b1d99d31b04f34bab0ec27d1fb77ee5365fb2683f601e6c7c56a0f23ed2babdfdc1e1ba21e6fc1426fc5368c7d7aaa79c60d962655f6a899bf870fadc4de37c64294d1676da8b8dd6162b1b979797a0dacb90540a15b27f2468fc0be19b7595baf9f16a4ddf7cf2832a0a4cc3d15a79a0bb0597b0044af231f393de25dff7685ca6e6d29298ecd952dea3b8ca1c84deb4ee3f6c5d6ea7af3040edc4cbb7a0f225ea6a4bc1eae9752dacee03cc927205e917cc735defeafe650dd5f443da203d317e703647dce83f5cd1c0dd8e11d7fcc411e644c3b3746f6ee162c17d19eb3233d1a2cc4f644a84a62e564980de6f54023d818a46d3b5ee88b13784c1f43779d825763da01d4b0423bfd628dc179581cb39f8d1e0ab9028cb3964c69a0fa0a49b9ebd3570ff6cc979e058df57fb9126c46575b3cbf77610428b7be808b253948a01154c398ee8a310f7b6bb3160edaa642a70bdc5d9285ddaf8eeb99e00349c3345806c30c99ba3e74b84a4ea4cad9023022e672cf763a88cea1f6085b4cb887ae3a83c5d1ac16208209ac86489de896d332527b78ad00ab2d363cd575150276350c6d45557b5534646771265c6418c7df7af771de0a5d6a013a7b9b50d207eda344783b67bcc7487e4628c4aa136d96145dd7df40a04e145c3a6b04555132d289843da66b0b22d95880756464109e605bc947dadfd4381601dc5e8d8af6746d398a2dd931fb80de0aed44f9a86c53a0ad3db32265067482c70d8cca50952bb9276e5a23e7a9d1a99f6354dfd0efc61704f1314a0437322c8977e1feb41285f2a6d94fd6348484d021ac7368b107dfa210a2604982c490b9fc7f2a859be5779c8fefe8cc1b924d36c9c750e701de56bfbe6aebfcd4e3617f9873dc376a50aab5105bd4f4e280c8aa5e053e638305b67e954450e9bc7a35c5b791a7716480643b3ba499b014318a721ddeefa65eff12bf2f3a4d0ea07d6d9bb425258addb5cfc866f62fc5699d22900aa606b8b0f87c139dfccf887016dfe681ac2876c4209937f47186f15e0e357c0e87b71cdca34c81b6804a1490d60e36d824dd30de7342fd0700856689672712d4f21927a4bb5505d9f0b00cd7d1d1e1bb6a31729bac4f6b87b0a230e0e90c41aed4e66dd7c0516cd78bba955b3ea0cfcfbb7b266e9413033131b6378eac81a511fe0fefd5b952a9cabf7dad11936d0fe3a9f892ac38956209847c622e3306cca76efcec0ef3f22b2c1d0df3752e2ef0dd163101d11c28109b91b1fbe3a17b0f8526695be07cbcf10c7b88946c4394e1520c85c998bc4e669ffa17f9c846ab45411"})
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000002c00)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b40)={0x70, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xdc1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'hsr0\x00'}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8000000000000000}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x40004}, 0x20040000)
r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002c80)=@o_path={&(0x7f0000002c40)='./file0\x00', 0x0, 0x6000, r0}, 0x18)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002cc0)={0x2, 0x4, 0x8, 0x1, 0x80, r14, 0xd, '\x00', r7, r2, 0x1, 0x2, 0x4}, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000002d40)={'veth0_to_bridge\x00', @multicast})

276.308075ms ago: executing program 0 (id=1690):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x2c, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}, [{0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r5], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff)

275.44108ms ago: executing program 1 (id=1691):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x3a}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8005}, 0x404c010) (async)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan1\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', r3, 0x2f, 0x2, 0x1, 0x1000, 0x54, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8, 0x10, 0x8, 0x40}})
r4 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000240)={'batadv_slave_1\x00', 0x1}) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)='%pK    \x00'}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r5, &(0x7f0000000340)="7b45344943e15c00691475daa74754c46073371e", &(0x7f0000000380)=""/100, 0x4}, 0x20) (async)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x5, '\x00', r3, r6, 0x1, 0x4, 0x3}, 0x50) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r7, &(0x7f0000000500)={0x2, 0x4e21, @remote}, 0x10) (async)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000540)={0x0, r0}, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r8, &(0x7f0000000580)) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x7}, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x1c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0x18, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DST_MAC={0xa, 0x3, @device_b}, @NL80211_WOWLAN_TCP_DST_IPV4={0x8, 0x2, @rand_addr=0x64010102}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x220080c5}, 0xc040)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r9, &(0x7f00000006c0)={0x2, 0x4e24, @multicast1}, 0x10)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700)='./cgroup/syz1\x00', 0x200002, 0x0) (async)
r10 = socket(0x0, 0x2, 0xfffffffb)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r10)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x10010, r11, 0x53c21000)
r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan0\x00', <r13=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wpan4\x00', <r14=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x5c, r12, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)

132.719534ms ago: executing program 0 (id=1692):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f00000014c0)=""/145, &(0x7f0000000000)=0x91)
socket(0x1e, 0x1, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
syz_emit_ethernet(0x82, &(0x7f0000000400)={@broadcast, @random="8eff80ec0031", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @cipso={0x86, 0x40, 0x0, [{0x0, 0x10, "9e0cec69d2dae06de9173b3f60c8"}, {0x0, 0x5, "f34629"}, {0x0, 0xb, "3033a70f1c0f9d1bfd"}, {0x0, 0xa, "3aba454f6dc54cc6"}, {0x0, 0xb, "debbd3e9f1fdeefc2c"}, {0x0, 0x5, "91ec92"}]}]}}}}}}}, 0x0)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="580000001400192340834b80040d8c561e067f0202ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000000003a0", 0x58}], 0x0)

129.870259ms ago: executing program 1 (id=1693):
socket(0x10, 0x3, 0x0) (async)
socket$packet(0x11, 0x3, 0x300) (async)
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000000202010200000000000000000100000308000940000000040400038094000a800800014000000000080001400000000108000140000000017800028006000340000000001400018008000100ac1414bb08000200e00000012c00018014000300fe8000000000000000bb14000400fe8000000000000000000000000000352c00018014000300fe88000000000000000000000000010114000400fc010000000000000000000000000000180001801400018008000100ac1414bb08000200e0000001"], 0xcc}, 0x1, 0x0, 0x0, 0x81}, 0x800) (async)
r3 = socket$kcm(0x10, 0x2, 0x10) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) (async)
mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r4, 0x5c2a7000) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x28011, r6, 0xac9d4000) (async)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@gettfilter={0x34, 0x2e, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x4, 0xfff3}, {0xa, 0x7}, {0x7, 0xfff3}}, [{0x8, 0xb, 0xd2}, {0x8, 0xb, 0xf}]}, 0x34}}, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0400000004200000040800000090b9bdec873ddb", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff00"/28], 0x50) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000180)={'caif0\x00', &(0x7f0000000540)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0xc, 0x0, 0x0, 0x4, [0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x3, 0xd]}}) (async)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x200}) (async)
socket$kcm(0x2, 0xa, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9)
getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)

65.478701ms ago: executing program 2 (id=1694):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x20}, 0x10)
r1 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r1})
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0))
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xd}]}}}]}, 0x48}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004840)=ANY=[@ANYBLOB='d\b\x00\x00', @ANYRES16=r4, @ANYBLOB="31070000000000000000380000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x64}, 0x1, 0x2}, 0x0)
socketpair(0x26, 0x800, 0x8, &(0x7f00000001c0))
r5 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
getsockopt(r5, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000))
ioctl$sock_inet_SIOCSIFBRDADDR(r5, 0x891a, &(0x7f0000000000)={'pimreg1\x00', {0x2, 0x2dce, @broadcast}})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@allocspi={0xf8, 0x16, 0x1, 0x4, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x0, 0xfb, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x4}, {@in=@remote, 0x4d3, 0x6c}, @in=@private=0xa010102, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x3}, {0x9}, {0x0, 0x0, 0x2}, 0x70bd26, 0x10000002, 0x2}, 0x4, 0x5}}, 0xf8}, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c0000004a00012227bd7000fcdbdf1f0a"], 0x1c}}, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r6, 0x29, 0x41, &(0x7f0000000440)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r9, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_SERVICE(r11, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f00000000c0)={0x18, r10, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x12)
sendmsg$IPVS_CMD_DEL_SERVICE(r8, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r10, 0x8, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0)

65.102858ms ago: executing program 0 (id=1695):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000b00)={'nat\x00', 0x0, 0x3, 0x0, [0x9, 0x0, 0x7fffffffffffffff, 0x4991, 0x9, 0xf43], 0x0, 0x0, 0x0}, &(0x7f0000000800)=0x78)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000007580)={0x3c, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x3}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x3c}}, 0x4000854) (async)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000007580)={0x3c, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x3}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x3c}}, 0x4000854)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r6=>0x0})
socket(0x10, 0x3, 0x0) (async)
r7 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
openat$tun(0xffffffffffffff9c, 0x0, 0x484242, 0x0) (async)
r10 = openat$tun(0xffffffffffffff9c, 0x0, 0x484242, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000200)=@assoc_value, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000030000000000000f8ffffff851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000000018000000000000000000000000000000950004"], 0x0, 0x2}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000030000000000000f8ffffff851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000000018000000000000000000000000000000950004"], 0x0, 0x2}, 0x94)
setsockopt$inet6_tcp_int(r11, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r11, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x198, 0x4, 0x9, 0x2, 0x68}, 0xb, 0x1, 0x5, 0x1, 0x5, 0x16, 0x15, 0x1d, 0x6, 0x4, {0x5, 0xb, 0x41, 0x0, 0x16, 0x3ff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x198, 0x4, 0x9, 0x2, 0x68}, 0xb, 0x1, 0x5, 0x1, 0x5, 0x16, 0x15, 0x1d, 0x6, 0x4, {0x5, 0xb, 0x41, 0x0, 0x16, 0x3ff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x44080)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
ioctl$TUNSETCARRIER(r10, 0x400454e2, &(0x7f00000003c0)) (async)
ioctl$TUNSETCARRIER(r10, 0x400454e2, &(0x7f00000003c0))
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r6, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x30, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x33}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x8040)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x53}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80)
connect$inet6(r7, &(0x7f0000000340)={0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00', 0x22}, 0x1c) (async)
connect$inet6(r7, &(0x7f0000000340)={0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00', 0x22}, 0x1c)

2.125108ms ago: executing program 1 (id=1696):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000400)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x1c, 0x0, 0x1, 0xf0bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x20004804)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="140100001f000103000000004800000001010080190001"], 0x114}], 0x1}, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r0, &(0x7f0000000240)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x52}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000400)) (async)
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x1c, 0x0, 0x1, 0xf0bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x20004804) (async)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
sendmsg$netlink(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="140100001f000103000000004800000001010080190001"], 0x114}], 0x1}, 0x0) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r0, &(0x7f0000000240)}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x52}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async)

0s ago: executing program 2 (id=1697):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf1000000000000016001000071b48013d030100000000001f02000000000000bc26080000000000bf67000000000000160200000fff0700670200000a000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r3}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20)
setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00006600}, 0x2, 0x0, 0x1, 0x1}, 0x20)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @rand_addr=' \x01\x00'}, 0x1c)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x200}, &(0x7f0000000040)=0x20)
sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000540)="2e00000010008188040f46ecdb4cb9ccf5960ef42b000000e3bd6efb010511000b0002000d000010ba8000001201c58adee8652017903070476f381749da75b32afc463527c42d76916685bfaa25efc5d19110bad1693f030cf9e028", 0x5c}], 0x1, 0x0, 0x0, 0xc9e}, 0x8800)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r7)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000140)={'wpan0\x00'})
sendmsg$NL802154_CMD_SET_PAN_ID(r8, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, r9, 0xfb915132ebada55d, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}]}, 0x1c}}, 0x8000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r10)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:31899' (ED25519) to the list of known hosts.
syzkaller login: [   56.154028][ T5814] cgroup: Unknown subsys name 'net'
[   56.278452][ T5814] cgroup: Unknown subsys name 'cpuset'
[   56.284674][ T5814] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.824318][ T5814] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.428817][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.433394][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.436456][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.439823][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.452810][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.457133][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.460577][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.461129][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.467972][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.471155][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.483018][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.489677][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.492448][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.495858][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.499483][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.818769][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   64.828649][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   64.854274][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   64.997418][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.999754][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.002300][ T5829] bridge_slave_0: entered allmulticast mode
[   65.006925][ T5829] bridge_slave_0: entered promiscuous mode
[   65.018622][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.021524][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.023912][ T5838] bridge_slave_0: entered allmulticast mode
[   65.026756][ T5838] bridge_slave_0: entered promiscuous mode
[   65.030449][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.033047][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.035407][ T5838] bridge_slave_1: entered allmulticast mode
[   65.038857][ T5838] bridge_slave_1: entered promiscuous mode
[   65.042094][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.044863][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.047149][ T5829] bridge_slave_1: entered allmulticast mode
[   65.049818][ T5829] bridge_slave_1: entered promiscuous mode
[   65.059908][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.062273][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.064697][ T5833] bridge_slave_0: entered allmulticast mode
[   65.068254][ T5833] bridge_slave_0: entered promiscuous mode
[   65.094367][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.097314][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.099850][ T5833] bridge_slave_1: entered allmulticast mode
[   65.103251][ T5833] bridge_slave_1: entered promiscuous mode
[   65.130393][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.147127][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.151953][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.157831][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.164322][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.190872][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.240288][ T5833] team0: Port device team_slave_0 added
[   65.245405][ T5829] team0: Port device team_slave_0 added
[   65.250046][ T5838] team0: Port device team_slave_0 added
[   65.254626][ T5833] team0: Port device team_slave_1 added
[   65.257639][ T5829] team0: Port device team_slave_1 added
[   65.261645][ T5838] team0: Port device team_slave_1 added
[   65.307546][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.309761][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.317870][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.341623][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.343795][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.351578][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.360045][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.362229][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.369823][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.374799][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.376885][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.384877][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.388783][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.390906][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.399396][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.412388][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.415059][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.424257][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.475207][ T5833] hsr_slave_0: entered promiscuous mode
[   65.477774][ T5833] hsr_slave_1: entered promiscuous mode
[   65.494151][ T5829] hsr_slave_0: entered promiscuous mode
[   65.496963][ T5829] hsr_slave_1: entered promiscuous mode
[   65.499107][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.501576][ T5829] Cannot create hsr debugfs directory
[   65.515212][ T5838] hsr_slave_0: entered promiscuous mode
[   65.517778][ T5838] hsr_slave_1: entered promiscuous mode
[   65.520404][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.523192][ T5838] Cannot create hsr debugfs directory
[   65.835705][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.844958][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.851609][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.868554][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.928319][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.936482][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.958300][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.965530][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   66.024754][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.031470][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.040072][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.052488][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.090239][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.116486][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   66.129812][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.132893][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.149214][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.151577][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.247031][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.280493][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.288707][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   66.303752][ T3569] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.306095][ T3569] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.317072][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   66.320801][ T3569] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.323454][ T3569] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.338599][  T766] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.340928][  T766] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.355265][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.357821][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.397774][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.488039][ T5829] veth0_vlan: entered promiscuous mode
[   66.499884][ T5829] veth1_vlan: entered promiscuous mode
[   66.536304][ T5832] Bluetooth: hci1: command tx timeout
[   66.538295][ T5832] Bluetooth: hci0: command tx timeout
[   66.540315][ T5218] Bluetooth: hci2: command tx timeout
[   66.547069][ T5829] veth0_macvtap: entered promiscuous mode
[   66.555064][ T5829] veth1_macvtap: entered promiscuous mode
[   66.578117][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.587312][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.591468][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.598936][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.617071][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.620118][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.623874][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.626631][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.640169][ T5833] veth0_vlan: entered promiscuous mode
[   66.657021][ T5833] veth1_vlan: entered promiscuous mode
[   66.722476][ T5838] veth0_vlan: entered promiscuous mode
[   66.736994][ T3569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.739446][ T3569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.740532][ T5838] veth1_vlan: entered promiscuous mode
[   66.773121][ T5833] veth0_macvtap: entered promiscuous mode
[   66.785403][ T5833] veth1_macvtap: entered promiscuous mode
[   66.791119][ T3020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.795423][ T3020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.835214][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.841450][ T5838] veth0_macvtap: entered promiscuous mode
[   66.859739][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.874777][ T5838] veth1_macvtap: entered promiscuous mode
[   66.878927][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.882205][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.884004][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.887013][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.894148][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.968127][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.979917][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.990042][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.993306][ T5897] netlink: 'syz.1.2': attribute type 16 has an invalid length.
[   66.993863][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.999870][ T5897] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'.
[   67.001289][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.008111][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.047988][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.051123][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.114988][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.119514][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.167163][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.170365][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.193913][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.196390][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.237417][ T5901] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.310676][ T5909] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.335218][ T5901] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.445186][ T5916] netlink: 256 bytes leftover after parsing attributes in process `syz.2.8'.
[   67.461194][ T5916] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   67.871597][ T5945] netlink: 'syz.2.14': attribute type 1 has an invalid length.
[   67.954156][ T5950] netlink: 'syz.0.15': attribute type 11 has an invalid length.
[   67.959429][ T5950] netlink: 224 bytes leftover after parsing attributes in process `syz.0.15'.
[   67.967189][ T5952] netlink: 348 bytes leftover after parsing attributes in process `syz.2.16'.
[   68.020021][ T5950] Zero length message leads to an empty skb
[   68.081446][ T5901] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.095671][ T5955] netlink: 'syz.2.17': attribute type 23 has an invalid length.
[   68.197533][ T5957] syz.2.18 uses obsolete (PF_INET,SOCK_PACKET)
[   68.452741][ T5968] netlink: 348 bytes leftover after parsing attributes in process `syz.2.23'.
[   68.604014][ T5218] Bluetooth: hci2: command tx timeout
[   68.605810][ T5218] Bluetooth: hci0: command tx timeout
[   68.607830][ T5218] Bluetooth: hci1: command tx timeout
[   68.630809][ T5973] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.679416][ T5974] sctp: [Deprecated]: syz.0.24 (pid 5974) Use of struct sctp_assoc_value in delayed_ack socket option.
[   68.679416][ T5974] Use struct sctp_sack_info instead
[   68.778221][ T5979] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.786344][ T5979] ipt_REJECT: TCP_RESET invalid for non-tcp
[   68.851363][ T5981] netlink: 'syz.0.27': attribute type 3 has an invalid length.
[   68.863359][ T5981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'.
[   68.867722][ T5981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'.
[   68.872248][ T5981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'.
[   68.876809][ T5981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'.
[   68.880591][ T5981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'.
[   68.980559][ T5982] _Z`Ԁ@: entered promiscuous mode
[   69.255983][ T5901] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.490316][   T47] IPVS: starting estimator thread 0...
[   69.592739][ T5994] IPVS: using max 62 ests per chain, 148800 per kthread
[   69.686634][ T5901] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.706617][ T5901] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.714457][ T5901] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.725765][ T5901] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.101192][ T5973] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.391394][ T5973] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.461588][ T5973] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.531476][ T5973] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.562882][ T5973] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.576157][ T5973] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.590107][ T5973] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.682832][ T5837] Bluetooth: hci1: command tx timeout
[   70.684952][ T5837] Bluetooth: hci0: command tx timeout
[   70.687640][ T5218] Bluetooth: hci2: command tx timeout
[   71.020187][ T6058] netlink: 'syz.1.52': attribute type 15 has an invalid length.
[   71.032645][ T6058] netlink: 'syz.1.52': attribute type 7 has an invalid length.
[   71.089992][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.094377][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.507699][ T6091] macvlan2: entered allmulticast mode
[   71.509583][ T6091] veth1_vlan: entered allmulticast mode
[   71.518825][ T6092] netlink: 'syz.1.59': attribute type 15 has an invalid length.
[   71.521573][ T6091] veth1_vlan: left allmulticast mode
[   72.039958][ T6129] __nla_validate_parse: 76 callbacks suppressed
[   72.039968][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.70'.
[   72.085195][ T6132] netlink: 44 bytes leftover after parsing attributes in process `syz.2.72'.
[   72.178874][ T6141] netlink: 28 bytes leftover after parsing attributes in process `syz.0.75'.
[   72.474183][ T6160] netlink: 104 bytes leftover after parsing attributes in process `syz.2.82'.
[   72.561707][ T6164] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[   72.566280][ T6164] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[   72.569462][ T6164] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[   72.576665][ T6164] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[   72.581423][ T6164] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[   72.585696][ T6164] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[   72.588886][ T6164] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[   72.592165][ T6164] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[   72.598761][ T6164] geneve2: entered promiscuous mode
[   72.601103][ T6164] geneve2: entered allmulticast mode
[   72.692274][ T6171] netlink: 'syz.0.85': attribute type 1 has an invalid length.
[   72.763219][ T5837] Bluetooth: hci0: command tx timeout
[   72.765371][ T5837] Bluetooth: hci2: command tx timeout
[   72.767443][ T5837] Bluetooth: hci1: command tx timeout
[   72.855213][ T6179] warning: `syz.0.88' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   72.943767][ T6182] netlink: 3 bytes leftover after parsing attributes in process `syz.2.90'.
[   72.954984][ T6182] batadv1: entered promiscuous mode
[   72.961509][ T6182] batadv1: entered allmulticast mode
[   72.971495][ T6185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.89'.
[   72.982112][ T6185] netlink: 24 bytes leftover after parsing attributes in process `syz.0.89'.
[   72.988140][ T6185] Bluetooth: MGMT ver 1.23
[   73.230139][ T6199] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   73.531689][ T6217] xt_connbytes: Forcing CT accounting to be enabled
[   73.540331][ T6217] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   73.547239][ T6217] xt_bpf: check failed: parse error
[   73.643294][ T6226] netlink: 'syz.2.105': attribute type 10 has an invalid length.
[   73.650346][ T6226] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.656754][ T6226] bridge_slave_1: left allmulticast mode
[   73.658942][ T6226] bridge_slave_1: left promiscuous mode
[   73.661218][ T6226] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.686777][ T6226] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[   73.740608][ T6230] netlink: 36 bytes leftover after parsing attributes in process `syz.0.107'.
[   73.790379][ T6237] bridge0: port 2(gretap0) entered blocking state
[   73.795480][ T6237] bridge0: port 2(gretap0) entered disabled state
[   73.801832][ T6237] gretap0: entered allmulticast mode
[   73.805631][ T6237] gretap0: entered promiscuous mode
[   73.808144][ T6237] bridge0: port 2(gretap0) entered blocking state
[   73.810721][ T6237] bridge0: port 2(gretap0) entered forwarding state
[   73.819490][ T6239] netlink: 28 bytes leftover after parsing attributes in process `syz.0.110'.
[   73.908473][ T6239] netlink: 168 bytes leftover after parsing attributes in process `syz.0.110'.
[   74.066299][ T6255] 8021q: VLANs not supported on ip6_vti0
[   74.156488][ T6258] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[   74.317298][ T6264] can: request_module (can-proto-0) failed.
[   74.320564][ T6264] Bluetooth: MGMT ver 1.23
[   74.650542][ T6277] tipc: Started in network mode
[   74.654257][ T6277] tipc: Node identity ac1414aa, cluster identity 4711
[   74.658303][ T6277] tipc: Enabled bearer <udp:syz2>, priority 10
[   75.100080][ T6311] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   75.654556][ T5296] tipc: Node number set to 2886997162
[   75.993694][ T6355] nft_compat: unsupported protocol 0
[   76.711847][ T6385] netlink: 'syz.0.154': attribute type 18 has an invalid length.
[   76.917405][ T6396] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   76.921070][ T6396] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   76.924447][ T6396] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   76.942191][ T6397] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   76.954394][ T6397] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[   76.963790][ T6397] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[   77.305260][ T6433] __nla_validate_parse: 16 callbacks suppressed
[   77.305271][ T6433] netlink: 68 bytes leftover after parsing attributes in process `syz.2.169'.
[   77.320633][ T6433] pim6reg1: entered promiscuous mode
[   77.323031][ T6433] pim6reg1: entered allmulticast mode
[   77.758991][ T6462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.180'.
[   78.119460][ T6484] netlink: 'syz.2.186': attribute type 9 has an invalid length.
[   78.251157][ T6486] netlink: 32 bytes leftover after parsing attributes in process `syz.0.187'.
[   78.518763][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.192'.
[   78.522197][ T6503] netlink: 24 bytes leftover after parsing attributes in process `syz.2.192'.
[   78.727253][ T6507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.193'.
[   78.731985][ T6506] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   78.735509][ T5296] IPVS: starting estimator thread 0...
[   78.830756][ T6508] IPVS: using max 42 ests per chain, 100800 per kthread
[   78.948278][ T6515] netlink: 20 bytes leftover after parsing attributes in process `syz.0.194'.
[   78.951994][ T6515] netlink: 40 bytes leftover after parsing attributes in process `syz.0.194'.
[   79.046138][ T6520] netlink: 348 bytes leftover after parsing attributes in process `syz.0.197'.
[   79.390700][ T6545] netlink: 348 bytes leftover after parsing attributes in process `syz.2.205'.
[   79.503802][ T6553] IPVS: Error joining to the multicast group
[   79.665484][ T6572] tipc: Started in network mode
[   79.667021][ T6572] tipc: Node identity ea7dddf0e3e1, cluster identity 4711
[   79.669233][ T6572] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   79.671663][ T6572] syzkaller0: entered promiscuous mode
[   79.674546][ T6572] syzkaller0: entered allmulticast mode
[   79.729774][ T6571] tipc: Resetting bearer <eth:syzkaller0>
[   79.760778][ T6571] tipc: Disabling bearer <eth:syzkaller0>
[   80.249106][ T6612] macvlan2: entered allmulticast mode
[   80.250822][ T6612] veth1_vlan: entered allmulticast mode
[   80.256144][ T6612] veth1_vlan: left allmulticast mode
[   80.271839][ T6608] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   80.592867][ T6636] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[   80.612967][ T6636] af_packet: tpacket_rcv: packet too big, clamped from 65238 to 3952. macoff=96
[   80.819669][ T6656] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.825191][ T6656] batadv_slave_0: entered promiscuous mode
[   80.894844][ T6664] netlink: 'syz.2.245': attribute type 18 has an invalid length.
[   81.199648][ T6694] ieee802154 phy0 wpan0: encryption failed: -22
[   81.333421][   T10] cfg80211: failed to load regulatory.db
[   82.154096][ T6722] syz_tun: entered allmulticast mode
[   82.160321][ T6721] syz_tun: left allmulticast mode
[   82.357644][ T6745] __nla_validate_parse: 13 callbacks suppressed
[   82.357659][ T6745] netlink: 16 bytes leftover after parsing attributes in process `syz.2.269'.
[   82.569612][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.273'.
[   82.654150][ T6774] ip6gre0: Master is either lo or non-ether device
[   82.682353][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.276'.
[   82.686525][ T6776] tipc: Enabled bearer <eth:vlan0>, priority 18
[   82.945513][ T6801] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   82.950343][ T6803] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.206471][ T6818] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   83.231618][ T6818] tipc: Failed to remove unknown binding: 66,1,1/0:3742337386/3742337388
[   83.238934][ T6818] tipc: Failed to remove unknown binding: 66,1,1/0:3742337386/3742337388
[   83.242252][ T6818] tipc: Failed to remove unknown binding: 66,1,1/0:3742337386/3742337388
[   83.248604][ T6818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.290'.
[   83.251957][ T6818] netlink: 28 bytes leftover after parsing attributes in process `syz.2.290'.
[   83.386760][ T6832] netlink: 24 bytes leftover after parsing attributes in process `syz.1.294'.
[   83.601956][ T6842] netlink: 'syz.2.298': attribute type 13 has an invalid length.
[   83.605365][ T6843] netlink: 'syz.2.298': attribute type 13 has an invalid length.
[   83.631223][ T6845] netlink: 144 bytes leftover after parsing attributes in process `syz.1.299'.
[   83.632327][ T6843] bridge0: port 2(gretap0) entered disabled state
[   83.701437][ T6843] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.757166][ T6843] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   83.764589][ T6843] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   83.834530][ T6843] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.837643][ T6843] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.840764][ T6843] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.844301][ T6843] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   84.041966][ T6867] xt_hashlimit: max too large, truncated to 1048576
[   84.043303][ T6866] xt_socket: unknown flags 0xfc
[   84.045443][ T6867] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[   84.100152][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.307'.
[   84.104603][ T6871] netlink: 24 bytes leftover after parsing attributes in process `syz.1.307'.
[   84.282324][ T6883] sctp: [Deprecated]: syz.2.310 (pid 6883) Use of int in maxseg socket option.
[   84.282324][ T6883] Use struct sctp_assoc_value instead
[   84.549030][ T6900] netlink: 20 bytes leftover after parsing attributes in process `syz.2.316'.
[   84.564155][ T6901] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   84.572670][ T6901] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   85.826330][ T6924] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[   85.831152][ T6924] xt_addrtype: ipv6 BLACKHOLE matching not supported
[   86.051880][ T6933] syzkaller1: entered allmulticast mode
[   89.661138][ T7002] netlink: 'syz.0.350': attribute type 13 has an invalid length.
[   89.665344][ T7002] __nla_validate_parse: 6 callbacks suppressed
[   89.665357][ T7002] netlink: 16 bytes leftover after parsing attributes in process `syz.0.350'.
[   89.701151][ T7008] netlink: 20 bytes leftover after parsing attributes in process `syz.2.351'.
[   89.764326][ T7012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.351'.
[   90.053927][ T7029] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.074295][ T7029] syzkaller0: entered promiscuous mode
[   90.076503][ T7029] syzkaller0: entered allmulticast mode
[   90.084896][ T7029] tipc: Resetting bearer <eth:syzkaller0>
[   90.087341][ T7027] tipc: Resetting bearer <eth:syzkaller0>
[   90.096994][ T7027] tipc: Disabling bearer <eth:syzkaller0>
[   90.146905][ T7032] netlink: 224 bytes leftover after parsing attributes in process `syz.0.359'.
[   90.248761][ T7044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.363'.
[   90.251417][ T7044] netlink: 'syz.0.363': attribute type 30 has an invalid length.
[   90.262212][ T7044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.363'.
[   90.271643][ T7042] netlink: 344 bytes leftover after parsing attributes in process `syz.1.362'.
[   90.312316][ T7047] pim6reg1: entered allmulticast mode
[   90.700866][ T7067] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   90.948355][ T7081] netlink: 204 bytes leftover after parsing attributes in process `syz.2.374'.
[   91.100628][ T7100] netlink: 'syz.0.380': attribute type 21 has an invalid length.
[   91.104701][ T7100] netlink: 128 bytes leftover after parsing attributes in process `syz.0.380'.
[   91.110689][ T7100] netlink: 'syz.0.380': attribute type 5 has an invalid length.
[   91.113714][ T7100] netlink: 3 bytes leftover after parsing attributes in process `syz.0.380'.
[   91.235249][ T7100] netlink: 'syz.0.380': attribute type 1 has an invalid length.
[   92.215791][ T7139] netlink: 'syz.2.392': attribute type 39 has an invalid length.
[   92.352364][ T7143] netlink: 'syz.1.394': attribute type 9 has an invalid length.
[   92.424543][ T7146] netlink: 'syz.2.395': attribute type 1 has an invalid length.
[   93.303932][ T7163] nbd: must specify at least one socket
[   93.689583][ T7181] netlink: zone id is out of range
[   93.694393][ T7181] netlink: zone id is out of range
[   93.697667][ T7181] netlink: zone id is out of range
[   93.699444][ T7181] netlink: zone id is out of range
[   93.701237][ T7181] netlink: zone id is out of range
[   93.703333][ T7181] netlink: zone id is out of range
[   93.705170][ T7181] netlink: zone id is out of range
[   93.706758][ T7181] netlink: zone id is out of range
[   93.708598][ T7181] netlink: zone id is out of range
[   93.710364][ T7181] netlink: zone id is out of range
[   93.836956][ T7195] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.840200][ T7195] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.940037][ T7195] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.949815][ T7195] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.987411][ T7195] tipc: Resetting bearer <eth:vlan0>
[   94.012944][ T7195] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.015687][ T7195] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.018276][ T7195] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.020883][ T7195] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   94.096522][ T7206] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   94.101819][ T7200] tipc: Resetting bearer <eth:syzkaller0>
[   94.107017][ T7207] syzkaller0: entered promiscuous mode
[   94.109012][ T7207] syzkaller0: entered allmulticast mode
[   94.280419][ T7196] tipc: Resetting bearer <eth:syzkaller0>
[   94.289888][ T7196] tipc: Disabling bearer <eth:syzkaller0>
[   94.351499][ T7227] xt_TPROXY: Can be used only with -p tcp or -p udp
[   94.766676][ T7269] x_tables: ip6_tables: SNPT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING
[   95.127082][ T7283] __nla_validate_parse: 6 callbacks suppressed
[   95.127102][ T7283] netlink: 16 bytes leftover after parsing attributes in process `syz.0.439'.
[   95.189028][ T7285] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   96.334176][ T7330] netlink: 'syz.2.456': attribute type 39 has an invalid length.
[   96.492452][ T7343] vlan2: entered promiscuous mode
[   96.498202][ T7343] erspan0: entered promiscuous mode
[   96.501033][ T7343] vlan2: entered allmulticast mode
[   96.504463][ T7343] erspan0: entered allmulticast mode
[   96.512843][ T7346] netlink: 44 bytes leftover after parsing attributes in process `syz.1.464'.
[   96.516965][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.464'.
[   96.521568][ T7346] netlink: 24 bytes leftover after parsing attributes in process `syz.1.464'.
[   96.710376][ T7362] netlink: 32 bytes leftover after parsing attributes in process `syz.0.470'.
[   96.720073][ T7363] netlink: 32 bytes leftover after parsing attributes in process `syz.0.470'.
[   96.964639][ T7355] netlink: 28 bytes leftover after parsing attributes in process `syz.1.466'.
[   96.977087][ T7355] syzkaller1: entered promiscuous mode
[   96.979276][ T7355] syzkaller1: entered allmulticast mode
[   97.222279][ T7393] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.480'.
[   97.229177][ T7393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.480'.
[   97.232769][ T7393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.480'.
[   97.821205][ T7425] xt_recent: Unsupported userspace flags (00000048)
[  100.869178][ T7422] team0 (unregistering): Port device team_slave_0 removed
[  100.876401][ T7422] team0 (unregistering): Port device team_slave_1 removed
[  101.264118][ T7461] __nla_validate_parse: 9 callbacks suppressed
[  101.264129][ T7461] netlink: 60 bytes leftover after parsing attributes in process `syz.0.503'.
[  101.473437][ T7472] netlink: 28 bytes leftover after parsing attributes in process `syz.2.507'.
[  101.486939][ T7472] netlink: 28 bytes leftover after parsing attributes in process `syz.2.507'.
[  101.490748][ T7472] netlink: 28 bytes leftover after parsing attributes in process `syz.2.507'.
[  101.500507][ T7472] netlink: 28 bytes leftover after parsing attributes in process `syz.2.507'.
[  102.198874][ T7525] netlink: 'syz.2.517': attribute type 10 has an invalid length.
[  102.208299][ T7525] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.214114][ T7525] team0: Port device bond0 added
[  102.435544][ T7551] netlink: 'syz.2.521': attribute type 39 has an invalid length.
[  102.760862][ T7601] netlink: 92 bytes leftover after parsing attributes in process `syz.2.529'.
[  102.764550][ T7601] netlink: 92 bytes leftover after parsing attributes in process `syz.2.529'.
[  102.965068][ T7622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.534'.
[  102.993673][ T7620] netlink: 'syz.0.535': attribute type 1 has an invalid length.
[  102.996736][ T7622] netlink: 'syz.2.534': attribute type 1 has an invalid length.
[  102.999865][ T7622] netlink: 112 bytes leftover after parsing attributes in process `syz.2.534'.
[  103.007059][ T7622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.534'.
[  103.063927][ T7620] bond2: (slave gretap1): making interface the new active one
[  103.067740][ T7620] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  103.146374][ T7628] Illegal XDP return value 4294967274 on prog  (id 125) dev N/A, expect packet loss!
[  103.157808][ T7630] sctp: [Deprecated]: syz.2.538 (pid 7630) Use of int in max_burst socket option deprecated.
[  103.157808][ T7630] Use struct sctp_assoc_value instead
[  103.321279][ T7652] netlink: 'syz.1.545': attribute type 1 has an invalid length.
[  103.386995][ T7655] syzkaller1: entered promiscuous mode
[  103.389010][ T7655] syzkaller1: entered allmulticast mode
[  103.917283][ T7690] netlink: 'syz.2.558': attribute type 1 has an invalid length.
[  103.951722][ T7690] bond2: (slave vti0): The slave device specified does not support setting the MAC address
[  103.955186][ T7690] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  103.959826][ T7690] bond2: (slave vti0): making interface the new active one
[  103.963702][ T7690] bond2: (slave vti0): Enslaving as an active interface with an up link
[  104.567762][ T7716] netlink: 'syz.0.567': attribute type 1 has an invalid length.
[  104.605355][ T7716] 8021q: adding VLAN 0 to HW filter on device bond3
[  105.075172][ T7738] xt_TPROXY: Can be used only with -p tcp or -p udp
[  105.081458][ T7739] xt_TPROXY: Can be used only with -p tcp or -p udp
[  105.279477][ T7750] netlink: 'syz.1.577': attribute type 10 has an invalid length.
[  105.283077][ T7750] team0: Cannot enslave team device to itself
[  105.508535][ T7771] syzkaller0: entered promiscuous mode
[  105.513458][ T7771] syzkaller0: entered allmulticast mode
[  105.517856][ T7770] tipc: Started in network mode
[  105.519857][ T7770] tipc: Node identity 36deb079b5f2, cluster identity 4711
[  105.528091][ T7770] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.555577][ T7770] tipc: Resetting bearer <eth:syzkaller0>
[  105.586729][ T7770] tipc: Disabling bearer <eth:syzkaller0>
[  105.609140][ T7777] syz_tun: entered allmulticast mode
[  105.620904][ T7777] dvmrp8: entered allmulticast mode
[  105.632673][ T7776] syz_tun: left allmulticast mode
[  105.737454][ T7783] SET target dimension over the limit!
[  105.838841][ T7784] netlink: 'syz.1.588': attribute type 11 has an invalid length.
[  105.937592][ T7810] net_ratelimit: 62 callbacks suppressed
[  105.937613][ T7810] netlink: zone id is out of range
[  105.941134][ T7810] netlink: zone id is out of range
[  105.946107][ T7810] netlink: zone id is out of range
[  105.947685][ T7810] netlink: zone id is out of range
[  105.950364][ T7810] netlink: zone id is out of range
[  105.952618][ T7810] netlink: zone id is out of range
[  105.955006][ T7810] netlink: zone id is out of range
[  105.957065][ T7810] netlink: zone id is out of range
[  105.959600][ T7810] netlink: zone id is out of range
[  105.961295][ T7810] netlink: zone id is out of range
[  106.041041][ T7818] netlink: 'syz.0.596': attribute type 8 has an invalid length.
[  106.243246][ T7820] xt_HMARK: proto mask must be zero with L3 mode
[  106.392698][ T7823] __nla_validate_parse: 13 callbacks suppressed
[  106.392720][ T7823] netlink: 20 bytes leftover after parsing attributes in process `syz.0.599'.
[  106.742267][ T7851] netlink: 60 bytes leftover after parsing attributes in process `syz.0.607'.
[  107.051491][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.611'.
[  107.195877][ T7863] netlink: 224 bytes leftover after parsing attributes in process `syz.0.612'.
[  107.434358][ T7862] infiniband syz0: set down
[  107.436204][ T7862] infiniband syz0: added ipvlan1
[  107.470125][ T7862] RDS/IB: syz0: added
[  107.472006][ T7862] smc: adding ib device syz0 with port count 1
[  107.475428][ T7862] smc:    ib device syz0 port 1 has pnetid 
[  108.109816][ T7869] netlink: 20 bytes leftover after parsing attributes in process `syz.0.614'.
[  108.721310][ T7887] validate_nla: 2 callbacks suppressed
[  108.721367][ T7887] netlink: 'syz.1.620': attribute type 15 has an invalid length.
[  109.100373][ T7891] geneve2: entered promiscuous mode
[  109.355513][ T7891] syz.0.621 (7891) used greatest stack depth: 18832 bytes left
[  109.484802][ T7911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.626'.
[  109.562134][ T7911] netlink: 32 bytes leftover after parsing attributes in process `syz.0.626'.
[  109.572473][ T7911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.626'.
[  109.576645][ T7911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.626'.
[  109.898585][ T7928] syzkaller1: tun_chr_ioctl cmd 1074025673
[  109.903452][ T7928] syzkaller1: tun_chr_ioctl cmd 1074025672
[  109.905827][ T7928] syzkaller1: ignored: set checksum enabled
[  110.176046][ T7944] netlink: 104 bytes leftover after parsing attributes in process `syz.0.635'.
[  111.865900][ T8038] netlink: 'syz.0.669': attribute type 1 has an invalid length.
[  111.870170][ T8043] __nla_validate_parse: 6 callbacks suppressed
[  111.870184][ T8043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.671'.
[  111.933191][ T8043] sctp: [Deprecated]: syz.1.671 (pid 8043) Use of int in maxseg socket option.
[  111.933191][ T8043] Use struct sctp_assoc_value instead
[  111.939572][ T8043] netlink: 256 bytes leftover after parsing attributes in process `syz.1.671'.
[  111.948803][ T8043] net_ratelimit: 10 callbacks suppressed
[  111.948820][ T8043] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.964186][ T8043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.671'.
[  111.990558][ T8040] bond4: (slave gretap2): making interface the new active one
[  112.005812][ T8040] bond4: (slave gretap2): Enslaving as an active interface with an up link
[  112.721002][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.683'.
[  112.787465][ T8081] bond_slave_0: entered promiscuous mode
[  112.789922][ T8081] bond_slave_1: entered promiscuous mode
[  112.792310][ T8081] vlan2: entered promiscuous mode
[  112.799224][ T8081] bond0: entered promiscuous mode
[  113.107693][ T8093] netlink: 44 bytes leftover after parsing attributes in process `syz.0.687'.
[  113.121752][ T8093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.687'.
[  113.125584][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.687'.
[  113.540018][ T8110] batman_adv: batadv0: Adding interface: ip6gretap1
[  113.542058][ T8110] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.550931][ T8110] batman_adv: batadv0: Interface activated: ip6gretap1
[  113.566308][ T8112] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  113.610520][ T8112] netlink: 16 bytes leftover after parsing attributes in process `syz.2.695'.
[  113.615429][ T8112] IPv6: Can't replace route, no match found
[  113.819666][ T8124] x_tables: ip_tables: osf match: only valid for protocol 6
[  114.264514][ T8136] netlink: 96 bytes leftover after parsing attributes in process `syz.0.702'.
[  114.317659][ T8128] smc: removing ib device syz0
[  114.386784][ T8129] netlink: 'syz.2.700': attribute type 12 has an invalid length.
[  114.423942][ T8146] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  114.429602][ T8146] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  114.685720][ T8164] netlink: 36 bytes leftover after parsing attributes in process `syz.1.710'.
[  115.108127][ T8181] team0 (unregistering): Port device team_slave_0 removed
[  115.125261][ T8181] team0 (unregistering): Port device team_slave_1 removed
[  115.578093][ T8230] No such timeout policy "syz0"
[  115.924380][ T8266] x_tables: duplicate underflow at hook 1
[  115.932239][ T8266] xt_CT: You must specify a L4 protocol and not use inversions on it
[  116.352894][ T8287] nbd0: detected capacity change from 0 to 127
[  116.380795][   T55] block nbd0: Receive control failed (result -32)
[  116.465264][ T8305] netlink: 'syz.0.757': attribute type 1 has an invalid length.
[  116.610532][ T8321] netlink: 'syz.1.761': attribute type 10 has an invalid length.
[  116.616124][ T8321] dummy0: entered promiscuous mode
[  116.625431][ T8321] bridge0: port 3(dummy0) entered blocking state
[  116.630377][ T8321] bridge0: port 3(dummy0) entered disabled state
[  116.635964][ T8321] dummy0: entered allmulticast mode
[  116.794369][ T8341] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  116.860545][ T8345] bridge2: entered allmulticast mode
[  116.955821][ T8350] sctp: [Deprecated]: syz.1.771 (pid 8350) Use of int in maxseg socket option.
[  116.955821][ T8350] Use struct sctp_assoc_value instead
[  117.083329][ T8356] __nla_validate_parse: 19 callbacks suppressed
[  117.083342][ T8356] netlink: 172 bytes leftover after parsing attributes in process `syz.1.774'.
[  117.831199][ T8388] xt_CT: No such helper "snmp"
[  117.837103][ T8388] xt_hashlimit: max too large, truncated to 1048576
[  117.839875][ T8388] xt_hashlimit: overflow, rate too high: 0
[  117.990699][ T8403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.791'.
[  117.996701][ T8403] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.088323][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.795'.
[  118.088377][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.795'.
[  118.091581][ T8412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.795'.
[  118.095739][ T8411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.795'.
[  118.209501][ T8409] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  119.001783][ T8425] ipvlan0: entered promiscuous mode
[  119.011597][ T8425] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  119.015924][ T8425] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  119.059503][ T8426] batadv1: entered allmulticast mode
[  119.137841][ T8431] netlink: 'syz.1.801': attribute type 10 has an invalid length.
[  119.140831][ T8431] netlink: 40 bytes leftover after parsing attributes in process `syz.1.801'.
[  119.154669][ T8431] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  119.256541][ T8437] IPVS: set_ctl: invalid protocol: 28770 0.0.0.0:0
[  119.370884][ T8444] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.805'.
[  119.781794][ T8477] netlink: 44 bytes leftover after parsing attributes in process `syz.1.819'.
[  119.976045][ T8496] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.452876][ T8513] netlink: 16 bytes leftover after parsing attributes in process `syz.1.833'.
[  120.935712][ T8537] bridge3: entered promiscuous mode
[  120.937824][ T8537] bridge3: entered allmulticast mode
[  120.950869][ T8540] bridge4: entered promiscuous mode
[  120.953645][ T8540] bridge4: entered allmulticast mode
[  121.046735][ T8548] netlink: 'syz.1.848': attribute type 4 has an invalid length.
[  121.057318][ T8548] netlink: 'syz.1.848': attribute type 4 has an invalid length.
[  121.326085][ T8568] lo speed is unknown, defaulting to 1000
[  121.330451][ T8567] siw: device registration error -23
[  121.332396][ T8568] lo speed is unknown, defaulting to 1000
[  121.338639][ T8568] lo speed is unknown, defaulting to 1000
[  121.363825][ T8568] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  121.375779][ T8568] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  121.411614][ T8568] lo speed is unknown, defaulting to 1000
[  121.416472][ T8568] lo speed is unknown, defaulting to 1000
[  121.420580][ T8568] lo speed is unknown, defaulting to 1000
[  121.568326][ T8592] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode
[  121.578929][ T8592] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  121.873048][ T8610] netlink: 'syz.1.868': attribute type 10 has an invalid length.
[  121.879479][ T8610] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  122.580338][ T8662] netlink: 'syz.2.884': attribute type 12 has an invalid length.
[  122.586341][ T8662] netlink: 'syz.2.884': attribute type 29 has an invalid length.
[  122.589279][ T8662] __nla_validate_parse: 37 callbacks suppressed
[  122.589287][ T8662] netlink: 148 bytes leftover after parsing attributes in process `syz.2.884'.
[  122.755867][ T8680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.889'.
[  122.761018][ T8683] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20000
[  122.861011][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.892'.
[  122.868188][ T8694] vlan3: entered promiscuous mode
[  122.870287][ T8694] bridge0: entered promiscuous mode
[  122.872412][ T8694] vlan3: entered allmulticast mode
[  122.874534][ T8692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.892'.
[  122.881149][ T8694] bridge0: entered allmulticast mode
[  122.883745][ T8692] netlink: 'syz.0.892': attribute type 20 has an invalid length.
[  122.915800][ T8698] gretap0: left allmulticast mode
[  122.920415][ T8698] gretap0: left promiscuous mode
[  122.925509][ T8698] bridge0: port 2(gretap0) entered disabled state
[  122.999712][ T8698] team0: Port device bond0 removed
[  123.005898][ T8698] bridge_slave_0: left allmulticast mode
[  123.008335][ T8698] bridge_slave_0: left promiscuous mode
[  123.011073][ T8698] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.022047][ T8698] bond0: (slave bridge_slave_1): Releasing backup interface
[  123.046660][ T8698] bond0: (slave bond_slave_0): Releasing backup interface
[  123.059460][ T8698] bond0: (slave bond_slave_1): Releasing backup interface
[  123.071504][ T8698] team0: Port device team_slave_0 removed
[  123.080549][ T8698] team0: Port device team_slave_1 removed
[  123.093874][ T8698] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.098121][ T8698] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.107401][ T8698] bond2: (slave vti0): Releasing backup interface
[  123.250802][ T8715] netlink: 'syz.0.897': attribute type 1 has an invalid length.
[  123.349807][ T8715] 8021q: adding VLAN 0 to HW filter on device bond5
[  123.446007][ T8732] netlink: 140 bytes leftover after parsing attributes in process `syz.1.904'.
[  123.804998][ T8746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.907'.
[  123.818351][ T8746] macsec2: entered promiscuous mode
[  123.820610][ T8746] erspan0: entered promiscuous mode
[  123.823195][ T8746] macsec2: entered allmulticast mode
[  123.825413][ T8746] erspan0: entered allmulticast mode
[  123.934626][ T8748] netlink: 244 bytes leftover after parsing attributes in process `syz.1.908'.
[  123.971694][ T8750] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  125.456291][ T8836] netlink: 36 bytes leftover after parsing attributes in process `syz.2.937'.
[  125.460484][ T8836] netlink: 112 bytes leftover after parsing attributes in process `syz.2.937'.
[  125.501340][ T8836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.937'.
[  125.631983][ T8796] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  125.837194][ T8861] netlink: 'syz.2.945': attribute type 4 has an invalid length.
[  125.957023][ T8868] netlink: 'syz.2.945': attribute type 3 has an invalid length.
[  126.131779][   T33] audit: type=1107 audit(1752097569.010:2): pid=8888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  126.224147][ T8885] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  126.887700][ T8974] macvlan2: entered allmulticast mode
[  126.890200][ T8974] veth1_vlan: entered allmulticast mode
[  126.897852][ T8974] veth1_vlan: left allmulticast mode
[  127.064241][ T8983] netlink: 'syz.1.986': attribute type 1 has an invalid length.
[  127.095442][ T8983] 8021q: adding VLAN 0 to HW filter on device bond3
[  127.266082][ T9006] 8021q: adding VLAN 0 to HW filter on device bond3
[  127.498967][ T9030] netlink: 'syz.2.1002': attribute type 11 has an invalid length.
[  127.628429][ T9046] __nla_validate_parse: 8 callbacks suppressed
[  127.628440][ T9046] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1008'.
[  127.688826][ T9053] netlink: 'syz.0.1009': attribute type 29 has an invalid length.
[  127.705785][ T9053] netlink: 'syz.0.1009': attribute type 29 has an invalid length.
[  127.769419][ T9065] xt_policy: neither incoming nor outgoing policy selected
[  127.988163][ T9085] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1023'.
[  128.118197][ T9105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1028'.
[  128.280419][ T9115] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.451807][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1036'.
[  128.463838][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1036'.
[  128.496600][ T9130] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1036'.
[  128.633454][ T9143] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1041'.
[  128.638436][ T9141] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  128.642164][ T9141] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  128.792812][ T9149] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.819073][ T9149] bridge3: entered allmulticast mode
[  129.323961][ T9166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1049'.
[  129.346386][ T9166] C: renamed from team_slave_0
[  129.352365][ T9166] netlink: 'syz.2.1049': attribute type 3 has an invalid length.
[  129.359099][ T9166] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1049'.
[  129.364664][ T9166] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  129.610025][   T10] IPVS: starting estimator thread 0...
[  129.713510][ T9188] IPVS: using max 42 ests per chain, 100800 per kthread
[  129.839931][ T9213] netlink: 'syz.1.1066': attribute type 3 has an invalid length.
[  129.868355][ T9217] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received
[  130.025061][ T9222] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1069'.
[  131.054847][ T5832] Bluetooth: hci2: link tx timeout
[  131.059892][ T5832] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  131.141585][ T9259] dummy0: left allmulticast mode
[  131.145323][ T9259] bridge0: port 3(dummy0) entered disabled state
[  131.157606][ T9259] bridge_slave_0: left allmulticast mode
[  131.159528][ T9259] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.176316][ T9259] bridge_slave_1: left allmulticast mode
[  131.178205][ T9259] bridge_slave_1: left promiscuous mode
[  131.180360][ T9259] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.189173][ T9259] bond0: (slave bond_slave_0): Releasing backup interface
[  131.195068][ T9259] bond0: (slave bond_slave_1): Releasing backup interface
[  131.199669][ T9259] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.203312][ T9259] batman_adv: batadv0: Removing interface: batadv_slave_1
[  131.208183][ T9259] bond0: (slave wlan1): Releasing backup interface
[  131.217052][ T9259] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  131.219392][ T9259] batman_adv: batadv0: Removing interface: ip6gretap1
[  131.681941][ T9301] syzkaller0: entered promiscuous mode
[  131.684793][ T9301] syzkaller0: entered allmulticast mode
[  131.699869][ T9301] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  132.276120][ T9318] ieee802154 phy1 wpan1: encryption failed: -22
[  132.525290][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  133.065649][ T9331] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  133.070337][ T9331] netlink: 'syz.2.1105': attribute type 1 has an invalid length.
[  133.073614][ T9331] __nla_validate_parse: 10 callbacks suppressed
[  133.074065][ T9331] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1105'.
[  133.084597][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1104'.
[  133.087764][ T5837] Bluetooth: hci2: command 0x0406 tx timeout
[  133.221771][ T9356] lo speed is unknown, defaulting to 1000
[  133.563894][  T766] wlan1: Trigger new scan to find an IBSS to join
[  133.739017][ T9384] netlink: 'syz.0.1120': attribute type 12 has an invalid length.
[  134.297554][ T9408] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1129'.
[  135.121071][ T9419] macvlan2: entered allmulticast mode
[  135.129988][ T9419] veth1_vlan: entered allmulticast mode
[  135.149631][ T9419] veth1_vlan: left allmulticast mode
[  135.171115][ T9424] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1134'.
[  135.189815][ T9424] netlink: 'syz.0.1134': attribute type 11 has an invalid length.
[  135.315132][ T9440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1138'.
[  135.334291][ T9442] netlink: 'syz.0.1137': attribute type 142 has an invalid length.
[  135.699938][ T9459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  135.704663][ T9459] bond_slave_0: left promiscuous mode
[  135.709745][ T9459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  135.714749][ T9459] bond_slave_1: left promiscuous mode
[  135.718838][ T9459] bond0 (unregistering): Released all slaves
[  135.842346][ T9477] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1147'.
[  135.975686][ T9484] netlink: 'syz.0.1149': attribute type 16 has an invalid length.
[  135.983253][ T9484] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1149'.
[  136.076649][ T9489] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1151'.
[  136.259288][ T9503] netlink: 'syz.1.1157': attribute type 1 has an invalid length.
[  136.272805][ T9503] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1157'.
[  136.580570][ T9541] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  136.621592][ T9545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1170'.
[  137.010424][ T9572] lo speed is unknown, defaulting to 1000
[  137.199770][ T9583] batman_adv: batadv0: Adding interface: ipvlan2
[  137.201792][ T9583] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  137.211968][ T9583] batman_adv: batadv0: Interface activated: ipvlan2
[  137.574139][ T9596] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  137.650476][ T9602] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  137.663049][ T9602] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  137.771747][ T9613] geneve3: entered promiscuous mode
[  137.773618][ T9613] geneve3: entered allmulticast mode
[  137.949150][ T9624] netlink: 'syz.0.1194': attribute type 3 has an invalid length.
[  137.957998][ T9626] netlink: 'syz.2.1193': attribute type 5 has an invalid length.
[  138.088034][ T9635] netlink: 'syz.2.1197': attribute type 1 has an invalid length.
[  138.090427][ T9635] __nla_validate_parse: 6 callbacks suppressed
[  138.090436][ T9635] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1197'.
[  138.128767][ T9640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1199'.
[  138.136106][ T9640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1199'.
[  138.401148][ T9672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1208'.
[  138.533079][ T7568] wlan1: Trigger new scan to find an IBSS to join
[  138.646380][ T9691] lo speed is unknown, defaulting to 1000
[  138.663626][ T9696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1219'.
[  138.667093][ T9696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1219'.
[  138.888279][ T9714] lo speed is unknown, defaulting to 1000
[  138.891001][ T9712] netlink: 'syz.2.1225': attribute type 1 has an invalid length.
[  138.894022][ T9712] netlink: 'syz.2.1225': attribute type 2 has an invalid length.
[  138.896511][ T9712] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1225'.
[  138.899560][ T9712] nbd: must specify at least one socket
[  138.978525][ T9726] veth1_virt_wifi: mtu less than device minimum
[  139.025917][ T9729] netlink: 'syz.2.1227': attribute type 10 has an invalid length.
[  139.030031][ T9731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1229'.
[  139.034699][ T9731] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1229'.
[  139.082390][ T9733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1229'.
[  139.149719][ T9737] ipt_REJECT: TCP_RESET invalid for non-tcp
[  139.468199][ T7568] wlan1: Creating new IBSS network, BSSID 92:fe:f5:08:42:61
[  139.599445][ T9771] netlink: 'syz.2.1241': attribute type 1 has an invalid length.
[  140.265978][ T9828] delete_channel: no stack
[  140.331457][ T9840] nftables ruleset with unbound chain
[  140.338316][ T9840] netlink: 'syz.2.1264': attribute type 1 has an invalid length.
[  140.393698][ T9847] bond4: entered promiscuous mode
[  140.395588][ T9847] 8021q: adding VLAN 0 to HW filter on device bond4
[  140.476112][ T9847] bond4 (unregistering): Released all slaves
[  140.716426][ T9875] x_tables: duplicate underflow at hook 1
[  140.965922][ T9887] sctp: [Deprecated]: syz.1.1276 (pid 9887) Use of struct sctp_assoc_value in delayed_ack socket option.
[  140.965922][ T9887] Use struct sctp_sack_info instead
[  141.139316][ T9899] netlink: 'syz.1.1280': attribute type 21 has an invalid length.
[  141.261151][ T9903] wg1: entered promiscuous mode
[  141.263813][ T9903] wg1: entered allmulticast mode
[  141.456880][ T9920] netlink: 'syz.1.1288': attribute type 4 has an invalid length.
[  141.629973][ T9933] lo speed is unknown, defaulting to 1000
[  143.030131][ T9972] Cannot find set identified by id 0 to match
[  143.407910][T10001] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  143.547115][T10013] delete_channel: no stack
[  143.708782][T10025] __nla_validate_parse: 29 callbacks suppressed
[  143.708798][T10025] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1322'.
[  143.839471][T10039] xt_HMARK: proto mask must be zero with L3 mode
[  143.907531][T10045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1329'.
[  143.979479][T10045] tipc: Disabling bearer <eth:vlan0>
[  144.076425][T10056] netlink: 'syz.2.1331': attribute type 1 has an invalid length.
[  144.095467][T10056] 8021q: adding VLAN 0 to HW filter on device bond4
[  144.119588][T10057] bond4: (slave ip6gretap1): making interface the new active one
[  144.123259][T10057] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link
[  144.168589][T10066] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1333'.
[  144.187712][T10066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1333'.
[  144.377529][T10080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1341'.
[  144.701440][T10080] lo speed is unknown, defaulting to 1000
[  145.716494][T10125] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1355'.
[  145.719528][T10125] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1355'.
[  145.722337][T10125] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1355'.
[  145.768945][T10130] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1356'.
[  146.115848][T10138] netlink: zone id is out of range
[  146.795784][T10167] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1370'.
[  147.290554][T10197] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  147.297782][T10197] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  147.961283][T10191] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  148.275708][T10262] netlink: 'syz.1.1400': attribute type 7 has an invalid length.
[  148.278266][T10262] netlink: 'syz.1.1400': attribute type 8 has an invalid length.
[  148.420931][T10275] lo speed is unknown, defaulting to 1000
[  148.587886][T10282] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  148.927198][T10326] __nla_validate_parse: 64 callbacks suppressed
[  148.927211][T10326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1417'.
[  148.979944][T10331] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1419'.
[  148.985103][T10331] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1419'.
[  148.989925][T10331] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1419'.
[  148.998354][T10332] lo: entered allmulticast mode
[  149.014066][T10330] lo: left allmulticast mode
[  149.056850][T10338] x_tables: duplicate underflow at hook 1
[  149.109799][T10341] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1422'.
[  149.209149][T10347] ieee802154 phy1 wpan1: encryption failed: -22
[  149.258139][T10353] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1426'.
[  149.299694][T10351] batman_adv: batadv0: Adding interface: dummy0
[  149.301844][T10351] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  149.312942][T10351] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  149.428622][T10368] ip6gre1: entered promiscuous mode
[  149.598799][T10385] syzkaller0: entered promiscuous mode
[  149.600652][T10385] syzkaller0: entered allmulticast mode
[  149.605373][T10387] bridge_slave_1: left promiscuous mode
[  149.607233][T10387] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.614625][T10387] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  149.696576][T10393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1439'.
[  149.755751][T10398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1439'.
[  150.368421][ T5837] Bluetooth: hci2: command 0x0406 tx timeout
[  150.887431][T10404] netlink: 'syz.0.1442': attribute type 1 has an invalid length.
[  150.890514][T10404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1442'.
[  150.930948][T10414] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1444'.
[  151.176361][T10438] lo speed is unknown, defaulting to 1000
[  151.225030][T10441] lo speed is unknown, defaulting to 1000
[  151.318779][T10438] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  151.434337][T10454] xt_nfacct: accounting object `syz1' does not exists
[  152.415542][T10515] xt_hashlimit: max too large, truncated to 1048576
[  152.506126][T10517] lo speed is unknown, defaulting to 1000
[  152.704074][T10530] geneve2: entered promiscuous mode
[  152.997390][T10554] netlink: 'syz.2.1485': attribute type 2 has an invalid length.
[  153.007699][T10554] macvlan2: entered allmulticast mode
[  153.009430][T10554] veth1_vlan: entered allmulticast mode
[  153.150485][T10568] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 101
[  153.591298][T10613] netlink: 'syz.0.1502': attribute type 4 has an invalid length.
[  153.645918][T10615] xt_CT: No such helper "snmp"
[  153.733284][T10623] netlink: 'syz.0.1506': attribute type 10 has an invalid length.
[  154.046310][T10652] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  154.314590][T10666] __nla_validate_parse: 14 callbacks suppressed
[  154.314607][T10666] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1516'.
[  154.328851][T10666] batadv1: entered promiscuous mode
[  154.331056][T10666] batadv1: entered allmulticast mode
[  154.348973][T10668] netlink: 'syz.1.1519': attribute type 3 has an invalid length.
[  154.447685][T10673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1520'.
[  154.451551][T10671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1520'.
[  154.490420][T10669] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1516'.
[  154.689694][T10689] @: renamed from bond_slave_0
[  155.182462][T10723] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.233213][T10730] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1539'.
[  155.239921][T10730] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1539'.
[  155.253998][T10730] batadv0: entered promiscuous mode
[  155.259197][T10730] batadv0: left promiscuous mode
[  155.327330][T10723] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.384266][T10733] netlink: 'syz.1.1540': attribute type 9 has an invalid length.
[  155.387763][T10733] netlink: 'syz.1.1540': attribute type 6 has an invalid length.
[  155.427157][T10723] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.511132][T10723] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.576525][T10738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1542'.
[  155.608111][T10723] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.619612][T10723] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.629334][T10723] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.640005][T10723] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.654643][T10741] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  155.733402][T10744] erspan0: left allmulticast mode
[  155.735571][T10744] erspan0: left promiscuous mode
[  155.859499][T10756] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1546'.
[  156.041715][T10779] bridge0: port 1(gretap0) entered blocking state
[  156.044263][T10779] bridge0: port 1(gretap0) entered disabled state
[  156.046534][T10779] gretap0: entered allmulticast mode
[  156.049825][T10779] gretap0: entered promiscuous mode
[  156.228763][T10794] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1561'.
[  156.358989][T10808] gtp1: entered promiscuous mode
[  156.360815][T10808] gtp1: entered allmulticast mode
[  156.952397][T10850] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1579'.
[  157.131560][T10858] SET target dimension over the limit!
[  157.491716][T10888] sctp: [Deprecated]: syz.1.1592 (pid 10888) Use of int in max_burst socket option.
[  157.491716][T10888] Use struct sctp_assoc_value instead
[  157.514666][T10887] lo speed is unknown, defaulting to 1000
[  157.596320][T10894] netlink: 'syz.1.1594': attribute type 1 has an invalid length.
[  158.007487][T10919] : entered promiscuous mode
[  158.631855][T10929] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  158.638408][T10929] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  158.695215][T10934] netlink: 'syz.2.1609': attribute type 1 has an invalid length.
[  159.074620][T10962] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  159.077448][T10962] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  159.312202][T10978] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  159.329033][T10978] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  159.340893][T10978] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  159.352673][T10978] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  159.370222][T10978] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0
[  159.380695][T10978] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0
[  159.394874][T10978] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0
[  159.398176][T10978] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0
[  159.416174][T10978] geneve3: entered promiscuous mode
[  159.426180][T10978] geneve3: entered allmulticast mode
[  159.450402][T10982] __nla_validate_parse: 11 callbacks suppressed
[  159.450423][T10982] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1624'.
[  159.588258][T10988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1627'.
[  159.591710][T10988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1627'.
[  159.603359][T10989] netlink: 'syz.2.1625': attribute type 2 has an invalid length.
[  159.676136][T11000] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  159.679953][T10998] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  159.741208][T11008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1631'.
[  159.745880][T11008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1631'.
[  159.800927][T11015] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  159.805707][T11010] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1632'.
[  159.871842][T11022] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1636'.
[  160.085549][T11034] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1640'.
[  160.096369][T11034] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  160.098987][T11034] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  160.112029][T11034] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  160.116442][T11034] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  160.168856][T11052] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1646'.
[  160.258995][T11061] netlink: 'syz.0.1649': attribute type 21 has an invalid length.
[  160.261457][T11061] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1649'.
[  160.264666][T11061] netlink: 'syz.0.1649': attribute type 5 has an invalid length.
[  160.331603][T11066] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  160.339765][T11068] ": renamed from macvtap0 (while UP)
[  160.588918][T11078] netlink: 'syz.2.1655': attribute type 3 has an invalid length.
[  160.701090][T11082] syzkaller1: entered promiscuous mode
[  160.706020][T11082] syzkaller1: entered allmulticast mode
[  160.719198][T11082] dvmrp8: entered allmulticast mode
[  160.735007][T11081] dvmrp8: left allmulticast mode
[  161.013973][T11089] x_tables: duplicate underflow at hook 2
[  161.114945][T11089] lo speed is unknown, defaulting to 1000
[  161.481742][T11113] lo speed is unknown, defaulting to 1000
[  161.640015][T11129] openvswitch: netlink: IPv4 tun info is not correct
[  161.645966][T11129] openvswitch: netlink: IPv4 tun info is not correct
[  161.648761][T11129] openvswitch: netlink: IPv4 tun info is not correct
[  161.651437][T11129] openvswitch: netlink: IPv4 tun info is not correct
[  161.656200][T11129] openvswitch: netlink: IPv4 tun info is not correct
[  161.659758][T11129] openvswitch: netlink: IPv4 tun info is not correct
[  161.662758][T11129] openvswitch: netlink: IPv4 tun info is not correct
[  161.665702][T11129] openvswitch: netlink: IPv4 tun info is not correct
[  161.749577][T11114] netlink: 'syz.1.1667': attribute type 1 has an invalid length.
[  161.751990][T11114] netlink: 'syz.1.1667': attribute type 3 has an invalid length.
[  161.761898][T11114] NCSI netlink: No device for ifindex 246
[  162.107278][T11163] netlink: 'syz.1.1681': attribute type 12 has an invalid length.
[  162.110562][T11163] netlink: 'syz.1.1681': attribute type 3 has an invalid length.
[  162.691155][T11211] validate_nla: 2 callbacks suppressed
[  162.691173][T11211] netlink: 'syz.1.1696': attribute type 1 has an invalid length.
[  162.771110][T11212] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000035: 0000 [#1] SMP KASAN PTI
[  162.775792][T11212] KASAN: null-ptr-deref in range [0x00000000000001a8-0x00000000000001af]
[  162.780172][T11212] CPU: 1 UID: 0 PID: 11212 Comm: syz.0.1695 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  162.785298][T11212] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  162.789859][T11212] RIP: 0010:htb_qlen_notify+0x31/0xc0
[  162.792155][T11212] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 7d a6 3e f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 9a aa 3e f8 85
[  162.799956][T11212] RSP: 0018:ffffc9000a696fb0 EFLAGS: 00010206
[  162.802468][T11212] RAX: ffffffff8981b7f3 RBX: 00000000000001a8 RCX: ffff888025d31cc0
[  162.805734][T11212] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888021362000
[  162.809073][T11212] RBP: dffffc0000000000 R08: ffff888025d31cc0 R09: 0000000000000002
[  162.812367][T11212] R10: 00000000ffffffff R11: ffffffff8981b7d0 R12: dffffc0000000000
[  162.815712][T11212] R13: 0000000000000035 R14: 0000000000000000 R15: ffff888021362000
[  162.819060][T11212] FS:  00007f5d0f3f46c0(0000) GS:ffff8881a3c1d000(0000) knlGS:0000000000000000
[  162.822719][T11212] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  162.825423][T11212] CR2: 00007f5d0f3d2fc8 CR3: 0000000111914000 CR4: 00000000000006f0
[  162.828697][T11212] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  162.831938][T11212] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  162.835264][T11212] Call Trace:
[  162.836659][T11212]  <TASK>
[  162.837942][T11212]  qdisc_tree_reduce_backlog+0x29c/0x480
[  162.840267][T11212]  ? qdisc_tree_reduce_backlog+0x3c/0x480
[  162.842643][T11212]  fq_change+0x1519/0x1f50
[  162.844521][T11212]  ? __pfx_fq_change+0x10/0x10
[  162.846575][T11212]  ? __hrtimer_setup+0x187/0x210
[  162.848714][T11212]  fq_init+0x699/0x960
[  162.850486][T11212]  ? __pfx_fq_init+0x10/0x10
[  162.852479][T11212]  ? lockdep_rtnl_is_held+0x26/0x40
[  162.854597][T11212]  ? qdisc_lookup+0x36d/0x6d0
[  162.856599][T11212]  ? __pfx_fq_init+0x10/0x10
[  162.858506][T11212]  qdisc_create+0x7ac/0xea0
[  162.860365][T11212]  tc_modify_qdisc+0x1426/0x2010
[  162.862371][T11212]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  162.864572][T11212]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  162.866800][T11212]  rtnetlink_rcv_msg+0x77c/0xb70
[  162.868930][T11212]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  162.871110][T11212]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  162.873429][T11212]  ? ref_tracker_free+0x63a/0x7d0
[  162.875574][T11212]  ? __copy_skb_header+0xa7/0x550
[  162.877684][T11212]  ? __pfx_ref_tracker_free+0x10/0x10
[  162.880035][T11212]  netlink_rcv_skb+0x208/0x470
[  162.882090][T11212]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  162.884396][T11212]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  162.886633][T11212]  ? netlink_deliver_tap+0x2e/0x1b0
[  162.889230][T11212]  ? netlink_deliver_tap+0x2e/0x1b0
[  162.891432][T11212]  netlink_unicast+0x75b/0x8d0
[  162.893486][T11212]  netlink_sendmsg+0x805/0xb30
[  162.895540][T11212]  ? __pfx_netlink_sendmsg+0x10/0x10
[  162.897759][T11212]  ? aa_sock_msg_perm+0x94/0x160
[  162.899866][T11212]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  162.902148][T11212]  ? __pfx_netlink_sendmsg+0x10/0x10
[  162.904411][T11212]  __sock_sendmsg+0x21c/0x270
[  162.906451][T11212]  ____sys_sendmsg+0x505/0x830
[  162.908504][T11212]  ? __pfx_____sys_sendmsg+0x10/0x10
[  162.910749][T11212]  ? import_iovec+0x74/0xa0
[  162.912701][T11212]  ___sys_sendmsg+0x21f/0x2a0
[  162.914573][T11212]  ? __pfx____sys_sendmsg+0x10/0x10
[  162.916627][T11212]  ? __fget_files+0x2a/0x420
[  162.918469][T11212]  ? __fget_files+0x3a0/0x420
[  162.920347][T11212]  __x64_sys_sendmsg+0x19b/0x260
[  162.922326][T11212]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  162.924488][T11212]  ? rcu_is_watching+0x15/0xb0
[  162.926401][T11212]  ? do_syscall_64+0xbe/0x3b0
[  162.928305][T11212]  do_syscall_64+0xfa/0x3b0
[  162.930114][T11212]  ? lockdep_hardirqs_on+0x9c/0x150
[  162.932200][T11212]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.934587][T11212]  ? exc_page_fault+0x9f/0xf0
[  162.936480][T11212]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.938798][T11212] RIP: 0033:0x7f5d0e58e929
[  162.940566][T11212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  162.948053][T11212] RSP: 002b:00007f5d0f3f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  162.951259][T11212] RAX: ffffffffffffffda RBX: 00007f5d0e7b6080 RCX: 00007f5d0e58e929
[  162.954133][T11212] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000007
[  162.957224][T11212] RBP: 00007f5d0e610b39 R08: 0000000000000000 R09: 0000000000000000
[  162.960333][T11212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  162.963617][T11212] R13: 0000000000000000 R14: 00007f5d0e7b6080 R15: 00007ffdc6b327b8
[  162.966688][T11212]  </TASK>
[  162.967930][T11212] Modules linked in:
[  162.969854][T11212] ---[ end trace 0000000000000000 ]---
[  162.972020][T11212] RIP: 0010:htb_qlen_notify+0x31/0xc0
[  162.974381][T11212] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 7d a6 3e f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 9a aa 3e f8 85
[  162.981883][T11212] RSP: 0018:ffffc9000a696fb0 EFLAGS: 00010206
[  162.984684][T11212] RAX: ffffffff8981b7f3 RBX: 00000000000001a8 RCX: ffff888025d31cc0
[  162.988170][T11212] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888021362000
[  162.991252][T11212] RBP: dffffc0000000000 R08: ffff888025d31cc0 R09: 0000000000000002
[  162.994434][T11212] R10: 00000000ffffffff R11: ffffffff8981b7d0 R12: dffffc0000000000
[  162.997436][T11212] R13: 0000000000000035 R14: 0000000000000000 R15: ffff888021362000
[  163.000287][T11212] FS:  00007f5d0f3f46c0(0000) GS:ffff8881a3c1d000(0000) knlGS:0000000000000000
[  163.003428][T11212] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  163.005822][T11212] CR2: 00007f5d0f3d2fc8 CR3: 0000000111914000 CR4: 00000000000006f0
[  163.008696][T11212] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  163.013028][T11212] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  163.017401][T11212] Kernel panic - not syncing: Fatal exception in interrupt
[  163.021156][T11212] Kernel Offset: disabled
[  163.023415][T11212] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:46:45  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b4e920 RBX=ffff88804b03b1c0 RCX=ffff8880267f9cc0 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90021367800 RSP=ffffc90021367698
R8 =ffffffff8fa1def7 R9 =1ffffffff1f43bde R10=dffffc0000000000 R11=fffffbfff1f43bdf
R12=1ffff11026cc7f5d R13=dffffc0000000000 R14=0000000000000001 R15=ffff88813663fae8
RIP=ffffffff81c05ecd RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5d0f3d3d58 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f5d0e785478 00007f5d0e785450 XMM03=00007f5d0e785488 00007f5d0e785480
XMM04=00007f5d0f2ed100 00007f5d0e785440 XMM05=00007f5d0e785458 00007f5d0e7854a0
XMM06=00007f5d0e785498 00007f5d0e785490 XMM07=00007f5d0e785488 00007f5d0e785480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f5d0e611c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bf860 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99dfc9f0 RSP=ffffc9000a696790
R8 =ffff888108a60237 R9 =1ffff1102114c046 R10=dffffc0000000000 R11=ffffffff85475540
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff854755b7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f5d0f3f46c0 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5d0f3d2fc8 CR3=0000000111914000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f5d0e785478 00007f5d0e785450 XMM03=00007f5d0e785488 00007f5d0e785480
XMM04=00007f5d0f2ed100 00007f5d0e785440 XMM05=00007f5d0e785458 00007f5d0e7854a0
XMM06=00007f5d0e785498 00007f5d0e785490 XMM07=00007f5d0e785488 00007f5d0e785480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f5d0e611c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
