last executing test programs:

943.233899ms ago: executing program 2 (id=391):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x7)
ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000040))

862.715328ms ago: executing program 2 (id=393):
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={0x0, @bcast, @bpq0, 0x1, 'syz1\x00', @null, 0x0, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @null, @bcast, @bcast, @default, @null]})
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r1, &(0x7f0000000100)={0x0, 0x8, 0x3, 0x3, 0xfb}, 0x8)

795.56588ms ago: executing program 2 (id=395):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = socket$inet(0xa, 0x801, 0x84)
listen(r1, 0x4000100)
listen(r1, 0x8)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000009000000000000000000feff95"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x33}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$packet(0x11, 0x2, 0x300)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES16=r3], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x7fff}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
socket$kcm(0x10, 0x2, 0x4)
r6 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r6, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0xfffe, 0x400, @loopback={0xff00000000000000}, 0x101}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000000)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000400000000"], 0x18}}], 0x1, 0x4000880)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007500000018010000646c6c25000000000e0020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000100000000000000900000085000000b400000095"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

744.698515ms ago: executing program 2 (id=398):
r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10)
ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000080)={'lo\x00', {0x2, 0x0, @multicast2}})
r1 = accept4(r0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000140)=0x80, 0x0)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5e33}, 0x1c)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000007c0)=@broute={'broute\x00', 0x20, 0x4, 0x5c0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000200], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x11, 0x40, 0x806, 'syz_tun\x00', 'veth1_macvtap\x00', 'ip_vti0\x00', 'batadv_slave_1\x00', @broadcast, [0xff, 0x0, 0x0, 0x0, 0x101], @multicast, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], 0x9e, 0x9e, 0xee, [@connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x5, 0x3}}}], [], @common=@log={'log\x00', 0x28, {{0x5, "cbe5df59b2bd79e8c8429b02858216e34d22b791eb837c7cf4b486ca6b95", 0x13}}}}, {0x3, 0x80, 0xf8, 'pim6reg1\x00', 'bridge_slave_1\x00', 'veth1_macvtap\x00', 'lo\x00', @multicast, [0x0, 0x0, 0xff, 0x0, 0xff], @random="d8a4b9b3184e", [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], 0x6e, 0x1ce, 0x1fe, [], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x0, 'system_u:object_r:hald_log_t:s0\x00'}}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x8085}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x11, 0x40, 0x22eb, 'netpci0\x00', 'veth1\x00', 'veth0\x00', 'veth0_to_bridge\x00', @remote, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], @local, [0x0, 0x0, 0xff, 0x0, 0xff], 0x6e, 0xee, 0x11e, [], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x6, 'syz0\x00', {0x3}}}}, @common=@redirect={'redirect\x00', 0x8, {{0x3}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0x3, 0x20, 0x88b5, 'bond0\x00', 'veth0_to_team\x00', 'lo\x00', 'nr0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, [0x101, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0x6e, 0xf6, 0x126, [], [@common=@dnat={'dnat\x00', 0x10, {{@multicast, 0xfffffffffffffffe}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x40, 'syz1\x00', {0x1000}}}}], @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x638)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x58, 0x1, 0x4, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xff00}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x12}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x2}}, @NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000)
r2 = accept4$packet(r1, 0x0, &(0x7f0000000980), 0x80000)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000009c0)={'wlan1\x00'})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r1)
socketpair(0x26, 0xa, 0xc, &(0x7f0000000a40)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r5, 0x89f6, &(0x7f0000000ac0)={'sit0\x00', &(0x7f0000000a80)={@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x10, 0x0, [{@multicast2}]}})
ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000b00)=<r6=>0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000b40)=""/17, &(0x7f0000000b80)=0x11)
socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
ioctl$AUTOFS_IOC_ASKUMOUNT(r7, 0x80049370, &(0x7f0000000bc0))
sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x94, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x126}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x4)
bind$unix(r4, &(0x7f0000000d80)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, r3, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20040040)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000f00))
getsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000f40), &(0x7f0000000f80)=0x10)
connect$tipc(r1, &(0x7f0000000fc0)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x4}}, 0x10)
sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000001180)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001140)={&(0x7f0000001040)={0xec, 0x0, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_TUPLE={0xbc, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000040}, 0x44000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001b80)={<r8=>0xffffffffffffffff})
sendmsg$netlink(r5, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f00000011c0)={0x1e4, 0x19, 0x700, 0x70bd25, 0x25dfdbfb, "", [@nested={0x4, 0x109}, @nested={0x14e, 0x26, 0x0, 0x1, [@typed={0x6, 0x6c, 0x0, 0x0, @str='{\x00'}, @nested={0x4, 0xb1}, @generic="8e4cd17ef0b110f2c22eddf20ae0766411d0d02c047c9c8ad78c743bf36d816d386007ed02748f35c29c33d3bfdc465dae15487743d502db9dbcb0c38468ebfaddae67f4e569f51655fbb097e21a706320f543f98eef879d6299b0fb4002de47490c391c8cebe953bd8c33b65bc1d5113967b373f429", @typed={0xc4, 0x3c, 0x0, 0x0, @binary="bcd215c16b4cf82d63518e550191e99a2221ee397744b74212333a85eb61cb80e6069dc03af96e6cff3b9b1a778e23f55657817e26285af6ec98607786b80b71caef584ead33e0198e9fec61839d7fa18fc43b1d7f6210b9811fbaa447226215646629fc6abb9645d27e4b339177642b122b6b67381acb66f526fca4b19f0806cb40686ef7d81cb8f0b8c380b6c5b5623d760cfd09d87942a69d0c4fa97de1e32e5ec653af3c12eeddff7515a7e8bfa3813101f4bb5dc71f21f3d841df84e7c1"}, @nested={0x4, 0x6a}]}, @typed={0xc, 0x6a, 0x0, 0x0, @u64=0x7}, @generic="e0217edc897daf8c1f20b68b4b408a8811c9d0c28674c4f4a369096106d4065f081d72ad60dd42117ee3046113d9c2ae1c4ba86d78925a811591b36fd0385b607a4d2051337036194aa0a62f33bfbc25e2566c83d8a71b94470e12a9748e4d952748ba89ae8d526eaf29434fd16b1684553d"]}, 0x1e4}, {&(0x7f00000013c0)={0x4b8, 0x3c, 0x1, 0x70bd2d, 0x25dfdbff, "", [@generic="faacea651e60c4f5727027d822c4cf751d03906c", @typed={0x9, 0x29, 0x0, 0x0, @str='.))+\x00'}, @generic="7cfa38a91911286387da4ee7844a5f275affd5af11ca6d8038175775600dd8f90fd487a958687762ac8498a75ef8a3c33605fb8c65daa02ea694ff9d28d41638bf2ba46330710547593d", @nested={0x25a, 0x4d, 0x0, 0x1, [@generic="f983a09175133d5ff84911f7c8624550bfb4ea4ed64cf37488fd9af2d5024cf05bf0872aa201b59d83ce8e0a19f8ac24d2f02e9e5a093da7", @nested={0x4, 0x2c}, @generic="d696334f4ba2cfe7baaef601091b72d505cfbe966aacebd5108d3e2c46c08a184ba6e7963fbf00bb9cd802d1be20dd8f04e1369d67cf1131f3a285a1c53a49b281f9e8857f95eee7eac8c7a85749ec2a6b0a9bf1e427", @generic="9efe040b285920685371d6fb3e8194a038cc608426a0eef9cc9cb5ddf13c733ec8ed044a5240e0a5fad84b0940882f99926383bfad7ad83fef35d12c5af7717e2deded069e37155bb3eec87c422a90026b1da0fda7014d58df5c38f30cad52e975b803984d21b00844617f3870fb4ddb7ab5a2863071057f193cea39a7e72c1269d0c320edfd5854c80fc5e885ba6437890fc04ca847b2994a3fb59ba8daf39047620ec0d8e5c7249e232907cb16eec50105dcbe1231c8cb9b8ad7b85404d5bcc10dff1e7bc8d2b347e13c7a6f0dfeaed23b", @generic="2e02aba628fd28f22ed0f4f7387d1ede7211ff3bfa803d0eff44f1afc768f832bd21599c8d3094923e6376385eeff112d29ab7be794a1b2877f45ce82253412b479cb6713e2e45cd40377582bd75f85ce76ff15cae7f644363f8f342cded548e663a8d905ff7accd36fb9fc06b86478f2298dbd05cd73c11bccb8029ea691346edfce6454ca9ac9141d39827d2c3dedbe64bca53170652053511d9c3c49f87e2ad490a0819109003de7b85f3d22a0293096b1454a1e642a21f49d9970177211891c08e5ac49c2bc225e90bcc89ade921be8071c5efa2e60dae224cce8c01f25ef24c292ec1ec3d9503107265927a", @nested={0x4, 0x39}]}, @generic="4b11f051d04d3ab73fc65f69ef36fdde5d2e8bb2d13ab142f5d41601c1229693865b8660a809220f0be09376c2bca40ad7398894b78decd8d3647af9116c39680b63e8d76a7555e3f606fd87829a156914cc4393439e087dee4589dc1078547b96d5ebec5127f9164f7575579a78e493279e40e7337516df8c9ab520c46768c3cf34b98ea276c140ff5f028e697f2df6926d675650581c47e82e26e10b648756e97fcae0186608f4f88e7873d9c7c80ff1c7c25343e35322511832770ee87691d87d6c485a4a25cd4139139d77c7840816582dec747d2240df56532754296c8754ea6e17", @generic="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"]}, 0x4b8}, {&(0x7f0000001880)={0x270, 0x20, 0x400, 0x70bd27, 0x25dfdbfd, "", [@nested={0x71, 0x42, 0x0, 0x1, [@nested={0x4, 0x39}, @nested={0x4, 0x101}, @generic="e336637cacdf6b452552eaecb3d55a99f31475d52523b55db84cd9c0b770bfde3240be0a4389609032142fc295a0a3d29ac4ddca04b76ad42506e95803f296b26df5e1579c52bbe3f5a029eaae9204861dd7a06adb7bcee0698ff5495bb317b7c5", @nested={0x4, 0xfd}]}, @typed={0x4, 0xb7}, @nested={0x165, 0x10a, 0x0, 0x1, [@nested={0x4, 0x105}, @generic="9fbe40e236dd35e2adb321e49a39dcbadd3f35c5f982679aa5a8d739a03d3ef2d98ab8bed9f720c1e18b6e13f457c206b55aa66c4e0910fef901344fd57ed6ca2d1b4e9e726ccdde60597e01236a9521c950a0fe57", @nested={0x4, 0x65}, @generic="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", @nested={0x4, 0xa6}, @nested={0x4, 0xee}]}, @generic="47167e43fc6b85ec398b823f9e91f17bbf23d65f4c1b663c0012c7fcf737b7480ef58ce6bda1017295df5bf471c5b84e5e099019bad1d0a3b878c95a97fffcaa2dd3d7f6f2d342390aceb91f633c60a0d0f8addca1b70d691deef3de63ee923256e0a43b21f577a5a03d6529129933140827d0", @typed={0xc, 0x28, 0x0, 0x0, @str='SECMARK\x00'}]}, 0x270}, {&(0x7f0000001b00)={0x54, 0x10, 0x20, 0x70bd2d, 0x25dfdbff, "", [@typed={0xc, 0xf1, 0x0, 0x0, @u64}, @typed={0x8, 0x99, 0x0, 0x0, @pid=r6}, @typed={0x8, 0x122, 0x0, 0x0, @fd=r1}, @typed={0xc, 0x96, 0x0, 0x0, @u64=0xc1}, @nested={0x1c, 0xbb, 0x0, 0x1, [@typed={0x8, 0xbf, 0x0, 0x0, @u32=0x63}, @typed={0x8, 0x6c, 0x0, 0x0, @pid=r6}, @typed={0x8, 0x69, 0x0, 0x0, @u32=0x10001}]}]}, 0x54}, {&(0x7f0000001bc0)={0xe4, 0x34, 0x300, 0x70bd27, 0x25dfdbfd, "", [@nested={0xb7, 0xe6, 0x0, 0x1, [@nested={0x4, 0x138}, @typed={0x8, 0xc2, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @nested={0x4, 0x12b}, @nested={0x4, 0x10e}, @generic="e1406bc978ca4f8bd3cb535539703a105a95c8024dd03116908e07e26eeb0a4b26a9a31d146cca8860f173783ea4eee5ad2c4a5735fb0578d96f7ef426ac29f082c9ed27f483d6ee8227a93ef7a931af19e8f1bdfa13d91a99b549df14e85b4b8656fdf43e5f64970977205d56765ef14f4ad2bb748a351e3ccb848cddbb31882b9fa5363aa6b402b210d6145a820e6915eb8066e9f381e2f19d02", @nested={0x4, 0xe2}]}, @typed={0x8, 0x31, 0x0, 0x0, @fd=r8}, @typed={0xc, 0x4f, 0x0, 0x0, @u64}, @typed={0x8, 0x4, 0x0, 0x0, @u32=0x5}]}, 0xe4}], 0x5, 0x0, 0x0, 0x800}, 0x11)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000001d80), 0xffffffffffffffff)
sendmsg$inet(r0, &(0x7f0000002200)={&(0x7f0000001dc0)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000002180)=[{&(0x7f0000001e00)="d552b1837e870f2970743842d6321c939ad1e935e29232d1bf51fd5902f0200806c10c2bd33781a76de10c55f52d1f62ca9fb4697e701554ae3f82d3f5bfaaa8965f343c425ef7b4db7a6e9583ad887a9afbf8f5adaa9269fe26e02e859d6d34a0b2c1bc3d5c36b7620200d740fbd094ed92a3dd75f263e29e5a5654d62329ce2c003238ade0319a483f57efdb5ecc01975b1041ec406d3ec32540f8fbe3f1c72874d717dcfebb4e69a396ff94128040", 0xb0}, {&(0x7f0000001ec0)="5a88ee0fd13bdc0f939b1bb78530ac46c77ed935d1aac709cb2a7cb0f33aa0190a4f02cbf9fa0c9fe5cd8675c2383de62ec225bac8239cd0350876eb2cf9a5d7fad33ece4e3d91f9034f6493521b7a4716054884fa6e099c85dba79784aac18847b0bb85f93e5c585e85ab04e122313e6065b32f9b60874cdd488913d4344f0517e7fd941c89ad4dd5cdc07daa3596f30aa2efaa26af44078421c5f1c038246717ab2e6943da851e8ca9ef7811da8b6f7134529878162a70376480a2e50d0f30b5e2ea8627392cef27ccc3d2bf16153ce2d41f2413fb874c134fe9fd4468e249114c953b7d219e3d4b2e3bc2630b0f", 0xef}, {&(0x7f0000001fc0)="629f5f8e0df8fb6d86180f03f3f864f5983043790948cc393bc683f2cf2803b50bfd78e6275c757d8f9c9a77cdae55931e56e635e0e016baa56262a5e891734b35e6c272b1161fb953725f205220fd39ba6f6f8880a06fb6910bcb8094bb8ac2c482da15219e293de02193babf138df48741119a751d019342eb874c614ebf5073d8dfd8c40ff5d3268967c06c9a7b7b4dfd955f874d44", 0x97}, {&(0x7f0000002080)="0e7e546a8b5baef5aad7ce2a193f16837a12aa1953c8f94ed7156dc862b9c576c613e9a7e69fba57d9b713c7f4bec68312e2c4c15104672357ca148473288488a8a7193b03ec6491f4084581e554ec269d5fcb7ebb52ea74d3527e5b41d3f99293a49d1e8c70444a17f88f33c0f8b7b55c5f030529172acc9d856e3c7d99dbbab9c2c5b036c12c4f924679e188c80acfb41696ad9ef619ed9cd33c7c3399a65dc99aa9065b36c4b89e258dd0bc7487a7f9bdb5297db3b973a9e8b3aa1202aa1b9ad3f869fcfbf508d9121e7f358137d2ca1d70ef4379d296beb724b53a45f466513f01", 0xe3}], 0x4, &(0x7f00000021c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x18}, 0xc000)
ioctl$SIOCGETSGCNT(r4, 0x89e1, &(0x7f0000002240)={@multicast2, @loopback})
setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000002280)=0x3, 0x4)

739.689319ms ago: executing program 2 (id=400):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
unshare(0x6a040000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a300000000014000000020a0300000000000000000002000003140000001100010000000000000000000000000a187b639904240561e0b40fc7cf272a8c0d2c243cb41c4c5756d5a706f03839db5356ed1f7c498ef773120872b92cda58384e329ca65b12cf45072d05fb4b984251c3c7"], 0x68}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x2}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000feff030000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000bebd405a8c3adf4c5ca295c8e90000000000000000000000ac0f2b64de00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300000000000035090100000000009500000000000000bf9800000000000056080000000000008500000007000000b700000000000000950000000000000032224fe8f63a7969f662cebb579e40799c59065d7b4376eb930400000000000000caec85b6d4d9b2246ac241f8f29438966a38aad1d4a4038d68841ea3bbfdea87ae7168f29a9e87159b31aae07f1c8bad2513b45e018163649bf36200"/182], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xf2e8a000)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="cc", 0x1}, {&(0x7f00000000c0)="8eabd4c0c48034d70c6006aaf0e953151d41e3aa438ad0f818f3ca6e230aa5b077a897a5165d32bd5407444338d4e74dc23e09008a2002a672aaa2b99549da614d74314e1666d923815da827281bee2de6eda534b2496123977149b4e7a4868d036ec6dc798458742e9c158e0c7d81a62785b97a0cc5", 0x76}], 0x2}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x4048894)
socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8)
bind$vsock_stream(r3, &(0x7f0000000940), 0x10)
clock_gettime(0xfffffffffffffff1, &(0x7f0000000040))
close(0x3)
listen(r3, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1)
getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x9, 0x0, 0x2, 0x9, 0x9, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff5}}, 0x74, 0x7, 0x3, 0x8, 0x7}}, &(0x7f0000000280)=0xb0)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)

674.911112ms ago: executing program 0 (id=402):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001280), 0x40102, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0xd1383000)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000100)={<r2=>0x0, @in6={{0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}}, 0x2, 0x8000, 0x1, 0xe10, 0x4}, &(0x7f00000001c0)=0x98)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000200)={r2, 0x7, 0x20, 0x7, 0x4}, &(0x7f0000000240)=0x18)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @random="1553ff41cf11", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4df100", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x2, 0x2}]}}}}}}}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0)
ioctl$PTP_PIN_SETFUNC2(r0, 0x40603d10, &(0x7f0000000080)={'\x00', 0x80000001, 0x3, 0x8})

594.501433ms ago: executing program 1 (id=403):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x18, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x3, 0x3fff}, 0xa)
r3 = socket$qrtr(0x2a, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x7, &(0x7f0000000680)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000480)='syzkaller\x00', 0x2}, 0x94)
r7 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
r10 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'bond0\x00', <r11=>0x0})
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r11, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0xd, 0x3, 0x6}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0xfffffffffffffd78, 0x5, 0x7}]}}]}, 0xac}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x6}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000000000000000}]}}]}, 0x50}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x0, 0x3c, 0xb2, &(0x7f0000000180)="4362fcf141059e2a2f532f5d78c3ca4d8d964c78115a5dafa485c66d6654069fca6ea9b3b107ed43388d6f8735ad66ab786b334e15ba84554bda9ca7", &(0x7f00000003c0)=""/178, 0x2, 0x0, 0xd3, 0x49, &(0x7f0000000580)="abe7c92140176b6d43f327adb0c8d17501c9b5eaf455f7bbb856494f4dffb9e4a7ad9038f1cc94e96bd5ed596ebb1218d3a4767f9595a4a0b4d81eafff305a770467c9e35c7c4802a414576df715ae2e314e843b8d897f49668dc3e392613c230f4e5e65d3202a4c071f5217e6f49624e1cf3ac5ed5624e4b4442676da11ee19bbc3163279c1dc6f506c6ede1ad7f725252229251983b825dcb3c052cce03b32e480858571a2cab5cd1c9e539c52645b1362c18d0b8413615956bcd759bc2dd4eeb5a64f3675d6746ffbb4b92e507324764d59", &(0x7f00000001c0)="4eb3b8e690566cb6f04a72da061c75762a7e1a840c851929197915155cc34076b92a9f6dd9db383926c38f14f8930b8988f9d089894a98c0ba3246180a7d77787a9b508d1fca30efaa", 0x7, 0x0, 0xb}, 0x50)
ioctl$PPPIOCGCHAN(r7, 0x80047437, &(0x7f0000000080))
recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0)
ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000000))
connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100))
writev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="6400000002060108000000000000000000000009140007800800114000080000050015000c000000050005000a000000050001000700000005000400000000000900020073797a320000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0x17c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @coaddr={0x14, 0xe, @in=@empty}, @tfcpad={0x8, 0x16, 0x4}, @extra_flags={0x8, 0x18, 0xfffffff7}]}, 0x17c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

593.983933ms ago: executing program 0 (id=404):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x18, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0xe, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x40004)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000))
writev(r1, &(0x7f0000000200)=[{&(0x7f0000000180)="8e42753a51bcf530fb27756b7bd4cdb27e4dcff65501bce20b8da0817c40241caac3d132f9a1961a89286a1f4f2ae66f161bde58bbb2d9", 0x37}, {&(0x7f00000002c0)="83094d7418320c9f233fd9449b6767e29b3962a2bf7f6e0b5c5a783ea644c4bd20e71b4fef68584c3d532bbd7d1a58d1b028482c7875a26d72109c3ef69ca50e41ee7381e59762ad336e62ae5a96106c419d54a984d5728803d81fa5a2a5853a357a6613601d3ae9916b95d2ee59498046ad3eee5bf221e50fdfe6ab4542ed1ca7cc151c6d18789fe3e4e3b36291f5bb5f1037fc9ff4ba1ace70aa65034e8f798b89f34febbc9e67098b8e7f3728a80f1bf2113ffff9e6d2f8f8e2a3f85274aa7e4de2d5f43d59c1a744184cdd179a2889737948026801d422b64c40243e4596decf20c209fbc7e0", 0xe8}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="82f476d1cb7183134b402c99b21508c719bb60cd05018aa544b61abbd75bea9fc7487d25343dc91afcf1ca8dc4c91fad30989f461f3ba59c096cc44a474a7a19e344ee51efe5644f5c7b4e9663346f09bc55e81088a32ac48ba178607963907e9606a14f08da2f1e4c367bcbcb4a9e0e21f7132d1464e47454ad27739392e2f3ece53841c55bf0bbfc61f10824cd4a171a7afae315bf483d9c76", 0x9a}], 0x4)

485.468234ms ago: executing program 1 (id=405):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r1)
sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fbdbdf250400000005000a0001000000080001003a35eb7c3ee696b7bb9d8ff7bddbd5e37b754f8fd130c25f"], 0x24}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000004d090100000000009500000000000000b702000000000000632af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newsa={0x1ac, 0x10, 0x413, 0x70bd28, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20, 0x7, 0x4e24, 0x0, 0xa, 0x20, 0x20, 0x1d}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0x6, 0x7f}, {0x0, 0xffffffffffffffff, 0x4}, {0xf6, 0x4, 0x8}, 0x0, 0x34ff, 0x2, 0x1, 0xbe}, [@algo_auth_trunc={0xba, 0x14, {{'nhpoly1305-generic\x00'}, 0x370, 0x40, "e41a2123111e86a3de078a80e1f1a68e920f065a9bb6187c18f884bbd9203b32722cb4e11ceb83cd70d8b7f00b7e21e30538736051b8a058a8a227858a524903c3acdc42e11aaf2c33be5a773b5e5264f3339c7c88d5e6e9e245e2fbdaff1fb554e239ae0894f3f1e17343d118fa"}}]}, 0x1ac}}, 0x804)

485.048095ms ago: executing program 0 (id=406):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000200), 0x4)
listen(r2, 0xfff)
getpeername(r2, 0x0, &(0x7f0000000140))
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"/325, @ANYBLOB="087fec5701dfbdf9342c9e18ca4a68e58326db9f99e4251f8c18e87a5e2b70435a2ab2b609fb01f3f5f6fbd71f69269358a1c78cadb239daa913430dbd30ac724451650b939f8942ae773dbf0a89327b4f4b73a38790fc9bb7abe27a4259ed647d3bf1f4efafc86f7240c8f84996746fdcdb498154", @ANYRES32, @ANYBLOB="00000000000000001c000400feff000000000000e0000002000000000000000000000000000019002b000000"], 0xf0}}, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
write$nci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='AF', @ANYRES32], 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0xfffffffffffffd9d, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000210001002cbd7000fddbdf250a800004ff0000080400001400010400000000000000000000ffffffffffff14000300776c636e300000000c000000000000000800060000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000841}, 0x20040000)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
socket$inet6_sctp(0xa, 0x1f1d107143ab511f, 0x84)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x5}, 0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES8=r6, @ANYRESOCT, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r1], 0x50)
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0))
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000005c0))

373.640694ms ago: executing program 1 (id=407):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$alg(0x26, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x900, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)

370.992214ms ago: executing program 0 (id=408):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200000000000000000000000800"/56], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0)

302.226127ms ago: executing program 1 (id=409):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x1, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x44040)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001800310800000000000000001d01000005000d0000000000"], 0x1c}}, 0x800)
socket$packet(0x11, 0x3, 0x300)
unshare(0x20000400)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x11, 0x0, 0x0)
r5 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ASSERT(r5, 0x29, 0xcf, &(0x7f0000000040)=0x1, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000000cf08000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00'})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00'/14], 0x14}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="5000000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="400401000000000008000a00", @ANYRES32=r10, @ANYBLOB="017c8bd8459980da17a68e5f8f9cc7ab6a85d217c04c3601135f324dd6831ac6e4b61e5ee8a02a8eec17ee073b1fba68c0c7ffd7069f56d2cdb693a452d98f082f1cab5c9637c40e865043c06dcfff43717c46649a3fdaca1383a1ea7615a8ba015550bb4951432c3e29c7ab2b79cd539757850cc7731f0847bcfefed8a4ce4d8f6dbbd5098637431aa01d37a84908d5e040802e8721aa6d069c16a2b9920345ac614ac2b45cf28fccfa51459378465f5afd5707c963c4c6ba05e8b899319641ca4cb1a876e4fccbaaf8fd"], 0x50}}, 0x0)
r11 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r12, @ANYBLOB="01"], 0x3c}}, 0x0)
r13 = socket$alg(0x26, 0x5, 0x0)
unshare(0x600)
bind$alg(r13, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x700, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

301.952767ms ago: executing program 0 (id=410):
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x1, 0xc, 0x80000000, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x1e}, @rand_addr=0x64010102}, 0x10)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x300, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x6}]}}}}}}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x5, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x4000)

155.819036ms ago: executing program 1 (id=411):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
write$nci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='AF', @ANYRES32], 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x5}, 0x8)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000300)={0x0, 0x1}, 0x8)
sendto$inet6(r0, &(0x7f0000000140)="8269b66f", 0x18, 0x700000000000000, 0x0, 0x0)

94.127821ms ago: executing program 1 (id=412):
r0 = socket(0x2a, 0x2, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1e, 0x4, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000005007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) (async)
r6 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x40, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xb4}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}}]}]}, 0x40}}, 0x9f15a82143cf0dd0) (async)
sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0xfdff)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async)
ppoll(&(0x7f0000000000)=[{r2, 0x8503}], 0x1, 0x0, 0x0, 0x0)
close(r1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=@gettfilter={0x4c, 0x2e, 0x4, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x9}, {0x6, 0xf}, {0xb, 0x7}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x7}, {0x8}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x8}]}, 0x4c}}, 0x0) (async)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async, rerun: 32)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r10=>0x0}) (async)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r10, @ANYBLOB], 0x2c}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {0x3}, {0x8, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x14)
socket$netlink(0x10, 0x3, 0x0)
r12 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r12, 0x0, 0x0, 0x4008000, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2, 0x7}, 0x30)
sendto$inet6(r12, 0x0, 0x0, 0xc001, 0x0, 0x0)

90.270292ms ago: executing program 0 (id=413):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (rerun: 32)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x3}) (async)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000000), 0x4) (async, rerun: 64)
setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, 0x0, 0x0) (rerun: 64)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x10000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x400}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x10}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000080)=0x7, 0x4) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f00000000c0), 0x4) (async, rerun: 32)
syz_emit_ethernet(0x56, &(0x7f0000000340)={@link_local={0x5}, @link_local, @void, {@canfd={0xd, {{0x0, 0x1, 0x0, 0x1}, 0x7, 0x0, 0x0, 0x0, "2316e0abd283c8095d658bba3c9bcb01b50b7799c68006b1b108b70a4e5dc49a9c9dd04ddea8abf900f5f7143f70971c3b94417d37caee2930249da1df850ab2"}}}}, 0x0) (async, rerun: 32)
socket$alg(0x26, 0x5, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) (async)
sendmsg$nl_route(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x46, &(0x7f0000000080)='team0\x00', 0x10) (async)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x2d, 0x9, 0x70bd27, 0x0, {0x5}, [@typed={0x14, 0xa, 0x0, 0x0, @ipv6=@loopback={0x200000000000000}}]}, 0x28}}, 0x84) (async, rerun: 32)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0x32}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0xff24, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0xfa665a81a6d02b4d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) (rerun: 32)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, 0xc0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x7fff, 0x5, 0x0, 0x3}, {0x0, 0x0, 0x800}, 0x9, 0x6e6bbc, 0x1, 0x0, 0x1, 0x2}, [@extra_flags={0x8, 0x18, 0x9}]}, 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x4000)

0s ago: executing program 2 (id=414):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xd76}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e2a, 0x3, @private0, 0x407}, 0x1c)
listen(r1, 0x39c)
close(0x4)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:13006' (ED25519) to the list of known hosts.
syzkaller login: [   51.129505][ T5835] cgroup: Unknown subsys name 'net'
[   51.258297][ T5835] cgroup: Unknown subsys name 'cpuset'
[   51.263103][ T5835] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   53.060124][ T5835] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   57.976375][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   57.983158][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   57.994978][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   57.999128][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   58.002787][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   58.080442][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   58.084406][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   58.087875][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   58.091139][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   58.094678][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   58.153741][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   58.157399][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   58.160457][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   58.163884][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   58.170545][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   58.335959][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   58.512835][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.516497][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.519760][ T5846] bridge_slave_0: entered allmulticast mode
[   58.523760][ T5846] bridge_slave_0: entered promiscuous mode
[   58.542848][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.546446][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.549498][ T5846] bridge_slave_1: entered allmulticast mode
[   58.553423][ T5846] bridge_slave_1: entered promiscuous mode
[   58.596396][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   58.646952][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   58.661188][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   58.708010][ T5846] team0: Port device team_slave_0 added
[   58.722572][ T5846] team0: Port device team_slave_1 added
[   58.725654][ T5854] chnl_net:caif_netlink_parms(): no params data found
[   58.780739][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.783381][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   58.793299][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.813131][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.816065][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   58.825734][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.877788][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.880636][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.883457][ T5851] bridge_slave_0: entered allmulticast mode
[   58.887634][ T5851] bridge_slave_0: entered promiscuous mode
[   58.909535][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.912480][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.916056][ T5851] bridge_slave_1: entered allmulticast mode
[   58.919882][ T5851] bridge_slave_1: entered promiscuous mode
[   58.960988][ T5846] hsr_slave_0: entered promiscuous mode
[   58.963403][ T5846] hsr_slave_1: entered promiscuous mode
[   59.015902][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.041009][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.043942][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.047374][ T5854] bridge_slave_0: entered allmulticast mode
[   59.050739][ T5854] bridge_slave_0: entered promiscuous mode
[   59.056454][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.073605][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.076906][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.079877][ T5854] bridge_slave_1: entered allmulticast mode
[   59.083784][ T5854] bridge_slave_1: entered promiscuous mode
[   59.139162][ T5851] team0: Port device team_slave_0 added
[   59.163706][ T5851] team0: Port device team_slave_1 added
[   59.181394][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.224241][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.228990][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.231666][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   59.242459][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.288576][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.290753][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   59.298731][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.311682][ T5854] team0: Port device team_slave_0 added
[   59.331155][ T5854] team0: Port device team_slave_1 added
[   59.385872][ T5851] hsr_slave_0: entered promiscuous mode
[   59.388242][ T5851] hsr_slave_1: entered promiscuous mode
[   59.390957][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   59.392871][ T5851] Cannot create hsr debugfs directory
[   59.396284][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0
[   59.399070][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   59.410034][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   59.416198][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1
[   59.419001][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   59.429421][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   59.521142][ T5854] hsr_slave_0: entered promiscuous mode
[   59.524239][ T5854] hsr_slave_1: entered promiscuous mode
[   59.527607][ T5854] debugfs: 'hsr0' already exists in 'hsr'
[   59.529845][ T5854] Cannot create hsr debugfs directory
[   59.618973][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   59.638953][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   59.645683][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   59.684329][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   59.817273][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   59.823115][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   59.828731][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   59.843085][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   59.897207][ T5854] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   59.908551][ T5854] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   59.916705][ T5854] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   59.927503][ T5854] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   59.934355][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.962942][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   59.980096][ T4877] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.982401][ T4877] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.998300][ T4877] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.000521][ T4877] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.037795][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.069967][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   60.082404][ T4877] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.084685][ T4877] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.099865][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.106619][   T54] Bluetooth: hci0: command tx timeout
[   60.118452][ T4877] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.120816][ T4877] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.166824][ T5854] 8021q: adding VLAN 0 to HW filter on device team0
[   60.177605][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.179860][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.187091][   T54] Bluetooth: hci2: command tx timeout
[   60.189016][   T54] Bluetooth: hci1: command tx timeout
[   60.196928][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.199296][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.283056][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.320836][ T5846] veth0_vlan: entered promiscuous mode
[   60.340475][ T5846] veth1_vlan: entered promiscuous mode
[   60.359698][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.388268][ T5846] veth0_macvtap: entered promiscuous mode
[   60.396826][ T5846] veth1_macvtap: entered promiscuous mode
[   60.411968][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.431505][ T5851] veth0_vlan: entered promiscuous mode
[   60.441131][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.454047][ T5851] veth1_vlan: entered promiscuous mode
[   60.458237][ T5873] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.462488][ T5873] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.479802][ T5873] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.487866][ T5873] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.526888][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.535472][ T5851] veth0_macvtap: entered promiscuous mode
[   60.549280][ T5851] veth1_macvtap: entered promiscuous mode
[   60.577365][  T725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.581999][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.586448][  T725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.620095][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.637904][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.641190][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.641244][ T5854] veth0_vlan: entered promiscuous mode
[   60.649312][ T5873] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.661654][ T5873] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.672328][ T5873] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.680855][ T5873] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.699248][ T5854] veth1_vlan: entered promiscuous mode
[   60.706653][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   60.808842][ T5854] veth0_macvtap: entered promiscuous mode
[   60.813721][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.816954][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.823358][ T5854] veth1_macvtap: entered promiscuous mode
[   60.861402][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.866155][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.869355][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.878913][ T5913] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1'.
[   60.883208][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.901760][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.914237][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.921358][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.929993][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.149477][ T5926] netlink: 'syz.0.4': attribute type 7 has an invalid length.
[   61.152451][ T5926] netlink: 'syz.0.4': attribute type 8 has an invalid length.
[   61.224454][ T5930] syz_tun: entered allmulticast mode
[   61.248857][ T5930] dvmrp8: entered allmulticast mode
[   61.272699][ T4877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.277062][ T4877] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.310889][ T5930] warning: `syz.1.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   61.328651][ T4877] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.339402][ T4877] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.454259][ T5947] syz.1.9 uses obsolete (PF_INET,SOCK_PACKET)
[   61.689019][ T5962] netlink: 64 bytes leftover after parsing attributes in process `syz.1.13'.
[   61.697753][ T5962] netlink: 'syz.1.13': attribute type 32 has an invalid length.
[   61.706258][ T5962] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13'.
[   61.834536][ T5975] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15'.
[   62.006763][ T5975] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15'.
[   62.032992][ T5982] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20001
[   62.187907][ T5238] Bluetooth: hci0: command tx timeout
[   62.276686][ T5238] Bluetooth: hci1: command tx timeout
[   62.278440][ T5238] Bluetooth: hci2: command tx timeout
[   62.697159][ T6002] netlink: 48 bytes leftover after parsing attributes in process `syz.2.19'.
[   62.700042][ T6002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19'.
[   62.713127][ T6002] netlink: 'syz.2.19': attribute type 2 has an invalid length.
[   62.815419][ T6013] netlink: 'syz.1.22': attribute type 11 has an invalid length.
[   63.116107][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26'.
[   63.240850][ T6041] netlink: 28 bytes leftover after parsing attributes in process `syz.2.31'.
[   63.244334][ T6041] netlink: 32 bytes leftover after parsing attributes in process `syz.2.31'.
[   63.381797][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   64.121245][ T6045] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   64.265371][   T54] Bluetooth: hci0: command tx timeout
[   64.348758][   T54] Bluetooth: hci2: command tx timeout
[   64.351080][   T54] Bluetooth: hci1: command tx timeout
[   64.439665][ T6084] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   64.492082][ T6089] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   65.786129][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   65.825223][ T6168] nbd0: detected capacity change from 0 to 127
[   65.829292][ T6174] block nbd0: Receive control failed (result -32)
[   65.830892][ T5933] block nbd0: Send control failed (result -32)
[   65.833625][ T5933] block nbd0: Request send failed, requeueing
[   65.837899][ T5315] block nbd0: Dead connection, failed to find a fallback
[   65.841035][ T5933] block nbd0: Dead connection, failed to find a fallback
[   65.906647][ T6182] __nla_validate_parse: 8 callbacks suppressed
[   65.906663][ T6182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.75'.
[   66.229452][ T6212] netlink: 60 bytes leftover after parsing attributes in process `syz.1.79'.
[   66.313415][ T6220] netlink: 104 bytes leftover after parsing attributes in process `syz.2.83'.
[   66.345877][ T5238] Bluetooth: hci0: command tx timeout
[   66.377533][ T6222] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   66.381921][ T6222] netlink: 'syz.1.84': attribute type 3 has an invalid length.
[   66.425470][ T5238] Bluetooth: hci1: command tx timeout
[   66.427507][ T5238] Bluetooth: hci2: command tx timeout
[   66.879091][ T6242] netlink: 28 bytes leftover after parsing attributes in process `syz.0.91'.
[   66.882662][ T6242] netlink: 32 bytes leftover after parsing attributes in process `syz.0.91'.
[   66.887844][ T6242] netlink: 28 bytes leftover after parsing attributes in process `syz.0.91'.
[   66.928614][ T6244] netlink: 72 bytes leftover after parsing attributes in process `syz.0.92'.
[   67.131647][ T6253] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20001
[   67.217426][ T6258] tipc: Started in network mode
[   67.219210][ T6258] tipc: Node identity ac14140f, cluster identity 4711
[   67.221792][ T6258] tipc: New replicast peer: 255.255.255.255
[   67.224547][ T6258] tipc: Enabled bearer <udp:syz2>, priority 10
[   67.654300][ T6297] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.918669][ T6321] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.335743][   T24] tipc: Node number set to 2886997007
[   68.504985][   T54] Bluetooth: hci2: command tx timeout
[   68.507973][ T5238] Bluetooth: hci1: command tx timeout
[   69.049796][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[   69.885278][ T6429] netlink: 28 bytes leftover after parsing attributes in process `syz.1.125'.
[   69.888668][ T6429] netlink: 32 bytes leftover after parsing attributes in process `syz.1.125'.
[   69.891525][ T6429] netlink: 28 bytes leftover after parsing attributes in process `syz.1.125'.
[   69.927905][ T6433] netlink: 'syz.2.128': attribute type 29 has an invalid length.
[   69.956721][ T6433] netlink: 'syz.2.128': attribute type 29 has an invalid length.
[   70.127529][ T6457] netlink: 'syz.2.138': attribute type 32 has an invalid length.
[   70.364041][ T6481] Bluetooth: MGMT ver 1.23
[   70.466485][ T6486] netlink: 'syz.0.147': attribute type 1 has an invalid length.
[   70.495895][ T6488] unsupported nlmsg_type 40
[   70.684995][ T6501] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.758920][ T6501] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.820960][ T6501] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.869633][ T6501] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.957015][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.977693][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.001612][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.012928][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.019023][ T6506] tipc: Started in network mode
[   71.020546][ T6506] tipc: Node identity 769da7c39db6, cluster identity 4711
[   71.022778][ T6506] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   71.025938][ T6506] syzkaller0: entered promiscuous mode
[   71.027704][ T6506] syzkaller0: entered allmulticast mode
[   71.038993][ T6506] tipc: Resetting bearer <eth:syzkaller0>
[   71.042092][ T6506] netlink: 'syz.1.156': attribute type 1 has an invalid length.
[   71.046350][ T6506] __nla_validate_parse: 6 callbacks suppressed
[   71.046364][ T6506] netlink: 172 bytes leftover after parsing attributes in process `syz.1.156'.
[   71.057259][ T6505] tipc: Resetting bearer <eth:syzkaller0>
[   71.068048][ T6505] tipc: Disabling bearer <eth:syzkaller0>
[   71.131500][ T6510] syzkaller1: entered promiscuous mode
[   71.134664][ T6510] syzkaller1: entered allmulticast mode
[   71.151745][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.354064][ T6522] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   71.366779][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.369311][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.462438][ T6532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.166'.
[   72.296293][ T6543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.168'.
[   72.301403][ T6543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.168'.
[   72.319743][ T6543] netlink: 84 bytes leftover after parsing attributes in process `syz.0.168'.
[   72.406918][ T6547] tipc: Enabled bearer <udp:syz0>, priority 10
[   72.609871][ T6560] netlink: 16 bytes leftover after parsing attributes in process `syz.0.172'.
[   72.710106][ T6555] Zero length message leads to an empty skb
[   72.797865][ T6563] netlink: 'syz.1.175': attribute type 6 has an invalid length.
[   72.802106][ T6563] netlink: 20 bytes leftover after parsing attributes in process `syz.1.175'.
[   72.857360][ T6565] netlink: 44 bytes leftover after parsing attributes in process `syz.1.176'.
[   73.069380][ T5315] block nbd0: shutting down sockets
[   73.071771][ T5315] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   73.073806][ T5933] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   73.076355][ T5315] Buffer I/O error on dev nbd0, logical block 0, async page read
[   73.080018][ T5933] Buffer I/O error on dev nbd0, logical block 1, async page read
[   73.088601][ T5933] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   73.092515][ T5933] Buffer I/O error on dev nbd0, logical block 2, async page read
[   73.097015][ T5933] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   73.099988][ T5933] Buffer I/O error on dev nbd0, logical block 3, async page read
[   73.102677][ T5933] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   73.105636][ T5933] Buffer I/O error on dev nbd0, logical block 0, async page read
[   73.108540][ T5933] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   73.111474][ T5933] Buffer I/O error on dev nbd0, logical block 1, async page read
[   73.114031][ T5933] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   73.120390][ T5933] Buffer I/O error on dev nbd0, logical block 2, async page read
[   73.126351][ T5933] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   73.134210][ T5933] Buffer I/O error on dev nbd0, logical block 3, async page read
[   73.137963][ T5933] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   73.145411][ T5933] Buffer I/O error on dev nbd0, logical block 0, async page read
[   73.152058][ T5933] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   73.157973][ T5933] Buffer I/O error on dev nbd0, logical block 1, async page read
[   73.169971][ T5933] ldm_validate_partition_table(): Disk read failed.
[   73.177891][ T5933] Dev nbd0: unable to read RDB block 0
[   73.190052][ T5933]  nbd0: unable to read partition table
[   73.214201][ T5933] ldm_validate_partition_table(): Disk read failed.
[   73.219105][ T5933] Dev nbd0: unable to read RDB block 0
[   73.222866][ T5933]  nbd0: unable to read partition table
[   73.710083][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   74.178014][ T6652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.195'.
[   74.191649][ T6654] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   74.194888][ T6654] IPv6: NLM_F_CREATE should be set when creating new route
[   74.358573][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   74.414301][ T6661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.198'.
[   74.790880][ T6666] netlink: 'syz.1.200': attribute type 4 has an invalid length.
[   74.802734][ T6666] netlink: 'syz.1.200': attribute type 4 has an invalid length.
[   74.813715][ T6551] Set syz1 is full, maxelem 65536 reached
[   76.112367][ T6723] __nla_validate_parse: 8 callbacks suppressed
[   76.112379][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.218'.
[   76.125643][ T6723] openvswitch: netlink: Message has 398 unknown bytes.
[   76.128520][ T6728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.220'.
[   76.131849][ T6723] netlink: 'syz.2.218': attribute type 29 has an invalid length.
[   76.155811][ T6728] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.163983][ T6728] bond0: (slave rose0): Enslaving as an active interface with an up link
[   76.211028][ T6723] netlink: 'syz.2.218': attribute type 29 has an invalid length.
[   76.221632][ T6723] netlink: 596 bytes leftover after parsing attributes in process `syz.2.218'.
[   76.237825][ T6724] netlink: 16 bytes leftover after parsing attributes in process `syz.0.219'.
[   76.283474][ T6736] netlink: 388 bytes leftover after parsing attributes in process `syz.0.222'.
[   76.326871][ T6738] netlink: 72 bytes leftover after parsing attributes in process `syz.1.221'.
[   76.454429][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.226'.
[   76.521405][ T6760] vxcan1: entered allmulticast mode
[   76.531689][ T6760] vxcan1: left allmulticast mode
[   76.600841][ T6768] raw_sendmsg: syz.2.227 forgot to set AF_INET. Fix it!
[   76.752120][ T6782] netlink: 277 bytes leftover after parsing attributes in process `syz.1.234'.
[   76.797868][ T6784] netlink: 'syz.0.235': attribute type 1 has an invalid length.
[   76.800195][ T6784] netlink: 208 bytes leftover after parsing attributes in process `syz.0.235'.
[   77.053852][ T6803] openvswitch: netlink: Tunnel attr 214 out of range max 16
[   77.187156][ T6805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.239'.
[   77.819094][ T6833] openvswitch: netlink: Missing key (keys=40, expected=2000)
[   78.317904][ T6872] netlink: 'syz.2.261': attribute type 4 has an invalid length.
[   78.459593][ T6883] Driver unsupported XDP return value 0 on prog  (id 33) dev N/A, expect packet loss!
[   78.487524][ T6883] netlink: 'syz.2.264': attribute type 29 has an invalid length.
[   78.490742][ T6883] netlink: 'syz.2.264': attribute type 29 has an invalid length.
[   78.494259][ T6883] unsupported nla_type 59
[   79.232828][ T6905] tipc: Enabled bearer <udp:syz0>, priority 10
[   79.395873][ T6914] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[   79.516212][ T6922] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[   79.518919][ T6922] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   79.807981][ T6938] netlink: 'syz.1.283': attribute type 1 has an invalid length.
[   79.944280][ T6951] IPVS: set_ctl: invalid protocol: 33 100.1.1.0:20004
[   79.948738][ T6951] syz_tun: entered allmulticast mode
[   79.961813][ T6951] dvmrp8: entered allmulticast mode
[   79.973885][ T6951] syz_tun: left allmulticast mode
[   79.978797][ T6951] dvmrp8: left allmulticast mode
[   80.086095][ T6951] netlink: 'syz.0.287': attribute type 23 has an invalid length.
[   80.234673][ T6966] netlink: 'syz.0.294': attribute type 11 has an invalid length.
[   80.345246][   T10] tipc: Node number set to 3945506755
[   80.516980][ T6988] netlink: 'syz.2.302': attribute type 10 has an invalid length.
[   80.700990][ T7001] netlink: 'syz.2.307': attribute type 4 has an invalid length.
[   80.768728][ T7005] netlink: 'syz.2.309': attribute type 29 has an invalid length.
[   80.782216][ T7005] netlink: 'syz.2.309': attribute type 29 has an invalid length.
[   80.926508][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   81.077971][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[   81.149081][ T7030] vlan2: entered promiscuous mode
[   81.153819][ T7030] macvtap0: entered promiscuous mode
[   81.190364][ T7038] __nla_validate_parse: 20 callbacks suppressed
[   81.190378][ T7038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.318'.
[   81.252075][ T7045] netlink: 176 bytes leftover after parsing attributes in process `syz.2.321'.
[   81.298857][ T7047] netlink: 28 bytes leftover after parsing attributes in process `syz.1.322'.
[   81.301777][ T7047] netlink: 32 bytes leftover after parsing attributes in process `syz.1.322'.
[   81.311179][ T7047] netlink: 28 bytes leftover after parsing attributes in process `syz.1.322'.
[   81.333315][ T7049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'.
[   81.387174][  T794] cfg80211: failed to load regulatory.db
[   81.562115][ T7078] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[   81.688376][ T7081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'.
[   81.800313][ T7094] netlink: 96 bytes leftover after parsing attributes in process `syz.1.330'.
[   82.223945][ T7091] delete_channel: no stack
[   82.259828][ T7133] syz_tun: entered allmulticast mode
[   82.267469][ T7133] dvmrp8: entered allmulticast mode
[   82.290785][ T7137] netlink: 28 bytes leftover after parsing attributes in process `syz.0.337'.
[   82.293482][ T7137] netlink: 24 bytes leftover after parsing attributes in process `syz.0.337'.
[   82.391513][ T7141] syz_tun: left allmulticast mode
[   82.393788][ T7141] dvmrp8: left allmulticast mode
[   83.031037][ T7159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   83.281112][ T7177] (unnamed net_device) (uninitialized): option lacp_active: invalid value (7)
[   83.331509][ T7182] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   83.334349][ T7182] IPv6: NLM_F_CREATE should be set when creating new route
[   83.612507][ T7198] sock: sock_timestamping_bind_phc: sock not bind to device
[   83.636620][ T7195] validate_nla: 1 callbacks suppressed
[   83.636650][ T7195] netlink: 'syz.1.356': attribute type 12 has an invalid length.
[   84.561131][ T7235] tc_dump_action: action bad kind
[   84.713189][ T7244] macvtap1: entered promiscuous mode
[   84.721602][ T7244] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[   85.399376][ T7285] syz_tun: entered allmulticast mode
[   85.406497][ T7286] dvmrp8: entered allmulticast mode
[   85.419471][ T7287] syz_tun: left allmulticast mode
[   85.421259][ T7287] dvmrp8: left allmulticast mode
[   85.668578][ T7311] netlink: 'syz.0.397': attribute type 29 has an invalid length.
[   85.671656][ T7311] netlink: 'syz.0.397': attribute type 29 has an invalid length.
[   86.133926][ T7341] netlink: 'syz.1.409': attribute type 1 has an invalid length.
[   86.190899][ T7343] dvmrp1: entered allmulticast mode
[   86.195795][ T7343] dvmrp1: left allmulticast mode
[   86.901053][ T7354] syz_tun (unregistering): left allmulticast mode
[   87.185178][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.237203][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.306926][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.353852][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.442225][   T13] bridge_slave_1: left allmulticast mode
[   87.444186][   T13] bridge_slave_1: left promiscuous mode
[   87.447267][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.453401][   T13] bridge_slave_0: left allmulticast mode
[   87.457416][   T13] bridge_slave_0: left promiscuous mode
[   87.459292][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.620828][   T13] dvmrp8 (unregistering): left allmulticast mode
[   87.843591][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   87.850035][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   87.854589][   T13] bond0 (unregistering): Released all slaves
[   87.941482][   T13] tipc: Disabling bearer <udp:syz0>
[   87.949114][   T13] tipc: Left network mode
[   87.978668][   T13] mac80211_hwsim hwsim5 wlan1 (unregistering): left promiscuous mode
[   88.150000][   T13] hsr_slave_0: left promiscuous mode
[   88.152802][   T13] hsr_slave_1: left promiscuous mode
[   88.156648][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.159597][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   88.163529][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.166591][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   88.186466][   T13] veth1_macvtap: left promiscuous mode
[   88.188988][   T13] veth0_macvtap: left promiscuous mode
[   88.191304][   T13] veth1_vlan: left promiscuous mode
[   88.194255][   T13] veth0_vlan: left promiscuous mode
[   88.544318][   T13] team0 (unregistering): Port device team_slave_1 removed
[   88.570105][   T13] team0 (unregistering): Port device team_slave_0 removed
[   90.371586][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.471233][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.538776][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.601937][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.705728][   T13] bridge_slave_1: left allmulticast mode
[   90.707463][   T13] bridge_slave_1: left promiscuous mode
[   90.709206][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.712573][   T13] bridge_slave_0: left allmulticast mode
[   90.714335][   T13] bridge_slave_0: left promiscuous mode
[   90.717498][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.964234][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   90.970336][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   90.974399][   T13] bond0 (unregistering): Released all slaves
[   91.016903][   T13] tipc: Disabling bearer <udp:syz2>
[   91.018976][   T13] tipc: Disabling bearer <udp:syz0>
[   91.021095][   T13] tipc: Left network mode
[   91.209981][   T13] hsr_slave_0: left promiscuous mode
[   91.212682][   T13] hsr_slave_1: left promiscuous mode
[   91.215885][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.218435][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   91.221284][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   91.223868][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   91.231383][   T13] veth1_macvtap: left promiscuous mode
[   91.233437][   T13] veth0_macvtap: left promiscuous mode
[   91.237092][   T13] veth1_vlan: left promiscuous mode
[   91.239055][   T13] veth0_vlan: left promiscuous mode
[   91.521724][   T13] team0 (unregistering): Port device team_slave_1 removed
[   91.543049][   T13] team0 (unregistering): Port device team_slave_0 removed
[   92.550414][   T13] ------------[ cut here ]------------
[   92.552091][   T13] WARNING: CPU: 1 PID: 13 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x26d/0x2f0
[   92.555674][   T13] Modules linked in:
[   92.557457][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[   92.561552][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   92.565406][   T13] Workqueue: netns cleanup_net
[   92.567241][   T13] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[   92.569346][   T13] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 fb 2a ff f7 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 29 dc df f7 e8 f4 aa 9b f7 90 <0f> 0b 90 e9 fd fd ff ff e8 e6 aa 9b f7 90 0f 0b 90 e9 60 fe ff ff
[   92.576682][   T13] RSP: 0018:ffffc90000107898 EFLAGS: 00010293
[   92.578918][   T13] RAX: ffffffff8a24029c RBX: ffff888020488000 RCX: ffff88801c2f0000
[   92.581266][   T13] RDX: 0000000000000000 RSI: ffffffff8db9e5df RDI: ffff88801c2f0000
[   92.583546][   T13] RBP: ffffc900001079b0 R08: ffffffff8fa2ee37 R09: 1ffffffff1f45dc6
[   92.586337][   T13] R10: dffffc0000000000 R11: fffffbfff1f45dc7 R12: ffffffff8f633340
[   92.589053][   T13] R13: 1ffff92000020f40 R14: ffff888020489480 R15: dffffc0000000000
[   92.591947][   T13] FS:  0000000000000000(0000) GS:ffff8881a3c3d000(0000) knlGS:0000000000000000
[   92.595149][   T13] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   92.597282][   T13] CR2: 0000562439315600 CR3: 000000000df36000 CR4: 00000000000006f0
[   92.599598][   T13] Call Trace:
[   92.600613][   T13]  <TASK>
[   92.601490][   T13]  xfrm_net_exit+0x2d/0x70
[   92.602794][   T13]  ops_undo_list+0x49a/0x990
[   92.604131][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[   92.606095][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[   92.607782][   T13]  cleanup_net+0x4c5/0x800
[   92.609381][   T13]  ? __pfx_cleanup_net+0x10/0x10
[   92.611192][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[   92.613089][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[   92.615154][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[   92.617336][   T13]  process_scheduled_works+0xae1/0x17b0
[   92.619143][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[   92.620911][   T13]  worker_thread+0x8a0/0xda0
[   92.622306][   T13]  kthread+0x711/0x8a0
[   92.623636][   T13]  ? __pfx_worker_thread+0x10/0x10
[   92.625604][   T13]  ? __pfx_kthread+0x10/0x10
[   92.627163][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[   92.629066][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[   92.631048][   T13]  ? __pfx_kthread+0x10/0x10
[   92.632837][   T13]  ret_from_fork+0x439/0x7d0
[   92.634614][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[   92.636648][   T13]  ? __switch_to_asm+0x39/0x70
[   92.638457][   T13]  ? __switch_to_asm+0x33/0x70
[   92.640256][   T13]  ? __pfx_kthread+0x10/0x10
[   92.641995][   T13]  ret_from_fork_asm+0x1a/0x30
[   92.643850][   T13]  </TASK>
[   92.645154][   T13] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   92.647812][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[   92.651196][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   92.654974][   T13] Workqueue: netns cleanup_net
[   92.656770][   T13] Call Trace:
[   92.658030][   T13]  <TASK>
[   92.659163][   T13]  dump_stack_lvl+0x99/0x250
[   92.660909][   T13]  ? __asan_memcpy+0x40/0x70
[   92.662667][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[   92.664636][   T13]  ? __pfx__printk+0x10/0x10
[   92.666370][   T13]  vpanic+0x281/0x750
[   92.667881][   T13]  ? __pfx__printk+0x10/0x10
[   92.669668][   T13]  ? __pfx_vpanic+0x10/0x10
[   92.671372][   T13]  ? is_bpf_text_address+0x292/0x2b0
[   92.673379][   T13]  panic+0xb9/0xc0
[   92.674858][   T13]  ? __pfx_panic+0x10/0x10
[   92.676591][   T13]  __warn+0x31b/0x4b0
[   92.678089][   T13]  ? xfrm_state_fini+0x26d/0x2f0
[   92.679957][   T13]  ? xfrm_state_fini+0x26d/0x2f0
[   92.681805][   T13]  report_bug+0x2be/0x4f0
[   92.683446][   T13]  ? xfrm_state_fini+0x26d/0x2f0
[   92.685334][   T13]  ? xfrm_state_fini+0x26d/0x2f0
[   92.687215][   T13]  ? xfrm_state_fini+0x26f/0x2f0
[   92.689100][   T13]  handle_bug+0x84/0x160
[   92.690749][   T13]  exc_invalid_op+0x1a/0x50
[   92.692534][   T13]  asm_exc_invalid_op+0x1a/0x20
[   92.694427][   T13] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[   92.696553][   T13] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 fb 2a ff f7 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 29 dc df f7 e8 f4 aa 9b f7 90 <0f> 0b 90 e9 fd fd ff ff e8 e6 aa 9b f7 90 0f 0b 90 e9 60 fe ff ff
[   92.703580][   T13] RSP: 0018:ffffc90000107898 EFLAGS: 00010293
[   92.705884][   T13] RAX: ffffffff8a24029c RBX: ffff888020488000 RCX: ffff88801c2f0000
[   92.708809][   T13] RDX: 0000000000000000 RSI: ffffffff8db9e5df RDI: ffff88801c2f0000
[   92.711723][   T13] RBP: ffffc900001079b0 R08: ffffffff8fa2ee37 R09: 1ffffffff1f45dc6
[   92.714246][   T13] R10: dffffc0000000000 R11: fffffbfff1f45dc7 R12: ffffffff8f633340
[   92.716961][   T13] R13: 1ffff92000020f40 R14: ffff888020489480 R15: dffffc0000000000
[   92.719686][   T13]  ? xfrm_state_fini+0x26c/0x2f0
[   92.721224][   T13]  ? xfrm_state_fini+0x26c/0x2f0
[   92.722701][   T13]  xfrm_net_exit+0x2d/0x70
[   92.724102][   T13]  ops_undo_list+0x49a/0x990
[   92.725674][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[   92.727601][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[   92.729203][   T13]  cleanup_net+0x4c5/0x800
[   92.730786][   T13]  ? __pfx_cleanup_net+0x10/0x10
[   92.732403][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[   92.734013][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[   92.735717][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[   92.737417][   T13]  process_scheduled_works+0xae1/0x17b0
[   92.739053][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[   92.740862][   T13]  worker_thread+0x8a0/0xda0
[   92.742229][   T13]  kthread+0x711/0x8a0
[   92.743519][   T13]  ? __pfx_worker_thread+0x10/0x10
[   92.745468][   T13]  ? __pfx_kthread+0x10/0x10
[   92.747042][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[   92.748855][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[   92.750448][   T13]  ? __pfx_kthread+0x10/0x10
[   92.751970][   T13]  ret_from_fork+0x439/0x7d0
[   92.753557][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[   92.755240][   T13]  ? __switch_to_asm+0x39/0x70
[   92.756940][   T13]  ? __switch_to_asm+0x33/0x70
[   92.758624][   T13]  ? __pfx_kthread+0x10/0x10
[   92.759998][   T13]  ret_from_fork_asm+0x1a/0x30
[   92.761398][   T13]  </TASK>
[   92.762969][   T13] Kernel Offset: disabled
[   92.764231][   T13] Rebooting in 86400 seconds..

VM DIAGNOSIS:
06:37:12  Registers:
info registers vcpu 0

CPU#0
RAX=cd5dcc083e632a00 RBX=ffffffff819683f8 RCX=cd5dcc083e632a00 RDX=0000000000000001
RSI=ffffffff8d9b051c RDI=ffffffff8be33f00 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa2ee30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b72f3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b863d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000562439316680 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 000000000000ffff XMM01=2525252525252525 2525252525252525
XMM02=00ff000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000032564544
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffffff ffffffff00000000 XMM09=0000000000000021 00000000326e616c
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000107030
R8 =ffff888108520237 R9 =1ffff110210a4046 R10=dffffc0000000000 R11=ffffffff854fac30
R12=dffffc0000000000 R13=ffffffff99ad78d0 R14=ffffffff99dcc480 R15=0000000000000000
RIP=ffffffff854facac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c3d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000562439315600 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000400000066 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=00ff000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000032564544
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffffff ffffffff00000000 XMM09=0000000000000021 00000000326e616c
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
