last executing test programs:

1.019915444s ago: executing program 2 (id=552):
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x801}, 0x4004080)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000010a050000000000000000000200001a0800024000000000090001"], 0x60}, 0x1, 0x0, 0x0, 0x400c895}, 0x20000000)
socket$inet6(0xa, 0x5, 0x0)

969.844175ms ago: executing program 2 (id=553):
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="50000000080211000000080211000000080211000000060000000000000000004f000120000602020202020203012c0406051cff0f04008c87a3082ae2d64acd1da4bd1b61d3b887915c2a0404ee3788f9510e6aaa0b1405a32e44125e611ee718af5afb8e2c56ed5d2c65837fc9d794cfc9dd1ef2899ec53ef82305ed243b21645d"], 0x37)

880.556053ms ago: executing program 1 (id=554):
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32, @ANYBLOB="04008ed0080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0xb5a, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

439.07808ms ago: executing program 0 (id=560):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="ec00000021000100000000000100000000000000f6ffffff0000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100e0000001000000000000000000000000ac1414aa000000000000000000000000ac1414aa000000000000000000000000ffffffff0000000000000000000000003c040000053500000a00020000000000000000000000000000000000ac1e0001000000000000000000000000e0000002000000000000000000000000000000000000000000000000000000006c0100000635000002000a00"], 0xec}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x3}, {0x2, 0xfff3}, {0xc, 0x4}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20008040)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}, 0x4000}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

438.214926ms ago: executing program 1 (id=561):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) (async)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x31, 0x701, 0x70bd2a, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)
recvmmsg(r2, &(0x7f0000009a80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001c00)=""/189, 0xbd}, {&(0x7f0000001cc0)=""/101, 0x65}, {&(0x7f0000004a80)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/188, 0xbc}], 0x4}, 0x8}], 0x3, 0x42, 0x0)
listen(r0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30000000000a03000000000000000000070000040900010073797a30000000000800024000000002080002400000000248000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210d0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001"], 0x100}, 0x1, 0x0, 0x0, 0x8054}, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_BT_POWER(r5, 0x112, 0x9, 0x0, &(0x7f0000000080))
r6 = accept(r0, 0x0, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_int(r8, 0x29, 0x10, &(0x7f0000000000)=0xb2, 0x4) (async)
setsockopt$inet6_int(r8, 0x29, 0x10, &(0x7f0000000000)=0xb2, 0x4)
sendmmsg$inet6(r8, &(0x7f0000000080)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffe, @empty}, 0x1c, 0x0}}], 0x1, 0x7ffffff7)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x12, 0x14, 0x4, 0x5}, 0x50) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x12, 0x14, 0x4, 0x5}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r6}, 0x47)
shutdown(r6, 0x0)
recvfrom$unix(r6, 0x0, 0x0, 0x140, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000001000370410000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="83450500010000004000128008000100736974003400028008000300ffffffff06001000060000000500040000"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000001000370410000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="83450500010000004000128008000100736974003400028008000300ffffffff06001000060000000500040000"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000063010000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2) (async)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x30, r11, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000090}, 0x810)

433.954568ms ago: executing program 0 (id=562):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x18, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) (async, rerun: 32)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

432.566583ms ago: executing program 2 (id=563):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="08000500060000000c001780040007"], 0x30}}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r6, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32, @ANYBLOB="b4000280380001002400010700000000000000656a6f696e5f696e0432ef483f0a0a43eb74657276616c00000000000000000000000500030003000000080004000101000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000194d716c41221d9b9d530c499937a1c2317b35727"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044000)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4098, 0x1002}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000580)=""/176, 0xb0}, {&(0x7f0000000340)=""/181, 0xb5}], 0x4}, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f00000007c0), r0)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0xeb, 0x1, 0x9, 0x8, 0x0, 0x9, 0xd, 0x0, 0xb8, 0x4, 0x6, 0x4, 0x40, 0x6}, 0xe)

340.714178ms ago: executing program 2 (id=564):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="ec00000021000100000000000100000000000000f6ffffff0000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100e0000001000000000000000000000000ac1414aa000000000000000000000000ac1414aa000000000000000000000000ffffffff0000000000000000000000003c040000053500000a00020000000000000000000000000000000000ac1e0001000000000000000000000000e0000002000000000000000000000000000000000000000000000000000000006c0100000635000002000a00"], 0xec}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x3}, {0x2, 0xfff3}, {0xc, 0x4}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20008040)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}, 0xa1ff}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

238.943869ms ago: executing program 1 (id=565):
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000047c0)=r1, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000300)=@newtaction={0x18, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x48010)
r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
mmap(&(0x7f0000a62000/0x2000)=nil, 0x2000, 0x200000a, 0x13, r2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r3, 0x0)
mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$sock(r6, &(0x7f00000000c0)={&(0x7f0000000100)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x41}}], 0x39}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newpolicy={0xcc, 0x13, 0x101, 0x0, 0x0, {{@in6=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@XFRMA_IF_ID={0x8}, @offload={0xc}]}, 0xcc}}, 0x0)
close(r4)
write$cgroup_subtree(r4, 0x0, 0xfe33)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{}, &(0x7f0000000700), &(0x7f0000000740)=r7, 0x600}, 0x20)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000280)={<r8=>0x0, @broadcast, @local}, &(0x7f00000002c0)=0xc)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_ro(r9, &(0x7f0000000240)='blkio.bfq.empty_time\x00', 0x0, 0x0)
preadv(r10, &(0x7f0000000fc0)=[{&(0x7f0000000ac0)=""/244, 0xf4}], 0x1, 0x0, 0x0)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r11}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_ext={0x1c, 0x20, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000009000000000000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b703000000000900000000000055090100000000009500000000000000181200"/60, @ANYRES32=r3, @ANYBLOB="0000000000000000185b0000050000000000000000000000185200000b000000000000000000000018570000060000000000000000000000186300000800000000000000010000001a09f4ff0100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000086000000181b0000", @ANYRES32, @ANYBLOB="0000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, &(0x7f0000000040), 0x41000, 0x1, '\x00', r8, 0x0, r10, 0x8, &(0x7f0000000340)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0xb, 0x3, 0x7}, 0x10, 0x3002f, r11, 0xa, 0x0, &(0x7f00000003c0)=[{0x3, 0x5, 0x5, 0x7}, {0x5, 0x1, 0xa}, {0x4, 0x1, 0x5}, {0x3, 0x4, 0xc, 0x5}, {0x2, 0x4, 0x80, 0x2}, {0x1, 0x5, 0xb, 0xb}, {0x5, 0x9, 0x10}, {0x2, 0x2, 0xd, 0x8}, {0x0, 0x3, 0x5, 0x8}, {0x5, 0x2, 0xf, 0x4}], 0x10, 0x5}, 0x94)

238.337358ms ago: executing program 2 (id=566):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000002b00)=ANY=[@ANYBLOB="1c0000f5000002000000020008006700000010"], 0x109c)
unshare(0x10000800)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18)
syz_emit_ethernet(0xbe, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x77, 0x0, [{0x0, 0xc, "e256b28c590300000052"}, {0x0, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "0000000000800000"}, {0x0, 0x12, "73bc23f9ffffffa30900a301c8460000"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0)

235.764245ms ago: executing program 0 (id=567):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000003080)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000000)=""/166, 0xa6}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}, {{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000d40)=[{&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000003140)=""/226, 0xe2}, {&(0x7f0000003240)=""/250, 0xfa}, {&(0x7f0000000340)=""/42, 0x2a}, {&(0x7f00000006c0)=""/109, 0x6d}, {&(0x7f0000000a00)=""/83, 0x53}, {&(0x7f0000000a80)=""/183, 0xb7}, {&(0x7f0000000b40)=""/52, 0x34}, {&(0x7f0000000bc0)=""/246, 0xf6}, {&(0x7f0000000cc0)=""/96, 0x60}], 0xa, &(0x7f0000003800)=""/4096, 0x1000, 0x3b9aca00}, 0xb}, {{&(0x7f0000000e00)=@sco, 0x80, &(0x7f0000000480)=[{&(0x7f0000000e80)=""/149, 0x95}, {&(0x7f0000002fc0)=""/183, 0xb7}], 0x2, &(0x7f0000000540)=""/27, 0x1b}, 0x5}], 0x3, 0x42040000, &(0x7f0000003700)={0x77359400})

160.581382ms ago: executing program 0 (id=568):
socket(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000053c0001800c00028005000100000000002c00018014000300fc01000000000000000000000300000000000000000000000000000000000000000000013c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014000400"], 0xc8}}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x8, 0x0, 0xf6, 0x8173}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r7)
ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40004091)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x40408b0)
sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r6, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r5, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0)
nanosleep(0x0, &(0x7f0000000380))
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="00a600"], 0x14}}, 0x40006)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'veth0_to_hsr\x00'})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r10)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
socket$kcm(0x10, 0x2, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

159.125068ms ago: executing program 1 (id=569):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000003080)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/96, 0x60}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000000)=""/166, 0xa6}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}, {{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000d40)=[{&(0x7f0000001fc0)=""/4096, 0xc88}, {&(0x7f0000000780)=""/226, 0xe2}, {&(0x7f0000000880)=""/238, 0xee}, {&(0x7f0000000340)=""/42, 0x2a}, {&(0x7f00000006c0)=""/109, 0x6d}, {&(0x7f0000000a00)=""/83, 0x53}, {&(0x7f0000000a80)=""/183, 0xb7}, {&(0x7f0000000b40)=""/68, 0x44}, {&(0x7f0000000bc0)=""/246, 0xf6}, {&(0x7f0000000cc0)=""/96, 0x60}], 0xa, &(0x7f0000003800)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000000e00)=@sco, 0x80, &(0x7f0000000480)=[{&(0x7f0000000e80)=""/155, 0x9b}, {&(0x7f0000002fc0)=""/183, 0xb7}], 0x2, &(0x7f0000000540)=""/27, 0x1b}, 0x5}], 0x3, 0x42040000, &(0x7f0000003700)={0x0, 0x3938700})

100.062147ms ago: executing program 2 (id=570):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x8, 0x0, 0x0, 0xc8, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x1}}}}]}, 0x38}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xb)
close(r2)
r3 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x3c}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x24000000)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000380)=0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00'}, 0x10)
r7 = socket$kcm(0x10, 0x400000002, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000)
sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084)
sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})
r12 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r5, &(0x7f0000000200)={0xa000000c})
r13 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081"], 0x44}}, 0x0)

99.490863ms ago: executing program 1 (id=571):
r0 = socket(0x10, 0x80002, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x898, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0x5, 0x4}, {}, {0xf, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x868, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x41}, @TCA_FLOW_ADDEND={0x8}, @TCA_FLOW_BASECLASS={0x8}, @TCA_FLOW_MASK={0x8, 0x6, 0x1}, @TCA_FLOW_POLICE={0x428, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x200, 0x5, 0x3, 0x10000, 0x3ff, 0x401, 0x9, 0x28ea, 0x6, 0x95, 0x1, 0x0, 0x3, 0xc, 0x5, 0x7fffffff, 0x7, 0x2574148f, 0x2, 0x1, 0x80000000, 0x3, 0xff, 0x0, 0x4d63e678, 0x1, 0x80000864, 0x1, 0x6, 0x6, 0x5b, 0xa089, 0x0, 0x4, 0x80000000, 0x18f, 0x8, 0x6, 0xfffffffe, 0x9, 0x162, 0xfffffff7, 0x1, 0x1, 0x5d, 0x200, 0xc5000, 0x0, 0x40, 0x6, 0x200, 0x4, 0x7f, 0xfffff18a, 0x5, 0x8, 0x4, 0xe, 0x5, 0x4, 0x3, 0x10000, 0x3ff, 0x80000000, 0x8, 0x9, 0xc, 0x3, 0x6, 0x7, 0x1, 0x6, 0x0, 0x800, 0x956, 0x10, 0x6d9, 0xffffffff, 0xc, 0x2e, 0x9, 0x0, 0x3, 0xd, 0x5a, 0xfffffffe, 0xa362, 0x3, 0x0, 0x9, 0x9, 0x7f, 0x3fc0529b, 0xffff0000, 0xffffff27, 0x80000001, 0x9, 0x10001, 0x2, 0xec6, 0x10001, 0x8, 0x1ff, 0x9, 0xfff, 0x1, 0xa30, 0x7, 0x6, 0x1, 0x9, 0xbe, 0x4, 0x4, 0x1, 0x2, 0x400, 0xb35, 0x2, 0x9, 0x5, 0xfffffff7, 0x7, 0xb8, 0x7, 0x6, 0x7fff, 0xd, 0x4, 0x7, 0x10001, 0x8, 0xb3bd, 0x11c32625, 0x1, 0xffffffff, 0xfffffc01, 0x4, 0xc, 0x4, 0x0, 0x3, 0x6, 0x8, 0x4, 0x6, 0xa, 0x0, 0x48e, 0xf0000000, 0xc, 0x1, 0x5, 0x9, 0x6, 0x5, 0x80000001, 0x0, 0x5, 0x9, 0x4, 0x8, 0x5, 0x8, 0xfffffff0, 0xa, 0x3, 0x7529, 0x101, 0x2, 0xb, 0x3, 0x7, 0xbe8, 0x8, 0x10000, 0x7, 0xc28a, 0x9c75, 0x80000001, 0x4, 0x7, 0x0, 0x8, 0x2ab, 0x514, 0x4db, 0x19, 0x3, 0x8001, 0x175a57bd, 0x6, 0x5, 0x5, 0x7, 0x9, 0x7, 0x7ff, 0x8, 0x2, 0x2, 0xfffffff9, 0x3, 0x10001, 0x75, 0xfb, 0x3, 0x73d0, 0x2, 0x4, 0x3, 0x1ff, 0x81, 0x9847, 0x3, 0x5, 0x1, 0x8, 0x4, 0x8001, 0x9, 0xe, 0x4, 0x0, 0x5, 0xffffff00, 0x1, 0x9, 0x81, 0x83, 0x7, 0x100, 0x50, 0x2684f250, 0x5, 0x81, 0x9, 0x2, 0x4, 0x4, 0x0, 0x87, 0x1, 0x5, 0xd141, 0x5, 0x82, 0x80000000, 0x2, 0x8, 0x0, 0x10, 0x5, 0xffffff27, 0x2, 0x80000000]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf}]}, @TCA_FLOW_POLICE={0x410, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0x0, 0xd, 0x4, 0x9ef, 0xfffffffc, 0x3, 0x7fffffff, 0x688, 0x5, 0x1, 0x6, 0x8, 0x9, 0xe79, 0x9, 0x4, 0x5, 0x7f, 0x8, 0x5, 0x3, 0x401, 0x9, 0x80, 0x2, 0x84, 0x7f, 0x4cf, 0x1, 0x4, 0x38, 0x8, 0x6, 0x1, 0x4, 0x1, 0x0, 0xab, 0x0, 0x9, 0x47, 0x3, 0x9, 0xa1, 0x0, 0x4, 0x1ff, 0x7c15, 0x4488, 0x7, 0x9, 0x80000000, 0x1, 0x187, 0xfe00000, 0x2, 0x4, 0x3ff, 0x8, 0x54c, 0x2, 0x7, 0x4, 0x0, 0x1ff, 0x7fff, 0x4, 0x5, 0x8000, 0x4, 0xc, 0x8, 0x8d27, 0x1, 0x5, 0x0, 0xffffffff, 0x5, 0x83, 0x3fe00, 0xfffff67c, 0x0, 0xffff88c9, 0x4, 0xf, 0x6, 0x1, 0x1, 0x9d26, 0x6, 0x1c7e07e8, 0x7, 0x3, 0x1, 0x5, 0x8, 0x0, 0x9, 0x3, 0x54, 0x4, 0x1, 0xbac, 0x2, 0x19e6, 0x1, 0x1, 0x4, 0x1, 0xb, 0x9, 0x5, 0x1, 0x15, 0x8, 0x3ff, 0x1, 0x8, 0x7, 0x40, 0x1, 0x7, 0x3, 0x5ff5, 0x0, 0x0, 0x7ff, 0xfffffff8, 0x80000000, 0x0, 0xcb, 0x3, 0x7, 0x1, 0x79, 0x0, 0x10, 0x3, 0x6, 0xd, 0x1, 0x200, 0x9, 0x51d, 0x5, 0x0, 0x2, 0xa, 0x200, 0x2, 0x0, 0x1, 0x8, 0x8, 0xffffffff, 0x401, 0x3, 0x4, 0x5, 0x85249262, 0xfb, 0x7f, 0x5, 0x8, 0xfff, 0x1000, 0x7, 0x8, 0x9, 0x7, 0xac, 0x8, 0xdca, 0x0, 0xbf, 0x4d96, 0x5, 0x7fff, 0x7, 0x8000, 0x8001, 0xc2ca, 0x2, 0x1, 0x8, 0xb5eebb5, 0xf73, 0x31, 0x5, 0x3ff, 0x1ff, 0x84b7, 0x0, 0x3ff, 0x1, 0x6aec1e79, 0x7, 0x10000, 0x1, 0x16, 0x7, 0x7d5, 0x5, 0x3, 0x1d, 0x583, 0x800, 0x9, 0x401, 0x8, 0x2, 0x6, 0x2e4e59c3, 0x3, 0x6, 0xffff, 0x8, 0x3, 0x9, 0x4, 0x9, 0x80000001, 0x5, 0x3, 0x7, 0x8, 0x6, 0x4, 0x2, 0x3, 0x7fffffff, 0x3, 0x8, 0xc, 0x580000, 0x4, 0xa0f, 0x1, 0x4, 0xfffffffc, 0x10, 0x3, 0x4, 0xe, 0x8, 0x5, 0x7, 0x7845, 0x9, 0xe, 0x9, 0x3, 0x1000, 0x3, 0x400]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x491a}]}, @TCA_FLOW_POLICE={0xc, 0xa, 0x0, 0x1, [@TCA_POLICE_RESULT={0x8, 0x5, 0x8}]}]}}]}, 0x898}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054)

98.996602ms ago: executing program 0 (id=572):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008, 0x40000000}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/\x00\x00\x00\b'], 0x20)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x7}, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000018000100000000000000000002000000000300090000e900060015000400000014001680100008800c000280080001"], 0x38}}, 0x4008010)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, 0x0, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}}, 0x0)
r5 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000040)={0x10000000})
pselect6(0x40, &(0x7f0000000280)={0x231, 0x6045, 0x6, 0x8000000000000001, 0x53, 0x9, 0x6, 0xfffffffffffffff9}, &(0x7f00000005c0)={0x4, 0x80000001, 0x5, 0x76e, 0x9c, 0x5, 0x4, 0xbb3}, &(0x7f0000000600)={0x6, 0x8, 0xfff, 0x5a13, 0x6, 0x6, 0xfffffffffffffffb, 0x7f}, &(0x7f0000000780), &(0x7f0000000800)={&(0x7f00000007c0)={[0x2]}, 0x8})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="b702000002000000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000081007d60b7030000000000006a0a00fefdff0000850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465c3a1f59916ffc9bf0bd09279c362f80e5cf8df265e1b40e4c8ae7a89cf8bd819b5c0c000000008da68076774bb4db2c769937000090af27db5b56024dcbbbd2cb2000ce94284673b4e8d5467e357754508535766c801100000000b290a248a120c9c6e39f3052aae80677eeba68562eaeaea5fecf298ca20f274233106e2baf69b1c60f0ce4099f366b89ab63ecf772de7b265040b6b1acbef92b2704550a4d1dd5c50b7420b58a93fe94c756008afcd0b2eb785632e0a85f02a5a6474ae549070000000000001294fba0ed5020e6477cc921fee1f6d8ad6a80d0947cd6d4a561ced23b0b4a902be6af7ec2d1ba000057f301000000000000000000000000100000aaf253886c0b9f6d4731d714ad72e5ad8530a6380ed2d29f47f96a576cd20cef7ed95157ab050000f0077e9d13d8b93eb0f2c6f8941e35e1577c10e509c9b133c849eb709df5c6ba73cccdfa3c58bc5204339b0b487f0eeed581cb202900000d322717c338033213c18a34ee0ca2cf61efb4b3797a642735d6d482ba98d252f36c54333aab1aa736369392239820f5f1557b0bf7ccb0a5a13c714e0b1a5bc3f9caff3283076cda3d0b1a2905cf7bd04f2db530abcbe44bc40528ad807970727fb819afa14aad99f93093ced7dd51995edcf53b907228fa9e83433eedb4ac88d0285594ffb0d14e71d5c57f33702f22b22417bfb38d04c8441ceec8bcaffbe800aa41307bd8325a76f395bc9a8b0c9d905979f34adddb521914f92eed3d3e9de82942a952e86bd67aff5bc2e3c1fcc00f61124dd06df4b8fd356cb365adc037e443820c05c5db160087a9cf471e0eff227f25b2c5cacebfcd55f8c81f5eb1f8d615ca27efb2193bb61665b8ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50223517a07a3484124c5563cd3700000000001825b05a580ea8cb7f85b77b35a06a895b287b47efbe220bc215aca4a65d7018a7f91c4228b35f71a7c183360ab7a7b6b7870086d851ff861ee07bbec801b79afa477ebab255c7265820456fdc3f34f9d729315d856be7ec564613d5e28cf7c405d6e2b6aeb20000b8505a36a8067cb459fab87c8de118117733d30f4fe049658a2c3edd43546ead9c7882858868cff89a49a693731140db1b7b7116060c30690a39de8b3e0eb4f5401e8354870848c546f9defe1a9c534c9030830fec3eeb5faf1d64bb8e80000000f6ff0000000000000055d843352632b829ceb5200a2cdeb63c0bc7e835e061f9ac3c052b5b6f689bf203aeb8858be07691bc83e178181fab55e6ed9e8a17819de49564d0f0c00dd507441b80cd499c39c5d03d6c00cf5be5215bae09a4f52abf8f1c1add498470a0bb9d7ab757a8b28e4accc939b3621e4c2c9e02741c51eeeaad40cf2e1c3659d83ed71fc628807739d70edda93542445e3204828c49bef648efdc2208341357dd158f411d379df9b1feffbe7c7ee80558a040fa3d5a303f36d5c1a66d9644fc0559aa0e291355ee3de6c7a705b8f7b45bb825044b9a82a6fd2f6eeb14eee0c3f71eeea9984e14c57022ef72850b6dc5fda167d6f98f6c1c73feb424b7937e3c7ca0d2525efbdac50eb94797cf3747b83b56cfea8c74dd3f957dc462e715b789934b422b7ddf3e11a6ad6ad9afd5389c728d14"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xf, 0x304, &(0x7f0000000040)="b90703600000f007049e0ff088471fffffe10ec53308633a77fbac141441e0022001be3e7d2a2007ff", 0x0, 0x104, 0xa000000, 0x0, 0xfeb9, &(0x7f0000000640)="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", &(0x7f0000000100)}, 0x28)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x6, &(0x7f00000000c0)={0x11, {{0x29, 0x0, 0x5000000, @empty, 0x3}}}, 0x88)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000001}, 0x40000)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', <r9=>0x0, 0x2f, 0x0, 0x0, 0x9db0, 0x1, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x700, 0x3, 0x5}})
sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@deltfilter={0x4c, 0x2d, 0x100, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x4}, {0x2, 0xd}, {0x3, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x5, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x5, 0xf}}, @TCA_CHAIN={0x8, 0xb, 0x18}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200c8c5}, 0x1000)

469.433µs ago: executing program 0 (id=573):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x134, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xffea}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_route={{0xa}, {0xc4, 0x2, [@TCA_ROUTE4_ACT={0xc0, 0x6, [@m_vlan={0xbc, 0x6, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1b6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x2, 0x5, 0x3d0d, 0x6}, 0x2}}]}, {0x6b, 0x6, "657c8f856bb2bb5d377d3e798375b1d28aa9ff794c8b3bd69e35949ecbef63f983c4a985c5750c001846426a94e358dab26224b357e0bd9c9b84cfee21ec99f484f585ab10ae01a9f7c67e6ad1016f78c1dfa478682e9b9c236d28ee491df3b6728d9be466fb7b"}, {0xc}, {0xc}}}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x30, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8}, @TCA_BPF_FD={0x8}]}}]}, 0x134}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0xec, 0x21, 0x1, 0x0, 0x1, {{@in, @in6=@remote}}, [@migrate={0x9c, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast, 0x3c, 0x4, 0x0, 0x3505, 0xa, 0x2}, {@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, @in6=@empty, 0x6c, 0x1, 0x0, 0x3506, 0x2, 0xa}]}]}, 0xec}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xc3ffffff}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

0s ago: executing program 1 (id=574):
socket(0x10, 0x3, 0x0) (async)
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x158, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@TCA_STAB={0x134, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x2, 0x7, 0xffffffff, 0x0, 0x1, 0x0, 0x7}}, {0x12, 0x2, [0x3e84, 0x6, 0x6, 0x0, 0x10, 0x7, 0x0]}}, {{0x1c, 0x1, {0x7f, 0x81, 0x115, 0x7, 0x2, 0xad9, 0x1, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x28, 0x40, 0x8000, 0x1, 0x1, 0x9, 0x2, 0x8}}, {0x14, 0x2, [0x0, 0x1, 0x7ff, 0x4, 0xe7, 0x200, 0x100, 0x1]}}, {{0x1c, 0x1, {0x9, 0x4, 0x6, 0x3, 0x1, 0x4, 0xd, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x4, 0x5, 0x7, 0x3, 0x1ac45cf429b565e3, 0xa56, 0xfffffffc, 0x7}}, {0x12, 0x2, [0x0, 0x1216, 0x7, 0x4, 0x40, 0x5, 0x4]}}, {{0x1c, 0x1, {0x0, 0xa, 0x0, 0xfffffff7, 0x1, 0x4, 0x7, 0x7}}, {0x12, 0x2, [0xbae, 0x7a0e, 0x5, 0x1000, 0xfcb8, 0x200, 0x8]}}, {{0x1c, 0x1, {0x1, 0x7, 0x5, 0x965, 0x1, 0x8, 0x81, 0x3}}, {0xa, 0x2, [0x200, 0xdc, 0xfff4]}}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x158, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@TCA_STAB={0x134, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x2, 0x7, 0xffffffff, 0x0, 0x1, 0x0, 0x7}}, {0x12, 0x2, [0x3e84, 0x6, 0x6, 0x0, 0x10, 0x7, 0x0]}}, {{0x1c, 0x1, {0x7f, 0x81, 0x115, 0x7, 0x2, 0xad9, 0x1, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x28, 0x40, 0x8000, 0x1, 0x1, 0x9, 0x2, 0x8}}, {0x14, 0x2, [0x0, 0x1, 0x7ff, 0x4, 0xe7, 0x200, 0x100, 0x1]}}, {{0x1c, 0x1, {0x9, 0x4, 0x6, 0x3, 0x1, 0x4, 0xd, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x4, 0x5, 0x7, 0x3, 0x1ac45cf429b565e3, 0xa56, 0xfffffffc, 0x7}}, {0x12, 0x2, [0x0, 0x1216, 0x7, 0x4, 0x40, 0x5, 0x4]}}, {{0x1c, 0x1, {0x0, 0xa, 0x0, 0xfffffff7, 0x1, 0x4, 0x7, 0x7}}, {0x12, 0x2, [0xbae, 0x7a0e, 0x5, 0x1000, 0xfcb8, 0x200, 0x8]}}, {{0x1c, 0x1, {0x1, 0x7, 0x5, 0x965, 0x1, 0x8, 0x81, 0x3}}, {0xa, 0x2, [0x200, 0xdc, 0xfff4]}}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x40000}, 0x44080)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a400000000010104000000000000000002000000380001801400018008000100ac1e000108000200e00000010c00028005000100000000001400018008000100e0000001080002000a010101240002800c000280050001000000000014000180080001000000000008000200e00000020800074000000000080008400000000008001540f2e700001c00188008000240000000000800014000000000080003"], 0xa4}}, 0x0)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000340)={<r4=>0x0, 0xa04, 0x10, 0x6}, &(0x7f00000003c0)=0x18)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000400)={r4, 0x0, 0x6, 0xad2}, &(0x7f0000000440)=0x10) (async)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000400)={r4, 0x0, 0x6, 0xad2}, &(0x7f0000000440)=0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x29, 0x2, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="11000000700001002abd70000000000007"], 0x24}}, 0x80)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x2, 0x0}}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000180)=0x10)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r7, 0x28, 0x6, &(0x7f0000000080)={0x0, 0x2710}, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r8)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f2", @ANYRES8=r6, @ANYRESOCT], 0xfc}}, 0x0) (async)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f2", @ANYRES8=r6, @ANYRESOCT], 0xfc}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)='GPL\x00'}, 0x90) (async)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r9, 0x0, 0x30, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$inet_udplite(0x2, 0x2, 0x88)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:43097' (ED25519) to the list of known hosts.
syzkaller login: [   48.951770][ T5759] cgroup: Unknown subsys name 'net'
[   49.072354][ T5759] cgroup: Unknown subsys name 'cpuset'
[   49.078646][ T5759] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.602655][ T5759] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.954073][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.959834][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.963646][ T5819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.986874][ T5821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.990114][ T5819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.990213][ T5821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.996001][ T5821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.000098][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.004381][ T5817] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.010536][ T5817] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.010963][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.017430][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.019581][ T5817] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.027242][ T5817] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.031219][ T5817] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.331912][ T5815] chnl_net:caif_netlink_parms(): no params data found
[   55.423799][ T5818] chnl_net:caif_netlink_parms(): no params data found
[   55.460830][ T5811] chnl_net:caif_netlink_parms(): no params data found
[   55.467958][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.471774][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.475057][ T5815] bridge_slave_0: entered allmulticast mode
[   55.480912][ T5815] bridge_slave_0: entered promiscuous mode
[   55.505929][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.509229][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.512238][ T5815] bridge_slave_1: entered allmulticast mode
[   55.516145][ T5815] bridge_slave_1: entered promiscuous mode
[   55.600825][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.637139][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.653849][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.656930][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.661143][ T5811] bridge_slave_0: entered allmulticast mode
[   55.665055][ T5811] bridge_slave_0: entered promiscuous mode
[   55.709402][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.712556][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.715774][ T5811] bridge_slave_1: entered allmulticast mode
[   55.720419][ T5811] bridge_slave_1: entered promiscuous mode
[   55.723701][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.726220][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.729070][ T5818] bridge_slave_0: entered allmulticast mode
[   55.732094][ T5818] bridge_slave_0: entered promiscuous mode
[   55.737526][ T5815] team0: Port device team_slave_0 added
[   55.753214][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.755923][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.758606][ T5818] bridge_slave_1: entered allmulticast mode
[   55.761477][ T5818] bridge_slave_1: entered promiscuous mode
[   55.773889][ T5815] team0: Port device team_slave_1 added
[   55.815186][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.820333][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.824591][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.829071][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.831905][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.841423][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.846996][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.865771][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.868971][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.877706][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.890952][ T5811] team0: Port device team_slave_0 added
[   55.912693][ T5811] team0: Port device team_slave_1 added
[   55.916497][ T5818] team0: Port device team_slave_0 added
[   55.921539][ T5818] team0: Port device team_slave_1 added
[   55.934292][ T5815] hsr_slave_0: entered promiscuous mode
[   55.936707][ T5815] hsr_slave_1: entered promiscuous mode
[   55.967946][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.971240][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.980030][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.985324][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.988943][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.000279][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.012487][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.015534][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.024592][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.029211][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.032096][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.043134][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.142448][ T5818] hsr_slave_0: entered promiscuous mode
[   56.145665][ T5818] hsr_slave_1: entered promiscuous mode
[   56.148853][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.152519][ T5818] Cannot create hsr debugfs directory
[   56.158502][ T5811] hsr_slave_0: entered promiscuous mode
[   56.161048][ T5811] hsr_slave_1: entered promiscuous mode
[   56.163283][ T5811] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.165976][ T5811] Cannot create hsr debugfs directory
[   56.401353][ T5815] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.412393][ T5815] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.417465][ T5815] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.431928][ T5815] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.474040][ T5811] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.479749][ T5811] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.484832][ T5811] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.495370][ T5811] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.550929][ T5818] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.556958][ T5818] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.571896][ T5818] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.581094][ T5818] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.682100][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.690503][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.733464][ T5815] 8021q: adding VLAN 0 to HW filter on device team0
[   56.743537][ T5811] 8021q: adding VLAN 0 to HW filter on device team0
[   56.750365][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.773000][ T5818] 8021q: adding VLAN 0 to HW filter on device team0
[   56.780880][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.783418][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.787779][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.790265][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.795065][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.797459][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.803853][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.806245][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.825734][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.828994][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.835687][   T68] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.838993][   T68] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.887869][ T5815] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.893218][ T5815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.941486][ T5811] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.945950][ T5811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.045804][ T5817] Bluetooth: hci0: command tx timeout
[   57.049143][ T5814] Bluetooth: hci1: command tx timeout
[   57.120524][ T5817] Bluetooth: hci2: command tx timeout
[   57.123332][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.200276][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.213867][ T5815] veth0_vlan: entered promiscuous mode
[   57.224119][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.245887][ T5815] veth1_vlan: entered promiscuous mode
[   57.289766][ T5811] veth0_vlan: entered promiscuous mode
[   57.309730][ T5811] veth1_vlan: entered promiscuous mode
[   57.321963][ T5815] veth0_macvtap: entered promiscuous mode
[   57.333872][ T5815] veth1_macvtap: entered promiscuous mode
[   57.345087][ T5818] veth0_vlan: entered promiscuous mode
[   57.354745][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.363102][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.374463][ T5815] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.377372][ T5815] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.380864][ T5815] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.383632][ T5815] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.393610][ T5818] veth1_vlan: entered promiscuous mode
[   57.404461][ T5811] veth0_macvtap: entered promiscuous mode
[   57.417413][ T5811] veth1_macvtap: entered promiscuous mode
[   57.462829][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.476724][ T5818] veth0_macvtap: entered promiscuous mode
[   57.487177][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.497142][ T5818] veth1_macvtap: entered promiscuous mode
[   57.500594][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.503418][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.520437][ T5811] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.524032][ T5811] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.527646][ T5811] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.534234][ T5811] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.556085][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.563047][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.572268][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.575441][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.584115][ T5818] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.593123][ T5818] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.596078][ T5818] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.599319][ T5818] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.660014][ T5815] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.674265][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.687975][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.748863][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.752120][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.794167][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.801421][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.812421][ T5879] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET)
[   57.821072][ T5879] netlink: 'syz.1.2': attribute type 1 has an invalid length.
[   57.857793][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.861351][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.158262][    C1] Unknown status report in ack skb
[   58.166682][ T5890] netlink: 268 bytes leftover after parsing attributes in process `syz.2.6'.
[   58.179729][ T5890] unsupported nla_type 65024
[   58.241960][ T5894] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.272510][ T5894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8'.
[   58.275302][ T5894] bridge_slave_1: left allmulticast mode
[   58.277182][ T5894] bridge_slave_1: left promiscuous mode
[   58.294455][ T5894] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.304232][ T5894] bridge_slave_0: left allmulticast mode
[   58.306117][ T5894] bridge_slave_0: left promiscuous mode
[   58.310428][ T5894] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.350657][ T5903] netlink: 268 bytes leftover after parsing attributes in process `syz.0.12'.
[   58.554451][ T5915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   58.595584][ T5919] netlink: 268 bytes leftover after parsing attributes in process `syz.2.19'.
[   59.118670][ T5817] Bluetooth: hci0: command tx timeout
[   59.121429][ T5814] Bluetooth: hci1: command tx timeout
[   59.198597][ T5814] Bluetooth: hci2: command tx timeout
[   59.264343][ T5934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'.
[   59.341085][ T5942] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.358346][ T5942] ieee802154 phy0 wpan0: encryption failed: -22
[   59.400802][ T5944] netlink: 268 bytes leftover after parsing attributes in process `syz.1.30'.
[   59.429165][ T5948] netlink: 'syz.0.32': attribute type 1 has an invalid length.
[   59.485196][ T5951] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   59.496908][ T5951] vlan2: entered allmulticast mode
[   59.628566][ T5958] netlink: 24 bytes leftover after parsing attributes in process `syz.2.36'.
[   59.635785][ T5959] netlink: 24 bytes leftover after parsing attributes in process `syz.2.36'.
[   59.763241][ T5964] RDS: rds_bind could not find a transport for fe80::2d, load rds_tcp or rds_rdma?
[   59.815594][ T5975] syz.2.41 (5975) used greatest stack depth: 18328 bytes left
[   59.920571][ T5981] netlink: 92 bytes leftover after parsing attributes in process `syz.0.44'.
[   59.924850][ T5981] netlink: 92 bytes leftover after parsing attributes in process `syz.0.44'.
[   60.094815][ T5997] Zero length message leads to an empty skb
[   60.101947][ T5997] xt_hashlimit: size too large, truncated to 1048576
[   60.543865][ T6018] netlink: 'syz.1.58': attribute type 11 has an invalid length.
[   60.781170][ T6039] netlink: 'syz.0.62': attribute type 1 has an invalid length.
[   60.868505][ T6043] warning: `syz.1.64' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   61.199327][ T5814] Bluetooth: hci1: command tx timeout
[   61.201709][ T5814] Bluetooth: hci0: command tx timeout
[   61.278630][ T5817] Bluetooth: hci2: command tx timeout
[   61.387189][ T6076] netlink: 'syz.0.78': attribute type 1 has an invalid length.
[   62.020353][ T6116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   62.161512][ T6130] netlink: 'syz.1.99': attribute type 22 has an invalid length.
[   62.169883][ T6130] mac80211_hwsim hwsim2 ": renamed from wlan0 (while UP)
[   62.226677][ T6136] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   62.412190][ T6154] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   62.415622][ T6154] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.566536][ T6177] netlink: 'syz.0.117': attribute type 1 has an invalid length.
[   62.581179][ T6177] 8021q: adding VLAN 0 to HW filter on device bond2
[   62.601456][ T6177] 8021q: adding VLAN 0 to HW filter on device bond2
[   62.605126][ T6177] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   62.610737][ T6177] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   62.645498][ T6181] gretap1: entered promiscuous mode
[   62.650783][ T6181] bond2: (slave gretap1): making interface the new active one
[   62.653853][ T6181] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   62.666131][ T6181] bond2: (slave vlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[   62.776105][ T6198] xt_hashlimit: size too large, truncated to 1048576
[   62.794631][ T6200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   63.168245][ T6228] __nla_validate_parse: 18 callbacks suppressed
[   63.168260][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.130'.
[   63.174843][ T6228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.130'.
[   63.278179][ T5817] Bluetooth: hci0: command tx timeout
[   63.278555][ T5814] Bluetooth: hci1: command tx timeout
[   63.358182][ T5814] Bluetooth: hci2: command tx timeout
[   63.364110][ T6234] netlink: 16 bytes leftover after parsing attributes in process `syz.1.132'.
[   63.437172][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'.
[   63.460923][ T6240] netlink: 24 bytes leftover after parsing attributes in process `syz.1.135'.
[   63.507173][ T6242] netlink: 36 bytes leftover after parsing attributes in process `syz.1.136'.
[   64.266237][ T1833] cfg80211: failed to load regulatory.db
[   64.352995][ T6296] @: renamed from veth0_vlan (while UP)
[   64.482968][ T6306] xt_hashlimit: size too large, truncated to 1048576
[   64.509654][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.159'.
[   64.513486][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.159'.
[   64.517121][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.159'.
[   64.521795][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.159'.
[   64.775088][ T6319] netlink: 'syz.0.165': attribute type 3 has an invalid length.
[   64.775347][ T6320] netlink: 'syz.2.163': attribute type 10 has an invalid length.
[   64.784752][ T6320] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.789220][ T6320] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   65.275184][ T6334] tipc: Failed to remove unknown binding: 66,3,3/0:604823779/604823780
[   65.449021][ T5814] Bluetooth: hci2: command tx timeout
[   65.499120][ T6338] netlink: 'syz.1.172': attribute type 83 has an invalid length.
[   65.684203][ T6349] team0: Device gtp0 is of different type
[   65.886972][ T6356] netlink: 'syz.1.180': attribute type 42 has an invalid length.
[   66.021145][ T6364] dummy0: entered promiscuous mode
[   66.023366][ T6364] dummy0: entered allmulticast mode
[   66.147134][ T6372] netlink: 'syz.2.186': attribute type 1 has an invalid length.
[   66.158217][ T6372] netlink: 'syz.2.186': attribute type 2 has an invalid length.
[   66.178891][ T6372] netlink: 'syz.2.186': attribute type 1 has an invalid length.
[   66.182255][ T6372] netlink: 'syz.2.186': attribute type 2 has an invalid length.
[   66.207572][ T6372] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.225549][ T6372] batadv_slave_1: entered promiscuous mode
[   66.245684][ T6372] No such timeout policy "syz0"
[   66.442256][ T6392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   66.792099][ T6406] bpq0: entered promiscuous mode
[   66.793845][ T6406] bpq0: entered allmulticast mode
[   67.416961][ T6429] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   67.832154][ T6444] openvswitch: netlink: Message has 5 unknown bytes.
[   68.476505][ T6497] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.480471][ T6497] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.560800][ T6507] xt_hashlimit: size too large, truncated to 1048576
[   68.580059][   T51] IPVS: starting estimator thread 0...
[   68.617147][ T6497] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   68.640668][ T6497] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   68.669037][ T6510] IPVS: using max 43 ests per chain, 103200 per kthread
[   68.812451][ T6497] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.817672][ T6497] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.828166][ T6497] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   68.836294][ T6497] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   69.334678][ T6524] __nla_validate_parse: 9 callbacks suppressed
[   69.334689][ T6524] netlink: 44 bytes leftover after parsing attributes in process `syz.1.238'.
[   69.344174][ T6524] netlink: 24 bytes leftover after parsing attributes in process `syz.1.238'.
[   69.376275][ T6526] netlink: 268 bytes leftover after parsing attributes in process `syz.1.240'.
[   69.416065][ T6528] netlink: 28 bytes leftover after parsing attributes in process `syz.1.241'.
[   69.425030][ T6528] netlink: 'syz.1.241': attribute type 7 has an invalid length.
[   69.428798][ T6528] netlink: 'syz.1.241': attribute type 8 has an invalid length.
[   69.432199][ T6528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.241'.
[   69.612916][ T6535] netlink: 40 bytes leftover after parsing attributes in process `syz.1.242'.
[   69.641915][ T6535] team0: Port device geneve0 added
[   69.870844][ T6554] netlink: 44 bytes leftover after parsing attributes in process `syz.2.247'.
[   69.893279][ T6554] netlink: 24 bytes leftover after parsing attributes in process `syz.2.247'.
[   70.042807][ T6570] netlink: 56 bytes leftover after parsing attributes in process `syz.2.254'.
[   70.049221][ T6570] xt_hashlimit: invalid rate
[   70.155836][ T6578] netlink: 56 bytes leftover after parsing attributes in process `syz.0.257'.
[   70.163016][ T6576] validate_nla: 1 callbacks suppressed
[   70.163034][ T6576] netlink: 'syz.2.256': attribute type 4 has an invalid length.
[   70.207005][ T6576] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.210769][ T6576] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.267863][ T6576] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.313866][ T6576] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.317095][ T6576] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.321511][ T6576] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.324618][ T6576] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.357948][ T6580] netlink: 'syz.0.258': attribute type 1 has an invalid length.
[   70.361121][ T6580] netlink: 'syz.0.258': attribute type 1 has an invalid length.
[   70.363747][ T6580] netlink: 'syz.0.258': attribute type 1 has an invalid length.
[   70.366313][ T6580] netlink: 'syz.0.258': attribute type 1 has an invalid length.
[   70.370249][ T6580] netlink: 'syz.0.258': attribute type 1 has an invalid length.
[   70.373199][ T6580] netlink: 'syz.0.258': attribute type 1 has an invalid length.
[   70.376439][ T6580] netlink: 'syz.0.258': attribute type 1 has an invalid length.
[   70.385210][ T6580] netlink: 'syz.0.258': attribute type 1 has an invalid length.
[   70.389346][ T6580] netlink: 'syz.0.258': attribute type 1 has an invalid length.
[   70.399670][ T6581] lo: entered allmulticast mode
[   70.401961][ T6581] tunl0: entered allmulticast mode
[   70.404199][ T6581] gre0: entered allmulticast mode
[   70.406470][ T6581] gretap0: entered allmulticast mode
[   70.419248][ T6581] erspan0: entered allmulticast mode
[   70.421641][ T6581] ip_vti0: entered allmulticast mode
[   70.424049][ T6581] ip6_vti0: entered allmulticast mode
[   70.426357][ T6581] sit0: entered allmulticast mode
[   70.429486][ T6581] ip6tnl0: entered allmulticast mode
[   70.431850][ T6581] ip6gre0: entered allmulticast mode
[   70.434114][ T6581] syz_tun: entered allmulticast mode
[   70.436424][ T6581] ip6gretap0: entered allmulticast mode
[   70.439585][ T6581] bridge0: entered allmulticast mode
[   70.441787][ T6581] vcan0: entered allmulticast mode
[   70.443964][ T6581] bond0: entered allmulticast mode
[   70.446013][ T6581] bond_slave_0: entered allmulticast mode
[   70.450957][ T6581] bond_slave_1: entered allmulticast mode
[   70.454499][ T6581] team0: entered allmulticast mode
[   70.456759][ T6581] team_slave_0: entered allmulticast mode
[   70.460241][ T6581] team_slave_1: entered allmulticast mode
[   70.463333][ T6581] dummy0: entered allmulticast mode
[   70.465069][ T6581] nlmon0: entered allmulticast mode
[   70.466911][ T6581] caif0: entered allmulticast mode
[   70.468994][ T6581] batadv0: entered allmulticast mode
[   70.470907][ T6581] vxcan0: entered allmulticast mode
[   70.472672][ T6581] vxcan1: entered allmulticast mode
[   70.474531][ T6581] veth0: entered allmulticast mode
[   70.476339][ T6581] veth1: entered allmulticast mode
[   70.479459][ T6581] wg0: entered allmulticast mode
[   70.481250][ T6581] wg1: entered allmulticast mode
[   70.482889][ T6581] wg2: entered allmulticast mode
[   70.484722][ T6581] veth0_to_bridge: entered allmulticast mode
[   70.487071][ T6581] veth1_to_bridge: entered allmulticast mode
[   70.490813][ T6581] veth0_to_bond: entered allmulticast mode
[   70.493497][ T6581] veth1_to_bond: entered allmulticast mode
[   70.496378][ T6581] veth0_to_team: entered allmulticast mode
[   70.499937][ T6581] veth1_to_team: entered allmulticast mode
[   70.502731][ T6581] veth0_to_batadv: entered allmulticast mode
[   70.505413][ T6581] batadv_slave_0: entered allmulticast mode
[   70.508748][ T6581] veth1_to_batadv: entered allmulticast mode
[   70.511396][ T6581] batadv_slave_1: entered allmulticast mode
[   70.514026][ T6581] xfrm0: entered allmulticast mode
[   70.516253][ T6581] veth0_to_hsr: entered allmulticast mode
[   70.519458][ T6581] hsr_slave_0: entered allmulticast mode
[   70.521997][ T6581] veth1_to_hsr: entered allmulticast mode
[   70.524618][ T6581] hsr_slave_1: entered allmulticast mode
[   70.527145][ T6581] hsr0: entered allmulticast mode
[   70.531945][ T6581] veth1_virt_wifi: entered allmulticast mode
[   70.535188][ T6581] veth0_virt_wifi: entered allmulticast mode
[   70.539261][ T6581] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[   70.544960][ T6581] veth1_vlan: entered allmulticast mode
[   70.547501][ T6581] @: entered allmulticast mode
[   70.550236][ T6581] vlan0: entered allmulticast mode
[   70.552582][ T6581] vlan1: entered allmulticast mode
[   70.555026][ T6581] macvlan0: entered allmulticast mode
[   70.557415][ T6581] macvlan1: entered allmulticast mode
[   70.561434][ T6581] ipvlan0: entered allmulticast mode
[   70.563847][ T6581] ipvlan1: entered allmulticast mode
[   70.566432][ T6581] veth1_macvtap: entered allmulticast mode
[   70.569300][ T6581] veth0_macvtap: entered allmulticast mode
[   70.571993][ T6581] macvtap0: entered allmulticast mode
[   70.582113][ T6581] macsec0: entered allmulticast mode
[   70.584522][ T6581] geneve0: entered allmulticast mode
[   70.586862][ T6581] geneve1: entered allmulticast mode
[   70.589908][ T6581] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   70.594103][ T6581] netdevsim netdevsim0 netdevsim1: entered allmulticast mode
[   70.597882][ T6581] netdevsim netdevsim0 netdevsim2: entered allmulticast mode
[   70.603045][ T6581] netdevsim netdevsim0 netdevsim3: entered allmulticast mode
[   70.606319][ T6581] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[   70.609637][ T6581] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[   70.612757][ T6581] bond1: entered allmulticast mode
[   70.614998][ T6581] bond2: entered allmulticast mode
[   70.617191][ T6581] gretap1: entered allmulticast mode
[   70.620158][ T6581] gretap1: left promiscuous mode
[   70.622267][ T6581] geneve2: entered allmulticast mode
[   70.962433][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.971345][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.788563][ T6609] Bluetooth: MGMT ver 1.23
[   72.095723][ T6629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   73.046940][ T6662] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   73.079633][ T6668] lo speed is unknown, defaulting to 1000
[   73.082296][ T6668] lo speed is unknown, defaulting to 1000
[   73.087346][ T6668] lo speed is unknown, defaulting to 1000
[   73.097749][ T6668] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   73.113134][ T6668] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   73.145711][ T6668] lo speed is unknown, defaulting to 1000
[   73.152851][ T6668] lo speed is unknown, defaulting to 1000
[   73.159582][ T6668] lo speed is unknown, defaulting to 1000
[   73.200651][ T6676] xt_hashlimit: size too large, truncated to 1048576
[   73.231696][ T6678] nbd: socks must be embedded in a SOCK_ITEM attr
[   74.455735][ T6749] xt_hashlimit: size too large, truncated to 1048576
[   74.539251][ T6759] 8021q: adding VLAN 0 to HW filter on device bond1
[   74.715793][ T6768] __nla_validate_parse: 86 callbacks suppressed
[   74.715809][ T6768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.328'.
[   74.730060][ T6770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.329'.
[   74.794032][ T6775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   74.903442][ T6777] bond2: (slave veth3): Enslaving as an active interface with a down link
[   74.920806][ T6777] bond2: (slave veth5): Enslaving as an active interface with a down link
[   75.001785][ T6783] lo speed is unknown, defaulting to 1000
[   75.272867][ T6796] xt_hashlimit: size too large, truncated to 1048576
[   75.390969][ T6803] netlink: 24 bytes leftover after parsing attributes in process `syz.0.339'.
[   75.444671][ T6801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.340'.
[   75.517874][ T6814] netlink: 44 bytes leftover after parsing attributes in process `syz.1.342'.
[   75.526325][ T6814] netlink: 24 bytes leftover after parsing attributes in process `syz.1.342'.
[   75.549350][ T6818] netlink: 36 bytes leftover after parsing attributes in process `syz.0.344'.
[   75.653032][ T6823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.346'.
[   75.658425][ T6823] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   75.661937][ T6823] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   75.770002][ T6832] validate_nla: 70 callbacks suppressed
[   75.770016][ T6832] netlink: 'syz.2.349': attribute type 2 has an invalid length.
[   75.781405][ T6832] netlink: 'syz.2.349': attribute type 10 has an invalid length.
[   75.784696][ T6832] netlink: 40 bytes leftover after parsing attributes in process `syz.2.349'.
[   75.788945][ T6832] batadv0: entered promiscuous mode
[   75.791204][ T6832] batadv0: entered allmulticast mode
[   75.794392][ T6832] bond0: (slave batadv0): Releasing backup interface
[   75.798381][ T6832] bridge0: port 3(batadv0) entered blocking state
[   75.801570][ T6832] bridge0: port 3(batadv0) entered disabled state
[   75.923618][ T6840] xt_hashlimit: size too large, truncated to 1048576
[   75.939437][ T5827] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   75.942980][ T5827] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   76.116613][ T6849] netlink: 676 bytes leftover after parsing attributes in process `syz.2.355'.
[   76.422645][ T6865] bond3: entered promiscuous mode
[   76.424302][ T6865] bond3: entered allmulticast mode
[   76.426772][ T6865] 8021q: adding VLAN 0 to HW filter on device bond3
[   76.460881][ T6871] xt_socket: unknown flags 0xd0
[   76.465227][ T6871] xt_socket: unknown flags 0xd0
[   76.471038][ T6871] xt_socket: unknown flags 0xd0
[   76.474169][ T6871] xt_socket: unknown flags 0xd0
[   76.477055][ T6871] xt_socket: unknown flags 0xd0
[   76.482699][ T6871] xt_socket: unknown flags 0xd0
[   76.503653][ T6871] xt_socket: unknown flags 0xd0
[   76.616560][ T6885] netlink: 'syz.0.369': attribute type 1 has an invalid length.
[   76.644578][ T6890] netlink: 'syz.1.368': attribute type 12 has an invalid length.
[   76.659612][ T6885] vlan2: entered allmulticast mode
[   76.661842][ T6885] bond3: entered allmulticast mode
[   76.818181][ T6901] xt_ecn: cannot match TCP bits for non-tcp packets
[   76.864121][ T6907] netlink: 'syz.0.375': attribute type 18 has an invalid length.
[   77.391732][ T6956] tipc: Started in network mode
[   77.393858][ T6956] tipc: Node identity eee1c98821ea, cluster identity 4711
[   77.396617][ T6956] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.419034][ T6956] syzkaller0: entered promiscuous mode
[   77.421624][ T6956] syzkaller0: entered allmulticast mode
[   77.432064][ T6955] tipc: Resetting bearer <eth:syzkaller0>
[   77.442217][ T6955] tipc: Disabling bearer <eth:syzkaller0>
[   77.745254][ T6983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   77.809491][ T6986] lo speed is unknown, defaulting to 1000
[   77.812526][ T6976] lo speed is unknown, defaulting to 1000
[   77.879559][ T6992] tipc: Started in network mode
[   77.881585][ T6992] tipc: Node identity ba5a9fea25a1, cluster identity 4711
[   77.884754][ T6992] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   77.933171][ T6992] syzkaller0: entered promiscuous mode
[   77.935408][ T6992] syzkaller0: entered allmulticast mode
[   78.016877][ T6993] tipc: Resetting bearer <eth:syzkaller0>
[   78.127044][ T6991] tipc: Resetting bearer <eth:syzkaller0>
[   78.136039][ T6991] tipc: Disabling bearer <eth:syzkaller0>
[   78.357667][ T7008] netlink: 'syz.1.414': attribute type 4 has an invalid length.
[   78.563756][   T10] IPVS: starting estimator thread 0...
[   78.571713][ T7017] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[   78.658200][ T7019] IPVS: using max 57 ests per chain, 136800 per kthread
[   78.855202][ T7028] xt_hashlimit: size too large, truncated to 1048576
[   79.288646][ T7053] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[   79.405783][ T7058] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   79.431472][ T7058] bond4: entered promiscuous mode
[   79.433222][ T7058] bond4: entered allmulticast mode
[   79.435372][ T7058] 8021q: adding VLAN 0 to HW filter on device bond4
[   79.441498][ T7066] sit1: entered promiscuous mode
[   79.601614][ T7079] unsupported nlmsg_type 40
[   79.603354][ T7063] lo speed is unknown, defaulting to 1000
[   79.684625][ T7084] Bluetooth: hci1: Opcode 0x080f failed: -4
[   79.825741][ T7091] __nla_validate_parse: 16 callbacks suppressed
[   79.825756][ T7091] netlink: 44 bytes leftover after parsing attributes in process `syz.0.445'.
[   79.836695][ T7091] netlink: 24 bytes leftover after parsing attributes in process `syz.0.445'.
[   79.909611][ T7095] xt_CT: No such helper "syz1"
[   80.046680][ T7122] netlink: 'syz.1.454': attribute type 10 has an invalid length.
[   80.050006][ T7122] openvswitch: netlink: Flow key attr not present in new flow.
[   80.089796][ T7122] sctp: [Deprecated]: syz.1.454 (pid 7122) Use of int in max_burst socket option deprecated.
[   80.089796][ T7122] Use struct sctp_assoc_value instead
[   80.100654][ T7122] pim6reg: entered allmulticast mode
[   80.103551][ T7122] pim6reg: left allmulticast mode
[   80.171725][ T7130] netlink: 44 bytes leftover after parsing attributes in process `syz.0.456'.
[   80.195628][ T7130] netlink: 24 bytes leftover after parsing attributes in process `syz.0.456'.
[   80.414767][ T7162] netlink: 'syz.2.470': attribute type 4 has an invalid length.
[   80.424599][ T7162] nbd: must specify a size in bytes for the device
[   80.556058][ T7169] lo speed is unknown, defaulting to 1000
[   81.192797][ T7175] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614)
[   81.553811][ T7183] syzkaller0: entered promiscuous mode
[   81.558245][ T7183] syzkaller0: entered allmulticast mode
[   81.761615][ T7187] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[   81.774981][ T5814] Bluetooth: hci1: command 0x080f tx timeout
[   81.779377][ T7187] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[   81.828712][ T7189] openvswitch: netlink: Missing key (keys=40, expected=80)
[   82.789009][ T7168] Set syz1 is full, maxelem 65536 reached
[   82.975596][ T7231] netlink: 'syz.2.492': attribute type 2 has an invalid length.
[   83.076147][ T7235] netlink: 24 bytes leftover after parsing attributes in process `syz.2.494'.
[   83.082123][ T7235] netlink: 76 bytes leftover after parsing attributes in process `syz.2.494'.
[   83.222299][ T7242] netlink: 'syz.2.496': attribute type 2 has an invalid length.
[   83.300762][ T7246] SET target dimension over the limit!
[   83.473760][ T7262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   83.477023][ T7260] netlink: 'syz.0.505': attribute type 1 has an invalid length.
[   83.480031][ T7260] netlink: 'syz.0.505': attribute type 1 has an invalid length.
[   83.483453][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.505'.
[   83.563228][ T7266] netlink: 'syz.0.508': attribute type 1 has an invalid length.
[   83.583075][ T7266] netlink: 44 bytes leftover after parsing attributes in process `syz.0.508'.
[   83.620690][ T7269] netlink: 268 bytes leftover after parsing attributes in process `syz.0.509'.
[   83.976922][ T7288] netlink: 44 bytes leftover after parsing attributes in process `syz.0.517'.
[   84.059435][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.066546][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.215323][ T7314] netlink: 'syz.0.527': attribute type 5 has an invalid length.
[   84.460814][ T7330] bond0: entered promiscuous mode
[   84.463267][ T7330] bond_slave_0: entered promiscuous mode
[   84.465987][ T7330] bond_slave_1: entered promiscuous mode
[   84.470521][ T7330] bond0: left promiscuous mode
[   84.472776][ T7330] bond_slave_0: left promiscuous mode
[   84.475480][ T7330] bond_slave_1: left promiscuous mode
[   84.494233][ T7332] bond0: entered promiscuous mode
[   84.496659][ T7332] bond_slave_0: entered promiscuous mode
[   84.499669][ T7332] bond_slave_1: entered promiscuous mode
[   84.503774][ T7332] bond0: left promiscuous mode
[   84.506045][ T7332] bond_slave_0: left promiscuous mode
[   84.510547][ T7332] bond_slave_1: left promiscuous mode
[   84.636924][ T7342] netlink: 'syz.2.538': attribute type 1 has an invalid length.
[   84.653647][ T7342] 8021q: adding VLAN 0 to HW filter on device bond5
[   84.669724][ T7342] bond5: (slave veth7): Enslaving as an active interface with a down link
[   84.686094][ T7342] 8021q: adding VLAN 0 to HW filter on device batadv1
[   84.688991][ T7342] bond5: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[   85.029203][ T7363] macsec1: entered promiscuous mode
[   85.031008][ T7363] team0: entered promiscuous mode
[   85.032977][ T7363] team_slave_0: entered promiscuous mode
[   85.035243][ T7363] team_slave_1: entered promiscuous mode
[   85.291309][ T7379] __nla_validate_parse: 4 callbacks suppressed
[   85.291325][ T7379] netlink: 24 bytes leftover after parsing attributes in process `syz.2.552'.
[   85.345046][ T7381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.422741][ T7384] xt_hashlimit: size too large, truncated to 1048576
[   85.499379][ T7390] netlink: 268 bytes leftover after parsing attributes in process `syz.0.556'.
[   85.550212][ T7394] netlink: 'syz.0.558': attribute type 1 has an invalid length.
[   85.567603][ T7394] 8021q: adding VLAN 0 to HW filter on device bond6
[   85.919051][ T7406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.563'.
[   85.920772][ T7404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.561'.
[   85.926468][ T7406] netlink: 16 bytes leftover after parsing attributes in process `syz.2.563'.
[   85.926498][ T7406] netlink: 120 bytes leftover after parsing attributes in process `syz.2.563'.
[   85.959228][ T7405] netlink: 24 bytes leftover after parsing attributes in process `syz.1.561'.
[   85.959240][ T7404] netlink: 24 bytes leftover after parsing attributes in process `syz.1.561'.
[   86.152878][ T7420] netlink: 20 bytes leftover after parsing attributes in process `syz.0.568'.
[   86.220024][ T7424] netlink: 44 bytes leftover after parsing attributes in process `syz.2.570'.
[   86.224146][ T7424] pim6reg1: entered promiscuous mode
[   86.225988][ T7424] pim6reg1: entered allmulticast mode
[   86.236773][ T7424] netlink: 'syz.2.570': attribute type 8 has an invalid length.
[   86.342684][ T7433] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000035: 0000 [#1] SMP KASAN PTI
[   86.347747][ T7433] KASAN: null-ptr-deref in range [0x00000000000001a8-0x00000000000001af]
[   86.352143][ T7433] CPU: 1 UID: 0 PID: 7433 Comm: syz.1.574 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[   86.357245][ T7433] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   86.361511][ T7433] RIP: 0010:htb_qlen_notify+0x31/0xc0
[   86.363805][ T7433] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 fd c5 46 f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 1a ca 46 f8 85
[   86.371847][ T7433] RSP: 0018:ffffc9000293efb0 EFLAGS: 00010206
[   86.374450][ T7433] RAX: ffffffff89798873 RBX: 00000000000001a8 RCX: ffff88803be20000
[   86.377892][ T7433] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88801bbfa000
[   86.381278][ T7433] RBP: dffffc0000000000 R08: ffff88803be20000 R09: 0000000000000002
[   86.384635][ T7433] R10: 00000000ffffffff R11: ffffffff89798850 R12: dffffc0000000000
[   86.387918][ T7433] R13: 0000000000000035 R14: 0000000000000000 R15: ffff88801bbfa000
[   86.391238][ T7433] FS:  00007fc302a296c0(0000) GS:ffff8881a3c50000(0000) knlGS:0000000000000000
[   86.394994][ T7433] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   86.397866][ T7433] CR2: 00007ffcd4c9bbd8 CR3: 000000003b4be000 CR4: 00000000000006f0
[   86.401262][ T7433] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   86.404531][ T7433] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   86.407754][ T7433] Call Trace:
[   86.409183][ T7433]  <TASK>
[   86.410449][ T7433]  qdisc_tree_reduce_backlog+0x29c/0x480
[   86.412900][ T7433]  ? qdisc_tree_reduce_backlog+0x3c/0x480
[   86.415246][ T7433]  fq_change+0x1519/0x1f50
[   86.417135][ T7433]  ? __pfx_fq_change+0x10/0x10
[   86.419236][ T7433]  ? __hrtimer_setup+0x187/0x210
[   86.421365][ T7433]  fq_init+0x699/0x960
[   86.423084][ T7433]  ? __pfx_fq_init+0x10/0x10
[   86.425061][ T7433]  ? lockdep_rtnl_is_held+0x26/0x40
[   86.427193][ T7433]  ? qdisc_lookup+0x36d/0x6d0
[   86.429154][ T7433]  ? __pfx_fq_init+0x10/0x10
[   86.431114][ T7433]  qdisc_create+0x7ac/0xea0
[   86.433056][ T7433]  tc_modify_qdisc+0x1426/0x2010
[   86.435105][ T7433]  ? __pfx_tc_modify_qdisc+0x10/0x10
[   86.437282][ T7433]  ? __pfx_tc_modify_qdisc+0x10/0x10
[   86.439446][ T7433]  rtnetlink_rcv_msg+0x77c/0xb70
[   86.441466][ T7433]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[   86.443612][ T7433]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   86.445890][ T7433]  ? ref_tracker_free+0x63a/0x7d0
[   86.447995][ T7433]  ? __copy_skb_header+0xa7/0x550
[   86.450144][ T7433]  ? __pfx_ref_tracker_free+0x10/0x10
[   86.452366][ T7433]  netlink_rcv_skb+0x208/0x470
[   86.454417][ T7433]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   86.456801][ T7433]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   86.459042][ T7433]  ? netlink_deliver_tap+0x2e/0x1b0
[   86.461252][ T7433]  ? netlink_deliver_tap+0x2e/0x1b0
[   86.463510][ T7433]  netlink_unicast+0x75b/0x8d0
[   86.465587][ T7433]  netlink_sendmsg+0x805/0xb30
[   86.467681][ T7433]  ? __pfx_netlink_sendmsg+0x10/0x10
[   86.469972][ T7433]  ? aa_sock_msg_perm+0x94/0x160
[   86.472117][ T7433]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   86.474408][ T7433]  ? __pfx_netlink_sendmsg+0x10/0x10
[   86.476563][ T7433]  __sock_sendmsg+0x21c/0x270
[   86.478617][ T7433]  ____sys_sendmsg+0x505/0x830
[   86.480657][ T7433]  ? __pfx_____sys_sendmsg+0x10/0x10
[   86.482956][ T7433]  ? import_iovec+0x74/0xa0
[   86.484925][ T7433]  ___sys_sendmsg+0x21f/0x2a0
[   86.486957][ T7433]  ? __pfx____sys_sendmsg+0x10/0x10
[   86.489210][ T7433]  ? __fget_files+0x2a/0x420
[   86.491255][ T7433]  ? __fget_files+0x3a0/0x420
[   86.493297][ T7433]  __x64_sys_sendmsg+0x19b/0x260
[   86.495607][ T7433]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   86.498009][ T7433]  ? rcu_is_watching+0x15/0xb0
[   86.500193][ T7433]  ? do_syscall_64+0xbe/0x3b0
[   86.502260][ T7433]  do_syscall_64+0xfa/0x3b0
[   86.504217][ T7433]  ? lockdep_hardirqs_on+0x9c/0x150
[   86.506468][ T7433]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   86.509086][ T7433]  ? exc_page_fault+0x9f/0xf0
[   86.511130][ T7433]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   86.513621][ T7433] RIP: 0033:0x7fc301b8e929
[   86.515472][ T7433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   86.523406][ T7433] RSP: 002b:00007fc302a29038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   86.526814][ T7433] RAX: ffffffffffffffda RBX: 00007fc301db6080 RCX: 00007fc301b8e929
[   86.530163][ T7433] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000004
[   86.533569][ T7433] RBP: 00007fc301c10b39 R08: 0000000000000000 R09: 0000000000000000
[   86.536843][ T7433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   86.540223][ T7433] R13: 0000000000000000 R14: 00007fc301db6080 R15: 00007fffae237338
[   86.543508][ T7433]  </TASK>
[   86.544841][ T7433] Modules linked in:
[   86.546850][ T7433] ---[ end trace 0000000000000000 ]---
[   86.549252][ T7433] RIP: 0010:htb_qlen_notify+0x31/0xc0
[   86.551562][ T7433] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 fd c5 46 f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 1a ca 46 f8 85
[   86.559660][ T7433] RSP: 0018:ffffc9000293efb0 EFLAGS: 00010206
[   86.562186][ T7433] RAX: ffffffff89798873 RBX: 00000000000001a8 RCX: ffff88803be20000
[   86.565535][ T7433] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88801bbfa000
[   86.568949][ T7433] RBP: dffffc0000000000 R08: ffff88803be20000 R09: 0000000000000002
[   86.572286][ T7433] R10: 00000000ffffffff R11: ffffffff89798850 R12: dffffc0000000000
[   86.575588][ T7433] R13: 0000000000000035 R14: 0000000000000000 R15: ffff88801bbfa000
[   86.579046][ T7433] FS:  00007fc302a296c0(0000) GS:ffff8881a3c50000(0000) knlGS:0000000000000000
[   86.582778][ T7433] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   86.585461][ T7433] CR2: 00007ffcd4c9bbd8 CR3: 000000003b4be000 CR4: 00000000000006f0
[   86.588812][ T7433] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   86.592123][ T7433] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   86.595470][ T7433] Kernel panic - not syncing: Fatal exception in interrupt
[   86.599297][ T7433] Kernel Offset: disabled
[   86.601105][ T7433] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:58:00  Registers:
info registers vcpu 0

CPU#0
RAX=1ffff110212f5701 RBX=dffffc0000000001 RCX=ffffffff819da768 RDX=0000000000000000
RSI=0000000000000008 RDI=ffffffff8f50ff60 RBP=1ffffffff1ea1fec RSP=ffffc9000299fad0
R8 =ffffffff8f50ff67 R9 =1ffffffff1ea1fec R10=dffffc0000000000 R11=fffffbfff1ea1fec
R12=ffffffff8f50ff60 R13=ffffffff8f50ffb0 R14=fffffbfff1ea1fed R15=1ffffffff1ea1fec
RIP=ffffffff8223ba1d RFL=00000a03 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555b32a500 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000240 CR3=000000011bf20000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fc301d84478 00007fc301d84450 XMM03=00007fc301d84488 00007fc301d84480
XMM04=00007fc3028ed100 00007fc301d84440 XMM05=00007fc301d84458 00007fc301d844a0
XMM06=00007fc301d84498 00007fc301d84490 XMM07=00007fc301d84488 00007fc301d84480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fc301c11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000293e7f0
R8 =ffff888021ae0237 R9 =1ffff1100435c046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac4900 R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc302a296c0 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffcd4c9bbd8 CR3=000000003b4be000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fc301d84478 00007fc301d84450 XMM03=00007fc301d84488 00007fc301d84480
XMM04=00007fc3028ed100 00007fc301d84440 XMM05=00007fc301d84458 00007fc301d844a0
XMM06=00007fc301d84498 00007fc301d84490 XMM07=00007fc301d84488 00007fc301d84480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fc301c11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
