last executing test programs:

4.099658896s ago: executing program 0 (id=55):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e)
setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000000)=0x80000000, 0x4)
sendto$unix(r1, 0x0, 0x803e, 0x0, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x648, 0x1b8, 0x0, 0x2b8, 0x1b8, 0x400, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [0xffffff], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x0, 0x4a}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a8)

4.092708146s ago: executing program 0 (id=56):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="07000000050000000600000000000000d8220000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000ffffffff0240000000000000000000000000247e2f9ce9de24832d456e"], 0x50)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r0, 0xc, 0x1, 0x1, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0), &(0x7f0000000100)=[0x0, 0x0]}, 0x40)
r1 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000), 0x4)
sendmsg$kcm(r1, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x24004059)
close(r1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x16, 0x2}, {0xffff, 0xb}, {0x0, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x2c}}, 0x4000090)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000340)={'vxcan0\x00', <r2=>0x0})
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r7, @ANYBLOB="080003"], 0x44}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@getchain={0x34, 0x66, 0x4, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xffff, 0xf}, {0x0, 0x8}, {0x7, 0x4}}, [{0x8, 0xb, 0x1d98ddb0}, {0x8, 0xb, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8401)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r9=>0x0})
r10 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000380)={'team0\x00', <r11=>0x0})
r12 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r13=>0x0})
bind$packet(r12, &(0x7f0000000300)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @remote}, 0x14)
r14 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r14, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r13, {}, {0x2, 0xffe0}, {0x13}}}, 0x24}}, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000400)=0x14)
r16 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r16, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r17=>0x0})
bind$can_raw(r16, &(0x7f00000001c0)={0x1d, r17}, 0x10)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="68040000", @ANYRES16=0x0, @ANYBLOB="000128bd7000fbdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="b80102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700ffffffff40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400f7ffffff08000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000002000008000600", @ANYRES32=r2, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400d800000008000600", @ANYRES32=r7, @ANYBLOB="0800da59", @ANYRES32=r9, @ANYBLOB="200102803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400060000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r13, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004008400000008000100", @ANYRES32=r15, @ANYBLOB="6401028074000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000004400040009000b0605000000a27145030004000009000408ca5e960c070005803b9000000200060401000000050001060b0000000200450c040000002d25050a020000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r17, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b0000000800040099aa000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400a708000038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040008000000"], 0x468}, 0x1, 0x0, 0x0, 0x20000022}, 0x40014)

1.470352067s ago: executing program 1 (id=84):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000380)={{0x6, @default, 0xa}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="af", 0x1}], 0x1}}], 0x1, 0x4040005)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48)
listen(r0, 0x1ad72f7)
accept4(r0, 0x0, 0x0, 0x80000)
r3 = accept4$netrom(r0, 0x0, 0x0, 0x80000)
writev(r3, &(0x7f00000001c0), 0x7)
socket(0x10, 0x3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
listen(r4, 0x3)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='pimreg1\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045000028000000000006907864010101ac1414aa00004e21", @ANYRES16=r4, @ANYRES32=0x41424344, @ANYRESDEC], 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000030000008500000041000000a9010000010000009500"/40], &(0x7f0000000000)='GPL\x00', 0x12, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x2001008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
close(r6)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="08000000000000000000000000009d60eaa601bd964684207ff1c3aa0000000000002b6f97eaf8f318797de2393192f09ace7afa33ea434aee39a5ad0f9afb4395635fcc3cf55459b1b4a5f828d8460908fa4eac53ee0dace87076ce0189a23fc8d2123127486cb6dedb455ea31504f0f395403a", @ANYRES32=0x0, @ANYRES64=r6, @ANYBLOB="00000000000000000000000000000000004b918a591d33478688cccb83b74902b9726febe00debfdc1fb88b37a1d946e1b2a66e7737ba5928f3c7a247b20c5afb53ce89d548aff4e4ac1a9c1358029e688e8c472e58713c6c94ad4922d5c3bda5c12ccffe600000000007fe6490ad8faa2c8c8a686d850f7d7a91c7c10239d835d3672fe632cc00f908feaddac3f0f6f244d2f3d4c38567c2a6824cb401193f683886f7b3cc10769d43e95107520ff55ffaf93f82e5aca907adcbca605cf28bf9d212b8fed674c0a6ca6ffef569f91274239db1cc7a7f0b7f3fa1dcbc911b0"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940))
pipe(0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

1.023572933s ago: executing program 0 (id=91):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
close(r2)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xa2, &(0x7f0000000040)='lg\x02o!\xf3\x1f\xde\xe6\xee\x8eQ\xcf\xe91\"RX\x9ak\x8f\xbbOd/T\xff\x8c\xbf\x8a)g\x19L\x84D\x90[\xc4\x17p\x90f\x14M4\xff\xca\xafR\xe2\xdb\xa1R\xa1\xbc\xef\x9f\x0e\x8b\x98-\x9er9N\xf2\x89\x01 \xb8\xaa\xeb\xe0`i\xcdU|uC\xfbDL\xa3sh\xa7~\x17P\xa0MS\x992\x9b\xf4\xceGw>VF\"\xaf\xe2y\xee\x06KA\x12\xde\xbd:\xb0\"\xea\xd0\xfbS0\xad\x8e\x1fYj\xe5\xb4;\xfa(b\\\x9c\x96\xe2\xbe\xfbw\xeb\x8b\xb4I0Z\xcby\xf1a>\xe0k\x17\xae\xdd\xb5\xfc\b\xd4N'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r4, 0x0, 0x10, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141400}}, 0x1c)

917.331963ms ago: executing program 0 (id=92):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) (async, rerun: 32)
r3 = accept4(r2, 0x0, 0x0, 0x0) (rerun: 32)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async)
readv(r3, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1)
recvmmsg(r3, &(0x7f0000002440), 0x211eedb55b6c795, 0x0, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000080)=@ethtool_cmd={0xa, 0x0, 0x3, 0xfffe, 0xff, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x20000000, 0x7883, 0x0, 0x1, 0x1, 0x6162b9dd, [0x0, 0x3]}}) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, 0x0, 0x0) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, 0x0, 0x0) (async, rerun: 64)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64)
listen(r5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e20, @rand_addr=0x64010101}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ff00"}, 0xd8)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000000)=0x9, 0xe7) (async)
listen(r7, 0x0) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async)
listen(0xffffffffffffffff, 0x0) (async)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r8, 0x0) (async, rerun: 64)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 64)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) (async)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
socket$inet(0x2, 0x2, 0x1)

849.104871ms ago: executing program 0 (id=93):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0), 0x4)
setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0)=0x6, 0x4)
close(0xffffffffffffffff)
syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x840000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="80000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c00028005000100000000002400038014000180080001000000000008000200ac1414000c0002800500010000000000240001800c00028005d7160a880000001400018008000100640101"], 0x80}}, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000007c0)={'batadv_slave_1\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000d1ffffffff1801ece1", @ANYRES16=r4, @ANYBLOB="010025bd7000fddbdf250600000014000180080003000600000008000100", @ANYRES32=r5, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x8094}, 0x90)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='tasks\x00', 0x2, 0x0)
pipe(&(0x7f00000001c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
writev(r7, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
splice(r9, 0x0, r10, 0x0, 0xf3a, 0x0)
write$cgroup_pid(r10, &(0x7f0000000000), 0xffffff98)
splice(r6, 0x0, r6, 0x0, 0x5bdab155, 0x0)
write(r8, 0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0xfffffffffffffffd)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

657.271362ms ago: executing program 2 (id=95):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) (async, rerun: 32)
r1 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'fo\x00', 0xc, 0x81, 0x49}, {@remote, 0x4e26, 0x0, 0xc7, 0xbde5, 0x12d5c}}, 0x44) (async)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a0080"], 0x1c}}, 0x0) (async)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x9) (async)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) (async)
close(r0)
r3 = socket$netlink(0x10, 0x3, 0x0) (async)
r4 = socket$packet(0x11, 0x2, 0x300)
getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140))
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000001000010800000090000000000000000027d53ba8ee5e256a8f8bf4d87b93a00c2a08cd3565da0a01000080201386414fecec294eee3dcf00f48b914af4f5767fd495e8", @ANYRES32=r5, @ANYBLOB="000000000000000014001a80100002800c0001800800000000000000"], 0x34}}, 0x0)
setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x8, 0x8, @vifc_lcl_ifindex=r5, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async, rerun: 64)
r6 = socket(0x10, 0x803, 0x0) (rerun: 64)
sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r7, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r7], 0x40}}, 0x0)
sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x439, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x9}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@deltclass={0x80, 0x29, 0x200, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xb, 0xb}, {0xb, 0x5}, {0x1, 0x3}}, [@tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x0, 0x9}}, @TCA_RATE={0x6, 0x5, {0x9f, 0x4}}, @tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0x9}}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_tbf={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x40004}, 0x40)

558.63046ms ago: executing program 1 (id=96):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x9, 0x0, 0x0, 0xa, 0x20}, {0xfffffffffffffffc, 0x5, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff57a}, {0x0, 0x0, 0x0, 0x2}, 0xb}, {{@in=@local, 0x0, 0x32}, 0x0, @in=@broadcast, 0x6, 0x3, 0x1, 0x0, 0xf000000}}, 0xe8) (async)
listen(r0, 0xffffeffd)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000280000000000069078000000000000000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="501000745ac5a989"], 0x0)

558.276169ms ago: executing program 2 (id=97):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10)
setsockopt$inet_tcp_buf(r0, 0x6, 0x19, &(0x7f00000001c0)="4d177824e46aaee8fb4df18df7b3a1443069b85b0f3d2d36812cdde39ae8abda6e9829ab5b1fb44d6ebaf8eb5a7f116ea7bca577631973a697c7c5da16991bab555a65f9807b17225646919e1e32684fcb0c8cfcba710cf9eddc5dfac85da474c6329e2bb099707567", 0xfffffffffffffe06)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0100f4ff05000000ffff9d3eef8b834c4773ecc11ed0a2e5e2a581ced6f826310000", @ANYRES32=0x0, @ANYBLOB="05030200000000001c0012800b0001006d616373656300000c00028005000d0009000000"], 0x3c}}, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100))

508.828055ms ago: executing program 1 (id=98):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r0) (async)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000040)=r0, 0x43)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="b00000001000010000000000000000000000000a20000000000a010300000000000000000104fb5d6dca60909e4293e43a000001090001"], 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async)
unshare(0x68040200) (async)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, r0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) (async)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async)
sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) (async)
shutdown(r5, 0x1) (async, rerun: 64)
syz_init_net_socket$rose(0xb, 0x5, 0x0) (rerun: 64)

505.264143ms ago: executing program 2 (id=99):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@gettaction={0x3c, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7}]}, 0x3c}}, 0x48084) (async, rerun: 32)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) (async, rerun: 32)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) (async, rerun: 32)
unshare(0xc040480) (async, rerun: 32)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)="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", 0x259}], 0x1, 0x0, 0x0, 0x841}, 0x4008010) (async)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r3, 0x9b, &(0x7f0000000580)}, 0x10) (async)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r4, 0x5133c4bf67cd92a7}, 0x38)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x972c) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x11, r6, 0x0) (async)
connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10)
r7 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r7, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) (async)
setsockopt$sock_attach_bpf(r7, 0x1, 0x9, &(0x7f0000000080), 0x4) (async, rerun: 32)
close(0x3) (rerun: 32)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f00000003c0))

504.518131ms ago: executing program 1 (id=100):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$inet6_sctp(0xa, 0x0, 0x84)
setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711216000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
sendmmsg$inet6(r1, &(0x7f0000000000)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local, 0x2}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000180)="ea", 0x1}], 0x1}}], 0x1, 0x200100c0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x17, 0x0, &(0x7f0000000e80))
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2)
sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x68, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0xba4, @media='udp\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20008045}, 0x80)

439.338373ms ago: executing program 2 (id=101):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)
r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0xf, 0x1ff, 0x600000, 0x4, 0xdf, 0x2}, &(0x7f00000002c0)={0x3, 0x8000, 0x3, 0xfffffffffffffffb, 0x4d, 0x1, 0x8000, 0x3}, &(0x7f0000000300)={0x7, 0x6, 0x1, 0xd, 0x6, 0x7ff, 0x9, 0x6}, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000440)={&(0x7f0000000400)={[0x7]}, 0x8})
getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8)
sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x28}}, 0x802)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0xc61, 0x4, 0x10200, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@setneightbl={0x1c, 0x31, 0x1, 0x0, 0x0, {}, [@NDTA_NAME={0x4, 0x1, ':,{\x00'}]}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_DEL_KEY(r8, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000180)={0x3c, r7, 0x1, 0x70bd2e, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "727afffa97"}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x818}, 0x4000)
r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r12 = openat$cgroup_ro(r11, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
readv(r12, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="9d5ab229d99f6a8e10bb5fd52316e117eee892d86a067b4ae693515c2f15508e4d2d7c3d8a0ca7d2f3469320bce3097147e2e1816fe001f04afec25f5b9aaa55646b232a465b2c0deb426a084a2220ab94ff8be945f2a80ac0b0d740961893e41b80741213be111e59de4d56b3f64fb98fbf7b1153833e89545ca0f5b265", 0x7e)
socket$xdp(0x2c, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r0, &(0x7f0000019440), 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00'})

374.470863ms ago: executing program 1 (id=102):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r1)
sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_APDU={0x4}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x4000000)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="0e", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="ad", 0x1}], 0x1, &(0x7f0000000d40)=ANY=[@ANYBLOB="10"], 0x10}}], 0x2, 0x4000854)

366.295483ms ago: executing program 2 (id=103):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xb)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r2, 0x0, 0x20, &(0x7f00000003c0)="170000000000020000ffbe8c", 0xc)
close(r1)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, <r4=>0x0}, 0x8)
r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000140)={0xa, 0xe22}, 0x1c)
listen(r6, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x4)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r8, 0x0)
setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c)
bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r9, 0x0)
writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r5, r3, 0x4, r3}, 0x10)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30)
setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000380)=0x1, 0x4)
close(r0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)

365.622801ms ago: executing program 1 (id=104):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYBLOB="a60525ec1e"], 0x9)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x6}, 0x4)
getsockopt$packet_int(r1, 0x107, 0x12, 0x0, &(0x7f0000000080))
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000000)=0x100)
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="00000000000300", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8015}, 0x4800)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="faffd200000086d00517", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="01000000020000000500"/28], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a20000009500000000000000"], 0x0}, 0x90)
pipe(&(0x7f00000002c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
vmsplice(r7, &(0x7f0000000180), 0x2ae, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@o_path={&(0x7f00000000c0)='./file0\x00', r6, 0x4000, r7}, 0x18)
r8 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xa, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x5}, @TCA_CODEL_TARGET={0x8, 0x1, 0xc}]}}]}, 0x44}}, 0x4000000)
r10 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000040)=0x91, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @mcast2, 0x10001}, 0x1c)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40000)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)

275.527351ms ago: executing program 2 (id=105):
socket$inet_smc(0x2b, 0x1, 0x0) (async)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0)
socket(0x40000000015, 0x5, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getroute={0x1c, 0x1a, 0x10, 0x70bd26, 0x25dfdbff, {0x2, 0x80, 0x0, 0xd, 0xfc, 0x3, 0x0, 0xb, 0x200}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000)
getsockname$packet(r3, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) (async)
getsockname$packet(r3, &(0x7f00000005c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000ae33829e0e04d79253b8ab7f9c717f9f3c49e6ae2dad2ce79495724819a984ea96af2118c5ca6190a1e5dbf17768447e360717555a1f747ebacf5ce126be0398ebb68db376bfd571c700b56b765a6850e4b0ebca"], 0x50) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000ae33829e0e04d79253b8ab7f9c717f9f3c49e6ae2dad2ce79495724819a984ea96af2118c5ca6190a1e5dbf17768447e360717555a1f747ebacf5ce126be0398ebb68db376bfd571c700b56b765a6850e4b0ebca"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32=r4, @ANYBLOB="890c04000000000020001280080001006774700014000280050005"], 0x40}}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32=r4, @ANYBLOB="890c04000000000020001280080001006774700014000280050005"], 0x40}}, 0x0)
sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)

0s ago: executing program 0 (id=106):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async)
unshare(0x6a060000) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000006bca795c82d8ae7f36332b4cb8c2492eb9a4d64456a5b5668eac738c0c86b34e008b68f4165fa4a6562241ca7b25b5c449014cc42e4c65f97fba8b4d4d067f0a73eec3edf7ead910d1c629189d98f5699e01646fca17985fdfb8d15f56faccde12b74be489276caa53f8ecaffef9bb5e2a2bd08abf293461c0eec93da60017cfd5e436d85a39fac64fb7e3bbbd35c1b414fa29cf54ba1f922ebd9ac90b94c495bc1b9e20b15b2e547aa3f9c545413801ed46204ef3dc9a8a9d49"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000031daa00e0930559e49e80cc8f016272ba4d539e2248aa1bfe6955cdf972ec9bb5b034ff8d53086ac5f8ae37797f69ebb49b75c542a16421cc57d98f7c1f707f44033fb5a595d8ba3924df50d08ef8f2787d39a13e4e42145241e9877b5dd26641b605f20acb01de0e2a4c2520fca5f5f25413690920cb", @ANYRES16=r3, @ANYBLOB="010000000000000000002c0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x8040) (async)
unshare(0xa040000)
unshare(0x26050400) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0x1, <r4=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000280)='%ps    \x00'}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x0, 0x21, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffd}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx_val={0x18, 0xe, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xffffffff}, @func, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x2, 0x1c, &(0x7f0000000380)=""/28, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000600)=[r4, r4, 0xffffffffffffffff, r4, r4, r4, r4], &(0x7f00000007c0)=[{0x0, 0x1, 0xb}, {0x4, 0x5, 0xd, 0x6}, {0x5, 0x4, 0xf, 0x7}, {0x2, 0x1, 0x3, 0xc}, {0x3, 0x4, 0x2, 0x7}, {0x5, 0x5, 0xd, 0xa}], 0x10, 0x2}, 0x94) (async)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@map=r4, r1, 0x5, 0x0, 0x0, @void, @value=r1}, 0x20) (async)
r5 = socket(0x8, 0x3, 0x0)
ioctl$sock_netrom_SIOCADDRT(r5, 0x6180, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$inet6(0xa, 0x3, 0x3a)
getsockopt$inet6_mreq(r7, 0x29, 0x7, 0x0, &(0x7f0000000100))
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_ADDRESS={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0)
r9 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x6c, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x16747c6d2baaace}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x1}, @TCA_TBF_PRATE64={0xc, 0x5, 0x28c19c4be41a64e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x7, 0x2, 0x5, 0x153}, {0x0, 0x1, 0x1, 0x2, 0x3af4, 0xfffffffe}, 0xc76, 0xff, 0x13cb}}]}}]}, 0x6c}}, 0x0) (async)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r10, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r11, 0x0, 0xd}, 0x18) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FRA_SRC={0x14, 0x2, @private2}]}, 0x30}}, 0x0) (async)
r12 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:4335' (ED25519) to the list of known hosts.
syzkaller login: [   56.034443][ T5811] cgroup: Unknown subsys name 'net'
[   56.186424][ T5811] cgroup: Unknown subsys name 'cpuset'
[   56.192399][ T5811] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.078631][ T5811] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.630752][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.634851][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.638644][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.643281][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.647017][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.667114][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.670916][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.674234][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.679791][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.683918][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.801183][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.804606][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.807448][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.811544][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.816614][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.966615][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   63.016702][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   63.122872][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.126572][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.129818][ T5828] bridge_slave_0: entered allmulticast mode
[   63.134447][ T5828] bridge_slave_0: entered promiscuous mode
[   63.140364][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.144439][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.147405][ T5828] bridge_slave_1: entered allmulticast mode
[   63.152176][ T5828] bridge_slave_1: entered promiscuous mode
[   63.196017][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.198986][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.202723][ T5832] bridge_slave_0: entered allmulticast mode
[   63.205556][ T5832] bridge_slave_0: entered promiscuous mode
[   63.229674][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.232537][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.234984][ T5832] bridge_slave_1: entered allmulticast mode
[   63.238159][ T5832] bridge_slave_1: entered promiscuous mode
[   63.268745][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.293354][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.298314][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.313558][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.385070][ T5828] team0: Port device team_slave_0 added
[   63.404792][ T5832] team0: Port device team_slave_0 added
[   63.410051][ T5828] team0: Port device team_slave_1 added
[   63.414226][ T5832] team0: Port device team_slave_1 added
[   63.470538][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.473461][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.486534][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.493211][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   63.499649][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.502574][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.512876][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.517937][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.520609][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.531596][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.550840][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.553605][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.564437][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.671422][ T5828] hsr_slave_0: entered promiscuous mode
[   63.674844][ T5828] hsr_slave_1: entered promiscuous mode
[   63.721604][ T5832] hsr_slave_0: entered promiscuous mode
[   63.724181][ T5832] hsr_slave_1: entered promiscuous mode
[   63.726458][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.729059][ T5832] Cannot create hsr debugfs directory
[   63.749446][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.752939][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.755157][ T5837] bridge_slave_0: entered allmulticast mode
[   63.757914][ T5837] bridge_slave_0: entered promiscuous mode
[   63.769696][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.773428][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.775702][ T5837] bridge_slave_1: entered allmulticast mode
[   63.778500][ T5837] bridge_slave_1: entered promiscuous mode
[   63.836684][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.848313][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.915585][ T5837] team0: Port device team_slave_0 added
[   63.939338][ T5837] team0: Port device team_slave_1 added
[   63.996794][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.998981][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.007792][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.013449][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.015586][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.023303][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.078394][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.089965][ T5837] hsr_slave_0: entered promiscuous mode
[   64.093648][ T5837] hsr_slave_1: entered promiscuous mode
[   64.095790][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.098050][ T5837] Cannot create hsr debugfs directory
[   64.101610][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.136831][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.159226][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.233801][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.245263][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.254658][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.265929][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.388061][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.397017][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.410076][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.422581][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.471467][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.478983][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.519255][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   64.523556][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   64.534372][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.536800][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.555141][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.558064][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.566415][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.569306][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.580024][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.582639][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.618893][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.660552][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   64.689257][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.692185][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.712214][ T5834] Bluetooth: hci1: command tx timeout
[   64.712239][   T54] Bluetooth: hci0: command tx timeout
[   64.715127][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.719264][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.886263][   T54] Bluetooth: hci2: command tx timeout
[   64.895870][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.934768][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.955381][ T5837] veth0_vlan: entered promiscuous mode
[   64.962963][ T5837] veth1_vlan: entered promiscuous mode
[   64.979360][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.987524][ T5837] veth0_macvtap: entered promiscuous mode
[   64.996263][ T5837] veth1_macvtap: entered promiscuous mode
[   65.017062][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.023926][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.035301][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.038140][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.043559][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.046198][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.084590][ T5832] veth0_vlan: entered promiscuous mode
[   65.088031][ T5828] veth0_vlan: entered promiscuous mode
[   65.107723][ T5832] veth1_vlan: entered promiscuous mode
[   65.113357][ T5828] veth1_vlan: entered promiscuous mode
[   65.165958][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.168575][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.171240][ T5828] veth0_macvtap: entered promiscuous mode
[   65.174264][ T5828] veth1_macvtap: entered promiscuous mode
[   65.207115][ T5832] veth0_macvtap: entered promiscuous mode
[   65.218801][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.219856][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.226389][ T5832] veth1_macvtap: entered promiscuous mode
[   65.226558][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.236262][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.259156][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.264992][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.267973][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.274866][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.278167][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.289485][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.290193][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.315274][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.318168][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.323188][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.326257][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.400955][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.404777][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.485320][ T3125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.488082][ T3125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.525056][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.527577][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.579182][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.587103][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.939026][ T5907] Cannot find set identified by id 0 to match
[   65.970527][ T5909] netlink: 'syz.1.6': attribute type 1 has an invalid length.
[   66.325199][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.349912][ T5928] bond0: (slave rose0): Enslaving as an active interface with an up link
[   66.418102][ T5937] xt_CT: You must specify a L4 protocol and not use inversions on it
[   66.544005][ T5937] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.791697][   T54] Bluetooth: hci1: command tx timeout
[   66.800995][   T54] Bluetooth: hci0: command tx timeout
[   66.950892][   T54] Bluetooth: hci2: command tx timeout
[   67.537912][    C0] vcan0: j1939_tp_txtimer: 0xffff88802f6e0c00: tx aborted with unknown reason: -2
[   67.541724][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802f6e1c00: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250)
[   67.548323][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802f6e0c00: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250)
[   67.554714][ T5980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'.
[   67.602758][ T5986] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component
[   67.622993][ T5987] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19'.
[   67.725185][ T5937] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   67.859837][ T5998] netlink: 'syz.2.22': attribute type 72 has an invalid length.
[   67.864319][ T5998] netlink: 1016 bytes leftover after parsing attributes in process `syz.2.22'.
[   68.166336][ T6007] netlink: zone id is out of range
[   68.176999][ T6007] netlink: zone id is out of range
[   68.179056][ T6007] netlink: zone id is out of range
[   68.272703][ T6007] netlink: zone id is out of range
[   68.287456][ T6007] netlink: zone id is out of range
[   68.298070][ T6007] netlink: zone id is out of range
[   68.307446][ T6007] netlink: zone id is out of range
[   68.320864][ T6007] netlink: zone id is out of range
[   68.329558][ T6007] netlink: zone id is out of range
[   68.339858][ T6007] netlink: zone id is out of range
[   68.461742][ T6012] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.603007][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.31'.
[   68.606436][ T6022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.31'.
[   68.634849][    T9] IPVS: starting estimator thread 0...
[   68.645856][ T6022] syz.2.31 (6022) used greatest stack depth: 20568 bytes left
[   68.687754][ T6027] netlink: 48 bytes leftover after parsing attributes in process `syz.2.32'.
[   68.741964][ T6025] IPVS: using max 62 ests per chain, 148800 per kthread
[   68.746176][ T5937] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.808508][ T5937] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   68.872272][   T54] Bluetooth: hci0: command tx timeout
[   68.874034][   T54] Bluetooth: hci1: command tx timeout
[   68.905183][ T6036] syzkaller1: entered promiscuous mode
[   68.907302][ T6036] syzkaller1: entered allmulticast mode
[   68.926060][ T5937] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.944034][ T5937] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.977239][ T5937] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.990841][ T5937] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.031604][ T5834] Bluetooth: hci2: command tx timeout
[   69.129825][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.38'.
[   69.143300][ T6044] netlink: 'syz.2.38': attribute type 5 has an invalid length.
[   69.146946][ T6044] netlink: 20 bytes leftover after parsing attributes in process `syz.2.38'.
[   69.169403][ T6044] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   69.179650][ T6044] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   69.183835][ T6044] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   69.186724][ T6044] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[   69.189825][ T6044] geneve2: entered promiscuous mode
[   69.191970][ T6044] geneve2: entered allmulticast mode
[   69.195704][ T6048] netlink: 'syz.2.38': attribute type 5 has an invalid length.
[   69.199395][ T6048] netlink: 'syz.2.38': attribute type 5 has an invalid length.
[   69.204923][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.38'.
[   69.208404][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.38'.
[   69.393762][ T6064] lo speed is unknown, defaulting to 1000
[   69.396330][ T6064] lo speed is unknown, defaulting to 1000
[   69.442942][ T6064] lo speed is unknown, defaulting to 1000
[   69.459244][ T6064] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   69.477336][ T6064] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   69.504542][ T6064] lo speed is unknown, defaulting to 1000
[   69.507398][ T6064] lo speed is unknown, defaulting to 1000
[   69.510128][ T6064] lo speed is unknown, defaulting to 1000
[   69.517170][ T6068] Driver unsupported XDP return value 0 on prog  (id 25) dev N/A, expect packet loss!
[   69.523186][ T6060] Zero length message leads to an empty skb
[   69.533753][ T6064] lo speed is unknown, defaulting to 1000
[   69.603691][ T6075] veth0_to_bridge: entered promiscuous mode
[   69.928729][ T6096] netlink: 'syz.1.54': attribute type 29 has an invalid length.
[   70.226010][ T6101] xt_TPROXY: Can be used only with -p tcp or -p udp
[   70.284612][ T6103] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.350160][ T6070] veth0_to_bridge: left promiscuous mode
[   70.468101][ T6106] lo speed is unknown, defaulting to 1000
[   70.512119][ T6106] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) !
[   70.655390][ T6113] xt_ecn: cannot match TCP bits for non-tcp packets
[   70.805773][ T6116] netlink: 'syz.2.59': attribute type 39 has an invalid length.
[   70.811730][ T6116] netlink: 'syz.2.59': attribute type 7 has an invalid length.
[   70.961354][ T5834] Bluetooth: hci1: command tx timeout
[   70.963700][ T5834] Bluetooth: hci0: command tx timeout
[   71.111359][ T5834] Bluetooth: hci2: command tx timeout
[   71.170158][ T6142] vxcan1: entered allmulticast mode
[   71.177526][ T6142] vxcan1: left allmulticast mode
[   71.195846][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.199055][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.243900][ T6142] raw_sendmsg: syz.2.67 forgot to set AF_INET. Fix it!
[   71.608952][ T6162] bond0: option arp_validate: invalid value (18446744073491447809)
[   71.609256][ T5854] bond0: (slave bond_slave_0): interface is now down
[   71.615379][ T5854] bond0: (slave bond_slave_1): interface is now down
[   71.623239][ T5854] bond0: now running without any active interface!
[   71.979391][ T6184] veth0_to_bridge: entered promiscuous mode
[   72.139027][ T6192] lo speed is unknown, defaulting to 1000
[   72.197018][ T6194] lo speed is unknown, defaulting to 1000
[   72.665682][ T6206] lo speed is unknown, defaulting to 1000
[   72.693822][ T6180] veth0_to_bridge: left promiscuous mode
[   72.739659][ T6207] lo speed is unknown, defaulting to 1000
[   72.789600][ T6210] netlink: 'syz.2.82': attribute type 12 has an invalid length.
[   72.793127][ T6210] __nla_validate_parse: 3 callbacks suppressed
[   72.793143][ T6210] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.82'.
[   72.845690][ T6213] No such timeout policy "syz0"
[   72.988031][ T6225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.87'.
[   73.127609][ T6235] IPVS: length: 148 != 24
[   73.190990][ T5834] Bluetooth: hci2: command tx timeout
[   73.369904][ T6246] lo speed is unknown, defaulting to 1000
[   73.504221][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.93'.
[   73.718962][ T6266] IPVS: set_ctl: invalid protocol: 1 172.30.1.3:19999
[   73.817177][ T6277] netlink: 'syz.1.98': attribute type 1 has an invalid length.
[   73.819553][ T6277] netlink: 112 bytes leftover after parsing attributes in process `syz.1.98'.
[   73.914033][ T6291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.101'.
[   74.113966][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.105'.
[   74.120157][ T6302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.105'.
[   81.441130][   T10] cfg80211: failed to load regulatory.db
[   89.962270][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   89.966450][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   89.969895][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   89.974649][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   89.978282][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   90.097019][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   90.100028][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   90.103384][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   90.106085][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   90.108715][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   90.138878][   T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   90.143223][   T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   90.146104][   T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   90.149369][   T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   90.153010][   T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   92.070982][   T54] Bluetooth: hci3: command tx timeout
[   92.151062][   T54] Bluetooth: hci4: command tx timeout
[   92.231795][   T54] Bluetooth: hci5: command tx timeout
[   94.151046][   T54] Bluetooth: hci3: command tx timeout
[   94.233429][   T54] Bluetooth: hci4: command tx timeout
[   94.311015][   T54] Bluetooth: hci5: command tx timeout
[   96.231057][   T54] Bluetooth: hci3: command tx timeout
[   96.315031][   T54] Bluetooth: hci4: command tx timeout
[   96.391097][   T54] Bluetooth: hci5: command tx timeout
[   98.311169][   T54] Bluetooth: hci3: command tx timeout
[   98.394405][   T54] Bluetooth: hci4: command tx timeout
[   98.471145][   T54] Bluetooth: hci5: command tx timeout
[  150.402431][ T5834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  150.405419][ T5834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  150.408003][ T5834] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  150.411267][ T5834] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  150.413652][ T5834] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  150.468487][ T5834] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  150.471953][ T5834] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  150.474655][ T5834] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  150.477273][ T5834] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  150.480456][ T5834] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  150.543111][   T54] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  150.546547][   T54] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  150.549514][   T54] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  150.552661][   T54] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  150.555200][   T54] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  152.475341][ T5834] Bluetooth: hci6: command tx timeout
[  152.551248][ T5834] Bluetooth: hci7: command tx timeout
[  152.631054][ T5834] Bluetooth: hci8: command tx timeout
[  154.553299][ T5834] Bluetooth: hci6: command tx timeout
[  154.631108][ T5834] Bluetooth: hci7: command tx timeout
[  154.710901][ T5834] Bluetooth: hci8: command tx timeout
[  156.633354][ T5834] Bluetooth: hci6: command tx timeout
[  156.711117][ T5834] Bluetooth: hci7: command tx timeout
[  156.790955][ T5834] Bluetooth: hci8: command tx timeout
[  158.713606][ T5834] Bluetooth: hci6: command tx timeout
[  158.792227][ T5834] Bluetooth: hci7: command tx timeout
[  158.871086][ T5834] Bluetooth: hci8: command tx timeout
[  179.070706][    C1] rcu: INFO: rcu_preempt self-detected stall on CPU
[  179.073500][    C1] rcu: 	1-....: (1 GPs behind) idle=a85c/1/0x4000000000000000 softirq=16158/16160 fqs=5246
[  179.079491][    C1] rcu: 	         hardirqs   softirqs   csw/system
[  179.081982][    C1] rcu: 	 number:     5257          0            0
[  179.084512][    C1] rcu: 	cputime:      336          0        52152   ==> 52500(ms)
[  179.087592][    C1] rcu: 	(t=10502 jiffies g=9585 q=3212 ncpus=2)
[  179.090109][    C1] CPU: 1 UID: 0 PID: 6297 Comm: syz.1.104 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[  179.090125][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  179.090135][    C1] RIP: 0010:check_preemption_disabled+0x17/0x120
[  179.090157][    C1] Code: 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 48 83 ec 10 65 48 8b 05 0e fe 30 07 48 89 44 24 08 <65> 8b 05 16 fe 30 07 65 8b 0d 0b fe 30 07 f7 c1 ff ff ff 7f 74 23
[  179.090168][    C1] RSP: 0018:ffffc9000604ef28 EFLAGS: 00000286
[  179.090182][    C1] RAX: 9881f22f061aac00 RBX: 0000000000000000 RCX: ffff888021d29cc0
[  179.090191][    C1] RDX: ffff888021d29cc0 RSI: ffffffff8be29da0 RDI: ffffffff8be29d60
[  179.090200][    C1] RBP: 0000000000000001 R08: ffff888021d29cc0 R09: 0000000000000002
[  179.090207][    C1] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88802ee4c838
[  179.090215][    C1] R13: dffffc0000000000 R14: ffff888121c63000 R15: ffff88801f31a478
[  179.090223][    C1] FS:  00007f100ff116c0(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  179.090233][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  179.090247][    C1] CR2: 0000200000002008 CR3: 000000002767e000 CR4: 00000000000006f0
[  179.090275][    C1] Call Trace:
[  179.090286][    C1]  <TASK>
[  179.090299][    C1]  rcu_is_watching+0x15/0xb0
[  179.090319][    C1]  rcu_read_lock_held+0x15/0x50
[  179.090335][    C1]  qdisc_lookup_rcu+0x381/0x6d0
[  179.090357][    C1]  qdisc_tree_reduce_backlog+0x1b2/0x480
[  179.090376][    C1]  ? qdisc_tree_reduce_backlog+0x3c/0x480
[  179.090395][    C1]  codel_change+0x859/0xae0
[  179.090414][    C1]  ? is_dynamic_key+0xd6/0x1c0
[  179.090426][    C1]  ? qdisc_alloc+0x789/0xaa0
[  179.090438][    C1]  ? qdisc_create+0x12c/0xea0
[  179.090450][    C1]  ? rtnetlink_rcv_msg+0x77c/0xb70
[  179.090463][    C1]  ? netlink_rcv_skb+0x208/0x470
[  179.090477][    C1]  ? netlink_unicast+0x75c/0x8e0
[  179.090486][    C1]  ? netlink_sendmsg+0x805/0xb30
[  179.090498][    C1]  ? __sock_sendmsg+0x21c/0x270
[  179.090510][    C1]  ? ____sys_sendmsg+0x52d/0x830
[  179.090525][    C1]  ? ___sys_sendmsg+0x21f/0x2a0
[  179.090540][    C1]  ? __sys_sendmmsg+0x227/0x430
[  179.090557][    C1]  ? __pfx_codel_change+0x10/0x10
[  179.090581][    C1]  codel_init+0x1f7/0x3e0
[  179.090597][    C1]  ? __pfx_codel_init+0x10/0x10
[  179.090653][    C1]  qdisc_create+0x7ac/0xea0
[  179.090674][    C1]  tc_modify_qdisc+0x1538/0x20e0
[  179.090700][    C1]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  179.090735][    C1]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  179.090747][    C1]  rtnetlink_rcv_msg+0x77c/0xb70
[  179.090764][    C1]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  179.090778][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  179.090791][    C1]  ? ref_tracker_free+0x63a/0x7d0
[  179.090810][    C1]  ? __copy_skb_header+0xa7/0x550
[  179.090829][    C1]  ? __pfx_ref_tracker_free+0x10/0x10
[  179.090848][    C1]  ? __skb_clone+0x63/0x7a0
[  179.090869][    C1]  netlink_rcv_skb+0x208/0x470
[  179.090886][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  179.090903][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  179.090927][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  179.090942][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  179.090960][    C1]  netlink_unicast+0x75c/0x8e0
[  179.090983][    C1]  netlink_sendmsg+0x805/0xb30
[  179.091007][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  179.091025][    C1]  ? aa_sock_msg_perm+0x94/0x160
[  179.091048][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  179.091070][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  179.091086][    C1]  __sock_sendmsg+0x21c/0x270
[  179.091102][    C1]  ____sys_sendmsg+0x52d/0x830
[  179.091123][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  179.091147][    C1]  ? import_iovec+0x74/0xa0
[  179.091166][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  179.091185][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  179.091226][    C1]  ? __fget_files+0x2a/0x420
[  179.091251][    C1]  ? __fget_files+0x3a0/0x420
[  179.091274][    C1]  __sys_sendmmsg+0x227/0x430
[  179.091295][    C1]  ? __pfx___sys_sendmmsg+0x10/0x10
[  179.091311][    C1]  ? do_futex+0x333/0x420
[  179.091349][    C1]  ? __pfx___se_sys_futex+0x10/0x10
[  179.091366][    C1]  ? fd_install+0x30d/0x540
[  179.091388][    C1]  __x64_sys_sendmmsg+0xa0/0xc0
[  179.091408][    C1]  do_syscall_64+0xfa/0x3b0
[  179.091422][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  179.091443][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.091456][    C1]  ? exc_page_fault+0x9f/0xf0
[  179.091476][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.091490][    C1] RIP: 0033:0x7f100f18e929
[  179.091505][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  179.091516][    C1] RSP: 002b:00007f100ff11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  179.091531][    C1] RAX: ffffffffffffffda RBX: 00007f100f3b5fa0 RCX: 00007f100f18e929
[  179.091541][    C1] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 000000000000000a
[  179.091549][    C1] RBP: 00007f100f210b39 R08: 0000000000000000 R09: 0000000000000000
[  179.091557][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  179.091565][    C1] R13: 0000000000000000 R14: 00007f100f3b5fa0 R15: 00007ffedb9ec2b8
[  179.091583][    C1]  </TASK>

VM DIAGNOSIS:
13:45:45  Registers:
info registers vcpu 0

CPU#0
RAX=d93e9c495657a700 RBX=ffffffff81976c78 RCX=d93e9c495657a700 RDX=0000000000000001
RSI=ffffffff8d998b42 RDI=ffffffff8be29dc0 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1f3f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6f34d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000561bfbc5fe08 CR3=0000000107924000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007f851bd85d00
XMM02=126994e5000000b5 d72dc23f00000000 XMM03=5b2330afac088cef e7e1fba9d18cc9d6
XMM04=0000000000000000 000000000000000e XMM05=0000000000000000 000000000001df8a
XMM06=000055555ddaaf70 00000000000000b7 XMM07=56973d2800000000 f7f50f96e9939bd6
XMM08=cef0c7b031d0f08c 305b2d1f000000b6 XMM09=2062203061346331 3061396666666666
XMM10=6f5f74696e695f63 6e5f766461746162 XMM11=6666666666660a79 656b5f5f2e676972
XMM12=766f206220303666 6331306139666666 XMM13=79656b5f5f2e7465 6e5f74696e695f73
XMM14=3866633130613966 666666666666660a XMM15=74656e5f74696e69 5f73766f20622030
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900001e03f0
R8 =ffff888107778237 R9 =1ffff11020eef046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98ca R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f100ff116c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000002008 CR3=000000002767e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ffff000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007f100feed100 00007f100f385440 XMM05=00007f100f385458 00007f100f3854a0
XMM06=00007f100f385498 00007f100f385490 XMM07=00007f100f385488 00007f100f385480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f100f211c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
