last executing test programs:

1.810523482s ago: executing program 1 (id=1206):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x7fff, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0x3, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0xffffffff, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x8, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6ae, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x10000001, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x3ff, 0x5}, {0x7f, 0x1, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfafffc, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0xfffffffa, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x10, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0x9, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xaa82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f00000002c0)={{0x62, @empty, 0x4e20, 0x1, 'fo\x00', 0xc, 0x813, 0x20}, {@private=0xa010102, 0x4e23, 0x1, 0x1, 0x7fff, 0x10}}, 0x44)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000600000000fc00000940000018110000e652325825ca5b6db43d244030da8677acecc3d7f5941d94473731542e5f501bca9cd788b05a", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x68, &(0x7f0000000100)=""/104, 0x40f00, 0x2a, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x1, 0xf, 0xe, 0xfffffffc}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x80002, 0x0)
socket$netlink(0x10, 0x3, 0x5)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000004000000040000000400000000000000", @ANYRES32, @ANYBLOB="00adb100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$unix(0x1, 0x5, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x4)
write(r6, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00"/56, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100ac1414aa000000000000000000000000ffffffff000000000000000000000000e00000020000000000000000000000e38afa63042bfed20000000000000000aa3c040000"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x15, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llx, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x44}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "00000000000f00000001000f0e00"}}}]}, 0x48}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bond0\x00'})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r11 = socket$kcm(0xa, 0x3, 0x73)
ioctl$sock_kcm_SIOCKCMATTACH(r11, 0x89e0, 0x0)
r12 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r12, 0x84, 0x16, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000b7000000b7000000040000000f0000000000000c050000000e0000000000000805000000020000000000000901000000060000000300000f030000005dd09424c77e845d1f790100000036300000010000000400000009000006000000030000000afa8e0c000000000000100c000000050000000000000a050000000b0000000200001309000000010000000900090000000900000000000007000000000000000000000003000000000300000002000000020000000000303000"/222], &(0x7f00000001c0)=""/5, 0xd4, 0x5, 0x0, 0x2}, 0x28)

780.395267ms ago: executing program 2 (id=1210):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x90, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x7c, 0x1, [@m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4, 0xf5}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x8000)

708.862181ms ago: executing program 2 (id=1211):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x2, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x2, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000240)=ANY=[], 0x5)
sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0)

639.123896ms ago: executing program 1 (id=1212):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async)
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) (async)
recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x2000)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000001fc0)={0x7, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e24, @local}}}, 0x108)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth0_to_bridge\x00', &(0x7f0000000300)=@ethtool_drvinfo={0x3, "e55971277418921583c74b99353b9d55d90908b6ea7cafd3188b931053629563", "d2e91e1188a3a6208b5e013818b75a932a2934e7cb5f9bcc53167b323a69eacb", "94d16db71df3a371c4f2294565f888dbc7a32ab04fa38b3c82a67f05ef87e88f", "3e19aa35f2f7b5d3a59b86ed9f130f0574c90f48b2a5c02c6465aebcda9a59f9", "55841bf439f886e44c5aa56197f103b446e00a88a651523af566b9830c4134d9", "6b29a0ff0d9f919c93b5a267", 0x10, 0x44, 0x7ffbffff, 0x5, 0x8}})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000007000000000000060a0b0400000000000000000200000028000480240001800b0001006e756d67656e000014000280080001400000000208000240000008b50900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x7c}}, 0x4)
ioctl$TUNSETNOCSUM(r4, 0xc040ff0b, 0x0) (async)
ioctl$TUNSETNOCSUM(r4, 0xc040ff0b, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="39452dbaa6721d505828503fcaf0fcb11a2e0ca0bcfe32b0c4cbd2d53eba75b945e7b44d08e963e85c71ae6afdd783f800e2dd3fd65d978f9c37cbfd1db2ec9aa44129f8af97089c1d994c", 0x4b) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="39452dbaa6721d505828503fcaf0fcb11a2e0ca0bcfe32b0c4cbd2d53eba75b945e7b44d08e963e85c71ae6afdd783f800e2dd3fd65d978f9c37cbfd1db2ec9aa44129f8af97089c1d994c", 0x4b)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r8 = socket(0x28, 0x5, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000002600), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r9, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000300)={0x3c, r10, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0x8, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004840)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0900000006000000080000000800000000000000", @ANYRES32, @ANYBLOB="00fbffffff000000000000000000000000000000c0ba9f10c5e5d8527f99c729b87ae8e5da301facefe4f3df2d6e1ef1b95301e4ea898cab6fc6d230910300ae", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r2], 0x50) (async)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r2], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r12}, 0xc)
recvmsg$unix(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r13=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r13, 0x541b, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000004c0)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0x70bd28, 0xffffffff, {}, [{0x98, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x6, 0x0, 0x0, 0x0, 0x10001}}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x50, 0x20a, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8000003, 0xd, 0x5, 0x0, 0x3}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20040810}, 0x0)

636.353388ms ago: executing program 0 (id=1213):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_int(r0, 0x6, 0x22, 0x0, &(0x7f0000000140))
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b5000000000400000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0xc040810}, 0xc000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x5, [0x0, <r3=>0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x18)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000140)={r3, 0x9, 0xb5}, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00'})
r5 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7e, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xa, [0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0xffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=@ipmr_newroute={0x30, 0x18, 0x100, 0x70bd2a, 0x25dfdbfc, {0x80, 0x0, 0x0, 0xd9, 0xfe, 0x7, 0xfe, 0x8, 0x200}, [@RTA_NH_ID={0x8, 0x1e, 0xe}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4810)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00'})

634.834146ms ago: executing program 2 (id=1214):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0xb, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r2 = socket$phonet_pipe(0x23, 0x5, 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="b800000000010104000000000000000002000000240001801400018008000100e000000108000200000000000c00028005000100000000002c0002800c00028005000100000000001400018008000100e000000108000200ac1e0001060003400000000008000740000000004c001080080008000000013308000240000000cd080001"], 0xb8}}, 0x0)
setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, 0x0, 0x0)
connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x1f, 0xfb, 0xf7}, 0x10)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$inet6(r4, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f)
sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20000801}, 0x20044840)
sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)}}], 0x1, 0x4880)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0xd2880, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket(0x10, 0x80002, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bond0\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r10], 0x1c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x48}}, 0x0)
sendmmsg$alg(r8, &(0x7f00000000c0), 0x492492492492627, 0x0)
r11 = socket(0x10, 0x803, 0x0)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x400, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x1, 0x7}, {0x7, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r13, {0x0, 0x6}, {}, {0x7, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x1b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008004}, 0xd0)

535.065807ms ago: executing program 1 (id=1215):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x3c}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10)
setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000080)=0x48b5, 0x4)
sendto$inet(r2, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0)
close(r1)

533.098359ms ago: executing program 0 (id=1216):
r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@broadcast, @private, <r1=>0x0}, &(0x7f0000000040)=0xc)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@remote, 0x4e23, 0x0, 0x4e22, 0x6, 0x8, 0x20, 0x100, 0x2c, r1, r3}, {0x6, 0x7, 0x0, 0x5, 0x7351, 0x2, 0x7, 0x3}, {0x5, 0x5, 0x3a7c2a45, 0x9}, 0x4217, 0x6e6bba, 0x2, 0x0, 0x3, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x4d6, 0xff}, 0xa, @in=@rand_addr=0x64010101, 0x34ff, 0x2, 0x3, 0xc5, 0x7, 0x6, 0x6}}, 0xe8) (async)
r4 = socket$inet(0x2, 0xa, 0x1)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000002c0)={<r5=>0x0, 0xd1, "4e263f07946748604f59350a652685df5809a34b44ead76e1cdd2a99c0e782ec9d1f0fae4e17d9389f31e9cd9803e2f95fa3cd61ad1b38b4df878534dd8cc4a7b5ed8df770b9b667a7ee2d9c69586d4a5b60bb2f547c64328e766a189a029b310f625ccf002f1ab0d98320525d7f9f7232a6d924a1fb177931abcb73d762d1e59def6592bb81c2e8fa675d62d3ee4f1c40049f5de6fbf270cf9fd782bd97e06f221cf8a8610a25e268cd8898ac55eb0247bb0269e88bff0fcf66f905d3a3aa87f1b625957d866ba6524475919387fcb404"}, &(0x7f00000003c0)=0xd9)
setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={r5, 0xa98}, 0x8)
r6 = accept(r0, &(0x7f0000000440)=@phonet, &(0x7f00000004c0)=0x80)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, r7, 0x101, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4045}, 0x4) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000680)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x6d, 0x75}}}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7ff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r6)
sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r9, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x4d}, @void, @val={0xc, 0x99, {0x8, 0x53}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000805) (async)
getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f00000008c0)={<r10=>r5, 0x4, 0x7d4, 0x0, 0x8, 0x8, 0x2, 0x1, {r5, @in6={{0xa, 0x4e23, 0x8ce, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}}, 0xffffffff, 0x0, 0xfe, 0x60000000, 0x4}}, &(0x7f0000000980)=0xb0)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000009c0)={r10, 0x8001, 0xc9, "1d3f6e8607db3ba13e9679fbe474b58edb89d050d2f69ecf456b3dfb1cd5a82145e429ecbf643cfbd6b85108619f3470480f5f31f77d19729bd1cc49860ef642339dae2d53e59f6b53600959cd57df481d869c4342bfe4727ecf3a56aff50a7a729311cf3963498fee5fe6bb96378065569060b2da15081cb025050cb045fe6faf9f44f6d5c15b1e563b16ff1b9bf3afe7319ca7e7385a7c9fdc5c15f8c560bcdea9291f5c0c7664cb1350cfe21f3be2390183357888e6c5c329be3e8ec46d64e1271e6fe30f8c0040"}, 0xd1)
getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000b00)=<r11=>0x0, &(0x7f0000000b40)=0x4) (async)
getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000b80)={@private1, <r12=>0x0}, &(0x7f0000000bc0)=0x14) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000c00)={'vxcan1\x00', <r13=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000000f00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000c40)={0x244, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r1}, {0x228, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xe23d}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}]}}]}, 0x244}, 0x1, 0x0, 0x0, 0x4040000}, 0x400c000)
sendmsg$NL80211_CMD_ADD_TX_TS(r6, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x40, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xe660, 0x14}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4810}, 0x800) (async)
getsockopt$bt_sco_SCO_CONNINFO(r6, 0x11, 0x2, &(0x7f0000001040)=""/249, &(0x7f0000001140)=0xf9)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001280)={<r14=>r6, 0x1, 0x9, 0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f0000001180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x7, [@var={0x6, 0x0, 0x0, 0xe, 0x2}, @enum={0x3, 0x2, 0x0, 0x6, 0x4, [{0x10, 0xb5}, {0x7, 0x4}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0xffff}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x9ea}}]}, {0x0, [0x5f, 0x5f, 0x0, 0x61, 0x5f]}}, &(0x7f0000001200)=""/47, 0x7b, 0x2f, 0x1, 0x1, 0x10000, @value=r14}, 0x28) (async)
ioctl$sock_inet_tcp_SIOCATMARK(r6, 0x8905, &(0x7f00000012c0)) (async, rerun: 64)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000001300)={r5, 0x3, 0x30}, &(0x7f0000001340)=0xc) (async, rerun: 64)
r15 = socket$inet_sctp(0x2, 0x5, 0x84)
listen(r15, 0x3) (async)
r16 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r16, 0x84, 0x1d, &(0x7f0000001380)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000013c0)=0x10)

532.448843ms ago: executing program 2 (id=1217):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x44}}, 0x24000041)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}]}, 0x38}}, 0x0)
r2 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0)
sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0xfffffffc, {0x2, 0x0, 0x0, r6, 0x20, 0x66, 0x8}, [@NDA_DST_MAC={0xa}, @NDA_PROTOCOL={0x5, 0xc, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x1804}, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x303}, "8053e7eeb87c6375", "0dee47b49df8d449e11633a06f4679fc", "c0ce6b9a", "684976da3acd6bac"}, 0x28)
sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)='n', 0x1}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)

529.436286ms ago: executing program 0 (id=1218):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x14}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6}]}}}, @IFLA_IFALIASn={0x4}]}, 0x3c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc01, 0x3, 0x1b8, 0x100, 0x5002004a, 0x0, 0x100, 0x0, 0x190, 0x3c8, 0x3c8, 0x190, 0x3c8, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x12}, @private=0xa010101, 0x0, 0xffffffff, 'veth0_macvtap\x00', 'macvtap0\x00', {}, {0xff}, 0x1, 0x2, 0x3a}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0xff, 'ipvlan0\x00', 'pimreg1\x00', {}, {0x4d46f109675848}, 0x36, 0x2, 0x1}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x218)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r4, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4)
setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4)
recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x9e8, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xffe0}, {}, {0xc, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x9bc, 0x2, [@TCA_FW_ACT={0x9b8, 0x4, [@m_gact={0x7c, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x6, 0x2, 0x40, 0x80000001}}]}, {0x35, 0x6, "2dbaba61e8589371e862b4487b08d460dd0e421c5698a29fe9912264ce6f117cf938ed76fd667551c16fe00c34866a38d5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_bpf={0x174, 0x8, 0x0, 0x0, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS={0x44, 0x4, [{0x0, 0x2, 0x2, 0x400}, {0x6, 0xfc, 0x6, 0x5}, {0x3, 0x9, 0x6, 0x443c}, {0x0, 0x5, 0x6, 0x3}, {0x7, 0x5, 0x18, 0x8}, {0x1, 0x6, 0x1, 0x3764}, {0x1, 0x0, 0x9, 0x101}, {0x8001, 0x4, 0x6, 0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x10000, 0x9, 0x2, 0x2, 0x4}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xe, 0x3, 0x3, 0x8236, 0x8}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x1, 0x8, 0x3, 0x5}, {0x3, 0xe5, 0x4, 0x2}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}]}, {0x86, 0x6, "22539790009e6273a584f4534f311ba9a882afeafea96d9fe92ceaa0eb4b5363b0ff729fb43e617b55f96b8be3341753bb2d995b678507cea6ab3c1ed551ad0a40c60fcca769997a42f9dc38885eeca24dbf92b5c933c40bf57f081818a8b45aaf6af7636989026ec33980670f82ebb2fee2a76b2890a13691c699bb8f46d3fc4e0f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6, 0x2}}}}, @m_csum={0xd8, 0x14, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x1, 0x1, 0x9, 0x7}, 0x27}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x1, 0x10000004, 0x92, 0x8}, 0x10}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xfffffffe, 0x8, 0x68, 0x80000000}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffff80, 0x3ff, 0x5, 0x1, 0xd}, 0x2d}}]}, {0x3c, 0x6, "90f2d924f752e1b7f58ae2f81fde11f7d33e3ca7c86d4c86dd234d6c8ed439ab974f7d2d46a532d2a78846ac25dfc533f8896404628bfbe2"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0x3ec, 0x20, 0x0, 0x0, {{0x7}, {0x2f8, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x120, 0x6, {0x7, 'mangle\x00', 0x8, 0x3ff, "5f2c96264a2f09f3d707d5fc1fd1dbafd74d4706aaa9668b7372a0904f151ddb049ce2635c74c1c10fabd6697d035aafcb8e573eac33d3688412ec7c57c56b8cabc4339de32b6f71e5941585c04dd5f87d1848fa5434783093f667dcacd429f1cbad02921eb8c0e227ad2565d5b36ed044cacb7125d17fc9b083e35589246af296f5560537f28b69f52ceb91f8d462c8b40be4f2f418cbf20efc4459bdf35672d93c410388a602184d91e52cb1c3f440c515b92232cfcea0b98306806250d3b02a3c6af4e9fba75421cccdcaa416282f53dd3a97c4f7f1c99bc2ebf2e37a1556aa7c422e0406a174930f9962952567f7d5bc4e2da112"}}, @TCA_IPT_TARG={0xf3, 0x6, {0xfffc, 'security\x00', 0x93, 0x4, "cebda0feefb5f1b33d70ff619e11df80c6d1375e20badaeb34d64fbbb1e3f52a3d6f24577bc758a39f129ed9281b4444c70ebae1a14b9df102085a9ce3bb29f0a4af7feb5d160d2281eb70b2edc1e6df102cfc50fd3fefde7da2991d90f32e4321c4234d304aebeedd614ef6b0010884b58c37db03bd814ccdd48f5abe3a0959791a3dad4cccdd6984a377a87d47b788ee57944c115c473c075cffdfd66886c5eb1ebf6512f8b475cf177d7e2109be16eb9709159e98525eb75a940630ab5c2a78b5328aa5b41f6314"}}, @TCA_IPT_TARG={0xd6, 0x6, {0x2, 'raw\x00', 0xdc, 0x7fff, "e7fe32c3ef53e4cbd46d1d739dc420214aececfa9ef32ab23e6390334e391b11b0e66a740ae34d5dac988076394b93e7ed9750e8220b4b7c7c7a93a64997fb1340e9f84dd0668ab8116f580fa7bdbd5303a079c2a2e1e853786ab30b12716662aec99c953a242bc319fa4844917831a5de18f33d57518adf47b9c3bd06b1ebdcd49d45469a87e42d0c8f31847e593ea027e912ae48629e225da2876b8588103c03695bfc2d7fa03c146dabb6"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}]}, {0xd0, 0x6, "78d6c45012645a579c707f8c92d53e44339a150f8b13158bd32e8ff9a52b476e93ca59674edf6a09772f3624458a1300e54ee2a7c87ffcba56559f3102cb13f1014af5da18bbf2691fbff08b3e99a544fd0c90fb86233f354c9555fc196552492560b960e75fa60f2c6dc2ca6bc16a11959f0ccb3bed505f5e068aa17e79664a1a5074c33acad1e7ac19fd15183e65868ac4ac52bdbc2b2752d607fe4c2009baa5cd24b529c0efa764b446fabef8d311da636ee446fc1259f68687e22be90011124e193094940aa77bc751ec"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_xt={0x24c, 0x18, 0x0, 0x0, {{0x7}, {0x170, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xa9, 0x6, {0x2, 'raw\x00', 0x5, 0x3, "946d7aff8c90f4955c653efacd47ae49829ce059df41ec75022e707cbed062a6206a2f1bcbf60e7fd8b5056313d31d23246934bc6aceff7fb204c68701c9fb161d95894bd19671f00cb373261229c9de82dbdd2db423d0b1f6780c45499a76037e7fc013709450f07f1b7a36a2dc6b6994a67fc5ee6ea115ba8d9b8e67855e"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TARG={0x2a, 0x6, {0x4, 'mangle\x00', 0x7, 0x80}}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0xb5, 0x6, "e59735af7ae2fe83f93d98f6f1bb7be441722af9f437681328148cb57deaf73dd6f4768c4d61c5db2923c881a6b29397eec0b86c162c4e0a82daa498e64c538347670756da283112b954345c059ec7078e367688d3fe8e35f58d60a6750275fe1efb330e29844115fb72a4aaf1a546cc9f9fef0851a5a0eb5305452b5709240aabe4945db8ff6591b7338e24b8ad6a892a34fcab46530e1703e46cf29a166daa6309135715f4dccf8426d308ccdec21a15"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0xb4, 0x2, 0x0, 0x0, {{0x7}, {0x50, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8}]}, {0x40, 0x6, "eecdd4dbc7f90c24dd377a26772dbd4a12f49fb99e456209a7fa085f000d127d352bc5125e98584b07b1aacc71583ab4d58f09d1a3697fa1520ffd44"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x9e8}, 0x1, 0x0, 0x0, 0x48080}, 0x24000840)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000120001002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a821000000000000140003006e657464657673696d30", @ANYBLOB], 0x50}}, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000120001002cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a821000000000000140003006e657464657673696d30", @ANYBLOB], 0x50}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)

420.182768ms ago: executing program 2 (id=1219):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207"], 0x10}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x44, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000280), 0x8, 0xf4, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@deltclass={0xbc, 0x29, 0x0, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x7, 0xb}, {0x3, 0xed2b2836483bc9f0}, {0xd, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x8a}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x34, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x4, 0x17, 0xc}}, @TCA_HFSC_RSC={0x10, 0x1, {0x4, 0x1, 0xfffffffc}}, @TCA_HFSC_RSC={0x10, 0x1, {0x1, 0x1ff, 0xfffeffff}}]}}, @tclass_kind_options=@c_qfq={{0x8}, {0x2c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x6}, @TCA_QFQ_LMAX={0x8, 0x2, 0xffffffff}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x5}, @TCA_QFQ_LMAX={0x8, 0x2, 0x8c}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5}]}}, @TCA_RATE={0x6, 0x5, {0x8}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}]}, 0xbc}}, 0x4000000)

419.695365ms ago: executing program 0 (id=1220):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r3, @ANYBLOB="00005e8008000100ffffffff0800020000000000"], 0x30}}, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f0000000000)=0x6, 0x4)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r5 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000280)=0x2, 0x4)
setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000000100)=0x6, 0x4)
connect$tipc(r5, &(0x7f0000000140)=@id, 0x10)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000180)=0x3)
ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000200)=0x8000)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendfile(r1, r0, 0x0, 0x6)
r9 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r10, @ANYBLOB="0a0001000000648a63ff"], 0x48}}, 0x0)
connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10)
setsockopt$inet_udp_int(r7, 0x11, 0x67, &(0x7f0000000080)=0x48b5, 0x4)

412.203287ms ago: executing program 2 (id=1221):
r0 = socket(0x0, 0x80808, 0x1000200)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x4, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x24}}, 0x0)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
read(r2, &(0x7f0000000240)=""/146, 0x92)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0)
r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
sendfile(r5, r4, 0x0, 0xf2)
sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtaction={0x1ac, 0x30, 0x51b, 0x0, 0x0, {}, [{0x198, 0x1, [@m_skbmod={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="259779aae878"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0xa8, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x9c, 0x0, 0x0, 0x0, {{0xf}, {0x4}, {0x69, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x1ac}}, 0x20000004)

339.617963ms ago: executing program 1 (id=1222):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x2, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006000)={0x18, 0x18, 0x1, 0x800000, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x4, 0x6}]}, 0x18}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff}}]}, 0x90}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
socket(0x400000000010, 0x2, 0x0) (async)
socket$unix(0x1, 0x1, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006000)={0x18, 0x18, 0x1, 0x800000, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x4, 0x6}]}, 0x18}, 0x1, 0x0, 0x0, 0x5}, 0x20000000) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff}}]}, 0x90}}, 0x0) (async)

231.335768ms ago: executing program 1 (id=1223):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0xd}, 0x6, 0x1, 0x0, 0x6, 0x8000, 0x2}, 0x20) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r2, 0x8b32, &(0x7f0000000040))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) (async)
syz_emit_ethernet(0x52, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x0) (async)
ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, @l2={0x1f, 0x5, @any, 0x5, 0x1}, @l2tp={0x2, 0x0, @remote, 0x1}, @generic={0x10, "d639b241eba471067a5920d2fa98"}, 0x5, 0x0, 0x0, 0x0, 0x1d44, 0x0, 0xfffffffffffffff8, 0x401, 0x7bd3}) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x9, 0x0, 0x61, 0x9}]}}]}}]}, 0x44}}, 0x2004c850)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000540)='%-5lx  \x00'}, 0x20) (async)
r6 = bpf$ITER_CREATE(0x21, &(0x7f00000005c0), 0x8)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="000000000000000800000000000000000f000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
setsockopt$MRT_DONE(r4, 0x0, 0xc9, 0x0, 0x0) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, 0x0, &(0x7f0000000200)=""/166}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) (async)
r9 = socket(0x1, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r8, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r9, 0x2}, 0x20)
connect$pppoe(r4, &(0x7f00000008c0)={0x18, 0x0, {0x4, @multicast, 'dvmrp1\x00'}}, 0x1e)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b0200000000000000000000050000007ffad33b5a70be9fd913243f2500009000", @ANYRES32, @ANYBLOB="ff7f00"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="020000000500"/28], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0xffffffffffffffff, <r11=>0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%-010d \x00'}, 0x20)
getpeername$packet(r0, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000940)=0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x14, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x10001}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x8, 0xa1, &(0x7f0000000480)=""/161, 0x40f00, 0x26, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x3, 0x6, 0xfffffffd}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000740)=[0xffffffffffffffff, r5, r6, r7, r8, r10, r11, 0x1], &(0x7f0000000780)=[{0x1, 0x4, 0x1, 0x7}, {0x0, 0x5, 0x6, 0x7}, {0x1, 0x2, 0x3, 0x9}], 0x10, 0x5}, 0x94)
socket$isdn_base(0x22, 0x3, 0x0)

149.982588ms ago: executing program 1 (id=1224):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003640)=ANY=[@ANYBLOB="300000003e000701feffffff00000000017c0000040042800c003066f6d162018006000600800a00000c0002", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94)
r2 = socket(0x400000000010, 0x3, 0x0) (async)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) (async)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
close(r5) (async)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)

147.327778ms ago: executing program 0 (id=1225):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', <r3=>0x0})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'ip_vti0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

0s ago: executing program 0 (id=1226):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, &(0x7f0000000080))
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', 0x0})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x402000, 0x0)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x1a4, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0x2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x150, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x5}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x5}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x5}, @TCA_CHOKE_STAB={0x104, 0x2, "8a78799e4e57587b11d48892ea9e06768c69df4251c03d6ab791216d553dd91b69aded09b617bf9fc80356e7b6631423106f138553e56b202b76243a6d63954b59031f7437836f2b4e4b01524d4da89a2baa378294c52cf89a4caffbe6da8739a1356a5e9cd63c7421ba67f39c42783c7578cbe675f4227bc4ea6d521bf217b3e8dc43034fd991607c32e2588ad0b02e1d2c48f74230a42f40b8f04a91ae68e75e7d768056e40599642831c4b71548c3764685f59f9f75e12fbdf465140336a6625bd8ff0d0e3bde06b7d4b9b329000abcb78e1ad39df28613f19ad36d59e9201de824ba586cd296df10f7b3c7da401f96a7cc9cff5e237c0cdde08059580265"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xd, 0x48d29b19, 0xe59a, 0x11, 0xd, 0x19, 0x5}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x10, 0x1, 0x0, 0x10, 0x1b, 0x4, 0x8}}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x7, 0xb9b8, 0xe81, 0x0, 0x8, 0x28ed}}, {0x4}}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4c085}, 0x9bedea358fc17a77)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r8)
socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0xc}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x200}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c061}, 0x4000000)
ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r11 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r11, 0x85, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r11, 0x84, 0x1b, &(0x7f0000002580), &(0x7f00000025c0)=0x8)
r12 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'bridge0\x00'})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:7576' (ED25519) to the list of known hosts.
syzkaller login: [   48.194746][ T5833] cgroup: Unknown subsys name 'net'
[   48.313226][ T5833] cgroup: Unknown subsys name 'cpuset'
[   48.316871][ T5833] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.626722][ T5833] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.271277][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.275176][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.277724][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.280460][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.283102][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   53.286601][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   53.289581][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.299771][ T5860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.302572][ T5860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.305268][ T5860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.390881][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.395055][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.397599][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.400307][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.403646][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.538250][ T5857] chnl_net:caif_netlink_parms(): no params data found
[   53.579170][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   53.632999][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.636472][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.639672][ T5857] bridge_slave_0: entered allmulticast mode
[   53.644659][ T5857] bridge_slave_0: entered promiscuous mode
[   53.665557][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.668648][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.672323][ T5857] bridge_slave_1: entered allmulticast mode
[   53.676161][ T5857] bridge_slave_1: entered promiscuous mode
[   53.720887][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.723840][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.726889][ T5853] bridge_slave_0: entered allmulticast mode
[   53.729961][ T5853] bridge_slave_0: entered promiscuous mode
[   53.747631][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.750006][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.752777][ T5853] bridge_slave_1: entered allmulticast mode
[   53.755723][ T5853] bridge_slave_1: entered promiscuous mode
[   53.760155][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.783145][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.794112][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.825404][ T5864] chnl_net:caif_netlink_parms(): no params data found
[   53.833076][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.837863][ T5857] team0: Port device team_slave_0 added
[   53.874697][ T5857] team0: Port device team_slave_1 added
[   53.877602][ T5853] team0: Port device team_slave_0 added
[   53.898363][ T5853] team0: Port device team_slave_1 added
[   53.920296][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.922932][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.931358][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.955803][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.958108][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.966678][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.971583][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.974465][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.985025][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.989795][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.993676][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.996625][ T5864] bridge_slave_0: entered allmulticast mode
[   54.000287][ T5864] bridge_slave_0: entered promiscuous mode
[   54.007592][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.009975][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.018149][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.021824][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.024162][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.026453][ T5864] bridge_slave_1: entered allmulticast mode
[   54.029090][ T5864] bridge_slave_1: entered promiscuous mode
[   54.047382][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.052374][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.082972][ T5864] team0: Port device team_slave_0 added
[   54.108342][ T5864] team0: Port device team_slave_1 added
[   54.113856][ T5857] hsr_slave_0: entered promiscuous mode
[   54.116178][ T5857] hsr_slave_1: entered promiscuous mode
[   54.122423][ T5853] hsr_slave_0: entered promiscuous mode
[   54.124994][ T5853] hsr_slave_1: entered promiscuous mode
[   54.127278][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   54.129221][ T5853] Cannot create hsr debugfs directory
[   54.175278][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.178234][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.189708][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.209663][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.212673][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.221765][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.285382][ T5864] hsr_slave_0: entered promiscuous mode
[   54.288473][ T5864] hsr_slave_1: entered promiscuous mode
[   54.292166][ T5864] debugfs: 'hsr0' already exists in 'hsr'
[   54.294565][ T5864] Cannot create hsr debugfs directory
[   54.469583][ T5857] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.477834][ T5857] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.487435][ T5857] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.497748][ T5857] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.523666][ T5853] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.528989][ T5853] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.555904][ T5853] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.570525][ T5853] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.582681][ T5864] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.590217][ T5864] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.595137][ T5864] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.604501][ T5864] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.675803][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.705375][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[   54.715041][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.719105][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.721732][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.725657][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.728072][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.758005][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   54.766073][ T5857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.780262][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.782738][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.795686][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.798085][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.808262][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.840254][ T5864] 8021q: adding VLAN 0 to HW filter on device team0
[   54.857642][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.859983][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.863928][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.866206][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.877050][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.923124][ T5857] veth0_vlan: entered promiscuous mode
[   54.928117][ T5857] veth1_vlan: entered promiscuous mode
[   54.944708][ T5857] veth0_macvtap: entered promiscuous mode
[   54.948931][ T5857] veth1_macvtap: entered promiscuous mode
[   54.965778][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.974018][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.992431][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.997838][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.005620][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.008430][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.017875][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.069334][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.072281][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.081215][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.097328][ T5853] veth0_vlan: entered promiscuous mode
[   55.108983][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.113862][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.118360][ T5864] veth0_vlan: entered promiscuous mode
[   55.122076][ T5853] veth1_vlan: entered promiscuous mode
[   55.128829][ T5864] veth1_vlan: entered promiscuous mode
[   55.150064][ T5853] veth0_macvtap: entered promiscuous mode
[   55.155468][ T5857] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.164994][ T5853] veth1_macvtap: entered promiscuous mode
[   55.169115][ T5864] veth0_macvtap: entered promiscuous mode
[   55.175288][ T5864] veth1_macvtap: entered promiscuous mode
[   55.196403][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.202829][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.213443][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.217408][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.228985][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.236729][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.245171][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.263441][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.267599][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.282938][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.293128][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.295951][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.326213][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.330607][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.341465][   T55] Bluetooth: hci0: command tx timeout
[   55.342351][ T5922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4'.
[   55.343622][   T55] Bluetooth: hci1: command tx timeout
[   55.357107][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4'.
[   55.366273][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.368928][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.370197][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.376270][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.393324][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.396718][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.421418][   T55] Bluetooth: hci2: command tx timeout
[   55.462846][ T5925] TC_ACT_REPEAT abuse ?
[   55.464844][ T5925] TC_ACT_REPEAT abuse ?
[   55.466648][ T5925] TC_ACT_REPEAT abuse ?
[   55.468740][ T5924] TC_ACT_REPEAT abuse ?
[   55.473651][ T5924] TC_ACT_REPEAT abuse ?
[   55.651074][ T5904] TC_ACT_REPEAT abuse ?
[   56.302937][ T5916] TC_ACT_REPEAT abuse ?
[   56.354234][ T5934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7'.
[   56.404258][ T5916] TC_ACT_REPEAT abuse ?
[   56.406030][ T5916] TC_ACT_REPEAT abuse ?
[   56.452428][ T5936] Zero length message leads to an empty skb
[   56.472327][ T5945] ieee802154 phy0 wpan0: encryption failed: -22
[   56.476595][ T5890] IPVS: starting estimator thread 0...
[   56.573428][ T5946] IPVS: using max 81 ests per chain, 194400 per kthread
[   56.620256][ T5959] syz.1.13 uses obsolete (PF_INET,SOCK_PACKET)
[   56.686154][ T5959] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13'.
[   56.689407][ T5959] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13'.
[   56.751683][ T5890] TC_ACT_REPEAT abuse ?
[   56.841675][ T5964] netlink: 'syz.0.15': attribute type 1 has an invalid length.
[   56.844145][ T5964] netlink: 92 bytes leftover after parsing attributes in process `syz.0.15'.
[   56.999377][ T5977] netlink: 16182 bytes leftover after parsing attributes in process `syz.0.19'.
[   57.396223][ T5980] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   57.421230][ T5860] Bluetooth: hci0: command tx timeout
[   57.423646][   T55] Bluetooth: hci1: command tx timeout
[   57.446643][ T5982] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21'.
[   57.502061][ T5860] Bluetooth: hci2: command tx timeout
[   57.582160][ T5995] netlink: 'syz.2.25': attribute type 3 has an invalid length.
[   57.685058][ T6003] netlink: 76 bytes leftover after parsing attributes in process `syz.2.28'.
[   57.688211][ T6003] netlink: 76 bytes leftover after parsing attributes in process `syz.2.28'.
[   57.723147][ T6008] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[   58.227044][ T6035] netlink: 'syz.0.37': attribute type 13 has an invalid length.
[   58.347177][ T6041] syzkaller1: entered promiscuous mode
[   58.349647][ T6041] syzkaller1: entered allmulticast mode
[   58.465359][ T6043] syzkaller1: entered promiscuous mode
[   58.467516][ T6043] syzkaller1: entered allmulticast mode
[   58.642468][ T6047] syzkaller0: entered promiscuous mode
[   58.644299][ T6047] syzkaller0: entered allmulticast mode
[   58.649747][ T6047] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.654685][ T6047] warning: `syz.0.41' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   58.773084][ T6054] tipc: Started in network mode
[   58.774889][ T6054] tipc: Node identity ac1414aa, cluster identity 4711
[   58.779380][ T6054] tipc: Enabled bearer <udp:s>, priority 10
[   59.401621][ T6089] netlink: 'syz.0.53': attribute type 1 has an invalid length.
[   59.502004][ T5860] Bluetooth: hci0: command tx timeout
[   59.503836][   T55] Bluetooth: hci1: command tx timeout
[   59.581524][   T55] Bluetooth: hci2: command tx timeout
[   59.648407][ T6099] pim6reg1: entered promiscuous mode
[   59.650523][ T6099] pim6reg1: entered allmulticast mode
[   59.700376][ T6105] netlink: 'syz.0.58': attribute type 1 has an invalid length.
[   59.771601][    T9] tipc: Node number set to 2886997162
[   59.881230][ T6111] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.885312][ T6111] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.944466][ T6111] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   59.950661][ T6111] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   60.032698][ T5712] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.036097][ T5712] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.040296][ T5712] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.045477][ T5712] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   60.347946][ T6134] ip6tnl1: entered allmulticast mode
[   60.514498][ T6143] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.583304][ T6143] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.659600][ T6143] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.729959][ T6143] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.802460][ T5916] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.813700][ T5712] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.823126][ T5712] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.844150][ T5712] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.964108][ T6177] __nla_validate_parse: 9 callbacks suppressed
[   60.964118][ T6177] netlink: 284 bytes leftover after parsing attributes in process `syz.0.75'.
[   60.998490][ T6185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.78'.
[   61.008186][ T6185] netlink: 'syz.0.78': attribute type 3 has an invalid length.
[   61.010697][ T6185] netlink: 'syz.0.78': attribute type 1 has an invalid length.
[   61.013613][ T6185] netlink: 220 bytes leftover after parsing attributes in process `syz.0.78'.
[   61.020067][ T6186] net_ratelimit: 2 callbacks suppressed
[   61.020074][ T6186] TC_ACT_REPEAT abuse ?
[   61.077721][ T6194] xt_policy: too many policy elements
[   61.138867][ T6199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.82'.
[   61.273161][ T6204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.84'.
[   61.309072][ T6204] netlink: 'syz.2.84': attribute type 1 has an invalid length.
[   61.312189][ T6204] netlink: 224 bytes leftover after parsing attributes in process `syz.2.84'.
[   61.583351][   T55] Bluetooth: hci0: command tx timeout
[   61.585340][ T5860] Bluetooth: hci1: command tx timeout
[   61.671015][ T5860] Bluetooth: hci2: command tx timeout
[   61.896992][ T6219] netlink: zone id is out of range
[   61.899243][ T6219] netlink: zone id is out of range
[   61.934100][ T6219] netlink: zone id is out of range
[   61.947539][ T6219] netlink: zone id is out of range
[   61.959610][ T6219] netlink: zone id is out of range
[   61.978340][ T6219] netlink: zone id is out of range
[   61.989605][ T6219] netlink: zone id is out of range
[   62.005089][ T6219] netlink: zone id is out of range
[   62.016010][ T6219] netlink: zone id is out of range
[   62.320407][ T6240] netlink: 'syz.0.91': attribute type 4 has an invalid length.
[   62.517226][ T6262] netlink: 28 bytes leftover after parsing attributes in process `syz.2.97'.
[   62.521094][ T6262] netlink: 28 bytes leftover after parsing attributes in process `syz.2.97'.
[   62.544123][ T6263] netlink: 28 bytes leftover after parsing attributes in process `syz.2.97'.
[   62.548625][ T6263] netlink: 28 bytes leftover after parsing attributes in process `syz.2.97'.
[   62.552942][ T5916] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[   63.215129][ T6290] tun0: tun_chr_ioctl cmd 1074025672
[   63.217539][ T6290] tun0: ignored: set checksum disabled
[   63.727106][ T6318] netlink: 'syz.1.109': attribute type 144 has an invalid length.
[   63.871608][ T6331] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   63.876503][ T6331] netlink: 'syz.0.114': attribute type 4 has an invalid length.
[   63.937146][ T6336] netlink: 'syz.0.116': attribute type 6 has an invalid length.
[   63.940302][ T6336] IPv6: NLM_F_CREATE should be specified when creating new route
[   63.946995][ T6338] netlink: 'syz.0.116': attribute type 6 has an invalid length.
[   65.562857][ T6387] netlink: 'syz.1.129': attribute type 1 has an invalid length.
[   65.570220][ T6387] netlink: 'syz.1.129': attribute type 1 has an invalid length.
[   65.694688][ T6401] blkio.reset_stats is deprecated
[   65.736161][ T6401] netlink: 'syz.2.134': attribute type 4 has an invalid length.
[   65.907762][ T6411] netlink: 'syz.0.136': attribute type 12 has an invalid length.
[   66.031654][ T6417] __nla_validate_parse: 9 callbacks suppressed
[   66.031668][ T6417] netlink: 20 bytes leftover after parsing attributes in process `syz.2.138'.
[   66.038017][ T6417] nbd: must specify a size in bytes for the device
[   66.109664][ T6420] Bluetooth: MGMT ver 1.23
[   66.116158][ T6420] netlink: 'syz.2.139': attribute type 11 has an invalid length.
[   66.381496][   T36] wlan1: Trigger new scan to find an IBSS to join
[   66.479183][ T6430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.142'.
[   66.560403][ T6432] netlink: 'syz.1.143': attribute type 3 has an invalid length.
[   67.454213][ T6445] veth0_to_bridge: entered promiscuous mode
[   67.458948][ T6445] veth0_to_bridge: left promiscuous mode
[   67.512115][ T6451] netlink: 24 bytes leftover after parsing attributes in process `syz.0.146'.
[   67.798872][ T6469] netlink: 'syz.1.153': attribute type 3 has an invalid length.
[   68.070477][ T6482] netlink: 'syz.2.157': attribute type 12 has an invalid length.
[   68.333614][ T6501] netlink: 20 bytes leftover after parsing attributes in process `syz.0.162'.
[   68.518580][ T6510] netlink: 176 bytes leftover after parsing attributes in process `syz.0.166'.
[   68.643594][ T6518] syz_tun: entered promiscuous mode
[   68.805213][ T6527] net_ratelimit: 11 callbacks suppressed
[   68.805223][ T6527] openvswitch: netlink: Missing key (keys=40, expected=80)
[   68.814237][ T6526] netlink: 'syz.0.170': attribute type 1 has an invalid length.
[   68.817439][ T6526] netlink: 'syz.0.170': attribute type 2 has an invalid length.
[   68.822901][ T6526] netlink: 1172 bytes leftover after parsing attributes in process `syz.0.170'.
[   68.859834][ T5890] IPVS: starting estimator thread 0...
[   68.953080][ T6531] IPVS: using max 81 ests per chain, 194400 per kthread
[   68.982134][ T6546] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.175'.
[   68.994526][ T6546] netlink: 16 bytes leftover after parsing attributes in process `syz.1.175'.
[   69.027360][ T6552] netlink: 72 bytes leftover after parsing attributes in process `syz.0.177'.
[   69.031387][ T6548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.176'.
[   69.380375][ T6574] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   69.431163][ T1090] wlan1: Trigger new scan to find an IBSS to join
[   69.684362][ T6599] nbd: must specify at least one socket
[   70.004733][ T6626] netlink: 'syz.1.197': attribute type 4 has an invalid length.
[   70.461613][ T6643] lo speed is unknown, defaulting to 1000
[   70.464427][ T6643] lo speed is unknown, defaulting to 1000
[   70.469874][ T6643] lo speed is unknown, defaulting to 1000
[   70.479249][ T6643] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   70.492514][ T6643] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   70.525609][ T6643] lo speed is unknown, defaulting to 1000
[   70.539529][ T6643] lo speed is unknown, defaulting to 1000
[   70.547849][ T6643] lo speed is unknown, defaulting to 1000
[   70.566409][ T6644] netlink: 'syz.0.202': attribute type 4 has an invalid length.
[   70.845720][ T6667] tc_dump_action: action bad kind
[   70.945014][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   70.948788][ T6673] netlink: 'syz.0.211': attribute type 21 has an invalid length.
[   70.970610][ T6676] netlink: 'syz.1.213': attribute type 10 has an invalid length.
[   70.978596][ T6676] bridge0: port 3(macsec0) entered blocking state
[   70.983261][ T6676] bridge0: port 3(macsec0) entered disabled state
[   70.985550][ T6676] macsec0: entered allmulticast mode
[   70.987312][ T6676] veth1_macvtap: entered allmulticast mode
[   70.990248][ T6676] macsec0: entered promiscuous mode
[   71.001240][ T6676] bridge0: port 3(macsec0) entered blocking state
[   71.004164][ T6676] bridge0: port 3(macsec0) entered forwarding state
[   71.145728][ T6688] __nla_validate_parse: 5 callbacks suppressed
[   71.145772][ T6688] netlink: 24 bytes leftover after parsing attributes in process `syz.0.217'.
[   71.170825][ T6688] netlink: 24 bytes leftover after parsing attributes in process `syz.0.217'.
[   71.240505][ T6697] netlink: 32 bytes leftover after parsing attributes in process `syz.2.221'.
[   71.269294][ T6697] netlink: 1 bytes leftover after parsing attributes in process `syz.2.221'.
[   71.278577][ T6697] netlink: 120 bytes leftover after parsing attributes in process `syz.2.221'.
[   71.282811][ T6699] syzkaller0: entered promiscuous mode
[   71.284763][ T6699] syzkaller0: entered allmulticast mode
[   71.294340][ T6699] syzkaller0: tun_chr_ioctl cmd 1074025677
[   71.297260][ T6699] syzkaller0: Linktype set failed because interface is up
[   71.752344][ T6729] block nbd1: server does not support multiple connections per device.
[   71.757691][ T6729] block nbd1: shutting down sockets
[   71.830618][ T6729] netlink: 'syz.2.228': attribute type 1 has an invalid length.
[   71.833428][ T6729] netlink: 84 bytes leftover after parsing attributes in process `syz.2.228'.
[   71.836273][ T6729] netlink: 'syz.2.228': attribute type 2 has an invalid length.
[   72.096666][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.235'.
[   72.121371][ T6761] openvswitch: netlink: Message has 1 unknown bytes.
[   72.123941][ T6761] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.299561][ T6783] Driver unsupported XDP return value 0 on prog  (id 97) dev N/A, expect packet loss!
[   72.344503][ T6781] netlink: 224 bytes leftover after parsing attributes in process `syz.0.240'.
[   72.347813][ T6781] NCSI netlink: No device for ifindex 246
[   72.461318][   T53] wlan1: Trigger new scan to find an IBSS to join
[   72.634110][ T6795] netlink: 16 bytes leftover after parsing attributes in process `syz.2.246'.
[   73.051328][ T5916] nci: nci_rsp_packet: unknown rsp opcode 0x73a
[   73.057678][ T6816] netlink: 28 bytes leftover after parsing attributes in process `syz.2.252'.
[   73.060979][ T6816] validate_nla: 4 callbacks suppressed
[   73.060988][ T6816] netlink: 'syz.2.252': attribute type 7 has an invalid length.
[   73.066369][ T6816] netlink: 'syz.2.252': attribute type 8 has an invalid length.
[   73.075619][ T6816] ip6gretap0: entered promiscuous mode
[   73.078946][ T6816] batadv_slave_1: entered promiscuous mode
[   73.082439][ T6816] erspan0: entered promiscuous mode
[   73.085632][ T6816] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network
[   73.089785][ T6816] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[   73.094491][ T6816] hsr1: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network
[   73.170010][ T6826] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[   73.375895][ T6840] only policy match revision 0 supported
[   73.375910][ T6840] unable to load match
[   73.427246][   T29] wlan1: Creating new IBSS network, BSSID 5e:59:7a:0f:fd:ae
[   73.565462][ T6854] syzkaller0: entered promiscuous mode
[   73.567630][ T6854] syzkaller0: entered allmulticast mode
[   73.623361][ T6860] netlink: 'syz.2.265': attribute type 12 has an invalid length.
[   75.479338][ T5293] udevd[5293]: worker [6576] terminated by signal 33 (Unknown signal 33)
[   75.484735][ T5293] udevd[5293]: worker [6576] failed while handling '/devices/virtual/block/loop2'
[   75.524748][ T5293] udevd[5293]: worker [5854] terminated by signal 33 (Unknown signal 33)
[   75.528059][ T5293] udevd[5293]: worker [5854] failed while handling '/devices/virtual/block/loop0'
[   75.738463][ T6922] netlink: 'syz.1.279': attribute type 5 has an invalid length.
[   75.924914][ T6927] tipc: Started in network mode
[   75.926807][ T6927] tipc: Node identity 2a3f4e68d7f4, cluster identity 4711
[   75.929393][ T6927] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.996583][ T6926] tipc: Resetting bearer <eth:syzkaller0>
[   76.362736][ T6933] netlink: 'syz.2.282': attribute type 1 has an invalid length.
[   76.813761][ T6947] netlink: 'syz.0.284': attribute type 58 has an invalid length.
[   76.817200][ T6947] __nla_validate_parse: 11 callbacks suppressed
[   76.817211][ T6947] netlink: 20 bytes leftover after parsing attributes in process `syz.0.284'.
[   76.838252][ T6926] tipc: Disabling bearer <eth:syzkaller0>
[   76.945884][ T6943] syzkaller1: entered promiscuous mode
[   76.948111][ T6943] syzkaller1: entered allmulticast mode
[   77.182018][ T6959] netlink: 32 bytes leftover after parsing attributes in process `syz.1.287'.
[   77.236644][ T6959] netlink: 108 bytes leftover after parsing attributes in process `syz.1.287'.
[   77.241370][ T6959] netlink: 108 bytes leftover after parsing attributes in process `syz.1.287'.
[   77.422483][ T6980] netlink: 3 bytes leftover after parsing attributes in process `syz.1.293'.
[   77.425371][ T6979] netlink: 'syz.1.293': attribute type 1 has an invalid length.
[   77.433365][ T6980] batadv1: entered promiscuous mode
[   77.435332][ T6980] batadv1: entered allmulticast mode
[   77.440193][ T6979] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[   77.595329][ T6989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.295'.
[   77.619524][ T6989] netlink: 'syz.1.295': attribute type 5 has an invalid length.
[   77.629937][ T6989] netlink: 28 bytes leftover after parsing attributes in process `syz.1.295'.
[   77.670629][ T6992] raw_sendmsg: syz.1.296 forgot to set AF_INET. Fix it!
[   77.736548][ T6998] netlink: 24 bytes leftover after parsing attributes in process `syz.1.297'.
[   77.745010][ T6998] openvswitch: netlink: Flow key attr not present in new flow.
[   77.763452][ T6998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.297'.
[   78.092691][ T7005] netlink: 'syz.2.299': attribute type 4 has an invalid length.
[   78.252308][ T7011] bridge0: port 3(macsec0) entered disabled state
[   78.254490][ T7011] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.257354][ T7011] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.439848][ T7011] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.447306][ T7011] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.513569][ T7011] veth1_macvtap: left allmulticast mode
[   78.580021][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.583585][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.599681][ T7021] netlink: 'syz.0.302': attribute type 3 has an invalid length.
[   78.604287][ T7021] netlink: 'syz.0.302': attribute type 3 has an invalid length.
[   78.607455][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.614402][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   78.635441][ T7023] netlink: 'syz.1.303': attribute type 1 has an invalid length.
[   78.753854][ T7026] netlink: 44 bytes leftover after parsing attributes in process `syz.0.304'.
[   79.108138][ T7034] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   79.494171][ T7038] syzkaller1: entered promiscuous mode
[   79.498325][ T7038] syzkaller1: entered allmulticast mode
[   79.635344][ T7009] Set syz1 is full, maxelem 65536 reached
[   80.845246][ T7088] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.935898][ T7093] syzkaller0: entered promiscuous mode
[   80.937845][ T7093] syzkaller0: entered allmulticast mode
[   81.192334][  T791] cfg80211: failed to load regulatory.db
[   82.083877][ T7169] __nla_validate_parse: 9 callbacks suppressed
[   82.083887][ T7169] netlink: 76 bytes leftover after parsing attributes in process `syz.2.342'.
[   82.108600][ T7171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.343'.
[   82.137729][ T7173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.344'.
[   82.331785][ T7194] netlink: 44 bytes leftover after parsing attributes in process `syz.1.349'.
[   82.470052][ T7205] netlink: 100 bytes leftover after parsing attributes in process `syz.2.352'.
[   83.216179][ T7266] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[   83.219610][ T7266] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[   83.223678][ T7267] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607)
[   83.226995][ T7267] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[   83.346221][ T7270] netlink: 'syz.0.368': attribute type 13 has an invalid length.
[   83.349566][ T7270] netlink: 'syz.0.368': attribute type 17 has an invalid length.
[   83.359023][ T7270] syz_tun: left promiscuous mode
[   83.369680][ T7270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   83.420893][   T53] wlan1: Trigger new scan to find an IBSS to join
[   83.467197][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.368'.
[   83.484492][ T7270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   83.488771][ T7270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   83.726713][ T7282] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   83.793493][ T7285] sctp: [Deprecated]: syz.2.372 (pid 7285) Use of int in maxseg socket option.
[   83.793493][ T7285] Use struct sctp_assoc_value instead
[   83.848280][ T7287] netlink: 264 bytes leftover after parsing attributes in process `syz.2.373'.
[   83.851590][ T7287] netlink: 56 bytes leftover after parsing attributes in process `syz.2.373'.
[   83.861050][ T7287] netlink: 'syz.2.373': attribute type 3 has an invalid length.
[   84.006167][ T7302] ieee802154 phy1 wpan1: encryption failed: -22
[   84.037155][ T7305] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   84.099655][ T7309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.381'.
[   84.103881][ T7309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.381'.
[   84.107412][ T7309] netlink: 'syz.1.381': attribute type 4 has an invalid length.
[   84.203750][ T7318] syzkaller0: entered promiscuous mode
[   84.205644][ T7318] syzkaller0: entered allmulticast mode
[   84.365023][ T7321] netlink: 'syz.2.385': attribute type 1 has an invalid length.
[   84.463274][ T7328] sctp: [Deprecated]: syz.2.387 (pid 7328) Use of struct sctp_assoc_value in delayed_ack socket option.
[   84.463274][ T7328] Use struct sctp_sack_info instead
[   84.469417][ T7328] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.590341][ T7334] netlink: 'syz.2.389': attribute type 4 has an invalid length.
[   84.671937][ T7342] netlink: 'syz.0.393': attribute type 7 has an invalid length.
[   84.674794][ T7342] netlink: 'syz.0.393': attribute type 8 has an invalid length.
[   84.677425][ T7342] netlink: 'syz.0.393': attribute type 4 has an invalid length.
[   84.694177][ T7342] netlink: 'syz.0.393': attribute type 4 has an invalid length.
[   84.810473][ T7350] tc_dump_action: action bad kind
[   85.671528][ T7415] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[   85.677068][ T7414] IPVS: stopping master sync thread 7415 ...
[   85.848917][ T5916] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[   86.435189][  T792] IPVS: starting estimator thread 0...
[   86.461116][   T53] wlan1: Trigger new scan to find an IBSS to join
[   86.521149][ T7493] IPVS: using max 81 ests per chain, 194400 per kthread
[   86.914414][ T7540] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   86.926926][ T7540] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   87.204374][ T7560] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.207992][ T7560] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.214014][ T7570] __nla_validate_parse: 25 callbacks suppressed
[   87.214022][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.452'.
[   87.268567][ T7560] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   87.277359][ T7560] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.336502][ T7565] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[   87.340435][ T7565] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[   87.350977][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.356601][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.359514][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.374155][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   87.434653][ T7576] tap0: tun_chr_ioctl cmd 1074025677
[   87.437084][ T7576] tap0: linktype set to 805
[   87.496359][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.456'.
[   87.519957][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'.
[   87.978275][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.465'.
[   88.041018][ T7613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.467'.
[   88.064273][ T7615] netlink: 24 bytes leftover after parsing attributes in process `syz.2.468'.
[   88.146351][ T7622] netlink: 32 bytes leftover after parsing attributes in process `syz.2.470'.
[   88.150452][ T7622] netlink: 32 bytes leftover after parsing attributes in process `syz.2.470'.
[   88.434461][ T7650] netlink: 104 bytes leftover after parsing attributes in process `syz.0.480'.
[   88.438896][ T5916] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x9
[   88.543678][ T7656] netlink: 28 bytes leftover after parsing attributes in process `syz.1.482'.
[   89.486643][ T7692] validate_nla: 6 callbacks suppressed
[   89.486657][ T7692] netlink: 'syz.2.493': attribute type 1 has an invalid length.
[   91.228237][ T7791] netlink: 'syz.2.520': attribute type 1 has an invalid length.
[   92.133630][ T7750] Set syz1 is full, maxelem 65536 reached
[   92.595612][ T7839] __nla_validate_parse: 7 callbacks suppressed
[   92.595626][ T7839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.532'.
[   92.647867][ T7839] tipc: Started in network mode
[   92.650027][ T7839] tipc: Node identity , cluster identity 4711
[   92.653456][ T7839] tipc: Failed to obtain node identity
[   92.655952][ T7839] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   92.664639][ T7842] netlink: 112 bytes leftover after parsing attributes in process `syz.1.531'.
[   92.668509][ T7842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.531'.
[   92.970123][ T7856] netlink: 24 bytes leftover after parsing attributes in process `syz.1.536'.
[   92.977643][ T7856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.536'.
[   92.980630][ T7856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.536'.
[   93.242653][ T7878] netlink: 100 bytes leftover after parsing attributes in process `syz.1.543'.
[   93.245690][ T7878] netlink: 100 bytes leftover after parsing attributes in process `syz.1.543'.
[   93.497948][ T7909] veth1_to_batadv: entered allmulticast mode
[   93.505443][ T7909] bond_slave_1: entered promiscuous mode
[   93.516141][ T7908] bond_slave_1: left promiscuous mode
[   93.521440][ T7908] veth1_to_batadv: left allmulticast mode
[   93.623091][ T7920] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:0
[   93.649634][ T7923] netlink: 'syz.1.551': attribute type 1 has an invalid length.
[   93.653364][ T7923] netlink: 'syz.1.551': attribute type 1 has an invalid length.
[   93.656900][ T7923] netlink: 'syz.1.551': attribute type 1 has an invalid length.
[   93.659687][ T7923] netlink: 'syz.1.551': attribute type 1 has an invalid length.
[   93.663279][ T7923] netlink: 'syz.1.551': attribute type 1 has an invalid length.
[   93.666071][ T7923] netlink: 'syz.1.551': attribute type 1 has an invalid length.
[   93.668981][ T7923] netlink: 'syz.1.551': attribute type 1 has an invalid length.
[   93.672716][ T7923] netlink: 'syz.1.551': attribute type 1 has an invalid length.
[   93.866374][ T7948] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   94.020951][ T7967] netlink: 16 bytes leftover after parsing attributes in process `syz.0.562'.
[   94.148986][ T7969] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   94.547199][ T8020] netlink: 44 bytes leftover after parsing attributes in process `syz.2.575'.
[   94.824996][ T8047] validate_nla: 57 callbacks suppressed
[   94.825006][ T8047] netlink: 'syz.1.584': attribute type 5 has an invalid length.
[   94.848702][ T8045] netlink: 'syz.1.584': attribute type 5 has an invalid length.
[   95.785315][ T8083] netlink: 'syz.2.598': attribute type 4 has an invalid length.
[   96.680261][ T8132] ip6tnl1: entered promiscuous mode
[   96.792878][ T8134] syz.1.615 uses old SIOCAX25GETINFO
[   97.964770][ T8180] netlink: 'syz.1.627': attribute type 11 has an invalid length.
[   98.295491][ T8194] __nla_validate_parse: 13 callbacks suppressed
[   98.295502][ T8194] netlink: 104 bytes leftover after parsing attributes in process `syz.1.631'.
[   98.316073][ T8194] netlink: 104 bytes leftover after parsing attributes in process `syz.1.631'.
[   98.321029][ T8194] netlink: 104 bytes leftover after parsing attributes in process `syz.1.631'.
[   98.325091][ T8194] netlink: 104 bytes leftover after parsing attributes in process `syz.1.631'.
[   98.329678][ T8194] netlink: 104 bytes leftover after parsing attributes in process `syz.1.631'.
[   98.334394][ T8194] netlink: 104 bytes leftover after parsing attributes in process `syz.1.631'.
[   98.338487][ T8194] netlink: 104 bytes leftover after parsing attributes in process `syz.1.631'.
[   98.341759][ T8194] netlink: 104 bytes leftover after parsing attributes in process `syz.1.631'.
[   98.345038][ T8194] netlink: 104 bytes leftover after parsing attributes in process `syz.1.631'.
[   98.348845][ T8194] netlink: 104 bytes leftover after parsing attributes in process `syz.1.631'.
[   98.622310][ T8215] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[   98.756053][ T5712] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[   99.049754][ T5712] tipc: Subscription rejected, illegal request
[   99.444424][ T8272] geneve2: entered promiscuous mode
[   99.447919][ T5712] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.453015][ T5712] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.456313][ T5712] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.460215][ T5712] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.822872][ T8253] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  100.763539][ T8303] netlink: 'syz.1.658': attribute type 1 has an invalid length.
[  100.766012][ T8303] netlink: 'syz.1.658': attribute type 4 has an invalid length.
[  100.771508][ T8303] Bluetooth: MGMT ver 1.23
[  103.943075][ T8346] __nla_validate_parse: 36 callbacks suppressed
[  103.943085][ T8346] netlink: 40 bytes leftover after parsing attributes in process `syz.2.670'.
[  103.947975][ T8346] netlink: 40 bytes leftover after parsing attributes in process `syz.2.670'.
[  104.073891][ T8365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.675'.
[  104.076863][ T8366] netlink: 20 bytes leftover after parsing attributes in process `syz.2.675'.
[  104.119698][ T8367] netlink: 16 bytes leftover after parsing attributes in process `syz.0.674'.
[  104.158021][ T8372] netlink: 36 bytes leftover after parsing attributes in process `syz.0.676'.
[  104.161178][ T8372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.676'.
[  104.167589][ T8372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.676'.
[  104.828235][ T8429] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.692'.
[  104.890248][ T8441] netlink: 176 bytes leftover after parsing attributes in process `syz.2.695'.
[  104.953309][ T8448] openvswitch: netlink: IP tunnel TTL not specified.
[  105.013309][   T13] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  105.415274][ T8502] netlink: 'syz.2.709': attribute type 3 has an invalid length.
[  106.204251][ T8537] netlink: 'syz.1.714': attribute type 1 has an invalid length.
[  106.229246][ T8537] 8021q: adding VLAN 0 to HW filter on device bond1
[  106.543956][ T8559] netlink: 'syz.0.723': attribute type 4 has an invalid length.
[  106.551922][ T8559] netlink: 'syz.0.723': attribute type 4 has an invalid length.
[  107.006169][ T8578] netlink: 'syz.2.728': attribute type 3 has an invalid length.
[  107.008989][ T8578] netlink: 'syz.2.728': attribute type 3 has an invalid length.
[  107.047472][ T8582] tun0: tun_chr_ioctl cmd 2147767520
[  107.049309][ T8582] tun0: tun_chr_ioctl cmd 2147767520
[  107.376948][ T8607] tc_dump_action: action bad kind
[  107.480078][ T8621] netlink: 'syz.2.741': attribute type 1 has an invalid length.
[  107.954854][ T8660] tipc: Cannot configure node identity twice
[  108.426708][ T8667] pim6reg: entered allmulticast mode
[  108.429753][ T8667] pim6reg: left allmulticast mode
[  110.844553][ T8668] __nla_validate_parse: 18 callbacks suppressed
[  110.844567][ T8668] netlink: 16 bytes leftover after parsing attributes in process `syz.2.753'.
[  110.920674][ T8673] netlink: 24 bytes leftover after parsing attributes in process `syz.0.755'.
[  110.948717][ T8673] netlink: 'syz.0.755': attribute type 1 has an invalid length.
[  110.957224][ T8673] netlink: 224 bytes leftover after parsing attributes in process `syz.0.755'.
[  111.159379][ T8685] netlink: 'syz.0.757': attribute type 13 has an invalid length.
[  111.166618][ T8685] netlink: 'syz.0.757': attribute type 17 has an invalid length.
[  111.171479][ T8685] netlink: 'syz.0.757': attribute type 27 has an invalid length.
[  111.288499][ T8697] netlink: 'syz.1.759': attribute type 4 has an invalid length.
[  111.409058][ T8705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.761'.
[  111.960705][ T8757] netlink: 88 bytes leftover after parsing attributes in process `syz.0.773'.
[  111.965656][ T8759] netlink: 'syz.1.774': attribute type 12 has an invalid length.
[  112.169039][ T8772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.779'.
[  112.176234][ T8772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.779'.
[  112.198791][ T8774] netlink: 20 bytes leftover after parsing attributes in process `syz.0.780'.
[  112.202410][ T8776] netlink: 52 bytes leftover after parsing attributes in process `syz.2.781'.
[  112.207868][ T8776] netlink: 'syz.2.781': attribute type 1 has an invalid length.
[  112.212822][ T8777] netlink: 52 bytes leftover after parsing attributes in process `syz.2.781'.
[  112.216940][ T8777] netlink: 'syz.2.781': attribute type 1 has an invalid length.
[  112.276036][ T8782] mac80211_hwsim hwsim5 wlan0: left promiscuous mode
[  112.278844][ T8782] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  112.287255][ T8782] ip6tnl1: left promiscuous mode
[  112.424942][ T8799] netlink: 'syz.1.787': attribute type 12 has an invalid length.
[  112.725932][ T8817] sctp: [Deprecated]: syz.0.793 (pid 8817) Use of int in max_burst socket option deprecated.
[  112.725932][ T8817] Use struct sctp_assoc_value instead
[  113.090038][ T8839] pim6reg1: entered promiscuous mode
[  113.091919][ T8839] pim6reg1: entered allmulticast mode
[  113.196003][ T8845] syzkaller1: entered promiscuous mode
[  113.197978][ T8845] syzkaller1: entered allmulticast mode
[  113.479986][ T8872] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  113.487013][ T8874] netlink: 'syz.0.805': attribute type 1 has an invalid length.
[  113.609207][ T8880] netlink: 'syz.2.807': attribute type 4 has an invalid length.
[  113.729110][ T8904] openvswitch: netlink: EtherType 0 is less than min 600
[  113.772881][ T8908] ip6tnl1: left allmulticast mode
[  114.508124][ T8941] netlink: 'syz.0.823': attribute type 3 has an invalid length.
[  114.625753][ T8953] netlink: 'syz.1.827': attribute type 3 has an invalid length.
[  114.631280][ T8913] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  115.661086][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  115.729804][ T8981] openvswitch: netlink: Key type 15888 is out of range max 32
[  116.297884][ T9002] netlink: 'syz.0.841': attribute type 12 has an invalid length.
[  116.545328][ T9025] __nla_validate_parse: 19 callbacks suppressed
[  116.545338][ T9025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.849'.
[  116.719620][ T9032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.848'.
[  116.732257][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.848'.
[  117.319896][ T9039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.852'.
[  117.609784][ T9065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.858'.
[  117.617023][ T9065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.858'.
[  117.622834][ T9076] netlink: 20 bytes leftover after parsing attributes in process `syz.2.861'.
[  117.707597][ T9063] netlink: 40 bytes leftover after parsing attributes in process `syz.1.859'.
[  117.719227][ T9063] ipip0: entered promiscuous mode
[  117.748948][ T9084] netlink: 24 bytes leftover after parsing attributes in process `syz.0.863'.
[  117.864484][ T9084] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.863'.
[  118.241716][ T9128] netlink: 'syz.2.877': attribute type 4 has an invalid length.
[  118.339061][ T9140] tc_dump_action: action bad kind
[  118.406767][ T9145] netem: change failed
[  118.479346][ T9149] team0: Port device team_slave_0 removed
[  118.560106][ T9154] netlink: 'syz.2.885': attribute type 9 has an invalid length.
[  119.060893][ T9160] netlink: 'syz.0.887': attribute type 15 has an invalid length.
[  119.103535][ T9162] netlink: 'syz.0.888': attribute type 5 has an invalid length.
[  119.189202][ T9164] netlink: 'syz.0.889': attribute type 1 has an invalid length.
[  119.212282][ T9164] 8021q: adding VLAN 0 to HW filter on device bond1
[  119.221173][ T9164] bond1: (slave wlan0): Enslaving as an active interface with a down link
[  119.860568][ T9203] netlink: 'syz.2.898': attribute type 3 has an invalid length.
[  120.203192][ T9224] syzkaller0: entered promiscuous mode
[  120.205726][ T9224] syzkaller0: entered allmulticast mode
[  120.298740][ T9227] syzkaller0: entered promiscuous mode
[  120.301303][ T9227] syzkaller0: entered allmulticast mode
[  120.714531][ T9262] netlink: 'syz.0.912': attribute type 10 has an invalid length.
[  120.720310][ T9262] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  120.737670][ T9262] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  120.743296][ T9262] netlink: 'syz.0.912': attribute type 12 has an invalid length.
[  120.748871][   T33] audit: type=1804 audit(1756736896.399:2): pid=9262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.912" name="/newroot/298/memory.events" dev="tmpfs" ino=1532 res=1 errno=0
[  120.756535][   T33] audit: type=1800 audit(1756736896.399:3): pid=9262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.912" name="memory.events" dev="tmpfs" ino=1532 res=0 errno=0
[  120.793643][ T9264] netlink: 'syz.0.913': attribute type 21 has an invalid length.
[  121.088464][ T9284] lo speed is unknown, defaulting to 1000
[  121.090501][ T9284] lo speed is unknown, defaulting to 1000
[  121.093692][ T9284] lo speed is unknown, defaulting to 1000
[  121.103503][ T9284] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  121.122840][ T9284] lo speed is unknown, defaulting to 1000
[  121.126053][ T9284] lo speed is unknown, defaulting to 1000
[  121.131727][ T9284] lo speed is unknown, defaulting to 1000
[  121.341343][ T9297] lo speed is unknown, defaulting to 1000
[  121.350021][ T9299] ksmbd: Unknown IPC event: 3, ignore.
[  121.554592][ T9320] Bluetooth: MGMT ver 1.23
[  121.580579][ T9320] lo speed is unknown, defaulting to 1000
[  121.674749][ T9325] __nla_validate_parse: 19 callbacks suppressed
[  121.674758][ T9325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.929'.
[  121.783557][ T9332] netlink: 44 bytes leftover after parsing attributes in process `syz.2.931'.
[  121.799951][ T9332] syzkaller0: entered promiscuous mode
[  121.802137][ T9332] syzkaller0: entered allmulticast mode
[  121.841721][ T9344] netlink: 'syz.1.934': attribute type 74 has an invalid length.
[  121.965785][ T9351] netlink: 24 bytes leftover after parsing attributes in process `syz.1.936'.
[  122.036622][ T9355] lo speed is unknown, defaulting to 1000
[  122.101270][ T9360] netlink: 16 bytes leftover after parsing attributes in process `syz.1.938'.
[  122.110410][ T9358] netlink: 16 bytes leftover after parsing attributes in process `syz.1.938'.
[  122.286702][ T9373] lo speed is unknown, defaulting to 1000
[  122.349946][ T9386] lo speed is unknown, defaulting to 1000
[  122.379938][ T9374] lo speed is unknown, defaulting to 1000
[  122.440796][ T9393] netlink: 48 bytes leftover after parsing attributes in process `syz.0.944'.
[  122.451652][ T9393] netlink: 48 bytes leftover after parsing attributes in process `syz.0.944'.
[  122.472695][ T9396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.944'.
[  122.685855][ T9403] lo speed is unknown, defaulting to 1000
[  122.715702][ T9399] lo speed is unknown, defaulting to 1000
[  122.817304][ T9412] netlink: 'syz.1.948': attribute type 1 has an invalid length.
[  122.832796][ T9412] 8021q: adding VLAN 0 to HW filter on device bond2
[  122.840262][ T9412] bond2: (slave geneve2): making interface the new active one
[  122.845406][ T9412] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  122.848946][ T5712] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.853243][ T5712] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.856039][ T5712] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.861636][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.070348][ T9435] lo speed is unknown, defaulting to 1000
[  123.079867][ T9434] lo speed is unknown, defaulting to 1000
[  123.219527][ T9441] netlink: 'syz.1.953': attribute type 1 has an invalid length.
[  123.224233][ T9441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.953'.
[  123.319602][ T9443] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.954'.
[  123.513196][ T9452] ip6_vti0: entered allmulticast mode
[  123.525043][ T9451] dvmrp8: entered allmulticast mode
[  123.545380][ T9451] dvmrp8: left allmulticast mode
[  123.726926][   T13] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  124.004887][ T9491] tun0: tun_chr_ioctl cmd 2147767520
[  124.007048][ T9490] tun0: tun_chr_ioctl cmd 2147767520
[  124.437644][ T9517] netlink: 'syz.1.973': attribute type 10 has an invalid length.
[  124.759847][ T9529] netlink: 'syz.1.979': attribute type 1 has an invalid length.
[  125.002423][ T9553] ip6gre2: entered allmulticast mode
[  125.025304][ T9555] lo speed is unknown, defaulting to 1000
[  125.104809][ T9555] netlink: 'syz.0.985': attribute type 1 has an invalid length.
[  125.510020][ T9580] tc_dump_action: action bad kind
[  125.606898][ T9584] .70: renamed from hsr0
[  125.610335][ T9584] .70: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  125.613995][ T9584] .70: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  125.617309][ T9584] .70: entered allmulticast mode
[  125.618986][ T9584] hsr_slave_0: entered allmulticast mode
[  125.622147][ T9584] hsr_slave_1: entered allmulticast mode
[  125.624889][ T9584] A link change request failed with some changes committed already. Interface .70 may have been left with an inconsistent configuration, please check.
[  125.725703][ T9595] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  125.728045][ T9595] tipc: Enabled bearer <udp:syz2>, priority 10
[  125.861148][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  125.869825][ T9611] lo speed is unknown, defaulting to 1000
[  126.000821][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  126.009843][ T9619] lo speed is unknown, defaulting to 1000
[  126.140946][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  126.280905][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  126.397151][ T9650] lo speed is unknown, defaulting to 1000
[  126.399659][ T9650] lo speed is unknown, defaulting to 1000
[  126.420924][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  126.493630][ T9650] lo speed is unknown, defaulting to 1000
[  126.524718][ T9651] netlink: 'syz.2.1007': attribute type 4 has an invalid length.
[  126.528297][ T9650] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  126.546649][ T9650] lo speed is unknown, defaulting to 1000
[  126.553311][ T9650] lo speed is unknown, defaulting to 1000
[  126.556097][ T9650] lo speed is unknown, defaulting to 1000
[  126.560982][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  126.565374][ T9650] lo speed is unknown, defaulting to 1000
[  126.700918][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  126.717377][ T9668] netlink: 'syz.2.1012': attribute type 3 has an invalid length.
[  126.722412][ T9668] ip6_vti0: left allmulticast mode
[  126.736544][ T9669] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  126.770265][ T9675] __nla_validate_parse: 27 callbacks suppressed
[  126.770278][ T9675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1013'.
[  126.779390][ T9673] 8021q: adding VLAN 0 to HW filter on device bond0
[  126.784366][ T9673] 8021q: adding VLAN 0 to HW filter on device team0
[  126.788210][ T9673] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  126.794959][    T9] lo speed is unknown, defaulting to 1000
[  126.798487][    T9] syz2: Port: 1 Link ACTIVE
[  126.806231][ T9676] netlink: 'syz.1.1013': attribute type 1 has an invalid length.
[  126.836201][ T9679] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1014'.
[  126.839013][ T9679] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1014'.
[  126.842135][    T9] tipc: Node number set to 4257959528
[  126.893230][ T9685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1014'.
[  126.920089][ T9683] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1016'.
[  126.924132][ T9683] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1016'.
[  127.019509][ T9701] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1021'.
[  127.039596][ T9701] netlink: 'syz.0.1021': attribute type 10 has an invalid length.
[  127.092977][ T9705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1022'.
[  127.279081][ T9724] lo speed is unknown, defaulting to 1000
[  127.283750][ T9724] lo speed is unknown, defaulting to 1000
[  127.293743][ T9727] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  127.556731][ T9733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1027'.
[  127.853969][ T9742] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1029'.
[  128.098869][ T9754] netlink: 'syz.1.1032': attribute type 10 has an invalid length.
[  128.127453][ T9754] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  128.187338][ T9759] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  128.349886][ T9775] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  128.354956][ T9775] syzkaller0: entered promiscuous mode
[  128.357381][ T9775] syzkaller0: entered allmulticast mode
[  128.379308][ T9771] batadv_slave_0: entered promiscuous mode
[  128.389307][ T9774] tipc: Resetting bearer <eth:syzkaller0>
[  128.404056][ T9774] tipc: Disabling bearer <eth:syzkaller0>
[  128.593715][ T9787] pim6reg1: entered promiscuous mode
[  128.595872][ T9787] pim6reg1: entered allmulticast mode
[  128.607921][ T9795] netlink: 'syz.1.1044': attribute type 21 has an invalid length.
[  128.611331][ T9795] netlink: 'syz.1.1044': attribute type 22 has an invalid length.
[  128.614459][ T9795] netlink: 'syz.1.1044': attribute type 23 has an invalid length.
[  128.618076][ T9795] netlink: 'syz.1.1044': attribute type 25 has an invalid length.
[  128.628411][ T9795] netlink: 'syz.1.1044': attribute type 26 has an invalid length.
[  128.953690][ T9815] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1171756264/1171756266
[  128.957901][ T9815] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1171756264/1171756266
[  128.961328][ T9815] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1171756264/1171756266
[  129.097981][ T9836] ieee802154 phy1 wpan1: encryption failed: -22
[  129.146031][ T9844] lo speed is unknown, defaulting to 1000
[  129.149122][ T9844] lo speed is unknown, defaulting to 1000
[  129.327971][ T9862] netlink: 'syz.0.1063': attribute type 13 has an invalid length.
[  129.421722][ T9876] tun0: tun_chr_ioctl cmd 2147767520
[  129.447821][ T9878] bridge0: Device is already in use.
[  129.777076][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.780034][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.785974][ T9900] lo speed is unknown, defaulting to 1000
[  129.799180][ T9903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  129.805089][ T9903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  129.809834][ T9903] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  129.816487][ T9903] bond0 (unregistering): Released all slaves
[  129.832560][ T9900] lo speed is unknown, defaulting to 1000
[  129.835030][ T9901] lo speed is unknown, defaulting to 1000
[  129.839310][ T9901] lo speed is unknown, defaulting to 1000
[  130.143939][ T9920] netlink: 'syz.0.1082': attribute type 2 has an invalid length.
[  130.154994][ T9920] : entered promiscuous mode
[  130.203308][ T9924] lo speed is unknown, defaulting to 1000
[  130.206820][ T9924] lo speed is unknown, defaulting to 1000
[  130.486587][ T9959] lo speed is unknown, defaulting to 1000
[  130.489584][ T9959] lo speed is unknown, defaulting to 1000
[  130.496499][ T9962] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  130.643954][   T13] net_ratelimit: 12 callbacks suppressed
[  130.643967][   T13] bond1: (slave wlan0): failed to get link speed/duplex
[  130.771529][ T5916] bond1: (slave wlan0): failed to get link speed/duplex
[  130.880981][   T13] bond1: (slave wlan0): failed to get link speed/duplex
[  130.941064][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  130.991020][ T5916] bond1: (slave wlan0): failed to get link speed/duplex
[  131.101791][ T5916] bond1: (slave wlan0): failed to get link speed/duplex
[  131.211760][   T13] bond1: (slave wlan0): failed to get link speed/duplex
[  131.236516][ T9987] lo speed is unknown, defaulting to 1000
[  131.239791][ T9987] lo speed is unknown, defaulting to 1000
[  131.327484][ T5916] bond1: (slave wlan0): failed to get link speed/duplex
[  131.338205][ T9995] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  131.345031][   T24] lo speed is unknown, defaulting to 1000
[  131.424980][T10001] netlink: 'syz.2.1107': attribute type 3 has an invalid length.
[  131.431697][ T5916] bond1: (slave wlan0): failed to get link speed/duplex
[  131.577624][T10013] veth1: entered promiscuous mode
[  131.579436][T10013] veth1: entered allmulticast mode
[  131.637503][T10023] lo speed is unknown, defaulting to 1000
[  131.642279][T10023] lo speed is unknown, defaulting to 1000
[  131.690463][T10029] ieee802154 phy1 wpan1: encryption failed: -22
[  131.758022][T10036] lo speed is unknown, defaulting to 1000
[  131.768964][T10036] lo speed is unknown, defaulting to 1000
[  131.868854][T10048] lo speed is unknown, defaulting to 1000
[  131.874467][T10048] lo speed is unknown, defaulting to 1000
[  131.938138][T10056] __nla_validate_parse: 23 callbacks suppressed
[  131.938148][T10056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1122'.
[  132.079160][T10070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1126'.
[  132.088989][T10070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1126'.
[  132.104498][T10071] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1125'.
[  132.137895][T10071] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1125'.
[  132.383592][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.736291][T10078] lo speed is unknown, defaulting to 1000
[  132.739499][T10078] lo speed is unknown, defaulting to 1000
[  132.888396][T10089] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1130'.
[  132.943151][T10091] lo speed is unknown, defaulting to 1000
[  132.946155][T10091] lo speed is unknown, defaulting to 1000
[  133.047279][T10095] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1132'.
[  133.056733][T10095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1132'.
[  133.115441][T10101] lo speed is unknown, defaulting to 1000
[  133.143921][T10101] lo speed is unknown, defaulting to 1000
[  133.839874][T10157] validate_nla: 1 callbacks suppressed
[  133.839883][T10157] netlink: 'syz.1.1149': attribute type 5 has an invalid length.
[  133.950399][T10171] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1154'.
[  133.959338][T10171] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1154'.
[  133.977947][T10173] syzkaller0: entered promiscuous mode
[  133.979892][T10173] syzkaller0: entered allmulticast mode
[  134.024236][T10183] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  134.067501][T10186] lo speed is unknown, defaulting to 1000
[  134.074316][T10186] lo speed is unknown, defaulting to 1000
[  134.100509][T10189] lo speed is unknown, defaulting to 1000
[  134.103971][T10189] lo speed is unknown, defaulting to 1000
[  134.177262][T10194] tun0: tun_chr_ioctl cmd 2147767520
[  134.362871][T10210] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.374492][T10210] tipc: Resetting bearer <eth:syzkaller0>
[  134.633832][T10222] team1: entered promiscuous mode
[  134.636212][T10222] team1: entered allmulticast mode
[  134.638936][T10222] 8021q: adding VLAN 0 to HW filter on device team1
[  134.768337][T10233] netlink: 'syz.2.1172': attribute type 5 has an invalid length.
[  134.771834][T10233] netlink: 'syz.2.1172': attribute type 6 has an invalid length.
[  134.804534][T10235] ip6_vti0: entered allmulticast mode
[  134.857295][T10236] ip6_vti0: left allmulticast mode
[  134.963929][T10252] netlink: 'syz.1.1179': attribute type 10 has an invalid length.
[  134.967468][T10252] 8021q: adding VLAN 0 to HW filter on device team0
[  134.973120][T10252] bond0: (slave team0): Enslaving as an active interface with an up link
[  135.128195][T10203] tipc: Disabling bearer <eth:syzkaller0>
[  135.213026][T10260] veth1: left promiscuous mode
[  135.215867][T10260] veth1: left allmulticast mode
[  135.224439][T10260] .70: left allmulticast mode
[  135.226176][T10260] hsr_slave_0: left allmulticast mode
[  135.228287][T10260] hsr_slave_1: left allmulticast mode
[  135.237773][T10260] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  135.241920][T10260] geneve2: left promiscuous mode
[  135.253183][  T792] lo speed is unknown, defaulting to 1000
[  135.257647][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.262902][  T792] syz1: Port: 1 Link DOWN
[  135.267376][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.271375][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.274692][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  135.286991][T10268] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  135.310172][T10278] netlink: 'syz.0.1184': attribute type 12 has an invalid length.
[  135.433732][T10291] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1157298291/1157298293
[  135.492574][T10294] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1157298291/1157298293
[  135.496740][T10294] tipc: Failed to remove unknown binding: 66,1,1/2886997162:1157298291/1157298293
[  136.151123][    C0] net_ratelimit: 35 callbacks suppressed
[  136.151138][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  136.382660][T10311] lo speed is unknown, defaulting to 1000
[  136.386306][T10311] lo speed is unknown, defaulting to 1000
[  136.518696][T10315] lo speed is unknown, defaulting to 1000
[  136.521702][T10315] lo speed is unknown, defaulting to 1000
[  137.155569][T10355] __nla_validate_parse: 25 callbacks suppressed
[  137.155585][T10355] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1206'.
[  137.190861][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  138.217221][T10381] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1214'.
[  138.220967][    C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  138.255150][T10376] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1213'.
[  138.303527][T10389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1215'.
[  138.313574][T10389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1215'.
[  138.335787][ T5712] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  138.341207][T10395] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1217'.
[  138.346123][ T5712] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  138.349183][ T5712] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  138.349186][T10389] lo speed is unknown, defaulting to 1000
[  138.353324][ T5712] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  138.369110][T10389] lo speed is unknown, defaulting to 1000
[  138.374385][T10397] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1218'.
[  138.383874][T10398] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1218'.
[  138.505110][T10403] lo speed is unknown, defaulting to 1000
[  138.508312][T10403] lo speed is unknown, defaulting to 1000
[  138.518340][T10414] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1220'.
[  138.583353][T10414] bridge0: port 3(batadv1) entered blocking state
[  138.590154][T10414] bridge0: port 3(batadv1) entered disabled state
[  138.595246][T10414] batadv1: entered allmulticast mode
[  138.597804][T10414] batadv1: entered promiscuous mode
[  138.695451][T10425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1224'.
[  138.699196][T10425] openvswitch: netlink: Flow key attr not present in new flow.
[  138.992120][T10444] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  138.997033][T10444] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  139.001522][T10444] CPU: 0 UID: 0 PID: 10444 Comm: syz.1.1230 Not tainted syzkaller #0 PREEMPT(full) 
[  139.005461][T10444] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  139.009667][T10444] RIP: 0010:xfrm_alloc_spi+0xe0e/0xf30
[  139.011903][T10444] Code: 00 fc ff df 80 3c 03 00 4c 8b 34 24 74 08 4c 89 f7 e8 06 e4 00 f8 4d 8b 36 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 48 8b 5c 24 58 74 08 4c 89 f7 e8 cf e4 00 f8 4d 89 3e
[  139.019752][T10444] RSP: 0018:ffffc90002c2f0e0 EFLAGS: 00010246
[  139.022205][T10444] RAX: 0000000000000000 RBX: 1ffff110047e7d16 RCX: dffffc0000000000
[  139.025488][T10444] RDX: ffffc900044aa000 RSI: 00000000000001a8 RDI: 00000000000001a9
[  139.028770][T10444] RBP: ffffc90002c2f230 R08: ffff888026e25640 R09: 0000000000000002
[  139.031995][T10444] R10: 000000000000000a R11: 0000000000000002 R12: 1ffff110047e7806
[  139.035299][T10444] R13: ffff888023f3e8b0 R14: 0000000000000000 R15: ffff888023f3e8a8
[  139.038488][T10444] FS:  00007f4ecc80b6c0(0000) GS:ffff8880b8614000(0000) knlGS:0000000000000000
[  139.042217][T10444] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  139.044986][T10444] CR2: 0000000000000004 CR3: 0000000031f5e000 CR4: 00000000000006f0
[  139.048319][T10444] Call Trace:
[  139.049777][T10444]  <TASK>
[  139.051004][T10444]  ? xfrm_alloc_spi+0x2a0/0xf30
[  139.053081][T10444]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  139.055289][T10444]  ? xfrm_find_acq+0x87/0xa0
[  139.057283][T10444]  xfrm_alloc_userspi+0x70b/0xc90
[  139.059349][T10444]  ? apparmor_capable+0x137/0x1b0
[  139.061434][T10444]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  139.063744][T10444]  ? __nla_parse+0x40/0x60
[  139.065627][T10444]  xfrm_user_rcv_msg+0x7a3/0xab0
[  139.067729][T10444]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  139.069969][T10444]  ? __pfx___mutex_trylock_common+0x10/0x10
[  139.072340][T10444]  ? rcu_is_watching+0x15/0xb0
[  139.074337][T10444]  ? trace_contention_end+0x39/0x120
[  139.076502][T10444]  ? __mutex_lock+0x335/0x1350
[  139.078399][T10444]  netlink_rcv_skb+0x208/0x470
[  139.080290][T10444]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  139.082529][T10444]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  139.084671][T10444]  ? netlink_deliver_tap+0x2e/0x1b0
[  139.086860][T10444]  ? netlink_deliver_tap+0x2e/0x1b0
[  139.089120][T10444]  xfrm_netlink_rcv+0x79/0x90
[  139.091066][T10444]  netlink_unicast+0x82f/0x9e0
[  139.093107][T10444]  ? __pfx_netlink_unicast+0x10/0x10
[  139.095336][T10444]  ? netlink_sendmsg+0x642/0xb30
[  139.097424][T10444]  ? skb_put+0x11b/0x210
[  139.099221][T10444]  netlink_sendmsg+0x805/0xb30
[  139.101211][T10444]  ? __pfx_netlink_sendmsg+0x10/0x10
[  139.103404][T10444]  ? aa_sock_msg_perm+0xf1/0x1d0
[  139.105447][T10444]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  139.107590][T10444]  ? __pfx_netlink_sendmsg+0x10/0x10
[  139.109716][T10444]  __sock_sendmsg+0x21c/0x270
[  139.111723][T10444]  ____sys_sendmsg+0x505/0x830
[  139.113693][T10444]  ? __pfx_____sys_sendmsg+0x10/0x10
[  139.115884][T10444]  ? import_iovec+0x74/0xa0
[  139.117773][T10444]  ___sys_sendmsg+0x21f/0x2a0
[  139.119744][T10444]  ? __pfx____sys_sendmsg+0x10/0x10
[  139.121916][T10444]  ? __fget_files+0x2a/0x420
[  139.123840][T10444]  ? __fget_files+0x3a0/0x420
[  139.125800][T10444]  __x64_sys_sendmsg+0x19b/0x260
[  139.127813][T10444]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  139.130071][T10444]  ? rcu_is_watching+0x15/0xb0
[  139.132033][T10444]  ? do_syscall_64+0xbe/0x3b0
[  139.133946][T10444]  do_syscall_64+0xfa/0x3b0
[  139.135803][T10444]  ? lockdep_hardirqs_on+0x9c/0x150
[  139.137926][T10444]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.140439][T10444]  ? exc_page_fault+0x9f/0xf0
[  139.142457][T10444]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.144899][T10444] RIP: 0033:0x7f4ecb98ebe9
[  139.146794][T10444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  139.154639][T10444] RSP: 002b:00007f4ecc80b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  139.158116][T10444] RAX: ffffffffffffffda RBX: 00007f4ecbbc5fa0 RCX: 00007f4ecb98ebe9
[  139.161421][T10444] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000045
[  139.164746][T10444] RBP: 00007f4ecba11e19 R08: 0000000000000000 R09: 0000000000000000
[  139.168102][T10444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  139.171435][T10444] R13: 00007f4ecbbc6038 R14: 00007f4ecbbc5fa0 R15: 00007fffe5488418
[  139.174668][T10444]  </TASK>
[  139.175966][T10444] Modules linked in:
[  139.177795][T10444] ---[ end trace 0000000000000000 ]---
[  139.180090][T10444] RIP: 0010:xfrm_alloc_spi+0xe0e/0xf30
[  139.182448][T10444] Code: 00 fc ff df 80 3c 03 00 4c 8b 34 24 74 08 4c 89 f7 e8 06 e4 00 f8 4d 8b 36 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 48 8b 5c 24 58 74 08 4c 89 f7 e8 cf e4 00 f8 4d 89 3e
[  139.190204][T10444] RSP: 0018:ffffc90002c2f0e0 EFLAGS: 00010246
[  139.192868][T10444] RAX: 0000000000000000 RBX: 1ffff110047e7d16 RCX: dffffc0000000000
[  139.196147][T10444] RDX: ffffc900044aa000 RSI: 00000000000001a8 RDI: 00000000000001a9
[  139.199438][T10444] RBP: ffffc90002c2f230 R08: ffff888026e25640 R09: 0000000000000002
[  139.202785][T10444] R10: 000000000000000a R11: 0000000000000002 R12: 1ffff110047e7806
[  139.206017][T10444] R13: ffff888023f3e8b0 R14: 0000000000000000 R15: ffff888023f3e8a8
[  139.209320][T10444] FS:  00007f4ecc80b6c0(0000) GS:ffff8880b8614000(0000) knlGS:0000000000000000
[  139.213028][T10444] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  139.215743][T10444] CR2: 0000000000000004 CR3: 0000000031f5e000 CR4: 00000000000006f0
[  139.219100][T10444] Kernel panic - not syncing: Fatal exception in interrupt
[  139.222798][T10444] Kernel Offset: disabled
[  139.224590][T10444] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:28:34  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000d3e RDI=0000000000000d3f RBP=00000000000003f8 RSP=ffffc90002c2e910
R8 =ffff888106810237 R9 =1ffff11020d02046 R10=dffffc0000000000 R11=ffffffff854f3d80
R12=dffffc0000000000 R13=ffffffff99b018f8 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f3dfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f4ecc80b6c0 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000004 CR3=0000000031f5e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffff0000 ff00000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007f4ecc6fd100 00007f4ecbb97460 XMM05=00007f4ecbb97478 00007f4ecbb974c0
XMM06=00007f4ecbb974b8 00007f4ecbb974b0 XMM07=00007f4ecbb974a8 00007f4ecbb974a0
XMM08=0000000000000000 00007f4ecba12ee7 XMM09=0000000000000000 00007f4ecba12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=234ec6be79de4b00 RBX=ffffffff819683c8 RCX=234ec6be79de4b00 RDX=0000000000000001
RSI=ffffffff8be337e0 RDI=ffffffff819683c8 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa39330 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d2000
RIP=ffffffff8b7a33f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000056224cea17e8 CR3=0000000031f68000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=f6212687b7fc19bd b8d290e4b70da9e6
XMM02=e2cb1696bb40aa52 10f2b5c92032a329 XMM03=01e0b2c4506c439c 87cc8deac7eb3dae
XMM04=098e2c49c935357f 3ef0ece092e10808 XMM05=698aa2634997676b 3d6990e9276bee71
XMM06=6d5187b6d601e0b2 c4506c439c87cc8d XMM07=eac7eb3daee2cb16 96bb40aa5210f2b5
XMM08=0000000000000000 00007f8c2f412ee7 XMM09=0000000000000000 00007f8c2f412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
