last executing test programs:

8.511212512s ago: executing program 0 (id=271):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207bf01af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300c78e00002085000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYRES64=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x18)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x21}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x4c)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="70000000000901010000000000000000000000003c0002000c00028005000100000000002c000180140003000000000000000000000000000000000014000400ff02000000000000000000000000000108000540000000000c000480080101400000000009000100"], 0x70}}, 0x0) (async)
sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="70000000000901010000000000000000000000003c0002000c00028005000100000000002c000180140003000000000000000000000000000000000014000400ff02000000000000000000000000000108000540000000000c000480080101400000000009000100"], 0x70}}, 0x0)
socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="406b0000000000001c0012800b00010062726964676500000c00029a0500160023000000"], 0x3c}}, 0x0)
sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x4000)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x20044001}, 0x0)
unshare(0x6a040000) (async)
unshare(0x6a040000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x4}, @CTA_TIMEOUT={0x8}]}, 0x4c}}, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="68000000000101040000000000f9ffffff000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007400000000004000680"], 0x68}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) (async)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r7)

8.439619072s ago: executing program 0 (id=272):
socket$kcm(0xa, 0x2, 0x73) (async)
r0 = socket$kcm(0xa, 0x2, 0x73)
setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @local}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=[{0x10, 0x118, 0xb}], 0x10}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r2, &(0x7f0000000180)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x40)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, &(0x7f00000004c0)) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, &(0x7f00000004c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff0000000080000000850000008a00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x3f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10003}, 0x94)

8.4296826s ago: executing program 0 (id=274):
socket$l2tp(0x2, 0x2, 0x73)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x3d, &(0x7f0000000000)='cgroup\x00\x8d\f\xf3\xcd\xc6X$\x01n-Hg\x144-.\xe2\x053\xe2\xf4\xbf[\xe9\xdddU\x91\x9d,\t\x8d\xc3@\x86,\x7f\xe2Z\xe8L\x80\xdbe~c\xbc\x9b\xcf\x9b\x1cH\x95\xf3'}, 0x30) (async)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10)
socket$l2tp(0x2, 0x2, 0x73)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x3}}]}, 0x30}}, 0x0) (async, rerun: 64)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000180)=0x5, 0x4) (async, rerun: 64)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x11, 0x2, {{0x1, 0x0, 0xf5, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r2)
sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000400000014000500fc01000000000000000000000000080008000200050000000a0006"], 0x4c}}, 0x0)

8.31158499s ago: executing program 0 (id=276):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
socket$l2tp(0x2, 0x2, 0x73)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x2, 0x3, 0x2)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$can_bcm(0x1d, 0x2, 0x2)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
close(r2)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000890438000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000069b40012800c0001006d6163766c616e00140002800800010008000000062102400100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x280608c0}, 0x0)

8.213292131s ago: executing program 0 (id=278):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
syz_emit_ethernet(0x2416, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"], 0x0)
syz_80211_inject_frame(&(0x7f0000001780)=@broadcast, &(0x7f0000000700)=@data_frame={@msdu=@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x840}, @broadcast, @initial, @broadcast, {0x6, 0x5}, "", @value={0x2, 0x0, 0x3}, @value=@ver_80211n={0x0, 0x2, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @broadcast, 0xe1, "5bbe003940ec5aa44d2d170ab1631d2029ab23637ba84a2cf15174c51f4d5574590bd536e707a6e39911109eb92967d84f46777b771c365595af798eebffa8884d8741c8ae51d9e81d1248b80d86472978df1bd6bf285429bf277bad8cc0c6e8c7a489e61c8da61d105ad04002e430142fc9803aa44b3b9ba862653d6367e9807a838085517505bcd18dfe2facc7fdf6b3c85c6e5f6f09d6c28ea552eef58dafec0af338e9bf668f248ccb7488eb1dbf8ddefea044a5eea7e146a77e57de3ae6c5215b38caf2493d69e8d9771b74fa66867eb5677fed93b88b805a2b892dd059e9"}, {@device_b, @device_b, 0x2a, "0e4951ab28af499ec9445aece3a7e67b7478ac21429421f39a059f98f3ed5a1b985492453deaeb78df66"}, {@device_a, @broadcast, 0x91, "7fe83072565630208fd307e895091d3acace32cf8079fa1a4634241a05671e02f2460f51786f2d95750d29ce1dd42471b0371e9f9afb786e02d306f2c3d71e8fa4e6845885226033d560dd06661865798e3f060a941d50cf6abef72e806d4cb37e8191422cd7ec84d3907a42aa60f56e19749465dbd79ebfe3a8f346fe76dd261b2f78a46044d2d8fe809109bfab902dd0"}, {@device_b, @device_b, 0xe3, "a14c19352b010bfeca0ee4f90818d9b195e98fa91c7e60af8cc4658dfdd37712098f5b5b499db0928a3f95ee46061d5a0bbf9f8affb1e4b7c27a6cb98957db7ee49095127a7a0e733c10475f53255d84b1bdad73ec032f69ed5e7fc326fa7472d6e6c528ce75bfdc8143f34b331870bde960d84afc0bed018f5ef6b7a1292ee1c0543c82146999555c41e861abda405fe7f5e9a7faa5d2bedec3d90c2c5a5cb0a961750d2ca9603a10906c563f1fac310f6c42d404b462b0c3105f7cfe8ad1859d2c1297f38006b28a7ce021d86bf75c08e3701cbf33503956a334bb25642b543d75a5"}]}, 0x2da)
setsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000040)=0xfffffffd, 0x4)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r1, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x4e20, 0x2, @mcast1}, 0x1c)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x60, 0x10, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2784}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'syz_tun\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x9, 0x400f2a, 0x40000000}}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000084}, 0x4800)

4.221094593s ago: executing program 0 (id=278):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
syz_emit_ethernet(0x2416, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"], 0x0)
syz_80211_inject_frame(&(0x7f0000001780)=@broadcast, &(0x7f0000000700)=@data_frame={@msdu=@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x840}, @broadcast, @initial, @broadcast, {0x6, 0x5}, "", @value={0x2, 0x0, 0x3}, @value=@ver_80211n={0x0, 0x2, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @broadcast, 0xe1, "5bbe003940ec5aa44d2d170ab1631d2029ab23637ba84a2cf15174c51f4d5574590bd536e707a6e39911109eb92967d84f46777b771c365595af798eebffa8884d8741c8ae51d9e81d1248b80d86472978df1bd6bf285429bf277bad8cc0c6e8c7a489e61c8da61d105ad04002e430142fc9803aa44b3b9ba862653d6367e9807a838085517505bcd18dfe2facc7fdf6b3c85c6e5f6f09d6c28ea552eef58dafec0af338e9bf668f248ccb7488eb1dbf8ddefea044a5eea7e146a77e57de3ae6c5215b38caf2493d69e8d9771b74fa66867eb5677fed93b88b805a2b892dd059e9"}, {@device_b, @device_b, 0x2a, "0e4951ab28af499ec9445aece3a7e67b7478ac21429421f39a059f98f3ed5a1b985492453deaeb78df66"}, {@device_a, @broadcast, 0x91, "7fe83072565630208fd307e895091d3acace32cf8079fa1a4634241a05671e02f2460f51786f2d95750d29ce1dd42471b0371e9f9afb786e02d306f2c3d71e8fa4e6845885226033d560dd06661865798e3f060a941d50cf6abef72e806d4cb37e8191422cd7ec84d3907a42aa60f56e19749465dbd79ebfe3a8f346fe76dd261b2f78a46044d2d8fe809109bfab902dd0"}, {@device_b, @device_b, 0xe3, "a14c19352b010bfeca0ee4f90818d9b195e98fa91c7e60af8cc4658dfdd37712098f5b5b499db0928a3f95ee46061d5a0bbf9f8affb1e4b7c27a6cb98957db7ee49095127a7a0e733c10475f53255d84b1bdad73ec032f69ed5e7fc326fa7472d6e6c528ce75bfdc8143f34b331870bde960d84afc0bed018f5ef6b7a1292ee1c0543c82146999555c41e861abda405fe7f5e9a7faa5d2bedec3d90c2c5a5cb0a961750d2ca9603a10906c563f1fac310f6c42d404b462b0c3105f7cfe8ad1859d2c1297f38006b28a7ce021d86bf75c08e3701cbf33503956a334bb25642b543d75a5"}]}, 0x2da)
setsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000040)=0xfffffffd, 0x4)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r1, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x4e20, 0x2, @mcast1}, 0x1c)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x60, 0x10, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2784}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'syz_tun\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x9, 0x400f2a, 0x40000000}}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000084}, 0x4800)

1.386644658s ago: executing program 1 (id=366):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f2d5f"], 0xe0}], 0x1}, 0x40040)
syz_emit_ethernet(0x1db, &(0x7f0000000100)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @tipc_packet={0x6, 0x6, "20d3d8", 0x1a5, 0x6, 0xff, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@dstopts={0x62, 0xc, '\x00', [@hao={0xc9, 0x10, @private2}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x1, 0xc, 0x9, 0x5, [0x0, 0x2e9, 0xfffffffffffffff9, 0x2, 0x0, 0x8]}}, @pad1, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x4}]}, @dstopts={0x3b}, @hopopts={0x5e, 0x3, '\x00', [@hao={0xc9, 0x10, @private1}, @enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0xacb}, @ra={0x5, 0x2, 0xc}]}, @hopopts={0x89, 0x1a, '\x00', [@calipso={0x7, 0x58, {0x2, 0x14, 0x2, 0x1, [0x2, 0x4, 0xfff, 0x5, 0x1, 0x104, 0x5, 0x7, 0x4c4, 0x100000000]}}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x7, [0x100, 0x9a96, 0xffff, 0x97f, 0x7]}}, @pad1, @generic={0x7, 0x4, "b435fc5a"}, @enc_lim={0x4, 0x1, 0x3}, @ra={0x5, 0x2, 0x1}, @calipso={0x7, 0x30, {0x3, 0xa, 0x1, 0xffff, [0x0, 0x81, 0x8001, 0x0, 0x2]}}, @jumbo={0xc2, 0x4, 0xa6}]}, @fragment={0x67, 0x0, 0x0, 0x0, 0x0, 0x17, 0x65}], @payload_direct={{{{0x25, 0x0, 0x1, 0x0, 0x1, 0x8, 0x3, 0x2, 0x6, 0x0, 0x0, 0x6, 0x5, 0x3, 0x5, 0x25, 0x1, 0x4e23, 0x4e23}}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x2, 0x5, 0x3, 0xa}], 0x10, 0x2}, 0x94)
r5 = socket$netlink(0x10, 0x3, 0x15)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r6, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0)
sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28)
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1})
r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r12, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0)

993.7016ms ago: executing program 2 (id=368):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001000)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4c800}, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x39, 0xffffffffffffffff, &(0x7f0000000100))
socket$nl_generic(0x10, 0x3, 0x10)

922.174741ms ago: executing program 2 (id=369):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x14, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0xf4, &(0x7f0000000380)=""/244, 0x41100, 0x20, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x6, 0x7fff, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000200)=[r0, r0, r0, r0], &(0x7f0000000480)=[{0x3, 0x2, 0xa, 0x5}, {0x1, 0x5, 0x1, 0x6}, {0x0, 0x1, 0xd, 0x1}, {0x3, 0x1, 0x8, 0xc}]}, 0x94)
r2 = socket$kcm(0x2d, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="040000000400000004"], 0x50)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x100)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"/5107], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x13, 0x0, &(0x7f0000000140)="7d40a5f8e6e96a56b6ad8bdccf724b9ca1725d", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12812, r0, 0x0)
r4 = socket(0x27, 0x3, 0x3)
setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)

921.148653ms ago: executing program 2 (id=370):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
socket$rds(0x15, 0x5, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x2fd15000)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x3)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3, 0x0, 0x5}, 0x18)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x68, 0x0, 0x205, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4a, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x8000, @void, @void, @val={0x3, 0x1, 0xb8}, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x80, 0x1, 0x6, 0x0, {0x7, 0xc9, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x8, 0xb, 0x4}}, @void, @void, @void}}]]}, 0x68}}, 0x24000080)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x50)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000340)=0x7, 0x4)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r5], 0x24}}, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10004, 0x4)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x368)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50)
socket$inet(0x2, 0x2, 0x0)

862.83124ms ago: executing program 2 (id=371):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0x10}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000240)="63eced000000000a9f33c9f7b9e5", 0x0, 0xc698, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x34, r4, 0x1, 0x3, 0x0, {{0xa}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48881}, 0x40)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000340), r3)
sendmsg$FOU_CMD_DEL(r3, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000380)={0x20, r7, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40090}, 0x4010)
sendmsg$FOU_CMD_GET(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r7, 0x2, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010100}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x1a}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
socketpair(0x6, 0x5, 0x100, 0x0)
r8 = socket$tipc(0x1e, 0x5, 0x0)
listen(r8, 0x0)
accept4(r8, 0x0, 0x0, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x1b0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}, 0xa490f54eab606508}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)

483.305392ms ago: executing program 1 (id=372):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000020000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66}, 0x20)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, <r2=>0xffffffffffffffff}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="ce010000009a697f65360c5e86dd", 0x0, 0x1fe7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3100000000140004800800024000000000080001400000000058000000060a010400000000000000000500000008000b400000726d000000001c0002800500030000000000050003000100000008000240000000020900010073797a3000000000140000001100010000000000000000000000000a"], 0xe0}}, 0x0)

392.907471ms ago: executing program 1 (id=373):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@ipv6_getrule={0x1c, 0x22, 0x800, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x10, 0xb, 0xe3, 0x0, 0x0, 0x4, 0x4}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94)

311.481998ms ago: executing program 1 (id=374):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x9}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000440)={0x2c, r3, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc2}]}]}]}, 0x2c}}, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x4c, r6, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0)
r7 = socket$inet6(0xa, 0x3, 0x80000001)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'veth0_to_hsr\x00', &(0x7f0000000000)=@ethtool_coalesce={0xe, 0x9, 0x4c, 0x80000001, 0xef, 0x2, 0x2, 0x7ff, 0x7, 0x0, 0x400, 0x3, 0xe, 0xb63, 0x5, 0x2646, 0xf, 0x7, 0xfffffff7, 0x101, 0x5, 0x2, 0x3}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r8=>0xffffffffffffffff})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r10=>0x0})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = socket$unix(0x1, 0x1, 0x0)
recvmmsg$unix(r12, &(0x7f0000006d80)=[{{&(0x7f0000000400), 0x6e, &(0x7f0000000580)=[{&(0x7f0000000480)=""/237, 0xed}], 0x1, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}}, {{&(0x7f0000000680)=@abs, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000700)=""/65, 0x41}, {&(0x7f0000000780)=""/228, 0xe4}, {&(0x7f0000000fc0)=""/4096, 0x1000}], 0x3, &(0x7f00000008c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000940)=""/246, 0xf6}, {&(0x7f0000000a40)=""/63, 0x3f}, {&(0x7f0000000a80)=""/228, 0xe4}, {&(0x7f0000000b80)=""/89, 0x59}], 0x4, &(0x7f0000000c40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000000cc0)=@abs, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000d40)=""/107, 0x6b}, {&(0x7f0000000dc0)=""/122, 0x7a}], 0x2}}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000000e80)=""/195, 0xc3}, {&(0x7f0000001fc0)=""/160, 0xa0}, {&(0x7f0000002080)=""/26, 0x1a}, {&(0x7f00000020c0)=""/24, 0x18}, {&(0x7f0000002100)=""/173, 0xad}, {&(0x7f00000021c0)=""/56, 0x38}], 0x6, &(0x7f0000002280)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000002340)=@abs, 0x6e, &(0x7f00000056c0)=[{&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f00000033c0)=""/143, 0x8f}, {&(0x7f0000003480)=""/160, 0xa0}, {&(0x7f0000003540)=""/240, 0xf0}, {&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000004640)=""/66, 0x42}, {&(0x7f00000046c0)=""/4096, 0x1000}], 0x7, &(0x7f0000005740)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x68}}, {{&(0x7f00000057c0)=@abs, 0x6e, &(0x7f00000069c0)=[{&(0x7f0000005840)=""/9, 0x9}, {&(0x7f0000005880)=""/57, 0x39}, {&(0x7f00000058c0)=""/4096, 0x1000}, {&(0x7f00000068c0)=""/39, 0x27}, {&(0x7f0000006900)=""/134, 0x86}], 0x5, &(0x7f0000006a40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000006a80)=@abs, 0x6e, &(0x7f0000006cc0)=[{&(0x7f0000006b00)=""/211, 0xd3}, {&(0x7f0000006c00)=""/122, 0x7a}, {&(0x7f0000006c80)=""/30, 0x1e}, {&(0x7f00000073c0)=""/4096, 0x1000}, {&(0x7f00000083c0)=""/4096, 0x1000}], 0x5, &(0x7f0000006d40)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x8, 0x40010002, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(r11, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x4c, r9, 0xe096044a3fc9e6f1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x8, 0xfffffffe}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)

230.59546ms ago: executing program 1 (id=375):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000190001002bbd7000fcdbdf251c2080070001fd000001000046fa0619255abfd29e9cd10298b77a61721943c949afc3fef80a51eb9e72fbae1cd6b426e7ca"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004)
setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98)

152.350976ms ago: executing program 1 (id=376):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x3)
getsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000000), &(0x7f0000000280)=0x4)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xbb}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$can_bcm(0x1d, 0x2, 0x2)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
recvmmsg(r2, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)=""/236, 0xec}, {&(0x7f0000000340)=""/210, 0xd2}, {&(0x7f0000000440)=""/200, 0xc8}, {0x0}, {&(0x7f0000000640)=""/222, 0xde}, {&(0x7f0000000140)=""/169, 0xa9}, {&(0x7f0000000740)=""/140, 0x8c}, {&(0x7f0000000800)=""/174, 0xae}], 0x8, &(0x7f0000000940)=""/144, 0x90}, 0x9}, {{&(0x7f0000000a00)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000000a80)=""/150, 0x96}, {&(0x7f0000000b40)=""/131, 0x83}, {&(0x7f0000000c00)=""/217, 0xd9}, {&(0x7f0000000d00)=""/250, 0xfa}, {&(0x7f0000000e00)=""/129, 0x81}, {&(0x7f0000000ec0)=""/4096, 0x1000}, {&(0x7f0000000540)=""/143, 0x8f}], 0x7, &(0x7f0000002000)=""/27, 0x1b}, 0x6}, {{&(0x7f0000002040), 0x80, &(0x7f0000002440)=[{&(0x7f00000020c0)=""/102, 0x66}, {&(0x7f0000002140)=""/97, 0x61}, {&(0x7f00000021c0)=""/77, 0x4d}, {&(0x7f0000002240)=""/56, 0x38}, {&(0x7f0000002280)=""/243, 0xf3}], 0x5, &(0x7f00000024c0)=""/195, 0xc3}, 0xfffffff8}], 0x3, 0x10100, 0x0)

1.430946ms ago: executing program 2 (id=377):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140))
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, 0x0, 0x0)
socket$unix(0x1, 0x2, 0x0)
close(0x3)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x17, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x8}, 0x94)
socket$unix(0x1, 0x5, 0x0)
socket$unix(0x1, 0x2, 0x0)
socket$unix(0x1, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}}, 0x10)

0s ago: executing program 2 (id=378):
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
socket$igmp(0x2, 0x3, 0x2) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
socket(0x40000000015, 0x5, 0x0) (async)
socket$key(0xf, 0x3, 0x2) (async)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) (async)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="67d8901bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d3abc8a75ac1f30e53a0eff506f6e6b369ba6c5306e91acaa94e89d3bff4e52cd151235f3defff171c60b91c0c5aeb29736830a09b262dbe4c7ed149885a054de1d7ff5bcecd7a50061814ceefb", 0x9d}, {&(0x7f0000000900)="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", 0x3e4}], 0x2}, 0x0) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x7dc48146, 0x7fffffff, 0x5539e0cf}, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000006000000850000008800000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:1511' (ED25519) to the list of known hosts.
syzkaller login: [   49.020166][ T5793] cgroup: Unknown subsys name 'net'
[   49.127405][ T5793] cgroup: Unknown subsys name 'cpuset'
[   49.133974][ T5793] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.819907][ T5793] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.843660][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.847494][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.850494][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.853668][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.856394][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.889546][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.893708][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.897492][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.901458][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.904781][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.918463][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.922580][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.926136][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.929472][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.933263][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.219878][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   55.227803][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   55.253151][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   55.396536][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.398944][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.402860][ T5841] bridge_slave_0: entered allmulticast mode
[   55.406013][ T5841] bridge_slave_0: entered promiscuous mode
[   55.409842][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.413412][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.416518][ T5834] bridge_slave_0: entered allmulticast mode
[   55.420211][ T5834] bridge_slave_0: entered promiscuous mode
[   55.425387][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.428661][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.431902][ T5834] bridge_slave_1: entered allmulticast mode
[   55.435815][ T5834] bridge_slave_1: entered promiscuous mode
[   55.455582][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.457974][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.461364][ T5841] bridge_slave_1: entered allmulticast mode
[   55.464281][ T5841] bridge_slave_1: entered promiscuous mode
[   55.494351][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.497505][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.501672][ T5839] bridge_slave_0: entered allmulticast mode
[   55.504685][ T5839] bridge_slave_0: entered promiscuous mode
[   55.526576][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.528968][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.531986][ T5839] bridge_slave_1: entered allmulticast mode
[   55.535964][ T5839] bridge_slave_1: entered promiscuous mode
[   55.555101][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.561292][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.592222][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.597202][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.602846][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.633527][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.639107][ T5834] team0: Port device team_slave_0 added
[   55.644343][ T5834] team0: Port device team_slave_1 added
[   55.689407][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.692657][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.701462][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.708358][ T5841] team0: Port device team_slave_0 added
[   55.712216][ T5841] team0: Port device team_slave_1 added
[   55.714871][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.717941][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.729952][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.762874][ T5839] team0: Port device team_slave_0 added
[   55.781815][ T5839] team0: Port device team_slave_1 added
[   55.785034][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.787631][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.797364][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.826639][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.829400][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.840296][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.859495][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.862134][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.871446][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.883889][ T5834] hsr_slave_0: entered promiscuous mode
[   55.886346][ T5834] hsr_slave_1: entered promiscuous mode
[   55.889140][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.891943][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.900805][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.970209][ T5839] hsr_slave_0: entered promiscuous mode
[   55.973372][ T5839] hsr_slave_1: entered promiscuous mode
[   55.976274][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.979121][ T5839] Cannot create hsr debugfs directory
[   56.019430][ T5841] hsr_slave_0: entered promiscuous mode
[   56.022813][ T5841] hsr_slave_1: entered promiscuous mode
[   56.025856][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.029021][ T5841] Cannot create hsr debugfs directory
[   56.326450][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.337450][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.350266][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.364840][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.399826][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.404658][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.413979][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.423521][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.449367][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.459956][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.471538][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.478252][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.606541][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.637342][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.642620][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   56.656548][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.659826][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.675512][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.680427][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.683593][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.703576][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   56.726651][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   56.732795][ T4361] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.735084][ T4361] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.749724][ T4361] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.752036][ T4361] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.757360][ T4361] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.759738][ T4361] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.770125][ T4361] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.772712][ T4361] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.911306][ T5843] Bluetooth: hci0: command tx timeout
[   56.964258][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.991498][ T5843] Bluetooth: hci1: command tx timeout
[   56.994110][ T5843] Bluetooth: hci2: command tx timeout
[   57.007373][ T5834] veth0_vlan: entered promiscuous mode
[   57.021586][ T5834] veth1_vlan: entered promiscuous mode
[   57.051710][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.065262][ T5834] veth0_macvtap: entered promiscuous mode
[   57.075726][ T5834] veth1_macvtap: entered promiscuous mode
[   57.083241][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.106004][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.115702][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.121769][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.125526][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.129093][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.134114][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.196920][ T5839] veth0_vlan: entered promiscuous mode
[   57.202116][ T5841] veth0_vlan: entered promiscuous mode
[   57.212470][ T5839] veth1_vlan: entered promiscuous mode
[   57.224134][ T5841] veth1_vlan: entered promiscuous mode
[   57.251893][ T1187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.254571][ T1187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.288910][ T5839] veth0_macvtap: entered promiscuous mode
[   57.302559][ T5839] veth1_macvtap: entered promiscuous mode
[   57.307755][ T4375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.313578][ T4375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.317638][ T5841] veth0_macvtap: entered promiscuous mode
[   57.336085][ T5841] veth1_macvtap: entered promiscuous mode
[   57.354622][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.367302][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.372113][ T5839] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.374914][ T5839] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.377751][ T5839] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.381570][ T5839] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.389175][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.398339][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.418299][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.437687][ T5841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.452023][ T5841] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.455823][ T5841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.459247][ T5841] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.472120][ T5900] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2'.
[   57.562973][ T1187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.566209][ T1187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.613751][ T4375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.617202][ T4375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.621850][ T5903] netlink: 200 bytes leftover after parsing attributes in process `syz.1.4'.
[   57.627917][ T5903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4'.
[   57.634482][ T4375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.637563][ T4375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.662893][ T4375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.665560][ T4375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.882625][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   57.887836][ T5920] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.890913][ T5920] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.948281][ T5923] netlink: 'syz.0.6': attribute type 1 has an invalid length.
[   58.003814][ T5923] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6'.
[   58.152339][ T5940] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12'.
[   58.168093][ T5943] tipc: Started in network mode
[   58.169909][ T5943] tipc: Node identity 000000000000000000007e8fdf030001, cluster identity 4711
[   58.178295][ T5943] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   58.202174][ T5943] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.208701][ T5943] netlink: 'syz.2.13': attribute type 11 has an invalid length.
[   58.213447][ T5943] netlink: 140 bytes leftover after parsing attributes in process `syz.2.13'.
[   58.218841][ T5943] netlink: 'syz.2.13': attribute type 11 has an invalid length.
[   58.228512][ T5943] netlink: 140 bytes leftover after parsing attributes in process `syz.2.13'.
[   58.489663][ T5964] tipc: Started in network mode
[   58.492837][ T5964] tipc: Node identity d211edcea8e3, cluster identity 4711
[   58.495527][ T5964] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.499048][ T5964] syzkaller0: entered promiscuous mode
[   58.502282][ T5964] syzkaller0: entered allmulticast mode
[   58.509028][ T5963] tipc: Resetting bearer <eth:syzkaller0>
[   58.525762][ T5963] tipc: Disabling bearer <eth:syzkaller0>
[   58.559607][ T5968] netlink: 40 bytes leftover after parsing attributes in process `syz.2.20'.
[   58.613411][ T5971] sctp: [Deprecated]: syz.2.21 (pid 5971) Use of struct sctp_assoc_value in delayed_ack socket option.
[   58.613411][ T5971] Use struct sctp_sack_info instead
[   58.715011][ T5979] syz.1.24 uses obsolete (PF_INET,SOCK_PACKET)
[   58.809669][ T5985] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3
[   58.991138][ T5222] Bluetooth: hci0: command tx timeout
[   59.070875][ T5222] Bluetooth: hci2: command tx timeout
[   59.073351][ T5222] Bluetooth: hci1: command tx timeout
[   59.138750][ T5996] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.260265][ T5998] SET target dimension over the limit!
[   59.308174][ T6000] netlink: 20 bytes leftover after parsing attributes in process `syz.0.32'.
[   59.605517][ T6009] x_tables: duplicate underflow at hook 3
[   59.673008][ T6011] trusted_key: syz.0.36 sent an empty control message without MSG_MORE.
[   60.057160][ T6041] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.098161][ T6041] bridge_slave_1 (unregistering): left allmulticast mode
[   60.104631][ T6041] bridge_slave_1 (unregistering): left promiscuous mode
[   60.109643][ T6041] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.244683][ T6057] xt_TCPMSS: Only works on TCP SYN packets
[   60.253438][ T6057] netlink: 'syz.2.49': attribute type 5 has an invalid length.
[   60.538046][ T6081] netlink: 'syz.0.56': attribute type 1 has an invalid length.
[   60.642962][ T6092] openvswitch: netlink: Multiple metadata blocks provided
[   61.005272][ T6124] Zero length message leads to an empty skb
[   61.070548][ T5222] Bluetooth: hci0: command tx timeout
[   61.123894][ T6131] netlink: 'syz.0.72': attribute type 7 has an invalid length.
[   61.127186][ T6131] netlink: 'syz.0.72': attribute type 8 has an invalid length.
[   61.150762][ T5843] Bluetooth: hci2: command tx timeout
[   61.153117][ T5222] Bluetooth: hci1: command tx timeout
[   61.166505][ T6135] IPv6: NLM_F_REPLACE set, but no existing node found!
[   61.229069][ T6145] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[   61.243993][ T6147] gretap0: entered promiscuous mode
[   61.404534][ T6161] netlink: 'syz.1.80': attribute type 4 has an invalid length.
[   61.429895][ T6161] netlink: 'syz.1.80': attribute type 1 has an invalid length.
[   61.435378][ T6161] netlink: 'syz.1.80': attribute type 1 has an invalid length.
[   61.534244][ T6163] team0 (unregistering): Port device team_slave_0 removed
[   61.539815][ T6163] team0 (unregistering): Port device team_slave_1 removed
[   61.636264][ T6173] SET target dimension over the limit!
[   61.862235][ T6199] IPv6: Can't replace route, no match found
[   62.103953][ T6225] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[   62.420192][ T6246] xt_connbytes: Forcing CT accounting to be enabled
[   62.423645][ T6246] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   62.428922][ T6246] xt_bpf: check failed: parse error
[   62.463004][    T9] IPVS: starting estimator thread 0...
[   62.551587][ T6250] IPVS: using max 77 ests per chain, 184800 per kthread
[   62.573025][ T6255] __nla_validate_parse: 24 callbacks suppressed
[   62.573037][ T6255] netlink: 1148 bytes leftover after parsing attributes in process `syz.1.109'.
[   62.639328][ T6266] netlink: 228 bytes leftover after parsing attributes in process `syz.2.112'.
[   62.667162][ T6268] netlink: 20 bytes leftover after parsing attributes in process `syz.2.113'.
[   62.873453][ T6274] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma?
[   63.057459][ T6284] netlink: 'syz.1.117': attribute type 11 has an invalid length.
[   63.069121][ T6286] netlink: 28 bytes leftover after parsing attributes in process `syz.0.118'.
[   63.076820][ T6286] netlink: 16 bytes leftover after parsing attributes in process `syz.0.118'.
[   63.154270][ T5222] Bluetooth: hci0: command tx timeout
[   63.230940][ T5222] Bluetooth: hci1: command tx timeout
[   63.233205][ T5222] Bluetooth: hci2: command tx timeout
[   63.242291][ T6299] validate_nla: 4 callbacks suppressed
[   63.242304][ T6299] netlink: 'syz.1.122': attribute type 10 has an invalid length.
[   63.252839][ T6299] team0: Cannot enslave team device to itself
[   63.604442][ T6321] 8021q: adding VLAN 0 to HW filter on device bond1
[   63.658955][ T6327] netlink: 72 bytes leftover after parsing attributes in process `syz.2.131'.
[   63.672643][ T6332] netlink: 72 bytes leftover after parsing attributes in process `syz.2.131'.
[   63.866086][ T6338] xt_CT: No such helper "pptp"
[   64.049830][ T6353] netlink: 84 bytes leftover after parsing attributes in process `syz.1.138'.
[   64.052889][ T6353] netem: invalid attributes len -16
[   64.056142][ T6353] netem: change failed
[   64.106128][ T6356] netlink: 200 bytes leftover after parsing attributes in process `syz.2.141'.
[   64.109732][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.141'.
[   64.346696][ T6373] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   64.717867][ T6405] x_tables: duplicate underflow at hook 1
[   64.874721][ T6417] netlink: 'syz.1.162': attribute type 1 has an invalid length.
[   65.213836][   T24] IPVS: starting estimator thread 0...
[   65.221493][ T6429] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   65.310508][ T6438] IPVS: using max 46 ests per chain, 110400 per kthread
[   65.922061][ T6477] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.925778][ T6477] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.074738][ T6477] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.082340][   T47] IPVS: starting estimator thread 0...
[   66.094005][ T6477] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.170748][ T6486] IPVS: using max 77 ests per chain, 184800 per kthread
[   66.253886][ T6477] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.257818][ T6477] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.263607][ T6477] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.267533][ T6477] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.721451][ T6502] bridge_slave_0: left allmulticast mode
[   66.723926][ T6502] bridge_slave_0: left promiscuous mode
[   66.726596][ T6502] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.744373][ T6502] bond0: (slave bond_slave_0): Releasing backup interface
[   66.762272][ T6502] bond0: (slave bond_slave_1): Releasing backup interface
[   66.781408][ T6502] team0: Port device team_slave_0 removed
[   66.796736][ T6502] team0: Port device team_slave_1 removed
[   66.799643][ T6502] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.814137][ T6502] batman_adv: batadv0: Removing interface: batadv_slave_0
[   66.833549][ T6502] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.836754][ T6502] batman_adv: batadv0: Removing interface: batadv_slave_1
[   66.882406][ T6502] syz.1.186 (6502) used greatest stack depth: 19992 bytes left
[   67.002784][ T6513] lo speed is unknown, defaulting to 1000
[   67.023454][ T6513] lo speed is unknown, defaulting to 1000
[   67.026629][ T6513] lo speed is unknown, defaulting to 1000
[   67.082262][ T6519] ipt_ECN: cannot use operation on non-tcp rule
[   67.177502][ T6513] infiniband syz0: set active
[   67.179825][   T47] lo speed is unknown, defaulting to 1000
[   67.182162][ T6513] infiniband syz0: added lo
[   67.225468][ T6513] RDS/IB: syz0: added
[   67.235084][ T6513] smc: adding ib device syz0 with port count 1
[   67.237518][ T6513] smc:    ib device syz0 port 1 has pnetid 
[   67.241090][   T24] lo speed is unknown, defaulting to 1000
[   67.245542][ T6513] lo speed is unknown, defaulting to 1000
[   67.365918][ T6513] lo speed is unknown, defaulting to 1000
[   67.516162][ T6542] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[   67.544900][ T6513] lo speed is unknown, defaulting to 1000
[   67.582909][ T6545] x_tables: duplicate underflow at hook 1
[   67.718931][ T6555] __nla_validate_parse: 22 callbacks suppressed
[   67.718940][ T6555] netlink: 200 bytes leftover after parsing attributes in process `syz.1.199'.
[   67.731977][ T6513] syz.2.189 (6513) used greatest stack depth: 19200 bytes left
[   67.745535][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.199'.
[   67.863354][ T6564] netlink: 'syz.2.205': attribute type 15 has an invalid length.
[   67.901949][ T6570] netlink: 12 bytes leftover after parsing attributes in process `syz.2.207'.
[   67.998581][ T6579] bridge0: entered allmulticast mode
[   68.010937][ T6580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.209'.
[   68.014283][ T6580] bridge_slave_1: left allmulticast mode
[   68.017779][ T6580] bridge_slave_1: left promiscuous mode
[   68.020745][ T6580] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.027956][ T6580] bridge_slave_0: left allmulticast mode
[   68.032335][ T6580] bridge_slave_0: left promiscuous mode
[   68.034727][ T6580] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.046879][ T6580] bridge0 (unregistering): left allmulticast mode
[   68.264060][ T6583] netlink: 200 bytes leftover after parsing attributes in process `syz.2.210'.
[   68.268481][ T6583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.210'.
[   68.747860][ T6634] netlink: 596 bytes leftover after parsing attributes in process `syz.2.221'.
[   68.852309][ T6636] netlink: 200 bytes leftover after parsing attributes in process `syz.1.220'.
[   68.856542][ T6636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.220'.
[   68.935884][ T6640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.222'.
[   69.388940][ T6657] syzkaller1: entered promiscuous mode
[   69.391285][ T6657] syzkaller1: entered allmulticast mode
[   69.398721][ T6656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   69.559768][ T6662] tipc: Started in network mode
[   69.562165][ T6662] tipc: Node identity 16961a1e5999, cluster identity 4711
[   69.564529][ T6662] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.567483][ T6662] syzkaller0: entered promiscuous mode
[   69.569382][ T6662] syzkaller0: entered allmulticast mode
[   69.583120][ T6660] tipc: Resetting bearer <eth:syzkaller0>
[   69.603784][ T6660] tipc: Disabling bearer <eth:syzkaller0>
[   69.793407][ T6673] syzkaller1: entered promiscuous mode
[   69.796475][ T6673] syzkaller1: entered allmulticast mode
[   69.936872][   T33] audit: type=1800 audit(1752497429.438:2): pid=6678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.236" name=14 dev="tmpfs" ino=393 res=0 errno=0
[   70.096344][ T6701] netlink: 'syz.2.241': attribute type 5 has an invalid length.
[   70.156650][ T6708] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[   70.228242][ T6717] Bluetooth: MGMT ver 1.23
[   70.751038][ T6746] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.755318][ T6747] syzkaller0: entered promiscuous mode
[   70.758011][ T6747] syzkaller0: entered allmulticast mode
[   70.854185][ T6755] netlink: 'syz.2.258': attribute type 32 has an invalid length.
[   70.872594][ T6754] delete_channel: no stack
[   70.988633][ T6766] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   71.166717][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.168903][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.216416][ T6777] netlink: 'syz.0.265': attribute type 7 has an invalid length.
[   71.393407][ T6809] netlink: 'syz.0.274': attribute type 6 has an invalid length.
[   71.396769][ T6809] netlink: 'syz.0.274': attribute type 6 has an invalid length.
[   71.579819][ T6821] x_tables: duplicate underflow at hook 2
[   71.595625][ T6821] netlink: 'syz.2.277': attribute type 1 has an invalid length.
[   71.617123][ T6821] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   71.632242][   T35] wlan0: Trigger new scan to find an IBSS to join
[   71.690199][ T2202] lo speed is unknown, defaulting to 1000
[   71.738025][ T6824] xt_CT: You must specify a L4 protocol and not use inversions on it
[   71.788544][ T6826] Driver unsupported XDP return value 0 on prog  (id 128) dev N/A, expect packet loss!
[   71.873393][ T2202] tipc: Node number set to 2062740942
[   71.909777][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   71.913193][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   71.917153][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   71.922221][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   71.925178][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   71.955603][ T6835] lo speed is unknown, defaulting to 1000
[   72.266329][ T6835] chnl_net:caif_netlink_parms(): no params data found
[   72.357839][ T6862] x_tables: duplicate underflow at hook 1
[   72.413732][ T6835] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.420673][ T6835] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.425474][ T6835] bridge_slave_0: entered allmulticast mode
[   72.430080][ T6835] bridge_slave_0: entered promiscuous mode
[   72.437926][ T6860] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   72.445407][ T6835] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.448749][ T6835] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.454107][ T6835] bridge_slave_1: entered allmulticast mode
[   72.459092][ T6835] bridge_slave_1: entered promiscuous mode
[   72.506143][ T6835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.520221][ T6835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.617328][ T6835] team0: Port device team_slave_0 added
[   72.622686][ T6835] team0: Port device team_slave_1 added
[   72.631328][ T6882] netlink: 'syz.2.292': attribute type 1 has an invalid length.
[   72.668018][ T6835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.671156][ T6835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.672218][ T6884] netlink: 'syz.2.293': attribute type 1 has an invalid length.
[   72.682216][ T6835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.691998][ T6835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.694870][ T6835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.705675][ T6835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.792818][ T6835] hsr_slave_0: entered promiscuous mode
[   72.796001][ T6835] hsr_slave_1: entered promiscuous mode
[   72.799012][ T6835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   72.803982][ T6835] Cannot create hsr debugfs directory
[   72.813825][ T6891] warning: `syz.2.295' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   72.833378][ T6893] syzkaller1: entered promiscuous mode
[   72.835891][ T6893] syzkaller1: entered allmulticast mode
[   73.237599][ T6835] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   73.244148][ T6835] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   73.249088][ T6835] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   73.254730][ T6835] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   73.299831][ T6910] __nla_validate_parse: 21 callbacks suppressed
[   73.299846][ T6910] netlink: 20 bytes leftover after parsing attributes in process `syz.2.302'.
[   73.308745][ T6835] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.322857][ T6835] 8021q: adding VLAN 0 to HW filter on device team0
[   73.327907][ T4361] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.330251][ T4361] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.337295][ T4361] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.339724][ T4361] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.495079][ T6835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.539775][ T6835] veth0_vlan: entered promiscuous mode
[   73.549000][ T6835] veth1_vlan: entered promiscuous mode
[   73.576463][ T6835] veth0_macvtap: entered promiscuous mode
[   73.584201][ T6835] veth1_macvtap: entered promiscuous mode
[   73.602150][ T6835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.613680][ T6835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.621909][ T6835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.625698][ T6835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.629484][ T6835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.634353][ T6835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.693275][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.696160][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.715820][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.718995][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.158764][ T6946] netlink: 'syz.2.309': attribute type 25 has an invalid length.
[   74.222544][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.310'.
[   74.313869][ T6955] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.313'.
[   74.671119][ T4361] wlan0: Trigger new scan to find an IBSS to join
[   74.686852][ T6967] netlink: 76 bytes leftover after parsing attributes in process `syz.2.317'.
[   74.728858][ T6967] netlink: 200672 bytes leftover after parsing attributes in process `syz.2.317'.
[   74.733903][ T6967] openvswitch: netlink: Message has 5 unknown bytes.
[   74.739127][ T6967] netlink: 80 bytes leftover after parsing attributes in process `syz.2.317'.
[   74.743685][ T6967] openvswitch: netlink: Flow key attr not present in new flow.
[   74.780667][ T6971] netlink: 'syz.2.318': attribute type 1 has an invalid length.
[   74.850022][ T6977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.320'.
[   75.596360][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.613771][ T7024] netlink: 200 bytes leftover after parsing attributes in process `syz.2.335'.
[   75.618457][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.335'.
[   75.756120][ T7033] validate_nla: 1 callbacks suppressed
[   75.756134][ T7033] netlink: 'syz.2.337': attribute type 10 has an invalid length.
[   75.781251][ T7033] netlink: 40 bytes leftover after parsing attributes in process `syz.2.337'.
[   75.793314][ T7033] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   75.898799][ T7034] lo speed is unknown, defaulting to 1000
[   75.918927][ T5222] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   75.923468][ T5222] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   75.928131][ T5222] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   75.933009][ T5222] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   75.935632][ T5222] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   76.018277][ T7036] lo speed is unknown, defaulting to 1000
[   76.222745][ T7036] chnl_net:caif_netlink_parms(): no params data found
[   76.296102][ T7036] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.298599][ T7036] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.306390][ T7036] bridge_slave_0: entered allmulticast mode
[   76.313140][ T7036] bridge_slave_0: entered promiscuous mode
[   76.316630][ T7036] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.319243][ T7036] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.323435][ T7036] bridge_slave_1: entered allmulticast mode
[   76.326538][ T7036] bridge_slave_1: entered promiscuous mode
[   76.390707][ T7036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.395441][ T7036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.417414][ T7036] team0: Port device team_slave_0 added
[   76.421561][ T7036] team0: Port device team_slave_1 added
[   76.447297][ T7036] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.450179][ T7036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.458974][ T7036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.463538][ T7036] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.465838][ T7036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.475372][ T7036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.527012][ T7036] hsr_slave_0: entered promiscuous mode
[   76.529743][ T7036] hsr_slave_1: entered promiscuous mode
[   76.532091][ T7036] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   76.535084][ T7036] Cannot create hsr debugfs directory
[   76.563476][ T7060] bridge0: port 1(ipvlan2) entered blocking state
[   76.565761][ T7060] bridge0: port 1(ipvlan2) entered disabled state
[   76.568414][ T7060] ipvlan2: entered allmulticast mode
[   76.570987][ T7060] bridge0: entered allmulticast mode
[   76.575013][ T7060] ipvlan2: left allmulticast mode
[   76.577014][ T7060] bridge0: left allmulticast mode
[   76.842462][ T7079] netlink: 'syz.2.344': attribute type 1 has an invalid length.
[   77.027049][ T7094] set match dimension is over the limit!
[   77.094101][ T7096] netlink: 'syz.1.352': attribute type 1 has an invalid length.
[   77.109397][ T7102] netlink: 'syz.2.353': attribute type 21 has an invalid length.
[   77.245985][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.315254][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.366563][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.518869][   T13] bridge_slave_1: left allmulticast mode
[   77.522121][   T13] bridge_slave_1: left promiscuous mode
[   77.524405][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.529775][   T13] bridge_slave_0: left allmulticast mode
[   77.535952][   T13] bridge_slave_0: left promiscuous mode
[   77.538467][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.643861][   T65] wlan0: Trigger new scan to find an IBSS to join
[   77.747501][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   77.754602][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   77.759770][   T13] bond0 (unregistering): Released all slaves
[   77.784401][ T7125] lo speed is unknown, defaulting to 1000
[   77.953437][ T5843] Bluetooth: hci2: command tx timeout
[   78.185522][ T7140] netlink: 'syz.2.362': attribute type 3 has an invalid length.
[   78.302397][ T7149] xt_limit: Overflow, try lower: 262144/524288
[   78.319187][ T7149] x_tables: duplicate underflow at hook 2
[   78.425459][ T7036] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   78.439281][ T5870] hid-generic 0005:0458:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   78.449950][ T7036] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   78.494109][ T7036] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   78.530401][   T13] hsr_slave_0: left promiscuous mode
[   78.538703][   T13] hsr_slave_1: left promiscuous mode
[   78.550120][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.556263][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.562130][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.566957][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.569457][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.584087][   T13] veth1_macvtap: left promiscuous mode
[   78.586429][   T13] veth0_macvtap: left promiscuous mode
[   78.589942][   T13] veth1_vlan: left promiscuous mode
[   78.592287][   T13] veth0_vlan: left promiscuous mode
[   78.600043][ T7161] __nla_validate_parse: 17 callbacks suppressed
[   78.600052][ T7161] netlink: 200 bytes leftover after parsing attributes in process `syz.1.366'.
[   78.959487][   T13] team0 (unregistering): Port device team_slave_1 removed
[   78.982340][   T13] team0 (unregistering): Port device team_slave_0 removed
[   79.019949][ T7174] xt_socket: unknown flags 0x8
[   79.206491][ T7036] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   79.296686][ T7182] netlink: 60 bytes leftover after parsing attributes in process `syz.1.372'.
[   79.357187][ T7036] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.408876][ T7036] 8021q: adding VLAN 0 to HW filter on device team0
[   79.425538][ T4361] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.428551][ T4361] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.449803][ T4361] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.452176][ T4361] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.536057][ T7192] No such timeout policy "syz1"
[   79.645912][ T7036] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.670061][ T7036] veth0_vlan: entered promiscuous mode
[   79.687561][ T7036] veth1_vlan: entered promiscuous mode
[   79.707928][ T7036] veth0_macvtap: entered promiscuous mode
[   79.719667][ T7036] veth1_macvtap: entered promiscuous mode
[   79.738702][ T7036] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.754789][ T7036] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.765676][ T7036] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.776385][ T7036] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.782759][ T7036] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.789504][ T7036] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.857542][ T1187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.864630][ T1187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.897209][ T4361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.900023][ T4361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.974477][ T7036] 
[   79.975352][ T7036] ======================================================
[   79.977584][ T7036] WARNING: possible circular locking dependency detected
[   79.979790][ T7036] 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 Not tainted
[   79.983134][ T7036] ------------------------------------------------------
[   79.985382][ T7036] syz-executor/7036 is trying to acquire lock:
[   79.987351][ T7036] ffff888107791040 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}, at: __flush_work+0xd2/0xbc0
[   79.991222][ T7036] 
[   79.991222][ T7036] but task is already holding lock:
[   79.993751][ T7036] ffff888107791338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[   79.996625][ T7036] 
[   79.996625][ T7036] which lock already depends on the new lock.
[   79.996625][ T7036] 
[   80.000880][ T7036] 
[   80.000880][ T7036] the existing dependency chain (in reverse order) is:
[   80.004642][ T7036] 
[   80.004642][ T7036] -> #1 (&conn->lock#2){+.+.}-{4:4}:
[   80.007792][ T7036]        lock_acquire+0x120/0x360
[   80.009988][ T7036]        __mutex_lock+0x182/0xe80
[   80.012127][ T7036]        l2cap_info_timeout+0x60/0xa0
[   80.014407][ T7036]        process_scheduled_works+0xae1/0x17b0
[   80.016976][ T7036]        worker_thread+0x8a0/0xda0
[   80.019150][ T7036]        kthread+0x711/0x8a0
[   80.021224][ T7036]        ret_from_fork+0x3fc/0x770
[   80.023414][ T7036]        ret_from_fork_asm+0x1a/0x30
[   80.025671][ T7036] 
[   80.025671][ T7036] -> #0 ((work_completion)(&(&conn->info_timer)->work)){+.+.}-{0:0}:
[   80.030063][ T7036]        validate_chain+0xb9b/0x2140
[   80.032308][ T7036]        __lock_acquire+0xab9/0xd20
[   80.034520][ T7036]        lock_acquire+0x120/0x360
[   80.036666][ T7036]        __flush_work+0x6b8/0xbc0
[   80.038812][ T7036]        __cancel_work_sync+0xbe/0x110
[   80.041169][ T7036]        l2cap_conn_del+0x4f0/0x680
[   80.043338][ T7036]        hci_conn_hash_flush+0x10d/0x230
[   80.045640][ T7036]        hci_dev_close_sync+0xaef/0x1330
[   80.048032][ T7036]        hci_unregister_dev+0x21a/0x510
[   80.050400][ T7036]        vhci_release+0x80/0xd0
[   80.052496][ T7036]        __fput+0x44c/0xa70
[   80.054334][ T7036]        task_work_run+0x1d4/0x260
[   80.056411][ T7036]        do_exit+0x6b5/0x22e0
[   80.058321][ T7036]        do_group_exit+0x21c/0x2d0
[   80.060457][ T7036]        __x64_sys_exit_group+0x3f/0x40
[   80.062810][ T7036]        x64_sys_call+0x21ba/0x21c0
[   80.064661][ T7036]        do_syscall_64+0xfa/0x3b0
[   80.066353][ T7036]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.068481][ T7036] 
[   80.068481][ T7036] other info that might help us debug this:
[   80.068481][ T7036] 
[   80.071984][ T7036]  Possible unsafe locking scenario:
[   80.071984][ T7036] 
[   80.074947][ T7036]        CPU0                    CPU1
[   80.077128][ T7036]        ----                    ----
[   80.079314][ T7036]   lock(&conn->lock#2);
[   80.081077][ T7036]                                lock((work_completion)(&(&conn->info_timer)->work));
[   80.084994][ T7036]                                lock(&conn->lock#2);
[   80.087903][ T7036]   lock((work_completion)(&(&conn->info_timer)->work));
[   80.090929][ T7036] 
[   80.090929][ T7036]  *** DEADLOCK ***
[   80.090929][ T7036] 
[   80.094403][ T7036] 5 locks held by syz-executor/7036:
[   80.096670][ T7036]  #0: ffff888038480dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510
[   80.100742][ T7036]  #1: ffff8880384800b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330
[   80.104292][ T7036]  #2: ffffffff8f685ac8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230
[   80.108053][ T7036]  #3: ffff888107791338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680
[   80.111584][ T7036]  #4: ffffffff8e13f160 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xd2/0xbc0
[   80.114935][ T7036] 
[   80.114935][ T7036] stack backtrace:
[   80.117031][ T7036] CPU: 0 UID: 0 PID: 7036 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   80.117041][ T7036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   80.117046][ T7036] Call Trace:
[   80.117051][ T7036]  <TASK>
[   80.117054][ T7036]  dump_stack_lvl+0x189/0x250
[   80.117065][ T7036]  ? __pfx_dump_stack_lvl+0x10/0x10
[   80.117073][ T7036]  ? __pfx__printk+0x10/0x10
[   80.117082][ T7036]  ? print_lock_name+0xde/0x100
[   80.117092][ T7036]  print_circular_bug+0x2ee/0x310
[   80.117101][ T7036]  check_noncircular+0x134/0x160
[   80.117111][ T7036]  validate_chain+0xb9b/0x2140
[   80.117120][ T7036]  ? do_raw_spin_lock+0x121/0x290
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   80.117130][ T7036]  ? look_up_lock_class+0x74/0x170
[   80.117137][ T7036]  ? register_lock_class+0x51/0x320
[   80.117144][ T7036]  __lock_acquire+0xab9/0xd20
[   80.117152][ T7036]  ? __flush_work+0xd2/0xbc0
[   80.117160][ T7036]  lock_acquire+0x120/0x360
[   80.117167][ T7036]  ? __flush_work+0xd2/0xbc0
[   80.117176][ T7036]  ? _raw_spin_unlock_irq+0x23/0x50
[   80.117185][ T7036]  ? __flush_work+0xd2/0xbc0
[   80.117194][ T7036]  __flush_work+0x6b8/0xbc0
[   80.117202][ T7036]  ? __flush_work+0xd2/0xbc0
[   80.117210][ T7036]  ? __flush_work+0xd2/0xbc0
[   80.117219][ T7036]  ? __pfx___flush_work+0x10/0x10
[   80.117228][ T7036]  ? __pfx_wq_barrier_func+0x10/0x10
[   80.117237][ T7036]  ? __pfx___cancel_work+0x10/0x10
[   80.117246][ T7036]  ? hci_conn_drop+0x14d/0x280
[   80.117257][ T7036]  __cancel_work_sync+0xbe/0x110
[   80.117266][ T7036]  l2cap_conn_del+0x4f0/0x680
[   80.117276][ T7036]  ? __pfx_l2cap_disconn_cfm+0x10/0x10
[   80.117284][ T7036]  hci_conn_hash_flush+0x10d/0x230
[   80.117294][ T7036]  hci_dev_close_sync+0xaef/0x1330
[   80.117304][ T7036]  ? __pfx_hci_dev_close_sync+0x10/0x10
[   80.117311][ T7036]  ? up_write+0x1c4/0x420
[   80.117321][ T7036]  hci_unregister_dev+0x21a/0x510
[   80.117329][ T7036]  vhci_release+0x80/0xd0
[   80.117337][ T7036]  ? __pfx_vhci_release+0x10/0x10
[   80.117343][ T7036]  __fput+0x44c/0xa70
[   80.117355][ T7036]  task_work_run+0x1d4/0x260
[   80.117366][ T7036]  ? __pfx_task_work_run+0x10/0x10
[   80.117376][ T7036]  ? kmem_cache_free+0x18f/0x400
[   80.117385][ T7036]  do_exit+0x6b5/0x22e0
[   80.117396][ T7036]  ? __pfx_do_raw_spin_lock+0x10/0x10
[   80.117406][ T7036]  ? __pfx_do_exit+0x10/0x10
[   80.117416][ T7036]  ? _raw_spin_unlock_irq+0x23/0x50
[   80.117425][ T7036]  ? lockdep_hardirqs_on+0x9c/0x150
[   80.117436][ T7036]  do_group_exit+0x21c/0x2d0
[   80.117446][ T7036]  __x64_sys_exit_group+0x3f/0x40
[   80.117456][ T7036]  x64_sys_call+0x21ba/0x21c0
[   80.117465][ T7036]  do_syscall_64+0xfa/0x3b0
[   80.117472][ T7036]  ? lockdep_hardirqs_on+0x9c/0x150
[   80.117482][ T7036]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.117488][ T7036]  ? exc_page_fault+0x9f/0xf0
[   80.117498][ T7036]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   80.117506][ T7036] RIP: 0033:0x7fdee118e929
[   80.117512][ T7036] Code: Unable to access opcode bytes at 0x7fdee118e8ff.
[   80.117516][ T7036] RSP: 002b:00007fffc96fbe38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   80.117523][ T7036] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdee118e929
[   80.117528][ T7036] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
[   80.117532][ T7036] RBP: 00007fdee11ee8f0 R08: 00007fffc96f9bd7 R09: 0000000000000003
[   80.117537][ T7036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   80.117541][ T7036] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007fffc96fbff0
[   80.117547][ T7036]  </TASK>
[   80.118427][ T5843] Bluetooth: hci2: command tx timeout
[   81.392622][   T10] cfg80211: failed to load regulatory.db
[   82.754555][ T5864] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.795355][ T5864] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.833565][ T5864] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.886040][ T5864] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.959348][ T5864] tipc: Resetting bearer <eth:syzkaller0>
[   83.116409][ T5864] tipc: Disabling bearer <eth:syzkaller0>
[   83.250274][ T5864] bond0 (unregistering): Released all slaves
[   83.254647][ T5864] bond1 (unregistering): Released all slaves
[   83.301906][ T5864] tipc: Left network mode
[   83.513425][ T5864] hsr_slave_0: left promiscuous mode
[   83.516179][ T5864] hsr_slave_1: left promiscuous mode
[   83.557451][ T5864] veth1_macvtap: left promiscuous mode
[   83.559312][ T5864] veth0_macvtap: left promiscuous mode
[   83.561571][ T5864] veth1_vlan: left promiscuous mode
[   83.563684][ T5864] veth0_vlan: left promiscuous mode
[   83.998007][ T5864] IPVS: stop unused estimator thread 0...
[   89.710524][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog

VM DIAGNOSIS:
12:50:39  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000034 RBX=0000000000000034 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003326e30
R8 =ffff888107bc0237 R9 =1ffff11020f78046 R10=dffffc0000000000 R11=ffffffff85478780
R12=dffffc0000000000 R13=ffffffff99af98b4 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff854787fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555885fb500 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055df83e88130 CR3=0000000026884000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fd5b6f85478 00007fd5b6f85450 XMM03=00007fd5b6f85488 00007fd5b6f85480
XMM04=00007fd5b7aed100 00007fd5b6f85440 XMM05=00007fd5b6f85458 00007fd5b6f854a0
XMM06=00007fd5b6f85498 00007fd5b6f85490 XMM07=00007fd5b6f85488 00007fd5b6f85480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fd5b6e11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=b260ca7b99d83d00 RBX=ffffffff81976c78 RCX=b260ca7b99d83d00 RDX=0000000000000001
RSI=ffffffff8be29da0 RDI=ffffffff81976c78 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1f3f0 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001d000
RIP=ffffffff8b6f34d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4720a30fc8 CR3=000000011967c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f471fd85478 00007f471fd85450 XMM03=00007f471fd85488 00007f471fd85480
XMM04=00007f47208ed100 00007f471fd85440 XMM05=00007f471fd85458 00007f471fd854a0
XMM06=00007f471fd85498 00007f471fd85490 XMM07=00007f471fd85488 00007f471fd85480
XMM08=0edb1276ac22538c 55e8dcc99c05164c XMM09=0000000000000000 00007f471fc11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
