last executing test programs:

1.503555104s ago: executing program 1 (id=1164):
r0 = socket(0xa, 0x3, 0x3)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x29}, 0x8)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000425bd7000fcdbdf253a00000065005b004a5a967cc79711c2c47336780d4dd76be1bed579dde009fb41cdaba29650ff864c22ec7ae4013bc26ed95cc7d29d6c2f7b63957e932425b9e9ab8049b2850ca9f45d1a560e8a0a8560de6c51d97011e79e55bbf2c99e92a5c691e379a3b38acbcb00000079005b00e1ab2a1213d9e7cc1ca08352812289bdde54dea5e92c4e1fc91c4431e32d9d67736172ad5e3de5328ba494ee0096a8ec86b5a67e7c3ad23e728be53dbc5fb508b51339e2fc69690c74c883e38318e0c1a2419d92e18553c04cc09277448321d8572570b6ba4ee195eebbd3d303410fe6da225d2f78000000"], 0xf8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xd, 0x2, 0x0, 0x8}}, @TCA_CT_ACTION={0x6, 0x3, 0x14}]}, {0x1f}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x0)

1.454801976s ago: executing program 0 (id=1165):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10)
sendto$inet6(r2, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000340), 0x8)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x0, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3, 0x8000}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x4000000, 0x2, 0x5ff, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x800}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x724a969d}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0xe, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x8510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x85c8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0xfffffffe}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1, 0x3c}, {}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x2004}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x5}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet(0xa, 0x801, 0x84) (async)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async)
listen(r1, 0x8) (async)
accept4(r1, 0x0, 0x0, 0x0) (async)
sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) (async)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) (async)
sendto$inet6(r2, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000340), 0x8) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x0, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3, 0x8000}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x4000000, 0x2, 0x5ff, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x800}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x724a969d}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0xe, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x8510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x85c8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0xfffffffe}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1, 0x3c}, {}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x2004}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x5}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) (async)

1.452437333s ago: executing program 1 (id=1166):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x20, 0x16, 0x0, 0x1, @SEG6_LOCAL_SRH={0x1c, 0x2, {0x87, 0x2, 0x4, 0x1, 0x0, 0x60, 0x6, [@remote]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4d0}, 0x4000050)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="b70200001000b15cbfa300000000000007030000f8ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b2314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8dd63d4b77b206000000000000e254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3813e2c25a61ec45c3af9948f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469600241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c12e28ef97d9ebd9c77f1774cf4683c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f011000000f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497a6103876843ee04ed9ff002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd1304202274f20675eb781925440578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b96508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e25c89b552d7fcd116bce9c764c714c9402c21d1aac59efb28d4f91652f6000000000000000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a575939206d0c0f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8000000edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db76cf059f40fa2640b6bfb74dd35391b8fa18479da9f4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847db97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b252a37ff7e0d45728fc1a6ec566981bc8ccfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000000000000000000003ba34b611569a451564d3a5400f9097ffe7a37e765be352be71ee24250d6828562c7e24cb763062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89a0000bde05c114e7a020fc1a5fd3eeeb822008b2d7d1cc062b51b0aca4956b557e51a1385cc572b0074b0950fb1437de2590bf99ec7ceb69e1fe2465fce099c992d57b804a22e148ae3411523814aee03ee2df877edfabf4aa94f07c6fdd127e57a8bf7975f2e606c25a299980a6e52fcf7849d45bb38573fbba8afef1aa7a24c805f7aee3e39a3000000000000000000000000000000000000878f88c4742ac490951c36c610a0d266588ec6a0bd300cf160b5a5d9e9fafa49ecc8430832d795e727b7fc2b76e7fc4141fdbb82f45d3cdd3fb8d4b443ab4954fdf5c1b9a6ab3e457f098329307ccb0a1989b6c37509692e952e7244f48bc12569ff8eb30d0f887b85b5ef44fb9a7571319190be0c226ed72f346cc4aa071ae0c72fa8bd00d5590c4f4ba65d0c8e1f4870fe3c414681e41b40163eb1aa2a7429a2208cd6e69c7d959e87da3fd0101159a03ab7fe78881ee7a1ee7a2edff75fb18a181e0c54352be2b7a5b5273198291c28d9141deeb3cdba5d414ae4b0000000000000000000000000009eacd83458d8a606be71970497a4fd4ca3b48ca482ab3804e2fac216b3ba613608b1a465456a33fd08491d337d7344c01cfc9e73bf1bca1cbec7614c8c3c76411e61fef6a93da8914490b50bd837d068e9bf8f3348794a44115d163b5ff85629b0a3ad4023448140770de2e5f262b9a50afcc210b8d8ea24b6dd7d068b356f53afaf89acae30935ec92657e37bf0821cbe612ac2aa7baf4d21ab373ea4fea57d0d9ac418862e791df3d1d85bb780fbfa401e09e3745d70174dd9ab52cdcadfd3454916408810090a19fa1cf0df6aa714fbcffbb7d6c7f45237df3296867725fd2bdbcd2f7ab10fea0fe85ce1137e775e4c01a136aed7f1d0d192a95be64bab53144ff3efd87fcb6421483e6a1690408712913dfb10a88201340c96dfd745a84dc177dd7a598ec015daa56eb0924e01df353a9ad69d0a59e40203018c82e74f39f8c4cb8823f0bfdfe170549e305628625f50"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00fe0000", 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r4, 0x10c, 0x8, &(0x7f0000000200)=0x7b8d, 0x4)
socket$kcm(0x29, 0x5, 0x0)
getsockopt$packet_int(r2, 0x107, 0xc, 0x0, &(0x7f0000000380))
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@gettaction={0x38, 0x32, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x10e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xa, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x8010)
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$netlink(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b00)={0x18, 0x5a, 0x30d, 0x0, 0x0, "", [@nested={0x4}, @nested={0x4, 0x2}]}, 0x18}], 0x1}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x45c}}, 0x0)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14)

1.393410771s ago: executing program 0 (id=1167):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = socket(0x8000000010, 0x2, 0x0)
write(r0, &(0x7f00000002c0)="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", 0xfc)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRESHEX], 0xa4}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000002100)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000000640)=ANY=[@ANYBLOB="00000000badc32412de630f63c26e033630da63a83bfb6f219af39ce7c866690595162bd3cbb95febb09a87054d90a8ad33f6e15d33f8219258d560dce19f222f47a01173e354816db0130168f99ac860e2d36421787f25ac86bdce8591a3cb5c78b4682baeacf579e35c862849f7b67cb5e73f1d37fbe511ec5d09971eacc2da28c25534c3df70244470ac53832e8e3805ea90955d8d0f78bc5935d02876fda711cb02743277d9ab209389024b48da7328c7b219b5f5ac1e7b3cade852af603e91041e41658e9c2d035a207e6d317b1b8504df258025282365cbce1ff84c0cd3d78a422cd692b959de446be5ae471cdb04eeb8b3a23b6163643a806f87093a68aa7dd7b948bf4128ad24c2cd4c82af4", @ANYRES16=0x0, @ANYBLOB="200029bd0000140003000000000000000000", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000002)
r4 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'})
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r5, @ANYRESHEX=r4, @ANYBLOB="0c00018008000100fe0f01000c0002"], 0x30}, 0x1, 0x0, 0x0, 0x20008004}, 0x0)
socket(0x2000000000000021, 0x2, 0x10000000000002)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @multicast2}}, 0x0, 0x0, 0xb, 0x0, "f6a7346a1ca3caf66200f0e70b995efa20d5ddc09c0bc0c88e00bdea5e6998967d569964c8b68dae57dea91c0e3ef03a96483bcaaa5ab222d1993083e8e3619fbbff30da0288a8b78a3f921c40fdc06a"}, 0xd8)
close(0x4)
sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x1, 0x20008000)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$can_bcm(0x1d, 0x2, 0x2)
socket(0x840000000002, 0x3, 0xf8)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$igmp6(0xa, 0x3, 0x2)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="f9a7ab"], 0x44}}, 0x0)

1.324736536s ago: executing program 1 (id=1168):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = socket(0x400000000010, 0x3, 0x0) (async)
r2 = socket$unix(0x1, 0x1, 0x0) (async)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000000))
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0}) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) (async)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'wlan1\x00'}}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0xfffffffffffffdbc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async)
close(0x4)
r6 = socket$inet(0x2, 0x3, 0x30)
getsockopt$inet_mreqsrc(r6, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) (async)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000240)={'wpan0\x00', <r9=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r7, 0xc01, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40010) (async)
r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), r11) (async)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r14=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r11, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000380)={0x4c, r12, 0x1d, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4000040)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r3, r10, 0x80, 0x1000, &(0x7f0000001300)="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", 0x9, 0x5, 0x0, 0x2, 0x3, 0x1, 0x5, 'syz0\x00'}) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@getqdisc={0x30, 0x26, 0x400, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xf, 0x7}, {0x8, 0xf}, {0x7, 0x9}}, [{0x4}, {0x4}, {0x4}]}, 0x30}}, 0x24010801)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x5}, @TCA_FLOWER_KEY_CT_ZONE_MASK={0x6, 0x5e, 0x6b}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x800)

1.322998283s ago: executing program 2 (id=1169):
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=<r0=>0x0, &(0x7f0000000240)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000e16f78b75ed3700600000000bfa100000000000007010000f8ffff0002000000b7030000faffffff850000002d0000009500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000280)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='rxrpc_peer\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffff9}, 0x18) (async)
unshare(0x62040200) (async)
r2 = socket(0x28, 0x5, 0x0)
r3 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async)
listen(r3, 0x4) (async)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000700)) (async)
sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="1bea810b9ea8e98a61300373191a6ea4cc8f014531e0556f09b80b44e13a1d23e360c475f1ff8511a875a92824cb88c30250592748b9f7cab69d029ceb54afad97dbbb0df1f20677b961bdaa1e6693fcfe4d4eca9076dffae38858258407423c2675cad978c1aed093b6e80b1b5ce277a1c9c7dbdebf8aa3537deefbbec4dc6a45f724", 0x83}], 0x1}}], 0x1, 0x0)
r5 = accept4$unix(r3, 0x0, 0x0, 0x800)
recvfrom$unix(r5, &(0x7f0000000400)=""/250, 0xfa, 0x2, 0x0, 0x0) (async)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x20008840) (async)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c0001800600060065580000200002801c0017800400ad0014"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4000000) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000000)={0x1, 0xffffffff})

1.322271554s ago: executing program 0 (id=1170):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r3)
sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x128, r4, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x92d7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3a0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa7c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5242}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000010}, 0x8001) (async)
sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x128, r4, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x92d7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3a0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa7c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5242}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000010}, 0x8001)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$tun(r5, &(0x7f0000000340)=ANY=[], 0x33)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711212000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
socket(0x2, 0x80805, 0x0) (async)
socket(0x2, 0x80805, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000a40), 0x4) (async)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000a40), 0x4)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r9=>0xffffffffffffffff})
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r10}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async)
sendmsg$nl_route_sched(r8, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r10}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
r11 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r11, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) (async)
bind$alg(r11, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58)
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendfile(r5, r3, 0x0, 0x10000)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0x1, 0x3}, 0x6)
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x38, r2, 0x239b5da1764946cd, 0x70bd2d, 0x25dfcbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "887f9e1804d2635ee9cfef1cb8"}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x40400d4)

1.244767964s ago: executing program 1 (id=1171):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x2c, &(0x7f0000000200)=0x7fff, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000824)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x4040040)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x28, 0x5, 0x0)
listen(r5, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10)
accept4$unix(r5, 0x0, 0x0, 0x0)
close(0x4)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd701004000000050000000600010015000000080009000200000008000b000000000008000c00a80a00000c001000ffffffffffff53e6c358f69c1830ffff"], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r6, 0x0, r7, 0x0, 0x1, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
getsockname$packet(r8, 0x0, 0x0)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
ppoll(&(0x7f0000000500)=[{r9, 0x8}], 0x1, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)

1.123975891s ago: executing program 0 (id=1172):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x8}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
readv(r0, 0x0, 0x44)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_int(r3, 0x0, 0x0)
recvmsg$unix(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}, 0x40000100)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_ro(r6, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12)
bind$tipc(r7, &(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x42, 0x4}, 0x2}}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r9 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r8, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x2d, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"4adcda08f6"}}}}, 0x3b)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r10=>0xffffffffffffffff})
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r11}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0)

1.073079743s ago: executing program 2 (id=1173):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x28, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r0}, @nested={0xb, 0x16, 0x0, 0x1, [@generic="5b9dda63c3692f"]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r2, 0x0, 0xfffffffffffffffe}, 0x10) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0)

1.072061176s ago: executing program 2 (id=1174):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xffffffff, @rand_addr=' \x01\x00', 0x7b8c}, @in={0x2, 0x4e22, @private=0xa010101}, @in={0x2, 0x4e22, @multicast2}], 0x3c)
r1 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040))
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0)
r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0xcc, 0x1}, {0x3, 0x3, 0xff, 0xfffffff7}, {0x0, 0x1, 0xee, 0x1}]}, 0x10)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000180))
r4 = accept4$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000200)=0x1c, 0x80000)
connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e22, 0x3, @private2, 0x81}, 0x1c)
r5 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000280))
setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x2, 0xb, 0x0, 0x3, 0x1b, 0x3af8, 0xc90f}, 0x1c)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
clock_gettime(0x0, &(0x7f0000003180)={<r7=>0x0, <r8=>0x0})
recvmmsg(r6, &(0x7f0000003080)=[{{&(0x7f0000000300)=@tipc, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/246, 0xf6}, {&(0x7f0000000480)=""/196, 0xc4}, {&(0x7f0000000580)=""/184, 0xb8}, {&(0x7f0000000640)=""/118, 0x76}], 0x4, &(0x7f0000000700)=""/50, 0x32}, 0xa5b7}, {{&(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000840)=[{&(0x7f00000007c0)=""/95, 0x5f}], 0x1, &(0x7f0000000880)=""/76, 0x4c}, 0x9c}, {{&(0x7f0000000900)=@qipcrtr, 0x80, &(0x7f0000001d80)=[{&(0x7f0000000980)=""/19, 0x13}, {&(0x7f00000009c0)=""/103, 0x67}, {&(0x7f0000000a40)=""/45, 0x2d}, {&(0x7f0000000a80)=""/156, 0x9c}, {&(0x7f0000000b40)=""/250, 0xfa}, {&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/61, 0x3d}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/123, 0x7b}, {&(0x7f0000001d40)=""/31, 0x1f}], 0xa, &(0x7f0000001e40)=""/148, 0x94}, 0x8}, {{&(0x7f0000001f00)=@tipc=@id, 0x80, &(0x7f0000002040)=[{&(0x7f0000001f80)=""/183, 0xb7}], 0x1, &(0x7f0000002080)=""/4096, 0x1000}, 0x80000000}], 0x4, 0x40000000, &(0x7f00000031c0)={r7, r8+10000000})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000032c0)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003280)={&(0x7f0000003240)=@ipv6_delrule={0x30, 0x21, 0x200, 0x70bd2c, 0x25dfdbfc, {0xa, 0x0, 0x14, 0x7, 0x4, 0x0, 0x0, 0x3, 0x20}, [@FRA_DST={0x14, 0x1, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
r9 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, &(0x7f0000003300)=0x1, 0x4)
r10 = socket$nl_rdma(0x10, 0x3, 0x14)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
accept4$netrom(r2, &(0x7f0000003340)={{}, [@bcast, @default, @rose, @null, @netrom, @null, @netrom, @rose]}, &(0x7f00000033c0)=0x48, 0x180800)
r11 = socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000003400)=@hopopts={0x21, 0x3, '\x00', [@padn={0x1, 0x1, [0x0]}, @pad1, @pad1, @calipso={0x7, 0x10, {0x3, 0x2, 0xf9, 0xe532, [0x1d8b]}}, @pad1]}, 0x28)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f00000037c0)={&(0x7f0000003440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003780)={&(0x7f0000003480)={0x2cc, 0x17, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x1dc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'vcan0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0xc8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'pimreg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_vlan\x00'}]}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r11, 0xf503, 0x0)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r10, &(0x7f00000038c0)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003880)={&(0x7f0000003840)={0x20, 0x1406, 0x800, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000011}, 0x4805)
getpeername$inet6(r10, &(0x7f0000003900)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000003940)=0x1c)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x1c, 0x19, 0x1, 0x70bd25, 0x25dfdbfb, {0x11}, [@typed={0x8, 0x10e, 0x0, 0x0, @ipv4=@multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20008001)

384.410718ms ago: executing program 1 (id=1175):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
r1 = gettid()
syz_open_procfs$namespace(r1, &(0x7f0000000180)='ns/pid\x00')
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r2, 0x0, 0x1c0d}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x8000}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x12)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f00000000c0)={0xcb, 0x6, 0xfffffffffffffffd, 0x6, 0x8, 0x1})
sendmsg$nl_route_sched(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000000)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0xfffffffffffffd5c}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0)

383.962152ms ago: executing program 1 (id=1176):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000140), 0x4)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000180)={'sit0\x00', &(0x7f00000000c0)={@empty, @multicast2, 0x5, 0x15}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0)
r4 = accept(r2, 0x0, 0x0)
sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x2e0, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2ac, 0x2, [@TCA_MATCHALL_ACT={0x2a8, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x1, 0xea, 0x100004}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x128, 0xc, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x80000001, 0x5, 0x0, 0x7fffffff, 0x3}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xaa, 0x6, "702d7b7ca2605b80fb0bfc581434a99b0850c1e175b9e72d4819877b7effa9a22735ec0257f9035602a8c82a11dcd81f6da90792c83eb930b4651b0842fd8b24ec959c6de4ea9a6fdfff65cf7fc47d67a92fccbcf4fd60e2271bae67b9018d70f2d67b7fcbbfc60cf21233bfcc9ab73d6b2b4e85bed55d04fedeb2f8b470d29a44a7f85406cacfcdfea3e574aeb330772672c017d8cb90971aa75861a28f23ee6cdfb876faaa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_skbedit={0x128, 0x2, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x8, 0x10000000, 0x7ff, 0x9}}, @TCA_SKBEDIT_MARK={0x3f, 0x5, 0x3350}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x10001}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0xffffff10, 0x6, "04f1182a84f597cf3b9523440c209d73ff6282fffbe76149d4d47c7f085e00962e0197abc32c39d6c30a5d1b7be4d09795bce6d91a10a26c1a35fc59fbfe2ffe96ec7f206d912712c74135715760f3e6da7c1f87b9a4359bd92c4a106b30e29df4501a7971e68cd5c207fb9a850306331fd3a39ad27e6cd6fef98261cf73c07d26dbc5dd8b3fbb5128be3f63dc090fdb8d78e151445e7a7a17bfe450e03190ce0b6a62bfcdbecf9681515413ed98ca95e4a57d3350cf749b2317a1938d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4040011}, 0x0)

179.627264ms ago: executing program 2 (id=1177):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x10, 0x803, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73"], 0x54}}, 0x0)
connect$llc(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048810}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x74, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x80000001, 0x5, 0x2, 0x10001, 0x10001, {0x1, 0x0, 0x8, 0x8, 0x6}, {0x9, 0x0, 0x0, 0x1000, 0x3, 0x6}, 0x8, 0x2, 0x3}}]}]}}]}, 0x74}}, 0x20040054)

103.469279ms ago: executing program 0 (id=1178):
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000c4}, 0x20040800)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10)
unshare(0x62040200)

79.698332ms ago: executing program 2 (id=1179):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x80800, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000001c40)=0x4)
r1 = gettid()
unshare(0x22020600)
syz_open_procfs$namespace(r1, &(0x7f00000003c0)='ns/pid_for_children\x00')
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0080)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)
r5 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000000000000000000008500000056000000850000000800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', <r6=>0x0})
r7 = socket(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', <r8=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x5c, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400}, 0x4040014)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x8)
r9 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xa, [@type_tag={0x8, 0x0, 0x0, 0x12, 0x3}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x2, 0xffffffffffffffff}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x81}}]}, {0x0, [0x30, 0x2e, 0x30, 0x3e, 0x61, 0x5f, 0x30, 0x2e]}}, 0x0, 0x56, 0x0, 0x1, 0x3}, 0x28)
sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x8c, 0x30, 0xb, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_LABELS={0x11, 0x7, "76ec617613e9a74dcba4d16825e915b1"}, @TCA_CT_ACTION={0x6, 0x3, 0x2a}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x10000080)

4.895808ms ago: executing program 0 (id=1180):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x3d, &(0x7f0000000040)=""/143, &(0x7f0000000100)=0x8f)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x80800)
setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r3)
recvfrom$phonet(r3, &(0x7f0000000140)=""/175, 0xaf, 0x12020, &(0x7f0000000200)={0x23, 0x7, 0x2, 0xd}, 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008"], 0x124}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x48, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0)

0s ago: executing program 2 (id=1181):
socket$netlink(0x10, 0x3, 0xf) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0xffff, 0x70bd27}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008000100", @ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x4000000) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:49952' (ED25519) to the list of known hosts.
syzkaller login: [   47.923000][ T5780] cgroup: Unknown subsys name 'net'
[   48.023812][ T5780] cgroup: Unknown subsys name 'cpuset'
[   48.027710][ T5780] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.340090][ T5780] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   52.896875][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   52.900451][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   52.903814][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   52.907500][ T5234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   52.911108][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   52.920300][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   52.927741][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   52.930337][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   52.934368][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   52.937532][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   53.020385][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   53.023223][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   53.026043][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   53.029248][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   53.039249][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   53.128960][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   53.197852][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   53.230000][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.233376][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.235982][ T5842] bridge_slave_0: entered allmulticast mode
[   53.238812][ T5842] bridge_slave_0: entered promiscuous mode
[   53.246958][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.249604][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.253632][ T5842] bridge_slave_1: entered allmulticast mode
[   53.256508][ T5842] bridge_slave_1: entered promiscuous mode
[   53.282631][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.296429][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.320832][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.323861][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.326392][ T5846] bridge_slave_0: entered allmulticast mode
[   53.329180][ T5846] bridge_slave_0: entered promiscuous mode
[   53.333751][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.335999][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.338252][ T5846] bridge_slave_1: entered allmulticast mode
[   53.340857][ T5846] bridge_slave_1: entered promiscuous mode
[   53.371043][ T5842] team0: Port device team_slave_0 added
[   53.383807][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.403008][ T5842] team0: Port device team_slave_1 added
[   53.414399][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.448360][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.451250][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.463280][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.468293][ T5846] team0: Port device team_slave_0 added
[   53.471085][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.473719][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.483572][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.489053][ T5846] team0: Port device team_slave_1 added
[   53.504955][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   53.536039][ T5842] hsr_slave_0: entered promiscuous mode
[   53.539352][ T5842] hsr_slave_1: entered promiscuous mode
[   53.542802][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.544977][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.553457][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.567975][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.570177][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.578722][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.637102][ T5846] hsr_slave_0: entered promiscuous mode
[   53.639535][ T5846] hsr_slave_1: entered promiscuous mode
[   53.641934][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   53.643783][ T5846] Cannot create hsr debugfs directory
[   53.683851][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.686117][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.688445][ T5851] bridge_slave_0: entered allmulticast mode
[   53.691041][ T5851] bridge_slave_0: entered promiscuous mode
[   53.715359][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.718291][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.722056][ T5851] bridge_slave_1: entered allmulticast mode
[   53.726163][ T5851] bridge_slave_1: entered promiscuous mode
[   53.784733][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.794776][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.835611][ T5851] team0: Port device team_slave_0 added
[   53.845711][ T5851] team0: Port device team_slave_1 added
[   53.882844][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.885804][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.895915][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.904578][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.906792][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.915925][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.947539][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   53.954823][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   53.972001][ T5851] hsr_slave_0: entered promiscuous mode
[   53.974242][ T5851] hsr_slave_1: entered promiscuous mode
[   53.976272][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   53.978090][ T5851] Cannot create hsr debugfs directory
[   53.980022][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   53.993100][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.058336][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.072337][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.092665][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.103823][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.115510][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.118353][ T5842] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.121581][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.124293][ T5842] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.158070][ T1232] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.162790][ T1232] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.217235][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.223247][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.238879][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.246154][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.295167][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.306368][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.325743][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   54.330541][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   54.338502][ T1232] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.340852][ T1232] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.347027][ T1232] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.349944][ T1232] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.357204][ T1232] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.359541][ T1232] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.367269][ T1232] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.369601][ T1232] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.402913][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.427435][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   54.442391][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.444981][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.455798][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.458014][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.477407][ T5851] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   54.480765][ T5851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.571809][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.578185][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.586755][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.605957][ T5842] veth0_vlan: entered promiscuous mode
[   54.622580][ T5842] veth1_vlan: entered promiscuous mode
[   54.649575][ T5846] veth0_vlan: entered promiscuous mode
[   54.656757][ T5851] veth0_vlan: entered promiscuous mode
[   54.661080][ T5846] veth1_vlan: entered promiscuous mode
[   54.670058][ T5842] veth0_macvtap: entered promiscuous mode
[   54.673710][ T5851] veth1_vlan: entered promiscuous mode
[   54.680938][ T5842] veth1_macvtap: entered promiscuous mode
[   54.699320][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.702841][ T5846] veth0_macvtap: entered promiscuous mode
[   54.710603][ T5846] veth1_macvtap: entered promiscuous mode
[   54.718050][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.722659][ T5851] veth0_macvtap: entered promiscuous mode
[   54.735845][ T5851] veth1_macvtap: entered promiscuous mode
[   54.739361][ T5873] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.743382][ T5873] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.746185][ T5873] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.748948][ T5873] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.755796][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.766663][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.776568][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   54.785438][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.799782][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.808084][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.817745][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   54.824931][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.843130][ T5714] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   54.852897][ T5714] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   54.856628][ T5714] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   54.863493][ T5714] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   54.876082][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.879189][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.906785][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.909385][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.925137][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.928296][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.956132][ T1232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.961105][ T1232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   54.968313][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   54.971983][ T5845] Bluetooth: hci1: command tx timeout
[   54.973613][ T5848] Bluetooth: hci0: command tx timeout
[   54.984347][ T1232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   54.991613][ T1232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.033297][ T5909] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET)
[   55.043126][ T1232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.050482][ T5913] netlink: 'syz.0.1': attribute type 1 has an invalid length.
[   55.054360][ T1232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.113805][ T5848] Bluetooth: hci2: command tx timeout
[   55.119926][ T5920] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'.
[   55.134398][ T5921] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2'.
[   55.162948][ T5921] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2'.
[   55.173124][ T5920] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2'.
[   55.183737][ T5920] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   55.365401][ T5942] Zero length message leads to an empty skb
[   56.080895][ T5977] netlink: 'syz.0.22': attribute type 1 has an invalid length.
[   56.085834][ T5977] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   56.088487][ T5977] batadv_slave_1: entered promiscuous mode
[   56.144538][ T5979] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[   56.197450][ T5985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.24'.
[   56.209888][ T5987] netlink: 'syz.2.25': attribute type 1 has an invalid length.
[   56.213159][ T5987] netlink: 600 bytes leftover after parsing attributes in process `syz.2.25'.
[   56.535195][ T6017] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.36'.
[   56.543807][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.35'.
[   56.547333][ T6017] netlink: 'syz.0.36': attribute type 10 has an invalid length.
[   56.556992][ T6017] netlink: 20 bytes leftover after parsing attributes in process `syz.0.36'.
[   56.559831][ T6017] bond0: option arp_all_targets: invalid value (196616)
[   56.583759][ T6021] tipc: Started in network mode
[   56.586637][ T6021] tipc: Node identity 5613f2fac695, cluster identity 4711
[   56.590199][ T6021] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   56.594675][ T6021] syzkaller0: entered promiscuous mode
[   56.596520][ T6021] syzkaller0: entered allmulticast mode
[   56.607772][ T6021] tipc: Resetting bearer <eth:syzkaller0>
[   56.618542][ T6020] tipc: Resetting bearer <eth:syzkaller0>
[   56.640310][ T6020] tipc: Disabling bearer <eth:syzkaller0>
[   56.775588][ T6034] netlink: 1 bytes leftover after parsing attributes in process `syz.0.41'.
[   56.790641][ T6034] tipc: Started in network mode
[   56.793058][ T6034] tipc: Node identity 000000000000000007, cluster identity 4711
[   57.031936][ T5848] Bluetooth: hci1: command tx timeout
[   57.041716][ T5848] Bluetooth: hci0: command tx timeout
[   57.191501][ T5848] Bluetooth: hci2: command tx timeout
[   57.625583][ T6059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   57.680404][ T6059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   58.063800][ T6070] netlink: 'syz.0.52': attribute type 12 has an invalid length.
[   58.375173][ T6076] netlink: 'syz.0.53': attribute type 1 has an invalid length.
[   58.577917][ T6094] tipc: Started in network mode
[   58.591520][ T6094] tipc: Node identity 000000000000000007, cluster identity 4711
[   58.838393][ T6120] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[   58.930243][ T6129] netlink: 'syz.1.74': attribute type 4 has an invalid length.
[   58.935719][ T6131] netlink: 'syz.1.74': attribute type 4 has an invalid length.
[   58.993803][ T6139] lo speed is unknown, defaulting to 1000
[   58.997451][ T6139] lo speed is unknown, defaulting to 1000
[   59.000253][ T6139] lo speed is unknown, defaulting to 1000
[   59.028444][ T6141] sctp: [Deprecated]: syz.2.78 (pid 6141) Use of int in maxseg socket option.
[   59.028444][ T6141] Use struct sctp_assoc_value instead
[   59.089031][ T6144] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   59.111507][ T5848] Bluetooth: hci0: command tx timeout
[   59.111799][ T5845] Bluetooth: hci1: command tx timeout
[   59.202464][   T10] lo speed is unknown, defaulting to 1000
[   59.205443][ T6139] infiniband syz0: set active
[   59.207672][ T6139] infiniband syz0: added lo
[   59.236323][ T6139] RDS/IB: syz0: added
[   59.238326][ T6139] smc: adding ib device syz0 with port count 1
[   59.240463][ T6139] smc:    ib device syz0 port 1 has pnetid 
[   59.243834][   T10] lo speed is unknown, defaulting to 1000
[   59.248340][ T6139] lo speed is unknown, defaulting to 1000
[   59.272339][ T5845] Bluetooth: hci2: command tx timeout
[   59.345816][ T6139] lo speed is unknown, defaulting to 1000
[   59.431265][ T6139] lo speed is unknown, defaulting to 1000
[   59.995697][ T6169] lo speed is unknown, defaulting to 1000
[   60.648299][ T6181] netlink: 'syz.1.87': attribute type 13 has an invalid length.
[   60.656396][ T6180] netlink: 'syz.0.88': attribute type 10 has an invalid length.
[   60.668832][ T6180] 8021q: adding VLAN 0 to HW filter on device team0
[   60.676223][ T6180] bond0: (slave team0): Enslaving as an active interface with an up link
[   60.966030][ T6193] __nla_validate_parse: 18 callbacks suppressed
[   60.966039][ T6193] netlink: 24 bytes leftover after parsing attributes in process `syz.1.93'.
[   60.971041][ T6193] netlink: 24 bytes leftover after parsing attributes in process `syz.1.93'.
[   60.977549][ T6191] netlink: 68 bytes leftover after parsing attributes in process `syz.0.92'.
[   60.980442][ T6191] netlink: 68 bytes leftover after parsing attributes in process `syz.0.92'.
[   60.993823][ T6193] netlink: 24 bytes leftover after parsing attributes in process `syz.1.93'.
[   60.998411][ T6193] netlink: 24 bytes leftover after parsing attributes in process `syz.1.93'.
[   61.016279][ T6193] netlink: 24 bytes leftover after parsing attributes in process `syz.1.93'.
[   61.019365][ T6193] netlink: 24 bytes leftover after parsing attributes in process `syz.1.93'.
[   61.096390][ T6199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.95'.
[   61.165768][ T6211] lo speed is unknown, defaulting to 1000
[   61.191483][ T5845] Bluetooth: hci0: command tx timeout
[   61.193792][ T5848] Bluetooth: hci1: command tx timeout
[   61.299568][   T51] IPVS: starting estimator thread 0...
[   61.320937][ T6230] netlink: 24 bytes leftover after parsing attributes in process `syz.2.102'.
[   61.339410][ T6219] lo speed is unknown, defaulting to 1000
[   61.351552][ T5848] Bluetooth: hci2: command tx timeout
[   61.404487][ T6228] IPVS: using max 82 ests per chain, 196800 per kthread
[   61.534554][ T6248] raw_sendmsg: syz.0.104 forgot to set AF_INET. Fix it!
[   61.682845][ T6255] lo speed is unknown, defaulting to 1000
[   62.018777][ T6279] unknown channel width for channel at 909000KHz?
[   62.239501][ T2309] hid-generic 0005:16C0:05DF.0001: unknown main item tag 0x0
[   62.242472][ T6295] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.249084][ T2309] hid-generic 0005:16C0:05DF.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[   62.499421][ T6319] netlink: 'syz.2.123': attribute type 5 has an invalid length.
[   62.519160][ T6313] lo speed is unknown, defaulting to 1000
[   62.602994][ T6325] netlink: 'syz.0.125': attribute type 10 has an invalid length.
[   62.615672][ T6325] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   62.718467][ T6330] ip6tnl2: entered promiscuous mode
[   62.729868][ T6330] ip6tnl2: entered allmulticast mode
[   62.733065][ T6332] netlink: 'syz.0.125': attribute type 12 has an invalid length.
[   62.785130][ T6336] netlink: 'syz.0.128': attribute type 12 has an invalid length.
[   62.976252][ T6353] netlink: 'syz.0.135': attribute type 20 has an invalid length.
[   62.989881][ T5873] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   62.994850][ T6353] netlink: 'syz.0.135': attribute type 20 has an invalid length.
[   62.998432][ T5873] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   63.005083][ T5873] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   63.010661][ T5873] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   63.259550][ T5873] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[   63.307148][ T6379] lo speed is unknown, defaulting to 1000
[   63.406002][   T10] lo speed is unknown, defaulting to 1000
[   63.506367][ T6388] lo speed is unknown, defaulting to 1000
[   63.987935][ T6442] lo speed is unknown, defaulting to 1000
[   64.209840][ T6461] netlink: 'syz.1.167': attribute type 15 has an invalid length.
[   64.887000][ T6482] lo speed is unknown, defaulting to 1000
[   65.327993][ T6508] netlink: 'syz.2.180': attribute type 3 has an invalid length.
[   65.428816][ T6511] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.437846][ T6513] tipc: Cannot configure node identity twice
[   65.483836][ T6511] tipc: Resetting bearer <eth:syzkaller0>
[   66.122940][ T6511] tipc: Disabling bearer <eth:syzkaller0>
[   66.127074][ T6515] bond0: Error: Cannot enslave bond to itself.
[   66.207829][ T6527] __nla_validate_parse: 20 callbacks suppressed
[   66.207841][ T6527] netlink: 72 bytes leftover after parsing attributes in process `syz.1.186'.
[   66.216073][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.186'.
[   66.248054][ T6534] netlink: 28 bytes leftover after parsing attributes in process `syz.1.189'.
[   66.839326][ T6578] netlink: 'syz.1.200': attribute type 12 has an invalid length.
[   67.149340][ T6598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.206'.
[   67.154395][ T6598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.206'.
[   67.435325][ T6620] tipc: Failed to remove unknown binding: 66,1,1/0:2466959651/2466959653
[   67.439481][ T6620] tipc: Failed to remove unknown binding: 66,1,1/0:2466959651/2466959653
[   67.442780][ T6620] tipc: Failed to remove unknown binding: 66,1,1/0:2466959651/2466959653
[   67.537814][ T6624] netlink: 296 bytes leftover after parsing attributes in process `syz.1.217'.
[   67.647927][ T6633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.220'.
[   67.652777][ T6633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.220'.
[   68.266397][ T6648] netlink: 60 bytes leftover after parsing attributes in process `syz.2.225'.
[   68.270056][ T6648] netlink: 60 bytes leftover after parsing attributes in process `syz.2.225'.
[   68.351091][ T6653] lo speed is unknown, defaulting to 1000
[   68.948318][ T6694] lo speed is unknown, defaulting to 1000
[   69.240325][ T6728] netlink: 'syz.1.247': attribute type 12 has an invalid length.
[   69.572606][ T6742] warning: `syz.1.251' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   70.223175][ T6759] tun0: tun_chr_ioctl cmd 2147767520
[   70.324500][ T6770] netlink: 'syz.2.262': attribute type 8 has an invalid length.
[   70.335729][ T6776] netlink: 'syz.1.264': attribute type 3 has an invalid length.
[   70.494554][ T6794] netlink: 'syz.0.271': attribute type 1 has an invalid length.
[   70.497977][ T6794] netlink: 'syz.0.271': attribute type 4 has an invalid length.
[   70.502479][ T6794] netlink: 'syz.0.271': attribute type 1 has an invalid length.
[   70.505550][ T6794] netlink: 'syz.0.271': attribute type 4 has an invalid length.
[   70.680531][ T6811] lo speed is unknown, defaulting to 1000
[   71.205808][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.258746][ T6829] 8021q: VLANs not supported on lo
[   71.481566][ T6858] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20000
[   71.492930][ T6858] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20000
[   71.499577][ T6858] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   71.514294][ T6862] netlink: 'syz.1.295': attribute type 1 has an invalid length.
[   71.521045][ T6862] netlink: 'syz.1.295': attribute type 1 has an invalid length.
[   71.588118][ T6871] __nla_validate_parse: 16 callbacks suppressed
[   71.588127][ T6871] netlink: 28 bytes leftover after parsing attributes in process `syz.2.297'.
[   71.593545][ T6871] netlink: 28 bytes leftover after parsing attributes in process `syz.2.297'.
[   71.717815][ T6885] netlink: 24 bytes leftover after parsing attributes in process `syz.2.302'.
[   71.814363][ T6889] sctp: [Deprecated]: syz.1.304 (pid 6889) Use of int in maxseg socket option.
[   71.814363][ T6889] Use struct sctp_assoc_value instead
[   71.907564][ T6893] lo speed is unknown, defaulting to 1000
[   72.083358][ T6902] netlink: 'syz.1.309': attribute type 1 has an invalid length.
[   72.131719][ T6902] veth3: entered promiscuous mode
[   72.135985][ T6902] bond1: (slave veth3): Enslaving as a backup interface with a down link
[   72.144410][ T6902] netlink: 28 bytes leftover after parsing attributes in process `syz.1.309'.
[   72.190010][ T6902] 8021q: adding VLAN 0 to HW filter on device bond1
[   72.207128][ T6906] netlink: 20 bytes leftover after parsing attributes in process `syz.2.310'.
[   72.482166][ T6922] lo speed is unknown, defaulting to 1000
[   72.582022][ T6937] netlink: 24 bytes leftover after parsing attributes in process `syz.1.318'.
[   72.637388][ T6939] lo speed is unknown, defaulting to 1000
[   73.057944][ T6954] netlink: 28 bytes leftover after parsing attributes in process `syz.2.323'.
[   73.290671][ T6977] netlink: 28 bytes leftover after parsing attributes in process `syz.0.327'.
[   73.297872][ T6977] netlink: 28 bytes leftover after parsing attributes in process `syz.0.327'.
[   73.375855][ T6985] netlink: 28 bytes leftover after parsing attributes in process `syz.0.329'.
[   73.409117][ T6989] nbd: couldn't find device at index 536870912
[   73.414719][ T6990] smc: net device bond0 applied user defined pnetid SYZ2
[   73.418572][ T6989] smc: net device bond0 erased user defined pnetid SYZ2
[   73.450706][ T6996] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   73.635002][ T7009] lo speed is unknown, defaulting to 1000
[   73.811118][ T7022] netlink: 'syz.0.339': attribute type 1 has an invalid length.
[   74.004047][ T7031] lo speed is unknown, defaulting to 1000
[   74.292230][   T33] audit: type=1800 audit(1756739372.385:2): pid=7043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.345" name="memory.events" dev="tmpfs" ino=596 res=0 errno=0
[   74.337782][ T7045] lo speed is unknown, defaulting to 1000
[   74.777495][ T7066] lo speed is unknown, defaulting to 1000
[   74.871121][ T7083] IPVS: set_ctl: invalid protocol: 113 224.0.0.1:20000
[   74.934890][ T7080] lo speed is unknown, defaulting to 1000
[   75.068629][ T7081] netlink: 'syz.0.356': attribute type 1 has an invalid length.
[   75.306893][ T7104] bond0: (slave team0): Releasing backup interface
[   75.314557][ T7104] bridge_slave_0: left allmulticast mode
[   75.316522][ T7104] bridge_slave_0: left promiscuous mode
[   75.319093][ T7104] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.329176][ T7104] bridge_slave_1: left allmulticast mode
[   75.334129][ T7104] bridge_slave_1: left promiscuous mode
[   75.336772][ T7104] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.344089][ T7104] bond0: (slave bond_slave_0): Releasing backup interface
[   75.348760][ T7104] bond0: (slave bond_slave_1): Releasing backup interface
[   75.357238][ T7104] team0: Port device team_slave_0 removed
[   75.365669][ T7104] team0: Port device team_slave_1 removed
[   75.368114][ T7104] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.371032][ T7104] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.375333][ T7104] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.384687][ T7104] bond0: (slave wlan1): Releasing backup interface
[   75.469627][ T7112] openvswitch: netlink: Flow key attr not present in new flow.
[   75.855153][ T7120] lo speed is unknown, defaulting to 1000
[   76.587523][ T7162] netlink: 'syz.0.383': attribute type 1 has an invalid length.
[   76.640432][ T7162] bond1: entered promiscuous mode
[   76.652899][ T7169] __nla_validate_parse: 14 callbacks suppressed
[   76.652908][ T7169] netlink: 3 bytes leftover after parsing attributes in process `syz.0.383'.
[   76.661329][ T7162] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.670811][ T7169] batadv1: entered promiscuous mode
[   76.673381][ T7169] batadv1: entered allmulticast mode
[   76.676634][ T7169] 8021q: adding VLAN 0 to HW filter on device batadv1
[   76.680641][ T7169] bond1: (slave batadv1): making interface the new active one
[   76.684679][ T7169] bond1: (slave batadv1): Enslaving as an active interface with an up link
[   76.766083][ T7162] netlink: 48 bytes leftover after parsing attributes in process `syz.0.383'.
[   76.781016][    T9] IPVS: starting estimator thread 0...
[   76.911648][ T7180] IPVS: using max 80 ests per chain, 192000 per kthread
[   76.929810][ T7188] netlink: 208 bytes leftover after parsing attributes in process `syz.2.390'.
[   76.938578][ T7188] netlink: 208 bytes leftover after parsing attributes in process `syz.2.390'.
[   76.986652][ T7194] lo speed is unknown, defaulting to 1000
[   77.081818][ T7200] netlink: 'syz.2.394': attribute type 4 has an invalid length.
[   77.367977][ T7211] netlink: 40 bytes leftover after parsing attributes in process `syz.0.397'.
[   77.399895][ T7212] lo speed is unknown, defaulting to 1000
[   77.624568][ T7233] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.627238][ T7233] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.705531][ T7233] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.718602][ T7233] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.779619][ T7233] ip6tnl2: left promiscuous mode
[   77.781274][ T7233] ip6tnl2: left allmulticast mode
[   77.792646][ T5714] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.798277][ T5714] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.801062][ T5714] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.813254][ T5714] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.826463][ T7237] lo speed is unknown, defaulting to 1000
[   77.956613][ T7241] lo speed is unknown, defaulting to 1000
[   78.281282][ T7252] lo speed is unknown, defaulting to 1000
[   78.681529][ T7271] syzkaller1: entered promiscuous mode
[   78.685140][ T7271] syzkaller1: entered allmulticast mode
[   78.938013][ T7287] lo speed is unknown, defaulting to 1000
[   78.976843][ T7294] netlink: 24 bytes leftover after parsing attributes in process `syz.2.419'.
[   79.046096][ T7299] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[   79.049370][ T7299] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[   79.084389][ T7295] lo speed is unknown, defaulting to 1000
[   79.445351][ T7333] netem: change failed
[   79.484793][ T7326] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[   79.697346][ T7366] netlink: 64 bytes leftover after parsing attributes in process `syz.1.436'.
[   79.706992][ T7366] netlink: 64 bytes leftover after parsing attributes in process `syz.1.436'.
[   79.714753][ T7368] netlink: 64 bytes leftover after parsing attributes in process `syz.1.436'.
[   79.718498][ T7368] netlink: 64 bytes leftover after parsing attributes in process `syz.1.436'.
[   79.836250][ T7381] netlink: 'syz.1.440': attribute type 13 has an invalid length.
[   79.893231][ T7385] netlink: 'syz.0.439': attribute type 7 has an invalid length.
[   79.995662][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   80.751587][ T7391] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   80.819194][ T7413] netlink: 'syz.1.449': attribute type 2 has an invalid length.
[   80.844894][    T9] IPVS: starting estimator thread 0...
[   80.853624][ T7410] lo speed is unknown, defaulting to 1000
[   80.931514][ T7420] IPVS: using max 71 ests per chain, 170400 per kthread
[   80.960611][ T7425] team0: Port device team_slave_0 removed
[   80.974725][ T7428] bond0: entered promiscuous mode
[   80.976422][ T7428] bond_slave_0: entered promiscuous mode
[   80.981817][ T7428] bond_slave_1: entered promiscuous mode
[   80.990344][ T7428] dummy0: entered promiscuous mode
[   80.995454][ T7428] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[   80.998547][ T7428] hsr1: Slave B (dummy0) is not up; please bring it up to get a fully working HSR network
[   81.012692][ T7428] hsr1: entered promiscuous mode
[   81.014332][ T7428] hsr1: entered allmulticast mode
[   81.022807][ T7428] bond0: entered allmulticast mode
[   81.024577][ T7428] bond_slave_0: entered allmulticast mode
[   81.027715][ T7428] bond_slave_1: entered allmulticast mode
[   81.029862][ T7428] dummy0: entered allmulticast mode
[   81.040476][ T7423] lo speed is unknown, defaulting to 1000
[   81.087373][ T7428] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   81.093457][ T7435] netlink: 'syz.1.454': attribute type 4 has an invalid length.
[   81.134449][ T7437] geneve2: entered promiscuous mode
[   81.136189][ T7437] geneve2: entered allmulticast mode
[   81.252188][ T7443] netlink: 'syz.1.456': attribute type 6 has an invalid length.
[   81.378830][ T7448] geneve2: left allmulticast mode
[   81.444952][  T791] cfg80211: failed to load regulatory.db
[   81.492873][ T7448] lo speed is unknown, defaulting to 1000
[   81.653259][ T7464] netlink: 'syz.2.459': attribute type 4 has an invalid length.
[   81.793830][ T7469] __nla_validate_parse: 9 callbacks suppressed
[   81.793841][ T7469] netlink: 48 bytes leftover after parsing attributes in process `syz.2.460'.
[   81.857022][ T7471] lo speed is unknown, defaulting to 1000
[   81.897211][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.461'.
[   81.906061][ T7475] netlink: 24 bytes leftover after parsing attributes in process `syz.1.461'.
[   81.969572][ T7479] netlink: 32 bytes leftover after parsing attributes in process `syz.0.463'.
[   81.994619][ T7475] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.997606][ T7475] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.044234][ T7475] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   82.050261][ T7475] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   82.126549][ T7475] veth3: left promiscuous mode
[   82.128619][ T7475] geneve2: left promiscuous mode
[   82.130474][  T791] lo speed is unknown, defaulting to 1000
[   82.136194][  T791] syz1: Port: 1 Link DOWN
[   82.168321][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.176714][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.180174][  T791] lo speed is unknown, defaulting to 1000
[   82.193353][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.197296][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   82.330328][ T7495] sctp: [Deprecated]: syz.1.469 (pid 7495) Use of int in max_burst socket option.
[   82.330328][ T7495] Use struct sctp_assoc_value instead
[   82.349610][ T7491] lo speed is unknown, defaulting to 1000
[   82.397502][ T7501] netlink: 'syz.1.471': attribute type 12 has an invalid length.
[   82.539432][ T7238] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[   82.771052][ T7517] netlink: 24 bytes leftover after parsing attributes in process `syz.1.476'.
[   82.922485][ T7541] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   82.966805][ T7548] netlink: 'syz.2.482': attribute type 1 has an invalid length.
[   83.023336][ T7556] netlink: 16 bytes leftover after parsing attributes in process `syz.2.485'.
[   83.049022][ T7554] netlink: 48 bytes leftover after parsing attributes in process `syz.0.484'.
[   83.063639][ T7554] netlink: 48 bytes leftover after parsing attributes in process `syz.0.484'.
[   83.092299][ T7561] netlink: 'syz.0.487': attribute type 2 has an invalid length.
[   83.095247][ T7560] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.487'.
[   83.098736][ T7561] netlink: 16 bytes leftover after parsing attributes in process `syz.0.487'.
[   83.106996][ T7561] netlink: 'syz.0.487': attribute type 2 has an invalid length.
[   83.162271][ T7560] bond1: (slave batadv1): Releasing active interface
[   83.875115][ T7590] team0: Device sit1 is of different type
[   83.970982][ T7594] lo speed is unknown, defaulting to 1000
[   84.218073][ T7613] IPVS: set_ctl: invalid protocol: 112 0.0.0.0:20004
[   84.289143][ T5714] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[   84.535579][ T7643] ieee802154 phy1 wpan1: encryption failed: -22
[   84.552223][ T7645] gtp0: entered promiscuous mode
[   85.544150][ T7697] lo speed is unknown, defaulting to 1000
[   85.834415][ T7712] lo speed is unknown, defaulting to 1000
[   86.268835][ T7721] lo speed is unknown, defaulting to 1000
[   86.354543][ T7723] lo speed is unknown, defaulting to 1000
[   86.706907][ T7738] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[   86.754500][ T7747] chnl_net:caif_netlink_parms(): no params data found
[   86.893798][ T7756] __nla_validate_parse: 148 callbacks suppressed
[   86.893808][ T7756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.540'.
[   86.904108][ T7756] xfrm1: entered promiscuous mode
[   86.906418][ T7756] xfrm1: entered allmulticast mode
[   86.970995][ T7767] netlink: 32 bytes leftover after parsing attributes in process `syz.1.544'.
[   86.974198][ T7766] netlink: 32 bytes leftover after parsing attributes in process `syz.1.544'.
[   86.989277][ T7766] validate_nla: 65 callbacks suppressed
[   86.989284][ T7766] netlink: 'syz.1.544': attribute type 1 has an invalid length.
[   86.995580][ T7766] NCSI netlink: No device for ifindex 0
[   86.999153][ T7767] netlink: 'syz.1.544': attribute type 1 has an invalid length.
[   87.007682][ T7767] NCSI netlink: No device for ifindex 0
[   87.127374][ T7774] netlink: 72 bytes leftover after parsing attributes in process `syz.0.546'.
[   87.158504][ T7779] lo speed is unknown, defaulting to 1000
[   87.320197][ T7787] netlink: 'syz.1.549': attribute type 4 has an invalid length.
[   87.450905][ T7792] lo speed is unknown, defaulting to 1000
[   87.516083][ T7799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.553'.
[   87.572512][ T7793] lo speed is unknown, defaulting to 1000
[   88.007466][ T7813] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   88.015282][ T7813] ieee802154 phy1 wpan1: encryption failed: -22
[   88.352159][ T7840] lo speed is unknown, defaulting to 1000
[   88.353710][ T7834] netlink: 'syz.0.566': attribute type 1 has an invalid length.
[   88.357247][ T7834] netlink: 'syz.0.566': attribute type 4 has an invalid length.
[   88.359753][ T7834] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.566'.
[   88.430581][ T7842] netlink: 'syz.1.567': attribute type 1 has an invalid length.
[   88.433865][ T7842] netlink: 232 bytes leftover after parsing attributes in process `syz.1.567'.
[   88.436837][ T7842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.567'.
[   88.477004][ T7849] netlink: 244 bytes leftover after parsing attributes in process `syz.0.568'.
[   88.494950][ T7844] lo speed is unknown, defaulting to 1000
[   88.583254][ T7853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.570'.
[   88.801751][ T7863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   88.808074][ T7863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   88.816496][ T7863] bond0 (unregistering): Released all slaves
[   88.837402][ T7868] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   88.851831][ T7878] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   88.948363][ T7887] lo speed is unknown, defaulting to 1000
[   89.114872][ T7889] lo speed is unknown, defaulting to 1000
[   89.208482][ T7904] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   89.214060][ T7904] vlan0: entered promiscuous mode
[   89.215979][ T7904] vlan0: entered allmulticast mode
[   89.218036][ T7904] veth0_vlan: entered allmulticast mode
[   89.293674][ T7903] lo speed is unknown, defaulting to 1000
[   89.358704][ T7918] netlink: 'syz.2.585': attribute type 4 has an invalid length.
[   89.398723][ T7912] lo speed is unknown, defaulting to 1000
[   89.507978][ T7922] openvswitch: netlink: Unknown nsh attribute 0
[   89.510374][ T7922] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.540440][ T7902] tipc: Disabling bearer <eth:syzkaller0>
[   90.650714][ T7945] lo speed is unknown, defaulting to 1000
[   90.662558][ T7948] netlink: 'syz.1.595': attribute type 1 has an invalid length.
[   90.671704][ T7948] netlink: 'syz.1.595': attribute type 1 has an invalid length.
[   90.674206][ T7948] netlink: 'syz.1.595': attribute type 2 has an invalid length.
[   90.854381][ T7983] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   90.858512][ T7983] syzkaller0: entered promiscuous mode
[   90.861654][ T7983] syzkaller0: entered allmulticast mode
[   90.874021][ T7983] tipc: Resetting bearer <eth:syzkaller0>
[   90.877393][ T7982] tipc: Resetting bearer <eth:syzkaller0>
[   90.884133][ T7982] tipc: Disabling bearer <eth:syzkaller0>
[   91.374668][ T8028] lo speed is unknown, defaulting to 1000
[   92.259131][ T8101] __nla_validate_parse: 15 callbacks suppressed
[   92.259141][ T8101] netlink: 44 bytes leftover after parsing attributes in process `syz.0.633'.
[   92.426789][ T5864] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[   92.803203][ T8128] syzkaller1: entered promiscuous mode
[   92.805065][ T8128] syzkaller1: entered allmulticast mode
[   92.812624][ T8136] lo speed is unknown, defaulting to 1000
[   92.997391][ T8150] netlink: 72 bytes leftover after parsing attributes in process `syz.0.644'.
[   93.001079][ T8150] netlink: 72 bytes leftover after parsing attributes in process `syz.0.644'.
[   93.094314][ T8136] netlink: 152 bytes leftover after parsing attributes in process `syz.2.642'.
[   93.125518][ T8170] vlan0: left promiscuous mode
[   93.127239][ T8170] vlan0: left allmulticast mode
[   93.128917][ T8170] veth0_vlan: left allmulticast mode
[   93.137517][ T8170] gtp0: left promiscuous mode
[   93.140826][ T8170] xfrm1: left promiscuous mode
[   93.142863][ T8170] xfrm1: left allmulticast mode
[   93.280359][ T8182] netlink: 'syz.1.652': attribute type 5 has an invalid length.
[   93.289154][ T8182] netlink: 28 bytes leftover after parsing attributes in process `syz.1.652'.
[   93.378358][ T8187] netlink: 'syz.1.654': attribute type 11 has an invalid length.
[   93.381010][ T8187] netlink: 44 bytes leftover after parsing attributes in process `syz.1.654'.
[   93.385982][ T8194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.656'.
[   93.390021][ T8194] netlink: 20 bytes leftover after parsing attributes in process `syz.2.656'.
[   93.396168][ T8194] netlink: 20 bytes leftover after parsing attributes in process `syz.2.656'.
[   93.437199][ T8197] lo speed is unknown, defaulting to 1000
[   93.514854][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.660'.
[   93.558234][ T8201] lo speed is unknown, defaulting to 1000
[   93.597950][ T8205] netlink: 'syz.1.660': attribute type 1 has an invalid length.
[   93.703033][ T8214] netlink: 'syz.1.661': attribute type 1 has an invalid length.
[   93.873668][ T8229] netlink: 'syz.1.665': attribute type 1 has an invalid length.
[   93.907824][ T8229] bond0: (slave geneve3): making interface the new active one
[   93.911318][ T8229] bond0: (slave geneve3): Enslaving as an active interface with an up link
[   93.916012][ T7238] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[   93.919011][ T7238] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[   93.924427][ T7238] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[   93.927437][ T7238] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[   93.934179][ T8229] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.108036][ T8249] netlink: 'syz.1.672': attribute type 4 has an invalid length.
[   94.586189][ T8287] lo speed is unknown, defaulting to 1000
[   94.978995][ T8300] netlink: 'syz.2.690': attribute type 1 has an invalid length.
[   95.028973][ T8304] veth0_vlan: left promiscuous mode
[   95.032872][ T8304] veth0_vlan: entered promiscuous mode
[   95.053590][ T8306] netlink: 'syz.1.693': attribute type 1 has an invalid length.
[   95.143991][ T8317] lo speed is unknown, defaulting to 1000
[   95.156608][ T8321] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1294) !
[   95.667560][ T8386] lo speed is unknown, defaulting to 1000
[   96.038495][ T8406] netlink: 'syz.1.707': attribute type 12 has an invalid length.
[   96.250877][ T8409] lo speed is unknown, defaulting to 1000
[   96.536305][ T8418] Bluetooth: MGMT ver 1.23
[   96.763342][ T8444] lo speed is unknown, defaulting to 1000
[   96.896340][ T8450] lo speed is unknown, defaulting to 1000
[   97.031571][ T5848] Bluetooth: hci2: command tx timeout
[   97.287366][ T8470] lo speed is unknown, defaulting to 1000
[   97.332898][ T8472] __nla_validate_parse: 32 callbacks suppressed
[   97.332912][ T8472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.726'.
[   97.392473][ T8474] pim6reg: entered allmulticast mode
[   97.399952][ T8468] lo speed is unknown, defaulting to 1000
[   97.460783][ T8474] netlink: 24 bytes leftover after parsing attributes in process `syz.0.727'.
[   97.538123][ T8481] netlink: 20 bytes leftover after parsing attributes in process `syz.0.729'.
[   97.589992][ T8486] netlink: 'syz.2.731': attribute type 3 has an invalid length.
[   97.597168][ T8486] netlink: 16 bytes leftover after parsing attributes in process `syz.2.731'.
[   97.600189][ T8486] openvswitch: netlink: EtherType 0 is less than min 600
[   97.694925][ T5864] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[   97.724457][ T8498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.733'.
[   98.080611][ T8519] lo speed is unknown, defaulting to 1000
[   98.170090][ T8525] netlink: 17 bytes leftover after parsing attributes in process `syz.1.743'.
[   98.187532][ T8523] lo speed is unknown, defaulting to 1000
[   98.543207][ T8541] validate_nla: 5 callbacks suppressed
[   98.543217][ T8541] netlink: 'syz.2.749': attribute type 10 has an invalid length.
[   98.549049][ T8541] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode
[   98.551909][ T8541] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[   98.554627][ T8541] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   98.560045][ T8541] netlink: 'syz.2.749': attribute type 12 has an invalid length.
[   98.598607][ T8552] tunl0: entered promiscuous mode
[   98.600527][ T8552] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[   98.649207][ T8556] netlink: 44 bytes leftover after parsing attributes in process `syz.2.755'.
[   98.687252][ T8558] netlink: 44 bytes leftover after parsing attributes in process `syz.0.756'.
[   98.778053][ T8562] netlink: 252 bytes leftover after parsing attributes in process `syz.2.758'.
[   99.437344][ T8572] lo speed is unknown, defaulting to 1000
[   99.687284][ T8582] lo speed is unknown, defaulting to 1000
[   99.738821][ T8590] openvswitch: netlink: IP tunnel dst address not specified
[   99.870628][ T8590] lo speed is unknown, defaulting to 1000
[   99.910573][ T8591] 8021q: adding VLAN 0 to HW filter on device team0
[   99.921301][ T8591] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   99.956324][ T8603] veth1_to_bond: entered allmulticast mode
[   99.967069][ T8603] veth1_to_bond: left allmulticast mode
[  100.180650][ T8615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.771'.
[  100.207234][ T8619] netlink: 'syz.0.772': attribute type 1 has an invalid length.
[  100.224336][ T8619] 8021q: adding VLAN 0 to HW filter on device bond2
[  100.294147][ T8630] netlink: 'syz.1.775': attribute type 1 has an invalid length.
[  100.338330][ T8635] lo speed is unknown, defaulting to 1000
[  100.573822][ T8634] lo speed is unknown, defaulting to 1000
[  100.740326][ T8640] lo speed is unknown, defaulting to 1000
[  100.865752][ T8642] lo speed is unknown, defaulting to 1000
[  100.958827][ T8661] lo speed is unknown, defaulting to 1000
[  101.425861][ T8700] netlink: 'syz.0.793': attribute type 3 has an invalid length.
[  101.430569][ T8695] lo speed is unknown, defaulting to 1000
[  101.566909][ T8701] lo speed is unknown, defaulting to 1000
[  101.689381][ T8700] lo speed is unknown, defaulting to 1000
[  101.862668][ T8729] netlink: 'syz.2.801': attribute type 2 has an invalid length.
[  102.010084][ T8737] lo speed is unknown, defaulting to 1000
[  102.185207][ T8740] lo speed is unknown, defaulting to 1000
[  102.467109][ T8754] lo speed is unknown, defaulting to 1000
[  102.684603][ T8761] __nla_validate_parse: 9 callbacks suppressed
[  102.684613][ T8761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.812'.
[  102.715881][ T5864] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  102.718937][ T5864] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  102.726891][ T5864] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  102.741598][ T5864] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  102.819801][ T8769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.815'.
[  102.829273][ T8769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.815'.
[  102.833887][ T8769] netlink: 'syz.0.815': attribute type 18 has an invalid length.
[  102.864977][ T8771] netlink: 'syz.2.816': attribute type 4 has an invalid length.
[  102.993352][ T8778] lo speed is unknown, defaulting to 1000
[  103.001078][ T8779] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.819'.
[  103.225226][ T8786] lo speed is unknown, defaulting to 1000
[  103.252714][ T8790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.820'.
[  103.358806][ T8789] lo speed is unknown, defaulting to 1000
[  103.516600][ T5845] Bluetooth: hci2: command 0x0405 tx timeout
[  103.693882][ T8796] netlink: 20 bytes leftover after parsing attributes in process `syz.2.821'.
[  103.694245][ T8794] ip6erspan0: entered promiscuous mode
[  103.779441][ T8802] tap0: tun_chr_ioctl cmd 1074025676
[  103.781483][ T8802] tap0: owner set to 0
[  103.808064][ T8804] netlink: 28 bytes leftover after parsing attributes in process `syz.2.824'.
[  103.833125][ T8806] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  103.917897][ T8818] lo speed is unknown, defaulting to 1000
[  103.937506][ T8821] netlink: 'syz.0.828': attribute type 4 has an invalid length.
[  104.005289][ T8828] netlink: 28 bytes leftover after parsing attributes in process `syz.2.830'.
[  104.008116][ T8828] netlink: 28 bytes leftover after parsing attributes in process `syz.2.830'.
[  104.017403][ T8828] netlink: 'syz.2.830': attribute type 1 has an invalid length.
[  104.020030][ T8828] netlink: 20 bytes leftover after parsing attributes in process `syz.2.830'.
[  104.033394][ T8828] netlink: 'syz.2.830': attribute type 1 has an invalid length.
[  104.036770][ T8828] netlink: 'syz.2.830': attribute type 1 has an invalid length.
[  104.039400][ T8828] netlink: 'syz.2.830': attribute type 1 has an invalid length.
[  104.042745][ T8828] netlink: 'syz.2.830': attribute type 1 has an invalid length.
[  104.045802][ T8828] netlink: 'syz.2.830': attribute type 1 has an invalid length.
[  104.048566][ T8828] netlink: 'syz.2.830': attribute type 1 has an invalid length.
[  104.051596][ T8828] netlink: 'syz.2.830': attribute type 1 has an invalid length.
[  104.054221][ T8828] netlink: 'syz.2.830': attribute type 1 has an invalid length.
[  104.062379][ T8827] delete_channel: no stack
[  104.095861][ T8836] bond3: entered promiscuous mode
[  104.097794][ T8836] 8021q: adding VLAN 0 to HW filter on device bond3
[  104.143236][ T8836] 8021q: adding VLAN 0 to HW filter on device bond3
[  104.150533][ T8836] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address
[  104.155674][ T8836] bond3: (slave vxcan1): Setting fail_over_mac to active for active-backup mode
[  104.175060][ T8836] bond3: (slave vxcan1): making interface the new active one
[  104.177880][ T8836] vxcan1: entered promiscuous mode
[  104.180016][ T8836] bond3: (slave vxcan1): Enslaving as an active interface with an up link
[  104.261500][ T8844] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  104.266116][ T8842] lo speed is unknown, defaulting to 1000
[  104.292124][ T8847] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  104.737903][ T8884] tipc: Cannot configure node identity twice
[  104.932950][ T8894] Driver unsupported XDP return value 0 on prog  (id 180) dev N/A, expect packet loss!
[  104.941620][ T8896] lo speed is unknown, defaulting to 1000
[  105.170641][ T8904] lo speed is unknown, defaulting to 1000
[  105.307788][ T8909] lo speed is unknown, defaulting to 1000
[  105.558606][ T8916] lo speed is unknown, defaulting to 1000
[  105.591565][ T5845] Bluetooth: hci2: command 0x0405 tx timeout
[  106.049515][ T8940] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  106.105894][ T8948] nbd: must specify at least one socket
[  106.164634][ T8937] lo speed is unknown, defaulting to 1000
[  106.226713][ T8956] nft_compat: unsupported protocol 0
[  106.780714][ T9006] lo speed is unknown, defaulting to 1000
[  107.231310][ T9055] lo speed is unknown, defaulting to 1000
[  107.308592][ T9061] IPv6: Can't replace route, no match found
[  107.346378][ T9061] lo speed is unknown, defaulting to 1000
[  107.639708][ T9066] lo speed is unknown, defaulting to 1000
[  107.646462][ T9068] tun0: tun_chr_ioctl cmd 2147767520
[  107.785546][ T9073] __nla_validate_parse: 106 callbacks suppressed
[  107.785556][ T9073] netlink: 16 bytes leftover after parsing attributes in process `syz.0.899'.
[  107.974182][ T9086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.904'.
[  107.998167][ T9086] netlink: 32 bytes leftover after parsing attributes in process `syz.2.904'.
[  108.018921][ T9086] netlink: 32 bytes leftover after parsing attributes in process `syz.2.904'.
[  108.084399][ T9088] nbd0: detected capacity change from 0 to 127
[  108.101805][   T56] block nbd0: Receive control failed (result -104)
[  108.218151][ T9102] netlink: 200 bytes leftover after parsing attributes in process `syz.2.907'.
[  108.221158][ T9102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.907'.
[  108.226799][ T9100] lo speed is unknown, defaulting to 1000
[  108.388480][ T9107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.910'.
[  108.539743][ T9111] netlink: 24 bytes leftover after parsing attributes in process `syz.1.911'.
[  108.574830][ T9111] netlink: 24 bytes leftover after parsing attributes in process `syz.1.911'.
[  108.734043][ T9127] lo speed is unknown, defaulting to 1000
[  109.046558][ T9146] netlink: 32 bytes leftover after parsing attributes in process `syz.0.920'.
[  109.051577][ T9146] openvswitch: netlink: Flow key attr not present in new flow.
[  109.820304][ T9160] lo speed is unknown, defaulting to 1000
[  110.120781][ T9174] lo speed is unknown, defaulting to 1000
[  110.525826][ T9190] lo speed is unknown, defaulting to 1000
[  110.756389][ T9196] validate_nla: 85 callbacks suppressed
[  110.756398][ T9196] netlink: 'syz.0.935': attribute type 4 has an invalid length.
[  110.875320][ T9198] lo speed is unknown, defaulting to 1000
[  110.934994][ T9209] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  110.945001][ T9210] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  111.069994][ T9204] lo speed is unknown, defaulting to 1000
[  111.185393][ T9219] lo speed is unknown, defaulting to 1000
[  111.204780][ T9219] lo speed is unknown, defaulting to 1000
[  111.215230][ T9219] lo speed is unknown, defaulting to 1000
[  111.238243][ T9219] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  111.244923][ T9220] netlink: 'syz.1.942': attribute type 4 has an invalid length.
[  111.275571][ T9219] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  111.289707][ T9219] lo speed is unknown, defaulting to 1000
[  111.313243][ T9219] lo speed is unknown, defaulting to 1000
[  111.324243][ T9219] lo speed is unknown, defaulting to 1000
[  111.326929][ T9219] lo speed is unknown, defaulting to 1000
[  111.329678][ T9219] lo speed is unknown, defaulting to 1000
[  111.333640][ T9220] smc: removing ib device syz1
[  111.364939][ T9227] netlink: 'syz.2.944': attribute type 3 has an invalid length.
[  111.399261][ T9229] nbd: couldn't find a device at index 65546
[  111.812361][ T9250] netlink: 'syz.0.951': attribute type 4 has an invalid length.
[  111.917763][ T9257] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  112.009700][ T9268] netlink: 'syz.1.954': attribute type 11 has an invalid length.
[  112.350002][ T9318] lo speed is unknown, defaulting to 1000
[  112.436726][ T9332] IPVS: Scheduler module ip_vs_sip not found
[  132.634679][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  133.989766][ T9338] __nla_validate_parse: 10 callbacks suppressed
[  133.989779][ T9338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.971'.
[  133.997020][ T9338] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  134.006261][ T9341] netlink: 60 bytes leftover after parsing attributes in process `syz.0.970'.
[  134.008702][ T9343] netlink: 60 bytes leftover after parsing attributes in process `syz.0.970'.
[  134.009650][ T9341] netlink: 16 bytes leftover after parsing attributes in process `syz.0.970'.
[  134.018248][ T9343] netlink: 16 bytes leftover after parsing attributes in process `syz.0.970'.
[  134.068893][ T9347] syzkaller1: entered promiscuous mode
[  134.070960][ T9347] syzkaller1: entered allmulticast mode
[  134.129922][ T9353] netlink: 'syz.2.974': attribute type 3 has an invalid length.
[  134.134448][ T9353] netlink: 'syz.2.974': attribute type 3 has an invalid length.
[  134.184622][ T9360] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  134.190183][ T9360] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  134.201683][ T9360] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  134.207012][ T9360] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  134.210351][ T9360] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  134.215578][ T9357] lo speed is unknown, defaulting to 1000
[  134.218711][ T9360] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  134.230481][ T9365] netlink: 'syz.0.979': attribute type 12 has an invalid length.
[  134.233893][ T9360] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  134.249651][ T9360] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  134.274228][ T9360] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  134.277551][ T9360] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  134.280905][ T9360] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  134.285404][ T9360] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  134.314734][ T9360] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  134.317985][ T9360] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  134.321254][ T9360] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  134.325775][ T9360] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  134.330535][ T9360] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  134.334146][ T9360] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  134.344606][ T9360] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  134.348348][ T9360] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  134.352528][ T9360] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  134.356673][ T9360] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  134.360137][ T9360] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  134.377351][ T9360] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  134.380660][ T9360] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  134.385361][ T9360] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  134.388703][ T9360] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  134.392262][ T9360] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  134.395744][ T9360] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  134.399575][ T9360] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  134.405614][ T9360] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  134.409225][ T9360] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  134.417393][ T9360] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  134.501598][ T9372] lo speed is unknown, defaulting to 1000
[  134.504058][ T9377] netlink: 44 bytes leftover after parsing attributes in process `syz.0.982'.
[  134.508649][ T9375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.981'.
[  134.590134][ T9383] netlink: 'syz.2.984': attribute type 2 has an invalid length.
[  134.605184][ T9383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.984'.
[  134.664497][ T9388] lo speed is unknown, defaulting to 1000
[  134.850314][ T9393] netlink: 'syz.1.985': attribute type 11 has an invalid length.
[  134.879922][ T9405] tun0: tun_chr_ioctl cmd 2147767520
[  134.919338][ T9410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.991'.
[  134.923698][ T9410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.991'.
[  134.944169][ T9410] lo speed is unknown, defaulting to 1000
[  135.830275][ T9419] openvswitch: netlink: nsh attribute has 2338 unknown bytes.
[  135.834648][ T9419] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  135.838634][ T9419] netlink: 'syz.2.993': attribute type 1 has an invalid length.
[  136.040087][ T9436] netlink: 'syz.2.1001': attribute type 3 has an invalid length.
[  137.750143][ T9498] lo speed is unknown, defaulting to 1000
[  137.780003][ T9510] lo speed is unknown, defaulting to 1000
[  138.405671][   T25] block nbd0: Possible stuck request ffff888022cc8000: control (read@0,1024B). Runtime 30 seconds
[  138.409943][   T25] block nbd0: Possible stuck request ffff888022cc8200: control (read@1024,1024B). Runtime 30 seconds
[  138.415687][   T25] block nbd0: Possible stuck request ffff888022cc8400: control (read@2048,1024B). Runtime 30 seconds
[  138.420262][   T25] block nbd0: Possible stuck request ffff888022cc8600: control (read@3072,1024B). Runtime 30 seconds
[  138.539078][ T9559] lo speed is unknown, defaulting to 1000
[  139.103437][ T9592] netlink: 'syz.2.1048': attribute type 1 has an invalid length.
[  139.106313][ T9592] __nla_validate_parse: 25 callbacks suppressed
[  139.106321][ T9592] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1048'.
[  139.157021][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1049'.
[  139.184751][ T9597] syzkaller0: entered promiscuous mode
[  139.186692][ T9597] syzkaller0: entered allmulticast mode
[  140.280975][ T9619] tc_dump_action: action bad kind
[  140.411176][ T9624] netlink: 'syz.2.1058': attribute type 5 has an invalid length.
[  140.417614][ T7238] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  140.422211][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1058'.
[  140.422529][ T7238] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  140.429827][ T7238] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  140.434218][ T9624] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1058'.
[  140.435328][ T7238] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  140.474121][ T9634] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1062'.
[  140.497928][ T9632] lo speed is unknown, defaulting to 1000
[  140.539222][ T9637] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1061'.
[  140.546853][ T9637] ip6gretap0: entered promiscuous mode
[  140.548814][ T9637] ip6gretap0: entered allmulticast mode
[  140.647100][ T9650] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1067'.
[  140.662406][ T9650] lo speed is unknown, defaulting to 1000
[  140.867260][ T9657] lo speed is unknown, defaulting to 1000
[  140.957413][ T9661] lo speed is unknown, defaulting to 1000
[  141.119552][ T9673] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1074'.
[  141.217448][ T9692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1076'.
[  141.228146][ T9692] ipvlan2: entered promiscuous mode
[  141.256668][ T9699] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1079'.
[  141.312738][ T9701] lo speed is unknown, defaulting to 1000
[  141.439318][ T9713] netlink: 'syz.1.1084': attribute type 1 has an invalid length.
[  141.589505][ T9736] lo speed is unknown, defaulting to 1000
[  141.752984][ T9749] tc_dump_action: action bad kind
[  141.900404][ T9755] trusted_key: syz.1.1096 sent an empty control message without MSG_MORE.
[  141.914263][ T9765] netlink: 'syz.0.1098': attribute type 4 has an invalid length.
[  142.310351][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  142.487917][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  142.709908][ T9845] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  142.714297][ T9845] syzkaller0: entered promiscuous mode
[  142.716153][ T9845] syzkaller0: entered allmulticast mode
[  142.728670][ T9845] tipc: Resetting bearer <eth:syzkaller0>
[  142.733733][ T9844] tipc: Resetting bearer <eth:syzkaller0>
[  142.740372][ T9844] tipc: Disabling bearer <eth:syzkaller0>
[  143.148396][ T9856] lo speed is unknown, defaulting to 1000
[  143.598234][ T9868] lo speed is unknown, defaulting to 1000
[  143.614643][ T9867] syzkaller1: entered promiscuous mode
[  143.616733][ T9867] syzkaller1: entered allmulticast mode
[  143.835315][ T9885] tc_dump_action: action bad kind
[  143.864609][ T9885] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  143.875595][ T9890] tipc: Enabled bearer <eth:bond0>, priority 10
[  143.878728][ T9888] sctp: [Deprecated]: syz.1.1134 (pid 9888) Use of struct sctp_assoc_value in delayed_ack socket option.
[  143.878728][ T9888] Use struct sctp_sack_info instead
[  143.910302][ T9885] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  143.960574][ T9885] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  143.989676][ T9895] tipc: Cannot configure node identity twice
[  144.011275][ T9885] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  144.094749][ T7238] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  144.109495][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  144.124960][ T7238] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  144.135630][ T7238] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  144.158990][ T9904] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  144.258233][ T9927] __nla_validate_parse: 26 callbacks suppressed
[  144.258248][ T9927] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1143'.
[  144.270158][ T9927] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1143'.
[  144.276088][ T9927] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1143'.
[  144.279568][ T9927] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1143'.
[  144.282951][ T9927] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1143'.
[  144.285947][ T9927] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1143'.
[  144.550595][ T9951] ip6tnl1: entered allmulticast mode
[  144.872834][   T51] tipc: Node number set to 117440512
[  144.897515][ T9974] netlink: 'syz.0.1151': attribute type 21 has an invalid length.
[  144.901959][ T9974] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1151'.
[  144.924864][ T9976] netlink: 'syz.2.1152': attribute type 10 has an invalid length.
[  145.190322][T10003] netlink: 'syz.1.1162': attribute type 3 has an invalid length.
[  145.197429][T10003] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1162'.
[  145.315698][T10016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1164'.
[  145.319050][T10016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1164'.
[  145.385269][T10024] netlink: 'syz.0.1167': attribute type 12 has an invalid length.
[  145.487359][T10033] lo speed is unknown, defaulting to 1000
[  145.508463][T10039] netlink: 'syz.0.1170': attribute type 4 has an invalid length.
[  145.696833][T10047] netlink: 'syz.2.1173': attribute type 11 has an invalid length.
[  145.873662][T10050] syzkaller1: entered promiscuous mode
[  145.875491][T10050] syzkaller1: entered allmulticast mode
[  146.601002][T10061] tipc: New replicast peer: 255.255.255.255
[  146.606591][T10061] tipc: Enabled bearer <udp:s>, priority 10
[  146.682505][T10065] lo speed is unknown, defaulting to 1000
[  146.849431][T10077] ------------[ cut here ]------------
[  146.852150][T10077] wlan1: Failed check-sdata-in-driver check, flags: 0x1
[  146.856899][T10077] WARNING: CPU: 0 PID: 10077 at net/mac80211/driver-ops.c:366 drv_unassign_vif_chanctx+0x50b/0x7e0
[  146.860753][T10077] Modules linked in:
[  146.862434][T10077] CPU: 0 UID: 0 PID: 10077 Comm: syz.2.1182 Not tainted syzkaller #0 PREEMPT(full) 
[  146.866483][T10077] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  146.870124][T10077] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0
[  146.872649][T10077] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 40 3c b0 8c e8 c6 d1 9a f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 17 33 d7 f6 90 0f 0b 90 42 80 7c 3d
[  146.879597][T10077] RSP: 0018:ffffc90002fef2f0 EFLAGS: 00010246
[  146.881829][T10077] RAX: c248b2e0fe531100 RBX: 0000000000000000 RCX: ffff88803de38000
[  146.884645][T10077] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  146.887802][T10077] RBP: ffff88801ef9d728 R08: ffff88804b024253 R09: 1ffff1100960484a
[  146.891052][T10077] R10: dffffc0000000000 R11: ffffed100960484b R12: ffff88801ef9e9d0
[  146.894850][T10077] R13: ffff88801ef9cd80 R14: 1ffff11003df3ae5 R15: dffffc0000000000
[  146.898050][T10077] FS:  00007f3cf9e366c0(0000) GS:ffff8880b8614000(0000) knlGS:0000000000000000
[  146.901961][T10077] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  146.904632][T10077] CR2: 00007f3cf8f74c40 CR3: 00000000287fa000 CR4: 00000000000006f0
[  146.907899][T10077] Call Trace:
[  146.909351][T10077]  <TASK>
[  146.910608][T10077]  ieee80211_assign_link_chanctx+0x1ec/0xd70
[  146.913364][T10077]  __ieee80211_link_release_channel+0x33b/0x4a0
[  146.915964][T10077]  ieee80211_if_change_type+0x14c/0x990
[  146.918174][T10077]  ieee80211_change_iface+0xd5/0x510
[  146.920346][T10077]  cfg80211_change_iface+0x795/0xef0
[  146.922949][T10077]  nl80211_set_interface+0x773/0xaa0
[  146.925145][T10077]  ? __pfx_nl80211_set_interface+0x10/0x10
[  146.927562][T10077]  ? nl80211_pre_doit+0x4fb/0x930
[  146.929681][T10077]  genl_family_rcv_msg_doit+0x215/0x300
[  146.932391][T10077]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  146.934932][T10077]  ? bpf_lsm_capable+0x9/0x20
[  146.936894][T10077]  ? security_capable+0x7e/0x2e0
[  146.939005][T10077]  genl_rcv_msg+0x60e/0x790
[  146.940898][T10077]  ? __pfx_genl_rcv_msg+0x10/0x10
[  146.943331][T10077]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  146.945535][T10077]  ? __pfx_nl80211_set_interface+0x10/0x10
[  146.947859][T10077]  ? __pfx_nl80211_post_doit+0x10/0x10
[  146.950107][T10077]  netlink_rcv_skb+0x208/0x470
[  146.952498][T10077]  ? __lock_acquire+0xab9/0xd20
[  146.954542][T10077]  ? __pfx_genl_rcv_msg+0x10/0x10
[  146.956551][T10077]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  146.958706][T10077]  ? down_read+0x1ad/0x2e0
[  146.960531][T10077]  genl_rcv+0x28/0x40
[  146.962499][T10077]  netlink_unicast+0x82f/0x9e0
[  146.964457][T10077]  ? __pfx_netlink_unicast+0x10/0x10
[  146.966597][T10077]  ? netlink_sendmsg+0x642/0xb30
[  146.968601][T10077]  ? skb_put+0x11b/0x210
[  146.970363][T10077]  netlink_sendmsg+0x805/0xb30
[  146.972697][T10077]  ? __pfx_netlink_sendmsg+0x10/0x10
[  146.974885][T10077]  ? aa_sock_msg_perm+0xf1/0x1d0
[  146.976932][T10077]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  146.979141][T10077]  ? __pfx_netlink_sendmsg+0x10/0x10
[  146.981318][T10077]  __sock_sendmsg+0x21c/0x270
[  146.983653][T10077]  __sys_sendto+0x3bd/0x520
[  146.985539][T10077]  ? __pfx___sys_sendto+0x10/0x10
[  146.987562][T10077]  ? fput_close_sync+0x119/0x200
[  146.989647][T10077]  ? __pfx_fput_close_sync+0x10/0x10
[  146.992226][T10077]  __x64_sys_sendto+0xde/0x100
[  146.994246][T10077]  do_syscall_64+0xfa/0x3b0
[  146.996120][T10077]  ? lockdep_hardirqs_on+0x9c/0x150
[  146.998265][T10077]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.000755][T10077]  ? exc_page_fault+0x9f/0xf0
[  147.003068][T10077]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.005792][T10077] RIP: 0033:0x7f3cf8f90a7c
[  147.007636][T10077] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[  147.015484][T10077] RSP: 002b:00007f3cf9e34e20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  147.018926][T10077] RAX: ffffffffffffffda RBX: 00007f3cf9e34fa0 RCX: 00007f3cf8f90a7c
[  147.022333][T10077] RDX: 0000000000000024 RSI: 00007f3cf9e34ff0 RDI: 0000000000000004
[  147.025593][T10077] RBP: 0000000000000000 R08: 00007f3cf9e34e74 R09: 000000000000000c
[  147.028877][T10077] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004
[  147.032268][T10077] R13: 0000000000000000 R14: 00007f3cf9e34ff0 R15: 0000000000000000
[  147.035447][T10077]  </TASK>
[  147.036522][T10077] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  147.039245][T10077] CPU: 0 UID: 0 PID: 10077 Comm: syz.2.1182 Not tainted syzkaller #0 PREEMPT(full) 
[  147.042758][T10077] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  147.046576][T10077] Call Trace:
[  147.047990][T10077]  <TASK>
[  147.049216][T10077]  dump_stack_lvl+0x99/0x250
[  147.051120][T10077]  ? __asan_memcpy+0x40/0x70
[  147.053023][T10077]  ? __pfx_dump_stack_lvl+0x10/0x10
[  147.055120][T10077]  ? __pfx__printk+0x10/0x10
[  147.057046][T10077]  vpanic+0x281/0x750
[  147.058715][T10077]  ? __pfx__printk+0x10/0x10
[  147.060597][T10077]  ? __pfx_vpanic+0x10/0x10
[  147.062444][T10077]  ? is_bpf_text_address+0x292/0x2b0
[  147.064614][T10077]  panic+0xb9/0xc0
[  147.066235][T10077]  ? __pfx_panic+0x10/0x10
[  147.068095][T10077]  __warn+0x31b/0x4b0
[  147.069788][T10077]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  147.072079][T10077]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  147.074350][T10077]  report_bug+0x2be/0x4f0
[  147.076132][T10077]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  147.078492][T10077]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  147.080861][T10077]  ? drv_unassign_vif_chanctx+0x50d/0x7e0
[  147.083129][T10077]  handle_bug+0x84/0x160
[  147.084526][T10077]  exc_invalid_op+0x1a/0x50
[  147.086034][T10077]  asm_exc_invalid_op+0x1a/0x20
[  147.087706][T10077] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0
[  147.089714][T10077] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 40 3c b0 8c e8 c6 d1 9a f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 17 33 d7 f6 90 0f 0b 90 42 80 7c 3d
[  147.095908][T10077] RSP: 0018:ffffc90002fef2f0 EFLAGS: 00010246
[  147.097852][T10077] RAX: c248b2e0fe531100 RBX: 0000000000000000 RCX: ffff88803de38000
[  147.100332][T10077] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  147.103030][T10077] RBP: ffff88801ef9d728 R08: ffff88804b024253 R09: 1ffff1100960484a
[  147.105874][T10077] R10: dffffc0000000000 R11: ffffed100960484b R12: ffff88801ef9e9d0
[  147.108792][T10077] R13: ffff88801ef9cd80 R14: 1ffff11003df3ae5 R15: dffffc0000000000
[  147.111378][T10077]  ieee80211_assign_link_chanctx+0x1ec/0xd70
[  147.113431][T10077]  __ieee80211_link_release_channel+0x33b/0x4a0
[  147.115746][T10077]  ieee80211_if_change_type+0x14c/0x990
[  147.117781][T10077]  ieee80211_change_iface+0xd5/0x510
[  147.119495][T10077]  cfg80211_change_iface+0x795/0xef0
[  147.121230][T10077]  nl80211_set_interface+0x773/0xaa0
[  147.122963][T10077]  ? __pfx_nl80211_set_interface+0x10/0x10
[  147.124880][T10077]  ? nl80211_pre_doit+0x4fb/0x930
[  147.126712][T10077]  genl_family_rcv_msg_doit+0x215/0x300
[  147.128739][T10077]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  147.131050][T10077]  ? bpf_lsm_capable+0x9/0x20
[  147.132816][T10077]  ? security_capable+0x7e/0x2e0
[  147.134673][T10077]  genl_rcv_msg+0x60e/0x790
[  147.136211][T10077]  ? __pfx_genl_rcv_msg+0x10/0x10
[  147.137895][T10077]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  147.139651][T10077]  ? __pfx_nl80211_set_interface+0x10/0x10
[  147.141747][T10077]  ? __pfx_nl80211_post_doit+0x10/0x10
[  147.143675][T10077]  netlink_rcv_skb+0x208/0x470
[  147.145485][T10077]  ? __lock_acquire+0xab9/0xd20
[  147.147267][T10077]  ? __pfx_genl_rcv_msg+0x10/0x10
[  147.148945][T10077]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  147.150780][T10077]  ? down_read+0x1ad/0x2e0
[  147.152509][T10077]  genl_rcv+0x28/0x40
[  147.154014][T10077]  netlink_unicast+0x82f/0x9e0
[  147.155766][T10077]  ? __pfx_netlink_unicast+0x10/0x10
[  147.157771][T10077]  ? netlink_sendmsg+0x642/0xb30
[  147.159620][T10077]  ? skb_put+0x11b/0x210
[  147.161184][T10077]  netlink_sendmsg+0x805/0xb30
[  147.163016][T10077]  ? __pfx_netlink_sendmsg+0x10/0x10
[  147.164945][T10077]  ? aa_sock_msg_perm+0xf1/0x1d0
[  147.166757][T10077]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  147.168636][T10077]  ? __pfx_netlink_sendmsg+0x10/0x10
[  147.170662][T10077]  __sock_sendmsg+0x21c/0x270
[  147.172566][T10077]  __sys_sendto+0x3bd/0x520
[  147.174177][T10077]  ? __pfx___sys_sendto+0x10/0x10
[  147.176016][T10077]  ? fput_close_sync+0x119/0x200
[  147.177782][T10077]  ? __pfx_fput_close_sync+0x10/0x10
[  147.179823][T10077]  __x64_sys_sendto+0xde/0x100
[  147.181556][T10077]  do_syscall_64+0xfa/0x3b0
[  147.183218][T10077]  ? lockdep_hardirqs_on+0x9c/0x150
[  147.185052][T10077]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.187110][T10077]  ? exc_page_fault+0x9f/0xf0
[  147.188801][T10077]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  147.190696][T10077] RIP: 0033:0x7f3cf8f90a7c
[  147.192096][T10077] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[  147.198267][T10077] RSP: 002b:00007f3cf9e34e20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  147.200868][T10077] RAX: ffffffffffffffda RBX: 00007f3cf9e34fa0 RCX: 00007f3cf8f90a7c
[  147.203350][T10077] RDX: 0000000000000024 RSI: 00007f3cf9e34ff0 RDI: 0000000000000004
[  147.205875][T10077] RBP: 0000000000000000 R08: 00007f3cf9e34e74 R09: 000000000000000c
[  147.208376][T10077] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004
[  147.210855][T10077] R13: 0000000000000000 R14: 00007f3cf9e34ff0 R15: 0000000000000000
[  147.213355][T10077]  </TASK>
[  147.214980][T10077] Kernel Offset: disabled
[  147.216354][T10077] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:10:45  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000034 RBX=0000000000000034 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002feea90
R8 =ffff888021910237 R9 =1ffff11004322046 R10=dffffc0000000000 R11=ffffffff854f3d80
R12=dffffc0000000000 R13=ffffffff99b018cd R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f3dfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f3cf9e366c0 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3cf8f74c40 CR3=00000000287fa000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f730e212e53
XMM06=0000000000000000 00007f730e212e4d XMM07=0000000000000000 00007f730e212e61
XMM08=0000000000000000 00007f730e212ee7 XMM09=0000000000000000 00007f730e212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffffffff8b7ccb57 RCX=673a3d97c774c200 RDX=0000000000000000
RSI=ffffffff8b7ccb57 RDI=1ffffffff33ab20e RBP=ffffffff84d05aaa RSP=ffffc90001d3f720
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=fffffbfff1f47267
R12=0000000000000000 R13=ffffffff99d59070 R14=ffffffff99d59070 R15=0000000000000001
RIP=ffffffff82230686 RFL=00000802 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f12c476a380 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f07b93acf18 CR3=000000010f7f2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00000000ffff0000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
