last executing test programs:

12.753562299s ago: executing program 1 (id=431):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="40c20000d00000002400128009000100626f6e640000000014000280080007000500d190"], 0x4c}}, 0x0)

12.752178187s ago: executing program 1 (id=433):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x560, 0x1b8, 0x2a8, 0x1b8, 0x2a8, 0x2a8, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'ip_vti0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@loopback, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r1, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2fcfc76786d07bf, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r3)
socket$unix(0x1, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async)
socket$inet6(0xa, 0x2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) (async)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000003380)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc001}], 0x1, 0x0) (async)
r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x7, 0x8, 0x0, 0x0, @broadcast}, 0x10)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, 0x0, 0x40) (async)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) (async)
r9 = accept$alg(r8, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) (async)
recvmmsg(r9, &(0x7f0000006100), 0x49f, 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0) (async)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async)
r10 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r10, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)

12.674453006s ago: executing program 1 (id=435):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe0b, 0x0, 0x0, 0x0, 0x800000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x54}}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x11, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x80ffffff}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94)

12.611319274s ago: executing program 1 (id=437):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x38, 0xc, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x400c080)
socket$rds(0x15, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x38, 0xc, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x400c080) (async)
socket$rds(0x15, 0x5, 0x0) (async)

12.529153317s ago: executing program 1 (id=439):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@deltaction={0x40, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xfffffffffffffedd, 0x1, 'ipt\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x40}}, 0x0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$inet6(0xa, 0xa, 0x1)
vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0)
tee(r1, r2, 0x2, 0x100000000000003)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r3=>0x0})
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x6, r3, 0x6}, 0xc)

12.44504118s ago: executing program 1 (id=441):
r0 = socket(0x2000000015, 0x80005, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x9, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000800000000000000000000711023000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @cgroup_sock=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x80000, @loopback, 0x1}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r3=>0x0})
r4 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00'})
bind$can_raw(r4, &(0x7f0000000680), 0x10)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x4)
connect$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3d5, 0x2}, 0x20)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
r5 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtfilter={0x4c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xffff}}]}}]}, 0x4c}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000600)='memory.swap.max\x00', 0x2, 0x0)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="fd012bbd7000fddbdf250e00000008000300", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x2000080}, 0x400c8c0)
write$cgroup_int(r8, &(0x7f0000000640)=0x6, 0x12)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendto$packet(r5, &(0x7f0000000480)="79e412085d7e5e06ed6930f96af3fad2b44a0cc0b679e8c15651907ddac5435e46c53de2e03634507c49fb07814664878ca9f1c791a0eedc4bdfed35e237634b1d9c744161bd926f2d43e7e8b8f825dd80c8f5cf6e5021b052cb89f86aa5ed7c0159688b40700c93bae0430968aa046341eec73c35f59c2800cc29b5af9284a85be19a5c486b49845887f35417938081779adc75f3fd337ebe9e14c2135012d7e6a468c0ed9081b6a9360807f05296ffc766c2c4dbf8718182b843db47ca1804360003774b3bad2658a44d7816534f86bb035c964b49614d9aaa66d61f91", 0xde, 0x801, &(0x7f0000000580)={0x11, 0x6, r6, 0x1, 0x8, 0x6, @broadcast}, 0x14)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000030101040000000000000000020000002400018014000180080001"], 0x38}}, 0x30)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
write$bt_hci(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="010b0436f7ffff090000000000000040db273cdc64fda50647fe469e74236f9f82b97cc3090dc06e47b7062f1861d38fe2b39fb7ceffe318bc448e0d1b4536e9da881576b4305a7cedf7e4cecbb7f53a7f248c2fecb7a4e60ff5237c44991d896e9eb887ee9877cc78e7b43f6d3e355adcf1b46289b1510fd85ea2811ea078d1ddb838209f91ad51254ea1ffb8414f1e835877f4fb2bd073"], 0x1a)
setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x210, 0x9403, 0x3002, 0x210, 0x2c0, 0x2f0, 0x3d8, 0x3d8, 0x2f0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [0xffffff00, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff], 'macvlan1\x00', 'wg2\x00', {}, {0xa4c8dd0ffa9b1578}, 0x73, 0x9, 0x4, 0x48}, 0x0, 0x1c8, 0x210, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x2}, {0x4, 0x5, 0x5}, {0x3, 0x4}, 0xbf, 0xb}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x47b)

5.771573215s ago: executing program 0 (id=511):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000025000100000000000000000008000000", @ANYRES32=r1, @ANYBLOB="76c754aa70d13eef7c5c5539f6c88955eddc93b91dbb493e43"], 0x18}], 0x1}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bond0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x5, '\x00', 0xfffffffe}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x81)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000180)=0xfffffffc, 0x4)
syz_emit_ethernet(0x42, &(0x7f00000000c0)={@multicast, @random="07a24f79ee3f", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, ' \x00', 0xc, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000007140100000000000000000009"], 0x38}}, 0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$inet(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000580)=[{0x0, 0x1d}, {&(0x7f0000000400)='gH', 0x2}], 0x2}, 0x40080)
unshare(0x400)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r7)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x54}}, 0x0)
r8 = socket(0x2, 0x80805, 0x0)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r9, 0x0)
r10 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r10, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x100, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000002"], 0x68}, 0xc00)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={<r11=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={<r12=>r11, @in={{0x2, 0x4e23, @private=0xa010100}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x1, 0xff, 0xe, 0x10, 0x40000, r12}, &(0x7f0000000240)=0x20)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'ipvlan0\x00', 0x1000})
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="36000000090601080000000000000000050000000900020093797a310000000005000100d49763ac4456d3030000002c000780060004404e21000005008700e30000000c000180080001408501010900"], 0x54}, 0x1, 0x0, 0x0, 0x8800}, 0x4000090)
epoll_create1(0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48)

5.703073206s ago: executing program 0 (id=512):
r0 = socket(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0x46d8, 0x6, 0x4}}}}]}, 0x48}}, 0x0) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x3}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004)

5.698956381s ago: executing program 0 (id=513):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000580)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x34, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}]}, 0x34}, 0x1, 0x1000000, 0x0, 0x24008850}, 0x4004a040)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=@newlink={0x28, 0x10, 0x800, 0x0, 0x0, {}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x5}]}, 0x28}}, 0x0)

5.604151832s ago: executing program 0 (id=514):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@volatile={0x9, 0x0, 0x0, 0x9, 0x2}, @func={0x1, 0x0, 0x0, 0x12}, @ptr={0xf, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e, 0x0, 0x0, 0x61]}}, 0x0, 0x42}, 0x28)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2}, 0x10)
socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
unshare(0x24020400)
r3 = socket$inet(0x2, 0x1, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ioctl$FICLONE(r4, 0x40049409, r3)
r5 = socket$netlink(0x10, 0x3, 0x15)
writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
recvmmsg(r5, &(0x7f0000007600)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2000, 0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_buf(r6, 0x1, 0x3b, 0x0, &(0x7f00000007c0)=0x19)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f0000000300))
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='sit0\x00')

4.701120235s ago: executing program 0 (id=523):
unshare(0x8000400)
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r0, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x5, [@enum64={0x6, 0x3, 0x0, 0x13, 0x0, 0x2, [{0xa, 0xffffffff, 0x800}, {0x6, 0x4, 0x2}, {0x10, 0xb6, 0xa}]}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x2}, @struct={0xc, 0x2, 0x0, 0x4, 0x0, 0x1, [{0x6, 0x2, 0x3}, {0x9, 0x1, 0x9}]}, @struct={0x7, 0x3, 0x0, 0x4, 0x1, 0x3, [{0x10, 0x2, 0x2}, {0x4, 0x1, 0x2}, {0x2, 0x1, 0x4}]}, @const={0x10, 0x0, 0x0, 0xa, 0x5}, @volatile={0xe, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x2e, 0x61, 0x61]}}, &(0x7f0000000200)=""/134, 0xc5, 0x86, 0x1, 0x7f}, 0x28)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}}, 0x4010)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000001900000030000000000000711221000000000095fc4a4bf76a6b6c48bb12080f50"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r1}, 0x94)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="04000226", @ANYRES16=0x0, @ANYBLOB="00000000000000000004e800000008000317"], 0x1c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b28, &(0x7f0000000000)={'wlan0\x00'})
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc)

4.544229796s ago: executing program 0 (id=524):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0xfffe, @local, 'geneve1\x00'}}, 0x1e)
close(0x3)
r2 = socket(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x6, 0x80000000)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10)
sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r2, @ANYRES8=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x4008002}, 0x8884)
r3 = socket$inet6(0xa, 0x3, 0x4)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, 0x0, &(0x7f0000000300))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r6, 0x0, 0x1, 0xe)
bind$inet6(r3, &(0x7f0000f67fe4)={0xa, 0x4e20, 0xfffffffb, @loopback={0xff00000000000000}}, 0x1c)

1.14063867s ago: executing program 2 (id=537):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r4)
connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0xffffffff}, 0x1c)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@map=r4, r3, 0x2f}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r3, r5, 0x2f, 0x18, 0x4, @void, @value=r3}, 0x20)
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00082dbd7000ffdbdf250200000008006200090000000400d100"], 0x20}, 0x1, 0x0, 0x0, 0x4000081}, 0x4010)

1.126381661s ago: executing program 2 (id=538):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) (async)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10)
accept4$netrom(r1, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x54, 0x0, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8864}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x80}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x7fff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x41}, 0x20000000)

1.020231868s ago: executing program 2 (id=539):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000100))
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000200)={0x1f, 0xffff, 0x4}, 0x6)
recvmmsg(r1, &(0x7f0000000600), 0x0, 0x2021, 0x0)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x86, "31ff8d104719de85920f7d1fb512221940d9fb7d7e57cd8d3c4837c6d760f8ddf0521825aab5876b75626e56214b8e66354faac38ec216ebfca9ec177bcf24272a8d3bd05c923a747f16799cc708789271370d9fad6663984576984051d41de3b8d80bd75711648451f75b95db8477d7d0cb43852b76ab538b90849afd235ba11ca9e959016b"}, &(0x7f0000000040)=0x8e)
r3 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r3, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r2, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
sendto$packet(r2, &(0x7f0000000080)="40f59e495d5a6cd1cc9082347d6204b4c579ea36abd3a46bd010eac4d777bb4de9a53659e76ed6243a28dec7775b50ec4f06cc284f", 0x35, 0x4000051, &(0x7f0000000300)={0x11, 0xf7, r4, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14)
socket$nl_netfilter(0x10, 0x3, 0xc)
shutdown(r3, 0x0)
accept(r3, 0x0, 0x0)

943.904765ms ago: executing program 2 (id=540):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array]}}, 0x0, 0x32}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000173500000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000480)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getmulticast={0x14, 0x3a, 0x8bbc0173b4b74394, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20004000)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r1}, 0x10)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
close(r3)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000))

893.198248ms ago: executing program 2 (id=541):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0)
ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000000c0)={0xa, &(0x7f0000000040)=[{0x3e01, 0x4, 0xff, 0x7f}, {0x7f, 0x70, 0x80, 0x4}, {0xba1, 0xd2, 0xfd, 0x1}, {0x4, 0x6, 0xd6, 0x2}, {0x4, 0x40, 0x9, 0x40}, {0x0, 0x7, 0xff, 0x2}, {0x81, 0x80, 0xd2, 0x5}, {0xb, 0x2, 0x0, 0x8}, {0x7, 0x0, 0x72, 0x7}, {0x5, 0x0, 0x8, 0x5}]})
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000100)={{r0}, 0xe7b, 0x8000, 0x4})
mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x180000a, 0x10, r0, 0x100000000)
syz_init_net_socket$ax25(0x3, 0x5, 0xcd)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @empty}, &(0x7f0000000180)=0xc)
sendmsg$rds(r0, &(0x7f0000001900)={&(0x7f00000001c0)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000001240)=[{&(0x7f0000000200)}, {&(0x7f0000000240)=""/4096, 0x1000}], 0x2, &(0x7f0000001680)=[@fadd={0x58, 0x114, 0x6, {{0x401, 0xbf4}, &(0x7f0000001280)=0x2, &(0x7f00000012c0)=0x8, 0x3, 0x8001, 0xec9, 0xa6, 0x6, 0x8}}, @mask_fadd={0x58, 0x114, 0x8, {{0x7, 0x3}, &(0x7f0000001300)=0xb9, &(0x7f0000001340)=0xc2, 0x5, 0x740cc37e, 0x83a, 0x800, 0x84, 0xfffffffffffffffb}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001380)=""/16, 0x10}, &(0x7f00000013c0), 0x1}}, @zcopy_cookie={0x18}, @mask_fadd={0x58, 0x114, 0x8, {{0x9, 0x2}, &(0x7f0000001400)=0x1, &(0x7f0000001440)=0x8, 0x7, 0x2ec00000000000, 0x7, 0x1ff, 0x1c, 0x1}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001480)=""/142, 0x8e}, &(0x7f0000001540), 0x83}}, @rdma_dest={0x18, 0x114, 0x2, {0x2, 0x3}}, @cswp={0x58, 0x114, 0x7, {{0x100, 0x80000000}, &(0x7f0000001580)=0xd, &(0x7f00000015c0)=0x1, 0x6, 0x2fbe, 0x1, 0x8, 0x70, 0x6}}, @fadd={0x58, 0x114, 0x6, {{0xfffffffa, 0x3}, &(0x7f0000001600)=0x2, &(0x7f0000001640)=0x7, 0x72, 0xe8, 0x3, 0x5, 0x20, 0x5}}], 0x248, 0x8051}, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
recvfrom$x25(r1, &(0x7f0000001940)=""/117, 0x75, 0x10063, &(0x7f00000019c0), 0x12)
sendmsg$nl_route(r0, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)=@getroute={0x14, 0x1a, 0x204, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48844}, 0x4000000)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001b40), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x1c, r3, 0x410, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000840}, 0x80)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001c80), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000001e40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001e00)={&(0x7f0000001cc0)={0x104, r4, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x65}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x19}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000001e80), &(0x7f0000001ec0)=0x4)
r5 = socket(0x1a, 0x80000, 0xff)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000001f40), r2)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x2c, r6, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe63eca3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44811}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000002040), r5)
ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000002080))
ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f00000020c0))
socket$igmp6(0xa, 0x3, 0x2)
socket$unix(0x1, 0x5, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r7, &(0x7f0000002100)={0x2, 0x4e23, @empty}, 0x10)
r8 = openat$cgroup_ro(r0, &(0x7f0000002140)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000002180)={'wlan0\x00'})
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f00000021c0)={0x5, [0x5, 0x2, 0x4, 0x1c, 0xf801]}, 0xe)

0s ago: executing program 2 (id=542):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, 0x0, &(0x7f0000000080)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0)
r1 = socket$kcm(0x2d, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000001d00000127bd7000fcdbdf251c000000", @ANYRES32=0x0, @ANYBLOB="01049e160600210800040055040000d3bef26593a83a4e5e1880dbfcd3bda86c7c8e28650a57f4d97f6590ea4f32dd92cc6d0423dc04c6e7f1ae59834498acd9c96032dba817c0451eb58a87ce46483c713aff539b1820682a6f3adaf683bba79e1d6c"], 0x34}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, 0x0, 0xc000)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711206000000"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x67, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000002000240012800b0001006d616373656300001400028005000a00010000000500090001"], 0x44}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000))
socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x80)
r6 = socket$kcm(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002040009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:28738' (ED25519) to the list of known hosts.
syzkaller login: [   56.645200][ T5810] cgroup: Unknown subsys name 'net'
[   56.781486][ T5810] cgroup: Unknown subsys name 'cpuset'
[   56.785927][ T5810] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.760577][ T5810] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.534209][ T5219] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.537886][ T5219] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.553779][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.557776][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.562268][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.566498][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.587692][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.591305][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.592348][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.597204][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.597602][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   63.625494][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.630584][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.634099][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.637299][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.915414][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   63.992063][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   64.032045][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   64.074530][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.077902][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.081400][ T5834] bridge_slave_0: entered allmulticast mode
[   64.085274][ T5834] bridge_slave_0: entered promiscuous mode
[   64.101468][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.104347][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.107189][ T5834] bridge_slave_1: entered allmulticast mode
[   64.111159][ T5834] bridge_slave_1: entered promiscuous mode
[   64.191821][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.211034][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.213227][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.215413][ T5829] bridge_slave_0: entered allmulticast mode
[   64.218406][ T5829] bridge_slave_0: entered promiscuous mode
[   64.224043][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.237385][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.239933][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.242098][ T5829] bridge_slave_1: entered allmulticast mode
[   64.244701][ T5829] bridge_slave_1: entered promiscuous mode
[   64.274493][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.276786][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.280195][ T5832] bridge_slave_0: entered allmulticast mode
[   64.282886][ T5832] bridge_slave_0: entered promiscuous mode
[   64.305760][ T5834] team0: Port device team_slave_0 added
[   64.308292][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.310770][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.312935][ T5832] bridge_slave_1: entered allmulticast mode
[   64.315590][ T5832] bridge_slave_1: entered promiscuous mode
[   64.328316][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.342856][ T5834] team0: Port device team_slave_1 added
[   64.346402][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.352286][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.382436][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.386979][ T5829] team0: Port device team_slave_0 added
[   64.390854][ T5829] team0: Port device team_slave_1 added
[   64.430624][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.433245][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.442999][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.458523][ T5832] team0: Port device team_slave_0 added
[   64.461187][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.463315][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.472682][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.477521][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.482613][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.492816][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.498791][ T5832] team0: Port device team_slave_1 added
[   64.501379][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.503519][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.512127][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.544674][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.546881][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.555039][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.560466][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.562683][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.570994][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.668243][ T5829] hsr_slave_0: entered promiscuous mode
[   64.671902][ T5829] hsr_slave_1: entered promiscuous mode
[   64.679063][ T5834] hsr_slave_0: entered promiscuous mode
[   64.681543][ T5834] hsr_slave_1: entered promiscuous mode
[   64.683675][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.686330][ T5834] Cannot create hsr debugfs directory
[   64.692270][ T5832] hsr_slave_0: entered promiscuous mode
[   64.695261][ T5832] hsr_slave_1: entered promiscuous mode
[   64.697716][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.701027][ T5832] Cannot create hsr debugfs directory
[   65.035863][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.044138][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.063880][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.068801][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.100804][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.116132][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.127183][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.132424][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.181411][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.196372][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.211389][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.217994][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.326339][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.345145][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.360585][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   65.380724][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   65.384802][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.387174][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.400279][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.402499][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.422864][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.425618][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.441707][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.443908][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.453237][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.507745][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   65.536722][  T965] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.539195][  T965] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.572524][  T965] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.575643][  T965] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.649789][ T5831] Bluetooth: hci0: command tx timeout
[   65.712274][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.729777][ T5831] Bluetooth: hci2: command tx timeout
[   65.731700][ T5831] Bluetooth: hci1: command tx timeout
[   65.757098][ T5829] veth0_vlan: entered promiscuous mode
[   65.765045][ T5829] veth1_vlan: entered promiscuous mode
[   65.781566][ T5829] veth0_macvtap: entered promiscuous mode
[   65.785582][ T5829] veth1_macvtap: entered promiscuous mode
[   65.821184][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.836881][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.851707][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.861827][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.864937][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.867568][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.872263][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.975372][ T5832] veth0_vlan: entered promiscuous mode
[   65.980005][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.980355][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.982670][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.002047][ T5832] veth1_vlan: entered promiscuous mode
[   66.025103][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.028352][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.046910][ T5832] veth0_macvtap: entered promiscuous mode
[   66.061459][ T5834] veth0_vlan: entered promiscuous mode
[   66.075242][ T5832] veth1_macvtap: entered promiscuous mode
[   66.077457][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.081515][ T5834] veth1_vlan: entered promiscuous mode
[   66.104403][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.120497][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.124752][ T5834] veth0_macvtap: entered promiscuous mode
[   66.134777][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.137425][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.143099][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.145782][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.151924][ T5834] veth1_macvtap: entered promiscuous mode
[   66.188100][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.203189][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.205930][ T5896] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2'.
[   66.241918][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.244615][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.247205][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.251492][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.255599][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.257987][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.317168][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.320444][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.427352][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.431635][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.451044][ T5900] netlink: 'syz.1.4': attribute type 3 has an invalid length.
[   66.454029][ T5900] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4'.
[   66.516006][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.529518][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.698480][ T5912] xt_hashlimit: size too large, truncated to 1048576
[   66.711194][ T5915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7'.
[   66.722614][ T5915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'.
[   66.832447][ T5921] netlink: 'syz.2.8': attribute type 1 has an invalid length.
[   66.992981][ T5928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11'.
[   67.046051][ T5931] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10'.
[   67.351318][ T5941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'.
[   67.560404][ T5953] syz.2.17 uses obsolete (PF_INET,SOCK_PACKET)
[   67.606979][ T5956] netlink: 'syz.1.18': attribute type 1 has an invalid length.
[   67.610286][ T5956] netlink: 204 bytes leftover after parsing attributes in process `syz.1.18'.
[   67.613918][ T5956] netlink: 'syz.1.18': attribute type 1 has an invalid length.
[   67.627358][ T5956] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18'.
[   67.631127][ T5956] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18'.
[   67.640668][ T5956] ip6gretap0: entered promiscuous mode
[   67.644265][ T5956] syz_tun: entered promiscuous mode
[   67.730217][ T5835] Bluetooth: hci0: command tx timeout
[   67.818888][ T5835] Bluetooth: hci1: command tx timeout
[   67.819154][ T5831] Bluetooth: hci2: command tx timeout
[   67.825464][ T5958] xt_socket: unknown flags 0xd0
[   67.925113][ T5961] IPVS: length: 24 != 147480
[   67.930069][ T5961] netlink: 'syz.0.20': attribute type 5 has an invalid length.
[   67.939909][ T5961] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   67.943333][ T5961] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   67.946768][ T5961] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   67.952148][ T5961] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[   67.959870][ T5961] geneve2: entered promiscuous mode
[   67.962453][ T5961] geneve2: entered allmulticast mode
[   67.996451][ T5963] vxcan2: entered promiscuous mode
[   68.173893][ T5973] delete_channel: no stack
[   68.449956][ T5995] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   68.937434][ T6032] netlink: 'syz.1.38': attribute type 10 has an invalid length.
[   68.943563][ T6032] bridge0: port 2(bridge_slave_1) entered disabled state
[   68.947338][ T6032] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.964281][ T6032] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.967036][ T6032] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.970518][ T6032] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.973421][ T6032] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.982284][ T6032] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   69.081770][ T6038] dummy0: mtu less than device minimum
[   69.174124][ T6045] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   69.467372][ T6054] tipc: Started in network mode
[   69.469706][ T6054] tipc: Node identity feb2bd9e2d98, cluster identity 4711
[   69.472943][ T6054] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   69.818808][ T5831] Bluetooth: hci0: command tx timeout
[   69.888750][ T5831] Bluetooth: hci2: command tx timeout
[   69.899250][ T5831] Bluetooth: hci1: command tx timeout
[   70.181845][ T6060] netlink: 'syz.1.48': attribute type 1 has an invalid length.
[   70.184508][ T6060] netlink: 'syz.1.48': attribute type 4 has an invalid length.
[   70.241423][ T6052] tipc: Disabling bearer <eth:syzkaller0>
[   70.297195][ T6065] warning: `syz.2.50' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   70.367143][ T6069] @: renamed from bond_slave_0 (while UP)
[   70.529457][ T6082] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[   70.720535][ T6094] IPv4: Oversized IP packet from 127.202.26.0
[   70.932998][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   70.993382][ T6121] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.206394][ T6127] xt_TCPMSS: Only works on TCP SYN packets
[   71.535713][ T6144] xt_addrtype: ipv6 BLACKHOLE matching not supported
[   71.553500][ T6146] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   71.557726][ T6145] : entered promiscuous mode
[   71.651641][ T6150] can: request_module (can-proto-0) failed.
[   71.744929][ T6158] __nla_validate_parse: 14 callbacks suppressed
[   71.744944][ T6158] netlink: 16 bytes leftover after parsing attributes in process `syz.1.80'.
[   71.752534][ T6158] netlink: 104 bytes leftover after parsing attributes in process `syz.1.80'.
[   71.763639][ T6157] netlink: 14 bytes leftover after parsing attributes in process `syz.0.81'.
[   71.801015][ T6160] xt_TCPMSS: Only works on TCP SYN packets
[   71.803586][ T6160] netlink: 'syz.1.82': attribute type 9 has an invalid length.
[   71.806523][ T6160] netlink: 'syz.1.82': attribute type 7 has an invalid length.
[   71.810538][ T6160] netlink: 'syz.1.82': attribute type 8 has an invalid length.
[   71.853843][ T6165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.83'.
[   71.856937][ T6165] nbd: couldn't find a device at index 65546
[   71.891133][ T5835] Bluetooth: hci0: command tx timeout
[   71.913142][ T6157] bond0 (unregistering): (slave c@): Releasing backup interface
[   71.923225][ T6157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   71.930959][ T6157] bond0 (unregistering): Released all slaves
[   71.970032][ T5840] Bluetooth: hci2: command tx timeout
[   71.972461][ T5835] Bluetooth: hci1: command tx timeout
[   72.052564][ T6176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.86'.
[   72.077259][ T6176] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   72.081359][ T6176] team0: Device ipvlan2 is already an upper device of the team interface
[   72.100067][ T6181] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.169655][ T6187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   72.561782][ T6217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'.
[   72.565176][ T6217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'.
[   72.700992][ T6222] Zero length message leads to an empty skb
[   72.714212][ T6223] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) !
[   72.893642][ T6228] syzkaller0: entered promiscuous mode
[   72.895998][ T6228] syzkaller0: entered allmulticast mode
[   72.899888][ T6226] netlink: 176 bytes leftover after parsing attributes in process `syz.0.102'.
[   72.908862][ T6234] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   72.910623][ T5659] bond0: (slave bond_slave_0): interface is now down
[   72.915457][ T5659] bond0: (slave bond_slave_1): interface is now down
[   72.942767][ T5659] bond0: (slave bond_slave_0): interface is now down
[   72.945311][ T5659] bond0: (slave bond_slave_1): interface is now down
[   72.961969][ T6240] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   72.992137][ T5659] bond0: (slave bond_slave_0): interface is now down
[   72.998757][ T5659] bond0: (slave bond_slave_1): interface is now down
[   73.022438][ T5659] bond0: (slave bond_slave_0): interface is now down
[   73.024956][ T5659] bond0: (slave bond_slave_1): interface is now down
[   73.043891][   T12] bond0: (slave bond_slave_0): interface is now down
[   73.046440][   T12] bond0: (slave bond_slave_1): interface is now down
[   73.072060][   T12] bond0: (slave bond_slave_0): interface is now down
[   73.075841][   T12] bond0: (slave bond_slave_1): interface is now down
[   73.090617][   T12] bond0: (slave bond_slave_0): interface is now down
[   73.092102][ T6234] netlink: 'syz.2.104': attribute type 30 has an invalid length.
[   73.094052][   T12] bond0: (slave bond_slave_1): interface is now down
[   73.119450][ T5659] bond0: (slave bond_slave_0): interface is now down
[   73.123516][ T5659] bond0: (slave bond_slave_1): interface is now down
[   73.161114][   T12] bond0: (slave bond_slave_0): interface is now down
[   73.163939][   T12] bond0: (slave bond_slave_1): interface is now down
[   73.190775][ T5659] bond0: (slave bond_slave_0): interface is now down
[   73.192930][ T5659] bond0: (slave bond_slave_1): interface is now down
[   73.222177][   T12] bond0: (slave bond_slave_0): interface is now down
[   73.228049][   T12] bond0: (slave bond_slave_1): interface is now down
[   73.251672][   T12] bond0: (slave bond_slave_0): interface is now down
[   73.258850][   T12] bond0: (slave bond_slave_1): interface is now down
[   73.278747][   T12] bond0: (slave bond_slave_0): interface is now down
[   73.285011][   T12] bond0: (slave bond_slave_1): interface is now down
[   73.298912][   T12] bond0: (slave bond_slave_0): interface is now down
[   73.301509][   T12] bond0: (slave bond_slave_1): interface is now down
[   73.318974][   T12] bond0: (slave bond_slave_0): interface is now down
[   73.321558][   T12] bond0: (slave bond_slave_1): interface is now down
[   73.339712][   T12] bond0: (slave bond_slave_0): interface is now down
[   73.342348][   T12] bond0: (slave bond_slave_1): interface is now down
[   73.359533][   T12] bond0: (slave bond_slave_0): interface is now down
[   73.362367][   T12] bond0: (slave bond_slave_1): interface is now down
[   73.378873][   T12] bond0: (slave bond_slave_0): interface is now down
[   73.381496][   T12] bond0: (slave bond_slave_1): interface is now down
[   73.399456][   T12] bond0: (slave bond_slave_0): interface is now down
[   73.402109][   T12] bond0: (slave bond_slave_1): interface is now down
[   73.421893][   T12] bond0: (slave bond_slave_0): interface is now down
[   73.424439][   T12] bond0: (slave bond_slave_1): interface is now down
[   73.438688][   T12] bond0: (slave bond_slave_0): interface is now down
[   73.441272][   T12] bond0: (slave bond_slave_1): interface is now down
[   73.460960][   T12] bond0: (slave bond_slave_0): interface is now down
[   73.463193][   T12] bond0: (slave bond_slave_1): interface is now down
[   73.481443][   T12] bond0: (slave bond_slave_0): interface is now down
[   73.484100][   T12] bond0: (slave bond_slave_1): interface is now down
[   73.500365][   T12] bond0: (slave bond_slave_0): interface is now down
[   73.503166][   T12] bond0: (slave bond_slave_1): interface is now down
[   73.518678][   T12] bond0: (slave bond_slave_0): interface is now down
[   73.521333][   T12] bond0: (slave bond_slave_1): interface is now down
[   73.540530][   T12] bond0: (slave bond_slave_0): interface is now down
[   73.542821][   T12] bond0: (slave bond_slave_1): interface is now down
[   73.558674][   T12] bond0: (slave bond_slave_0): interface is now down
[   73.561212][   T12] bond0: (slave bond_slave_1): interface is now down
[   73.578789][   T12] bond0: (slave bond_slave_0): interface is now down
[   73.581980][   T12] bond0: (slave bond_slave_1): interface is now down
[   73.598648][   T12] bond0: (slave bond_slave_0): interface is now down
[   73.601111][   T12] bond0: (slave bond_slave_1): interface is now down
[   73.620988][   T12] bond0: (slave bond_slave_0): interface is now down
[   73.623113][   T12] bond0: (slave bond_slave_1): interface is now down
[   73.638691][   T12] bond0: (slave bond_slave_0): interface is now down
[   73.640990][   T12] bond0: (slave bond_slave_1): interface is now down
[   73.661400][   T12] bond0: (slave bond_slave_0): interface is now down
[   73.663714][   T12] bond0: (slave bond_slave_1): interface is now down
[   73.678743][   T12] bond0: (slave bond_slave_0): interface is now down
[   73.681609][   T12] bond0: (slave bond_slave_1): interface is now down
[   73.701923][   T12] bond0: (slave bond_slave_0): interface is now down
[   73.704596][   T12] bond0: (slave bond_slave_1): interface is now down
[   73.721117][   T12] bond0: (slave bond_slave_0): interface is now down
[   73.723234][   T12] bond0: (slave bond_slave_1): interface is now down
[   73.748790][   T12] bond0: (slave bond_slave_0): interface is now down
[   73.751600][   T12] bond0: (slave bond_slave_1): interface is now down
[   73.778749][   T12] bond0: (slave bond_slave_0): interface is now down
[   73.781493][   T12] bond0: (slave bond_slave_1): interface is now down
[   73.808696][   T12] bond0: (slave bond_slave_0): interface is now down
[   73.811545][   T12] bond0: (slave bond_slave_1): interface is now down
[   73.840074][ T5659] bond0: (slave bond_slave_0): interface is now down
[   73.843336][ T5659] bond0: (slave bond_slave_1): interface is now down
[   73.869138][ T5659] bond0: (slave bond_slave_0): interface is now down
[   73.871922][ T5659] bond0: (slave bond_slave_1): interface is now down
[   73.900544][ T5659] bond0: (slave bond_slave_0): interface is now down
[   73.902943][ T5659] bond0: (slave bond_slave_1): interface is now down
[   73.928796][ T5659] bond0: (slave bond_slave_0): interface is now down
[   73.933041][ T5659] bond0: (slave bond_slave_1): interface is now down
[   73.961206][ T5659] bond0: (slave bond_slave_0): interface is now down
[   73.963949][ T5659] bond0: (slave bond_slave_1): interface is now down
[   73.979294][ T5659] bond0: (slave bond_slave_0): interface is now down
[   73.981359][ T5659] bond0: (slave bond_slave_1): interface is now down
[   74.009335][   T12] bond0: (slave bond_slave_0): interface is now down
[   74.012081][   T12] bond0: (slave bond_slave_1): interface is now down
[   74.030331][   T12] bond0: (slave bond_slave_0): interface is now down
[   74.032928][   T12] bond0: (slave bond_slave_1): interface is now down
[   74.050919][ T5835] Bluetooth: hci2: command 0x0405 tx timeout
[   74.061890][   T12] bond0: (slave bond_slave_0): interface is now down
[   74.066058][   T12] bond0: (slave bond_slave_1): interface is now down
[   74.088819][   T12] bond0: (slave bond_slave_0): interface is now down
[   74.093201][   T12] bond0: (slave bond_slave_1): interface is now down
[   74.120525][   T12] bond0: (slave bond_slave_0): interface is now down
[   74.123116][   T12] bond0: (slave bond_slave_1): interface is now down
[   74.140528][   T12] bond0: (slave bond_slave_0): interface is now down
[   74.146364][   T12] bond0: (slave bond_slave_1): interface is now down
[   74.172404][   T12] bond0: (slave bond_slave_0): interface is now down
[   74.175119][   T12] bond0: (slave bond_slave_1): interface is now down
[   74.191442][   T12] bond0: (slave bond_slave_0): interface is now down
[   74.193782][   T12] bond0: (slave bond_slave_1): interface is now down
[   74.219141][   T12] bond0: (slave bond_slave_0): interface is now down
[   74.222945][   T12] bond0: (slave bond_slave_1): interface is now down
[   74.249056][   T12] bond0: (slave bond_slave_0): interface is now down
[   74.253292][   T12] bond0: (slave bond_slave_1): interface is now down
[   74.280879][   T12] bond0: (slave bond_slave_0): interface is now down
[   74.282936][   T12] bond0: (slave bond_slave_1): interface is now down
[   74.308795][ T5659] bond0: (slave bond_slave_0): interface is now down
[   74.311364][ T5659] bond0: (slave bond_slave_1): interface is now down
[   74.338871][ T5659] bond0: (slave bond_slave_0): interface is now down
[   74.341488][ T5659] bond0: (slave bond_slave_1): interface is now down
[   74.354372][ T6234] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[   74.369407][   T12] bond0: (slave bond_slave_0): interface is now down
[   74.380445][   T12] bond0: (slave bond_slave_1): interface is now down
[   74.385742][   T12] bond0: now running without any active interface!
[   74.560470][ T6263] IPVS: set_ctl: invalid protocol: 135 172.30.1.2:20004
[   74.595923][ T6265] netlink: 16 bytes leftover after parsing attributes in process `syz.2.113'.
[   74.609071][ T6259] netlink: 56 bytes leftover after parsing attributes in process `syz.0.112'.
[   74.657612][ T6269] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun!
[   74.701997][ T6272] netlink: 'syz.1.114': attribute type 1 has an invalid length.
[   74.937235][ T6288] netlink: 'syz.1.123': attribute type 5 has an invalid length.
[   75.145222][ T6310] netlink: 'syz.0.128': attribute type 8 has an invalid length.
[   75.152861][ T6308] Bluetooth: MGMT ver 1.23
[   75.271374][ T6319] netlink: 'syz.0.131': attribute type 1 has an invalid length.
[   76.374628][ T6351] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   76.386797][ T6351] netlink: 'syz.0.142': attribute type 21 has an invalid length.
[   76.610302][ T6368] netlink: 'syz.1.147': attribute type 21 has an invalid length.
[   76.816239][ T6380] Driver unsupported XDP return value 0 on prog  (id 48) dev N/A, expect packet loss!
[   76.867384][ T6380] __nla_validate_parse: 32 callbacks suppressed
[   76.867400][ T6380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.150'.
[   76.876177][ T6383] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   76.934384][ T6387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.152'.
[   76.947923][ T6385] xt_l2tp: missing protocol rule (udp|l2tpip)
[   77.010666][ T6391] lo speed is unknown, defaulting to 1000
[   77.015201][ T6391] lo speed is unknown, defaulting to 1000
[   77.019817][ T6391] lo speed is unknown, defaulting to 1000
[   77.055918][ T6394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.154'.
[   77.144852][ T6391] infiniband syz0: set active
[   77.147464][    T9] lo speed is unknown, defaulting to 1000
[   77.149566][ T6391] infiniband syz0: added lo
[   77.183947][ T6391] RDS/IB: syz0: added
[   77.186082][ T6391] smc: adding ib device syz0 with port count 1
[   77.190744][ T6391] smc:    ib device syz0 port 1 has pnetid 
[   77.194780][    T9] lo speed is unknown, defaulting to 1000
[   77.199674][ T6391] lo speed is unknown, defaulting to 1000
[   77.392884][ T6391] lo speed is unknown, defaulting to 1000
[   77.435109][ T6402] netlink: 24 bytes leftover after parsing attributes in process `syz.0.157'.
[   77.556359][ T6408] netlink: 52 bytes leftover after parsing attributes in process `syz.1.158'.
[   77.574389][ T6408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.158'.
[   77.733588][ T6391] lo speed is unknown, defaulting to 1000
[   77.922753][ T6424] netlink: 56 bytes leftover after parsing attributes in process `syz.0.162'.
[   77.928715][ T6424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.162'.
[   78.179163][ T6442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.166'.
[   78.212301][ T6442] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.230887][ T6442] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.233835][ T6442] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address
[   78.239715][ T6442] bond0: (slave vxcan3): Error -95 calling set_mac_address
[   78.283243][ T6450] macvlan2: entered promiscuous mode
[   78.285345][ T6450] macvlan2: entered allmulticast mode
[   78.287774][ T6450] bond0: (slave macvlan2): Error -98 calling set_mac_address
[   78.323326][ T6447] bond0: Unable to set down delay as MII monitoring is disabled
[   78.448169][ T6458] netlink: 16 bytes leftover after parsing attributes in process `syz.1.172'.
[   78.460610][ T6458] tipc: Invalid UDP bearer configuration
[   78.460644][ T6458] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   78.474275][ T6458] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2
[   78.481433][ T6458] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0
[   79.295888][ T6493] lo speed is unknown, defaulting to 1000
[   79.549770][ T6507] netlink: 'syz.2.188': attribute type 23 has an invalid length.
[   79.584201][ T6510] netlink: 'syz.2.188': attribute type 23 has an invalid length.
[   79.623865][ T6498] xt_CT: No such helper "snmp"
[   80.068247][ T6538] Cannot find add_set index 0 as target
[   80.149992][ T6543] lo speed is unknown, defaulting to 1000
[   80.200640][ T6549] skbuff: bad partial csum: csum=65506/2 headroom=98 headlen=65526
[   80.861896][ T6582] openvswitch: netlink: Invalid MD length 0 for MD type 0
[   80.869625][ T6582] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.156754][ T6599] bpq0: entered promiscuous mode
[   81.158920][ T6599] bpq0: entered allmulticast mode
[   81.465006][ T6612] netlink: 'syz.2.207': attribute type 2 has an invalid length.
[   81.680066][ T6632] nft_compat: unsupported protocol 0
[   81.700774][ T6632] nft_compat: unsupported protocol 0
[   81.743640][ T6636] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[   82.083178][ T6665] netlink: 'syz.2.224': attribute type 1 has an invalid length.
[   82.097264][ T6666] x_tables: duplicate underflow at hook 3
[   82.141928][ T6665] bond1: entered promiscuous mode
[   82.143634][ T6665] bond1: entered allmulticast mode
[   82.145746][ T6665] 8021q: adding VLAN 0 to HW filter on device bond1
[   82.193125][ T6672] __nla_validate_parse: 9 callbacks suppressed
[   82.193136][ T6672] netlink: 20 bytes leftover after parsing attributes in process `syz.1.226'.
[   82.261689][ T6682] netlink: 'syz.1.227': attribute type 1 has an invalid length.
[   82.267407][ T6680] bridge1: entered promiscuous mode
[   82.273177][ T6682] netlink: 'syz.1.227': attribute type 11 has an invalid length.
[   82.282394][ T6680] bridge1: entered allmulticast mode
[   82.285401][ T6682] netlink: 220 bytes leftover after parsing attributes in process `syz.1.227'.
[   82.292603][ T6680] bond1: (slave bridge1): Enslaving as a backup interface with an up link
[   82.359291][ T5861] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   82.468982][ T5861] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[   82.616660][ T6706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   82.761450][ T6716] netlink: 16 bytes leftover after parsing attributes in process `syz.0.235'.
[   82.947345][ T6726] openvswitch: netlink: IP tunnel TTL not specified.
[   83.142698][ T6733] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.149432][ T6733] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   83.180399][ T6731] netlink: 'syz.2.238': attribute type 2 has an invalid length.
[   83.192792][ T6731] vlan2: entered promiscuous mode
[   83.194415][ T6731] bond0: entered promiscuous mode
[   83.196097][ T6731] bond_slave_0: entered promiscuous mode
[   83.198387][ T6731] bond_slave_1: entered promiscuous mode
[   83.200549][ T6731] vlan2: entered allmulticast mode
[   83.202491][ T6731] bond0: entered allmulticast mode
[   83.204398][ T6731] bond_slave_0: entered allmulticast mode
[   83.206629][ T6731] bond_slave_1: entered allmulticast mode
[   83.282244][ T6733] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.292588][ T6733] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   83.348158][ T6746] IPv6: Can't replace route, no match found
[   83.363323][ T6747] netlink: 240 bytes leftover after parsing attributes in process `syz.2.241'.
[   83.401174][ T6733] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.404258][ T6733] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   83.432822][ T6752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.244'.
[   83.494209][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.245'.
[   83.499241][ T6733] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.502990][ T6733] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[   83.575243][ T6733] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   83.577986][ T6733] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[   83.585660][ T6733] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   83.588214][ T6733] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[   83.615384][ T6733] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   83.618711][ T6733] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[   83.630044][ T6733] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   83.632651][ T6733] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[   83.800632][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'.
[   83.815177][ T6765] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   83.818429][ T6765] syzkaller0: entered promiscuous mode
[   83.821802][ T6765] syzkaller0: entered allmulticast mode
[   83.827312][ T6764] tipc: Resetting bearer <eth:syzkaller0>
[   83.865742][ T6764] tipc: Disabling bearer <eth:syzkaller0>
[   83.879502][ T6770] xt_hashlimit: max too large, truncated to 1048576
[   83.882469][ T6770] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[   83.901034][ T6770] netlink: 'syz.2.251': attribute type 1 has an invalid length.
[   83.925686][ T6770] bond2: entered promiscuous mode
[   83.928139][ T6770] 8021q: adding VLAN 0 to HW filter on device bond2
[   83.944322][ T6770] bond2: (slave dummy0): making interface the new active one
[   83.947342][ T6770] dummy0: entered promiscuous mode
[   83.951255][ T6770] bond2: (slave dummy0): Enslaving as an active interface with an up link
[   84.020364][ T6770] syz.2.251 (6770) used greatest stack depth: 19864 bytes left
[   84.824642][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888122e34400: rx timeout, send abort
[   84.971825][ T6801] xt_socket: unknown flags 0x8
[   85.147399][ T6808] netlink: 'syz.2.264': attribute type 11 has an invalid length.
[   85.247298][ T6812] netlink: 'syz.2.266': attribute type 21 has an invalid length.
[   85.325442][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888122e34c00: rx timeout, send abort
[   85.329112][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888122e34400: abort rx timeout. Force session deactivation
[   85.351930][    C0] vxcan0: j1939_xtp_rx_rts_session_active: 0xffff888122e34c00: connection exists (fe ff). last cmd: 20
[   85.423262][ T6821] netlink: 'syz.2.267': attribute type 9 has an invalid length.
[   85.426320][ T6821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.267'.
[   85.436604][ T6821] hsr0: entered promiscuous mode
[   85.441674][ T6821] macvlan2: entered promiscuous mode
[   85.444975][ T6821] macvlan2: entered allmulticast mode
[   85.447055][ T6821] hsr0: entered allmulticast mode
[   85.449431][ T6821] hsr_slave_0: entered allmulticast mode
[   85.451673][ T6821] hsr_slave_1: entered allmulticast mode
[   85.601954][    C0] vxcan0: j1939_tp_rxtimer: 0xffff88811047b400: rx timeout, send abort
[   85.603260][ T6829] netlink: 96 bytes leftover after parsing attributes in process `syz.2.270'.
[   85.608261][ T6829] netlink: 40 bytes leftover after parsing attributes in process `syz.2.270'.
[   86.104642][    C0] vxcan0: j1939_tp_rxtimer: 0xffff88811047b400: abort rx timeout. Force session deactivation
[   86.292096][   T96] cfg80211: failed to load regulatory.db
[   87.395195][ T6879] netlink: 'syz.1.282': attribute type 142 has an invalid length.
[   87.398608][ T6878] netlink: 'syz.1.282': attribute type 3 has an invalid length.
[   87.462791][ T6881] __nla_validate_parse: 1 callbacks suppressed
[   87.462801][ T6881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.282'.
[   87.522394][ T6886] syz_tun: entered allmulticast mode
[   87.541722][ T6886] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   87.715123][ T6896] netlink: 7 bytes leftover after parsing attributes in process `syz.0.287'.
[   87.875651][ T6903] netlink: 'syz.2.291': attribute type 21 has an invalid length.
[   87.899765][ T6903] netlink: 'syz.2.291': attribute type 4 has an invalid length.
[   87.909867][ T6903] vlan0: entered promiscuous mode
[   88.164898][   T96] hid-generic 0005:0458:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   88.304658][ T6925] xt_HMARK: proto mask must be zero with L3 mode
[   88.348464][ T6928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.298'.
[   88.495995][ T6942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.301'.
[   88.502608][ T6943] netlink: 40 bytes leftover after parsing attributes in process `syz.2.302'.
[   88.557126][ T6945] netlink: 'syz.2.303': attribute type 3 has an invalid length.
[   88.563612][ T6945] netlink: 'syz.2.303': attribute type 3 has an invalid length.
[   88.726950][ T6954] syzkaller1: entered promiscuous mode
[   88.730226][ T6954] syzkaller1: entered allmulticast mode
[   88.737379][ T6954] netlink: 'syz.1.307': attribute type 1 has an invalid length.
[   88.904365][ T6968] netlink: 24 bytes leftover after parsing attributes in process `syz.2.309'.
[   89.050656][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.313'.
[   90.006855][ T7002] x_tables: duplicate underflow at hook 2
[   90.023054][ T7004] bridge2: the hash_elasticity option has been deprecated and is always 16
[   90.025806][ T7004] bridge2: entered allmulticast mode
[   90.039283][ T7004] xt_TPROXY: Can be used only with -p tcp or -p udp
[   90.050693][ T7008] bridge3: the hash_elasticity option has been deprecated and is always 16
[   90.053555][ T7008] bridge3: entered allmulticast mode
[   90.195613][ T7023] netlink: 32 bytes leftover after parsing attributes in process `syz.1.324'.
[   90.208002][ T7026] netlink: 56 bytes leftover after parsing attributes in process `syz.0.325'.
[   90.214474][ T7026] netlink: 17 bytes leftover after parsing attributes in process `syz.0.325'.
[   90.275517][ T7031] validate_nla: 3 callbacks suppressed
[   90.275556][ T7031] netlink: 'syz.1.326': attribute type 10 has an invalid length.
[   90.293033][ T7031] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   90.513150][ T7041] syz.1.329 (7041) used obsolete PPPIOCDETACH ioctl
[   91.566089][ T7121] IPv6: NLM_F_CREATE should be specified when creating new route
[   92.506831][ T7171] x_tables: duplicate underflow at hook 2
[   93.153974][ T7191] __nla_validate_parse: 6 callbacks suppressed
[   93.153990][ T7191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.364'.
[   93.160475][ T7191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.364'.
[   93.287719][ T7197] sctp: [Deprecated]: syz.2.366 (pid 7197) Use of int in max_burst socket option deprecated.
[   93.287719][ T7197] Use struct sctp_assoc_value instead
[   93.307408][ T7203] netlink: 20 bytes leftover after parsing attributes in process `syz.0.367'.
[   93.315106][ T7203] netlink: 16 bytes leftover after parsing attributes in process `syz.0.367'.
[   93.441464][ T7205] lo speed is unknown, defaulting to 1000
[   93.476932][ T7213] netlink: 'syz.2.369': attribute type 9 has an invalid length.
[   93.483347][ T7213] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.369'.
[   93.986587][ T7240] veth0: entered promiscuous mode
[   93.992323][ T7240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.373'.
[   94.261208][ T7246] netlink: 'syz.1.375': attribute type 2 has an invalid length.
[   94.554991][ T7257] lo: entered allmulticast mode
[   94.561507][ T7257] lo: left allmulticast mode
[   94.571935][ T7256] netlink: 92 bytes leftover after parsing attributes in process `syz.0.378'.
[   94.752877][ T7267] netlink: 'syz.2.382': attribute type 1 has an invalid length.
[   94.756866][ T7267] netlink: 'syz.2.382': attribute type 1 has an invalid length.
[   94.760397][ T7267] netlink: 'syz.2.382': attribute type 11 has an invalid length.
[   94.763507][ T7267] netlink: 224 bytes leftover after parsing attributes in process `syz.2.382'.
[   94.877357][ T7277] netlink: 'syz.1.386': attribute type 6 has an invalid length.
[   94.957753][ T7282] netlink: 'syz.0.389': attribute type 29 has an invalid length.
[   94.961132][ T7283] netlink: 24 bytes leftover after parsing attributes in process `syz.1.388'.
[   94.966829][ T7287] netlink: 148 bytes leftover after parsing attributes in process `syz.0.389'.
[   94.971819][ T7286] netlink: 'syz.0.389': attribute type 29 has an invalid length.
[   94.989649][ T7283] xt_CT: No such helper "netbios-ns"
[   95.092074][ T7297] xt_TPROXY: Can be used only with -p tcp or -p udp
[   95.732821][ T7330] syzkaller0: entered promiscuous mode
[   95.734680][ T7330] syzkaller0: entered allmulticast mode
[   96.994278][ T7340] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[   97.371354][ T7367] lo speed is unknown, defaulting to 1000
[   97.619256][ T7373] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[   97.781949][ T7380] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   97.797408][   T33] audit: type=1804 audit(1752170024.534:2): pid=7380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.420" name="/newroot/149/cgroup.controllers" dev="tmpfs" ino=783 res=1 errno=0
[   97.828380][   T33] audit: type=1800 audit(1752170024.554:3): pid=7380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.420" name="cgroup.controllers" dev="tmpfs" ino=783 res=0 errno=0
[   98.181848][ T7402] __nla_validate_parse: 13 callbacks suppressed
[   98.181864][ T7402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.428'.
[   98.237823][ T7398] syzkaller0: entered promiscuous mode
[   98.244315][ T7398] syzkaller0: entered allmulticast mode
[   98.341548][ T7411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.429'.
[   98.396382][ T7416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.429'.
[   98.465142][ T7417] netlink: 60 bytes leftover after parsing attributes in process `syz.0.429'.
[   99.288897][ T7405] lo speed is unknown, defaulting to 1000
[   99.383175][ T7421] netem: change failed
[   99.505481][ T7434] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.508106][ T7434] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.514351][ T7434] netlink: 'syz.2.436': attribute type 8 has an invalid length.
[   99.606818][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.439'.
[   99.738918][ T7451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.441'.
[   99.807045][ T7453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.441'.
[   99.812269][ T7453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.441'.
[   99.817030][ T7453] Cannot find del_set index 4 as target
[   99.878734][ T7455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.443'.
[   99.943070][ T7462] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.445'.
[  100.174391][ T7478] netlink: 'syz.2.451': attribute type 1 has an invalid length.
[  100.225522][ T7483] netlink: 'syz.2.452': attribute type 29 has an invalid length.
[  100.228435][ T7483] netlink: 'syz.2.452': attribute type 29 has an invalid length.
[  100.269347][ T7483] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  100.403595][ T7490] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  100.413749][ T7489] IPVS: stopping master sync thread 7490 ...
[  100.626519][ T7506] netlink: 'syz.2.459': attribute type 1 has an invalid length.
[  100.718428][ T7511] netlink: 'syz.0.461': attribute type 4 has an invalid length.
[  100.902168][ T7519] lo speed is unknown, defaulting to 1000
[  101.973984][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802f338800: rx timeout, send abort
[  102.477193][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802f338800: abort rx timeout. Force session deactivation
[  103.215022][ T7576] netlink: 'syz.2.483': attribute type 1 has an invalid length.
[  103.218219][ T7576] __nla_validate_parse: 8 callbacks suppressed
[  103.218231][ T7576] netlink: 172 bytes leftover after parsing attributes in process `syz.2.483'.
[  103.227278][ T7576] netlink: 'syz.2.483': attribute type 1 has an invalid length.
[  103.397457][ T7586] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  103.404897][ T7586] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  104.130007][ T5831] Bluetooth: hci0: command tx timeout
[  104.378748][ T5831] Bluetooth: hci2: command 0x0405 tx timeout
[  104.422073][ T7602] tipc: Started in network mode
[  104.423994][ T7602] tipc: Node identity d226ebd87b2c, cluster identity 4711
[  104.426876][ T7602] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  104.431334][ T7602] syzkaller0: entered promiscuous mode
[  104.433065][ T7602] syzkaller0: entered allmulticast mode
[  104.447729][ T7602] tipc: Resetting bearer <eth:syzkaller0>
[  104.454805][ T7602] netlink: 244 bytes leftover after parsing attributes in process `syz.2.488'.
[  104.463692][ T7601] tipc: Resetting bearer <eth:syzkaller0>
[  104.478884][ T7601] tipc: Disabling bearer <eth:syzkaller0>
[  104.649839][ T7614] netlink: 'syz.2.491': attribute type 39 has an invalid length.
[  104.658268][ T7614] netlink: 28 bytes leftover after parsing attributes in process `syz.2.491'.
[  104.663213][ T7614] netlink: 28 bytes leftover after parsing attributes in process `syz.2.491'.
[  104.666121][ T7614] netlink: 24 bytes leftover after parsing attributes in process `syz.2.491'.
[  104.700063][ T7616] netlink: 'syz.2.492': attribute type 1 has an invalid length.
[  104.703008][ T7616] netlink: 236 bytes leftover after parsing attributes in process `syz.2.492'.
[  104.706685][ T7616] NCSI netlink: No device for ifindex 813332851
[  104.771157][ T7620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.494'.
[  104.784813][ T7620] netlink: 'syz.2.494': attribute type 1 has an invalid length.
[  104.901094][ T7635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.497'.
[  104.905274][ T7633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.498'.
[  104.929787][ T7633] 8021q: adding VLAN 0 to HW filter on device team1
[  105.543502][ T7637] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.562701][ T7637] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  105.622564][ T7637] vlan0: left promiscuous mode
[  105.664507][ T7637] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.667340][ T7637] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.670612][ T7637] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.673381][ T7637] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.681191][ T7637] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  105.718679][ T7637] bond1: left promiscuous mode
[  105.720279][ T7637] bridge1: left promiscuous mode
[  105.721955][ T7637] bond1: left allmulticast mode
[  105.723408][ T7637] bridge1: left allmulticast mode
[  105.729540][ T7637] vlan2: left promiscuous mode
[  105.731330][ T7637] bond0: left promiscuous mode
[  105.732955][ T7637] bond_slave_0: left promiscuous mode
[  105.734755][ T7637] bond_slave_1: left promiscuous mode
[  105.736836][ T7637] vlan2: left allmulticast mode
[  105.738380][ T7637] bond0: left allmulticast mode
[  105.741497][ T7637] bond_slave_0: left allmulticast mode
[  105.743311][ T7637] bond_slave_1: left allmulticast mode
[  105.746828][ T7637] bond2: left promiscuous mode
[  105.748359][ T7637] dummy0: left promiscuous mode
[  105.753104][ T7637] hsr0: left allmulticast mode
[  105.755492][ T7637] hsr_slave_0: left allmulticast mode
[  105.757176][ T7637] hsr_slave_1: left allmulticast mode
[  105.759369][ T7637] macvlan2: left promiscuous mode
[  105.760945][ T7637] macvlan2: left allmulticast mode
[  105.771597][   T10] lo speed is unknown, defaulting to 1000
[  105.771631][ T7645] netlink: 32 bytes leftover after parsing attributes in process `syz.0.502'.
[  105.775551][   T10] syz0: Port: 1 Link DOWN
[  105.779575][   T10] lo speed is unknown, defaulting to 1000
[  106.287712][ T7673] netlink: 'syz.0.510': attribute type 5 has an invalid length.
[  106.291214][ T7673] netlink: 'syz.0.510': attribute type 7 has an invalid length.
[  106.304164][ T7673] : entered promiscuous mode
[  107.570682][ T5659] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  107.573808][ T5659] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  107.636107][ T5659] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  107.639247][ T5659] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  107.747418][ T5659] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  107.753126][ T5659] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  107.808267][ T5659] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  107.814220][ T5659] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  107.941189][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  107.945807][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  107.953222][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  107.964799][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  107.973822][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  107.996470][ T5659] bridge_slave_1: left allmulticast mode
[  108.000279][ T5659] bridge_slave_1: left promiscuous mode
[  108.003422][ T5659] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.018480][ T5659] bridge_slave_0: left allmulticast mode
[  108.023159][ T5659] bridge_slave_0: left promiscuous mode
[  108.025406][ T5659] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.517589][ T5659] bond0 (unregistering): Released all slaves
[  108.529331][ T7708] macvlan0: entered allmulticast mode
[  108.531440][ T7708] netlink: 'syz.2.525': attribute type 1 has an invalid length.
[  108.534269][ T7708] netlink: 'syz.2.525': attribute type 2 has an invalid length.
[  108.551468][ T7705] lo speed is unknown, defaulting to 1000
[  108.589615][ T5659] : left promiscuous mode
[  108.665502][ T5659] tipc: Left network mode
[  109.145370][ T5659] hsr_slave_0: left promiscuous mode
[  109.160678][ T5659] hsr_slave_1: left promiscuous mode
[  109.169525][ T5659] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  109.179395][ T5659] batman_adv: batadv0: Removing interface: batadv_slave_0
[  109.184814][ T5659] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  109.187096][ T5659] batman_adv: batadv0: Removing interface: batadv_slave_1
[  109.216751][ T5659] veth1_macvtap: left promiscuous mode
[  109.219948][ T5659] veth0_macvtap: left promiscuous mode
[  109.221997][ T5659] veth1_vlan: left promiscuous mode
[  109.223871][ T5659] veth0_vlan: left promiscuous mode
[  109.587560][ T5659] team0 (unregistering): Port device team_slave_1 removed
[  109.621056][ T5659] team0 (unregistering): Port device team_slave_0 removed
[  110.018397][ T7705] chnl_net:caif_netlink_parms(): no params data found
[  110.060028][ T5831] Bluetooth: hci2: command tx timeout
[  110.294194][ T7705] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.296646][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.309751][ T7705] bridge_slave_0: entered allmulticast mode
[  110.313244][ T7705] bridge_slave_0: entered promiscuous mode
[  110.316938][ T7705] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.321111][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.324917][ T7705] bridge_slave_1: entered allmulticast mode
[  110.328193][ T7705] bridge_slave_1: entered promiscuous mode
[  110.358035][ T7705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  110.367954][ T7705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  110.448314][ T7705] team0: Port device team_slave_0 added
[  110.459890][ T7705] team0: Port device team_slave_1 added
[  110.497079][ T7705] batman_adv: batadv0: Adding interface: batadv_slave_0
[  110.500348][ T7705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.512983][ T7705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  110.522104][ T7705] batman_adv: batadv0: Adding interface: batadv_slave_1
[  110.524758][ T7705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.537588][ T7705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  110.587003][ T7705] hsr_slave_0: entered promiscuous mode
[  110.592047][ T7705] hsr_slave_1: entered promiscuous mode
[  110.595329][ T7705] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  110.597959][ T7705] Cannot create hsr debugfs directory
[  110.828521][ T7787] __nla_validate_parse: 9 callbacks suppressed
[  110.830927][ T7787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.535'.
[  110.856877][ T7787] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link
[  110.876639][ T7787] veth1: entered promiscuous mode
[  110.880411][ T7787] bond4: (slave veth1): Enslaving as an active interface with an up link
[  111.309754][ T7705] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  111.322802][ T7705] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  111.334149][ T7705] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  111.342688][ T7705] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  111.445625][ T7705] 8021q: adding VLAN 0 to HW filter on device bond0
[  111.469278][ T7705] 8021q: adding VLAN 0 to HW filter on device team0
[  111.478134][  T965] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.481007][  T965] bridge0: port 1(bridge_slave_0) entered forwarding state
[  111.493964][  T965] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.496799][  T965] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.736585][ T7705] 8021q: adding VLAN 0 to HW filter on device batadv0
[  111.794494][ T7705] veth0_vlan: entered promiscuous mode
[  111.805340][ T7705] veth1_vlan: entered promiscuous mode
[  111.850779][ T7705] veth0_macvtap: entered promiscuous mode
[  111.858400][ T7705] veth1_macvtap: entered promiscuous mode
[  111.876023][ T7705] batman_adv: batadv0: Interface activated: batadv_slave_0
[  111.891659][ T7705] batman_adv: batadv0: Interface activated: batadv_slave_1
[  111.903277][ T7705] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.907157][ T7705] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.912987][ T7705] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.916527][ T7705] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.004309][   T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.007383][   T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.041918][  T965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  112.045582][  T965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.138777][    C0] ------------[ cut here ]------------
[  112.141543][    C0] workqueue: cannot queue hci_cmd_timeout on wq hci2
[  112.144297][    C0] WARNING: CPU: 0 PID: 7705 at kernel/workqueue.c:2258 __queue_work+0xd62/0xfe0
[  112.151550][    C0] Modules linked in:
[  112.153236][    C0] CPU: 0 UID: 0 PID: 7705 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  112.158347][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  112.161762][    C0] RIP: 0010:__queue_work+0xd62/0xfe0
[  112.163624][    C0] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 69 0f 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 40 e1 89 8b 4c 89 fa e8 1f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 80 8b 35 00 90 0f 0b 90 e9 dd fc ff
[  112.169465][    C0] RSP: 0018:ffffc90000007b08 EFLAGS: 00010046
[  112.171258][    C0] RAX: e7a2daad602e1500 RBX: 0000000000000100 RCX: ffff8880205ad640
[  112.174052][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  112.176934][    C0] RBP: 1ffff11005f63838 R08: ffff88804b024293 R09: 1ffff11009604852
[  112.179663][    C0] R10: dffffc0000000000 R11: ffffed1009604853 R12: dffffc0000000000
[  112.182315][    C0] R13: ffff88810ffa4988 R14: 0000000000000008 R15: ffff88802fb1c178
[  112.184996][    C0] FS:  0000555562b75500(0000) GS:ffff8880b861d000(0000) knlGS:0000000000000000
[  112.188017][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  112.190353][    C0] CR2: 000055555961b808 CR3: 00000001082c6000 CR4: 00000000000006f0
[  112.193201][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  112.195852][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  112.198606][    C0] Call Trace:
[  112.199848][    C0]  <IRQ>
[  112.200884][    C0]  call_timer_fn+0x17e/0x5f0
[  112.202530][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  112.204392][    C0]  ? call_timer_fn+0xbe/0x5f0
[  112.205857][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  112.207450][    C0]  ? do_raw_spin_unlock+0x4d/0x240
[  112.209094][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  112.211001][    C0]  __run_timer_base+0x646/0x860
[  112.212721][    C0]  ? ktime_get+0x3e/0x1f0
[  112.214138][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  112.215856][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  112.217788][    C0]  run_timer_softirq+0xb7/0x180
[  112.219691][    C0]  handle_softirqs+0x286/0x870
[  112.221172][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  112.222874][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  112.224528][    C0]  __irq_exit_rcu+0xca/0x1f0
[  112.225971][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  112.227669][    C0]  irq_exit_rcu+0x9/0x30
[  112.229113][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  112.231171][    C0]  </IRQ>
[  112.232153][    C0]  <TASK>
[  112.233066][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  112.234972][    C0] RIP: 0010:lock_acquire+0x175/0x360
[  112.236770][    C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 3b fd 01 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e
[  112.243392][    C0] RSP: 0018:ffffc900064a7768 EFLAGS: 00000206
[  112.245518][    C0] RAX: e7a2daad602e1500 RBX: 0000000000000000 RCX: e7a2daad602e1500
[  112.248384][    C0] RDX: ffffffff934e84c8 RSI: ffffffff8db8453a RDI: ffffffff8be28fc0
[  112.251339][    C0] RBP: ffffffff818b1355 R08: 0000000000000008 R09: ffffffff95ca75d0
[  112.254056][    C0] R10: 0000000011e714e6 R11: 000000009afe3bbd R12: 0000000000000000
[  112.256793][    C0] R13: ffff88802fb1c148 R14: 0000000000000001 R15: 0000000000000246
[  112.259574][    C0]  ? touch_wq_lockdep_map+0xb5/0x180
[  112.261351][    C0]  ? touch_wq_lockdep_map+0xb5/0x180
[  112.263198][    C0]  touch_wq_lockdep_map+0xcb/0x180
[  112.265106][    C0]  ? touch_wq_lockdep_map+0xb5/0x180
[  112.266842][    C0]  __flush_workqueue+0x121/0x14b0
[  112.268599][    C0]  ? drain_workqueue+0xb1/0x390
[  112.270147][    C0]  ? __pfx___flush_workqueue+0x10/0x10
[  112.272100][    C0]  drain_workqueue+0xd3/0x390
[  112.273705][    C0]  hci_dev_close_sync+0x659/0x1330
[  112.275385][    C0]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  112.277497][    C0]  ? up_write+0x1c4/0x420
[  112.278786][    C0]  hci_unregister_dev+0x21a/0x510
[  112.280308][    C0]  vhci_release+0x80/0xd0
[  112.281889][    C0]  ? __pfx_vhci_release+0x10/0x10
[  112.283551][    C0]  __fput+0x44c/0xa70
[  112.284818][    C0]  task_work_run+0x1d4/0x260
[  112.286406][    C0]  ? __pfx_task_work_run+0x10/0x10
[  112.288305][    C0]  ? kmem_cache_free+0x18f/0x400
[  112.290160][    C0]  do_exit+0x6b5/0x22e0
[  112.291623][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  112.293709][    C0]  ? __pfx_do_exit+0x10/0x10
[  112.295617][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  112.297740][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  112.299663][    C0]  do_group_exit+0x21c/0x2d0
[  112.301265][    C0]  __x64_sys_exit_group+0x3f/0x40
[  112.302971][    C0]  x64_sys_call+0x21ba/0x21c0
[  112.304562][    C0]  do_syscall_64+0xfa/0x3b0
[  112.305926][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  112.307567][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.309888][    C0]  ? exc_page_fault+0x9f/0xf0
[  112.311700][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.313929][    C0] RIP: 0033:0x7f2cc198e929
[  112.315710][    C0] Code: Unable to access opcode bytes at 0x7f2cc198e8ff.
[  112.318360][    C0] RSP: 002b:00007ffd06746398 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  112.321549][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2cc198e929
[  112.324570][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
[  112.327529][    C0] RBP: 00007f2cc19ee8f0 R08: 00007ffd06744137 R09: 0000000000000003
[  112.330457][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  112.333484][    C0] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffd06746550
[  112.336518][    C0]  </TASK>
[  112.337708][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  112.340462][    C0] CPU: 0 UID: 0 PID: 7705 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  112.346030][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  112.350448][    C0] Call Trace:
[  112.352319][    C0]  <IRQ>
[  112.353868][    C0]  dump_stack_lvl+0x99/0x250
[  112.355897][    C0]  ? __asan_memcpy+0x40/0x70
[  112.357745][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  112.359899][    C0]  ? __pfx__printk+0x10/0x10
[  112.361665][    C0]  panic+0x2db/0x790
[  112.363140][    C0]  ? __pfx_panic+0x10/0x10
[  112.364805][    C0]  ? show_trace_log_lvl+0x4fb/0x550
[  112.366788][    C0]  __warn+0x31b/0x4b0
[  112.368333][    C0]  ? __queue_work+0xd62/0xfe0
[  112.370195][    C0]  ? __queue_work+0xd62/0xfe0
[  112.372050][    C0]  report_bug+0x2be/0x4f0
[  112.373700][    C0]  ? __queue_work+0xd62/0xfe0
[  112.375527][    C0]  ? __queue_work+0xd62/0xfe0
[  112.377347][    C0]  ? __queue_work+0xd64/0xfe0
[  112.379075][    C0]  handle_bug+0x84/0x160
[  112.380504][    C0]  exc_invalid_op+0x1a/0x50
[  112.382232][    C0]  asm_exc_invalid_op+0x1a/0x20
[  112.384104][    C0] RIP: 0010:__queue_work+0xd62/0xfe0
[  112.386113][    C0] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 69 0f 99 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 40 e1 89 8b 4c 89 fa e8 1f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 80 8b 35 00 90 0f 0b 90 e9 dd fc ff
[  112.393385][    C0] RSP: 0018:ffffc90000007b08 EFLAGS: 00010046
[  112.395814][    C0] RAX: e7a2daad602e1500 RBX: 0000000000000100 RCX: ffff8880205ad640
[  112.398797][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002
[  112.401835][    C0] RBP: 1ffff11005f63838 R08: ffff88804b024293 R09: 1ffff11009604852
[  112.404930][    C0] R10: dffffc0000000000 R11: ffffed1009604853 R12: dffffc0000000000
[  112.407441][    C0] R13: ffff88810ffa4988 R14: 0000000000000008 R15: ffff88802fb1c178
[  112.409884][    C0]  ? __queue_work+0xd61/0xfe0
[  112.411355][    C0]  call_timer_fn+0x17e/0x5f0
[  112.412777][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  112.414603][    C0]  ? call_timer_fn+0xbe/0x5f0
[  112.416354][    C0]  ? __pfx_call_timer_fn+0x10/0x10
[  112.418105][    C0]  ? do_raw_spin_unlock+0x4d/0x240
[  112.419610][    C0]  ? __pfx_delayed_work_timer_fn+0x10/0x10
[  112.421291][    C0]  __run_timer_base+0x646/0x860
[  112.422713][    C0]  ? ktime_get+0x3e/0x1f0
[  112.424092][    C0]  ? __pfx___run_timer_base+0x10/0x10
[  112.425691][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  112.427603][    C0]  run_timer_softirq+0xb7/0x180
[  112.429201][    C0]  handle_softirqs+0x286/0x870
[  112.430957][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  112.432391][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  112.433919][    C0]  __irq_exit_rcu+0xca/0x1f0
[  112.435487][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  112.437098][    C0]  irq_exit_rcu+0x9/0x30
[  112.438593][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  112.440504][    C0]  </IRQ>
[  112.441589][    C0]  <TASK>
[  112.442634][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  112.444783][    C0] RIP: 0010:lock_acquire+0x175/0x360
[  112.446512][    C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 3b fd 01 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e
[  112.452214][    C0] RSP: 0018:ffffc900064a7768 EFLAGS: 00000206
[  112.454014][    C0] RAX: e7a2daad602e1500 RBX: 0000000000000000 RCX: e7a2daad602e1500
[  112.456377][    C0] RDX: ffffffff934e84c8 RSI: ffffffff8db8453a RDI: ffffffff8be28fc0
[  112.458726][    C0] RBP: ffffffff818b1355 R08: 0000000000000008 R09: ffffffff95ca75d0
[  112.461132][    C0] R10: 0000000011e714e6 R11: 000000009afe3bbd R12: 0000000000000000
[  112.463539][    C0] R13: ffff88802fb1c148 R14: 0000000000000001 R15: 0000000000000246
[  112.465875][    C0]  ? touch_wq_lockdep_map+0xb5/0x180
[  112.467489][    C0]  ? touch_wq_lockdep_map+0xb5/0x180
[  112.469346][    C0]  touch_wq_lockdep_map+0xcb/0x180
[  112.471116][    C0]  ? touch_wq_lockdep_map+0xb5/0x180
[  112.472861][    C0]  __flush_workqueue+0x121/0x14b0
[  112.474600][    C0]  ? drain_workqueue+0xb1/0x390
[  112.476304][    C0]  ? __pfx___flush_workqueue+0x10/0x10
[  112.478166][    C0]  drain_workqueue+0xd3/0x390
[  112.479656][    C0]  hci_dev_close_sync+0x659/0x1330
[  112.481148][    C0]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  112.483283][    C0]  ? up_write+0x1c4/0x420
[  112.484970][    C0]  hci_unregister_dev+0x21a/0x510
[  112.486910][    C0]  vhci_release+0x80/0xd0
[  112.488587][    C0]  ? __pfx_vhci_release+0x10/0x10
[  112.490543][    C0]  __fput+0x44c/0xa70
[  112.492092][    C0]  task_work_run+0x1d4/0x260
[  112.493818][    C0]  ? __pfx_task_work_run+0x10/0x10
[  112.495721][    C0]  ? kmem_cache_free+0x18f/0x400
[  112.497521][    C0]  do_exit+0x6b5/0x22e0
[  112.498823][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  112.500525][    C0]  ? __pfx_do_exit+0x10/0x10
[  112.502274][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  112.504283][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  112.506277][    C0]  do_group_exit+0x21c/0x2d0
[  112.508146][    C0]  __x64_sys_exit_group+0x3f/0x40
[  112.510082][    C0]  x64_sys_call+0x21ba/0x21c0
[  112.511796][    C0]  do_syscall_64+0xfa/0x3b0
[  112.513551][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  112.515562][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.517878][    C0]  ? exc_page_fault+0x9f/0xf0
[  112.519719][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.521930][    C0] RIP: 0033:0x7f2cc198e929
[  112.523292][    C0] Code: Unable to access opcode bytes at 0x7f2cc198e8ff.
[  112.525619][    C0] RSP: 002b:00007ffd06746398 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  112.528202][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2cc198e929
[  112.530797][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
[  112.533576][    C0] RBP: 00007f2cc19ee8f0 R08: 00007ffd06744137 R09: 0000000000000003
[  112.536392][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  112.539391][    C0] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffd06746550
[  112.542504][    C0]  </TASK>
[  112.544502][    C0] Kernel Offset: disabled
[  112.546172][    C0] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:53:59  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33bf860 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99dfc9f0 RSP=ffffc90000007250
R8 =ffff888108ca0237 R9 =1ffff11021194046 R10=dffffc0000000000 R11=ffffffff85475540
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff854755b7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555562b75500 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055555961b808 CR3=00000001082c6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fed4e411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b4e920 RBX=ffff88813663b1c0 RCX=ffff8881086d9cc0 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900032cf700 RSP=ffffc900032cf5a0
R8 =ffffffff8fa1def7 R9 =1ffffffff1f43bde R10=dffffc0000000000 R11=fffffbfff1f43bdf
R12=1ffff11009608385 R13=dffffc0000000000 R14=0000000000000000 R15=ffff88804b041c28
RIP=ffffffff81b4e909 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f04c02e7d60 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f04bf7856a3 00007f04bf7856a3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 0000555579d39b18
XMM06=0000000000000000 0000555579d3b428 XMM07=100050030fffffff ffffff0440030210
XMM08=00300319ffc01000 029003bdd10017f0 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
