last executing test programs:

1.539099141s ago: executing program 2 (id=998):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1d", 0x80, 0x0, 0x0, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="040100001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280080005000120"], 0x104}, 0x1, 0x0, 0x0, 0x48005}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000000)={'ip6tnl0\x00', <r2=>0x0, 0x4, 0xe, 0x6, 0x8, 0x43, @remote, @private0, 0x20, 0x8, 0x49c50e3c, 0x10}})
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x9, [@int={0x3, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x6d, 0x1}]}, {0x0, [0x0, 0x61, 0x2e, 0x5f, 0x0, 0x0, 0x2e]}}, &(0x7f00000001c0)=""/97, 0x31, 0x61, 0x0, 0x5}, 0x28)
pipe(&(0x7f0000000140)={<r4=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
tee(r4, r5, 0xaf5, 0x0)
r6 = socket$netlink(0x10, 0x3, 0xc)
setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f0000000240)=0xfffffff4, 0x4)
r7 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r7, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)=ANY=[@ANYBLOB="140000000d0603"], 0x14}}, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'})
r9 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl(r9, 0x8b32, &(0x7f0000000040))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r8}, 0x18)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f00), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r11, @ANYBLOB="010026bd7000ffdadf251d0000000c000600010000000100000084002f800c000200000000000000000018000100070000006c00038005000200030000003800038008000200"], 0xa4}, 0x1, 0x0, 0x0, 0x880}, 0x40)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x7, 0x101, 0xfffffffa, 0x96, r0, 0x9, '\x00', r2, r3, 0x4, 0x4, 0x5, 0x4}, 0x50)

1.296990686s ago: executing program 0 (id=1000):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)="b2", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18, 0x20040801}}], 0x1, 0x0)
accept4$unix(r0, 0x0, 0x0, 0x80800)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0}, 0x50)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=r5, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f400000005000200020000000800030005ac0f0005000900010000001c"], 0x58}}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, <r8=>0x0}, &(0x7f0000000400)=0xc)
sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000540)={0x3c, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc, 0x0, 0x0, @uid=r8}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x14, 0xf6, 0x0, 0x1, [@nested={0x10, 0x146, 0x0, 0x1, [@typed={0x8, 0x14a, 0x0, 0x0, @u32=0xb3}, @nested={0x4, 0x4d}]}]}]}]}, 0x3c}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x38, 0x8, 0x70bd28, 0x25dfdbfd, {0x15}, [@typed={0x8, 0x79, 0x0, 0x0, @uid=r8}, @typed={0x8, 0x5b, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x30}}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x10, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffff80}}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.270113827s ago: executing program 0 (id=1001):
ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000040))
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$VHOST_VDPA_GET_VRING_GROUP(r0, 0xc008af7b, &(0x7f00000000c0)={0x3, 0x6}) (async)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000100)={0x3, r1}) (async)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000140)=0x6, 0x4) (async)
ioctl$VHOST_VDPA_GET_VQS_COUNT(r1, 0x8004af80, &(0x7f0000000180)) (async)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x2f343c8d99daf0d5, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffe}]}, 0x1c}}, 0x40020)
setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x5, 0x2)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x24000000)
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000400)={<r2=>0x0, "14848c586506a1709ccb7260337f95cb"})
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000001400)={r2, 0x0, 0x1, [0x9, 0x260, 0x1, 0x0, 0x2], [0xffff, 0x3, 0x1, 0x55, 0x9dc6, 0x2, 0xfbb, 0x5633, 0xb9f3, 0x5, 0x8, 0xb, 0x59e, 0x7ff, 0x9, 0x3, 0x2b, 0x9, 0xffff, 0x0, 0xf73, 0x100, 0x3, 0x2, 0x1, 0x8, 0x10001, 0x7, 0x6, 0x101, 0x2, 0x2, 0x4, 0x9, 0x4, 0x8000000000000000, 0x1f, 0x9, 0x9, 0x9, 0x7, 0x0, 0x1dd, 0x3, 0x6, 0x5, 0x1, 0x5, 0x81, 0xffffffffffff7eaa, 0x5, 0x1, 0x3ff, 0x2, 0x1, 0xd9de, 0x4, 0x7, 0x1, 0x7ff, 0x1, 0x7c, 0x9, 0x21, 0x6, 0x3, 0x2, 0x98e6, 0xfffffffffffff797, 0x3, 0x3, 0x8, 0x4, 0x4, 0x8, 0x5, 0x0, 0x3ff, 0x9, 0x3, 0x8000, 0x3, 0x10001, 0x3, 0x7, 0x7, 0x7, 0x1, 0xb2f, 0x4, 0x2, 0x7f, 0x2a, 0x76f, 0x6, 0x8000000000000000, 0x7, 0x100000001, 0x1fffe0, 0x2, 0xb777, 0x4, 0x8, 0x13, 0xb134, 0x4, 0x2, 0x5, 0x2, 0x8, 0x3, 0xfffffffffffffff8, 0x6, 0xffffffffffffffff, 0xca95, 0x100000001, 0x6, 0x6, 0x2, 0x100000001, 0x5]}) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x10000010}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x84, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x84}, 0x1, 0x0, 0x0, 0x8081}, 0x200000c0) (async)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f00000019c0))
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000001a00)={<r4=>0x0, 0xe}, &(0x7f0000001a40)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001a80)={r4}, &(0x7f0000001ac0)=0x8)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b40), r0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x20, r5, 0x404, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x44}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xc801}, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000001c80), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x20, r7, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004001}, 0x8040) (async)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000001dc0), r6)
sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ec0)={&(0x7f0000001d80), 0xc, &(0x7f0000001e80)={&(0x7f0000001e00)={0x54, r9, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x4)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000001f40), r8) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001f80)={<r11=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001fc0)={<r12=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000002100)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000020c0)={&(0x7f0000002000)={0x9c, r10, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x23}, @NBD_ATTR_SOCKETS={0x58, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'nbd\x00'}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x90}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) (async)
bind$xdp(r11, &(0x7f0000002140)={0x2c, 0x4, 0x0, 0x27}, 0x10) (async)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000002240)={{}, 0x0, 0x4, @unused=[0x1, 0x7, 0x7, 0x7ff], @name="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"})

1.179108745s ago: executing program 0 (id=1002):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1e4, r1, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4000000}, 0x85) (async)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r0)
sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r2, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x24044041) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r3, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x4e}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40884}, 0x20000004) (async)
r5 = bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r0}, 0x8)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000880)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000680)={0x190, r6, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CQM={0x50, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x81}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x9, 0xa8d, 0x9]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x5, 0x2, 0x9]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x4, 0x3, 0x7b0, 0x6]}]}, @NL80211_ATTR_CQM={0x50, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x9, 0x4, 0x200, 0x5]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x2, 0x2, 0x7]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x36e}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1ff}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x4, 0x3ff, 0x80000000]}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x956, 0x3, 0x1, 0x3, 0x7, 0x4, 0x7fffffff]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x16}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x423}]}, @NL80211_ATTR_CQM={0x28, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xb61, 0x7]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xf2}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x9, 0x9, 0x96a, 0x40, 0x6, 0x1ff, 0xed, 0x7]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x102}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xb8}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async)
clock_gettime(0x4, &(0x7f00000008c0))
sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f00000009c0)={&(0x7f0000000900), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, r6, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x3f}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r6, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040005}, 0x20040110) (async)
nanosleep(&(0x7f0000000b00)={0x0, 0x3938700}, &(0x7f0000000b40)) (async)
recvfrom(r0, &(0x7f0000000b80)=""/141, 0x8d, 0x2003, 0x0, 0x0) (async)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x28, r2, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4804}, 0x4) (async)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000d80), r0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x44, r7, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x58}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r8, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x2c, r3, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), 0xffffffffffffffff) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001040)=<r11=>0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001080)=<r12=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000010c0)=<r13=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001100)=<r14=>0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001140)=<r15=>0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001180)=<r16=>0x0)
sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f00000012c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x4c, r10, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc010}, 0x44000)

1.17863792s ago: executing program 0 (id=1003):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMRRU(r2, 0x4010744d, &(0x7f0000000080)=0xc)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0x4c, 0x64, 0xf31, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xfff3, 0xffff}, {0x0, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0xfd8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008010}, 0x44044)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) (async)
ioctl$PPPIOCSMRRU(r2, 0x4010744d, &(0x7f0000000080)=0xc) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0x4c, 0x64, 0xf31, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xfff3, 0xffff}, {0x0, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0xfd8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008010}, 0x44044) (async)

1.068717719s ago: executing program 0 (id=1005):
r0 = socket(0x1d, 0x2, 0x7)
getsockname$packet(r0, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000b80))
clock_gettime(0x0, &(0x7f0000000a40)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000000b00)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000800)=[{&(0x7f0000000c80)=""/236, 0xec}, {&(0x7f0000000180)=""/1}, {&(0x7f00000001c0)=""/39, 0x27}, {&(0x7f0000000200)=""/135, 0x87}, {&(0x7f00000002c0)=""/149, 0x95}, {&(0x7f0000000380)=""/235, 0xeb}, {&(0x7f0000000480)=""/77, 0x4d}, {&(0x7f0000000500)=""/232, 0xe8}, {&(0x7f0000000600)=""/221, 0xdd}, {&(0x7f0000000d80)=""/242, 0xf2}], 0xa, &(0x7f0000000080)=""/120, 0x78}, 0x6}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000940)=""/36, 0x24}, {&(0x7f0000000980)=""/23, 0x17}, {&(0x7f00000009c0)=""/114, 0x72}, {&(0x7f0000000c00)=""/105, 0x69}], 0x4}, 0x1428}], 0x2, 0x0, &(0x7f0000000bc0)={r1, r2+10000000})

838.487581ms ago: executing program 1 (id=1009):
socket(0x10, 0x80002, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newtaction={0x50, 0x1e, 0x109, 0x100, 0x0, {}, [{0x3c, 0x1, [@m_tunnel_key={0x38, 0x8, 0x0, 0x0, {{0xf}, {0x4}, {0x6, 0x6, "f8a1"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x50}, 0x1, 0x2b1e}, 0x4000040)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x0, 0x80, 0xfd}, [@RTA_DST={0x8}]}, 0x24}}, 0x20000050)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0xe, 0x601, 0x64, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x20, 0x9, 0x3ff}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180))
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x20, 0x700, 0x2, 0x8, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x67, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, {[@ssrr={0x89, 0x1f, 0x19, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @local, @dev={0xac, 0x14, 0x14, 0x26}, @rand_addr=0x64010102, @loopback]}, @lsrr={0x83, 0x1f, 0x12, [@loopback, @rand_addr=0x64010102, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @private=0xa010102, @multicast1]}, @end, @rr={0x7, 0x1b, 0x12, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @noop, @generic={0x44, 0x9, "1ab38bade30eb1"}, @ssrr={0x89, 0x17, 0x75, [@local, @dev={0xac, 0x14, 0x14, 0x21}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}]}}}}})
r3 = socket$xdp(0x2c, 0x3, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, &(0x7f0000000180))
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', <r6=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup/syz1\x00', 0x1ff)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @local}, &(0x7f00000003c0)=0xc)
r7 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', <r8=>0x0})
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xc8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0x100, 0x5d, 0x0, 0x7ff, 0x200}}, {0x4}}]}]}, 0xc8}}, 0x0)

670.50272ms ago: executing program 2 (id=1010):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000000009500"/24], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r3, 0x11, 0x0, 0x0, @void, @value=r2}, 0x20)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map, r3, 0xf3c5227cb953423c, 0x2010, 0x0, @value=r4}, 0x20)
syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f00000003c0)=@req3={0x10, 0x0, 0xfc21, 0x4, 0x1000, 0xe6, 0x2c1}, 0x1c)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x8032, 0xffffffffffffffff, 0x0)

559.752059ms ago: executing program 2 (id=1011):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async)
listen(r0, 0xfffffffc) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x10000000}]}}]}, 0x3c}}, 0x0) (async)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000000c0)=0x1000002, 0x4) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x5}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x1}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x7ffe, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {}, {0xffff, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008050}, 0x20004044) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl2\x00', r10, 0x7800, 0x7800, 0x6, 0x6, {{0x26, 0x4, 0x3, 0xd, 0x98, 0x64, 0x0, 0xc, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x89, 0xb, "91c6a38b8e39dea2b3"}, @timestamp_addr={0x44, 0x54, 0x52, 0x1, 0x8, [{@remote, 0x40}, {@remote, 0xc}, {@empty}, {@multicast1, 0x4}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0xa}, {@empty}, {@private=0xa010101, 0xb}, {@empty, 0xe8c}, {@rand_addr=0x64010101, 0x3}]}, @generic={0x89, 0xb, "2c28ebc234b6b12dc0"}, @end, @lsrr={0x83, 0x13, 0x5c, [@empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x1d}, @broadcast]}, @generic={0x0, 0x2}, @lsrr={0x83, 0x3, 0x5b}]}}}}}) (async)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2c, 0x25dfdbf7, {0x0, 0x0, 0x0, r12, {0xb, 0x19}, {0x0, 0xfff1}, {0xe, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) (async)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r14, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x8c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

558.287646ms ago: executing program 1 (id=1012):
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0)
socket$alg(0x26, 0x5, 0x0)

456.894266ms ago: executing program 1 (id=1013):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
recvmsg$unix(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r8, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r8], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r10 = socket(0x10, 0x3, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
r12 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r12, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="2eb9", 0x2}], 0x1}}], 0x2, 0x0)
shutdown(r12, 0x1)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r12, 0x84, 0x6, &(0x7f00000009c0)={0x0, @in6={{0xa, 0x4e23, 0xab9, @local, 0x8}}}, &(0x7f0000000100)=0x84)

320.295198ms ago: executing program 2 (id=1014):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x30, r2, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040800}, 0x0)
bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x20000}, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=ANY=[@ANYBLOB="b40000001800010000000000fedbdf250200000000010009000000000600150004000000900016808c0008808800018078000380"], 0xb4}, 0x1, 0x0, 0x0, 0x40084}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r5)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'geneve1\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0x6}, {0xffffffffffffff7f, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf384}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}, @TCA_FQ_CODEL_FLOWS={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x78}}, 0x0)

307.749468ms ago: executing program 1 (id=1015):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r1, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
r2 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000040)=0x60)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000300))
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r3, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
unshare(0x22020600)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r4}, 0x10)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x3, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0xfffffffc}}, 0xb8}}, 0x2c000010)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x0)
r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000000009500"/24], &(0x7f0000000140)='GPL\x00', 0x2, 0x97, &(0x7f0000000400)=""/151, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r9, 0x11, 0x0, 0x0, @void, @value=r8}, 0x20)
sendto$rose(r8, &(0x7f0000000600)="d7ad387d547da29c1748d20eb7e2126c113d6559d061f546724d7ddf446835cdc3fdce5044d22ac6c1cf42e0efaa1a5b3d6801b0a67ac19f2efca50ed451bc895c71d0c204fcc828f0ceae1bcc582d8773fe8168758a5af111c00028604b7665f99b244d2f29de0ea1a767fc4a4a0a9e6bea18d48e98d9200f8a602944e2ae87b2d8c5e2ecaff0d414f4542b744ae9ada46d3bc2112ef117c819d904c4d0f418bd0f7667cb048a6dafda7399260020e7091d5d6531a8a0d02d6393b273eb61146f9b7633da6de5b5ce3f8f3e311c97cb69770f617d39cd523b8b378fe2", 0xdd, 0x4008001, &(0x7f0000000700)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map, r9, 0xf3c5227cb953423c, 0x2010, 0x0, @value=r10}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x48)

247.512239ms ago: executing program 2 (id=1016):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b04000000000000000002000000240004802000018007000100637499e6ce2afca05859a038762600001400028008000240ccc3e862080004400000000d0900010073797a30000000000900020073797a3200000000050007402d0000001400000011000100"], 0x80}}, 0x40)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x40050}, 0x0)
syz_emit_ethernet(0x1e, &(0x7f0000000480)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaaaa010000008107e7f088080000000000000000"], 0x0)
r3 = socket$kcm(0x2d, 0x2, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000)=0x482, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000440)=@delneigh={0x1c, 0x1d, 0x100, 0x70bd27, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x0, 0x1, 0x9a, 0x6}}, 0x1c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_opts(r4, 0x0, 0x480, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0xc000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782", 0xc}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0700000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="ffffffff00000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r7=>0x0})
r8 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80)
socket$inet6(0xa, 0x2, 0x0)

190.080292ms ago: executing program 1 (id=1017):
r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x80, 0x800)
sendmsg$nl_generic(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x1b8, 0x3b, 0x400, 0x70bd2a, 0x25dfdbfd, {0x19}, [@generic="730e4d08c5c7ee6c070ca21332fc7b608d858b3b91760e3fedafb6bf799ba8375c08bd0a0a8dc9f21bfab2be8749caf12c38539319ff39650a5c380fe01bdff0314ca09cdd6dc71d16afa87efdb8fa1d2cb7ece933cfc8738e0cd8012b7a24ad76261291e65dfbc600612bea9a9cf3ffb55c3058fc2d603d0f1bc48bea3c0383b20ca67e890ed41608a535946acee9977813674a4d5217eb46e8797bc59676c77e5e1a06e68bed5cec913ff69bee34af669816830d394815e86422", @generic='R$', @typed={0xe1, 0x5, 0x0, 0x0, @binary="02ad01411b4425ae75efb80a9acf55ec0fb3fa422937e7c932d2da711370d1bf77297293445552d5242e85291a199a9a408e2af21b70a69a386df27b1f0b15d2b36bdfaf004556aaa6c5e5e843a7af8e126c23345d5c4161d4aa4200486df40656b3766cf515c4c96316ddecd3c50c69717d3e88f6404955cf14dc2796b76c6434d05314e7ad710a3d86ec64e0492436c734c49a0436ef225f82ea290559a165e9eb56eb1274b6a47dbcac907f941076e1e16694afe546b473c02ee1c772a459cfd354dfefae1386f56955ca55701a8f8b9a6b3b27afebc5df6052e195"}]}, 0x1b8}}, 0x40080)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x1, 0x2, @vifc_lcl_addr=@local, @loopback}, 0x10)
connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10)
sendto$inet6(r0, &(0x7f00000003c0)="f1d4301de3aea4b8b4a5219397f5690cbd734c20dcfff8e3957621f4be7380956fb3014259daa71137b6ba1d57c4bb2a5c804aa04feb486f3d35f4085c33a8c91afa001f434ff35ee363bdae07602f0fc57d", 0x52, 0x10, &(0x7f0000000440)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x1}, 0x1c)
setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000480)=0xd0a, 0x4)
sendmsg$nl_generic(r0, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x9c, 0x41, 0x859de9ac64a6fc85, 0x70bd29, 0x25dfdbff, {0x2}, [@generic="6c79feef184885b798f214991f94a7d3e0ed6ee27dd710eab52e0e8c05a31ca7ea9ecefa72fae9f2d70d9f8940a93ab7df1fddd970b7193c2174dd1fe699274d03a6914fd76551cf4ce22f98625333f04c045a2d09258354d04fee37036f9c01a546e5172e852a1873558ad02d15480dcbfa9904b3c0c6a44e23c5e101997868c92a00971f05"]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000010}, 0x880)
recvfrom$ax25(r0, &(0x7f0000000640)=""/100, 0x64, 0x2000, &(0x7f00000006c0)={{0x3, @default}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48)
recvmsg(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/223, 0xdf}], 0x2, &(0x7f0000001880)=""/20, 0x14}, 0x0)
write$nbd(r0, &(0x7f0000001900)={0x67446698, 0x1, 0x1, 0x2, 0x3, "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"}, 0x10e)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000001b00)=@get={0x1, &(0x7f0000001a40)=""/166, 0x43e2004f})
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000001b40)=0xf, 0x4)
ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000001b80)=@generic={0x3, 0x8001, 0x5})
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000001bc0)=0x8)
getpeername(r0, &(0x7f0000001c00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000001c80)=0x80)
r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001d00)=@o_path={&(0x7f0000001cc0)='./file0\x00', 0x0, 0x95bb3f597c1cac5c, r0}, 0x18)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000001d80), r0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001e80)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x80, r3, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010100}, @GTPA_FAMILY={0x5, 0xd, 0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_PEER_ADDR6={0x14, 0xb, @empty}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_PEER_ADDR6={0x14, 0xb, @empty}]}, 0x80}, 0x1, 0x0, 0x0, 0x84}, 0x20008000)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001f40)={{r2, <r4=>0xffffffffffffffff}, &(0x7f0000001ec0), &(0x7f0000001f00)='%pB    \x00'}, 0x20)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r4, 0x8008f512, &(0x7f0000001f80))
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000001fc0)={0x0, 0x5, [0x9, 0x1, 0x3ff, 0x3ff, 0x1ae, 0x8001]})
bpf$PROG_BIND_MAP(0x23, &(0x7f0000002000)={0xffffffffffffffff, r2}, 0xc)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000002040), &(0x7f0000002080)=0x4)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000020c0), 0x4)
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000002140), r0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000002200)={'syztnl1\x00', &(0x7f0000002180)={'syztnl2\x00', <r6=>0x0, 0x29, 0x10, 0xc, 0x86, 0x7, @empty, @local, 0x700, 0x8, 0x5, 0x8}})
sendmsg$FOU_CMD_DEL(r0, &(0x7f0000002300)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000022c0)={&(0x7f0000002240)={0x50, r5, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_TYPE={0x5, 0x4, 0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0xd}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040080}, 0x8000)
connect$netrom(r0, &(0x7f0000002340)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast]}, 0x48)

188.393482ms ago: executing program 0 (id=1018):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x48)
r1 = socket$inet(0x10, 0x3, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet6_int(r2, 0x29, 0x4b, 0x0, &(0x7f0000000a40))
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4eb}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8}]}]}]}}]}, 0xb4}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000610200000000000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
recvfrom(r1, &(0x7f0000000040)=""/59, 0x3b, 0x3020, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x48) (async)
socket$inet(0x10, 0x3, 0x0) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
getsockopt$inet6_int(r2, 0x29, 0x4b, 0x0, &(0x7f0000000a40)) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4eb}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8}]}]}]}}]}, 0xb4}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000610200000000000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) (async)
recvfrom(r1, &(0x7f0000000040)=""/59, 0x3b, 0x3020, 0x0, 0x0) (async)

99.785423ms ago: executing program 1 (id=1019):
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x48, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6={0xa, 0x4e20, 0x5cb0, @loopback, 0x3}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}]}, 0x0)
socket$kcm(0xa, 0x3, 0x87)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000100000001800000000000000000000000000000095000000000000008d9062820b805b34b78cd182a01ecb91883b0a35102f01324235980ad30eec31c3ef5aa5f388d90180b341fe855c2dd81ed8f08c8d0a5e7e73f550d9461d75cb56882bcd494988742cec70bccbc32951d3f9d772b8a3d31048f518cc3e2ac4b79c989dd9a916d196984bd6d75f6f1a8931038fafd5a689297fee3cca9cc34c2a263835e34e09ae067cea299ac864ec133ab03255cd082d9d5386e5b6a48cec6913e6ea6e7c8a7df69b8e5bdeafa1a00934784c00"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x9c, &(0x7f0000000540)=""/156, 0x0, 0x4}, 0x2f)
getsockname$netrom(r4, 0x0, &(0x7f0000001280))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
unshare(0x400)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2, 0x6, 0x6, 0x3, 0x3, 0x0, 0x70bd22, 0x25dfdbff, [@sadb_x_sec_ctx={0x1, 0x18, 0x7, 0x84}]}, 0x18}}, 0x20008810)
close(r5)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000890438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r11, <r12=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r8}, 0x20)
bind$bt_hci(r1, &(0x7f00000003c0)={0x1f, 0xffffffffffffffff}, 0x6)
setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000000c0), 0x4)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r12}, &(0x7f00000002c0), &(0x7f0000000300)=r13}, 0x20)
sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000002d00010000000000000000000400008008001a8001009d80"], 0x1c}], 0x1}, 0x0)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000380)=ANY=[], 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)

0s ago: executing program 2 (id=1020):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x88, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x2}, 0x80)
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x805a3ab3fe2c7d86}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001440)={&(0x7f0000000340)={0x10fc, r1, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x34}}}}, [@NL80211_ATTR_TID_CONFIG={0x5e4, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6fc}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x250, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x220, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9572, 0x8, 0x8, 0xb7, 0x7, 0x3, 0xff71, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x2, 0x1, 0x17b8, 0x1, 0x81, 0x9, 0xf]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x4, 0x6}, {0x0, 0x8}, {0x1}, {0x1, 0x7}, {0x0, 0x5}, {0x1, 0x9}, {}, {0x5, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0xbc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x48, 0x30, 0x24, 0x9, 0x6, 0x3, 0x30, 0x9, 0x1, 0x3, 0x24, 0x6, 0x5, 0x9, 0xc, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x5}, {0x1, 0x1}, {0x4, 0x7}, {0x2, 0x7}, {0x0, 0x6}, {0x7, 0x9}, {0x1, 0x2}, {0x1, 0x1}, {0x0, 0x7}, {0x6, 0x9}, {0x0, 0x3}, {0x1, 0x8}, {0x6, 0x6}, {0x0, 0x7}, {0x1, 0x5}, {0x0, 0x6}, {0x7, 0x5}, {0x1, 0x8}, {0x3, 0x6}, {0x1, 0x9}, {0x2, 0x1}, {0x4, 0x5}, {0x1, 0x9}, {0x1, 0x4}, {0x7, 0x1}, {0x3, 0x2}, {0x2, 0x3}, {0x3, 0x3}, {0x5, 0x6}, {0x7, 0x5}, {0x5, 0x7}, {0x6, 0x3}, {0x2}, {0x1, 0x9}, {0x1}, {0x7, 0xa}, {0x5, 0x6}, {0x2, 0x3}, {0x4, 0x1}, {0x5, 0x7}, {0x0, 0x1}, {0x2, 0x3}, {0x0, 0x9}, {0x5, 0x2}, {0x5, 0xa}, {0x5, 0x6}, {0x4, 0x6}, {0x7, 0x7}, {0x2, 0x8}, {}, {0x4, 0x3}, {0x7, 0xa}, {}, {0x7, 0x6}, {0x0, 0x7}, {0x2, 0x1}, {0x3, 0xa}, {0x4, 0x2}, {0x0, 0x8}, {0x1, 0x6}, {0x3, 0x2}, {0x4, 0x8}, {0x1, 0x9}, {0x1, 0x5}, {0x2, 0x4}, {0x7, 0x5}, {0x3}, {0x4, 0x3}, {0x5, 0x8}, {0x5, 0xa}, {0x0, 0xa}, {0x0, 0x9}, {0x6, 0x7}]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x1, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x4, 0x2}, {0x4, 0xa}, {0x7, 0x5}, {0x7, 0x4}, {0x6, 0x6}, {0x1, 0xa}, {0x4, 0x3}, {0x1, 0x9}, {0x3, 0x5}, {0x0, 0x4}, {0x2, 0x2}, {0x7, 0x6}, {0x7, 0x5}, {0x6, 0x1}, {0x2, 0xa}, {0x5, 0x6}, {0x3}, {0x7, 0x2}, {}, {0x7, 0x4}, {0x6, 0x5}, {0x1, 0x4}, {0x0, 0x3}, {0x4, 0x5}, {0x1, 0xa}, {0x0, 0x4}, {0x1, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6c, 0x6, 0x1, 0x6, 0x4, 0x60, 0x1b, 0x16]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x10, 0x7, 0x1, 0x3, 0x2, 0x10, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0xf, 0xff80, 0x3, 0x1ff, 0x2, 0x10]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x4, 0x30, 0x30, 0x36, 0x6, 0x3, 0x60, 0x1, 0x18, 0x16, 0x3, 0x2, 0x3, 0x24]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7a, 0x6, 0x7, 0x76c, 0xb, 0xb0c, 0x1000, 0x80]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xfff9, 0x6, 0x1ff, 0xffff, 0x80, 0x59a7, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x8, 0x0, 0x6, 0x7f, 0x5, 0xfff9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x60, 0x3, 0x6c, 0x2, 0x3, 0x9, 0x2, 0x36, 0x18, 0x4, 0x36, 0xc, 0x5, 0x36, 0x4, 0xb, 0x24, 0x36, 0xb, 0xc, 0x9, 0x36, 0xb, 0xc, 0x3, 0x5, 0x12, 0x18, 0x1, 0x3, 0x36, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}]}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x328, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x304, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0xf7e5f0b1ea513a51, 0x4, 0x48, 0x1b, 0x26, 0xb, 0x36, 0x1, 0x60, 0x1, 0x3, 0x6c, 0x4, 0x1, 0x59, 0x16, 0x48, 0x60, 0x2, 0x6c, 0x5, 0x24, 0xb, 0xc, 0x6, 0x3, 0x3, 0x60, 0x6, 0x12, 0x1, 0xb]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1, 0xb, 0x24, 0x18, 0x4, 0x30, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x73a6, 0x2, 0x9, 0x0, 0xf1, 0x6, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1ff, 0x5, 0x1000, 0x1, 0x9, 0x0, 0x9, 0x800]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xa12, 0x7, 0x2, 0x427, 0x1, 0x7, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3958, 0x1, 0x2, 0x9, 0x3, 0x6, 0x4, 0x8]}}]}, @NL80211_BAND_5GHZ={0xf4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x1, 0x2, 0x3, 0x1ff, 0xf195, 0x2, 0x8]}}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x3, 0x8}, {0x0, 0x8}, {0x7, 0x2}, {0x0, 0x6}, {0x7, 0x9}, {0x0, 0x6}, {0x0, 0xa}, {0x1, 0xa}, {0x7, 0x3}, {0x1, 0x4}, {0x1, 0x4}, {0x1, 0x8}, {0x3, 0x8}, {0x7, 0x5}, {0x2, 0x3}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x5, 0x1}, {0x1, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x7, 0x6}, {0x1, 0xa}, {0x5, 0x4}, {0x4, 0x9}, {0x3, 0x7}, {0x4, 0x5}, {0x1, 0xa}, {0x0, 0x8}, {0x2, 0x2}, {0x0, 0x6}, {0x0, 0x5}, {0x1, 0x4}, {0x6, 0x4}, {0x4, 0x1}, {0x2, 0x3}, {0x2, 0x2}, {0x0, 0xa}, {0x4, 0x5}, {0x7, 0x5}, {0x2, 0x6}, {0x1, 0x3}, {0x1, 0xa}, {}, {0x4}, {0x6, 0xa}, {0x1}, {0x2, 0xa}, {0x7, 0x3}, {0x0, 0x7}, {0x3, 0x2}, {0x4, 0x4}, {0x7, 0x3}, {0x7, 0x4}, {0x6, 0x5}, {0x3}, {0x6, 0x7}, {0x7, 0x2}, {0x2, 0x4}, {0x7, 0x8}, {0x7, 0x7}, {0x7, 0x8}, {0x1, 0xa}, {0x0, 0x4}, {0x4, 0x7}, {0x6, 0x1}, {0x0, 0x5}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1, 0x60, 0x6c, 0x1, 0x48, 0x3a, 0x6e, 0xc]}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x3, 0x2}, {0x2, 0x7}, {0x2, 0x3}, {0x0, 0x9}, {0x1, 0x3}, {0x5, 0x1}, {0x0, 0x9}, {0x3}, {0x1}, {0x2, 0x2}, {0x3, 0x1}, {0x1, 0x2}, {0x6, 0xa}, {0x5, 0x5}, {0x2, 0x4}, {0x0, 0x2}, {0x4, 0x2}, {0x7, 0x6}, {0x2, 0x7}, {0x7, 0x6}, {0x2, 0x9}, {0x6, 0x6}, {0x3, 0xa}, {0x7, 0x5}, {0x0, 0x7}, {0x6, 0x7}, {0x0, 0x5}, {0x4, 0x9}, {0x6, 0x4}, {0x0, 0x6}, {0x0, 0x7}, {0x3, 0x8}, {0x7, 0x1d}, {0x7, 0x4}, {0x3, 0x1}, {0x2, 0x6}, {0x5, 0x6}, {0x5, 0x8}, {0x1, 0x4}, {0x0, 0x5}, {0x2, 0xa}, {0x4, 0x5}, {0x7, 0x1}, {0x4, 0x3}, {0x5, 0x1}, {0x0, 0x3}, {0x0, 0x5}, {0x1, 0x5}, {0x2, 0x4}, {0x5, 0x3}, {0x4, 0x7}, {0x4, 0x7}, {0x0, 0x4}, {0x3, 0x5}, {0x7, 0x5}, {0x7, 0x7}, {0x0, 0x5}, {0x3, 0x5}, {0x5, 0x5}, {0x6, 0xc}, {0x5, 0x1}, {0x3, 0x4}, {0x5, 0x1}, {0x3}, {0x0, 0x9}, {0x4, 0x9}, {0x7, 0x6}, {0x5}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xd9d, 0x17e5, 0x58e, 0x1, 0x4, 0x3, 0x9c1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0xd42, 0x0, 0x9, 0x0, 0x0, 0xfe00]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0xd4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x31, 0x2, [{0x0, 0x7}, {0x3, 0x3}, {0x2, 0x9}, {0x4, 0x4}, {0x5, 0x7}, {0x5, 0x7}, {0x2, 0x1}, {0x2, 0x4}, {0x3, 0x7}, {0x3, 0x1}, {0x4, 0xa}, {0x4, 0x3}, {0x1, 0x5}, {0x5, 0x9}, {0x0, 0x7}, {0x5, 0x6}, {0x6, 0x6}, {0x1, 0xa}, {0x2, 0xa}, {0x3, 0xa}, {0x7, 0x4}, {0x3}, {0x0, 0x3}, {0x5, 0x9}, {0x2, 0x8}, {0x6}, {0x5, 0x3}, {0x4, 0x4}, {0x1, 0x3}, {0x7, 0xa}, {0x3, 0x5}, {0x1, 0x5}, {0x5, 0x1}, {0x3, 0x2}, {0x6, 0x7}, {0x5, 0x9}, {0x7, 0x3}, {0x2, 0x2}, {0x6, 0x8}, {0x5, 0x9}, {0x4, 0x9}, {0x0, 0x1}, {0x3, 0xa}, {0x1, 0x9}, {0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc58a, 0xe, 0x7fff, 0xfff8, 0x3, 0x9, 0x7, 0x25]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xfff7, 0x0, 0xfffd, 0x242f, 0x0, 0x2, 0x3]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x24, 0x0, 0x2, 0x6, 0x18, 0x60, 0x24, 0x36, 0x9, 0x12, 0x1, 0x12, 0x1, 0x1, 0x18, 0x2, 0xc, 0x12, 0xc, 0x18, 0x48, 0x1b, 0x12, 0x2, 0x16, 0xc, 0x4, 0x36, 0x6c, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x1, 0x48, 0x30, 0x4, 0xc, 0x6c, 0xc, 0x18, 0x0, 0x3, 0x5, 0x60, 0x24, 0x9, 0x3, 0x1b, 0x3, 0x1, 0x3, 0x4, 0x39, 0x5, 0x12, 0x0, 0x5, 0x18, 0x2, 0xc, 0x24, 0x30]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x18, 0x9, 0x8, 0x8, 0x1, 0x3d8]}}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x8, 0xfff2, 0x6, 0x9, 0xd23, 0x10, 0x5]}}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x1, 0x4}, {0x1, 0xa}, {0x5}, {0x4, 0x3}, {0x1, 0x4}, {0x6, 0x7}, {0x4, 0x9}, {0x0, 0x5}, {0x1, 0x5}, {0x4, 0x1}, {0x5, 0x6}, {0x6, 0x8}, {0x4, 0x2}, {}, {0x2, 0x9}, {0x4, 0x7}, {0x3, 0x8}, {0x6, 0x6}, {}, {0x3, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x5, 0x5}, {0x3, 0x4}, {0x5, 0x7}, {0x2, 0x9}, {0x1, 0x2}, {0x6, 0x5}, {0x3, 0x7}, {0x3, 0x9}, {0x6, 0x9}, {0x6, 0x5}, {0x0, 0xa}, {0x4, 0x9}, {0x4, 0x6}, {0x0, 0x2}, {0x2, 0x1}, {0x3, 0x3}, {0x5, 0xa}, {0x7, 0x6}, {0x7, 0x2}, {0x3, 0x4}, {0x1, 0x7}, {0x4, 0xa}, {0x3, 0x2}, {0x6, 0x3}, {0x5, 0x2}, {0x1, 0xa}, {0x3, 0x6}, {0x5, 0x8}, {0x1, 0x4}, {0x6, 0x6}, {0x5, 0x7}, {0x7}, {0x6, 0x5}, {0x1, 0x2}, {0x7, 0x6}, {0x1, 0x7}, {0x6, 0x8}, {0x6, 0x1}, {0x2, 0x5}, {0x7, 0x4}, {0x1, 0x7}, {0x6, 0x2}, {0x4, 0x5}, {0x1, 0x4}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0x9}, {0x7, 0x6}, {0x6, 0x7}, {0x1, 0x4}, {0x1, 0x1}, {0x3, 0x4}, {0x2, 0x1}, {0x0, 0x9}, {0x6, 0x1}, {0x1, 0x4}, {0x0, 0x7}, {0x5, 0x1}, {0x7, 0x6}, {0x6, 0x2}, {0x4, 0x3}, {0x6, 0x3}, {0x0, 0x3}, {0x5}, {0x2, 0x6}]}]}, @NL80211_BAND_60GHZ={0x10, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x0, 0x9}, {0x0, 0x7}, {0x1, 0x3}, {0x3, 0xa}, {0x0, 0xa}, {0x1}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x800}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xef}]}]}, @NL80211_ATTR_TID_CONFIG={0x130, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfbd9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xca}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xa8}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xc7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x13}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x67}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x64, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5d}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x48, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x8d6, 0x3, 0x557, 0x81, 0x7, 0x3]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x60, 0x3, 0x12, 0x1, 0x1, 0x24, 0x4, 0x5, 0x5, 0x16, 0x21, 0x5, 0x2, 0x5, 0x2, 0x12, 0x3, 0x61, 0x30, 0x38, 0x36, 0x36, 0x12, 0x6, 0x9, 0x1, 0xc, 0x4, 0x48, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x240, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xba}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x42}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1e}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x210, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x5, 0x3c, 0x6c, 0x1b, 0x18, 0x6, 0x1, 0xd8, 0x6c, 0x48]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x4, 0x7, 0x9, 0x0, 0x6, 0x2, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xff80, 0x8b, 0xfb1, 0xa, 0x1, 0x3, 0x3, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x19, 0x9, 0x36, 0x6c, 0xb, 0x60, 0x12, 0x5, 0x5, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xa, 0x2, 0x401, 0x9, 0x7b, 0x2, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x1, 0xffff, 0x1, 0x9, 0x7f, 0x401, 0x8001]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0xb4f, 0x6, 0x8, 0x7fff, 0x401, 0x8a, 0xdf]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0xd}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x0, 0xa}, {0x5}, {0x7, 0x2}, {0x1, 0x9}, {0x0, 0x1}, {0x4, 0x4}, {0x1, 0x8}, {0x4, 0xa}, {0x5, 0x1}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x1}, {0x6, 0x5}, {0x7, 0x5}, {0x6}, {0x4, 0x7}, {0x0, 0x3}, {0x2, 0x8}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x2}, {0x2, 0x6}, {0x7}, {0x4, 0x8}, {0x4, 0x4}, {0x0, 0x4}, {0x4}, {0x6, 0xa}, {0x5, 0x5}, {0x7, 0x9}, {0x5, 0x6}, {0x1, 0x4}, {0x2, 0x8}, {0x3, 0x6}, {0x7, 0x5}, {0x5, 0x5}, {0x0, 0x7}, {}, {0x1, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xfff9, 0x200, 0x81, 0x6, 0x0, 0xf800, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x3ff, 0x3, 0x7, 0x48, 0x81, 0xaf, 0xf20]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x16, 0x5, 0x1, 0xc, 0xc, 0x6, 0x9, 0x36, 0xb, 0xb, 0xc, 0x60, 0x9, 0x6, 0x9, 0x6c, 0x18, 0x6, 0x18, 0x6c, 0x4]}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x12, 0x24, 0x1, 0x36, 0x60, 0x24, 0x18, 0x60, 0x2, 0x36, 0x48, 0xc, 0x48, 0x6, 0x16, 0x23, 0xb, 0x36]}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x0, 0x7}, {0x5, 0x2}, {0x5, 0x4}, {0x0, 0x4}, {0x3, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x12, 0x5, 0x16, 0x16, 0x1b, 0x6, 0x24, 0x1b, 0x18, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xabe, 0x6, 0xc, 0x1, 0xa34, 0x2, 0x9]}}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8ddb, 0x2, 0xa, 0x4, 0x0, 0x7, 0x800, 0x5]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x1, 0x6}, {0x1, 0x8}, {0x0, 0x9}, {0x1}, {0x4, 0x6}, {0x7, 0xa}, {0x7, 0x2}, {0x6, 0x3}, {0x7, 0x3}, {0x1}, {0x6, 0x5}, {0x2, 0xa}, {0x5, 0x2}, {0x5, 0x6}, {0x0, 0x6}, {0x3, 0x9}, {0x0, 0xa}, {0x3, 0x1}, {0x1, 0x3}, {0x1, 0x9}, {0x5, 0x8}, {0x0, 0x6}, {0x7, 0x1}, {0x5, 0x2}, {0x3, 0x4}, {0x2, 0x7}, {0x6}, {0x0, 0x2}, {0x7, 0x9}, {0x4, 0x9}, {0x5, 0x7}, {0x4, 0x2}, {0x0, 0x4}, {0x0, 0x5}, {0x1, 0x2}, {0x5}, {0x5, 0x3}, {0x3, 0xa}, {0x5}, {0x4, 0x7}, {0x7, 0x1}, {0x0, 0x4}]}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0xf8, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3c}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x23}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2a}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x42}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x31}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x74, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x5, 0x7}, {0x5, 0x5}, {0x2, 0xa}, {0x1, 0x2}, {0x0, 0x3}, {0x3, 0x6}, {0x2, 0x7}, {0x6, 0x8}, {0x0, 0xa}, {0x2, 0x4}, {0x4, 0xa}, {0x1, 0x4}, {0x2}, {0x2, 0x7}, {0x7, 0x2}, {0x1}, {0x2, 0xa}, {0x5, 0x3}, {0x6, 0x4}, {0x0, 0x2}, {0x4, 0x9}, {0x7, 0x7}, {0x0, 0xa}, {0x1, 0xa}, {0x0, 0x1}, {0x3, 0x6}, {0x5, 0x7}, {0x0, 0x1}, {0x1, 0x6}, {0x2, 0x7}, {0x6, 0x4}, {0x2, 0xa}, {0x6}, {0x6, 0xa}, {0x4, 0xa}, {0x0, 0x9}, {0x3, 0xa}, {0x7, 0x5}, {0x1}, {0x1, 0x8}, {0x2, 0x8}, {0x0, 0x9}, {0x1, 0x9}]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x7ff, 0x7, 0x401, 0x1, 0x2, 0x0, 0xff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x14}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x3bc, 0x11d, 0x0, 0x1, [{0x2ac, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x11c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xf091, 0x0, 0x81, 0xffff, 0x9, 0x4c1, 0x3, 0xffab]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x4, 0x4}, {0x2, 0x8}, {0x2}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x4, 0x7}, {0x1, 0x2}, {0x0, 0x2}, {0x3, 0x8}, {0x0, 0x3}, {0x0, 0x3}]}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6, 0x36, 0x18, 0x4, 0x2, 0x1b, 0x60, 0x16, 0x7, 0x71, 0x35, 0x9, 0x9, 0x9, 0x1b, 0x6, 0x1b, 0x30, 0x18, 0x1, 0x30, 0x30, 0x2, 0x6, 0xc, 0x3]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x660e, 0x1000, 0xf, 0x1, 0x2, 0x2, 0xfff7, 0xa]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x4, 0x3}, {0x2, 0x2}, {0x6, 0x8}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x6}, {0x5}, {0x2, 0x1}, {0x0, 0x8}, {0x6, 0x1}, {0x4, 0x3}, {0x0, 0x2}, {0x0, 0x3}, {0x0, 0x9}, {0x1, 0x2}, {0x6, 0xa}, {0x3, 0x6}, {0x5, 0xa}, {0x3, 0x3}, {0x6, 0x4}, {0x2, 0x6}, {0x6, 0x5}, {0x2, 0x3}, {0x4, 0x6}, {0x7}, {0x0, 0x3}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x6, 0x1}, {0x5, 0x9}, {0x4, 0x5}, {0x1, 0x6}, {0x0, 0x6}, {0x5}, {0x0, 0x1}, {0x7, 0x5}, {0x3}, {0x3, 0x7}, {0x7, 0x5}, {0x0, 0x4}, {0x0, 0x3}, {0x3, 0x1}, {0x4, 0x9}, {0x6, 0x9}, {0x1, 0x5}, {0x2, 0x2}, {0x0, 0x8}, {0x6, 0x3}, {0x0, 0x5}, {0x1, 0x5}, {0x4, 0x8}, {0x6, 0x9}, {0x4, 0x9}, {0x7, 0x1}, {0x2, 0x8}, {0x4, 0x2}, {0x4, 0x2}, {0x1, 0x8}, {0x4, 0x8}, {0x3}, {0x6, 0x2}, {0x2, 0x6}, {0x4, 0x9}, {0x0, 0x9}, {0x2, 0x8}, {0x0, 0x7}, {0x2, 0x1}, {0x0, 0x7}, {0x1, 0xa}, {0x5}, {0x5, 0x7}, {0x4, 0x1}, {0x4, 0x9}, {0x6, 0x3}, {0x0, 0x1}, {0x5, 0x9}, {0x2, 0x4}, {0x1, 0x7}, {0x3, 0x9}, {0x1, 0x4}, {0x4, 0xa}, {0x3, 0x1}, {0x5, 0xa}, {0x7, 0xa}, {0x1, 0x3}, {0x0, 0x8}, {0x1, 0x7}, {0x6, 0x5}, {0x3, 0x3}, {0x5, 0x9}, {0x1, 0x5}, {0x7, 0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x3}, {0x4, 0xa}, {0x6, 0x1}, {0x0, 0x7}, {0x0, 0xa}, {0x3, 0x3}, {0x1, 0x3}, {0x1, 0x4}, {0x4, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x37}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xaa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x174, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x35, 0x2, [{0x6, 0x9}, {0x5, 0x2}, {0x1, 0x8}, {}, {0x3, 0x3}, {0x6, 0x1}, {0x0, 0x3}, {0x4, 0x6}, {0x6, 0x4}, {0x0, 0x4}, {0x3, 0xa}, {0x3, 0x5}, {0x1, 0xa}, {0x1}, {0x3, 0x8}, {0x6, 0x3}, {0x2, 0x4}, {0x1, 0x3}, {0x1, 0x4}, {0x5, 0xa}, {0x0, 0x1}, {0x0, 0x7}, {0x6, 0x4}, {0x0, 0x5}, {0x6, 0x4}, {0x3, 0x6}, {0x4}, {0x7, 0x5}, {0x6, 0x2}, {0x1, 0x7}, {0x0, 0x7}, {0x1, 0x5}, {0x3, 0x6}, {0x1, 0x3}, {}, {0x2, 0x3}, {0x4, 0x3}, {0x4, 0x3}, {0x1}, {0x2, 0x8}, {0x5, 0x3}, {0x3, 0x1}, {0x4, 0xa}, {0x2}, {0x0, 0x8}, {0x4, 0x2}, {0x1, 0xa}, {0x4, 0x6}, {0x1, 0x5}]}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1, 0x8, 0xf80, 0x2, 0x6, 0x5, 0xd53a]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x1, 0x1b, 0x18, 0x65, 0x1, 0xf, 0x24, 0x48, 0x16, 0x9, 0x24, 0xb, 0x4, 0x6c, 0x9, 0x1, 0x5, 0x18, 0x24, 0x36, 0x1, 0x3, 0x6, 0xc, 0x60, 0x6c, 0x1b, 0x4, 0x35, 0x1b, 0x1b]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x36, 0x3, 0x4, 0xb, 0x48, 0x1, 0x16, 0x16, 0x54, 0x6c, 0x31, 0x36, 0x0]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x0, 0x5}, {0x1, 0x5}, {0x7, 0x4}, {0x0, 0x8}, {0x1, 0x4}, {0x3, 0x4}, {0x0, 0x6}, {0x4, 0x2}, {0x6, 0x6}, {0x5, 0x3}, {0x6, 0x8}, {0x6, 0x8}, {0x2, 0x6}, {0x4, 0x7}, {0x2, 0x7}, {0x7, 0x1}, {0x3, 0xa}, {0x4, 0x1}, {0x5, 0xa}, {0x4}, {0x3, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x7, 0x1, 0x53b, 0x7fff, 0x4, 0x626b, 0x5]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x3ff, 0x7, 0x7f, 0x6, 0x6, 0x9355, 0x4]}}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0xfffd, 0x3, 0x3, 0x75eb, 0x3, 0x44]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x1, 0x6, 0x9, 0x6, 0x5, 0x3]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x9, 0x3, 0x4, 0x3, 0x3, 0x36, 0xc, 0x1b, 0x2, 0x3, 0x48, 0x6c, 0xb]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x18, 0x1, 0x30, 0x3, 0x2, 0x2, 0x6, 0x1, 0xb, 0x3, 0x30, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x3, 0x3}, {0x3, 0x3}, {0x3, 0x8}, {0x5, 0x3}, {0x4, 0x1}, {0x2, 0xa}, {0x0, 0x2}, {0x0, 0x2}, {0x0, 0x5}, {0x2, 0x6}, {0x7}, {0x7, 0x7}, {0x3, 0x1}]}]}]}]}, {0xd8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xc0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x5, 0x10, 0x8001, 0x200, 0x0, 0x200, 0x4]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x24, 0x30, 0xb, 0x1b, 0x4, 0x16, 0x4, 0x1b, 0xc, 0x6, 0x60, 0x0, 0x6, 0x48, 0xb]}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7, 0x10, 0x4, 0x3398, 0x2, 0x7, 0x8001]}}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x4}, {0x0, 0x6}, {0x3, 0x5}, {0x0, 0x8}, {0x4, 0x2}, {0x0, 0x6}, {}]}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffb, 0x6, 0x7, 0x3, 0x4, 0x4, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8000, 0x1, 0x7, 0x3, 0xff, 0x6, 0xc27]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xed}]}]}, @NL80211_ATTR_TID_CONFIG={0x2cc, 0x11d, 0x0, 0x1, [{0x2c8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdd}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe0}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x288, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x98, 0x915c, 0x3, 0x9, 0x0, 0x61b9, 0xf2d7, 0x4]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x24, 0x0, 0x36, 0x12, 0x0, 0x3, 0x9, 0x9, 0x0, 0x6c]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x2, 0x1b, 0x18, 0xb, 0xc, 0x24, 0xb, 0x5, 0x6c, 0x48, 0x18, 0x9, 0x30, 0x30, 0x6c, 0x5]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x5}, {0x4, 0xa}, {0x4, 0x8}, {0x7, 0x9}, {0x2, 0x8}, {0x6, 0x8}, {0x6, 0x4}, {0x4, 0x8}, {0x3}, {0x1, 0x3}, {0x0, 0xa}, {0x3, 0x1}, {0x5, 0x9}, {0x7, 0x5}, {0x1, 0x8}, {0x0, 0x8}, {0x5, 0x1}, {0x1, 0x4}, {0x1, 0x8}, {0x4, 0x3}, {0x3, 0xa}, {0x3, 0x7}, {0x5, 0xa}, {0x2, 0x4}, {0x2, 0x6}, {0x1, 0x7}, {0x0, 0x3}, {0x2, 0xa}, {0x4, 0x8}, {0x2, 0x4}, {0x5, 0x8}, {0x7, 0x5}, {0x1, 0x4}, {0x1, 0x4}, {0x0, 0x5}, {0x5, 0x2}, {0x4, 0x1}, {0x5, 0x8}, {0x2, 0x7}, {0x4, 0x3}, {0x7, 0x5}, {0x2, 0x9}, {0x5, 0x3}, {0x7, 0x8}, {0x1}, {0x6, 0x5}, {0x1, 0x8}, {0x6, 0x8}, {0x0, 0x3}, {0x7, 0x8}, {0x0, 0x7}, {0x3, 0x7}, {0x7, 0x5}, {0x4, 0xa}, {0x0, 0x8}, {0x2}, {0x0, 0x7}, {0x3, 0x7}, {0x1, 0x1}, {0x4}, {0x1, 0x2}, {0x7, 0xa}, {0x6, 0xa}, {0x1, 0x5}, {0x0, 0x1}, {0x5, 0x6}, {0x7, 0x1}, {0x7, 0x9}, {0x6, 0xa}, {0x0, 0x9}, {0x3, 0x8}, {0x3}, {0x5, 0x2}]}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x19, 0x2, [{0x2, 0x2}, {0x0, 0x6}, {0x3}, {0x3, 0x7}, {0x4}, {0x0, 0x9}, {0x5, 0x6}, {0x3, 0x6}, {0x4, 0x4}, {0x3, 0x9}, {0x5, 0x5}, {0x2, 0x3}, {0x0, 0x4}, {0x6, 0x6}, {0x6, 0xa}, {0x1, 0x4}, {0x5, 0xa}, {0x2, 0xa}, {0x0, 0x9}, {0x1, 0x9}, {0x6, 0x6}]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x5, 0x1}, {0x4, 0x4}, {0x6, 0x3}, {0x2, 0x8}, {0x7, 0x6}, {0x7, 0x2}, {0x5, 0x6}, {0x4, 0x5}, {0x7, 0x6}, {0x7, 0x5}, {0x6, 0x7}, {0x3, 0x7}, {0x4, 0x6}, {0x0, 0x6}, {0x7}, {0x7, 0x8}, {0x1, 0x8}, {0x6, 0x4}, {0x2, 0xa}, {0x7, 0x1}, {0x2, 0x2}, {0x2, 0x7}, {0x4, 0x8}, {0x5}, {0x2, 0x7}, {0x0, 0x2}, {0x0, 0x4}, {0x7, 0x6}, {0x0, 0x2}, {0x3, 0x8}, {0x7, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x4, 0x8, 0x400, 0x683, 0xff, 0x3]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x1b, 0x16, 0x1b, 0xb, 0x24, 0x3, 0x6, 0xf97f8d00c67e0175, 0x1b, 0x1, 0x30, 0xc, 0x5, 0x6, 0x36, 0x2, 0x1b, 0x48, 0x1b]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x6, 0xa}, {0x1, 0x2}, {0x1}, {0x4, 0x6}, {0x0, 0xa}, {0x1, 0x6}, {0x6, 0x3}, {0x6, 0xa}, {0x1, 0x9}, {0x5, 0x5}, {0x7, 0x2}, {0x5, 0x4}, {0x6, 0x7}, {0x4, 0x8}, {0x2, 0x5}, {0x4, 0x1}, {}, {0x1, 0x8}, {0x7}, {0x3, 0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x6, 0x4}, {0x4}, {0x6}, {0x0, 0x3}, {0x4, 0x1}, {0x6, 0x8}, {0x7, 0x4}, {0x3}, {0x4, 0x7}, {0x1, 0xa}, {0x3, 0x8}, {0x2, 0x5}]}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc8a1, 0x1, 0x40, 0xee, 0x61, 0x0, 0x9, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x2, 0x4, 0xf1, 0x7f, 0x4, 0xf257, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xff, 0xf, 0x5, 0x1, 0xe1]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xddf, 0x101, 0x2, 0x0, 0x5, 0xd, 0x2, 0xe]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x7, 0x6, 0x1a8, 0x8, 0x101, 0x9, 0x3]}}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0x7ff, 0x8, 0x8, 0x5, 0x7, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x6, 0x7, 0x2, 0xfb, 0x2, 0x7]}}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7f, 0x9, 0x200, 0x1, 0x0, 0x6, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2e6c, 0x69a1, 0x1, 0xc, 0xfff7, 0x5, 0x100, 0x4]}}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x0, 0xa}, {0x1, 0xa}, {0x0, 0x8}, {0x1, 0x4}, {0x2, 0x4}, {0x4, 0x6}, {0x3, 0x5}, {0x4, 0x8}, {0x5, 0x8}, {0x0, 0x5}, {0x6, 0x2}, {0x2}, {0x2, 0x9}, {0x3, 0x4}, {0x7, 0x3}, {0x5, 0x3}, {0x1, 0x1}, {0x0, 0x9}, {0x7, 0x9}, {0x3, 0x9}, {0x5, 0xa}, {0x0, 0x3}, {0x7, 0x4}, {0x1, 0xa}, {0x7, 0x6}, {0x4, 0x8}, {0x5, 0x4}, {0x0, 0xa}, {0x0, 0x7}, {0x0, 0x5}, {0x1, 0x5}, {0x4}, {0x1, 0x4}, {0x2, 0xa}, {0x5, 0x1}, {0x3, 0x4}, {0x5, 0x7}, {0x6, 0x8}, {0x7}, {0x7, 0x2}, {0x1, 0x4}, {0x1, 0x2}, {0x4, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}]}]}, 0x10fc}, 0x1, 0x0, 0x0, 0x4}, 0x2000c080)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001500), r0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x24, r3, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x4000010)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001640), r0)
sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x24, r4, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x3}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4001)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r5, &(0x7f0000001740)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x2, 0x2}}, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000017c0), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001800)=<r8=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001840)=<r9=>0x0)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000001900)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x24, r7, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c0051}, 0x4004004)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = accept$unix(0xffffffffffffffff, &(0x7f0000001940)=@abs, &(0x7f00000019c0)=0x6e)
r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001a40), r10)
sendmsg$NLBL_MGMT_C_LISTALL(r6, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x74, r12, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000804}, 0x0)
r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001b80)='./cgroup/syz1\x00', 0x200002, 0x0)
r14 = openat$cgroup_ro(r13, &(0x7f0000001bc0)='memory.current\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r14, 0x84, 0x9, &(0x7f0000001c00)={<r15=>0x0, @in6={{0xa, 0x4e20, 0x6e9, @mcast2, 0xffffffb8}}, 0x101, 0xfff6, 0x40, 0x10000, 0x20, 0xfffffc59, 0x5}, &(0x7f0000001cc0)=0x9c)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r11, 0x84, 0x71, &(0x7f0000001d00)={r15, 0x3ff}, &(0x7f0000001d40)=0x8)
r16 = openat$cgroup_int(r14, &(0x7f0000001d80)='io.max\x00', 0x2, 0x0)
accept4$ax25(r14, &(0x7f0000001dc0)={{0x3, @null}, [@default, @remote, @remote, @bcast, @bcast, @netrom, @netrom, @bcast]}, &(0x7f0000001e40)=0x48, 0x0)
sendmsg$TIPC_CMD_SET_LINK_PRI(r14, &(0x7f0000001f80)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001f40)={&(0x7f0000001ec0)={0x68, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0xc, @link='broadcast-link\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x11)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002000)={&(0x7f0000001fc0)='f2fs_destroy_extent_tree\x00', r16, 0x0, 0x7fffffffffffffff}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x11, 0x16, &(0x7f0000002040)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r14}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r14}}, @alu={0x4, 0x0, 0xb, 0x3, 0x3, 0x18, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r14}}, @call={0x85, 0x0, 0x0, 0x7c}], &(0x7f0000002100)='syzkaller\x00', 0x4, 0x90, &(0x7f0000002140)=""/144, 0x40f00, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002300)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002380)=[r14, 0xffffffffffffffff, r14, r14, r14, r14], &(0x7f00000023c0)=[{0x5, 0x3, 0x1, 0x2}, {0x2, 0x2, 0x2, 0xb}], 0x10, 0x3}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:21575' (ED25519) to the list of known hosts.
syzkaller login: [   48.076132][ T5770] cgroup: Unknown subsys name 'net'
[   48.159254][ T5770] cgroup: Unknown subsys name 'cpuset'
[   48.164621][ T5770] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.023771][ T5770] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.319390][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.323141][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.328586][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.331275][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.334368][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.337453][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.360275][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.365007][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.368726][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.371814][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.437774][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.441559][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.444895][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.449117][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.452853][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.568936][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   55.828162][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.831527][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.834994][ T5839] bridge_slave_0: entered allmulticast mode
[   55.847576][ T5839] bridge_slave_0: entered promiscuous mode
[   55.854859][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.859911][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.863126][ T5839] bridge_slave_1: entered allmulticast mode
[   55.868483][ T5839] bridge_slave_1: entered promiscuous mode
[   55.940901][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.945103][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   55.967148][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.027243][ T5839] team0: Port device team_slave_0 added
[   56.035259][ T5839] team0: Port device team_slave_1 added
[   56.055189][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   56.079809][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.082397][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.091000][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.106653][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.109030][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.118374][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.179013][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.181794][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.184235][ T5838] bridge_slave_0: entered allmulticast mode
[   56.188004][ T5838] bridge_slave_0: entered promiscuous mode
[   56.192276][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.194848][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.197990][ T5838] bridge_slave_1: entered allmulticast mode
[   56.201370][ T5838] bridge_slave_1: entered promiscuous mode
[   56.255832][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.266452][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.269021][ T5849] bridge_slave_0: entered allmulticast mode
[   56.277435][ T5849] bridge_slave_0: entered promiscuous mode
[   56.281196][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.283798][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.287664][ T5849] bridge_slave_1: entered allmulticast mode
[   56.291068][ T5849] bridge_slave_1: entered promiscuous mode
[   56.339722][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.348279][ T5839] hsr_slave_0: entered promiscuous mode
[   56.351134][ T5839] hsr_slave_1: entered promiscuous mode
[   56.356414][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.361692][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.369285][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.417691][ T5838] team0: Port device team_slave_0 added
[   56.430508][ T5838] team0: Port device team_slave_1 added
[   56.433885][ T5849] team0: Port device team_slave_0 added
[   56.462881][ T5849] team0: Port device team_slave_1 added
[   56.492943][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.495340][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.505705][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.530700][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.532981][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.542608][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.546970][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.549219][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.561650][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.572028][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.574579][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.583381][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.704759][ T5838] hsr_slave_0: entered promiscuous mode
[   56.709812][ T5838] hsr_slave_1: entered promiscuous mode
[   56.712193][ T5838] debugfs: 'hsr0' already exists in 'hsr'
[   56.714222][ T5838] Cannot create hsr debugfs directory
[   56.720478][ T5849] hsr_slave_0: entered promiscuous mode
[   56.723689][ T5849] hsr_slave_1: entered promiscuous mode
[   56.727279][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   56.729226][ T5849] Cannot create hsr debugfs directory
[   56.843690][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.873664][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.899270][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.920207][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.998948][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.012252][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.021112][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.038488][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.110074][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.119909][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.138212][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.146958][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.208916][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.247374][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   57.260260][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.270574][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.273231][ T3007] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.295631][ T3007] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.298100][ T3007] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.309505][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   57.327348][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.329839][ T3007] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.343775][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.361658][ T3007] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.365052][ T3007] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.396783][   T54] Bluetooth: hci0: command tx timeout
[   57.399504][ T5845] Bluetooth: hci1: command tx timeout
[   57.411410][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   57.431487][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.433829][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.450328][ T3007] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.452940][ T3007] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.465101][ T5838] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   57.469000][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.476729][   T54] Bluetooth: hci2: command tx timeout
[   57.594952][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.643905][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.671618][ T5839] veth0_vlan: entered promiscuous mode
[   57.699097][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.704068][ T5839] veth1_vlan: entered promiscuous mode
[   57.740926][ T5838] veth0_vlan: entered promiscuous mode
[   57.760929][ T5838] veth1_vlan: entered promiscuous mode
[   57.791447][ T5839] veth0_macvtap: entered promiscuous mode
[   57.801955][ T5849] veth0_vlan: entered promiscuous mode
[   57.814287][ T5839] veth1_macvtap: entered promiscuous mode
[   57.821971][ T5849] veth1_vlan: entered promiscuous mode
[   57.849820][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.869956][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.874236][ T5838] veth0_macvtap: entered promiscuous mode
[   57.891724][ T5873] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.899279][ T5873] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.903111][ T5838] veth1_macvtap: entered promiscuous mode
[   57.916230][ T5873] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.921206][ T5849] veth0_macvtap: entered promiscuous mode
[   57.938141][ T5873] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.947221][ T5849] veth1_macvtap: entered promiscuous mode
[   57.994862][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.003069][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.023231][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.031837][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.064751][ T5873] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.070501][ T5873] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.085310][ T5873] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.090702][ T5873] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.103243][ T5873] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.108646][ T5873] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.113053][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.125840][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.139346][ T5873] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.143051][ T5873] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.201169][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.204722][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.247491][ T3007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.250088][ T3007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.271502][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.283119][ T3007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.293667][ T3007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.311720][ T3592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.314356][ T3592] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.341234][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.343990][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.482059][ T5919] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4'.
[   58.485222][ T5923] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4'.
[   58.550863][ T5931] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6'.
[   58.685908][ T5946] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.700509][ T5946] batadv_slave_1: entered promiscuous mode
[   58.710557][ T5949] netlink: 104 bytes leftover after parsing attributes in process `syz.2.11'.
[   58.714817][ T5948] syz.2.11 uses obsolete (PF_INET,SOCK_PACKET)
[   58.868079][ T5956] syzkaller0: entered promiscuous mode
[   58.871517][ T5956] syzkaller0: entered allmulticast mode
[   59.031981][ T5965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18'.
[   59.074724][ T5967] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.079878][ T5967] Zero length message leads to an empty skb
[   59.112938][ T5969] netlink: 104 bytes leftover after parsing attributes in process `syz.2.20'.
[   59.379447][ T5983] netlink: 'syz.1.24': attribute type 4 has an invalid length.
[   59.390644][ T5983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.24'.
[   59.395081][ T5983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'.
[   59.401436][ T5983] netlink: 24 bytes leftover after parsing attributes in process `syz.1.24'.
[   59.458952][ T5986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25'.
[   59.479407][ T5845] Bluetooth: hci0: command tx timeout
[   59.481655][ T5847] Bluetooth: hci1: command tx timeout
[   59.553015][ T5990] netlink: 'syz.1.27': attribute type 9 has an invalid length.
[   59.555855][ T5847] Bluetooth: hci2: command tx timeout
[   59.622943][ T5991] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.626235][ T5991] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.632811][ T5991] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[   59.845140][ T6000] vlan2: entered allmulticast mode
[   59.963186][ T6004] netlink: zone id is out of range
[   59.965046][ T6004] netlink: zone id is out of range
[   59.991172][ T6004] netlink: set zone limit has 4 unknown bytes
[   60.179520][ T6016] netlink: 'syz.2.36': attribute type 10 has an invalid length.
[   60.182271][ T6016] openvswitch: netlink: Flow actions attr not present in new flow.
[   60.833018][ T6050] netlink: 'syz.2.49': attribute type 2 has an invalid length.
[   60.838865][ T6050] netlink: 'syz.2.49': attribute type 8 has an invalid length.
[   60.897220][ T6053] netlink: 'syz.2.50': attribute type 4 has an invalid length.
[   60.917570][ T6053] netlink: 'syz.2.50': attribute type 4 has an invalid length.
[   61.410684][ T6099] warning: `syz.2.62' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   61.559968][ T5847] Bluetooth: hci1: command tx timeout
[   61.562748][ T5845] Bluetooth: hci0: command tx timeout
[   61.635906][ T6111] veth3: entered promiscuous mode
[   61.636850][ T5847] Bluetooth: hci2: command 0x040f tx timeout
[   61.714323][ T6118] bond1: entered promiscuous mode
[   61.718034][ T6118] 8021q: adding VLAN 0 to HW filter on device bond1
[   61.832745][ T6118] bond1 (unregistering): Released all slaves
[   61.974939][ T6142] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[   62.045551][ T6151] IPVS: length: 245 != 8
[   62.066341][ T6149] netlink: 'syz.0.74': attribute type 1 has an invalid length.
[   62.119670][ T6158] tipc: Started in network mode
[   62.122659][ T6158] tipc: Node identity 2a098d7e6dba, cluster identity 4711
[   62.129748][ T6158] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.145164][ T6158] tipc: Resetting bearer <eth:syzkaller0>
[   62.165240][ T6157] tipc: Disabling bearer <eth:syzkaller0>
[   62.284733][ T6169] netlink: 'syz.1.78': attribute type 2 has an invalid length.
[   62.356629][ T6172] veth1_to_bond: entered allmulticast mode
[   62.361300][ T6172] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.396673][ T6172] bond0: (slave bond_slave_1): Releasing backup interface
[   62.417701][ T6172] veth1_to_bond (unregistering): left allmulticast mode
[   62.547196][ T6175] 0: renamed from hsr0 (while UP)
[   62.560356][ T6175] 0: entered allmulticast mode
[   62.562089][ T6175] hsr_slave_0: entered allmulticast mode
[   62.563956][ T6175] hsr_slave_1: entered allmulticast mode
[   62.566378][ T6175] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[   63.092443][ T6220] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   63.344083][ T6226] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   63.359791][ T6226] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.365035][ T6226] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.638248][   T54] Bluetooth: hci1: command tx timeout
[   63.640510][   T54] Bluetooth: hci0: command tx timeout
[   63.718491][ T5847] Bluetooth: hci2: command 0x040f tx timeout
[   63.752622][ T6250] __nla_validate_parse: 32 callbacks suppressed
[   63.752635][ T6250] netlink: 40 bytes leftover after parsing attributes in process `syz.0.99'.
[   63.919840][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.101'.
[   64.346861][ T6260] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   64.454118][ T6268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.106'.
[   64.532010][ T6272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.108'.
[   64.543772][ T6272] netlink: 'syz.1.108': attribute type 15 has an invalid length.
[   64.553143][ T6272] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   64.558002][ T6272] batadv_slave_1: entered promiscuous mode
[   64.612730][ T6274] netlink: 20 bytes leftover after parsing attributes in process `syz.1.109'.
[   64.655020][ T6278] netlink: 'syz.1.110': attribute type 1 has an invalid length.
[   64.781270][ T6280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.111'.
[   64.785540][ T6280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.111'.
[   64.901518][ T6292] IPVS: set_ctl: invalid protocol: 43 172.30.0.2:20002
[   64.947858][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.118'.
[   64.990283][ T6298] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   64.993430][ T6298] syzkaller0: entered promiscuous mode
[   64.995353][ T6298] syzkaller0: entered allmulticast mode
[   65.086536][ T6298] tipc: Resetting bearer <eth:syzkaller0>
[   65.093883][ T6302] macsec1: entered promiscuous mode
[   65.095939][ T6302] macsec1: entered allmulticast mode
[   65.098435][ T6297] tipc: Resetting bearer <eth:syzkaller0>
[   65.109964][ T6297] tipc: Disabling bearer <eth:syzkaller0>
[   65.352307][ T6314] netlink: 830 bytes leftover after parsing attributes in process `syz.1.124'.
[   65.412574][ T6316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.125'.
[   65.458533][ T6318] sch_tbf: burst 240 is lower than device lo mtu (65550) !
[   65.554683][ T6321] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[   65.795924][ T5847] Bluetooth: hci2: command 0x040f tx timeout
[   66.134979][ T6343] netlink: 'syz.2.133': attribute type 1 has an invalid length.
[   66.323717][ T6356] tipc: Started in network mode
[   66.329639][ T6356] tipc: Node identity 4e77041008a7, cluster identity 4711
[   66.332205][ T6356] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.340402][ T6356] syzkaller0: entered promiscuous mode
[   66.342500][ T6356] syzkaller0: entered allmulticast mode
[   66.353745][ T6356] netlink: 'syz.0.137': attribute type 3 has an invalid length.
[   66.480981][ T6358] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   66.489338][ T6355] tipc: Resetting bearer <eth:syzkaller0>
[   66.529867][ T6355] tipc: Disabling bearer <eth:syzkaller0>
[   67.082331][ T6426] vlan2: entered allmulticast mode
[   67.095531][ T6426] veth1: entered allmulticast mode
[   67.142331][ T6429] bridge0: port 3(macsec1) entered blocking state
[   67.149185][ T6429] bridge0: port 3(macsec1) entered disabled state
[   67.151973][ T6429] macsec1: entered allmulticast mode
[   67.155076][ T6429] macsec1: left allmulticast mode
[   67.381549][ T6450] syzkaller0: entered promiscuous mode
[   67.383526][ T6450] syzkaller0: entered allmulticast mode
[   67.397936][ T6453] gretap0: entered promiscuous mode
[   67.413630][ T6453] 0{X: renamed from gretap0
[   67.461308][ T6453] 0{X: left promiscuous mode
[   67.464586][ T6453] 0{X: entered allmulticast mode
[   67.470480][ T6453] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[   67.878430][ T5847] Bluetooth: hci2: command 0x040f tx timeout
[   68.553603][ T6471] netlink: 'syz.2.169': attribute type 4 has an invalid length.
[   68.565342][ T6471] : renamed from bond0 (while UP)
[   68.581611][ T6470] chnl_net:caif_netlink_parms(): no params data found
[   68.587881][ T6471] netlink: 'syz.2.169': attribute type 4 has an invalid length.
[   68.799063][ T6491] __nla_validate_parse: 23 callbacks suppressed
[   68.799077][ T6491] netlink: 6 bytes leftover after parsing attributes in process `syz.0.173'.
[   68.808764][ T6491] netlink: 'syz.0.173': attribute type 4 has an invalid length.
[   68.871023][ T6495] 8021q: adding VLAN 0 to HW filter on device bond2
[   68.879135][ T6495] bond0: (slave bond2): Enslaving as an active interface with an up link
[   68.907631][ T6495] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   68.944920][ T6495] syzkaller1: entered promiscuous mode
[   68.948164][ T6495] syzkaller1: entered allmulticast mode
[   69.091784][ T6503] netlink: 'syz.2.177': attribute type 10 has an invalid length.
[   69.108711][ T6503] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.113805][ T6503] : (slave batadv0): Enslaving as an active interface with an up link
[   69.121302][ T6505] netlink: 'syz.0.178': attribute type 1 has an invalid length.
[   69.124207][ T6505] netlink: 128 bytes leftover after parsing attributes in process `syz.0.178'.
[   69.128397][ T6505] netlink: 'syz.0.178': attribute type 2 has an invalid length.
[   69.132709][ T6503] batadv_slave_0: entered promiscuous mode
[   69.303037][ T6519] netlink: 64 bytes leftover after parsing attributes in process `syz.0.182'.
[   69.383102][ T6523] netlink: 28 bytes leftover after parsing attributes in process `syz.1.184'.
[   69.491419][ T6527] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.185'.
[   69.497368][ T6526] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.185'.
[   69.766130][ T6501] batadv_slave_0: left promiscuous mode
[   69.832205][ T6543] IPv4: Oversized IP packet from 127.202.26.0
[   70.291936][ T6559] Bluetooth: MGMT ver 1.23
[   70.346118][ T6566] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[   70.360621][ T6565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.199'.
[   70.494705][ T6575] validate_nla: 2 callbacks suppressed
[   70.494738][ T6575] netlink: 'syz.0.203': attribute type 1 has an invalid length.
[   70.500050][ T6575] netlink: 232 bytes leftover after parsing attributes in process `syz.0.203'.
[   70.740609][ T6592] netlink: 'syz.0.207': attribute type 1 has an invalid length.
[   70.743629][ T6592] netlink: 232 bytes leftover after parsing attributes in process `syz.0.207'.
[   70.801544][ T6594] netlink: 'syz.0.209': attribute type 21 has an invalid length.
[   70.804535][ T6594] netlink: 36 bytes leftover after parsing attributes in process `syz.0.209'.
[   70.809716][ T6594] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.812974][ T6594] syzkaller0: entered promiscuous mode
[   70.815052][ T6594] syzkaller0: entered allmulticast mode
[   70.841616][ T6594] tipc: Resetting bearer <eth:syzkaller0>
[   70.852596][ T6593] tipc: Resetting bearer <eth:syzkaller0>
[   70.868280][ T6593] tipc: Disabling bearer <eth:syzkaller0>
[   71.010700][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.236608][ T6610] netlink: 'syz.1.214': attribute type 1 has an invalid length.
[   71.447102][ T6625] netlink: 'syz.2.218': attribute type 11 has an invalid length.
[   71.541297][ T6630] veth1_to_team: entered allmulticast mode
[   71.800576][ T6649] syzkaller1: entered promiscuous mode
[   71.802660][ T6649] syzkaller1: entered allmulticast mode
[   71.917351][ T6653] netlink: 'syz.0.228': attribute type 4 has an invalid length.
[   72.113675][ T6683] netlink: 'syz.2.236': attribute type 1 has an invalid length.
[   72.355959][ T5847] Bluetooth: hci0: command tx timeout
[   72.430339][ T6713] openvswitch: netlink: nsh attr 7939 is out of range max 3
[   72.433351][ T6713] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.789923][ T6743] openvswitch: netlink: Flow key attr not present in new flow.
[   72.792839][ T6743] openvswitch: netlink: Flow key attr not present in new flow.
[   72.800461][ T6743] openvswitch: netlink: Flow key attr not present in new flow.
[   72.805173][ T6743] openvswitch: netlink: Flow key attr not present in new flow.
[   72.808020][ T6743] openvswitch: netlink: Flow key attr not present in new flow.
[   72.810869][ T6743] openvswitch: netlink: Flow key attr not present in new flow.
[   72.813735][ T6743] openvswitch: netlink: Flow key attr not present in new flow.
[   72.817373][ T6743] openvswitch: netlink: Flow key attr not present in new flow.
[   72.821025][ T6743] openvswitch: netlink: Flow key attr not present in new flow.
[   72.823761][ T6743] openvswitch: netlink: Flow key attr not present in new flow.
[   72.842572][ T6744] netlink: 'syz.0.252': attribute type 1 has an invalid length.
[   72.948315][ T6754] netlink: 'syz.0.255': attribute type 23 has an invalid length.
[   73.145194][ T6764] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2
[   73.149904][ T6764] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0
[   73.299776][ T6771] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   73.475472][ T6781] syzkaller1: entered promiscuous mode
[   73.483109][ T6781] syzkaller1: entered allmulticast mode
[   73.881130][ T6793] netlink: 'syz.2.265': attribute type 13 has an invalid length.
[   73.933385][ T6793] 8021q: adding VLAN 0 to HW filter on device 
[   73.957242][ T6798] __nla_validate_parse: 71 callbacks suppressed
[   73.957263][ T6798] netlink: 44 bytes leftover after parsing attributes in process `syz.2.265'.
[   75.183838][ T6871] netlink: 236 bytes leftover after parsing attributes in process `syz.1.284'.
[   75.190589][ T6869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.283'.
[   75.251213][ T6876] syz_tun: entered allmulticast mode
[   75.291357][ T6876] syz_tun: left allmulticast mode
[   75.318914][ T6886] netlink: 20 bytes leftover after parsing attributes in process `syz.0.289'.
[   75.323152][ T6886] netlink: 28 bytes leftover after parsing attributes in process `syz.0.289'.
[   75.328051][ T6886] netlink: 28 bytes leftover after parsing attributes in process `syz.0.289'.
[   75.468500][ T6889] pim6reg1: entered promiscuous mode
[   75.470623][ T6889] pim6reg1: entered allmulticast mode
[   75.599543][ T6901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'.
[   75.603375][ T6901] netlink: 24 bytes leftover after parsing attributes in process `syz.1.292'.
[   75.612441][ T6901] netlink: 24 bytes leftover after parsing attributes in process `syz.1.292'.
[   75.747905][ T6908] ksmbd: Unknown IPC event: 3, ignore.
[   76.308460][ T6948] validate_nla: 1 callbacks suppressed
[   76.308475][ T6948] netlink: 'syz.0.305': attribute type 1 has an invalid length.
[   76.314208][ T6944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.304'.
[   76.374366][ T6944] bridge_slave_1 (unregistering): left allmulticast mode
[   76.377307][ T6944] bridge_slave_1 (unregistering): left promiscuous mode
[   76.379870][ T6944] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.396503][ T6948] bond3: (slave gretap1): making interface the new active one
[   76.403553][ T6948] bond3: (slave gretap1): Enslaving as an active interface with an up link
[   76.443257][ T6959] netlink: 'syz.2.307': attribute type 30 has an invalid length.
[   76.454865][ T6962] netlink: 'syz.0.308': attribute type 21 has an invalid length.
[   76.459439][ T6962] IPv6: NLM_F_CREATE should be specified when creating new route
[   76.462906][ T6962] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   76.466087][ T6962] IPv6: NLM_F_CREATE should be set when creating new route
[   76.469158][ T6962] IPv6: NLM_F_CREATE should be set when creating new route
[   76.472531][ T6962] IPv6: NLM_F_CREATE should be set when creating new route
[   76.484690][ T6962] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   76.507658][ T6964] netlink: 'syz.2.309': attribute type 26 has an invalid length.
[   76.832584][ T6993] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   76.841825][ T6995] netlink: 'syz.0.317': attribute type 1 has an invalid length.
[   76.880328][ T6993] batman_adv: batadv0: Removing interface: batadv_slave_0
[   77.055323][ T7004] netlink: 'syz.2.320': attribute type 1 has an invalid length.
[   77.073554][ T7004] netlink: 'syz.2.320': attribute type 1 has an invalid length.
[   77.077263][ T7004] netlink: 'syz.2.320': attribute type 2 has an invalid length.
[   77.118923][   T33] audit: type=1107 audit(1755561878.465:2): pid=7007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[   77.321838][ T7024] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.325291][ T7024] syzkaller0: entered promiscuous mode
[   77.327954][ T7024] syzkaller0: entered allmulticast mode
[   77.394375][ T7012] tipc: Resetting bearer <eth:syzkaller0>
[   77.415533][ T7012] tipc: Disabling bearer <eth:syzkaller0>
[   77.695360][ T7058] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.722026][ T7058] tipc: Disabling bearer <eth:syzkaller0>
[   77.910124][ T7080] netlink: 'syz.0.344': attribute type 2 has an invalid length.
[   78.245282][ T7103] tc_dump_action: action bad kind
[   78.395145][ T7111] Illegal XDP return value 4294967262 on prog  (id 160) dev N/A, expect packet loss!
[   78.549553][ T7122] netlink: 'syz.2.358': attribute type 10 has an invalid length.
[   78.584416][ T7122] 8021q: adding VLAN 0 to HW filter on device team0
[   78.601719][ T7122] : (slave team0): Enslaving as an active interface with an up link
[   78.630527][ T7122] syz.2.358 (7122) used greatest stack depth: 18616 bytes left
[   78.667282][ T5706] nci: nci_rx_work: unknown MT 0x1
[   79.724427][ T7144] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   80.304343][ T7214] __nla_validate_parse: 22 callbacks suppressed
[   80.304364][ T7214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.366'.
[   80.361878][ T7214] net_ratelimit: 45 callbacks suppressed
[   80.361902][ T7214] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.432528][ T7223] netlink: 88 bytes leftover after parsing attributes in process `syz.0.368'.
[   80.568454][ T7229] tipc: Started in network mode
[   80.570757][ T7229] tipc: Node identity d69ce1ec77bd, cluster identity 4711
[   80.573949][ T7229] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   80.578200][ T7231] IPVS: length: 87 != 8
[   80.588338][ T7229] syzkaller0: entered promiscuous mode
[   80.590439][ T7229] syzkaller0: entered allmulticast mode
[   80.598054][ T7229] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[   80.648631][ T7229] tipc: Resetting bearer <eth:syzkaller0>
[   80.652907][ T7227] tipc: Resetting bearer <eth:syzkaller0>
[   80.673545][ T7227] tipc: Disabling bearer <eth:syzkaller0>
[   80.855457][ T7247] netlink: 36 bytes leftover after parsing attributes in process `syz.0.378'.
[   80.998394][ T7247] netlink: 20 bytes leftover after parsing attributes in process `syz.0.378'.
[   81.062880][ T7257] net veth1_virt_wifi : renamed from virt_wifi0
[   81.076881][ T7255] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.081475][ T7255] syzkaller0: entered promiscuous mode
[   81.083581][ T7255] syzkaller0: entered allmulticast mode
[   81.093978][ T7255] tipc: Resetting bearer <eth:syzkaller0>
[   81.102752][ T7254] tipc: Resetting bearer <eth:syzkaller0>
[   81.115002][ T7254] tipc: Disabling bearer <eth:syzkaller0>
[   81.239272][  T123] cfg80211: failed to load regulatory.db
[   81.279240][ T7272] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[   81.483884][ T7285] validate_nla: 1 callbacks suppressed
[   81.483902][ T7285] netlink: 'syz.1.388': attribute type 1 has an invalid length.
[   81.507664][ T7285] 8021q: adding VLAN 0 to HW filter on device bond1
[   81.522387][ T7285] bond1: (slave gretap0): making interface the new active one
[   81.527384][ T7285] bond1: (slave gretap0): Enslaving as an active interface with an up link
[   81.532998][ T7288] netlink: 'syz.0.387': attribute type 1 has an invalid length.
[   81.607722][ T7294] netlink: 16 bytes leftover after parsing attributes in process `syz.1.390'.
[   81.623814][ T7294] netlink: 9280 bytes leftover after parsing attributes in process `syz.1.390'.
[   81.730150][ T7289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.387'.
[   81.779851][ T7300] netlink: 248 bytes leftover after parsing attributes in process `syz.1.391'.
[   81.826799][ T7299] netpci0: tun_chr_ioctl cmd 2147767507
[   81.940540][ T7307] netlink: 'syz.1.393': attribute type 4 has an invalid length.
[   82.026289][ T7310] netlink: 24 bytes leftover after parsing attributes in process `syz.0.394'.
[   82.047968][ T7314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.396'.
[   82.222544][ T7327] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[   82.526056][ T7352] netlink: 'syz.2.404': attribute type 6 has an invalid length.
[   82.544091][ T7345] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.629347][ T7345] syzkaller0: entered promiscuous mode
[   82.631357][ T7345] syzkaller0: entered allmulticast mode
[   83.657047][  T123] tipc: Node number set to 1188037648
[   83.980165][ T7364] tipc: Resetting bearer <eth:syzkaller0>
[   84.019967][ T7344] tipc: Resetting bearer <eth:syzkaller0>
[   84.072205][ T7344] tipc: Disabling bearer <eth:syzkaller0>
[   84.097857][ T7378] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[   84.673702][ T7424] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   84.681282][ T7423] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   84.920476][ T7458] netlink: 'syz.1.426': attribute type 13 has an invalid length.
[   84.947903][ T7458] netlink: 'syz.1.426': attribute type 17 has an invalid length.
[   84.959495][ T7458] 0{X: left allmulticast mode
[   85.004400][ T7458] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.006850][ T7458] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.018295][ T7458] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   85.042744][ T7469] netlink: 'syz.0.427': attribute type 11 has an invalid length.
[   85.174561][ T7475] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   85.196081][ T7467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.458010][ T7499] __nla_validate_parse: 14 callbacks suppressed
[   85.458029][ T7499] netlink: 180 bytes leftover after parsing attributes in process `syz.0.434'.
[   85.540497][ T7503] syz_tun: entered allmulticast mode
[   85.607269][ T7502] syz_tun: left allmulticast mode
[   85.722645][ T7510] syzkaller0: entered promiscuous mode
[   85.724685][ T7510] syzkaller0: entered allmulticast mode
[   85.874753][ T7514] syzkaller0: entered promiscuous mode
[   85.878987][ T7514] syzkaller0: entered allmulticast mode
[   86.091116][ T7526] ip6tnl1: entered promiscuous mode
[   86.355298][ T7544] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   86.365262][ T7544] syzkaller0: entered promiscuous mode
[   86.370623][ T7544] syzkaller0: entered allmulticast mode
[   86.411851][ T7544] tipc: Resetting bearer <eth:syzkaller0>
[   86.429285][ T7543] tipc: Resetting bearer <eth:syzkaller0>
[   86.432594][ T7551] syz.2.454: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[   86.454073][ T7551] CPU: 1 UID: 0 PID: 7551 Comm: syz.2.454 Not tainted syzkaller #0 PREEMPT(full) 
[   86.454097][ T7551] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   86.454104][ T7551] Call Trace:
[   86.454110][ T7551]  <TASK>
[   86.454132][ T7551]  dump_stack_lvl+0x189/0x250
[   86.454152][ T7551]  ? __pfx_dump_stack_lvl+0x10/0x10
[   86.454162][ T7551]  ? __pfx__printk+0x10/0x10
[   86.454175][ T7551]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   86.454187][ T7551]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[   86.454197][ T7551]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[   86.454207][ T7551]  warn_alloc+0x214/0x310
[   86.454224][ T7551]  ? __pfx_warn_alloc+0x10/0x10
[   86.454240][ T7551]  ? __get_vm_area_node+0x28f/0x300
[   86.454253][ T7551]  ? hash_netiface_create+0x358/0xfe0
[   86.454267][ T7551]  __vmalloc_node_range_noprof+0x67e/0x12f0
[   86.454278][ T7551]  ? do_syscall_64+0xfa/0x3b0
[   86.454305][ T7551]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[   86.454319][ T7551]  ? rcu_is_watching+0x15/0xb0
[   86.454329][ T7551]  ? hash_netiface_create+0x358/0xfe0
[   86.454337][ T7551]  ? hash_netiface_create+0x358/0xfe0
[   86.454345][ T7551]  __kvmalloc_node_noprof+0x3b8/0x5f0
[   86.454358][ T7551]  ? hash_netiface_create+0x358/0xfe0
[   86.454367][ T7551]  ? hash_netiface_create+0x2fe/0xfe0
[   86.454378][ T7551]  hash_netiface_create+0x358/0xfe0
[   86.454392][ T7551]  ? __nla_parse+0x40/0x60
[   86.454405][ T7551]  ? __pfx_hash_netiface_create+0x10/0x10
[   86.454415][ T7551]  ip_set_create+0xa97/0x1940
[   86.454427][ T7551]  ? ip_set_create+0x4a2/0x1940
[   86.454442][ T7551]  ? __pfx_ip_set_create+0x10/0x10
[   86.454482][ T7551]  nfnetlink_rcv_msg+0xb4d/0x1130
[   86.454512][ T7551]  ? nfnetlink_rcv_msg+0x20d/0x1130
[   86.454532][ T7551]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   86.454541][ T7551]  ? kasan_save_free_info+0x46/0x50
[   86.454574][ T7551]  netlink_rcv_skb+0x208/0x470
[   86.454587][ T7551]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[   86.454597][ T7551]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   86.454614][ T7551]  ? bpf_lsm_capable+0x9/0x20
[   86.454625][ T7551]  ? security_capable+0x7e/0x2e0
[   86.454642][ T7551]  nfnetlink_rcv+0x26a/0x2520
[   86.454654][ T7551]  ? __dev_queue_xmit+0x1d79/0x3b50
[   86.454670][ T7551]  ? __dev_queue_xmit+0x27b/0x3b50
[   86.454684][ T7551]  ? __pfx_nfnetlink_rcv+0x10/0x10
[   86.454693][ T7551]  ? __pfx___dev_queue_xmit+0x10/0x10
[   86.454709][ T7551]  ? ref_tracker_free+0x63a/0x7d0
[   86.454720][ T7551]  ? __asan_memcpy+0x40/0x70
[   86.454730][ T7551]  ? __pfx_ref_tracker_free+0x10/0x10
[   86.454739][ T7551]  ? __skb_clone+0x63/0x7a0
[   86.454751][ T7551]  ? __skb_clone+0x483/0x7a0
[   86.454762][ T7551]  ? skb_clone+0x246/0x3a0
[   86.454772][ T7551]  ? __netlink_deliver_tap+0x807/0x850
[   86.454783][ T7551]  ? netlink_deliver_tap+0x2e/0x1b0
[   86.454796][ T7551]  ? netlink_deliver_tap+0x2e/0x1b0
[   86.454811][ T7551]  netlink_unicast+0x82f/0x9e0
[   86.454826][ T7551]  ? __pfx_netlink_unicast+0x10/0x10
[   86.454836][ T7551]  ? netlink_sendmsg+0x642/0xb30
[   86.454846][ T7551]  ? skb_put+0x11b/0x210
[   86.454874][ T7551]  netlink_sendmsg+0x805/0xb30
[   86.454892][ T7551]  ? __pfx_netlink_sendmsg+0x10/0x10
[   86.454904][ T7551]  ? aa_sock_msg_perm+0xf1/0x1d0
[   86.454919][ T7551]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   86.454928][ T7551]  ? __pfx_netlink_sendmsg+0x10/0x10
[   86.454940][ T7551]  __sock_sendmsg+0x21c/0x270
[   86.454953][ T7551]  ____sys_sendmsg+0x505/0x830
[   86.454965][ T7551]  ? __pfx_____sys_sendmsg+0x10/0x10
[   86.454978][ T7551]  ? import_iovec+0x74/0xa0
[   86.454991][ T7551]  ___sys_sendmsg+0x21f/0x2a0
[   86.455001][ T7551]  ? __pfx____sys_sendmsg+0x10/0x10
[   86.455026][ T7551]  ? __fget_files+0x2a/0x420
[   86.455039][ T7551]  ? __fget_files+0x3a0/0x420
[   86.455055][ T7551]  __x64_sys_sendmsg+0x19b/0x260
[   86.455065][ T7551]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   86.455079][ T7551]  ? rcu_is_watching+0x15/0xb0
[   86.455099][ T7551]  ? do_syscall_64+0xbe/0x3b0
[   86.455112][ T7551]  do_syscall_64+0xfa/0x3b0
[   86.455123][ T7551]  ? lockdep_hardirqs_on+0x9c/0x150
[   86.455134][ T7551]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   86.455142][ T7551]  ? exc_page_fault+0x9f/0xf0
[   86.455154][ T7551]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   86.455162][ T7551] RIP: 0033:0x7f505078ebe9
[   86.455172][ T7551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   86.455179][ T7551] RSP: 002b:00007f50515a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   86.455190][ T7551] RAX: ffffffffffffffda RBX: 00007f50509b6090 RCX: 00007f505078ebe9
[   86.455197][ T7551] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[   86.455202][ T7551] RBP: 00007f5050811e19 R08: 0000000000000000 R09: 0000000000000000
[   86.455207][ T7551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   86.455212][ T7551] R13: 00007f50509b6128 R14: 00007f50509b6090 R15: 00007ffff68dd518
[   86.455225][ T7551]  </TASK>
[   86.455279][ T7551] Mem-Info:
[   86.456336][ T7543] tipc: Disabling bearer <eth:syzkaller0>
[   86.459804][ T7551] active_anon:5450 inactive_anon:0 isolated_anon:0
[   86.459804][ T7551]  active_file:1105 inactive_file:38217 isolated_file:0
[   86.459804][ T7551]  unevictable:1768 dirty:32 writeback:0
[   86.459804][ T7551]  slab_reclaimable:9499 slab_unreclaimable:80031
[   86.459804][ T7551]  mapped:18192 shmem:2441 pagetables:945
[   86.459804][ T7551]  sec_pagetables:0 bounce:0
[   86.459804][ T7551]  kernel_misc_reclaimable:0
[   86.459804][ T7551]  free:269740 free_pcp:21847 free_cma:0
[   86.651079][ T7551] Node 0 active_anon:12908kB inactive_anon:0kB active_file:3520kB inactive_file:148768kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:41908kB dirty:104kB writeback:0kB shmem:4796kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5932kB pagetables:2068kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   86.668272][ T7551] Node 1 active_anon:8900kB inactive_anon:0kB active_file:900kB inactive_file:4100kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:30868kB dirty:60kB writeback:0kB shmem:4980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6288kB pagetables:1724kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[   86.692534][ T7551] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[   86.708961][ T7551] lowmem_reserve[]: 0 811 811 811 811
[   86.711045][ T7555] lo speed is unknown, defaulting to 1000
[   86.711328][ T7551] Node 0 DMA32 free:212668kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12908kB inactive_anon:0kB active_file:3520kB inactive_file:148768kB unevictable:3536kB writepending:104kB present:1556484kB managed:830952kB mlocked:0kB bounce:0kB free_pcp:45944kB local_pcp:27840kB free_cma:0kB
[   86.718305][ T7555] lo speed is unknown, defaulting to 1000
[   86.728048][ T7551] lowmem_reserve[]: 0 0 0 0 0
[   86.730955][ T7551] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[   86.735341][ T7555] lo speed is unknown, defaulting to 1000
[   86.746646][ T7551] lowmem_reserve[]: 0 0 854 854 854
[   86.748870][ T7551] Node 1 Normal free:390472kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8900kB inactive_anon:0kB active_file:900kB inactive_file:4100kB unevictable:3536kB writepending:60kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:42044kB local_pcp:18596kB free_cma:0kB
[   86.761381][ T7551] lowmem_reserve[]: 0 0 0 0 0
[   86.763239][ T7551] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[   86.772988][ T7551] Node 0 DMA32: 366*4kB (UM) 615*8kB (UME) 218*16kB (UM) 108*32kB (UM) 104*64kB (UME) 27*128kB (UME) 19*256kB (UM) 6*512kB (UME) 7*1024kB (UM) 1*2048kB (M) 42*4096kB (M) = 212624kB
[   86.788956][ T7551] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[   86.802935][ T7551] Node 1 Normal: 854*4kB (UM) 346*8kB (UME) 542*16kB (UME) 184*32kB (UME) 223*64kB (UME) 68*128kB (UM) 24*256kB (UME) 11*512kB (UME) 9*1024kB (UME) 3*2048kB (UE) 78*4096kB (UM) = 390344kB
[   86.810955][ T7551] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   86.814172][ T7551] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[   86.819771][ T7551] 41766 total pagecache pages
[   86.821946][ T7551] 0 pages in swap cache
[   86.823352][ T7551] Free swap  = 124996kB
[   86.824754][ T7551] Total swap = 124996kB
[   86.827073][ T7551] 786301 pages RAM
[   86.828585][ T7551] 0 pages HighMem/MovableOnly
[   86.830310][ T7551] 241331 pages reserved
[   86.831673][ T7551] 0 pages cma reserved
[   86.892508][ T7555] infiniband syz0: set active
[   86.895642][   T51] lo speed is unknown, defaulting to 1000
[   86.897722][ T7555] infiniband syz0: added lo
[   86.943715][ T7555] RDS/IB: syz0: added
[   86.945881][ T7555] smc: adding ib device syz0 with port count 1
[   86.948075][ T7555] smc:    ib device syz0 port 1 has pnetid 
[   86.953600][ T7555] lo speed is unknown, defaulting to 1000
[   87.044273][ T7570] vxcan2: entered promiscuous mode
[   87.087978][   T51] lo speed is unknown, defaulting to 1000
[   87.091032][ T7555] lo speed is unknown, defaulting to 1000
[   87.213229][ T7555] lo speed is unknown, defaulting to 1000
[   87.214669][ T7579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.460'.
[   87.224118][ T7579] sctp: [Deprecated]: syz.2.460 (pid 7579) Use of int in max_burst socket option deprecated.
[   87.224118][ T7579] Use struct sctp_assoc_value instead
[   87.261644][ T7581] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   87.264887][ T7581] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   87.292538][ T7582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.460'.
[   87.413674][ T7586] netlink: 'syz.1.462': attribute type 1 has an invalid length.
[   87.416623][ T7586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.462'.
[   88.179080][ T7596] lo speed is unknown, defaulting to 1000
[   88.224807][ T7599] netlink: 'syz.0.466': attribute type 7 has an invalid length.
[   88.228323][ T7599] netlink: 'syz.0.466': attribute type 8 has an invalid length.
[   88.503588][ T7620] netlink: 48 bytes leftover after parsing attributes in process `syz.0.474'.
[   88.508398][ T7614] netlink: 'syz.1.472': attribute type 1 has an invalid length.
[   88.511042][ T7614] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.472'.
[   88.595188][ T7618] ip6gre1: entered allmulticast mode
[   88.633139][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.475'.
[   88.638214][ T7625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.475'.
[   88.641071][ T7625] netlink: 'syz.1.475': attribute type 12 has an invalid length.
[   88.644144][ T7625] netlink: 'syz.1.475': attribute type 11 has an invalid length.
[   88.989331][ T7658] lo speed is unknown, defaulting to 1000
[   89.011175][ T7662] openvswitch: netlink: IP tunnel TTL not specified.
[   89.140859][ T7668] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   89.143238][ T7668] IPv6: NLM_F_CREATE should be set when creating new route
[   89.145745][ T7668] IPv6: NLM_F_CREATE should be set when creating new route
[   89.151643][ T7668] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   89.454751][ T7686] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   89.562950][ T7689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.498'.
[   89.566332][ T7689] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address.
[   89.569320][ T7689] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (951)
[   89.609977][ T7696] netlink: 'syz.2.503': attribute type 29 has an invalid length.
[   89.680529][ T7697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.503'.
[   89.683636][ T7697] netlink: 'syz.2.503': attribute type 2 has an invalid length.
[   90.061950][ T7736] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   90.502605][ T7762] netlink: 'syz.2.523': attribute type 3 has an invalid length.
[   90.505254][ T7762] __nla_validate_parse: 3 callbacks suppressed
[   90.505263][ T7762] netlink: 24 bytes leftover after parsing attributes in process `syz.2.523'.
[   90.749996][ T7778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.528'.
[   90.765156][ T7776] netlink: 'syz.0.527': attribute type 1 has an invalid length.
[   90.770390][ T7776] netlink: 224 bytes leftover after parsing attributes in process `syz.0.527'.
[   91.141809][ T7797] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link
[   91.575068][ T7804] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[   91.866173][ T7816] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   92.079472][ T7821] block nbd0: server does not support multiple connections per device.
[   92.088307][ T7821] block nbd0: shutting down sockets
[   92.094305][ T7825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.544'.
[   92.196785][ T7831] lo speed is unknown, defaulting to 1000
[   92.241738][ T7836] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004
[   92.717990][ T7847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.551'.
[   92.800505][ T7845] netlink: 24 bytes leftover after parsing attributes in process `syz.0.550'.
[   92.971148][ T5873] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[   93.006087][ T7860] validate_nla: 4 callbacks suppressed
[   93.006103][ T7860] netlink: 'syz.0.556': attribute type 10 has an invalid length.
[   93.024515][ T7860] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   93.207869][ T7873] lo speed is unknown, defaulting to 1000
[   93.223097][ T7838] delete_channel: no stack
[   93.419397][ T7878] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.458878][ T7878] tipc: Resetting bearer <eth:syzkaller0>
[   93.463069][ T7877] tipc: Disabling bearer <eth:syzkaller0>
[   93.624383][ T7882] vlan2: entered promiscuous mode
[   93.629433][ T7882] bridge0: entered promiscuous mode
[   93.632103][ T7882] vlan2: entered allmulticast mode
[   93.633875][ T7882] bridge0: entered allmulticast mode
[   93.664898][ T7885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.562'.
[   93.899531][ T7899] netlink: 3 bytes leftover after parsing attributes in process `syz.0.566'.
[   93.902947][ T7899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.566'.
[   94.053303][ T7910] lo speed is unknown, defaulting to 1000
[   94.263421][ T7908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.270626][ T7923] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20002
[   94.274983][ T7923] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:20002
[   94.373826][ T7928] netlink: 'syz.0.574': attribute type 3 has an invalid length.
[   94.378279][ T7928] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.574'.
[   94.452405][ T7932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.939920][ T7954] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[   94.946919][ T7954] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   95.548393][ T7978] netlink: 'syz.0.590': attribute type 7 has an invalid length.
[   95.551245][ T7978] netlink: 'syz.0.590': attribute type 8 has an invalid length.
[   95.637779][ T7987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.593'.
[   95.664602][ T7987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.593'.
[   95.918253][ T5908] IPVS: starting estimator thread 0...
[   96.016052][ T8005] IPVS: using max 61 ests per chain, 146400 per kthread
[   96.368325][ T8024] syzkaller1: entered promiscuous mode
[   96.377960][ T8024] syzkaller1: entered allmulticast mode
[   96.629936][ T8038] netlink: 48 bytes leftover after parsing attributes in process `syz.1.604'.
[   96.698673][ T8044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.607'.
[   96.706169][ T8044] netlink: 36 bytes leftover after parsing attributes in process `syz.2.607'.
[   96.713499][ T8044] bridge0: port 3(vlan3) entered blocking state
[   96.727208][ T8044] bridge0: port 3(vlan3) entered disabled state
[   96.729437][ T8044] vlan3: entered allmulticast mode
[   96.731429][ T8044] bridge0: entered allmulticast mode
[   96.739639][ T8044] vlan3: left allmulticast mode
[   96.741432][ T8044] bridge0: left allmulticast mode
[   97.245526][ T8095] syzkaller1: entered promiscuous mode
[   97.249512][ T8095] syzkaller1: entered allmulticast mode
[   97.279156][ T8102] netlink: 'syz.2.623': attribute type 1 has an invalid length.
[   97.281686][ T8102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.623'.
[   97.386759][ T8114] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.626'.
[   97.607782][ T8131] openvswitch: netlink: IPv4 tun info is not correct
[   97.610818][ T8131] openvswitch: netlink: IPv4 tun info is not correct
[   97.616965][ T8131] openvswitch: netlink: IPv4 tun info is not correct
[   97.620132][ T8131] openvswitch: netlink: IPv4 tun info is not correct
[   97.637329][ T8131] openvswitch: netlink: IPv4 tun info is not correct
[   97.647910][ T8131] openvswitch: netlink: IPv4 tun info is not correct
[   97.653273][ T8131] openvswitch: netlink: IPv4 tun info is not correct
[   97.661388][ T8131] openvswitch: netlink: IPv4 tun info is not correct
[   97.663977][ T8131] openvswitch: netlink: IPv4 tun info is not correct
[   97.694664][ T8142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.632'.
[   97.710800][ T8142] erspan0: entered promiscuous mode
[   97.714555][ T8142] erspan0: left promiscuous mode
[   97.893420][ T8154] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[   97.931394][ T8163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.637'.
[   98.033748][ T8170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.639'.
[   98.261209][ T8192] C: renamed from lo (while UP)
[   98.368190][ T8197] netlink: 'syz.0.646': attribute type 15 has an invalid length.
[   98.671615][ T8211] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.815241][ T8211] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.878136][ T8211] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   98.943544][ T8211] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.012150][ T5706] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.027057][ T7375] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.042645][ T7375] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.062072][ T7375] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.169113][ T8222] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.172997][ T8222] syzkaller0: entered promiscuous mode
[   99.175353][ T8222] syzkaller0: entered allmulticast mode
[   99.288083][ T8230] tipc: Resetting bearer <eth:syzkaller0>
[   99.315027][ T8221] tipc: Resetting bearer <eth:syzkaller0>
[   99.342356][ T8221] tipc: Disabling bearer <eth:syzkaller0>
[   99.442528][ T8242] netlink: 'syz.0.659': attribute type 1 has an invalid length.
[   99.478272][ T8242] 8021q: adding VLAN 0 to HW filter on device bond4
[   99.501430][ T8242] 8021q: adding VLAN 0 to HW filter on device batadv1
[   99.509387][ T8242] bond4: (slave batadv1): making interface the new active one
[   99.513007][ T8242] bond4: (slave batadv1): Enslaving as an active interface with an up link
[   99.733449][ T8243] tap0: tun_chr_ioctl cmd 1074025677
[   99.739860][ T8243] tap0: linktype set to 825
[  100.456723][ T8272] atomic_op ffff88810b1e4198 conn xmit_atomic 0000000000000000
[  100.608203][ T8286] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  100.694641][ T8296] __nla_validate_parse: 63 callbacks suppressed
[  100.694654][ T8296] netlink: 24 bytes leftover after parsing attributes in process `syz.0.678'.
[  100.713132][ T8298] netlink: 830 bytes leftover after parsing attributes in process `syz.2.679'.
[  100.738153][ T8300] netlink: 'syz.0.680': attribute type 1 has an invalid length.
[  100.741546][ T8300] netlink: 228 bytes leftover after parsing attributes in process `syz.0.680'.
[  101.060171][ T8324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.687'.
[  101.074417][ T8324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.687'.
[  101.771342][ T8333] netlink: 1 bytes leftover after parsing attributes in process `syz.0.690'.
[  101.940306][ T8348] netlink: 'syz.1.696': attribute type 29 has an invalid length.
[  101.947278][ T8348] netlink: 'syz.1.696': attribute type 29 has an invalid length.
[  101.950035][ T8348] netlink: 'syz.1.696': attribute type 29 has an invalid length.
[  101.952741][ T8348] netlink: 'syz.1.696': attribute type 29 has an invalid length.
[  101.958737][ T8348] netlink: 'syz.1.696': attribute type 29 has an invalid length.
[  101.961392][ T8348] netlink: 'syz.1.696': attribute type 29 has an invalid length.
[  101.963995][ T8348] netlink: 'syz.1.696': attribute type 29 has an invalid length.
[  102.003308][ T8353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.698'.
[  102.172179][ T8363] netlink: 256 bytes leftover after parsing attributes in process `syz.0.701'.
[  102.174266][ T8365] netlink: 100 bytes leftover after parsing attributes in process `syz.2.702'.
[  102.178320][ T8365] netlink: 100 bytes leftover after parsing attributes in process `syz.2.702'.
[  102.807352][ T5706] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  103.451224][ T8402] validate_nla: 20 callbacks suppressed
[  103.451244][ T8402] netlink: 'syz.0.715': attribute type 1 has an invalid length.
[  103.463684][ T8401] syzkaller0: entered promiscuous mode
[  103.466590][ T8401] syzkaller0: entered allmulticast mode
[  103.585423][ T8404] netlink: 'syz.0.716': attribute type 1 has an invalid length.
[  103.914080][ T8411] netlink: 'syz.0.719': attribute type 14 has an invalid length.
[  103.974533][ T8414] netlink: 'syz.1.720': attribute type 14 has an invalid length.
[  104.201217][ T8429] net_ratelimit: 25 callbacks suppressed
[  104.201244][ T8429] netlink: zone id is out of range
[  104.218064][ T8429] netlink: zone id is out of range
[  104.220520][ T8429] netlink: get zone limit has 8 unknown bytes
[  104.338793][ T8434] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.359490][ T8438] netlink: 'syz.1.727': attribute type 5 has an invalid length.
[  104.390097][ T8438] geneve2: entered promiscuous mode
[  104.392331][ T8438] geneve2: entered allmulticast mode
[  104.398057][ T5873] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  104.401629][ T5873] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  104.447870][ T8434] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.462804][ T8434] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  104.585498][ T8434] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.589862][ T8434] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  104.753018][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  104.761886][   T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  104.783255][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  104.790210][   T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  104.809265][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  104.815371][   T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  104.860319][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  104.863172][   T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  105.266571][ T8461] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.280389][ T8461] batadv_slave_1: left promiscuous mode
[  105.295357][ T8461] 0: left allmulticast mode
[  105.298912][ T8461] hsr_slave_0: left allmulticast mode
[  105.300855][ T8461] hsr_slave_1: left allmulticast mode
[  105.361660][ T8461] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  105.372202][ T8461] macsec1: left promiscuous mode
[  105.374438][ T8461] macsec1: left allmulticast mode
[  105.382864][ T8461] ip6tnl1: left promiscuous mode
[  105.447079][ T5706] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.451248][ T5706] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.463069][ T8482] raw_sendmsg: syz.1.740 forgot to set AF_INET. Fix it!
[  105.464143][ T5706] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.470513][ T5706] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.564955][ T8523] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  106.606796][ T8525] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  106.639368][ T8529] : (slave team0): Releasing backup interface
[  106.660884][ T8529] : (slave batadv0): Releasing backup interface
[  106.690165][ T8529] bridge_slave_0: left allmulticast mode
[  106.692867][ T8529] bridge_slave_0: left promiscuous mode
[  106.694991][ T8529] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.707698][ T8529] bridge_slave_1: left allmulticast mode
[  106.709825][ T8529] bridge_slave_1: left promiscuous mode
[  106.712517][ T8529] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.723901][ T8529] : (slave bond_slave_0): Releasing backup interface
[  106.733148][ T8529] : (slave bond_slave_1): Releasing backup interface
[  106.742824][ T8529] team0: Port device team_slave_0 removed
[  106.751190][ T8529] team0: Port device team_slave_1 removed
[  106.756903][ T8529] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  106.760145][ T8529] batman_adv: batadv0: Removing interface: batadv_slave_1
[  106.969903][ T8546] infiniband syz2: set down
[  106.972294][ T8546] infiniband syz2: added syzkaller0
[  107.008726][ T8546] RDS/IB: syz2: added
[  107.010743][ T8546] smc: adding ib device syz2 with port count 1
[  107.013647][ T8546] smc:    ib device syz2 port 1 has pnetid 
[  107.208752][ T8564] __nla_validate_parse: 21 callbacks suppressed
[  107.208777][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.760'.
[  107.218311][ T8565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.760'.
[  107.223455][ T8565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.760'.
[  107.229969][ T8565] netlink: 'syz.2.760': attribute type 14 has an invalid length.
[  107.290312][ T8568] syzkaller1: entered promiscuous mode
[  107.293167][ T8568] syzkaller1: entered allmulticast mode
[  107.524741][ T7203] smc: removing ib device syz2
[  107.545244][ T8574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.764'.
[  107.601569][ T8574] 8021q: adding VLAN 0 to HW filter on device bond2
[  107.632049][ T8577] bond2: (slave batadv1): Opening slave failed
[  107.691005][ T8580] netlink: 5 bytes leftover after parsing attributes in process `syz.0.766'.
[  107.695005][ T8580] 0{X: renamed from gretap0
[  107.707084][ T8580] 0{X: entered allmulticast mode
[  107.712425][ T8580] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  107.735243][ T8581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.766'.
[  107.754068][ T8582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.766'.
[  107.880906][ T8586] netlink: 20 bytes leftover after parsing attributes in process `syz.0.767'.
[  107.939951][ T8590] batadv_slave_1: entered promiscuous mode
[  108.081346][ T8603] netlink: 16 bytes leftover after parsing attributes in process `syz.2.773'.
[  108.168248][ T8605] netlink: 'syz.0.771': attribute type 29 has an invalid length.
[  108.180058][ T8605] netlink: 'syz.0.771': attribute type 29 has an invalid length.
[  108.188212][ T8604] netlink: 500 bytes leftover after parsing attributes in process `syz.0.771'.
[  108.413674][ T8614] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  108.419472][ T8615] netlink: 'syz.1.776': attribute type 10 has an invalid length.
[  108.444414][ T8615] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  108.671723][ T8633] netlink: 'syz.1.780': attribute type 1 has an invalid length.
[  108.687240][ T8632] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.691168][ T8632] syzkaller0: entered promiscuous mode
[  108.693715][ T8632] syzkaller0: entered allmulticast mode
[  108.705012][ T8632] tipc: Resetting bearer <eth:syzkaller0>
[  108.720444][ T8632] tipc: Disabling bearer <eth:syzkaller0>
[  108.895358][ T8643] netlink: 'syz.0.785': attribute type 1 has an invalid length.
[  108.922321][ T8642] delete_channel: no stack
[  109.153164][ T8659] netlink: 'syz.2.789': attribute type 1 has an invalid length.
[  109.337178][ T8670] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.373293][ T8670] syzkaller0: entered promiscuous mode
[  109.379471][ T8670] syzkaller0: entered allmulticast mode
[  109.388563][ T8673] syzkaller1: entered promiscuous mode
[  109.391261][ T8673] syzkaller1: entered allmulticast mode
[  109.400544][ T8670] tipc: Resetting bearer <eth:syzkaller0>
[  109.429387][ T8670] tipc: Resetting bearer <eth:syzkaller0>
[  109.542469][ T8680] netlink: 'syz.1.795': attribute type 22 has an invalid length.
[  111.126987][ T8670] tipc: Disabling bearer <eth:syzkaller0>
[  111.350600][ T8704] vlan2: entered promiscuous mode
[  111.352848][ T8704] bond0: entered promiscuous mode
[  111.354864][ T8704] bond_slave_0: entered promiscuous mode
[  111.360721][ T8704] bond_slave_1: entered promiscuous mode
[  111.363543][ T8704] bond2: entered promiscuous mode
[  111.370440][ T8704] ip6gretap1: entered promiscuous mode
[  111.373572][ T8704] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  111.746051][ T8734] team0: entered promiscuous mode
[  111.825878][ T8743] netlink: 'syz.2.814': attribute type 21 has an invalid length.
[  111.851161][ T8748] netlink: 'syz.2.814': attribute type 21 has an invalid length.
[  112.341191][ T8780] __nla_validate_parse: 11 callbacks suppressed
[  112.341209][ T8780] netlink: 68 bytes leftover after parsing attributes in process `syz.2.821'.
[  112.658371][ T8784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.823'.
[  112.718795][ T8793] syzkaller0: create flow: hash 1530721211 index 1
[  112.772789][ T8792] syzkaller0: delete flow: hash 1530721211 index 1
[  112.889305][ T8802] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  112.894193][ T8802] netlink: 76 bytes leftover after parsing attributes in process `syz.0.829'.
[  114.122179][ T8823] netlink: 16 bytes leftover after parsing attributes in process `syz.2.835'.
[  114.138619][ T8823] netlink: 'syz.2.835': attribute type 6 has an invalid length.
[  114.142993][ T8831] netlink: 'syz.0.838': attribute type 5 has an invalid length.
[  114.143040][ T8831] netlink: 24 bytes leftover after parsing attributes in process `syz.0.838'.
[  114.151847][ T8823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.835'.
[  114.401843][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  114.407676][ T8866] syzkaller0: entered promiscuous mode
[  114.411165][ T8866] syzkaller0: entered allmulticast mode
[  114.430583][ T8867] netlink: 48 bytes leftover after parsing attributes in process `syz.0.847'.
[  114.495519][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.848'.
[  114.553821][ T8879] syzkaller0: entered promiscuous mode
[  114.556169][ T8879] syzkaller0: entered allmulticast mode
[  114.702234][ T8891] netlink: 44 bytes leftover after parsing attributes in process `syz.1.849'.
[  115.290454][ T8900] netlink: 96 bytes leftover after parsing attributes in process `syz.0.852'.
[  115.303433][ T8900] vlan2: entered allmulticast mode
[  115.305250][ T8900] erspan0: entered allmulticast mode
[  115.393326][ T8907] sctp: [Deprecated]: syz.1.855 (pid 8907) Use of int in maxseg socket option.
[  115.393326][ T8907] Use struct sctp_assoc_value instead
[  115.472334][ T8911] netlink: 'syz.1.856': attribute type 1 has an invalid length.
[  115.792422][ T8925] 0{X: left allmulticast mode
[  115.886590][ T8934] netlink: 'syz.0.864': attribute type 2 has an invalid length.
[  115.958518][ T8946] netlink: 'syz.2.866': attribute type 10 has an invalid length.
[  115.964915][ T8950] netlink: 'syz.0.868': attribute type 10 has an invalid length.
[  115.973796][ T8950] dummy0: entered promiscuous mode
[  115.977078][ T8950] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  115.980474][ T8946] dummy0: entered promiscuous mode
[  115.982906][ T8946] dummy0: entered allmulticast mode
[  115.986824][ T8946] bridge0: port 1(dummy0) entered blocking state
[  115.989190][ T8946] bridge0: port 1(dummy0) entered disabled state
[  115.996337][ T8946] bridge0: port 1(dummy0) entered blocking state
[  115.999402][ T8946] bridge0: port 1(dummy0) entered forwarding state
[  116.049551][ T8960] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  116.346692][ T8986] bond3: entered promiscuous mode
[  116.348977][ T8986] bond3: entered allmulticast mode
[  116.351485][ T8986] 8021q: adding VLAN 0 to HW filter on device bond3
[  116.373097][ T8987] bond4: entered promiscuous mode
[  116.386020][ T8987] bond4: entered allmulticast mode
[  116.388968][ T8987] 8021q: adding VLAN 0 to HW filter on device bond4
[  116.462511][ T8995] openvswitch: netlink: Key type 203 is out of range max 32
[  116.500441][ T9000] netlink: 'syz.2.881': attribute type 1 has an invalid length.
[  116.503516][ T9000] netlink: 'syz.2.881': attribute type 1 has an invalid length.
[  116.703720][ T9020] netlink: 'syz.2.887': attribute type 1 has an invalid length.
[  116.732440][ T9020] 8021q: adding VLAN 0 to HW filter on device bond5
[  116.756196][ T9020] 8021q: adding VLAN 0 to HW filter on device bond5
[  116.758711][ T9020] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  116.763335][ T9020] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  116.821352][ T9028] veth5: entered promiscuous mode
[  116.832742][ T9028] bond5: (slave veth5): Enslaving as an active interface with a down link
[  116.844604][ T9025] sctp: [Deprecated]: syz.0.888 (pid 9025) Use of int in max_burst socket option.
[  116.844604][ T9025] Use struct sctp_assoc_value instead
[  116.851462][ T9020] erspan0: entered allmulticast mode
[  116.894405][ T9033] IPv6: sit1: Disabled Multicast RS
[  117.116163][ T9048] netlink: 'syz.2.894': attribute type 7 has an invalid length.
[  117.243618][ T9063] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.249544][ T9063] tipc: Resetting bearer <eth:syzkaller0>
[  117.261837][ T9062] tipc: Disabling bearer <eth:syzkaller0>
[  117.368977][ T9065] bond6: (slave bridge5): making interface the new active one
[  117.372284][ T9065] bond6: (slave bridge5): Enslaving as an active interface with an up link
[  117.411067][ T9071] __nla_validate_parse: 24 callbacks suppressed
[  117.411113][ T9071] netlink: 96 bytes leftover after parsing attributes in process `syz.2.902'.
[  117.510264][ T9081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.907'.
[  117.724176][ T9105] IPv6: NLM_F_REPLACE set, but no existing node found!
[  117.902819][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.914'.
[  118.214004][ T9115] ip6tnl1: entered promiscuous mode
[  118.649739][ T9151] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  118.682034][ T9154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.929'.
[  118.697014][ T9154] batman_adv: batadv0: Adding interface: ipvlan2
[  118.701856][ T9154] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.710832][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  118.714354][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  118.718343][ T9154] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[  118.753875][ T9154] netlink: 20 bytes leftover after parsing attributes in process `syz.0.929'.
[  118.760319][ T9159] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  118.767919][ T5908] lo speed is unknown, defaulting to 1000
[  118.839806][ T9169] 8021q: adding VLAN 0 to HW filter on device bond7
[  118.939672][ T9176] netlink: 56 bytes leftover after parsing attributes in process `syz.2.937'.
[  118.939693][ T9183] netlink: 56 bytes leftover after parsing attributes in process `syz.2.937'.
[  119.042274][ T9192] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  119.149848][ T9200] syzkaller0: entered promiscuous mode
[  119.152174][ T9200] syzkaller0: entered allmulticast mode
[  119.323461][ T9217] rdma_op ffff88803cb821f0 conn xmit_rdma 0000000000000000
[  119.370132][ T9219] validate_nla: 3 callbacks suppressed
[  119.370149][ T9219] netlink: 'syz.0.952': attribute type 1 has an invalid length.
[  119.378532][ T9219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.952'.
[  119.381101][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.951'.
[  119.387729][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.951'.
[  119.453800][ T9228] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.481692][ T9224] geneve2: entered promiscuous mode
[  119.489980][ T5706] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.493450][ T5706] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.502935][ T5706] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.507418][ T5706] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  119.550865][ T9231] lo speed is unknown, defaulting to 1000
[  120.142816][ T9258] netlink: 'syz.0.961': attribute type 4 has an invalid length.
[  120.183409][ T9258] netlink: 'syz.0.961': attribute type 4 has an invalid length.
[  120.448716][ T9274] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  121.223717][ T9329] rose2: entered promiscuous mode
[  121.830769][ T9376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  121.833760][ T9376] IPv6: NLM_F_CREATE should be set when creating new route
[  121.837284][ T9376] IPv6: NLM_F_CREATE should be set when creating new route
[  122.529591][ T9421] lo speed is unknown, defaulting to 1000
[  122.561068][ T9424] __nla_validate_parse: 56 callbacks suppressed
[  122.561087][ T9424] netlink: 192 bytes leftover after parsing attributes in process `syz.2.998'.
[  122.575764][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.998'.
[  122.875258][ T9441] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1003'.
[  122.959048][ T9446] netlink: 'syz.1.1004': attribute type 11 has an invalid length.
[  123.057289][ T9453] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1006'.
[  123.063217][ T9453] dummy0: entered promiscuous mode
[  123.067883][ T9454] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1006'.
[  123.108950][ T9458] geneve3: entered promiscuous mode
[  123.191900][ T9463] netlink: 'syz.1.1009': attribute type 7 has an invalid length.
[  123.194415][ T9463] netlink: 'syz.1.1009': attribute type 8 has an invalid length.
[  123.540580][ T9479] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1013'.
[  123.600383][ T9479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1013'.
[  123.711810][ T9481] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1014'.
[  123.797563][ T9485] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1016'.
[  123.801283][ T9485] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1016'.
[  123.998627][ T9497] tipc: Can't bind to reserved service type 1
[  141.393529][    C1] ==================================================================
[  141.397086][    C1] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x696/0xca0
[  141.400271][    C1] Write of size 8 at addr ffff888024717ab0 by task swapper/1/0
[  141.403869][    C1] 
[  141.405115][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  141.405129][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  141.405137][    C1] Call Trace:
[  141.405150][    C1]  <IRQ>
[  141.405156][    C1]  dump_stack_lvl+0x189/0x250
[  141.405174][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  141.405186][    C1]  ? rcu_is_watching+0x15/0xb0
[  141.405196][    C1]  ? __kasan_check_byte+0x12/0x40
[  141.405208][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  141.405217][    C1]  ? rcu_is_watching+0x15/0xb0
[  141.405224][    C1]  ? lock_release+0x4b/0x3e0
[  141.405239][    C1]  ? __virt_addr_valid+0x1c8/0x5c0
[  141.405248][    C1]  ? __virt_addr_valid+0x4a5/0x5c0
[  141.405258][    C1]  print_report+0xca/0x240
[  141.405267][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  141.405281][    C1]  kasan_report+0x118/0x150
[  141.405293][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  141.405305][    C1]  __xfrm_state_delete+0x696/0xca0
[  141.405320][    C1]  xfrm_timer_handler+0x18f/0xa00
[  141.405333][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  141.405344][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  141.405357][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  141.405369][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  141.405378][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  141.405389][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  141.405402][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  141.405413][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  141.405427][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  141.405435][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  141.405446][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  141.405455][    C1]  handle_softirqs+0x286/0x870
[  141.405464][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  141.405473][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  141.405481][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  141.405493][    C1]  __irq_exit_rcu+0xca/0x1f0
[  141.405500][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  141.405510][    C1]  irq_exit_rcu+0x9/0x30
[  141.405517][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  141.405528][    C1]  </IRQ>
[  141.405531][    C1]  <TASK>
[  141.405535][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  141.405546][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  141.405558][    C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 d6 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  141.405565][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  141.405576][    C1] RAX: ff9a89b5104c6000 RBX: ffffffff819683a8 RCX: ff9a89b5104c6000
[  141.405582][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b69f6 RDI: ffffffff8be33300
[  141.405588][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  141.405594][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa37e30
[  141.405600][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d0000
[  141.405606][    C1]  ? do_idle+0x1e8/0x510
[  141.405616][    C1]  default_idle+0x13/0x20
[  141.405623][    C1]  default_idle_call+0x74/0xb0
[  141.405630][    C1]  do_idle+0x1e8/0x510
[  141.405638][    C1]  ? asm_sysvec_call_function_single+0x1a/0x20
[  141.405646][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  141.405657][    C1]  ? __pfx_do_idle+0x10/0x10
[  141.405666][    C1]  ? do_idle+0x4ef/0x510
[  141.405674][    C1]  cpu_startup_entry+0x44/0x60
[  141.405682][    C1]  start_secondary+0x101/0x110
[  141.405695][    C1]  common_startup_64+0x13e/0x147
[  141.405711][    C1]  </TASK>
[  141.405714][    C1] 
[  141.546860][    C1] Allocated by task 8263:
[  141.548670][    C1]  kasan_save_track+0x3e/0x80
[  141.550580][    C1]  __kasan_slab_alloc+0x6c/0x80
[  141.552521][    C1]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  141.554714][    C1]  xfrm_state_alloc+0x24/0x2f0
[  141.556719][    C1]  __find_acq_core+0x8a7/0x1c00
[  141.558819][    C1]  xfrm_find_acq+0x78/0xa0
[  141.560813][    C1]  xfrm_alloc_userspi+0x6b3/0xc90
[  141.562963][    C1]  xfrm_user_rcv_msg+0x7a3/0xab0
[  141.565054][    C1]  netlink_rcv_skb+0x208/0x470
[  141.566999][    C1]  xfrm_netlink_rcv+0x79/0x90
[  141.568913][    C1]  netlink_unicast+0x82f/0x9e0
[  141.570889][    C1]  netlink_sendmsg+0x805/0xb30
[  141.572877][    C1]  __sock_sendmsg+0x21c/0x270
[  141.574861][    C1]  ____sys_sendmsg+0x505/0x830
[  141.576814][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  141.578744][    C1]  __x64_sys_sendmsg+0x19b/0x260
[  141.580733][    C1]  do_syscall_64+0xfa/0x3b0
[  141.582576][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.584979][    C1] 
[  141.585979][    C1] Freed by task 5893:
[  141.587605][    C1]  kasan_save_track+0x3e/0x80
[  141.589485][    C1]  kasan_save_free_info+0x46/0x50
[  141.591532][    C1]  __kasan_slab_free+0x5b/0x80
[  141.593541][    C1]  kmem_cache_free+0x18f/0x400
[  141.595520][    C1]  xfrm_state_gc_task+0x52d/0x6b0
[  141.597677][    C1]  process_scheduled_works+0xae1/0x17b0
[  141.600127][    C1]  worker_thread+0x8a0/0xda0
[  141.602135][    C1]  kthread+0x711/0x8a0
[  141.603855][    C1]  ret_from_fork+0x3fc/0x770
[  141.605746][    C1]  ret_from_fork_asm+0x1a/0x30
[  141.607723][    C1] 
[  141.608562][    C1] The buggy address belongs to the object at ffff888024717a80
[  141.608562][    C1]  which belongs to the cache xfrm_state of size 928
[  141.614038][    C1] The buggy address is located 48 bytes inside of
[  141.614038][    C1]  freed 928-byte region [ffff888024717a80, ffff888024717e20)
[  141.618375][    C1] 
[  141.619169][    C1] The buggy address belongs to the physical page:
[  141.621199][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24714
[  141.623948][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  141.626589][    C1] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  141.629123][    C1] page_type: f5(slab)
[  141.630461][    C1] raw: 00fff00000000040 ffff88801bf59c80 ffffea0000860e00 0000000000000003
[  141.633630][    C1] raw: 0000000000000000 00000000000e000e 00000000f5000000 0000000000000000
[  141.636409][    C1] head: 00fff00000000040 ffff88801bf59c80 ffffea0000860e00 0000000000000003
[  141.639447][    C1] head: 0000000000000000 00000000000e000e 00000000f5000000 0000000000000000
[  141.643112][    C1] head: 00fff00000000002 ffffea000091c501 00000000ffffffff 00000000ffffffff
[  141.646372][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  141.649241][    C1] page dumped because: kasan: bad access detected
[  141.651334][    C1] page_owner tracks the page as allocated
[  141.653211][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7145, tgid 7140 (syz.1.362), ts 80310915175, free_ts 77382853896
[  141.660291][    C1]  post_alloc_hook+0x240/0x2a0
[  141.662358][    C1]  get_page_from_freelist+0x21e4/0x22c0
[  141.664719][    C1]  __alloc_frozen_pages_noprof+0x181/0x370
[  141.667117][    C1]  alloc_pages_mpol+0x232/0x4a0
[  141.669217][    C1]  allocate_slab+0x8a/0x370
[  141.671152][    C1]  ___slab_alloc+0xbeb/0x1410
[  141.673181][    C1]  kmem_cache_alloc_noprof+0x283/0x3c0
[  141.675099][    C1]  xfrm_state_alloc+0x24/0x2f0
[  141.676744][    C1]  xfrm_state_find+0x37d4/0x5400
[  141.678405][    C1]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  141.680441][    C1]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  141.682326][    C1]  xfrm_lookup_route+0x3c/0x1c0
[  141.683903][    C1]  udp_sendmsg+0x142e/0x2170
[  141.685493][    C1]  __sock_sendmsg+0x19c/0x270
[  141.687067][    C1]  ____sys_sendmsg+0x52d/0x830
[  141.688664][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  141.690269][    C1] page last free pid 7017 tgid 7012 stack trace:
[  141.692435][    C1]  __free_frozen_pages+0xbc4/0xd30
[  141.694292][    C1]  __put_partials+0x156/0x1a0
[  141.696010][    C1]  put_cpu_partial+0x17c/0x250
[  141.697861][    C1]  __slab_free+0x2d5/0x3c0
[  141.699430][    C1]  qlist_free_all+0x97/0x140
[  141.700930][    C1]  kasan_quarantine_reduce+0x148/0x160
[  141.702802][    C1]  __kasan_slab_alloc+0x22/0x80
[  141.704354][    C1]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  141.706300][    C1]  __alloc_skb+0x112/0x2d0
[  141.707804][    C1]  sock_wmalloc+0xb2/0x130
[  141.709322][    C1]  pppol2tp_sendmsg+0x183/0x5f0
[  141.710954][    C1]  __sock_sendmsg+0x21c/0x270
[  141.712525][    C1]  ____sys_sendmsg+0x52d/0x830
[  141.714090][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  141.715650][    C1]  __sys_sendmmsg+0x227/0x430
[  141.717218][    C1]  __x64_sys_sendmmsg+0xa0/0xc0
[  141.719068][    C1] 
[  141.719851][    C1] Memory state around the buggy address:
[  141.721852][    C1]  ffff888024717980: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  141.725233][    C1]  ffff888024717a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  141.728555][    C1] >ffff888024717a80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  141.731238][    C1]                                      ^
[  141.733004][    C1]  ffff888024717b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  141.735612][    C1]  ffff888024717b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  141.738327][    C1] ==================================================================
[  141.741610][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  141.743939][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  141.746885][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  141.750112][    C1] Call Trace:
[  141.751197][    C1]  <IRQ>
[  141.752130][    C1]  dump_stack_lvl+0x99/0x250
[  141.753697][    C1]  ? __asan_memcpy+0x40/0x70
[  141.755206][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  141.756841][    C1]  ? __pfx__printk+0x10/0x10
[  141.758338][    C1]  vpanic+0x281/0x750
[  141.759602][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  141.761294][    C1]  ? __pfx_vpanic+0x10/0x10
[  141.762697][    C1]  ? asm_common_interrupt+0x26/0x40
[  141.764368][    C1]  panic+0xb9/0xc0
[  141.765643][    C1]  ? __pfx_panic+0x10/0x10
[  141.767181][    C1]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  141.769262][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  141.771434][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  141.773437][    C1]  check_panic_on_warn+0x89/0xb0
[  141.775304][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  141.777095][    C1]  end_report+0x78/0x160
[  141.778469][    C1]  kasan_report+0x129/0x150
[  141.779989][    C1]  ? __xfrm_state_delete+0x696/0xca0
[  141.781732][    C1]  __xfrm_state_delete+0x696/0xca0
[  141.783443][    C1]  xfrm_timer_handler+0x18f/0xa00
[  141.785098][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  141.786927][    C1]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  141.788806][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  141.790535][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  141.792462][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  141.794522][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  141.796332][    C1]  ? __pfx_xfrm_timer_handler+0x10/0x10
[  141.798138][    C1]  __hrtimer_run_queues+0x52c/0xc60
[  141.799846][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  141.801730][    C1]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  141.803569][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  141.805268][    C1]  handle_softirqs+0x286/0x870
[  141.806863][    C1]  ? __irq_exit_rcu+0xca/0x1f0
[  141.808517][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  141.810279][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  141.812002][    C1]  __irq_exit_rcu+0xca/0x1f0
[  141.813521][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  141.815228][    C1]  irq_exit_rcu+0x9/0x30
[  141.816599][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  141.818429][    C1]  </IRQ>
[  141.819420][    C1]  <TASK>
[  141.820397][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  141.822369][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  141.824148][    C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 d6 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  141.830734][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  141.833334][    C1] RAX: ff9a89b5104c6000 RBX: ffffffff819683a8 RCX: ff9a89b5104c6000
[  141.836831][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b69f6 RDI: ffffffff8be33300
[  141.839778][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  141.842342][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa37e30
[  141.844965][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d0000
[  141.847670][    C1]  ? do_idle+0x1e8/0x510
[  141.849312][    C1]  default_idle+0x13/0x20
[  141.850744][    C1]  default_idle_call+0x74/0xb0
[  141.852263][    C1]  do_idle+0x1e8/0x510
[  141.853587][    C1]  ? asm_sysvec_call_function_single+0x1a/0x20
[  141.855548][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  141.857212][    C1]  ? __pfx_do_idle+0x10/0x10
[  141.858727][    C1]  ? do_idle+0x4ef/0x510
[  141.860288][    C1]  cpu_startup_entry+0x44/0x60
[  141.862296][    C1]  start_secondary+0x101/0x110
[  141.864224][    C1]  common_startup_64+0x13e/0x147
[  141.865826][    C1]  </TASK>
[  141.867466][    C1] Kernel Offset: disabled
[  141.868877][    C1] Rebooting in 86400 seconds..

VM DIAGNOSIS:
00:05:42  Registers:
info registers vcpu 0

CPU#0
RAX=e8001ac3ed50e600 RBX=ffffffff819683a8 RCX=e8001ac3ed50e600 RDX=0000000000000001
RSI=ffffffff8d9b69f6 RDI=ffffffff8be33300 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa37e30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7953f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f091586b135 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bdc60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99dee630 RSP=ffffc900001e0350
R8 =ffff888020198237 R9 =1ffff11004033046 R10=dffffc0000000000 R11=ffffffff854efea0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff17 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f091582b533 CR3=000000010cc0a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f0917b87d20
XMM02=ff041ac003000800 1ab8030008001ab0 XMM03=030fffffffffffff 041aa0030fffffff
XMM04=ffffff041a900318 08001a88031c0800 XMM05=0100000008060a01 6faa05e8ac080002
XMM06=1a80030810000280 0406080004860800 XMM07=ffffff041a900318 08001a88031c0800
XMM08=0101e01000118004 0a1000060102de00 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
