last executing test programs:

7.641558722s ago: executing program 0 (id=1021):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x90, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0)
getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newtfilter={0x3c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x9, 0x81}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
socket$rxrpc(0x21, 0x2, 0xa)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

7.542534267s ago: executing program 0 (id=1022):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x8}}, @TCA_CT_ACTION={0x6, 0x3, 0x14}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0)
sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x20}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@allocspi={0xf8, 0x16, 0x1, 0x4, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x0, 0xfb, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x4d3, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x3}, {0x9}, {0x0, 0x0, 0x2}, 0x70bd26, 0x10000002, 0x2}, 0x4, 0x5}}, 0xf8}, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c0000004a00012227bd7000fcdbdf1f0a"], 0x1c}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x8, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
socket(0x23, 0x2, 0x53f0800)

7.411699879s ago: executing program 0 (id=1024):
r0 = socket$inet6(0xa, 0x80002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="b9ff03076864266ed78cb89e14f0", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r2, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xb}, 0xa)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x5, 0x20000000, 0x4)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'vxcan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaabb08004500002c00000000002f9078ac1e0001e000000100006558fd52907804000000b1efee2ed5264a120000000000d1e64d50e7805f2d1414c53b4e"], 0x3e)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="2400000018000109000000000010000002180000ff00000600000000080001"], 0x24}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000006c0)="d7fb1a33b7f392e65c0ff358dc4f", 0x0, 0x9, 0x60000000, 0x0, 0xfffffffffffffcf4, 0x0, &(0x7f00000001c0)="a4", 0x4, 0x0, 0x4}, 0x50)
close(r2)
r7 = socket(0x1d, 0x3, 0x3)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000340), &(0x7f00000057c0)=0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r8, &(0x7f0000847fff)='X', 0x20000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000f43cc1f20071116f000000008510000002000000850000000500000095000000000000009500a50500"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
r9 = socket$netlink(0x10, 0x3, 0x4)
writev(r9, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYRES16=r0], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)

6.452107208s ago: executing program 0 (id=1041):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x60}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r2, 0x11, 0x4, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x91}, {0x6, 0x16, 0x2}, {0x5}}]}, 0x54}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
r4 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000140))
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0xfffff6c9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffff61}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r3, 0x2}, 0x10)
socket$inet6(0xa, 0x400000000001, 0x100)

6.379252092s ago: executing program 0 (id=1043):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {0xe}, {0x8, 0x10}}, [@TCA_RATE={0x4a, 0x5, {0x5a, 0x9}}]}, 0x33}}, 0x4000)
r2 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000140)={0x1000, 0x7, 0x2a, 0x18000000000000, 0x4, 0x9c})
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYRES32], &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00')
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYRES64=r5], 0x30}}, 0x8c0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000005100000000000000000a200000000900010073797a30000000001400000010"], 0x48}}, 0x20050800)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="00000000000000000c001a8008000480"], 0x2c}}, 0x0)
r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={<r11=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="790f9c492a2e0fa03dc941e9add8331e8f864f3df4cbea07ac9f9bf1fea60ac8383db0467ad325e7fd80a0b1ee0cbc61e816f7e02eb076fee139d19fac0e51ad13e82ff689bad368b7c0ceea17cbde3bb499bd45ed28a37991c24c920eb1eccaddf63588ba2e465a25b632cf9fabecf1e930797d14ecff9267c2c135a1476a05f4a498789e6720381ca0070c531daeb603f91de6015d0226df274b84b364bb75bc321059f8b12bc00990d15d5ef4d6cd7caabaa1e4aa6e56f50ee60da4e4817ad506e4a79beca98b4e9e936d630b80385943107f8c21a4dc81d8", @ANYRES16=r10, @ANYBLOB="01000000000000000000010000000c000597ff0000a7a789a6d1762ac1893775b53aeab400000000000c0002000000000000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES16=r4, @ANYBLOB="32000100", @ANYRES32=r11], 0x90}, 0x1, 0x0, 0x0, 0x4000010}, 0x80)
sendmmsg(r2, &(0x7f0000001180)=[{{&(0x7f0000000440)=@pptp={0x18, 0x2, {0x2, @local}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000740)="87f3bfafa002c0719c65c79e6736f679b5a2c79244d20e94f722fd3e4c9d249c1bef1c476276e3c16fc96b176c9a001c31f07528281a4c84969915bc28701b48aa4b17ebd1f09a5268bb7465a75712754693909e5d8cd3cf6b909fe84ecd9340b89325e1949467133159918e5b57db5802e6a7d3b8cc1b69a8b2f846e543a0e4d419799fe4e5395ebcc8aed938a0", 0x8e}, {&(0x7f0000000240)="624adc8acd07edbc8ca3c5d18786297bb273f42b3b91231b9a8e822579fb8840970fcd9eed5d397598a638", 0x2b}, {&(0x7f0000000800)="59c5daa52159a6fbb65392aea69462b2a314732878313d29e51e2c9948a70cc412579dd49299ca50d71e5b8959363686b9a98a42bcecdf79ab44e0ddb40941f3fa4233002a538e67047debfefe8e01b3d1b1b567706e0ac76a55691b0df127d751674190e8674d8c1eab7cb5735a516b08bb53860e42967914c97b7e8a3b76af82bcbb5b6ec5eda7c5a13631a3f5087ee0de85e63582db88eda22484eff9ea1bab7304f984b8d97708f1c9fb2a04e8ceb85909166b8a502a7d54", 0xba}], 0x3, &(0x7f00000008c0)=[{0xf0, 0x1, 0x3, "6a91191f359196e5666802a41b14eb58f2814d6a058878d1fa3b19790bc88300b3c2df84cd78f4a96dcc0ef72abe57ceb163f0d7bb33431718760546a662d4c3ae501b72e4048151ef9a3d3ff21e51ecb7038d84c3a8bb53de69c7da6a1b42da10a8ae638375896b3852432c92f43c607953418eee063e53770e8f234d48ef591dd7ea34e1c6f7b26a3c7500d42a6ec232fb4a8873994df9f2909baa04ea15a676f7a2822d910bc6169c3f47b2918ee8e7d78f31bacc2484439f8076012d8c29792558953f44503d8b8b166f5cd6687c25a00cc6fca95dcc9705d4"}, {0x50, 0x32e, 0x9, "963d56c76e6e2aee0748c72885eaa7765079e26d119a46bf32a0f949834f838aa10a099e5f002b2fdb5d02b22d11b4198fed0485aa5a3dc2cfac"}], 0x140}}, {{&(0x7f0000000580)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000a00)="256034d8bf52bee2e2bc8165168a1f6f1a5dad1a5f2fef2c560214b9ca472135c4b4b6ded6048b4a73cc3b5dfb48d7230acc12b7f5e84ac8cc35522955fc1094b304b720be30cd8394edd011137f39dbb7a59ff0eb354c92936f916c429bb20b2f161b222dd16979858df82e08fcff9d0703c32235273f8c95233bcbd59dcfd96e3914d94c5bdec00632188af103ab3eed29c232ee0d05d5bd05364a49854437cdbf169ab064d081a38b0ac58aab109e48ba3b0fa39100ada18f6d77b413fd41cb12de23fe8be3e51aebe062619a3331413d2e84930f5b82db15c44a6d17a8cb400adef866f7b16301", 0xe9}, {&(0x7f0000000b00)="d16580920c969a4f12c88d734d7fc1b1c896fb35ba44c82dd042cb5fc1e84ea970041441432f76a0630f7d3c37fdf0e0ae7da7b184933f9d6c3a9981467638a550afae8a3868cfcaca2ef60d98ded1c4d6cd42133d83d7db3bf59c0ca75002ca1efe6adca3aa2f75778de130736ca903542a98b0e1fe4b01c4aee49dae055495ed938b4c486f0839731a886d060a51a1e95cdb6965e26edf651038e73bf8a7b15440d6221d9acc0916add4320195201fc9457ab9ce10760a22472addc0f2e7fc41fbef80adcd9341087296cccb2bffa41284", 0xd2}, {&(0x7f0000000c00)="f3bf25244a07f74f24bcfe827a29998112c56fb1e773ba754ba5ad86e6ddd2b1b73f5c11bd8981db7154099baaa234e2af67b561e31d516fc8", 0x39}], 0x3}}, {{&(0x7f0000000c80)=@in={0x2, 0x4e23, @rand_addr=0x64010102}, 0x80, &(0x7f0000000d40)=[{&(0x7f00000014c0)="068497b13a89aff09771998afee9b980f082d1211782f73091daf701f7340e3449a60a9a9aad755295a702ddbf3f52f8bccf50d9514a5aad7da4601483e2e69c402f92c5bb5f26bd1f10a7e88f3cd883eec8366fc3edf5d1bf8d739ab20d8f18ab31b4da3ba0c2bf1edc0fc94f01ff4edf3efe65fc3941684deac180e635779963c8afd8041d8d22fcae64d48926d4ba8a39e3306920d1a6349e0221315e6d0162406fdabd4c515e2998f3061f97c8efc11272eb1c59c45a07a11221a5a4fd15f44d63d69c1b8bef919c515498d295ec12cb90a77aed8dd697b03225cbfc73ea2d691792478611bb9d8edfe270f3f84917193264c0dd798dbeb1413c4640a2b96fb18803b742332ef6c0d5fac6de6118d992677dcb256a115231a4cacb3c173e1300dd54fd2c47419da882c3410113079b41586d9cd10a4823fb2895e956d9a10a855dc326d00c0c7614a095cec7ab146c82fbf186a4aecf2e2324e82bbfb378e7fe4572a6c1ddd6803d35251e464c2c84e5ca3621b1d8670fce8b9a01b7d0ca180d340bfeda0b063e1a2cd5bd6a0c52d55964bc8055205740fb18417834564932171a14a4d5c9d4fa5e37b2032faa6fc610250c88c3a1e64cbd23404f8ea00163db9be0f127aa6544647c7b878713dc7a05854b1295c33d44d2727371329e9e02bfa0c2a80f0eac9fdc2aebf3db737e0c7594f453396e0efd987e608f3d87395289b0fe30ecdc1ea0434fe2753900c7debab97f53dbfe32b070ea6e7cd9a3d1c9c00622f217cb1798380f777c827b744fd0895f2f6e8150dc484bb7a5f168c8687e5fa9dc64051079c1f8aefb9422fa29609b1088de12b9e42f0f6c18c3a2b2990434367b36944640c8ae22d1e440a4fab9205cf59ef16fb0773f2c5a2d7a96d38f8064e397036d0f11ab4ad953b08d9a69e68656588889ab9e2eb0b8a4064d82671e201ca6123f68e7e3a87e50b845116987de019aa789626ef9e9c0924855a17aeb60ac4a83c0c35c8772414fdd7f3f6141981a338ff84f05e462b1fe2077a52ade89689fb8bfeba9a7fc9a45ed29d8e6ef09e27ab5424ba2fe5c4a61ddd5bf7b4f5241a49898a6f09f9df7572d494cc575cc58f446e4bfb265f487724ff5154191569bdecb90cf02c5824111c5b59c5968800f80ed63c7ca5dda74f06da8dd6663d0e6412a1edfbb2abbab9d3b7fe29be3208756f2c4c1bafe3eef9e4e92acb1635252bc0c097ab92ad54b7adb7c440082ff5ce547e677e592795fe92354a4d80d1d883ddf8e18333b802e6e3416d82bfc1c36eedf276938a695a1b2f5ba13f72c0d576265fe9d4b34fd7763b872d07e58a5c5ca7541628cd00f6732c9a04356dc2e9fdf7027c6979417300cbfcd3b6cb10c1284b2928e4ef7882a1219f68d746d3f722539ce127cdaa1ccbe51f5d00ae65ede88f7f9bb03eb1f31f08f2040f2fb93dfab4eb0a18255018bf5d1a3e6e588d816e28be456c931ee2c98599025e8a666f303598a493b2eec7b9a4fc9fa9a8da3ec5e1c0f62427636b5e0b0c8753d1b108f1d2d8d40f2b651b6e76e7a1d725ab70a544f27b75e1cb9f932d78e099299130c64749207119c7378ef652c4c6631b62e51eebd796528a6aeef4ba43d4b23751627fce01f875d0ffcda5d72252e373d8c0a8ebcd764eae07297369d9537d5d9813bfe59e962e6a22ac4ad1f1aae07b4eb6a1c4a2eadb84dc01a16517704b5d3db5a10b60910afa1f4a8d6c45963b3d1cc904f209e05c3ee45aaa3925cbcd095a416f2c2a43a99d0dcdaa0b45f74fbc398faafe46d412c9346d20bd45def2a0205f1c75fe19fac6970ea35a189c8d1fc2d8634b11f9a6c1593d44a721dd145352399a24e41dd3b723e0a1799f26680c09a83fba9902d9edfeb9c12f4f4d924f642a41d07b8093e117ca20988af6446fe8a455f79303e4e00b393bc2ef56dc49b5ca2edf61857fc1411277c24537e5ff108524934446c0524e6c7e47a6edebccc95f9e1bdc03fe86ab774a4e8fea5cb32f5048ac4ab7d61d1ff69823bd888ff1d7eb6296d780120957ead17193878575d307300c013e7a0d540795659d07e015971f8739704588303c79b975b52f90311b92341889c9c8a0e8a17fc7a9c67803b0fac1f6854d986f15c79c07bbe59d90783843d5bfa4bd03a83d294b3ab8b815226fdf94d30a13ea4f6ff45db53b695f0cd7b332aecb1ae149c398a79f865f670dc9eadfb48b3b19c2253a186decfde58b9d62b319c386666855700a40e5fa5f3e6d3520d256bcf6a9d3d92e3feda38037e399ed90ba42970020bc24a7baaf826a9d9f601fc853fdaf68536a2137e45da7ee78743bf4a4529ac6bb7a10df9e552f462dd9270725980bf3691de15fc81a92ab10844ff36759d4a683c19251ab65b502392cab661cf18b86de3a0ad33400972cedee0cb94bb19c8563c20abd28c63c1a40607d1b05b18c4a6a5a3bf01342faa5fb5edfc2cfe31f21340d5a6756f1a39b5036010f9ab86e8e88921a8d4a40c469d68f6cc3ebaf889931755b294335a4381dd27bde0edfaff30f1af62b3406dbd424827fae8eefebe0c50bcdf088a704ade323d3b9b53a2bc72fde3dcab37c2012bbf4c010ca2f747c5e5fd42af64826eac98d06b36094340250c5f1809233dee95b8bf4e52fe153da811efd329dc3df546987f78b80e995b38ac4b124ca726acde8a169b689bd3ae41f8547459b369732035c820fbbc8333c404aa088eba7fd6f00b6dbf0e51441dd12a85b839f2c34e48b9c14e3e47f13f54f1ec7e6c1840a0b09cc209056282ac749cd90d72cf9cab5fc5f637c8a8cc40457a8f9f0ac495b60bd94a74d7d442dfa82114817cceca288c1c752ce596b6a697fb3f7b71a8651ec479afde72caaaf06b2462aaa8f223c36f0ae0f8ecd438a6a0ac50ce09f163ce4342f00e5eb62e73558ac12e630db16530da4c807decb69a5668a3b6e31943948b66ced9c5aadebab8ed9a4a5de6466e2093132687feff710841a3571cb7e707ab08931b3b708c15d5d9b7eb9a5c493be7e2e9618cf6f514828465a56819a9b82871843027ccaad3e5b1a5b109bd83c45ad9d2ca4d05be264fc7d62353b16d3f9f52d201876142db3369120aad81a15329fe31d98f79ef81afb4285ff03c71fdec21c56578ae4afd029f6c967792c21a97b1984848df5807e317af58534c4d8333a284407df15437f8e68889845db9f7939d49bdcd589378718736110225f87c30d11baca282e11fe3b1205931ccf888b08f3010ad8a8218d30bd196eab165f2a14fd674b3069c8ee2c057235b6db308d44b14a16a777bd519f94ac36393b7101a1ed6787fafdec9da2b0e1926fd52f898ec77c7854c93c644da966eef6a2ce4d6176051e1808792885ef4388a77fa69e4d3c67408366fbd06853c6b2b07198c830fddd24f8bb502653f646d2fd96488ea66ac2084ca891dd0c98e50e9cbbeaf83a7dade6c444c840c4d0a8687d61f1ad86fbd080acaa268e793811c2deb70370ce84c83d7a4b698939e88523c2d32b8966b9a7e73110a82aa4eb2b93d9d3fa0a4ae4c01e41c8e99ff378b090bbdc06eb9fbc380fd0124183ca2ef16440334a902015d570e127565a2f63f7004c6734136f22059f394c23510cf2f8c72726da825739836733036f7b4ad194466865dc4b798879e1c8046e209726062e7f023bee11fbfeb75ac5723f62e7ac6922dbb442d904abc0f355575c419a77fc18b1c167247cae991303cffeaa7843e61122e9cefb70f4d251926273fd92dfe29ed463eabd5e2252a37aac547c8b3a078dd6c4a66d08f5bbe05250b6a08f64786726df0efb93f72cb6284410a6a14ec37303adf4396ce62dd6cb555c5b0a4263e6fddcb226b8af97996df77419f7e1c797727571af549d979ccb9391cf844f06ce6e65a291b9cc24a1de5ef334fffbb77c062997977789907a243de61d65bdeba79fc60c08bfd4be240dd57814fac9d98e6575da733dbecd1fe94241acb562fad75c46062fb5798083e91c4d47c65a61f348c055abebbe116cc37190e64056d91b30a90673cd9058f71b73fc891fce4bfa0e8b75b2adc8d440925c8ab2d407dec8aa9ec16483ced3ef0553826e573d84cb913cca5a35878731448100bbc3d6ff0c605cfecc62bc253c2a809e896fc886bdcf51a8ac0764c9ca50cc4be928c163330ee87683d480e0a9ccf003778221c45d96b06dd6680c5bf5f28c91ca1d90356641411f6a3e8afe264fe3eb3b9e82f9e39d8c19ee8df9330e954e6fc7d0aaa249203ab67f7c799652ecf1e78806673cad06ed1c0d63c208dd33ab5b9c29fe987366fe6415456e5de53264f2b6c5de3b4da93d4d07e94071584a8c5eb036cda88081d6345f4b7b390879627c3a21e925ddf2e5acbfd79caa912c03c128736a3445ed431b3a6c09ffda46637519a6d112a5122c38c2bbcd707b48af4e1b7a840e8f34aebb9b882eba0b96fc8bfeb9e444460cbe0de36a23081002665085672e54bb962393f3ed9cca8aa0bfdbe2400a3f54d8bbc68736448429aa4b27b48f9e4798f9ad63a4aacecf9f4c902f339591e44ee741b17b3f958446012931adef8e3a761f0dd4ea74f12f6fb5e1370a0df3b16840003c806f00ec8098b3d17e0b7111ce4788496810d0acbdaaf9caeb01d828790dd6a7bf652859f8a3a39276fc8ece637c15d8a0049078212154520cdaed619c115b27c0fb6335193a9ecffd0939c5291a6b6405b780e9ef5fcea656920e552b05f37588fce308049c0b32007938a79433a587568c0c4e88f02f48c1242ad63a6f84ea82c40c7414082c70ead78288a27b2e34f89769f17e50c0c438e5440273f50f11f95a453e934de8994151b4bba08c02edb36ceab6e13c5fbe26dfd911ad8bfbcf7fb1fef98e0c41a62c392925700ddf2f84179f4bafad96d44782db8856147f50116d7f0f51ebd753033b645a9eeda8b6453a03748999939788db7449dbb2d9680a61fc3263f0c69d0ad0fcf021b54eccaf4c944d1711274d4146923ed11ff02450ccdaab0d79e6d2e3ac651b3751846a7c4055d226e8b71b1498b0dc6513e9ec40ac60866abdb31e6fad1053a2ed30c5665be999750d15ca6e7ff31d52b53459e20eea8f7f3dbf96770144478555cc72e2028335e4f683934867b5d5be815fb2eb1884d982344bbb62bfbc9e3d38c39a3ff121e1b688fae336c902d021efc8262e3918c24c0abf70faf69dd4844a396e6d64835db805ba22cb2a7782be8628c2c550078be2e4fd882181042efee097363b79a1c93fe1816b4d0d5bde37ac36a1eb51981a944eebb25ecb916accf4c01ae830277aa65e67c60ce77fba675ceb9c1068321386ffea190eb7302fefff46dd45a72c86e313cca8ed151051d8dd7bd602f3d0bde76248ebdcdf8e2b288e8394cf1f9c79f79da91a787580b3f279130f9a01c4abd3402a550a92c336eb62e8c46131cbc04c4bf4bd2c636e78a3b329c13477387a2238de83d5df81b154dafe9c6ac2ab983a68f89a985f39cd555c0d8bd81a5c8be98888fa8fc7361951c459ffb78b90b5fad6965886402158bf9860948593364b2c4548f7ec708e3bfa9d43cdddaf2308120aa11612f94bb8ea87bfb26b406c87f9c337ca9bf3c21bc6641d8f4ec1ae907c122dbeac4c674e8e83db29fa47fdc5d16c626c32cf860e4965d12f395543167b55032497a2de055fdc16b9653d7ecab89ee7b917c1a320366a3aaef90b2f234fe6ae10f8d7c8ddbbdbcec68f3490ba8324b9f8e2163a805fb80d0ffda23f706b8e46806ea86", 0x1000}], 0x1, &(0x7f0000000d80)=[{0x20, 0x115, 0x1, "c55ecd02f91ab3f5839ad8"}, {0x60, 0x84, 0x3ff, "af3366d642fb102e90f9e1963803de27fc90dc8b45f9b59862fda781e62d144ff5f69357da912214bec370d7a611ed9b679cc3dec737490a39d8340a3ab2d3bb0aaac2801fb73adf5060596a3d"}, {0x98, 0x113, 0x4, "21fa767ef8de0e12ee735ccc82e9235c1a128175730c11eb6faa1b4ee86517e7d56803251c9809d1616f897d39b20d4c7cd907e68eaa487521e1b2b1c29a44edc5f993535afb7ee018bff6852179f113ac60e2b2587524f993a741de88b36c072b1a2d39f4461b66f2d000f008712084d6ecfa20cf6c7ce4301fa40210dd09c049006f"}], 0x118}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000ec0)="9e85185bcd3cf5730955c000324d90fb2c6d539c8d54ccd84fd93d597377c7d474fc07bc11d5e2f8fd66a60aecc9e30a210aa62e457438dbbc614ae7b4c5da9c872bcee86abb1d445530f589336f164e9ce6ef5bf6546bb4bc451c7b16cea21d9508b90d9b", 0x65}, {&(0x7f0000000f40)="5be3056779f1e160021dc67e84e47785b1169641f47876fb1924e38e95ee426c5e586f9a0e2cbefcb42087860590b2e5c39874114962d1c32d2bc117a6fe9f767e647686b1b44f705de74388986076b2053e0afc1aa3ce7f6a3ae516755e997c43c09c3719a5531df599e9b5a29a9b240e90776ee71ea0f4ba5c48a6074fa084d5da6a5ab1ac5c3ee7bc1ada10324360c1b1c094b854b997d0c323df6df4cfe70c2c68c4c2dd80dc5933da49c3828d28bd8482a056300efb9180453f4816424769cbf46f5dda1a71c304aef9f1103fc3088be233e5a985cf721453b1d678c0d769ddc5f3edaf45ab9b614fc6ee22", 0xee}], 0x2, &(0x7f0000001080)=ANY=[@ANYBLOB="e0000000000000001301000004000000de40534376791a131e74318198a12fe11ff1f36ab42162d1cf56163e919368f4097a9413077f93adcf44d3a0738cf5b028874b86a46906d956c8237cb3f34877621727a570a9336f1b2336fd3860f009894ef008d94fb26fb0398570591a1f686240d23fc6125fa8474079a9acee722eb0caf87f94f2c2b97b462c93c67ac11cd2d8ffb4ada58404847f008d4a100944adbdee250887faf60264820dcbc864f6cde75caf1c67a8406add2e769a498286bd245ab9c97a60876443a3f540d3de55533ad62fed0a6fddf700000000000000"], 0xe0}}], 0x4, 0x0)

6.366631002s ago: executing program 0 (id=1044):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a340977770a"], 0xa)

5.542969438s ago: executing program 1 (id=1057):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x6, [@var={0x10, 0x0, 0x0, 0xe, 0x3}, @const={0xf, 0x0, 0x0, 0xa, 0x2}, @typedef={0x9, 0x0, 0x0, 0x8, 0x1}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x4, 0x1}, {0xb, 0x1}, {0x0, 0x2}, {0x5, 0x5}, {0xc, 0x2}, {0x1, 0x1}, {0xd, 0x1}]}, @const={0x4, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x61, 0x0, 0x61, 0x30]}}, &(0x7f0000000280)=""/106, 0x96, 0x6a, 0x0, 0x1}, 0x28)
socket$packet(0x11, 0x2, 0x300) (async)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000000)="000b0806", 0x3a0, 0x20044880, &(0x7f0000000340)={0x11, 0x8100, r2, 0x1, 0x1}, 0x14)
sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@mpls_getnetconf={0x1c, 0x52, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44004}, 0x80800)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @empty}]}}}]}, 0x3c}}, 0x0)

5.462856488s ago: executing program 1 (id=1059):
r0 = socket(0x10, 0x3, 0x0) (async)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x6}]}}]}, 0x4c}}, 0x0)

5.460109151s ago: executing program 1 (id=1061):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x9c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x6c, 0x2, [@TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x1}, @TCA_FLOWER_KEY_TCP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x2}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x2}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffffff, 0xff000000, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ICMPV4_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast1}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x40}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x10, 0x4}}]}}]}, 0x9c}}, 0x4000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x806)

5.392771919s ago: executing program 1 (id=1063):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r0}, 0x18) (async, rerun: 32)
r1 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 32)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10) (async, rerun: 32)
listen(r1, 0x0) (async, rerun: 32)
r2 = socket$vsock_stream(0x28, 0x1, 0x0) (async)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0x42, 0x4, 0x460, 0xffffffff, 0x2a8, 0x98, 0x2a8, 0xffffffff, 0xffffffff, 0x3c8, 0x3c8, 0x3c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'rose0\x00', 'wg2\x00'}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x1e8, 0x210, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0\x00', {0x0, 0x8, 0x0, 0x0, 0x0, 0x9, 0x1000}}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@socket0={{0x20}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [], 0x4e23}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) (async)
connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async, rerun: 64)
connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) (rerun: 64)

5.309641711s ago: executing program 1 (id=1065):
epoll_create1(0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="270000001400070f030e0000120f0a001100b1128a151f7508", 0x19) (async)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) (async)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000240)={0xa000001a})

5.252000335s ago: executing program 1 (id=1067):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000080)=0x5, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, 0x0, 0x20000000)
unshare(0x22020400)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r3, &(0x7f0000000040), 0x8)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000140))
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {0x0}], 0x2}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x20, 0x8, &(0x7f0000000a40)=ANY=[@ANYRESOCT=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d}, 0x94)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYRES32=r5, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="be2a6930d9016a62ff950099f2195648b5632209be97f5ce34edba4f6d35c7f16aa1d2f16fcfe9a6386c4e6ba79319116ca986a7e34cccb6db150ca753b41b53d84403dab595761c3d234d5bb439252cc4978c5ebacef62b2cfb08886871eb898b4d8d7755689801f39072bc11", @ANYRES64=0x0], 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB='/'], 0x20)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="f5000000000000000000000000000000000000001fbf5e9d0a9c306f763b6a25a6c81c86680d95975bd77452247871a11a74c33625c2da317ab52263e8e60dcb3329567b1022733e0ed09c01cf207d96fb674a082c6baf40199c94ec1bec298d329f8635301a91e844c244064b4200200ce2907948467127", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="188000582b00c8f00000001000c903ae0b000000000800edaaf6f69cd2cf26f3a6a8eb6f8525c7960eb8b9f60bb7153d944c810fa25e20e8324542331d65d91fd0a61fac2e5068efcf69839da0711c64feb77148b095ace3e1d95af133f55e44dc835bfec0a24784be04b0c4a57abb65b3fbd03492b669691e7f3a335fd0740d929e9c2f3ea5792eea722fd2c14454216481562f57a86fc85c358fa4e64950b7f8d59c8fca148d56b7e058dafce205d6225b5f9cb795920f4605ced729598c1a1c55df62ea10139d73", @ANYRESDEC, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xffffffffffffff19, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800ae4814f70000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)

231.675433ms ago: executing program 2 (id=1091):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r1, 0x10, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000c4}, 0x40080)
setsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f00000001c0)=0x81, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='btrfs_convert_extent_bit\x00', r0, 0x0, 0x7fff}, 0x18)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000680)={&(0x7f0000000280), 0xc, &(0x7f0000000640)={&(0x7f0000000300)={0x338, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_OURS={0x78, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}]}]}, @ETHTOOL_A_BITSET_VALUE={0x42, 0x4, "8d4188eb6357db0719d4bbac63e34cd31b7dc7e88cc0684afc29a29fcbfcab1d20cde4009fcc9b724850664e82d2f02dcd854b9127085eaecf186e22a228"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xf9}, @ETHTOOL_A_LINKMODES_OURS={0x284, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x104, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1d, 0x2, 'btrfs_convert_extent_bit\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'netdevsim'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xaf8}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '[)^:^#\xf3\\/:!\\}),+%\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ']%-[T\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '-@[-,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xaee}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3a8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '(-%(\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x7c, 0x5, "4a7b1e4d81f78a4a4e9959f73cb7960b9c96eafb0f4c332189ebbe27ece930f847473deabda202041b9be87fa8def723761609ce7da115071fb3eee19f514f07fbae63c70b3c2836b568d9fb77bd86810ff434ffe5afaa90172d509bf02a4efd0e840ad9a3a86cf542399cdda9e2b8a92e10f848ab91e9af"}, @ETHTOOL_A_BITSET_MASK={0x1f, 0x5, "fc2515d525249d59f0f69872856a2a85b035127b36e280d1ee0ced"}, @ETHTOOL_A_BITSET_MASK={0xde, 0x5, "7ff496cb36d016729b488e51ce8a2acfb483c7f124b7a400e2d4ff1791197d7af8912ff8a829a5c1c8d4c3979db5223e6473de1c1343143b45a839b564bf074690fef320c85d382c684a3fb5d662af7fc6a230d882d40968f5b3decb350c1f709912fc436b08d5921dc8309b715943fde040b1704381bcd1f57fddb3eefdda585a727c56a6e3be9f1832a80a3500f57f5717f37ef4300db2fadaa3827a033706c97c67b1f581ab16cb200793eb229e29c2ec64090ec511c9cb53e73503c417aafb74e5e7a4ce63229881e9214726d92e5c5716c4b0e6cf48d6c9"}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}]}, 0x338}, 0x1, 0x0, 0x0, 0x4084}, 0x4)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x8, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x6}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x200}]}, &(0x7f0000000700)='syzkaller\x00', 0x8, 0x7c, &(0x7f0000000740)=""/124, 0x40f00, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x2, 0x8, 0x7, 0xff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000840)=[r0, r0], 0x0, 0x10, 0xf}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000940)={r0, r3, 0x4, r0}, 0x10)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0xb8, 0x1, 0x8, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0xfffffc01}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x7ff}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0xfffff2ce}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x7ff}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0xd20b}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x80}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20008880}, 0x40d0)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000b00))
connect$inet6(r0, &(0x7f0000000b40)={0xa, 0x4e22, 0xee, @empty, 0x3}, 0x1c)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0xb0, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x4)
sendto$inet(r0, &(0x7f0000000d00)="196fd79c087fdf8f68bc278b55c44a7f867a09e711f28a855132d9a18e948da853bffff03322c095c5f776ec3a1306d15abe6420146d8e4473bd515bcaf7db4ab5b438e4bf9c8dbf1ce8225953d2d0c871b20bc55ef945610502de0b30904636ede11e88afdbdefef01ec7395e21d6f8e24dcb87ac433725569a56e97b0681f0bce0070a0035e2a90221e2c9a0a4e03c23d099a3b0cb21c3e3a292d71e717c9215b9ea0d49b6973d28355cd3a070faceca36e2010015719f6620db2eea3f64b9f51fd0e6db881c1815617cde0f7eef7b8aaf3cc473493b4a242ac68185f826182236ef7841f6c7ddf3", 0xe9, 0x4000000, 0x0, 0x0)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
close(r4)
preadv(r4, &(0x7f0000001040)=[{&(0x7f0000000e00)=""/190, 0xbe}, {&(0x7f0000000ec0)=""/210, 0xd2}, {&(0x7f0000000fc0)=""/66, 0x42}], 0x3, 0x9, 0x2)
r5 = openat$cgroup_ro(r0, &(0x7f0000001080)='memory.events\x00', 0x0, 0x0)
getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000001100)={@rand_addr, @private, <r6=>0x0}, &(0x7f0000001140)=0xc)
sendmsg$nl_route_sched_retired(r0, &(0x7f0000001300)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40000141}, 0xc, &(0x7f00000012c0)={&(0x7f0000001180)=@delqdisc={0x108, 0x25, 0x4, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xffff, 0xe}, {0x3, 0xb}, {0xffe0, 0x6}}, [@q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x81}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8000}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xf0d}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xf13e}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000001340)={0x0, 0x6, 0x3, 0xd}, 0x10)
setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000001380)=@assoc_value={0x0, 0x8}, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001400), r0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x2c, r8, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x24008804)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000026c0)={r5, 0x0, 0x0, 0x1000, &(0x7f0000001500), &(0x7f0000001540)=""/4096, 0x4, 0x0, 0x54, 0xc1, &(0x7f0000002540)="588afb153c8f3c37097176c85c5c56be963d717b1bb765aeb6679496dbe5964da58a638283d8d8fd617247196f5fd0c5a4c168b5916891b620e8fda4f1a8804269fc47f55bfeae7a08ef3fa392caf1fe2318c450", &(0x7f00000025c0)="863ea12d2c8c9652cc2af29f8719ac4e489872c6152873a71ea0573331c302c4527f3c5852db9752557e38ab8e986813f2b1d01607d211b656ed4d89a41d8a6642b75cb8cb92b30392c02bcd4f4a53bbf1ef8e945bed82fb39eea9975b06e209bed82457f14aa632473a443b74dc310830dfc92985d5c4c06fb5ee11cce9edffdf6d5bd15f2c7381dce2e2e2f4f8567c9fc84398be450e8431a8a4a4512bdc5944ca24b6c3284e78d7088ed6928ae199a2fcd9eea19848eb654ee5b9070e70ca1e", 0x6, 0x0, 0x1000}, 0x50)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r9, &(0x7f0000002800)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x20, 0x13, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x400c010)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000002840), 0x4)

162.993013ms ago: executing program 2 (id=1092):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x14, 0x4, 0x4, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r1, &(0x7f0000000380)}, 0x20)
syz_emit_ethernet(0xf87, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, {[@routing={0x84}], "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"}}}}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0)

162.649572ms ago: executing program 2 (id=1093):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x40, 0x9, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffff8001}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4c8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c880}, 0x4c840) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async)
r5 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async, rerun: 32)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="38b600a6c8", @ANYRES16=r4, @ANYRES8=r5], 0x38}}, 0x0) (rerun: 32)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x111000, 0x0) (async)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async)
setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f00000004c0)={0x7, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e20, @loopback}}}, 0x108)
setsockopt$inet_group_source_req(r8, 0x0, 0x2c, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @multicast2}}, {{0x2, 0x2, @local}}}, 0x108)
ioctl$PPPIOCGUNIT(r7, 0x80047456, &(0x7f00000003c0)) (async, rerun: 64)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r5, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r6, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x62}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x68850) (async, rerun: 64)
sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2120609}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r6, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x15}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x4040810) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r9, 0x5, 0x70bd25, 0x8, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x488c0) (async)
r11 = accept$ax25(r5, &(0x7f0000000300)={{0x3, @bcast}, [@remote, @null, @bcast, @netrom, @remote, @null, @null]}, &(0x7f0000000180)=0x48)
ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000240))

92.676167ms ago: executing program 2 (id=1094):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x2e, 0x0, 0x46}, 0x6, 0x98, 0xf8, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x0, 0x5, 0x3}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1]}, {0x0, [0x7, 0x0, 0x0, 0x0, 0x2]}}}}, {{@ip={@loopback, @dev, 0xff, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xa0, 0xc0, 0x0, {}, [@common=@ah={{0x30}, {[0x6c53, 0x10]}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xc, &(0x7f00000001c0), 0x1}, 0x0)
r2 = socket(0x10, 0x803, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, 0x3}, 0x80, 0x0}}], 0x1, 0x4000c14)
ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000280003802400008004000180040002800c00044000000000000000090c0005"], 0xe8}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000006c00190cfcfffffffedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="9e840500000000f317003480140035006e696336663005000000000000000000140003007665746831"], 0x4c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40040)
r5 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000040)=0x43e6, 0x4)
sendmmsg$inet6(r5, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
recvfrom(r5, 0x0, 0x0, 0x40002050, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0)
sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000000a0a0101000000000000000000000000f1719d3682aa3c599e086a1b90cec1c5d2b57d46536532bb2d3c8427ec653df39ed4179ec1035003269784b8ae566cb8f019be84c8df3d8d36fed8e8b60e838750e25a538346dc88e0b9919093c9466d96c37a9d467ad269b63b47d9e15548b1a426cd1313a0707976877c81eab38a2f3386c735d2c77c9723eb931633cd167e5b2ed8f51f"], 0x14}}, 0x0)
recvmmsg(r6, &(0x7f0000008180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r7 = socket$inet(0x2, 0x2, 0x9)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000b40)={0x1, 0x1000}, 0x4)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_int(r8, 0x0, 0x12, &(0x7f0000000040), &(0x7f0000000100)=0x2)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000080)=""/50, 0x908000, 0x2000, 0xfffffff8, 0x1}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x40010, r7, 0x0)

372.394µs ago: executing program 2 (id=1095):
r0 = socket(0x1d, 0x2, 0x6)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x6a, 0x2, 0x20000002, 0x5)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r3, 0x0) (async)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r3, 0x0)
write$cgroup_type(r3, &(0x7f0000000000), 0x9)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xcc, 0x1, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASK={0xa0, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xcc, 0x1, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASK={0xa0, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x9, 0x40, 0x40}, 0x10)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0xe, 0x13012, r1, 0x0) (async)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0xe, 0x13012, r1, 0x0)

0s ago: executing program 2 (id=1096):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000f40)={{r0}, 0x0, 0x0, @inherit={0x58, &(0x7f0000000240)={0x1, 0x2, 0x6, 0x100000000, {0x20, 0xffffffffffffff00, 0x12bc898b, 0x0, 0x7f}, [0x7, 0x2ed]}}, @devid})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0x1000)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2)
write(r2, &(0x7f0000000000)="51a236", 0x3)
shutdown(r2, 0x1)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="03707300", @ANYRES16=0x0, @ANYBLOB="000000000000000000000e000000"], 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800e000100697036677265746170000000080002800400120008000a0027046ab439587a7d514595be8c953b16afdb2df25c6ea8e3e06844964a1c734c4e04de5ebbabe05bedba0e1c33cdbfe9b3c072ae6fb62154202dc40491869248b3", @ANYRES32=r6, @ANYBLOB], 0x44}}, 0x0)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000ba000000a70000000000000018000000000000000000000000000000950000000000000095000000000000005830817b0647bdd31ef091de09c30deaab4cdae67fe75cc25fa2f8c10a01623d23f4159742154fea88eb2b48d0b16eb1a86d31fa9875f3db828da51f7a4912087d5a6e7d12b8c8c0a3dd05af96eb2adcadbd504f5a61354f0af2073d748d14de001a10c5a09c21109767317b04bea0510fd9289307cc187b"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, r7}, 0x94)
epoll_create1(0x80000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000009, 0x12, r8, 0xbf488000)
bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r9, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x4)
setsockopt$inet_int(r9, 0x0, 0x17, 0x0, 0x0)
r10 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r10, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:36955' (ED25519) to the list of known hosts.
syzkaller login: [   41.863563][ T5736] cgroup: Unknown subsys name 'net'
[   41.970634][ T5736] cgroup: Unknown subsys name 'cpuset'
[   41.976699][ T5736] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   43.680970][ T5736] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   47.227783][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   47.236765][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   47.239881][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   47.243500][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   47.248173][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   47.266636][ T5810] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   47.269787][ T5810] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   47.273163][ T5810] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   47.277307][ T5810] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   47.281649][ T5810] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   47.296404][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   47.299494][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   47.302515][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   47.306051][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   47.310282][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   47.581258][ T5808] chnl_net:caif_netlink_parms(): no params data found
[   47.626272][ T5813] chnl_net:caif_netlink_parms(): no params data found
[   47.669206][ T5816] chnl_net:caif_netlink_parms(): no params data found
[   47.766298][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.770285][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.773744][ T5808] bridge_slave_0: entered allmulticast mode
[   47.778818][ T5808] bridge_slave_0: entered promiscuous mode
[   47.821185][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.824233][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.827489][ T5808] bridge_slave_1: entered allmulticast mode
[   47.831623][ T5808] bridge_slave_1: entered promiscuous mode
[   47.860168][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.862665][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.865047][ T5813] bridge_slave_0: entered allmulticast mode
[   47.869057][ T5813] bridge_slave_0: entered promiscuous mode
[   47.896595][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.899503][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.901896][ T5813] bridge_slave_1: entered allmulticast mode
[   47.904669][ T5813] bridge_slave_1: entered promiscuous mode
[   47.920663][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.924756][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.927593][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.930476][ T5816] bridge_slave_0: entered allmulticast mode
[   47.933780][ T5816] bridge_slave_0: entered promiscuous mode
[   47.948035][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.952457][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.955331][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.958029][ T5816] bridge_slave_1: entered allmulticast mode
[   47.961205][ T5816] bridge_slave_1: entered promiscuous mode
[   47.975424][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.001825][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   48.007340][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.011356][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   48.064677][ T5808] team0: Port device team_slave_0 added
[   48.070605][ T5813] team0: Port device team_slave_0 added
[   48.087841][ T5808] team0: Port device team_slave_1 added
[   48.092730][ T5816] team0: Port device team_slave_0 added
[   48.095760][ T5813] team0: Port device team_slave_1 added
[   48.113907][ T5816] team0: Port device team_slave_1 added
[   48.169386][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.172281][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.182760][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.187948][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.190868][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.200804][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.214634][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.217471][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.225994][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.231508][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.234321][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.243597][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.265258][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0
[   48.267940][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.277300][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   48.296162][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1
[   48.298954][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   48.307724][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   48.318001][ T5813] hsr_slave_0: entered promiscuous mode
[   48.322029][ T5813] hsr_slave_1: entered promiscuous mode
[   48.394120][ T5816] hsr_slave_0: entered promiscuous mode
[   48.398315][ T5816] hsr_slave_1: entered promiscuous mode
[   48.400703][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   48.404000][ T5816] Cannot create hsr debugfs directory
[   48.419163][ T5808] hsr_slave_0: entered promiscuous mode
[   48.421940][ T5808] hsr_slave_1: entered promiscuous mode
[   48.424384][ T5808] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   48.427107][ T5808] Cannot create hsr debugfs directory
[   48.728547][ T5813] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   48.743203][ T5813] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   48.753988][ T5813] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   48.769088][ T5813] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   48.822436][ T5808] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   48.827237][ T5808] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   48.832756][ T5808] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   48.846296][ T5808] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   48.897654][ T5816] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   48.903211][ T5816] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   48.921818][ T5816] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   48.927214][ T5816] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   49.012206][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.034248][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.062410][ T5808] 8021q: adding VLAN 0 to HW filter on device team0
[   49.077533][ T5813] 8021q: adding VLAN 0 to HW filter on device team0
[   49.083116][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.086669][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.100403][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.103575][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.108623][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.111254][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.125987][   T84] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.128490][   T84] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.156883][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.200533][ T5816] 8021q: adding VLAN 0 to HW filter on device team0
[   49.222089][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   49.224468][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   49.231822][ T5813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   49.241981][ T5808] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   49.256017][   T84] bridge0: port 2(bridge_slave_1) entered blocking state
[   49.258493][   T84] bridge0: port 2(bridge_slave_1) entered forwarding state
[   49.307832][ T5201] Bluetooth: hci0: command tx timeout
[   49.388779][ T5201] Bluetooth: hci2: command tx timeout
[   49.391061][ T5201] Bluetooth: hci1: command tx timeout
[   49.460293][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.513445][ T5808] veth0_vlan: entered promiscuous mode
[   49.536613][ T5808] veth1_vlan: entered promiscuous mode
[   49.550714][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.556301][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0
[   49.586628][ T5808] veth0_macvtap: entered promiscuous mode
[   49.591438][ T5808] veth1_macvtap: entered promiscuous mode
[   49.615373][ T5816] veth0_vlan: entered promiscuous mode
[   49.625655][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.638492][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.654474][ T5808] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.659110][ T5808] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.662303][ T5808] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.665152][ T5808] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.673994][ T5816] veth1_vlan: entered promiscuous mode
[   49.680715][ T5813] veth0_vlan: entered promiscuous mode
[   49.704508][ T5813] veth1_vlan: entered promiscuous mode
[   49.729289][ T5816] veth0_macvtap: entered promiscuous mode
[   49.753241][ T5816] veth1_macvtap: entered promiscuous mode
[   49.776149][ T5813] veth0_macvtap: entered promiscuous mode
[   49.785148][ T5813] veth1_macvtap: entered promiscuous mode
[   49.785236][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.793185][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.802598][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.813504][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.831515][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.838588][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.849596][ T5816] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.852582][  T303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.855182][  T303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.859062][ T5816] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.861811][ T5816] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.864570][ T5816] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.874894][ T5813] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.879395][ T5813] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.882167][ T5813] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.884886][ T5813] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.963426][ T5808] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   49.986307][   T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.989734][   T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.030788][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.033987][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.057578][   T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.060087][   T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.085086][  T303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.088438][  T303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.184806][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.188429][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.261010][ T5884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5'.
[   51.028463][ T5884] team0: Port device team_slave_0 removed
[   51.185543][ T5896] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10'.
[   51.263580][ T5896] netlink: 'syz.0.10': attribute type 21 has an invalid length.
[   51.267275][ T5896] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10'.
[   51.275087][    C1] Unknown status report in ack skb
[   51.284297][ T5896] netlink: 'syz.0.10': attribute type 11 has an invalid length.
[   51.288804][ T5896] netlink: 'syz.0.10': attribute type 4 has an invalid length.
[   51.291851][ T5896] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10'.
[   51.397850][ T5818] Bluetooth: hci0: command tx timeout
[   51.467052][ T5818] Bluetooth: hci1: command tx timeout
[   51.469729][ T5201] Bluetooth: hci2: command tx timeout
[   51.568765][ T5914] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.16'.
[   51.582487][ T5914] wg2: entered promiscuous mode
[   51.584204][ T5914] wg2: entered allmulticast mode
[   51.654277][ T5918] Zero length message leads to an empty skb
[   51.657361][ T5918] syz.0.18 uses obsolete (PF_INET,SOCK_PACKET)
[   51.893414][ T5927] netlink: 36 bytes leftover after parsing attributes in process `syz.2.20'.
[   51.977457][ T5929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21'.
[   52.002085][ T5927] netlink: 'syz.2.20': attribute type 21 has an invalid length.
[   52.005256][ T5927] netlink: 36 bytes leftover after parsing attributes in process `syz.2.20'.
[   52.012513][    C0] Unknown status report in ack skb
[   52.021211][ T5927] netlink: 'syz.2.20': attribute type 11 has an invalid length.
[   52.024337][ T5927] netlink: 'syz.2.20': attribute type 4 has an invalid length.
[   52.030723][ T5927] netlink: 224 bytes leftover after parsing attributes in process `syz.2.20'.
[   52.090504][ T5933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22'.
[   52.529244][ T5959] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[   52.595039][ T5963] syzkaller1: entered promiscuous mode
[   52.616026][ T5963] syzkaller1: entered allmulticast mode
[   52.908812][ T5974] veth1_macvtap: left promiscuous mode
[   52.915866][ T5974] macsec0: entered promiscuous mode
[   52.918937][ T5974] macsec0: entered allmulticast mode
[   52.936894][ T5974] veth1_macvtap: entered promiscuous mode
[   52.942059][ T5974] veth1_macvtap: entered allmulticast mode
[   52.945184][ T5974] macsec0: left promiscuous mode
[   52.952791][ T5974] macsec0: left allmulticast mode
[   52.958602][ T5974] veth1_macvtap: left allmulticast mode
[   53.314107][ T5986] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   53.318890][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_0
[   53.322690][ T5986] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   53.325389][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_1
[   53.469075][ T5201] Bluetooth: hci0: command tx timeout
[   53.529384][ T5991] netlink: 'syz.0.40': attribute type 21 has an invalid length.
[   53.546622][ T5201] Bluetooth: hci2: command tx timeout
[   53.549130][ T5818] Bluetooth: hci1: command tx timeout
[   53.725328][ T6007] IPv6: addrconf: prefix option has invalid lifetime
[   53.901785][ T6020] xt_hashlimit: max too large, truncated to 1048576
[   53.905044][ T6020] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[   54.151966][ T6031] netlink: 'syz.2.54': attribute type 2 has an invalid length.
[   54.503877][ T6046] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   54.507958][ T6046] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   54.511183][ T6046] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   54.515382][ T6046] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   54.531462][ T6037] macsec1: entered promiscuous mode
[   54.533691][ T6037] macsec1: entered allmulticast mode
[   54.690649][ T6056] pim6reg9: entered allmulticast mode
[   54.793255][ T5872] IPVS: starting estimator thread 0...
[   54.896578][ T6073] IPVS: using max 79 ests per chain, 189600 per kthread
[   54.934204][ T6083] netlink: 'syz.1.69': attribute type 1 has an invalid length.
[   55.018248][ T6085] netlink: 'syz.2.70': attribute type 10 has an invalid length.
[   55.022734][ T6085] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.025194][ T6085] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.028636][ T6085] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.030958][ T6085] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.035647][ T6085] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   55.120707][ T6093] syzkaller1: entered promiscuous mode
[   55.140985][ T6090] warning: `syz.1.72' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   55.158728][ T6090] bridge_slave_0: left allmulticast mode
[   55.161005][ T6090] bridge_slave_0: left promiscuous mode
[   55.163307][ T6090] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.170825][ T6090] bridge_slave_1: left allmulticast mode
[   55.172814][ T6090] bridge_slave_1: left promiscuous mode
[   55.174839][ T6090] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.183111][ T6090] bond0: (slave bond_slave_0): Releasing backup interface
[   55.188861][ T6090] bond0: (slave bond_slave_1): Releasing backup interface
[   55.202261][ T6090] team0: Port device team_slave_1 removed
[   55.204683][ T6090] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   55.208120][ T6097] netlink: 'syz.1.72': attribute type 10 has an invalid length.
[   55.208710][ T6090] batman_adv: batadv0: Removing interface: batadv_slave_0
[   55.215017][ T6090] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   55.218745][ T6090] batman_adv: batadv0: Removing interface: batadv_slave_1
[   55.261236][ T6097] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   55.310014][ T6098] delete_channel: no stack
[   55.440641][ T6110] vcan0: tx drop: invalid sa for name 0x0000000000000001
[   55.547046][ T5201] Bluetooth: hci0: command tx timeout
[   55.624710][ T6120] __nla_validate_parse: 11 callbacks suppressed
[   55.624722][ T6120] netlink: 60 bytes leftover after parsing attributes in process `syz.1.82'.
[   55.628775][ T5201] Bluetooth: hci1: command tx timeout
[   55.628832][ T5201] Bluetooth: hci2: command tx timeout
[   55.639179][ T6120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.82'.
[   55.765980][ T6133] tipc: Started in network mode
[   55.767960][ T6133] tipc: Node identity ac14140f, cluster identity 4711
[   55.771132][ T6133] tipc: New replicast peer: 255.255.255.255
[   55.773498][ T6133] tipc: Enabled bearer <udp:syz2>, priority 10
[   56.612960][ T6145] netlink: 72 bytes leftover after parsing attributes in process `syz.0.91'.
[   56.643966][ T6151] netlink: 24 bytes leftover after parsing attributes in process `syz.0.92'.
[   56.723043][ T6155] xt_CT: You must specify a L4 protocol and not use inversions on it
[   56.741521][ T6155] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   56.752315][ T6157] netlink: 24 bytes leftover after parsing attributes in process `syz.2.95'.
[   56.798605][ T6162] netlink: 160 bytes leftover after parsing attributes in process `syz.0.96'.
[   56.816306][ T6163] xt_CT: You must specify a L4 protocol and not use inversions on it
[   56.860657][ T6165] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   56.860894][ T5838] bond0: (slave bond_slave_0): interface is now down
[   56.865434][ T6165] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   56.867503][ T5838] bond0: (slave bond_slave_1): interface is now down
[   56.877817][ T5838] bond0: now running without any active interface!
[   56.886986][ T5872] tipc: Node number set to 2886997007
[   57.004430][ T6170] batman_adv: batadv0: Adding interface: dummy0
[   57.007669][ T6170] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.019917][ T6170] batman_adv: batadv0: Interface activated: dummy0
[   57.198806][ T6175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.101'.
[   57.485814][ T6184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.104'.
[   57.505532][ T6184] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   57.515121][ T6184] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   57.545760][ T6184] netlink: 'syz.1.104': attribute type 83 has an invalid length.
[   57.699036][ T6190] netlink: 201916 bytes leftover after parsing attributes in process `syz.2.107'.
[   57.704171][ T6188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.106'.
[   57.707296][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[   57.851420][ T6200] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   57.912551][ T6204] netlink: 'syz.2.114': attribute type 1 has an invalid length.
[   58.006968][ T6214] netlink: 'syz.2.118': attribute type 1 has an invalid length.
[   58.038533][ T6211] sctp: [Deprecated]: syz.0.117 (pid 6211) Use of struct sctp_assoc_value in delayed_ack socket option.
[   58.038533][ T6211] Use struct sctp_sack_info instead
[   58.069973][ T6214] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[   58.072629][ T5872] IPVS: starting estimator thread 0...
[   58.144464][ T6226] netlink: 'syz.1.122': attribute type 9 has an invalid length.
[   58.159420][ T6216] IPVS: using max 80 ests per chain, 192000 per kthread
[   58.181692][ T6230] Cannot find add_set index 0 as target
[   58.214665][ T6233] syz.2.123 (6233) used greatest stack depth: 19656 bytes left
[   58.496168][ T6254] netlink: 'syz.0.133': attribute type 2 has an invalid length.
[   58.564437][ T6258] netlink: 'syz.0.135': attribute type 1 has an invalid length.
[   58.606116][ T6260] netlink: 'syz.0.136': attribute type 7 has an invalid length.
[   58.699290][ T6270] can: request_module (can-proto-3) failed.
[   58.894002][ T6293] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[   58.939087][ T6295] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   58.981321][ T6297] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5
[   59.355990][ T6305] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   59.980855][ T6329] netlink: 'syz.0.161': attribute type 1 has an invalid length.
[   59.984259][ T6329] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   60.060875][ T6333] netem: unknown loss type 13
[   60.066422][ T6333] netem: change failed
[   60.203511][ T6332] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   60.252009][ T6332] Cannot find del_set index 0 as target
[   60.722190][ T6363] __nla_validate_parse: 17 callbacks suppressed
[   60.722203][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.171'.
[   60.749549][ T6367] openvswitch: netlink: Tunnel attr 7 has unexpected len 16 expected 0
[   60.883468][ T6383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   60.887726][ T6383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   60.893334][ T6383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   60.899731][ T6383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   60.990452][ T6391] netlink: 16 bytes leftover after parsing attributes in process `syz.1.177'.
[   61.105447][ T6402] netlink: 'syz.2.181': attribute type 1 has an invalid length.
[   61.117355][ T6403] netlink: 'syz.2.181': attribute type 1 has an invalid length.
[   61.166749][ T6399] netlink: 224 bytes leftover after parsing attributes in process `syz.1.179'.
[   61.295114][ T6415] bridge_slave_0: default FDB implementation only supports local addresses
[   61.303187][ T6417] netlink: 28 bytes leftover after parsing attributes in process `syz.2.184'.
[   61.322148][ T6419] netlink: 28 bytes leftover after parsing attributes in process `syz.2.184'.
[   61.405947][ T6423] netlink: 224 bytes leftover after parsing attributes in process `syz.1.186'.
[   61.460899][ T6425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.187'.
[   61.533753][ T6440] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96
[   61.630306][ T6447] netlink: 132 bytes leftover after parsing attributes in process `syz.1.196'.
[   61.760504][ T6457] xt_CT: No such helper "snmp"
[   61.889096][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.204'.
[   61.892752][ T6473] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[   61.898922][ T6473] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.039854][ T6482] netlink: 224 bytes leftover after parsing attributes in process `syz.0.207'.
[   62.144150][ T6488] Dead loop on virtual device ip6_vti0, fix it urgently!
[   62.147814][ T6488] Dead loop on virtual device ip6_vti0, fix it urgently!
[   62.384660][ T6500] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   62.395016][ T6500] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.537471][ T6500] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   62.548218][ T6500] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.591989][ T6513] validate_nla: 6 callbacks suppressed
[   62.592005][ T6513] netlink: 'syz.0.218': attribute type 13 has an invalid length.
[   62.626223][ T6513] gretap0: refused to change device tx_queue_len
[   62.667611][ T6500] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   62.671206][ T6500] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.754528][ T6500] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[   62.760941][ T6500] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.773068][ T6519] syz_tun: entered allmulticast mode
[   62.779373][ T6518] syz_tun: left allmulticast mode
[   62.824628][ T6521] erspan0: entered promiscuous mode
[   62.827114][ T6521] macsec2: entered promiscuous mode
[   62.828961][ T6521] macsec2: entered allmulticast mode
[   62.831543][ T6521] erspan0: entered allmulticast mode
[   62.894198][ T6500] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[   62.901572][ T6500] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.935826][ T6500] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[   62.943276][ T6500] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.954671][ T6500] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[   62.959773][ T6500] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.033421][ T6500] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[   63.037063][ T6500] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.257119][ T6543] veth0_vlan: entered allmulticast mode
[   63.389764][ T6560] sctp: [Deprecated]: syz.0.232 (pid 6560) Use of struct sctp_assoc_value in delayed_ack socket option.
[   63.389764][ T6560] Use struct sctp_sack_info instead
[   63.578956][ T6569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   64.116904][ T6575] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   64.216707][ T6575] xt_connbytes: Forcing CT accounting to be enabled
[   64.219243][ T6575] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   64.223321][ T6575] xt_bpf: check failed: parse error
[   64.503108][ T6589] vlan2: entered promiscuous mode
[   64.505388][ T6589] bond0: entered promiscuous mode
[   64.517080][ T6589] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[   65.018603][ T6622] No such timeout policy "syz1"
[   65.171528][ T6632] bpq0: entered allmulticast mode
[   65.174404][ T6632] netlink: 'syz.1.260': attribute type 19 has an invalid length.
[   65.563555][ T6640] xt_socket: unknown flags 0x8
[   66.034289][ T6663] __nla_validate_parse: 14 callbacks suppressed
[   66.034302][ T6663] netlink: 24 bytes leftover after parsing attributes in process `syz.1.271'.
[   66.859372][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.274'.
[   69.135614][ T6696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.278'.
[   69.196099][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'.
[   69.561678][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.283'.
[   69.600048][ T6731] pim6reg: entered allmulticast mode
[   70.619502][ T6790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.301'.
[   70.831227][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   70.834850][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.365430][ T6809] netlink: 'syz.0.307': attribute type 1 has an invalid length.
[   71.545874][ T6822] tipc: Started in network mode
[   71.550569][ T6822] tipc: Node identity d64761313e2c, cluster identity 4711
[   71.553248][ T6822] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[   71.576697][ T6822] tipc: Resetting bearer <eth:syzkaller0>
[   71.582817][ T6821] tipc: Resetting bearer <eth:syzkaller0>
[   72.280032][ T6821] tipc: Disabling bearer <eth:syzkaller0>
[   72.458891][ T6848] netlink: 5 bytes leftover after parsing attributes in process `syz.2.318'.
[   72.541188][ T6855] netlink: 28 bytes leftover after parsing attributes in process `syz.2.320'.
[   72.574408][ T6859] netlink: 212280 bytes leftover after parsing attributes in process `syz.1.321'.
[   72.619286][ T6860] netlink: 'syz.0.322': attribute type 4 has an invalid length.
[   72.623895][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.322'.
[   72.692782][ T6869] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   72.705043][ T6869] macsec3: entered promiscuous mode
[   72.715208][ T6869] macsec3: entered allmulticast mode
[   72.725380][ T6869] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   72.735083][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.324'.
[   72.757084][ T6883] netlink: 24 bytes leftover after parsing attributes in process `syz.2.329'.
[   72.790790][ T6883] xt_hashlimit: invalid rate
[   72.911205][ T6900] netlink: 'syz.0.333': attribute type 12 has an invalid length.
[   72.913813][ T6900] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.333'.
[   72.950193][ T6905] netlink: 'syz.0.333': attribute type 12 has an invalid length.
[   72.954073][ T6905] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.333'.
[   73.095487][ T6920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.340'.
[   73.125566][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.341'.
[   73.373250][ T6944] xt_hashlimit: max too large, truncated to 1048576
[   73.383244][ T6947] xt_TCPMSS: Only works on TCP SYN packets
[   73.386275][ T6947] netlink: 'syz.1.348': attribute type 1 has an invalid length.
[   74.554966][ T6982] tipc: Started in network mode
[   74.556992][ T6982] tipc: Node identity ac14142a, cluster identity 4711
[   74.560314][ T6982] tipc: Enabled bearer <udp:syz2>, priority 10
[   74.660948][ T6993] netlink: 'syz.0.364': attribute type 2 has an invalid length.
[   74.664062][ T6993] netlink: 'syz.0.364': attribute type 1 has an invalid length.
[   75.678695][ T2207] tipc: Node number set to 2886997034
[   76.058566][ T7062] IPv6: NLM_F_CREATE should be specified when creating new route
[   76.825939][ T7073] net_ratelimit: 1 callbacks suppressed
[   76.825958][ T7073] A link change request failed with some changes committed already. Interface vxcan0 may have been left with an inconsistent configuration, please check.
[   77.353730][    C0] vcan0: j1939_tp_rxtimer: 0xffff888031174400: rx timeout, send abort
[   77.358199][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888031174400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[   77.398241][ T7108] netlink: 'syz.2.399': attribute type 1 has an invalid length.
[   77.408026][ T7108] netlink: 'syz.2.399': attribute type 3 has an invalid length.
[   77.828846][ T7116] __nla_validate_parse: 18 callbacks suppressed
[   77.828863][ T7116] netlink: 16 bytes leftover after parsing attributes in process `syz.2.401'.
[   77.838378][ T7116] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[   77.896762][ T7121] netlink: 'syz.0.403': attribute type 1 has an invalid length.
[   77.952584][ T7126] netlink: 5 bytes leftover after parsing attributes in process `syz.2.405'.
[   77.963689][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.408'.
[   77.967580][ T7128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.408'.
[   78.040892][ T7138] bond0: (slave wlan1): Releasing backup interface
[   78.053074][ T7138] mac80211_hwsim hwsim7 wlan1 (unregistering): left promiscuous mode
[   78.086917][   T52] syz1: Port: 1 Link DOWN
[   78.179682][ T7148] netlink: 60 bytes leftover after parsing attributes in process `syz.2.413'.
[   78.183860][ T7148] netlink: 56 bytes leftover after parsing attributes in process `syz.2.413'.
[   78.191498][ T7148] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[   78.195828][ T7148] gretap2: entered promiscuous mode
[   78.198706][ T7148] gretap2: entered allmulticast mode
[   78.200706][ T7152] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.412'.
[   78.206007][ T7147] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.412'.
[   78.302463][ T7156] netlink: 'syz.2.415': attribute type 1 has an invalid length.
[   78.375544][ T7153] netlink: 44 bytes leftover after parsing attributes in process `syz.1.414'.
[   79.164130][ T7177] netlink: 64 bytes leftover after parsing attributes in process `syz.1.423'.
[   79.253424][ T7181] bridge_slave_1: default FDB implementation only supports local addresses
[   79.418143][ T7196] syzkaller1: entered promiscuous mode
[   79.419973][ T7196] syzkaller1: entered allmulticast mode
[   79.426157][ T7196] netlink: 'syz.1.430': attribute type 9 has an invalid length.
[   79.606460][ T7205] netlink: 'syz.2.433': attribute type 1 has an invalid length.
[   79.708952][ T7217] 8021q: adding VLAN 0 to HW filter on device bond2
[   79.712721][ T7217] team0: Port device bond2 added
[   80.054683][ T7264] vlan2: entered allmulticast mode
[   80.170094][ T7283] netlink: 'syz.1.456': attribute type 18 has an invalid length.
[   80.286689][ T7300] tipc: Can't bind to reserved service type 0
[   80.531097][ T7321] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   81.069626][  T790] cfg80211: failed to load regulatory.db
[   81.680340][ T7362] gretap1: entered allmulticast mode
[   81.721714][ T7368] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   81.744716][ T7368] bond3: entered promiscuous mode
[   81.747332][ T7368] bond3: entered allmulticast mode
[   81.749330][ T7368] 8021q: adding VLAN 0 to HW filter on device bond3
[   81.847899][ T7380] netlink: 'syz.1.486': attribute type 21 has an invalid length.
[   81.868395][ T7380] netlink: 'syz.1.486': attribute type 5 has an invalid length.
[   82.057740][ T7398] netlink: 'syz.2.492': attribute type 9 has an invalid length.
[   82.119647][ T7401] 8021q: adding VLAN 0 to HW filter on device bond1
[   82.123923][ T7401] team0: Port device bond1 added
[   82.249361][ T7414] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   82.254596][ T7416] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   82.261078][ T7416] syzkaller0: entered promiscuous mode
[   82.266078][ T7416] syzkaller0: entered allmulticast mode
[   82.351255][ T7415] tipc: Resetting bearer <eth:syzkaller0>
[   82.364968][ T7415] tipc: Disabling bearer <eth:syzkaller0>
[   83.027998][   T34] audit: type=1800 audit(1751917380.169:2): pid=7451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.508" name="memory.events" dev="tmpfs" ino=875 res=0 errno=0
[   83.043911][   T34] audit: type=1804 audit(1751917380.179:3): pid=7451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.508" name="memory.events" dev="tmpfs" ino=875 res=1 errno=0
[   83.299981][ T7468] tipc: Enabling <ib:lo> not permitted
[   83.301860][ T7468] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[   83.318062][ T7468] veth3: entered promiscuous mode
[   83.414210][ T7474] netlink: 'syz.0.517': attribute type 1 has an invalid length.
[   83.505761][ T7487] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   83.534820][ T7491] netlink: 'syz.0.523': attribute type 1 has an invalid length.
[   83.541987][ T7491] netlink: 'syz.0.523': attribute type 1 has an invalid length.
[   83.545429][ T7492] netlink: 'syz.0.523': attribute type 1 has an invalid length.
[   83.551281][ T7492] netlink: 'syz.0.523': attribute type 1 has an invalid length.
[   83.633155][ T7497] __nla_validate_parse: 12 callbacks suppressed
[   83.633167][ T7497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.524'.
[   83.723010][ T7513] netlink: 24 bytes leftover after parsing attributes in process `syz.0.530'.
[   83.753323][ T7519] netlink: 48 bytes leftover after parsing attributes in process `syz.1.531'.
[   83.816245][ T7522] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.532'.
[   83.835841][ T7531] netlink: 24 bytes leftover after parsing attributes in process `syz.2.535'.
[   83.918608][ T7539] tun0: tun_chr_ioctl cmd 1074025681
[   83.956265][ T7539] tap0: tun_chr_ioctl cmd 1074025677
[   83.990252][ T7539] tap0: linktype set to 1
[   83.994509][ T7539] tap0: tun_chr_ioctl cmd 1074025680
[   84.000823][ T7539] netlink: 28 bytes leftover after parsing attributes in process `syz.2.538'.
[   84.003747][ T7539] netlink: 'syz.2.538': attribute type 1 has an invalid length.
[   84.195437][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.541'.
[   84.205746][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.541'.
[   84.208835][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.541'.
[   84.240240][ T7556] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.243281][ T7556] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.256125][ T7578] batadv0: entered promiscuous mode
[   85.259644][ T7578] vlan0: entered promiscuous mode
[   85.261885][ T7581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.553'.
[   85.318829][ T7581] team0: Port device team_slave_0 removed
[   85.446146][ T7594] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   85.449217][ T7594] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   85.451979][ T7594] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   85.454840][ T7594] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   86.248117][ T7614] netlink: 'syz.0.563': attribute type 5 has an invalid length.
[   86.250881][ T7615] Illegal XDP return value 16128 on prog  (id 120) dev syz_tun, expect packet loss!
[   87.076207][ T7623] sch_tbf: burst 0 is lower than device bridge3 mtu (1514) !
[   87.132331][ T7627] team0: Port device team_slave_0 removed
[   87.343506][ T7643] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[   87.381078][ T7643] bond0: (slave bridge0): Releasing backup interface
[   87.383814][ T7643] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.386210][ T7643] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.393879][ T7643] bridge_slave_0: left promiscuous mode
[   87.395831][ T7643] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.400079][ T7643] bridge_slave_1: left allmulticast mode
[   87.402049][ T7643] bridge_slave_1: left promiscuous mode
[   87.404473][ T7643] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.431343][ T7645] netlink: 'syz.2.578': attribute type 10 has an invalid length.
[   87.434240][ T7643] bond0: (slave bond_slave_0): Releasing backup interface
[   87.442922][ T7643] bond0: (slave bond_slave_1): Releasing backup interface
[   87.460828][ T7643] team0: Port device team_slave_1 removed
[   87.471195][ T7645] mac80211_hwsim hwsim6 wlan1: left allmulticast mode
[   87.493529][ T7645] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.500279][ T7645] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   88.044399][ T7667] netlink: 'syz.0.586': attribute type 27 has an invalid length.
[   88.047671][ T7667] netlink: 'syz.0.586': attribute type 5 has an invalid length.
[   88.053511][ T7667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   88.607559][ T7684] netlink: 'syz.1.591': attribute type 11 has an invalid length.
[   88.797640][ T7701] vlan2: entered allmulticast mode
[   88.799409][ T7701] bridge_slave_0: entered allmulticast mode
[   88.848615][ T7704] __nla_validate_parse: 10 callbacks suppressed
[   88.848631][ T7704] netlink: 28 bytes leftover after parsing attributes in process `syz.1.599'.
[   89.052177][ T7718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.603'.
[   89.074085][ T7718] 8021q: adding VLAN 0 to HW filter on device bond2
[   89.141669][ T7721] netlink: 28 bytes leftover after parsing attributes in process `syz.2.604'.
[   89.217833][ T7718] 8021q: adding VLAN 0 to HW filter on device bond2
[   89.224921][ T7718] bond2: (slave vti1): The slave device specified does not support setting the MAC address
[   89.237568][ T7718] bond2: (slave vti1): Error -95 calling set_mac_address
[   89.915280][ T7750] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.610'.
[   89.939905][ T7749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.611'.
[   90.043202][ T7764] Bluetooth: MGMT ver 1.23
[   90.158089][ T7779] netlink: 20 bytes leftover after parsing attributes in process `syz.1.622'.
[   90.166271][ T7779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.622'.
[   90.202611][ T7787] xt_TPROXY: Can be used only with -p tcp or -p udp
[   90.272333][ T7800] netlink: 56 bytes leftover after parsing attributes in process `syz.0.630'.
[   90.302771][ T7805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.632'.
[   90.344965][ T7809] No such timeout policy "syz0"
[   90.354058][ T7802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.631'.
[   90.572628][ T7829] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   91.290106][ T7842] netlink: 'syz.0.642': attribute type 1 has an invalid length.
[   91.304462][ T7842] bond4: entered promiscuous mode
[   91.306255][ T7842] bond4: entered allmulticast mode
[   91.316841][ T7842] bond4: (slave ip6gretap1): making interface the new active one
[   91.320575][ T7842] ip6gretap1: entered promiscuous mode
[   91.322365][ T7842] ip6gretap1: entered allmulticast mode
[   91.324854][ T7842] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link
[   91.469956][ T7853] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   91.498882][ T7864] netlink: 'syz.1.649': attribute type 10 has an invalid length.
[   91.503552][ T7864] bridge0: entered promiscuous mode
[   91.510315][ T7864] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   91.516989][   T52] syz1: Port: 1 Link ACTIVE
[   91.521233][ T7866] netlink: 'syz.2.650': attribute type 4 has an invalid length.
[   91.658424][ T7891] netlink: 'syz.2.655': attribute type 29 has an invalid length.
[   91.679082][ T7888] netlink: 'syz.0.654': attribute type 32 has an invalid length.
[   91.681681][ T7888] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192)
[   91.778158][ T7910] xfrm1: entered promiscuous mode
[   91.890770][ T7924] veth1_to_bond: entered allmulticast mode
[   91.920834][ T7924] veth1_to_bond (unregistering): left allmulticast mode
[   92.730112][ T7949] SET target dimension over the limit!
[   92.740593][ T7926] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   92.947924][ T7975] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[   92.955327][ T7975] netlink: 'syz.1.679': attribute type 3 has an invalid length.
[   93.090700][ T7990] netlink: zone id is out of range
[   93.092702][ T7990] netlink: get zone limit has 8 unknown bytes
[   93.342606][ T8002] netlink: 'syz.1.685': attribute type 10 has an invalid length.
[   94.036735][ T5818] Bluetooth: hci0: command 0x0401 tx timeout
[   94.122829][ T8061] __nla_validate_parse: 16 callbacks suppressed
[   94.122845][ T8061] netlink: 32 bytes leftover after parsing attributes in process `syz.1.699'.
[   94.232920][ T8065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.700'.
[   94.336323][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.703'.
[   94.648557][ T8086] netlink: 20 bytes leftover after parsing attributes in process `syz.1.707'.
[   94.695417][ T8089] netlink: 76 bytes leftover after parsing attributes in process `syz.2.709'.
[   95.769617][ T8133] x_tables: ip6_tables: sctp match: only valid for protocol 132
[   95.846329][ T8139] pim6reg: entered allmulticast mode
[   95.850246][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.727'.
[   95.853093][ T8139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.727'.
[   95.860057][ T8141] netlink: 20 bytes leftover after parsing attributes in process `syz.0.728'.
[   95.864171][ T8141] netlink: 'syz.0.728': attribute type 1 has an invalid length.
[   95.869063][ T8141] netlink: 244 bytes leftover after parsing attributes in process `syz.0.728'.
[   95.875265][ T8142] netlink: 'syz.0.728': attribute type 1 has an invalid length.
[   95.877873][ T8142] netlink: 244 bytes leftover after parsing attributes in process `syz.0.728'.
[   95.929327][ T8144] xt_CT: No such helper "snmp"
[   96.083661][ T8159] xfrm1: entered promiscuous mode
[   96.085877][ T8159] xfrm1: entered allmulticast mode
[   96.104303][ T8159] xt_hashlimit: size too large, truncated to 1048576
[   96.363755][ T8185] gretap1: entered allmulticast mode
[   96.399000][ T8189] sch_fq: defrate 9 ignored.
[   96.498461][ T8201] macvlan0: entered promiscuous mode
[   96.500704][ T8201] macvlan0: entered allmulticast mode
[   96.505671][ T8202] macvlan3: entered promiscuous mode
[   96.516326][ T8202] macvlan3: entered allmulticast mode
[   97.531514][ T8231] bond0: (slave bridge0): Releasing backup interface
[   97.535657][ T8231] bridge0 (unregistering): left promiscuous mode
[   97.599974][   T52] syz1: Port: 1 Link DOWN
[   97.651977][ T8245] netlink: 'syz.2.764': attribute type 1 has an invalid length.
[   97.683126][ T8246] syzkaller0: entered promiscuous mode
[   97.684962][ T8246] syzkaller0: entered allmulticast mode
[   97.912862][ T8267] netlink: 'syz.2.771': attribute type 21 has an invalid length.
[   98.002988][ T8272] veth0: entered promiscuous mode
[   98.031125][ T8272] veth0 (unregistering): left promiscuous mode
[   98.060216][ T8277] 0: renamed from hsr0 (while UP)
[   98.065334][ T8277] 0: entered allmulticast mode
[   98.070993][ T8277] hsr_slave_0: entered allmulticast mode
[   98.073789][ T8277] hsr_slave_1: entered allmulticast mode
[   98.076100][ T8277] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[   98.192436][ T8286] lo: entered allmulticast mode
[   99.199627][ T8280] lo: left allmulticast mode
[   99.293395][ T8313] netlink: 'syz.0.786': attribute type 2 has an invalid length.
[   99.478599][ T8330] bond0: entered promiscuous mode
[   99.486078][ T8330] bond_slave_0: entered promiscuous mode
[   99.489434][ T8330] bond_slave_1: entered promiscuous mode
[   99.494323][ T8330] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[   99.498998][ T8335] __nla_validate_parse: 78 callbacks suppressed
[   99.499008][ T8335] netlink: 28 bytes leftover after parsing attributes in process `syz.2.793'.
[   99.504760][ T8330] 8021q: adding VLAN 0 to HW filter on device hsr1
[   99.509679][ T8330] bond0: left promiscuous mode
[   99.511218][ T8330] bond_slave_0: left promiscuous mode
[   99.513046][ T8330] bond_slave_1: left promiscuous mode
[   99.757078][ T8360] netlink: 16 bytes leftover after parsing attributes in process `syz.0.802'.
[   99.877310][ T8373] netlink: 'syz.2.806': attribute type 5 has an invalid length.
[   99.921032][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.810'.
[   99.923850][ T8387] netlink: 52 bytes leftover after parsing attributes in process `syz.1.810'.
[  100.038751][   T34] audit: type=1804 audit(1751917397.179:4): pid=8405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.815" name="/newroot/293/cgroup.controllers" dev="tmpfs" ino=1513 res=1 errno=0
[  100.058030][   T34] audit: type=1800 audit(1751917397.179:5): pid=8405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.815" name="cgroup.controllers" dev="tmpfs" ino=1513 res=0 errno=0
[  100.104466][ T8403] ieee802154 phy0 wpan0: encryption failed: -22
[  100.165403][ T8413] syz.2.818: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  100.171306][ T8413] CPU: 1 UID: 0 PID: 8413 Comm: syz.2.818 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  100.171342][ T8413] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  100.171348][ T8413] Call Trace:
[  100.171359][ T8413]  <TASK>
[  100.171364][ T8413]  dump_stack_lvl+0x189/0x250
[  100.171385][ T8413]  ? __pfx_dump_stack_lvl+0x10/0x10
[  100.171399][ T8413]  ? __pfx__printk+0x10/0x10
[  100.171410][ T8413]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  100.171420][ T8413]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  100.171430][ T8413]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  100.171440][ T8413]  warn_alloc+0x214/0x310
[  100.171450][ T8413]  ? stack_depot_save_flags+0x40/0x900
[  100.171462][ T8413]  ? __pfx_warn_alloc+0x10/0x10
[  100.171471][ T8413]  ? kasan_save_track+0x4f/0x80
[  100.171482][ T8413]  ? xskq_create+0x56/0x170
[  100.171493][ T8413]  ? xsk_init_queue+0xb0/0x110
[  100.171501][ T8413]  ? xsk_setsockopt+0x43f/0x710
[  100.171510][ T8413]  ? do_sock_setsockopt+0x25a/0x3e0
[  100.171520][ T8413]  ? __x64_sys_setsockopt+0x18b/0x220
[  100.171529][ T8413]  ? do_syscall_64+0xfa/0x3b0
[  100.171535][ T8413]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.171546][ T8413]  __vmalloc_node_range_noprof+0x125/0x12f0
[  100.171566][ T8413]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  100.171574][ T8413]  ? xskq_create+0x56/0x170
[  100.171585][ T8413]  ? __kasan_kmalloc+0x93/0xb0
[  100.171593][ T8413]  vmalloc_user_noprof+0xad/0xf0
[  100.171601][ T8413]  ? xskq_create+0xbf/0x170
[  100.171611][ T8413]  xskq_create+0xbf/0x170
[  100.171623][ T8413]  xsk_init_queue+0xb0/0x110
[  100.171635][ T8413]  xsk_setsockopt+0x43f/0x710
[  100.171645][ T8413]  ? __pfx_xsk_setsockopt+0x10/0x10
[  100.171677][ T8413]  ? __lock_acquire+0xab9/0xd20
[  100.171694][ T8413]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  100.171705][ T8413]  ? __pfx_xsk_setsockopt+0x10/0x10
[  100.171717][ T8413]  do_sock_setsockopt+0x25a/0x3e0
[  100.171729][ T8413]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  100.171740][ T8413]  ? __fget_files+0x2a/0x420
[  100.171752][ T8413]  __x64_sys_setsockopt+0x18b/0x220
[  100.171764][ T8413]  do_syscall_64+0xfa/0x3b0
[  100.171772][ T8413]  ? lockdep_hardirqs_on+0x9c/0x150
[  100.171784][ T8413]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.171792][ T8413]  ? exc_page_fault+0x9f/0xf0
[  100.171805][ T8413]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.171814][ T8413] RIP: 0033:0x7fd324f8e929
[  100.171822][ T8413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  100.171829][ T8413] RSP: 002b:00007fd325e2a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  100.171838][ T8413] RAX: ffffffffffffffda RBX: 00007fd3251b5fa0 RCX: 00007fd324f8e929
[  100.171844][ T8413] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  100.171848][ T8413] RBP: 00007fd325010b39 R08: 0000000000000004 R09: 0000000000000000
[  100.171852][ T8413] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  100.171857][ T8413] R13: 0000000000000000 R14: 00007fd3251b5fa0 R15: 00007fff8e38ee98
[  100.171868][ T8413]  </TASK>
[  100.171871][ T8413] Mem-Info:
[  100.267003][ T8422] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.272437][ T8413] active_anon:4915 inactive_anon:0 isolated_anon:0
[  100.272437][ T8413]  active_file:1028 inactive_file:38220 isolated_file:0
[  100.272437][ T8413]  unevictable:1772 dirty:174 writeback:0
[  100.272437][ T8413]  slab_reclaimable:9597 slab_unreclaimable:55505
[  100.272437][ T8413]  mapped:18088 shmem:2460 pagetables:948
[  100.272437][ T8413]  sec_pagetables:0 bounce:0
[  100.272437][ T8413]  kernel_misc_reclaimable:0
[  100.272437][ T8413]  free:294537 free_pcp:22868 free_cma:0
[  100.274797][ T8421] bpq0: left allmulticast mode
[  100.277458][ T8413] Node 0 active_anon:11616kB inactive_anon:0kB active_file:3344kB inactive_file:21520kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37316kB dirty:592kB writeback:0kB shmem:4896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3660kB pagetables:2312kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  100.277489][ T8413] Node 1 active_anon:8044kB inactive_anon:0kB active_file:768kB inactive_file:131360kB unevictable:3552kB isolated(anon):0kB isolated(file):0kB mapped:35036kB dirty:104kB writeback:0kB shmem:4944kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8160kB pagetables:1480kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  100.277512][ T8413] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  100.277538][ T8413] lowmem_reserve[]: 0 815 815 815 815
[  100.277559][ T8413] Node 0 DMA32 free:399028kB boost:0kB min:33716kB low:42144kB high:50572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:11616kB inactive_anon:0kB active_file:3344kB inactive_file:21520kB unevictable:3536kB writepending:592kB present:1556484kB managed:834740kB mlocked:0kB bounce:0kB free_pcp:34872kB local_pcp:15912kB free_cma:0kB
[  100.277585][ T8413] lowmem_reserve[]: 0 0 0 0 0
[  100.277604][ T8413] Node 1 DMA32 free:458616kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  100.277628][ T8413] lowmem_reserve[]: 0 0 854 854 854
[  100.277646][ T8413] Node 1 Normal free:305144kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8044kB inactive_anon:0kB active_file:768kB inactive_file:131360kB unevictable:3552kB writepending:104kB present:1048576kB managed:875016kB mlocked:16kB bounce:0kB free_pcp:56600kB local_pcp:34236kB free_cma:0kB
[  100.277669][ T8413] lowmem_reserve[]: 0 0 0 0 0
[  100.277685][ T8413] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  100.277738][ T8413] Node 0 DMA32: 569*4kB (UME) 478*8kB (UME) 242*16kB (UME) 166*32kB (UME) 29*64kB (UME) 35*128kB (UME) 38*256kB (UME) 18*512kB (UM) 10*1024kB (UME) 6*2048kB (UME) 82*4096kB (M) = 398964kB
[  100.398473][ T8413] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  100.404171][ T8425] IPv6: sit1: Disabled Multicast RS
[  100.404908][ T8413] Node 1 Normal: 138*4kB (UME) 188*8kB (UME) 420*16kB (UE) 283*32kB (UME) 326*64kB (UME) 152*128kB (UM) 57*256kB (UM) 32*512kB (UME) 13*1024kB (UM) 7*2048kB (UM) 46*4096kB (M) = 305192kB
[  100.415433][ T8413] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  100.418599][ T8413] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  100.421487][ T8413] 41696 total pagecache pages
[  100.422968][ T8413] 0 pages in swap cache
[  100.424280][ T8413] Free swap  = 124996kB
[  100.425643][ T8413] Total swap = 124996kB
[  100.427179][ T8413] 786301 pages RAM
[  100.428459][ T8413] 0 pages HighMem/MovableOnly
[  100.429940][ T8413] 240368 pages reserved
[  100.434726][ T8413] 0 pages cma reserved
[  100.559448][ T8443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.829'.
[  100.609166][ T8448] netlink: 24 bytes leftover after parsing attributes in process `syz.0.831'.
[  100.629046][ T8448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.831'.
[  100.631872][ T8448] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  100.634782][ T8448] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.812396][ T8466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.837'.
[  100.815569][ T8466] nbd: socks must be embedded in a SOCK_ITEM attr
[  100.820423][ T8467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.837'.
[  100.860674][ T8467] nbd: socks must be embedded in a SOCK_ITEM attr
[  100.964755][ T8479] gretap2: entered promiscuous mode
[  101.029714][ T8481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.841'.
[  101.369103][ T8497] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  101.776159][ T8522] netlink: 'syz.0.855': attribute type 1 has an invalid length.
[  101.805053][ T8522] 8021q: adding VLAN 0 to HW filter on device bond5
[  102.019162][ T8547] netlink: 'syz.2.862': attribute type 4 has an invalid length.
[  102.022080][ T8547] IPVS: set_ctl: invalid protocol: 58 172.20.20.187:20001
[  102.070772][ T8547] lo speed is unknown, defaulting to 1000
[  102.074154][ T8547] lo speed is unknown, defaulting to 1000
[  102.077033][ T8547] lo speed is unknown, defaulting to 1000
[  102.128223][ T8550] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  102.178200][ T8547] infiniband syz0: set active
[  102.180593][ T5970] lo speed is unknown, defaulting to 1000
[  102.182971][ T8547] infiniband syz0: added lo
[  102.184929][ T5970] syz0: Port: 1 Link ACTIVE
[  102.224557][ T8547] RDS/IB: syz0: added
[  102.238077][ T8547] smc: adding ib device syz0 with port count 1
[  102.240168][ T8547] smc:    ib device syz0 port 1 has pnetid 
[  102.243168][ T5970] lo speed is unknown, defaulting to 1000
[  102.248502][ T8547] lo speed is unknown, defaulting to 1000
[  102.367393][ T8547] lo speed is unknown, defaulting to 1000
[  102.501557][ T8547] lo speed is unknown, defaulting to 1000
[  102.504515][ T8572] netlink: 'syz.1.871': attribute type 46 has an invalid length.
[  102.701288][ T8583] bridge0: port 1(syz_tun) entered blocking state
[  102.705221][ T8583] bridge0: port 1(syz_tun) entered disabled state
[  102.708534][ T8583] syz_tun: entered allmulticast mode
[  102.713441][ T8583] syz_tun: entered promiscuous mode
[  102.719098][ T8583] bridge0: port 1(syz_tun) entered blocking state
[  102.722132][ T8583] bridge0: port 1(syz_tun) entered forwarding state
[  104.178593][ T8618] syzkaller1: entered promiscuous mode
[  104.180513][ T8618] syzkaller1: entered allmulticast mode
[  104.242964][ T8627] "syz.1.891" (8627) uses obsolete ecb(arc4) skcipher
[  104.880173][ T8703] netlink: 'syz.1.911': attribute type 1 has an invalid length.
[  104.883591][ T8703] netlink: 'syz.1.911': attribute type 1 has an invalid length.
[  104.886048][ T8703] netlink: 'syz.1.911': attribute type 2 has an invalid length.
[  104.950779][ T8710] __nla_validate_parse: 31 callbacks suppressed
[  104.950791][ T8710] netlink: 64 bytes leftover after parsing attributes in process `syz.0.913'.
[  105.087288][ T8724] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.142696][ T8736] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  105.149399][ T8736] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  105.200919][ T8745] netlink: 'syz.0.920': attribute type 1 has an invalid length.
[  105.389132][ T8768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.395076][ T8768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  105.476056][ T8781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.929'.
[  105.594589][ T8791] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.932'.
[  105.644717][ T8798] No such timeout policy "syz1"
[  105.770952][ T8805] netlink: 36 bytes leftover after parsing attributes in process `syz.2.937'.
[  105.880338][ T8811] xt_socket: unknown flags 0xd0
[  105.927797][ T8813] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  105.931030][ T8813] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  106.329088][ T8828] netlink: 32 bytes leftover after parsing attributes in process `syz.1.944'.
[  106.377975][ T8832] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  106.426721][   T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  106.427552][ T5818] Bluetooth: hci0: command 0x0401 tx timeout
[  106.664620][ T8849] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  106.670427][ T8849] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.794105][ T8849] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  106.799753][ T8849] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.875795][ T8849] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  106.879559][ T8849] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.943937][ T8867] tipc: Enabled bearer <eth:gre0>, priority 10
[  106.988603][ T8849] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  106.992115][ T8849] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.079937][ T8849] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  107.086488][ T8849] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.148991][ T8849] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  107.165290][ T8849] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.175030][ T8849] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  107.186497][ T8849] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.198544][ T8849] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  107.201291][ T8849] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.288605][ T8884] netlink: 24 bytes leftover after parsing attributes in process `syz.2.961'.
[  107.886059][ T8935] netlink: 60 bytes leftover after parsing attributes in process `syz.0.980'.
[  107.964500][ T8942] netlink: 'syz.0.982': attribute type 3 has an invalid length.
[  108.048349][ T8946] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.984'.
[  108.056651][   T52] tipc: Node number set to 3899351345
[  108.172858][ T8955] Cannot find add_set index 4 as target
[  108.199723][ T8957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.989'.
[  108.202742][ T8957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.989'.
[  108.313621][ T5970] IPVS: starting estimator thread 0...
[  108.339738][ T8970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.417306][ T8971] IPVS: using max 80 ests per chain, 192000 per kthread
[  108.560854][ T8984] bridge: RTM_NEWNEIGH with invalid ether address
[  108.870810][ T9003] lo speed is unknown, defaulting to 1000
[  109.123197][ T9016] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.126475][ T9016] lo: entered promiscuous mode
[  109.128201][ T9016] lo: entered allmulticast mode
[  109.135353][ T9016] tipc: Resetting bearer <eth:syzkaller0>
[  109.141614][ T9015] tipc: Disabling bearer <eth:syzkaller0>
[  109.371258][ T9031] netlink: 'syz.0.1017': attribute type 1 has an invalid length.
[  110.017384][ T9052] can: request_module (can-proto-3) failed.
[  110.273497][ T9066] x_tables: duplicate underflow at hook 1
[  110.347364][   T26] wlan0: Trigger new scan to find an IBSS to join
[  110.419008][ T9075] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.424367][ T9075] netlink: 'syz.2.1032': attribute type 12 has an invalid length.
[  110.573186][ T9083] __nla_validate_parse: 15 callbacks suppressed
[  110.573228][ T9083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1036'.
[  110.801451][ T9097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1041'.
[  111.270089][ T5201] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  111.274446][ T5201] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  111.278278][ T5201] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  111.283084][ T5201] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  111.298927][ T5201] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  111.336791][ T9117] lo speed is unknown, defaulting to 1000
[  111.604991][ T9144] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  111.627722][ T9117] chnl_net:caif_netlink_parms(): no params data found
[  111.710861][ T9152] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 11
[  111.753942][ T9117] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.765408][ T9117] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.768057][ T9117] bridge_slave_0: entered allmulticast mode
[  111.770761][ T9117] bridge_slave_0: entered promiscuous mode
[  111.775479][ T9117] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.779709][ T9117] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.782715][ T9117] bridge_slave_1: entered allmulticast mode
[  111.788678][ T9117] bridge_slave_1: entered promiscuous mode
[  111.841235][ T9117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  111.851508][ T9117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  111.881004][ T9165] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1062'.
[  111.902562][ T9168] ipt_REJECT: ECHOREPLY no longer supported.
[  111.920681][ T9117] team0: Port device team_slave_0 added
[  111.924262][ T9117] team0: Port device team_slave_1 added
[  111.947053][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  111.975586][ T9117] batman_adv: batadv0: Adding interface: batadv_slave_0
[  111.978583][ T9117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.996603][ T9117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  112.010741][ T9117] batman_adv: batadv0: Adding interface: batadv_slave_1
[  112.013015][ T9117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.022419][ T9117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  112.061141][ T9117] hsr_slave_0: entered promiscuous mode
[  112.063490][ T9117] hsr_slave_1: entered promiscuous mode
[  112.065595][ T9117] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  112.068736][ T9117] Cannot create hsr debugfs directory
[  112.198392][ T9186] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1069'.
[  112.199023][ T9117] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.228614][ T9186] lo speed is unknown, defaulting to 1000
[  112.261021][ T9117] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.339710][ T9117] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.403081][ T9117] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.508998][ T9117] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  112.523959][ T9117] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  112.529361][ T9117] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  112.533948][ T9117] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  112.603254][ T9117] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.615352][ T9117] 8021q: adding VLAN 0 to HW filter on device team0
[  112.620520][   T84] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.622809][   T84] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.630654][   T84] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.633046][   T84] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.758299][ T9117] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.793820][ T9117] veth0_vlan: entered promiscuous mode
[  112.804537][ T9117] veth1_vlan: entered promiscuous mode
[  112.830998][ T9117] veth0_macvtap: entered promiscuous mode
[  112.837429][ T9117] veth1_macvtap: entered promiscuous mode
[  112.852483][ T9117] batman_adv: batadv0: Interface activated: batadv_slave_0
[  112.862762][ T9117] batman_adv: batadv0: Interface activated: batadv_slave_1
[  112.870283][ T9117] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.873974][ T9117] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  112.878994][ T9117] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.882621][ T9117] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.943700][   T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.950977][   T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.978108][   T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.996533][   T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.074073][ T9200] netlink: 'syz.2.1070': attribute type 5 has an invalid length.
[  113.252548][ T9211] netlink: 'syz.2.1073': attribute type 1 has an invalid length.
[  113.284760][ T9211] 8021q: adding VLAN 0 to HW filter on device bond2
[  113.289660][ T9211] bond1: (slave bond2): making interface the new active one
[  113.293434][ T9211] bond1: (slave bond2): Enslaving as an active interface with an up link
[  113.302758][ T9211] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1073'.
[  113.306680][ T1087] wlan0: Trigger new scan to find an IBSS to join
[  113.314222][ T9211] 8021q: adding VLAN 0 to HW filter on device bond1
[  113.386671][   T54] Bluetooth: hci0: command tx timeout
[  114.402127][ T9232] 8021q: VLANs not supported on wlan1
[  114.419474][ T9232] geneve3: entered promiscuous mode
[  114.421229][ T9232] geneve3: entered allmulticast mode
[  114.577452][ T9235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1081'.
[  115.529615][ T9247] lo speed is unknown, defaulting to 1000
[  115.645087][ T9248] lo speed is unknown, defaulting to 1000
[  115.943943][ T9254] dummy0: entered promiscuous mode
[  115.965355][ T9254] dummy0: left promiscuous mode
[  116.347363][   T26] wlan0: Trigger new scan to find an IBSS to join
[  116.791678][ T9257] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1087'.
[  116.959886][ T9263] team0: Port device gtp0 added
[  117.062742][ T9269] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1092'.
[  117.142278][ T9276] x_tables: ip_tables: ah match: only valid for protocol 51
[  117.259482][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.286783][ T5858] ------------[ cut here ]------------
[  117.289439][ T5858] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0
[  117.293424][ T5858] WARNING: CPU: 1 PID: 5858 at net/mac80211/rate.c:403 __rate_control_send_low+0x5df/0x820
[  117.297791][ T5858] Modules linked in:
[  117.299415][ T5858] CPU: 1 UID: 0 PID: 5858 Comm: kworker/1:4 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  117.304438][ T5858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  117.308786][ T5858] Workqueue: mld mld_ifc_work
[  117.310808][ T5858] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  117.313431][ T5858] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 7b ae 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 12 1b a6 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  117.321378][ T5858] RSP: 0018:ffffc900035fe498 EFLAGS: 00010246
[  117.323663][ T5858] RAX: b384b47563061c00 RBX: 000000000000000c RCX: ffff888108bd1cc0
[  117.327143][ T5858] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  117.330523][ T5858] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  117.333854][ T5858] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff88812943eaa8
[  117.337388][ T5858] R13: 0000000000000000 R14: ffff888123680e40 R15: ffff8881236830d8
[  117.340208][ T5858] FS:  0000000000000000(0000) GS:ffff8881a3c50000(0000) knlGS:0000000000000000
[  117.343300][ T5858] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  117.345695][ T5858] CR2: 0000200000040000 CR3: 00000000275a0000 CR4: 00000000000006f0
[  117.348373][ T5858] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  117.351039][ T5858] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  117.353690][ T5858] Call Trace:
[  117.355172][ T5858]  <TASK>
[  117.356278][ T5858]  rate_control_send_low+0x194/0x7a0
[  117.358161][ T5858]  rate_control_get_rate+0x20b/0x5d0
[  117.360196][ T5858]  ieee80211_tx_h_rate_ctrl+0xb32/0x1780
[  117.362089][ T5858]  ? ieee80211_tx+0x297/0x420
[  117.363625][ T5858]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[  117.365577][ T5858]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  117.367670][ T5858]  invoke_tx_handlers_late+0xb6/0x1820
[  117.369472][ T5858]  ? ieee80211_tx_h_select_key+0xc72/0x1900
[  117.371427][ T5858]  ieee80211_tx_dequeue+0x3068/0x4340
[  117.372198][ T9284] netlink: 'syz.2.1096': attribute type 1 has an invalid length.
[  117.373224][ T5858]  ? __pfx_ieee80211_tx_dequeue+0x10/0x10
[  117.378431][ T5858]  ? __local_bh_enable_ip+0x12d/0x1c0
[  117.380221][ T5858]  ieee80211_handle_wake_tx_queue+0x125/0x2a0
[  117.382169][ T5858]  ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10
[  117.384284][ T5858]  ? __local_bh_enable_ip+0x12d/0x1c0
[  117.386010][ T5858]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  117.387903][ T5858]  ? do_raw_spin_unlock+0x4d/0x240
[  117.389576][ T5858]  ieee80211_queue_skb+0x19e8/0x2180
[  117.391285][ T5858]  ieee80211_tx+0x297/0x420
[  117.392776][ T5858]  ? __pfx_ieee80211_tx+0x10/0x10
[  117.394445][ T5858]  ? ieee80211_xmit+0x315/0x400
[  117.396078][ T5858]  __ieee80211_subif_start_xmit+0xc49/0x1500
[  117.398072][ T5858]  ? __ieee80211_subif_start_xmit+0x2a6/0x1500
[  117.400060][ T5858]  ? __pfx___ieee80211_subif_start_xmit+0x10/0x10
[  117.402094][ T5858]  ? skb_network_protocol+0x508/0x760
[  117.403824][ T5858]  ? ieee80211_multicast_to_unicast+0x19c/0x320
[  117.405782][ T5858]  ieee80211_subif_start_xmit+0xe0/0x510
[  117.406055][ T9284] 8021q: adding VLAN 0 to HW filter on device bond3
[  117.407610][ T5858]  ? __pfx_ieee80211_subif_start_xmit+0x10/0x10
[  117.407629][ T5858]  ? __lock_acquire+0xab9/0xd20
[  117.407644][ T5858]  dev_hard_start_xmit+0x2d7/0x830
[  117.407661][ T5858]  __dev_queue_xmit+0x1adf/0x3a70
[  117.407671][ T5858]  ? register_lock_class+0x51/0x320
[  117.407684][ T5858]  ? __dev_queue_xmit+0x27e/0x3a70
[  117.407701][ T5858]  ? __pfx___dev_queue_xmit+0x10/0x10
[  117.407711][ T5858]  ? read_seqbegin+0x122/0x250
[  117.407718][ T5858]  ? neigh_resolve_output+0x438/0x750
[  117.407725][ T5858]  ? lockdep_hardirqs_on+0x9c/0x150
[  117.407737][ T5858]  ? read_seqbegin+0x1ac/0x250
[  117.407744][ T5858]  ? __pfx_read_seqbegin+0x10/0x10
[  117.407751][ T5858]  ? __local_bh_enable_ip+0x12d/0x1c0
[  117.407761][ T5858]  ? eth_header+0x11b/0x200
[  117.407772][ T5858]  ? __asan_memcpy+0x40/0x70
[  117.407793][ T5858]  ip6_finish_output2+0x11fe/0x16a0
[  117.438805][ T5858]  ? ip6_finish_output2+0x701/0x16a0
[  117.441021][ T5858]  ? __pfx_ip6_finish_output2+0x10/0x10
[  117.443342][ T5858]  ? ip6_mtu+0x7d/0x3f0
[  117.445071][ T5858]  ? ip6_mtu+0x7d/0x3f0
[  117.446929][ T5858]  ip6_finish_output+0x234/0x7d0
[  117.448968][ T5858]  NF_HOOK+0x9e/0x380
[  117.450656][ T5858]  ? NF_HOOK+0x101/0x380
[  117.452437][ T5858]  ? __pfx_NF_HOOK+0x10/0x10
[  117.454356][ T5858]  ? __pfx_dst_output+0x10/0x10
[  117.456434][ T5858]  ? icmp6_dst_alloc+0x3a5/0x420
[  117.458520][ T5858]  ? icmp6_dst_alloc+0x3a5/0x420
[  117.460555][ T5858]  mld_sendpack+0x800/0xd80
[  117.462503][ T5858]  ? mld_sendpack+0x1de/0xd80
[  117.464506][ T5858]  ? __pfx_mld_sendpack+0x10/0x10
[  117.466677][ T5858]  mld_ifc_work+0x835/0xde0
[  117.468603][ T5858]  ? _raw_spin_unlock_irq+0x23/0x50
[  117.470820][ T5858]  ? process_scheduled_works+0x9ef/0x17b0
[  117.473208][ T5858]  process_scheduled_works+0xae1/0x17b0
[  117.475499][ T5858]  ? __pfx_process_scheduled_works+0x10/0x10
[  117.478088][ T5858]  worker_thread+0x8a0/0xda0
[  117.480149][ T5858]  kthread+0x711/0x8a0
[  117.481892][ T5858]  ? __pfx_worker_thread+0x10/0x10
[  117.484065][ T5858]  ? __pfx_kthread+0x10/0x10
[  117.486014][ T5858]  ? _raw_spin_unlock_irq+0x23/0x50
[  117.488263][ T5858]  ? lockdep_hardirqs_on+0x9c/0x150
[  117.490399][ T5858]  ? __pfx_kthread+0x10/0x10
[  117.492360][ T5858]  ret_from_fork+0x3fc/0x770
[  117.494263][ T5858]  ? __pfx_ret_from_fork+0x10/0x10
[  117.496466][ T5858]  ? __switch_to_asm+0x39/0x70
[  117.498479][ T5858]  ? __switch_to_asm+0x33/0x70
[  117.500486][ T5858]  ? __pfx_kthread+0x10/0x10
[  117.502433][ T5858]  ret_from_fork_asm+0x1a/0x30
[  117.504414][ T5858]  </TASK>
[  117.505737][ T5858] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  117.508703][ T5858] CPU: 1 UID: 0 PID: 5858 Comm: kworker/1:4 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  117.513786][ T5858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  117.517888][ T5858] Workqueue: mld mld_ifc_work
[  117.519865][ T5858] Call Trace:
[  117.521297][ T5858]  <TASK>
[  117.522563][ T5858]  dump_stack_lvl+0x99/0x250
[  117.524494][ T5858]  ? __asan_memcpy+0x40/0x70
[  117.526471][ T5858]  ? __pfx_dump_stack_lvl+0x10/0x10
[  117.528681][ T5858]  ? __pfx__printk+0x10/0x10
[  117.530673][ T5858]  panic+0x2db/0x790
[  117.532052][ T5858]  ? __pfx_panic+0x10/0x10
[  117.533509][ T5858]  ? ret_from_fork_asm+0x1a/0x30
[  117.535481][ T5858]  __warn+0x31b/0x4b0
[  117.537209][ T5858]  ? __rate_control_send_low+0x5df/0x820
[  117.539538][ T5858]  ? __rate_control_send_low+0x5df/0x820
[  117.541789][ T5858]  report_bug+0x2be/0x4f0
[  117.543582][ T5858]  ? __rate_control_send_low+0x5df/0x820
[  117.545848][ T5858]  ? __rate_control_send_low+0x5df/0x820
[  117.548203][ T5858]  ? __rate_control_send_low+0x5e1/0x820
[  117.550547][ T5858]  handle_bug+0x84/0x160
[  117.552260][ T5858]  exc_invalid_op+0x1a/0x50
[  117.554141][ T5858]  asm_exc_invalid_op+0x1a/0x20
[  117.556091][ T5858] RIP: 0010:__rate_control_send_low+0x5df/0x820
[  117.558730][ T5858] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 7b ae 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 12 1b a6 f6 90 <0f> 0b 90 90 e9 73 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c
[  117.566529][ T5858] RSP: 0018:ffffc900035fe498 EFLAGS: 00010246
[  117.569065][ T5858] RAX: b384b47563061c00 RBX: 000000000000000c RCX: ffff888108bd1cc0
[  117.571912][ T5858] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  117.575180][ T5858] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  117.578429][ T5858] R10: dffffc0000000000 R11: fffffbfff1bfaa04 R12: ffff88812943eaa8
[  117.581715][ T5858] R13: 0000000000000000 R14: ffff888123680e40 R15: ffff8881236830d8
[  117.584968][ T5858]  ? __rate_control_send_low+0x5de/0x820
[  117.587292][ T5858]  rate_control_send_low+0x194/0x7a0
[  117.589510][ T5858]  rate_control_get_rate+0x20b/0x5d0
[  117.591681][ T5858]  ieee80211_tx_h_rate_ctrl+0xb32/0x1780
[  117.594084][ T5858]  ? ieee80211_tx+0x297/0x420
[  117.596078][ T5858]  ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10
[  117.598656][ T5858]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  117.601271][ T5858]  invoke_tx_handlers_late+0xb6/0x1820
[  117.603576][ T5858]  ? ieee80211_tx_h_select_key+0xc72/0x1900
[  117.606090][ T5858]  ieee80211_tx_dequeue+0x3068/0x4340
[  117.608419][ T5858]  ? __pfx_ieee80211_tx_dequeue+0x10/0x10
[  117.610816][ T5858]  ? __local_bh_enable_ip+0x12d/0x1c0
[  117.613145][ T5858]  ieee80211_handle_wake_tx_queue+0x125/0x2a0
[  117.615672][ T5858]  ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10
[  117.618371][ T5858]  ? __local_bh_enable_ip+0x12d/0x1c0
[  117.620602][ T5858]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  117.622928][ T5858]  ? do_raw_spin_unlock+0x4d/0x240
[  117.625005][ T5858]  ieee80211_queue_skb+0x19e8/0x2180
[  117.627229][ T5858]  ieee80211_tx+0x297/0x420
[  117.629098][ T5858]  ? __pfx_ieee80211_tx+0x10/0x10
[  117.631251][ T5858]  ? ieee80211_xmit+0x315/0x400
[  117.633290][ T5858]  __ieee80211_subif_start_xmit+0xc49/0x1500
[  117.635725][ T5858]  ? __ieee80211_subif_start_xmit+0x2a6/0x1500
[  117.638262][ T5858]  ? __pfx___ieee80211_subif_start_xmit+0x10/0x10
[  117.640881][ T5858]  ? skb_network_protocol+0x508/0x760
[  117.643098][ T5858]  ? ieee80211_multicast_to_unicast+0x19c/0x320
[  117.645634][ T5858]  ieee80211_subif_start_xmit+0xe0/0x510
[  117.647960][ T5858]  ? __pfx_ieee80211_subif_start_xmit+0x10/0x10
[  117.650514][ T5858]  ? __lock_acquire+0xab9/0xd20
[  117.652563][ T5858]  dev_hard_start_xmit+0x2d7/0x830
[  117.654745][ T5858]  __dev_queue_xmit+0x1adf/0x3a70
[  117.656806][ T5858]  ? register_lock_class+0x51/0x320
[  117.659067][ T5858]  ? __dev_queue_xmit+0x27e/0x3a70
[  117.661105][ T5858]  ? __pfx___dev_queue_xmit+0x10/0x10
[  117.663144][ T5858]  ? read_seqbegin+0x122/0x250
[  117.664932][ T5858]  ? neigh_resolve_output+0x438/0x750
[  117.667176][ T5858]  ? lockdep_hardirqs_on+0x9c/0x150
[  117.669331][ T5858]  ? read_seqbegin+0x1ac/0x250
[  117.671360][ T5858]  ? __pfx_read_seqbegin+0x10/0x10
[  117.673102][ T5858]  ? __local_bh_enable_ip+0x12d/0x1c0
[  117.674805][ T5858]  ? eth_header+0x11b/0x200
[  117.676272][ T5858]  ? __asan_memcpy+0x40/0x70
[  117.677777][ T5858]  ip6_finish_output2+0x11fe/0x16a0
[  117.679835][ T5858]  ? ip6_finish_output2+0x701/0x16a0
[  117.681561][ T5858]  ? __pfx_ip6_finish_output2+0x10/0x10
[  117.683359][ T5858]  ? ip6_mtu+0x7d/0x3f0
[  117.684719][ T5858]  ? ip6_mtu+0x7d/0x3f0
[  117.686160][ T5858]  ip6_finish_output+0x234/0x7d0
[  117.687756][ T5858]  NF_HOOK+0x9e/0x380
[  117.689355][ T5858]  ? NF_HOOK+0x101/0x380
[  117.691152][ T5858]  ? __pfx_NF_HOOK+0x10/0x10
[  117.692684][ T5858]  ? __pfx_dst_output+0x10/0x10
[  117.694330][ T5858]  ? icmp6_dst_alloc+0x3a5/0x420
[  117.695919][ T5858]  ? icmp6_dst_alloc+0x3a5/0x420
[  117.697628][ T5858]  mld_sendpack+0x800/0xd80
[  117.699214][ T5858]  ? mld_sendpack+0x1de/0xd80
[  117.700743][ T5858]  ? __pfx_mld_sendpack+0x10/0x10
[  117.702425][ T5858]  mld_ifc_work+0x835/0xde0
[  117.703884][ T5858]  ? _raw_spin_unlock_irq+0x23/0x50
[  117.705579][ T5858]  ? process_scheduled_works+0x9ef/0x17b0
[  117.707530][ T5858]  process_scheduled_works+0xae1/0x17b0
[  117.709656][ T5858]  ? __pfx_process_scheduled_works+0x10/0x10
[  117.712046][ T5858]  worker_thread+0x8a0/0xda0
[  117.713633][ T5858]  kthread+0x711/0x8a0
[  117.714993][ T5858]  ? __pfx_worker_thread+0x10/0x10
[  117.716630][ T5858]  ? __pfx_kthread+0x10/0x10
[  117.718147][ T5858]  ? _raw_spin_unlock_irq+0x23/0x50
[  117.720100][ T5858]  ? lockdep_hardirqs_on+0x9c/0x150
[  117.721777][ T5858]  ? __pfx_kthread+0x10/0x10
[  117.723289][ T5858]  ret_from_fork+0x3fc/0x770
[  117.724781][ T5858]  ? __pfx_ret_from_fork+0x10/0x10
[  117.726480][ T5858]  ? __switch_to_asm+0x39/0x70
[  117.728006][ T5858]  ? __switch_to_asm+0x33/0x70
[  117.729822][ T5858]  ? __pfx_kthread+0x10/0x10
[  117.731777][ T5858]  ret_from_fork_asm+0x1a/0x30
[  117.733644][ T5858]  </TASK>
[  117.735283][ T5858] Kernel Offset: disabled
[  117.736711][ T5858] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:43:34  Registers:
info registers vcpu 0

CPU#0
RAX=a4ba08d2a2313300 RBX=ffffffff81974d58 RCX=a4ba08d2a2313300 RDX=0000000000000001
RSI=ffffffff8d9822d0 RDI=ffffffff8be28d40 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa10cf0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b66b4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8650000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2804c9 CR3=00000000275a0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fd325011c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000003a RBX=000000000000003a RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900035fdc30
R8 =ffff888107500237 R9 =1ffff11020ea0046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48e9 R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000040000 CR3=00000000275a0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fd325011c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
