last executing test programs:

2.115625063s ago: executing program 2 (id=1388):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000) (async)
r0 = socket(0x8, 0x3, 0x0) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000000101010200000000029a05c5010000001400198008000100100400000800020000010000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) (async)
writev(0xffffffffffffffff, 0x0, 0x0) (async)
write(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5) (async)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
ioctl$IMGETCOUNT(r0, 0x40106183, &(0x7f0000000000))

1.611547397s ago: executing program 2 (id=1393):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x0, 0x0, 0x8000}, 0x50)
syz_emit_ethernet(0x76, &(0x7f0000000080)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "efc3d3", 0x40, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0xffff, {0x5, 0x6, "5436ea", 0x400, 0x88, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', [@dstopts={0x0, 0x0, '\x00', [@padn, @pad1]}]}}}}}}}, 0x0)

1.556404479s ago: executing program 2 (id=1395):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = socket(0x8, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8004}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
ioctl$IMGETCOUNT(r0, 0x40106183, &(0x7f0000000000))

1.375583395s ago: executing program 2 (id=1396):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, ["", "", "", "", "", ""]}, 0x14}}, 0x8001)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000000700)={0x10, 0x0, 0x25dfdbfd, 0x20000000}, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r5, 0x84, 0x17, 0x0, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x20, 0x3c, 0x107, 0xfffffffc, 0x0, {0x3, 0x7c}, [@nested={0xc, 0x136, 0x0, 0x1, [@nested={0x8, 0xa, 0x0, 0x1, [@typed={0x4, 0xe3}]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x58, r6, 0x1, 0x0, 0x25dfdbfe, {0x3, 0x74, 0x600}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x3a202000}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x58}, 0x1, 0xffffffff00000003, 0x0, 0x4000}, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18)
r7 = socket(0x2, 0x80805, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r8, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={<r9=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000240)={r9, 0x40}, 0x8)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_NODELAY(r10, 0x84, 0x3, &(0x7f0000000600), &(0x7f0000000640)=0x4)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r10, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000080)=0x4)
recvmmsg(r0, &(0x7f00000006c0)=[{{&(0x7f0000000180)=@qipcrtr, 0x80, &(0x7f0000000580)=[{&(0x7f0000000300)=""/136, 0x88}, {&(0x7f00000003c0)=""/112, 0x70}, {&(0x7f0000000200)=""/57, 0x39}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000000440)=""/92, 0x5c}, {&(0x7f00000004c0)=""/143, 0x8f}, {&(0x7f0000000280)=""/48, 0x30}], 0x7, &(0x7f0000001800)=""/4096, 0x1000}, 0x3}], 0x1, 0x20, 0x0)
splice(0xffffffffffffffff, &(0x7f00000002c0)=0x3, 0xffffffffffffffff, 0x0, 0xfffffffffffffff7, 0x0)
syz_emit_ethernet(0x9e, &(0x7f00000000c0)={@multicast, @local, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x1, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x1b, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x33}, {[@cipso={0x86, 0x6}, @generic={0x43, 0x11, "20d44ddf8c84d1f591aa6a32900984"}, @end, @timestamp={0x44, 0x20, 0xcc, 0x0, 0x4, [0x81, 0x8, 0xb548, 0x2, 0xbc, 0x4, 0x3fc000]}, @timestamp={0x44, 0x1c, 0xd4, 0x0, 0x0, [0x1b8, 0x1ff, 0xd81, 0x37, 0x1, 0x7f]}, @rr={0x7, 0x3, 0x80}]}}}}}}}, 0x0)

891.64241ms ago: executing program 1 (id=1403):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40084}, 0x20000000)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x6}, {0x3, 0xfff9}, {0x2}}}, 0x24}}, 0x0)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
socket(0x8, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f00000003c0)="059c0928000000000080000000201700", 0x10, 0x40004, &(0x7f0000000240)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRESHEX=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
writev(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e615500140004800800014000000001080002"], 0xbc}}, 0x4044010)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000)
socket$inet_tcp(0x2, 0x1, 0x0)

626.497692ms ago: executing program 0 (id=1406):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100000400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027000000000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a21", @ANYRES32=r0, @ANYBLOB="e8001a8048000a8014000700ff02000000000000000000000000000114000700fe8000000000000000000000000000aa050008000000000014000700fe8000000000000000000000000000bb9c0002"], 0x15c}}, 0x0)

616.94175ms ago: executing program 1 (id=1407):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = socket(0x8, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='lp', 0x2)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
ioctl$IMGETCOUNT(r0, 0x40106183, &(0x7f0000000000))

611.185224ms ago: executing program 0 (id=1408):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = socket(0x8, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
ioctl$IMGETCOUNT(r0, 0x40106183, &(0x7f0000000000))

506.591679ms ago: executing program 2 (id=1409):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
socket(0x8, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001001f000000000000000000000a20000000000a03000000000000000000070060000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025647a31000000000900010073797a3000000000080005400000001c"], 0xe0}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0xc, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000300), &(0x7f0000000380), 0x8, 0x5a, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10)
write(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000b40)=[{&(0x7f0000000680)="e31dab63b10e8ff0aaf883f49ef194edc487a7a79e9e9228134cccbbbb022830ac8b43e3968af44dfaff3aae697c93e06c134562cc18f0e0a8ed3b0b8f431ef50bc236d376a9330552e4b7ba7800dbbfc22eebe07030494951e46716abce23bc4d64e959081c5ebea205f82bdf1d929e8aa7f755ed6b72ee19463745ed2c647f7b29960b7c4eb57d0bd315d13c0bbfd580c1b143656ddeb5bc5075d93be6c16aa7dcfa185b3e68734c3f57a2e08f0a7f4eb94d0415ef42a2e976c8f51edea6bac9f5c6931d5b6ad65b2a30056ae806c773777366a3f3e4e404de397264c974c277303caca7b2a6dbf05441faaf6f", 0xee}, {&(0x7f0000000780)="1a68bcfdb27dbbe2f17dbed6558eb8e3fc4d533c4d0f01aeb6a58a747602b3f541ef1fafcd1d54e0bcb204e6a309e7978cad741e153fbf4aab4a028b5e6d459310b20af3bf63e7062806e547880e9dea1c1bde3995f2addec77a83616741f3c133eb1b8f91619b850072d80ffea682b2d46b8618074af0cad39d573f8bb15ed1438616f6e7ce77b0eb2bf7cc8b29e80bdca4e602", 0x94}, {&(0x7f0000000840)="2813b4f478e3998cb8043934fbf2ff9f2145f30f2dcc52cfd0a3bee93a0e47caa445da67c3f39d5cf4d081aa1d42aede26eaa131d22395436213ae45829a400d71a160ba916e92a2a1dfaa0ff89bdde8e2a3a21b03bd3d609895502f09871607d0fa4ab9199b7b4b8750f35d3946bf", 0x6f}, {&(0x7f00000008c0)="792b8ae430189ea318883f383a2ba2e5d06d257bf14124cf9e904ac50579090dde85c5092644df84dc3eebae666e77697b305ea0189958e31f26b9fe572dbdb3b4dc38c8eec9e4863603a9214b7b91cf4b1fc78703a573b4b89779d8df26b1fc2d2e52e55625116c979d291f820b9408f410caa3eb6a09597c0925aa305e3c978f585a68bc5de915271da0eb35c976eb9a9573606c95fb", 0x97}, {&(0x7f0000000980)="fff295015d631e433896d9a54fefd7b0de2ff85184d9006b10098c15febb842f19835899af0b5c8636e6afebc0dd2989c67b0051e31e15804f65c21fea59699cb0f4885953a9e74de6f5ed0dcb37eb265dad18e9bcf775df27c292bd2249d9b59de73dd25845d386a0db06222882694e9b", 0x71}, {&(0x7f0000000a00)="e43c3a5aba95647fd1eba82e", 0xc}, {&(0x7f0000000a40)="24a16adaef4ccc35bb37eb62bcecb49b60a43a12486dccd099bc53eb8031d0926a4db1dbe0f9d36290c99490c6d960da4782fead644c3bfb83e44d4233b527dd2e6d0f8e2275553fe6a1c108f4e488da8ddc5686a1a555984b66008b466a477362c8460ddab3d38b82f6b7ce9a1f64697a0a87991ab6c7ad506d9c1f1bdc04d33bf17dd0e11d82fe56b2172e7807f19f74c9d8e680ab798a9ad83a0a67413fca7e51f6b10f69b68b3fe969419c366473236d4c639c12e745802f47f3207194f3b13d0f16e20c784dcdfb8f406b510964b06d089d5f318082a61205", 0xdb}], 0x7, 0x8)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast2}, 0x10)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)

436.203576ms ago: executing program 0 (id=1410):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000100)={@empty, @multicast1, @rand_addr=0x64010100}, 0xc)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/user\x00')
unshare(0x6a040000)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10)
write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe00200000000000", 0x1c)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e)
getsockname$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, &(0x7f0000000280)=0x10)
ioctl$PPPIOCGFLAGS(r4, 0x8004745a, 0x0)
r6 = socket(0x8, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYRESHEX=r7, @ANYRES16=0x0, @ANYBLOB="0f34d6875775f826f38c648fabd2045c80b38eab440ed7c56513987fecca09000000762f67b5f587182147b8f9184a23cda4eb92f4749d7a63e8222d0962fa135a023d909a8ec252e2586d270aa4d558aae701a47cc531af43123ae9194c5fd9663479f44b80bfe5a1a15dd05742501b46976b081c0e8417523ff00311d8116fc402fb01853e5beedf4a76000000000000000000", @ANYBLOB="dd5fc362a0edc19020d2dde94dfc39312c69f81241e81642035380f7b1ef77698541f26d5eac3e379efe8f5425c95495d232dfd4e97d34d81a699997077c079e5c63aca8bd80b58e13820d685400ae998eb9ed005ea503021fe98b60c8538b2e287d1f54645e021f0851c29f7bbf7f4a1cbfec1eff65bfef044403d85bfbc67c548e4ab717dc5042a43456641e10107f919e75bd682cce723eac62abaca917e94afac59b8298017b6cd7128260a17d3b9c1d788b7f189dcf51b84c827cbc410bb7de473175ff41d1c2cedccea4bd53d4b9c340713bcd3240826c8af9c638684a82af41215cf1dd", @ANYRES16=r1, @ANYBLOB="afd8c0ddfe3b7c06d72555d740f65aa45ec4fe1fb23ee6176121005fc4696c54f4b5118ce94232d5", @ANYBLOB="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", @ANYRES16=r6, @ANYRESOCT=r0, @ANYRES16=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc000)
sendmsg$NFT_BATCH(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5)
setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0), 0x4)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
ioctl$IMGETCOUNT(r6, 0x40106183, &(0x7f0000000000))

431.821212ms ago: executing program 1 (id=1411):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x6c, 0x0, 0x4c1dad3e3d6a7499, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x398}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000)

375.96907ms ago: executing program 1 (id=1412):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x4}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="40980c", @ANYRES32=r1, @ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x6a040000)
socket(0x8, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x5)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b4"], 0x48)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r5, r4}, 0xc)
sendmmsg(r3, &(0x7f0000001500)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x7080000, @loopback, 0x7, 0xfffffffe}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[{0x10, 0x29, 0x39}], 0x10}}], 0x1, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x1, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}]}}, &(0x7f0000000a80)=""/172, 0x3e, 0xac, 0x9}, 0x28)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)

304.509012ms ago: executing program 2 (id=1413):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r0)
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000040)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x800)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async)
unshare(0x6a040000) (async)
r2 = socket(0x8, 0x3, 0x0) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x4c005)
sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000) (async)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5) (async)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async)
ioctl$IMGETCOUNT(r2, 0x40106183, &(0x7f0000000000))

236.531084ms ago: executing program 0 (id=1414):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async)
unshare(0x6a040000) (async, rerun: 64)
r0 = socket(0x8, 0x3, 0x0) (async, rerun: 64)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f00000001c0)=[{0x48, 0x5, 0x73, 0xffe00003}, {0x6, 0x83, 0x6, 0x10400}]}, 0x10)
sendmsg$netlink(r2, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="180000002e003303"], 0x18}], 0x1, 0x0, 0x0, 0x20000000}, 0x40040000)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRES64=r0], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) (async)
writev(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
close(0xffffffffffffffff) (async, rerun: 64)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={<r3=>0x0}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={r3, 0x7, 0x51f}, 0x8)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000300)=0xffff3e3e, 0x4) (async)
ioctl$sock_netdev_private(r0, 0x89f9, &(0x7f0000000240)="dd2e61da74930b5db8d346819a2a07c51beaeeba8a08914019f2c08a3922c2317b6247fbfeb729c316d972ddebf8f59ebb0f6002120850d46ec3ac41a64537beff5d23e011e33c9c423cf5135f71bdefe76197fd2bd4925a74bbc16de34c4b7b587821a5bb6b11276f39f9fc7b386851cc784f389ad0520f2710d6272977b719850bcb861024d5bc2f03c94f06b86b4fa524eeff107d329569a4") (async)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5) (async)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async, rerun: 64)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (rerun: 64)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000100)="a1f6cead46a405126756f5d3a5c02e59d9c86014ef065c1ddd4c995a0e6454850da8d2df9de85527ee9aebf750f31afe601cb9dcfd47a4f3bfc4060867918dcfbeefee470fcd921459599426c5228ae4dc1d0fed8e9f60286703356036b60accd12d8e079b13cc3b3b2586b12e338077b427c2", 0x73)

125.695831ms ago: executing program 1 (id=1415):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = socket(0x8, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a600000000a0904000000000000000002007ffe090002ffff797a3200000000007a300000000034000480300001800a0001006d617463680000010000000000008000000000000b000100736f636b657400000800024000000003005fbf4916bdca9d422f6277a749977f77f3799b02353982d1f3dc4bae1b534da1abb379dadc97e5e8913442a81b43d6facce083d7e2618b5724aa066d38bab833ea91ec0e890e4939f9eec27cea9c3af29666fbd3e9b0a8bbe73a8c266f9f08083e5f3ad59ae8cd3ade67912927761bdd1e5514a91b94d0af9c35f86c"], 0x88}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000001200)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x6, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x14, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, "5e722f5a3bc7afae27b241340b0e785fc538df57"}}}}}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
ioctl$IMGETCOUNT(r0, 0x40106183, &(0x7f0000000000))

115.93292ms ago: executing program 0 (id=1416):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000080)={0x3e4, r0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x6}, @device_b, @broadcast}}, @NL80211_ATTR_FRAME={0x390, 0x33, @data_frame={@msdu=@type01={{0x0, 0x2, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x9}, @broadcast, @initial, @device_b, {0x4, 0x1}}, @a_msdu=[{@device_a, @broadcast, 0xec, "c07590b5edf3831c714ca836d3cbaad47c7d75da4c4ee1dd91b74262518614846bd188d65fb252a95a35a4c0748858b497edaa65c3621da1e9447fedbcf83224f2214ec28127db0bd0f04e9259abe3707ad0d7abf5a824b2ed077191f46f51ddcd88bd2047b7ae2925b34181dffe7a25d383d1ed579edbca8d3113db9df4525d03c7539965de43eec2156f0ef66b732a38d58d379d184a939818777abed55e6d163bd12c324b282b243c0d5df008ef457fbfdd777d7fb620e127d9d4f546ba3c22cea16584e15cd7370426b8180b4b900582d3035ce37c79c47a646a3e17b0bcd37a79abad150937bac15175"}, {@device_a, @device_a, 0xf7, "6e990fe05d2f3725fe655fac558d7a938b8aaf3b4dca87bb86a5268c0a6933984233a2e50c8fc704c99fd7564c7b00b2662945b6e6800158f5fec3ee0937def6925f659d5e48e5439f89f787be03b382e7a2df8d9f02bde1aab3a285bc507538340c2f6e1c8dbf1d29391a398844103a07e9e27e7ac41a112c16fba73ab4617760ecda5130f44fcd69cb16ee1104cbcf2bd7f24df5e8e562b054e6c4d7664b48c36da274044ea4705ebffd311c88c9c5253ca76d1a99d3f40330ddc84562b1a5d8badf7097937a4d3ffc2d9960f89d5a8e393caf4622b7fd69e69ffa4ce8db2c078d1095f83d5ee6c57e2a227f72b1aad8a84109e8b4c5"}, {@device_b, @device_a, 0xe1, "716d062761bc336c0f0f69424ff4510f0e0b9c6b21607c7e82fee1732b5ef125ca051f85248d3dcc719cb00971be3d7151382754390d9dc98769fec70933bafdc4527dae5b4f322541b91a4362b36e4632dbd019a1cf50bff044907b20c2a19317bde569a698e627ae5722ed070acc95052abd3d36aec5c11d62a0aa3069d16fed0532198cb87cc42ecc5ba1acc96e784d2e4e38cc48e9c33903829ea9020e8b8a7669b962bdd53cb5b01289cea62f41a2bd098b3e6a1130239ce05a7460ac5157dc00f94395fce79c153e4cc1fc75c2d237963f7f2e95da262745bc9f00807d0d"}, {@device_b, @device_a, 0x71, "de5f26944e21ed442e7dc23cee9f45dff45b2776743b2b20fc358d208ef29de97f66e0df2232475dbfd1dd9f46cb733e9c8e5f9f5b3895668b02af0016fae2ebe03df4fb02b501545237c61b11bf5ca8f32ea35053f8884176e4f6895d83b75abbe1a1266be6788c8398253bdb023982d6"}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x1}, @broadcast, @device_b}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3e4}, 0x1, 0x0, 0x0, 0xc800}, 0x4000006) (async)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000080)={0x3e4, r0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x6}, @device_b, @broadcast}}, @NL80211_ATTR_FRAME={0x390, 0x33, @data_frame={@msdu=@type01={{0x0, 0x2, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x9}, @broadcast, @initial, @device_b, {0x4, 0x1}}, @a_msdu=[{@device_a, @broadcast, 0xec, "c07590b5edf3831c714ca836d3cbaad47c7d75da4c4ee1dd91b74262518614846bd188d65fb252a95a35a4c0748858b497edaa65c3621da1e9447fedbcf83224f2214ec28127db0bd0f04e9259abe3707ad0d7abf5a824b2ed077191f46f51ddcd88bd2047b7ae2925b34181dffe7a25d383d1ed579edbca8d3113db9df4525d03c7539965de43eec2156f0ef66b732a38d58d379d184a939818777abed55e6d163bd12c324b282b243c0d5df008ef457fbfdd777d7fb620e127d9d4f546ba3c22cea16584e15cd7370426b8180b4b900582d3035ce37c79c47a646a3e17b0bcd37a79abad150937bac15175"}, {@device_a, @device_a, 0xf7, "6e990fe05d2f3725fe655fac558d7a938b8aaf3b4dca87bb86a5268c0a6933984233a2e50c8fc704c99fd7564c7b00b2662945b6e6800158f5fec3ee0937def6925f659d5e48e5439f89f787be03b382e7a2df8d9f02bde1aab3a285bc507538340c2f6e1c8dbf1d29391a398844103a07e9e27e7ac41a112c16fba73ab4617760ecda5130f44fcd69cb16ee1104cbcf2bd7f24df5e8e562b054e6c4d7664b48c36da274044ea4705ebffd311c88c9c5253ca76d1a99d3f40330ddc84562b1a5d8badf7097937a4d3ffc2d9960f89d5a8e393caf4622b7fd69e69ffa4ce8db2c078d1095f83d5ee6c57e2a227f72b1aad8a84109e8b4c5"}, {@device_b, @device_a, 0xe1, "716d062761bc336c0f0f69424ff4510f0e0b9c6b21607c7e82fee1732b5ef125ca051f85248d3dcc719cb00971be3d7151382754390d9dc98769fec70933bafdc4527dae5b4f322541b91a4362b36e4632dbd019a1cf50bff044907b20c2a19317bde569a698e627ae5722ed070acc95052abd3d36aec5c11d62a0aa3069d16fed0532198cb87cc42ecc5ba1acc96e784d2e4e38cc48e9c33903829ea9020e8b8a7669b962bdd53cb5b01289cea62f41a2bd098b3e6a1130239ce05a7460ac5157dc00f94395fce79c153e4cc1fc75c2d237963f7f2e95da262745bc9f00807d0d"}, {@device_b, @device_a, 0x71, "de5f26944e21ed442e7dc23cee9f45dff45b2776743b2b20fc358d208ef29de97f66e0df2232475dbfd1dd9f46cb733e9c8e5f9f5b3895668b02af0016fae2ebe03df4fb02b501545237c61b11bf5ca8f32ea35053f8884176e4f6895d83b75abbe1a1266be6788c8398253bdb023982d6"}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x1}, @broadcast, @device_b}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3e4}, 0x1, 0x0, 0x0, 0xc800}, 0x4000006)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x4, 0x96, 0xe8, 0x2, 0x22, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x40, 0x1, 0x2}}) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'syztnl1\x00', <r2=>0x0, 0x4, 0x96, 0xe8, 0x2, 0x22, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x40, 0x1, 0x2}})
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000b80)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000600)={0x52c, 0x12, 0x4, 0x70bd2a, 0x25dfdbfc, {0x9, 0x9, 0x4e, 0x7, {0x4e20, 0x4e22, [0x7, 0x4, 0x6, 0x3], [0x3ff, 0x4, 0x4, 0x8000], r2, [0x4d, 0x81]}, 0x9, 0xb}, [@INET_DIAG_REQ_BYTECODE={0x53, 0x1, "3413ee8c60a32704b9602ffe93a7136babec53082a5c0632fdb9be2582509cb01d8392c7c396641d34d814cc7432d82ecd057a39186134b2db3eecc5f2306705f2be37529eaf141bec9ecbb1fd0987"}, @INET_DIAG_REQ_BYTECODE={0xfb, 0x1, "d184872c4bbafea574fe01174fdfbb306af0840cb7e2ec5b8d67561d68ec0cb579f27df1a648bd02dc19e750454b4bbf64558a2f42ea8cb9211534f6a1e6f9cbc5681e85865e2e06012bcddab7ffa32e78511a7eb96d0c1e8d0c36315143aaa39c4dc00dc3e939c5b724c0506fd0b942779ee1d3a1263cef758655e0c633ea162534d14bb13c5b0cfee1e7fd2e20b249cce0bf5d7a37d6b8d2db824dc0966799f8adf7e4dd0cbc228f4da3cc044f5db642ff8415e23327d2009e48fe342ae96f4b8465f8b563e5ffe7fa4b31c6fd1364d25034d54d0db7adc3c680a7a6e0157f1e5245be5b44fb4501b6705409e17d739a37fd90ae95b0"}, @INET_DIAG_REQ_BYTECODE={0xe5, 0x1, "b4b91926eaf24c09be4867768fa92eafb68ba7ec02cca9a1c499dc1920305bb6be3d12afd4402fda630b91cf5da97edad2f1f1352fefb09c5516719988a543d2ca59908b91031151c4d452f6540fca3f2f10e46cca0481613ecb213a837483d8ab32e5eec3eb9aca6ac90aa33b861d0bed30e5a4cac53b6f241a8a3e8e1cdd4cf668c6e2e3a7c8debc9e4e15df9dc56fd997945f6e057f672d6fe0aa98f62996d15a9a5119768f893e4f8142b1d5e9f76aee1f5c1dd4cbdf5602e46d1dea3cef0647ce023b7b830b1408ada76257e40e2ddf3fe070a15333d31d976a22ec7c45ca"}, @INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "70dabf96fb8366881ca2ee4410214f304836758917f01a79e64ce5e069507ad57feb2fc25e3f8980d76e155d412ba4537c0851ef7be13b9582b7e1e7ad1f008668c647e978ca3eb3ed7e82d476cd091944a7d83d69fe2baff913ea5226e80a2e9c614847d99e7a647b246808a4a77da2dd03c1dedad61a201e6e27e169f4f7503b60e340203c9ac36394db9cd573cfa27cb7c65672f959ef0917a3aad821bb6b842d27f7a325de612897b6cd1c6d13e9b26a75bf634ad63eab68a45dfc7ef38bdd9534710b7873ae283900d2eb6c9730fc955ddc8e78e2262ca20d8b6c1c2b98b5181cb9082d6d5a0ca848bf6de40e1da947037d33fd421e"}, @INET_DIAG_REQ_BYTECODE={0xb5, 0x1, "bb52908fe01c79521f1a9df713b7e08766ce2f469291727ed0271e833ce6f107052d3d055804d6babd1fc8440227e0ed655d08a6be2f61a73ebdaac1dd61e1a72359b6610739eac6130193951cb338e2f44d941f740bb0f971e49403fda026bb8b645d40ecdaf3d95234917787858a2478b9c44c79389c45875c18353e8ef396f48761256a386d8304cad7a91514e4369e9814d43cfd6150975182a0a68b7116a3aa06884896b31b7833c2fa09d8d9c8d1"}, @INET_DIAG_REQ_BYTECODE={0x83, 0x1, "4869b12b8228425f207e64ad86bd6c137315156ebc4d112701ff55c9a9b76ff57ffb4b595a1fee96d707629bc59f00181595ee145d87b15531589abccfa25a48240aba51756f2ba314acecda4796195dd0c2b1f7af8da3737830227fff6f8ab46f7bb5ecf89265d15616ef0d7fc8d4424767c8910da39804c6d3e4833fe9c6"}, @INET_DIAG_REQ_BYTECODE={0x14, 0x1, "1205625b71717111536591b88b4ceb8a"}, @INET_DIAG_REQ_BYTECODE={0x5b, 0x1, "2dd3f9725bd64359cc7d95e4bc8cda642853b66f8e16828d8783470dc276ecd49ad2c904ca0e5239807657f1d504f9f8a4f30fd77825c55fca2d9280b997e9718fb314e51aa8188681b891c333e4bc065f5cbeb5c79f03"}]}, 0x52c}, 0x1, 0x0, 0x0, 0x40000}, 0x14011)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000bc0), 0x200, 0x0)
ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000c00)=0x7)
r4 = socket$netlink(0x10, 0x3, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{}, &(0x7f0000000c40), &(0x7f0000000c80)}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f0000000c40), &(0x7f0000000c80)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d80)={{0x1}, &(0x7f0000000d00), &(0x7f0000000d40)}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d80)={{0x1, <r6=>0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000f40)={'gre0\x00', <r7=>0x0, 0x20, 0x7800, 0x1, 0x2, {{0x34, 0x4, 0x1, 0x3f, 0xd0, 0x66, 0x0, 0x3, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp_addr={0x44, 0x24, 0x42, 0x1, 0x6, [{@empty, 0x6}, {@loopback, 0xffff}, {@loopback, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @ssrr={0x89, 0x13, 0xab, [@multicast2, @dev={0xac, 0x14, 0x14, 0x1a}, @dev={0xac, 0x14, 0x14, 0x16}, @local]}, @cipso={0x86, 0x42, 0x2, [{0x2, 0x11, "624f8feb572486ce52d2d202eca1af"}, {0x1, 0x12, "30ddd8e34406cc8212698a748f277056"}, {0x2, 0xa, "e8ac2768c3b9f860"}, {0x7, 0xf, "9350acd313f2c8b4290903cefa"}]}, @lsrr={0x83, 0x7, 0x2f, [@private=0xa010102]}, @timestamp={0x44, 0x2c, 0x3a, 0x0, 0x3, [0x1, 0x81, 0x4, 0x101, 0x6, 0xfffffffd, 0x8, 0x4, 0x6, 0x401]}, @rr={0x7, 0x7, 0xf0, [@local]}, @generic={0x83, 0x5, "60d215"}, @end]}}}}})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000010c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', r2, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x50) (async)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000010c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', r2, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x50)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=@bloom_filter={0x1e, 0x0, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0xa669, '\x00', r2, 0xffffffffffffffff, 0x5, 0x4, 0x0, 0xd}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x18, 0x1a, &(0x7f0000000dc0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @jmp={0x5, 0x1, 0x8, 0x6, 0x8, 0x30, 0xffffffffffffffff}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff3}}, @alu={0x4, 0x0, 0x9, 0x9, 0x7, 0xffffffffffffffc0, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @generic={0x6, 0x7, 0x9, 0xffc0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @jmp={0x5, 0x0, 0x2, 0x9, 0x0, 0x2, 0x8}], &(0x7f0000000ec0)='GPL\x00', 0x531, 0x0, &(0x7f0000000f00), 0x41100, 0x3, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001080)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=[r8, r9], 0x0, 0x10, 0x67}, 0x94)
bind$inet(r9, &(0x7f00000012c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) (async)
bind$inet(r9, &(0x7f00000012c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10)
write$ppp(r3, &(0x7f0000001300)="c255cdbaa5be938b60d9cf55abda9ced9502e8c267bda913e394f255c31dc746426c8b66be4b0b580a456b6626ec6f12d8025bd96b5f0f41d550694a7ec563d88a371b28cbd97ac8683c63f9a5667664404ee815c05cfd48443edbca5f84b76e68e3be081892e81427bf66d62b64ca983e77e22e", 0x74)
ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f0000001380)=0x7)
r10 = socket(0x18, 0x5, 0x5)
getsockopt$bt_BT_SECURITY(r10, 0x112, 0x4, &(0x7f00000013c0), 0x2)
accept(r1, &(0x7f0000001400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000001480)=0x80) (async)
r11 = accept(r1, &(0x7f0000001400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000001480)=0x80)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f00000014c0)=@assoc_value, &(0x7f0000001500)=0x8) (async)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f00000014c0)=@assoc_value, &(0x7f0000001500)=0x8)
pipe(&(0x7f0000001540)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
openat$cgroup_subtree(r12, &(0x7f0000001580), 0x2, 0x0)
r13 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_add_memb(r13, 0x107, 0x1, &(0x7f00000015c0)={r7, 0x1, 0x6}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001640)) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001640)={'team0\x00', <r14=>0x0})
sendmsg$TEAM_CMD_NOOP(r12, &(0x7f0000001880)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001840)={&(0x7f0000001680)={0x1a8, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r14}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x619f909d}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0xac, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xfffd, 0x3, 0x52, 0x1}, {0x4a, 0x8, 0x9, 0x1}, {0xe, 0x1, 0x1, 0x7fff}, {0xa, 0x4, 0x9, 0x6}, {0x7, 0x0, 0x1, 0x6}, {0x2, 0x28, 0x2, 0x2}, {0x2, 0x2e, 0x7f, 0x401}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r2}, {0x4}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000)
r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'wpan0\x00', <r16=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r15, &(0x7f0000001c40)={&(0x7f00000018c0), 0xc, &(0x7f0000001c00)={&(0x7f00000019c0)={0x210, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x60, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_ID={0x48, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x10001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x154, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x674}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x24b}]}, @NL802154_DEVKEY_ATTR_ID={0xfc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x401}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x4}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x5c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x210}, 0x1, 0x0, 0x0, 0x8004}, 0x2000c080) (async)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r15, &(0x7f0000001c40)={&(0x7f00000018c0), 0xc, &(0x7f0000001c00)={&(0x7f00000019c0)={0x210, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x60, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_ID={0x48, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x10001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x154, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x674}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x24b}]}, @NL802154_DEVKEY_ATTR_ID={0xfc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x401}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x4}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x5c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x210}, 0x1, 0x0, 0x0, 0x8004}, 0x2000c080)

99.347442ms ago: executing program 0 (id=1417):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
socket$unix(0x1, 0x1, 0x0)
r0 = socket(0x8, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
socket$key(0xf, 0x3, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x23}, [@ldst={0x1, 0x0, 0x3, 0x1, 0x1, 0x8}, @call={0x85, 0x0, 0x0, 0xcc}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x7}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x130068a1efda241a}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5)
setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
ioctl$IMGETCOUNT(r0, 0x40106183, &(0x7f0000000000))

0s ago: executing program 1 (id=1418):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt(r0, 0xc45, 0xfffffffc, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0xa4, 0x0, 0x0, 0x40000}, {0x6}]}, 0x10)
unshare(0x6a040000)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}}, 0x0)
r3 = socket(0x26, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x20000000)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5)
setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4)
mmap(&(0x7f00002cc000/0x2000)=nil, 0x2000, 0x9, 0x4010, 0xffffffffffffffff, 0x0)
ioctl$IMGETCOUNT(r3, 0x40106183, &(0x7f0000000000))

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:56085' (ED25519) to the list of known hosts.
syzkaller login: [   47.999145][ T5773] cgroup: Unknown subsys name 'net'
[   48.086651][ T5773] cgroup: Unknown subsys name 'cpuset'
[   48.090483][ T5773] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.951230][ T5773] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.806781][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.810233][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.813220][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.816078][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.818722][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.871795][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.879242][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.882826][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.885939][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.889141][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.955935][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.959402][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.964390][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.968479][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.972335][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.040018][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   55.152346][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.154685][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.157252][ T5841] bridge_slave_0: entered allmulticast mode
[   55.160343][ T5841] bridge_slave_0: entered promiscuous mode
[   55.178596][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.181181][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.183553][ T5841] bridge_slave_1: entered allmulticast mode
[   55.186645][ T5841] bridge_slave_1: entered promiscuous mode
[   55.243341][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   55.251870][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.268433][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.318254][ T5841] team0: Port device team_slave_0 added
[   55.329630][ T5841] team0: Port device team_slave_1 added
[   55.385203][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.388086][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.391292][ T5845] bridge_slave_0: entered allmulticast mode
[   55.394987][ T5845] bridge_slave_0: entered promiscuous mode
[   55.418027][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.421333][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.430096][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.436145][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.438657][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.448576][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.454359][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.457588][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.460410][ T5845] bridge_slave_1: entered allmulticast mode
[   55.464001][ T5845] bridge_slave_1: entered promiscuous mode
[   55.555021][ T5841] hsr_slave_0: entered promiscuous mode
[   55.557676][ T5841] hsr_slave_1: entered promiscuous mode
[   55.563018][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.566778][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   55.577247][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.655794][ T5845] team0: Port device team_slave_0 added
[   55.664566][ T5845] team0: Port device team_slave_1 added
[   55.729811][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.732661][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.742714][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.747253][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.750015][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.753646][ T5848] bridge_slave_0: entered allmulticast mode
[   55.757338][ T5848] bridge_slave_0: entered promiscuous mode
[   55.762148][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.764978][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.767852][ T5848] bridge_slave_1: entered allmulticast mode
[   55.772666][ T5848] bridge_slave_1: entered promiscuous mode
[   55.780485][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.784025][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.793896][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.869605][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.875202][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.927818][ T5848] team0: Port device team_slave_0 added
[   55.934466][ T5845] hsr_slave_0: entered promiscuous mode
[   55.939657][ T5845] hsr_slave_1: entered promiscuous mode
[   55.943327][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   55.945615][ T5845] Cannot create hsr debugfs directory
[   55.949560][ T5848] team0: Port device team_slave_1 added
[   56.021523][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.024297][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.034528][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.044980][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.047658][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.058834][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.143002][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.153127][ T5848] hsr_slave_0: entered promiscuous mode
[   56.155602][ T5848] hsr_slave_1: entered promiscuous mode
[   56.157726][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   56.159488][ T5848] Cannot create hsr debugfs directory
[   56.179881][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.188868][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.202245][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.343593][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.354470][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.379190][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.386139][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.443371][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.467137][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.474326][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.488147][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.520252][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.564184][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   56.573147][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.575939][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.587322][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.589588][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.646355][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.681710][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   56.709262][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.711568][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.725499][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.727846][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.734708][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.766012][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   56.775549][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.777712][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.782595][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.784781][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.881905][ T5239] Bluetooth: hci0: command tx timeout
[   56.937994][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.962717][ T5239] Bluetooth: hci1: command tx timeout
[   56.998947][ T5841] veth0_vlan: entered promiscuous mode
[   57.028118][ T5841] veth1_vlan: entered promiscuous mode
[   57.050981][ T5239] Bluetooth: hci2: command tx timeout
[   57.069009][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.096893][ T5841] veth0_macvtap: entered promiscuous mode
[   57.109388][ T5841] veth1_macvtap: entered promiscuous mode
[   57.127181][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.155498][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.170576][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.178642][ T5845] veth0_vlan: entered promiscuous mode
[   57.187711][ T5849] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.204294][ T5849] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.208464][ T5845] veth1_vlan: entered promiscuous mode
[   57.216547][ T5849] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.233368][ T5849] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.309798][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.313460][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.313846][ T5848] veth0_vlan: entered promiscuous mode
[   57.330270][ T5845] veth0_macvtap: entered promiscuous mode
[   57.335916][ T5845] veth1_macvtap: entered promiscuous mode
[   57.353844][ T5848] veth1_vlan: entered promiscuous mode
[   57.366587][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.374225][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.375024][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.387111][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.396776][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.407277][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.425640][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.428863][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.468534][ T5848] veth0_macvtap: entered promiscuous mode
[   57.496637][ T5848] veth1_macvtap: entered promiscuous mode
[   57.497214][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.515421][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.525301][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.527894][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.536426][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.547502][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.550471][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.557319][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.576603][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.593772][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.602508][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.698344][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.709617][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.745481][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.748512][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.785857][ T5918] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'.
[   57.839632][ T5928] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   57.882110][ T5926] syz.1.5 uses obsolete (PF_INET,SOCK_PACKET)
[   57.903997][ T5926] syzkaller1: entered allmulticast mode
[   58.046918][ T5934] Zero length message leads to an empty skb
[   58.468419][ T5956] openvswitch: netlink: Flow actions attr not present in new flow.
[   58.961062][ T5239] Bluetooth: hci0: command tx timeout
[   59.041429][ T5239] Bluetooth: hci1: command tx timeout
[   59.124750][ T5239] Bluetooth: hci2: command tx timeout
[   60.608242][ T6056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27'.
[   61.040891][ T5239] Bluetooth: hci0: command tx timeout
[   61.121390][ T5239] Bluetooth: hci1: command tx timeout
[   61.201809][ T5239] Bluetooth: hci2: command tx timeout
[   61.709351][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.32'.
[   61.714286][ T6094] netlink: 'syz.0.32': attribute type 1 has an invalid length.
[   61.716861][ T6094] netlink: 224 bytes leftover after parsing attributes in process `syz.0.32'.
[   62.451232][ T6124] netlink: 36 bytes leftover after parsing attributes in process `syz.0.39'.
[   63.122225][ T5239] Bluetooth: hci0: command tx timeout
[   63.208232][ T5239] Bluetooth: hci1: command tx timeout
[   63.276708][ T6160] netlink: 'syz.2.46': attribute type 1 has an invalid length.
[   63.281272][ T5239] Bluetooth: hci2: command tx timeout
[   63.281814][ T6160] netlink: 'syz.2.46': attribute type 1 has an invalid length.
[   63.298361][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'.
[   64.283682][ T6218] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   64.716404][ T6242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.63'.
[   64.721686][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.63'.
[   65.547980][ T6279] netlink: 16 bytes leftover after parsing attributes in process `syz.1.70'.
[   67.100446][ T6423] dummy0: entered promiscuous mode
[   67.102408][ T6423] dummy0: entered allmulticast mode
[   67.839149][ T6475] netlink: 156 bytes leftover after parsing attributes in process `syz.2.94'.
[   67.900508][ T6478] netlink: 24 bytes leftover after parsing attributes in process `syz.2.95'.
[   67.984532][ T6478] netlink: 24 bytes leftover after parsing attributes in process `syz.2.95'.
[   69.724469][ T6599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.115'.
[   70.068843][ T6608] syz.2.116 uses old SIOCAX25GETINFO
[   71.044928][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.578181][ T6691] netlink: 24 bytes leftover after parsing attributes in process `syz.0.129'.
[   71.801005][ T6700] netlink: 52 bytes leftover after parsing attributes in process `syz.1.132'.
[   72.422076][ T6726] netlink: 'syz.1.138': attribute type 1 has an invalid length.
[   72.425049][ T6726] netlink: 224 bytes leftover after parsing attributes in process `syz.1.138'.
[   72.431086][ T6726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.138'.
[   72.433799][ T6726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.138'.
[   72.439394][ T6726] netlink: 'syz.1.138': attribute type 7 has an invalid length.
[   72.973674][ T6774] Bluetooth: MGMT ver 1.23
[   73.139291][ T6780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.150'.
[   73.849977][ T6817] dummy0: left promiscuous mode
[   73.855251][ T6817] dummy0: left allmulticast mode
[   75.596698][ T6916] bond_slave_1: entered promiscuous mode
[   75.600358][ T6915] netlink: 60 bytes leftover after parsing attributes in process `syz.1.177'.
[   75.606041][ T6915] netlink: 60 bytes leftover after parsing attributes in process `syz.1.177'.
[   75.785410][ T6913] bond_slave_1: left promiscuous mode
[   75.868511][ T6926] tipc: Started in network mode
[   75.871941][ T6926] tipc: Node identity 6a1bbcdd3391, cluster identity 4711
[   75.876287][ T6926] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   75.895040][ T6926] syzkaller0: entered promiscuous mode
[   75.897538][ T6926] syzkaller0: entered allmulticast mode
[   75.945708][ T6926] tipc: Resetting bearer <eth:syzkaller0>
[   76.055005][ T6936] netlink: 16 bytes leftover after parsing attributes in process `syz.1.181'.
[   76.086494][ T6922] tipc: Resetting bearer <eth:syzkaller0>
[   76.098352][ T6922] tipc: Disabling bearer <eth:syzkaller0>
[   77.765154][ T7031] netlink: 52 bytes leftover after parsing attributes in process `syz.2.200'.
[   78.801913][ T7072] netlink: 16 bytes leftover after parsing attributes in process `syz.0.208'.
[   78.911170][ T7075] netlink: 'syz.1.210': attribute type 1 has an invalid length.
[   78.914698][ T7075] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.210'.
[   79.538410][ T7110] netlink: 16 bytes leftover after parsing attributes in process `syz.1.217'.
[   80.017498][ T7127] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   80.092643][ T7132] netlink: 'syz.0.222': attribute type 39 has an invalid length.
[   81.282101][   T51] cfg80211: failed to load regulatory.db
[   82.028005][ T7227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   82.828320][ T7264] netlink: 16 bytes leftover after parsing attributes in process `syz.0.249'.
[   83.103965][ T7282] batadv_slave_1: entered promiscuous mode
[   83.385452][ T7281] batadv_slave_1: left promiscuous mode
[   83.447408][ T7306] netlink: 52 bytes leftover after parsing attributes in process `syz.0.256'.
[   85.811533][ T7430] netlink: 64 bytes leftover after parsing attributes in process `syz.1.282'.
[   89.095665][ T7598] openvswitch: netlink: Missing key (keys=40, expected=100)
[   90.120344][ T7648] netlink: 'syz.0.327': attribute type 5 has an invalid length.
[   90.129194][ T7648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.327'.
[   90.717579][ T7681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.332'.
[   90.721025][ T7681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.332'.
[   91.396545][ T7721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.340'.
[   91.400058][ T7721] netlink: 348 bytes leftover after parsing attributes in process `syz.0.340'.
[   91.410785][ T7721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.340'.
[   91.420455][ T7721] netlink: 348 bytes leftover after parsing attributes in process `syz.0.340'.
[   91.434834][ T7721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.340'.
[   91.806494][ T7741] netlink: 80 bytes leftover after parsing attributes in process `syz.1.345'.
[   93.163657][ T7800] netlink: 12 bytes leftover after parsing attributes in process `syz.2.356'.
[   95.142435][ T7882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.174625][ T7882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   96.051079][ T7927] __nla_validate_parse: 3 callbacks suppressed
[   96.051092][ T7927] netlink: 16 bytes leftover after parsing attributes in process `syz.1.381'.
[   96.339102][ T7943] netlink: 20 bytes leftover after parsing attributes in process `syz.1.385'.
[   96.342496][ T7943] netlink: 32 bytes leftover after parsing attributes in process `syz.1.385'.
[   96.459197][ T7947] netlink: 52 bytes leftover after parsing attributes in process `syz.2.386'.
[   96.840392][ T7973] netlink: 16 bytes leftover after parsing attributes in process `syz.1.391'.
[   96.954997][ T7983] netlink: 52 bytes leftover after parsing attributes in process `syz.1.394'.
[   97.073294][ T5849] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   97.076016][ T5849] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   97.092246][ T5905] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   97.606044][ T5905] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[   98.082161][   T51] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  101.051142][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  109.440867][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  115.348628][ T8030] netlink: 52 bytes leftover after parsing attributes in process `syz.2.402'.
[  116.427413][ T8085] syzkaller1: tun_chr_ioctl cmd 2147767520
[  117.677493][ T8145] netlink: 52 bytes leftover after parsing attributes in process `syz.0.425'.
[  118.015992][ T8159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.427'.
[  118.112651][ T8162] netlink: 24 bytes leftover after parsing attributes in process `syz.0.428'.
[  118.681678][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.433'.
[  120.212549][ T8251] syz.2.444 (8251) used obsolete PPPIOCDETACH ioctl
[  120.461954][ T8275] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  120.465274][ T8275] syzkaller0: entered promiscuous mode
[  120.472958][ T8275] syzkaller0: entered allmulticast mode
[  120.534914][ T8275] tipc: Resetting bearer <eth:syzkaller0>
[  120.540173][ T8275] netlink: 20 bytes leftover after parsing attributes in process `syz.0.449'.
[  120.549215][ T8275] netlink: 20 bytes leftover after parsing attributes in process `syz.0.449'.
[  120.568003][ T8274] tipc: Resetting bearer <eth:syzkaller0>
[  120.577297][ T8274] tipc: Disabling bearer <eth:syzkaller0>
[  120.746602][ T8288] netlink: 28 bytes leftover after parsing attributes in process `syz.0.451'.
[  120.755937][ T8288] netlink: 36 bytes leftover after parsing attributes in process `syz.0.451'.
[  122.471160][ T8374] netlink: 24 bytes leftover after parsing attributes in process `syz.0.468'.
[  123.129105][ T8404] netlink: 'syz.1.474': attribute type 1 has an invalid length.
[  123.254473][ T8407] IPVS: Scheduler module ip_vs_sip not found
[  123.396582][ T8416] netlink: 24 bytes leftover after parsing attributes in process `syz.1.475'.
[  123.802605][ T8438] netlink: 144 bytes leftover after parsing attributes in process `syz.1.479'.
[  124.976167][ T8478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.487'.
[  125.333049][ T8502] netlink: 100 bytes leftover after parsing attributes in process `syz.2.492'.
[  125.440753][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  125.828250][ T8534] netlink: 32 bytes leftover after parsing attributes in process `syz.0.499'.
[  125.834663][ T8534] netlink: 152 bytes leftover after parsing attributes in process `syz.0.499'.
[  125.840539][ T8534] netlink: 152 bytes leftover after parsing attributes in process `syz.0.499'.
[  125.848458][ T8534] netlink: 56 bytes leftover after parsing attributes in process `syz.0.499'.
[  127.320947][ T8636] netlink: 'syz.1.518': attribute type 8 has an invalid length.
[  127.323324][ T8636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.518'.
[  127.342594][ T8636] bond0: entered promiscuous mode
[  127.344554][ T8636] bond_slave_0: entered promiscuous mode
[  127.346898][ T8636] bond_slave_1: entered promiscuous mode
[  127.355247][ T8636] bond0: left promiscuous mode
[  127.357306][ T8636] bond_slave_0: left promiscuous mode
[  127.359918][ T8636] bond_slave_1: left promiscuous mode
[  127.657996][ T8657] netlink: 24 bytes leftover after parsing attributes in process `syz.1.522'.
[  127.901657][ T8680] netlink: 44 bytes leftover after parsing attributes in process `syz.1.526'.
[  128.048210][ T8685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.527'.
[  128.124367][ T8687] netem: change failed
[  129.554950][ T8786] netlink: 24 bytes leftover after parsing attributes in process `syz.1.549'.
[  129.630310][ T8788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  132.342777][ T8940] netlink: 32 bytes leftover after parsing attributes in process `syz.1.577'.
[  132.365777][ T8940] netlink: 152 bytes leftover after parsing attributes in process `syz.1.577'.
[  132.374047][ T8940] netlink: 152 bytes leftover after parsing attributes in process `syz.1.577'.
[  133.672094][ T9020] netlink: 'syz.0.594': attribute type 29 has an invalid length.
[  133.677460][ T9020] netlink: 'syz.0.594': attribute type 29 has an invalid length.
[  133.680395][ T9020] netlink: 500 bytes leftover after parsing attributes in process `syz.0.594'.
[  133.685191][ T9020] unsupported nla_type 59
[  133.804528][ T9033] netlink: 20 bytes leftover after parsing attributes in process `syz.0.596'.
[  133.809970][ T9032] netlink: 20 bytes leftover after parsing attributes in process `syz.0.596'.
[  134.987858][ T9094] sctp: [Deprecated]: syz.2.606 (pid 9094) Use of int in max_burst socket option deprecated.
[  134.987858][ T9094] Use struct sctp_assoc_value instead
[  135.458788][ T9115] netlink: 36 bytes leftover after parsing attributes in process `syz.2.610'.
[  136.220580][ T9163] netlink: 32 bytes leftover after parsing attributes in process `syz.1.619'.
[  136.229831][ T9163] netlink: 152 bytes leftover after parsing attributes in process `syz.1.619'.
[  136.233936][ T9163] netlink: 152 bytes leftover after parsing attributes in process `syz.1.619'.
[  136.902894][ T5312] IPVS: starting estimator thread 0...
[  136.993164][ T9208] IPVS: using max 63 ests per chain, 151200 per kthread
[  137.625189][ T9259] __nla_validate_parse: 2 callbacks suppressed
[  137.625201][ T9259] netlink: 32 bytes leftover after parsing attributes in process `syz.1.640'.
[  137.658622][ T9259] netlink: 152 bytes leftover after parsing attributes in process `syz.1.640'.
[  137.665034][ T9259] netlink: 152 bytes leftover after parsing attributes in process `syz.1.640'.
[  138.310187][ T9307] netlink: 32 bytes leftover after parsing attributes in process `syz.2.651'.
[  138.313796][ T9307] netlink: 152 bytes leftover after parsing attributes in process `syz.2.651'.
[  138.322499][ T9307] netlink: 152 bytes leftover after parsing attributes in process `syz.2.651'.
[  138.417745][ T9293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.648'.
[  138.491453][ T9311] netlink: 'syz.2.652': attribute type 11 has an invalid length.
[  139.190375][ T9349] netlink: 32 bytes leftover after parsing attributes in process `syz.2.658'.
[  139.204347][ T9350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.657'.
[  139.212502][ T9349] netlink: 152 bytes leftover after parsing attributes in process `syz.2.658'.
[  139.944380][ T9383] tipc: Started in network mode
[  139.945992][ T9383] tipc: Node identity fffffe01, cluster identity 64
[  139.947939][ T9383] tipc: Node number set to 4294966785
[  143.299027][ T9590] __nla_validate_parse: 3 callbacks suppressed
[  143.299042][ T9590] netlink: 32 bytes leftover after parsing attributes in process `syz.2.705'.
[  143.306960][ T9590] netlink: 152 bytes leftover after parsing attributes in process `syz.2.705'.
[  143.312659][ T9590] netlink: 152 bytes leftover after parsing attributes in process `syz.2.705'.
[  143.702663][ T9609] netlink: 304 bytes leftover after parsing attributes in process `syz.1.708'.
[  143.720917][ T9611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.710'.
[  145.893403][ T9726] netlink: 16 bytes leftover after parsing attributes in process `syz.0.730'.
[  146.661935][ T9772] netlink: 16 bytes leftover after parsing attributes in process `syz.2.739'.
[  146.916118][ T9790] netlink: 36 bytes leftover after parsing attributes in process `syz.0.743'.
[  146.925944][ T9792] netlink: 32 bytes leftover after parsing attributes in process `syz.1.744'.
[  147.040118][ T9799] netlink: 100 bytes leftover after parsing attributes in process `syz.0.746'.
[  148.632404][ T9886] __nla_validate_parse: 8 callbacks suppressed
[  148.632419][ T9886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.762'.
[  149.037964][ T9909] netlink: 24 bytes leftover after parsing attributes in process `syz.2.767'.
[  149.220142][ T9918] netlink: 32 bytes leftover after parsing attributes in process `syz.1.771'.
[  149.272758][ T9918] netlink: 152 bytes leftover after parsing attributes in process `syz.1.771'.
[  149.277466][ T9918] netlink: 152 bytes leftover after parsing attributes in process `syz.1.771'.
[  150.603277][ T9992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.784'.
[  150.606637][ T9990] netlink: 'syz.0.785': attribute type 21 has an invalid length.
[  150.633686][ T9990] netlink: 132 bytes leftover after parsing attributes in process `syz.0.785'.
[  150.637186][ T9990] netlink: 'syz.0.785': attribute type 1 has an invalid length.
[  150.640025][ T9992] netlink: 'syz.2.784': attribute type 1 has an invalid length.
[  150.913808][T10009] erspan0: entered promiscuous mode
[  150.918943][T10009] netlink: 'syz.2.789': attribute type 2 has an invalid length.
[  151.133667][T10026] netlink: 32 bytes leftover after parsing attributes in process `syz.0.790'.
[  151.144107][T10026] netlink: 152 bytes leftover after parsing attributes in process `syz.0.790'.
[  151.169216][T10026] netlink: 152 bytes leftover after parsing attributes in process `syz.0.790'.
[  151.846594][T10074] Bluetooth: MGMT ver 1.23
[  152.109666][T10083] netlink: 'syz.2.799': attribute type 7 has an invalid length.
[  153.862164][T10182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.818'.
[  153.964607][T10186] netlink: 20 bytes leftover after parsing attributes in process `syz.0.819'.
[  154.042891][T10193] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  154.284775][T10210] netlink: 16 bytes leftover after parsing attributes in process `syz.0.824'.
[  154.288576][T10210] netlink: 16 bytes leftover after parsing attributes in process `syz.0.824'.
[  154.875191][T10236] netlink: 24 bytes leftover after parsing attributes in process `syz.0.829'.
[  155.140213][T10252] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.259333][T10252] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.329550][T10252] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.405269][T10252] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.668399][ T5889] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  155.706529][ T5889] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  155.728218][ T5889] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  155.745863][ T5889] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  155.816619][T10283] netlink: 236 bytes leftover after parsing attributes in process `syz.2.838'.
[  156.082104][T10300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.842'.
[  157.440837][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  158.320487][T10388] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.358384][T10390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.857'.
[  158.362500][T10390] netlink: 'syz.0.857': attribute type 5 has an invalid length.
[  158.365921][T10390] netlink: 48 bytes leftover after parsing attributes in process `syz.0.857'.
[  158.379198][T10388] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.394447][T10390] geneve2: entered promiscuous mode
[  158.396416][T10390] geneve2: entered allmulticast mode
[  158.405204][ T5889] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  158.408189][ T5889] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  158.437494][T10388] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.442200][T10388] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  158.498339][T10388] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.501848][T10388] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  158.544403][   T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  158.547768][   T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  158.556338][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  158.559653][   T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  158.568170][   T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  158.571015][   T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  158.578690][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  158.581504][   T13] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  159.379795][T10434] netlink: 60 bytes leftover after parsing attributes in process `syz.0.865'.
[  159.384080][T10434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.865'.
[  160.140983][T10481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.872'.
[  160.514387][T10504] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.877'.
[  160.564133][T10504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.877'.
[  161.209780][T10543] netlink: 24 bytes leftover after parsing attributes in process `syz.2.883'.
[  161.534410][T10560] netlink: 28 bytes leftover after parsing attributes in process `syz.1.887'.
[  161.595577][T10564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.888'.
[  161.598378][T10564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.888'.
[  161.845102][T10573] netlink: 36 bytes leftover after parsing attributes in process `syz.0.889'.
[  163.811755][T10682] openvswitch: netlink: Message has 8 unknown bytes.
[  164.852529][T10747] bridge_slave_0: left allmulticast mode
[  164.855079][T10747] bridge_slave_0: left promiscuous mode
[  164.858970][T10747] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.869167][T10747] bridge_slave_1: left allmulticast mode
[  164.872874][T10747] bridge_slave_1: left promiscuous mode
[  164.875539][T10747] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.909040][T10747] bond0: (slave bond_slave_0): Releasing backup interface
[  164.928307][T10747] bond0: (slave bond_slave_1): Releasing backup interface
[  164.940054][T10747] team0: Port device team_slave_0 removed
[  164.948912][T10747] team0: Port device team_slave_1 removed
[  164.952589][T10747] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  164.955535][T10747] batman_adv: batadv0: Removing interface: batadv_slave_0
[  164.960321][T10747] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  164.964381][T10747] batman_adv: batadv0: Removing interface: batadv_slave_1
[  164.968036][T10747] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  165.711937][T10807] __nla_validate_parse: 4 callbacks suppressed
[  165.711952][T10807] netlink: 16 bytes leftover after parsing attributes in process `syz.2.927'.
[  166.304678][T10839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.934'.
[  166.481666][T10852] netlink: 52 bytes leftover after parsing attributes in process `syz.0.936'.
[  166.563311][T10863] netlink: 60 bytes leftover after parsing attributes in process `syz.1.938'.
[  166.563433][T10860] netlink: 'syz.2.939': attribute type 11 has an invalid length.
[  166.568669][T10860] netlink: 44 bytes leftover after parsing attributes in process `syz.2.939'.
[  166.568787][T10863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.938'.
[  166.594235][ T5905] IPVS: starting estimator thread 0...
[  166.623878][T10869] xt_l2tp: missing protocol rule (udp|l2tpip)
[  166.682830][T10867] IPVS: using max 63 ests per chain, 151200 per kthread
[  166.699186][T10865] netlink: 16 bytes leftover after parsing attributes in process `syz.0.940'.
[  168.108835][T10952] netlink: 'syz.2.955': attribute type 1 has an invalid length.
[  168.440438][T10976] netlink: 52 bytes leftover after parsing attributes in process `syz.2.960'.
[  169.537845][T11036] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x7
[  169.624526][T11041] netlink: 256 bytes leftover after parsing attributes in process `syz.1.972'.
[  169.749285][T11045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.973'.
[  169.816474][T11047] netlink: 'syz.2.974': attribute type 1 has an invalid length.
[  171.401009][T11137] netlink: 16 bytes leftover after parsing attributes in process `syz.0.989'.
[  172.613484][T11212] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1003'.
[  172.616686][T11212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1003'.
[  172.677584][T11216] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1004'.
[  173.430250][T11262] netlink: 'syz.0.1014': attribute type 1 has an invalid length.
[  173.440323][T11262] netlink: 'syz.0.1014': attribute type 1 has an invalid length.
[  173.494683][T11269] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1015'.
[  173.499261][T11269] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1015'.
[  173.502667][T11269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1015'.
[  174.312396][   T33] audit: type=1800 audit(1758839930.759:2): pid=11297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1022" name="x000000000000000700000000000000000000007" dev="tmpfs" ino=1767 res=0 errno=0
[  174.329506][   T33] audit: type=1804 audit(1758839930.779:3): pid=11297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1022" name="x000000000000000700000000000000000000007" dev="tmpfs" ino=1767 res=1 errno=0
[  175.055926][T11353] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1029'.
[  175.072546][T11353] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1029'.
[  175.309736][T11366] ip6gre2: entered promiscuous mode
[  175.665312][T11374] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1034'.
[  176.188161][T11403] netlink: 'syz.1.1040': attribute type 1 has an invalid length.
[  176.657466][T11429] netlink: 'syz.2.1047': attribute type 1 has an invalid length.
[  176.688088][T11434] __nla_validate_parse: 1 callbacks suppressed
[  176.688103][T11434] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1046'.
[  176.741585][T11434] ..0: renamed from hsr0 (while UP)
[  176.750517][T11434] ..0: entered allmulticast mode
[  176.753399][T11434] hsr_slave_0: entered allmulticast mode
[  176.755690][T11434] hsr_slave_1: entered allmulticast mode
[  176.758338][T11434] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  177.153915][T11451] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1049'.
[  177.298151][T11462] netlink: 'syz.2.1052': attribute type 1 has an invalid length.
[  177.303826][T11462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1052'.
[  177.442150][T11425] syz.0.1046 (11425) used greatest stack depth: 18136 bytes left
[  177.722671][T11489] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1056'.
[  177.844884][T11499] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1058'.
[  178.168690][T11520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1059'.
[  178.615511][T11532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1063'.
[  179.047358][T11562] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1069'.
[  179.063419][T11562] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  179.141237][T11562] netlink: 'syz.1.1069': attribute type 15 has an invalid length.
[  179.145813][T11573] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1071'.
[  179.149407][T11562] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1069'.
[  180.652888][   T54] Bluetooth: hci0: command 0x0406 tx timeout
[  180.655403][ T5239] Bluetooth: hci1: command 0x0406 tx timeout
[  181.817963][T11688] __nla_validate_parse: 6 callbacks suppressed
[  181.817975][T11688] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1093'.
[  182.129571][T11700] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1096'.
[  183.363526][T11765] netlink: 'syz.2.1107': attribute type 12 has an invalid length.
[  183.622033][T11782] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1110'.
[  183.705613][T11788] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1110'.
[  184.893134][T11832] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1121'.
[  184.901029][T11832] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1121'.
[  184.904334][T11832] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1121'.
[  185.249618][T11865] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1128'.
[  185.307593][T11871] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1126'.
[  185.492000][T11870] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1129'.
[  187.226707][T11991] __nla_validate_parse: 1 callbacks suppressed
[  187.226718][T11991] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1152'.
[  187.666003][T12005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1156'.
[  188.247460][T12045] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1163'.
[  189.648250][T12122] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1180'.
[  190.573723][T12171] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1189'.
[  192.529758][T12275] openvswitch: netlink: Key 6 has unexpected len 18 expected 2
[  192.649309][T12275] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1210'.
[  192.653068][T12275] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1210'.
[  193.917069][T12346] IPVS: Unknown mcast interface: syzkaller0
[  194.303862][T12368] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1229'.
[  194.307262][T12368] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1229'.
[  194.808053][T12395] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1235'.
[  196.475290][T12468] raw_sendmsg: syz.0.1248 forgot to set AF_INET. Fix it!
[  196.687725][T12484] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1251'.
[  196.713538][T12487] netlink: 'syz.1.1252': attribute type 25 has an invalid length.
[  197.346184][T12532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1261'.
[  197.349445][T12532] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1261'.
[  200.477967][T12728] bridge0: entered promiscuous mode
[  201.277207][T12778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1306'.
[  201.281479][T12778] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1306'.
[  201.398999][T12782] syzkaller1: entered promiscuous mode
[  201.402800][T12782] syzkaller1: entered allmulticast mode
[  201.905651][T12800] IPVS: lc: FWM 3 0x00000003 - no destination available
[  201.911040][   T51] IPVS: starting estimator thread 0...
[  202.001015][T12819] IPVS: using max 63 ests per chain, 151200 per kthread
[  202.368921][T12846] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1321'.
[  202.493530][   T13] IPVS: stop unused estimator thread 0...
[  202.595605][T12857] delete_channel: no stack
[  203.072366][T12895] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1330'.
[  203.343628][T12906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1332'.
[  203.916207][T12933] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1337'.
[  203.919034][T12933] netlink: 'syz.1.1337': attribute type 1 has an invalid length.
[  204.387138][T12965] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1345'.
[  204.403144][T12965] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1345'.
[  204.417228][T12965] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1345'.
[  205.362332][T13017] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1354'.
[  207.233928][T13127] __nla_validate_parse: 6 callbacks suppressed
[  207.233940][T13127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1375'.
[  208.450245][T13189] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1389'.
[  208.465816][T13189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1389'.
[  209.122187][T13230] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  209.614821][T13263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1403'.
[  209.882682][T13278] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1406'.
[  209.888520][T13278] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1406'.
[  209.894412][T13278] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1406'.
[  210.098605][T13295] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1409'.
[  210.524480][T13332] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[  210.528389][T13332] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  210.532054][T13332] CPU: 0 UID: 0 PID: 13332 Comm: syz.0.1417 Not tainted syzkaller #0 PREEMPT(full) 
[  210.535373][T13332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  210.538847][T13332] RIP: 0010:__xfrm_state_insert+0x1011/0x1450
[  210.540838][T13332] Code: 18 00 74 08 4c 89 ef e8 ad 3c 00 f8 4d 89 65 00 41 80 3c 1e 00 74 08 48 89 ef e8 aa 3b 00 f8 4c 8b 75 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 81 3c 00 f8 4d 89 2e 41 80 3c 1f 00
[  210.547486][T13332] RSP: 0018:ffffc9000a5370f8 EFLAGS: 00010246
[  210.549880][T13332] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000
[  210.552980][T13332] RDX: ffffc90009ff9000 RSI: 0000000000000492 RDI: 0000000000000493
[  210.555812][T13332] RBP: ffff88810b703630 R08: dffffc0000000000 R09: 0000000000000002
[  210.558411][T13332] R10: 000000000000000a R11: 0000000000000002 R12: ffff88810b7031a8
[  210.560958][T13332] R13: ffff88810b703628 R14: 0000000000000000 R15: 1ffff110216e0636
[  210.563466][T13332] FS:  00007f2ea82cb6c0(0000) GS:ffff8880b863d000(0000) knlGS:0000000000000000
[  210.566498][T13332] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  210.568602][T13332] CR2: 000000110c346b3d CR3: 000000002728e000 CR4: 00000000000006f0
[  210.571154][T13332] Call Trace:
[  210.572275][T13332]  <TASK>
[  210.573264][T13332]  ? xfrm_state_insert+0x44/0x60
[  210.574878][T13332]  xfrm_state_insert+0x54/0x60
[  210.576486][T13332]  ipcomp6_init_state+0x655/0x900
[  210.578114][T13332]  __xfrm_init_state+0xa76/0x13f0
[  210.579792][T13332]  ? __xfrm_init_state+0x7ef/0x13f0
[  210.581492][T13332]  xfrm_add_sa+0x2f5b/0x4070
[  210.583038][T13332]  ? __pfx_xfrm_add_sa+0x10/0x10
[  210.584671][T13332]  ? apparmor_capable+0x137/0x1b0
[  210.586337][T13332]  ? __nla_parse+0x40/0x60
[  210.587722][T13332]  xfrm_user_rcv_msg+0x7a3/0xab0
[  210.589393][T13332]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  210.591142][T13332]  ? __pfx___mutex_trylock_common+0x10/0x10
[  210.593115][T13332]  ? rcu_is_watching+0x15/0xb0
[  210.594643][T13332]  ? trace_contention_end+0x39/0x120
[  210.596538][T13332]  ? __mutex_lock+0x335/0x1350
[  210.598113][T13332]  netlink_rcv_skb+0x208/0x470
[  210.599679][T13332]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  210.601560][T13332]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  210.603334][T13332]  ? netlink_deliver_tap+0x2e/0x1b0
[  210.605037][T13332]  ? netlink_deliver_tap+0x2e/0x1b0
[  210.606760][T13332]  xfrm_netlink_rcv+0x79/0x90
[  210.608309][T13332]  netlink_unicast+0x82f/0x9e0
[  210.609932][T13332]  ? __pfx_netlink_unicast+0x10/0x10
[  210.611623][T13332]  ? netlink_sendmsg+0x642/0xb30
[  210.613192][T13332]  ? skb_put+0x11b/0x210
[  210.614500][T13332]  netlink_sendmsg+0x805/0xb30
[  210.615986][T13332]  ? __pfx_netlink_sendmsg+0x10/0x10
[  210.617597][T13332]  ? aa_sock_msg_perm+0xf1/0x1d0
[  210.619134][T13332]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  210.620751][T13332]  ? __pfx_netlink_sendmsg+0x10/0x10
[  210.622428][T13332]  __sock_sendmsg+0x21c/0x270
[  210.623875][T13332]  ____sys_sendmsg+0x505/0x830
[  210.625361][T13332]  ? __pfx_____sys_sendmsg+0x10/0x10
[  210.626995][T13332]  ? import_iovec+0x74/0xa0
[  210.628392][T13332]  ___sys_sendmsg+0x21f/0x2a0
[  210.629962][T13332]  ? __pfx____sys_sendmsg+0x10/0x10
[  210.631689][T13332]  ? __fget_files+0x2a/0x420
[  210.633201][T13332]  ? __fget_files+0x3a0/0x420
[  210.634818][T13332]  __x64_sys_sendmsg+0x19b/0x260
[  210.636420][T13332]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  210.638202][T13332]  ? rcu_is_watching+0x15/0xb0
[  210.639766][T13332]  ? do_syscall_64+0xbe/0x3b0
[  210.641326][T13332]  do_syscall_64+0xfa/0x3b0
[  210.642814][T13332]  ? lockdep_hardirqs_on+0x9c/0x150
[  210.644606][T13332]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.646542][T13332]  ? exc_page_fault+0x9f/0xf0
[  210.648151][T13332]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.649979][T13332] RIP: 0033:0x7f2ea738ec29
[  210.651387][T13332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  210.657241][T13332] RSP: 002b:00007f2ea82cb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  210.659764][T13332] RAX: ffffffffffffffda RBX: 00007f2ea75d6090 RCX: 00007f2ea738ec29
[  210.662233][T13332] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009
[  210.664785][T13332] RBP: 00007f2ea7411e41 R08: 0000000000000000 R09: 0000000000000000
[  210.667539][T13332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  210.670144][T13332] R13: 00007f2ea75d6128 R14: 00007f2ea75d6090 R15: 00007ffd194ae538
[  210.672744][T13332]  </TASK>
[  210.673738][T13332] Modules linked in:
[  210.675180][T13332] ---[ end trace 0000000000000000 ]---
[  210.677039][T13332] RIP: 0010:__xfrm_state_insert+0x1011/0x1450
[  210.678990][T13332] Code: 18 00 74 08 4c 89 ef e8 ad 3c 00 f8 4d 89 65 00 41 80 3c 1e 00 74 08 48 89 ef e8 aa 3b 00 f8 4c 8b 75 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 81 3c 00 f8 4d 89 2e 41 80 3c 1f 00
[  210.685486][T13332] RSP: 0018:ffffc9000a5370f8 EFLAGS: 00010246
[  210.687844][T13332] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000
[  210.691010][T13332] RDX: ffffc90009ff9000 RSI: 0000000000000492 RDI: 0000000000000493
[  210.693701][T13332] RBP: ffff88810b703630 R08: dffffc0000000000 R09: 0000000000000002
[  210.696183][T13332] R10: 000000000000000a R11: 0000000000000002 R12: ffff88810b7031a8
[  210.698709][T13332] R13: ffff88810b703628 R14: 0000000000000000 R15: 1ffff110216e0636
[  210.701408][T13332] FS:  00007f2ea82cb6c0(0000) GS:ffff8880b863d000(0000) knlGS:0000000000000000
[  210.704173][T13332] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  210.706420][T13332] CR2: 000000110c346b3d CR3: 000000002728e000 CR4: 00000000000006f0
[  210.708962][T13332] Kernel panic - not syncing: Fatal exception in interrupt
[  210.712016][T13332] Kernel Offset: disabled
[  210.713418][T13332] Rebooting in 86400 seconds..

VM DIAGNOSIS:
22:39:27  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000108b RDI=000000000000108c RBP=00000000000003f8 RSP=ffffc9000a536930
R8 =ffff888020238237 R9 =1ffff11004047046 R10=dffffc0000000000 R11=ffffffff854fac30
R12=dffffc0000000000 R13=ffffffff99ad7915 R14=ffffffff99dcc480 R15=0000000000000000
RIP=ffffffff854facac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f2ea82cb6c0 ffffffff 00c00000
GS =0000 ffff8880b863d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c346b3d CR3=000000002728e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f2ea75a7498 00007f2ea75a7470 XMM03=00007f2ea75a74a8 00007f2ea75a74a0
XMM04=00007f2ea810d100 00007f2ea75a7460 XMM05=00007f2ea75a7478 00007f2ea75a74c0
XMM06=00007f2ea75a74b8 00007f2ea75a74b0 XMM07=00007f2ea75a74a8 00007f2ea75a74a0
XMM08=0000000000000000 00007f2ea7412f0f XMM09=0000000000000000 00007f2ea7412fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ea697797c0ca1e00 RBX=ffffffff8de112c8 RCX=ea697797c0ca1e00 RDX=0000000000000000
RSI=ffffffff81b19307 RDI=ffffffff8de112c8 RBP=ffffc90000177ca8 RSP=ffffc90000177b98
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=fffffbfff1f45dc7
R12=dffffc0000000000 R13=ffffffff81b19307 R14=ffffffff8de112c8 R15=1ffff9200002ef80
RIP=ffffffff819d6e78 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c3d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000558d50680000 CR3=00000001049a6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
