last executing test programs:

20.759909928s ago: executing program 0 (id=77):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet_udplite(0x2, 0x2, 0x88) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0}, &(0x7f0000000080)=0x14)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f00000000c0)={'syztnl1\x00', r2, 0x8000, 0x20, 0x5, 0x6, {{0x11, 0x4, 0x2, 0x36, 0x44, 0x65, 0x0, 0x1, 0x2f, 0x0, @empty, @multicast2, {[@ssrr={0x89, 0xb, 0xb8, [@dev={0xac, 0x14, 0x14, 0x32}, @loopback]}, @generic={0x82, 0x8, "69e5565b6e92"}, @timestamp_prespec={0x44, 0x1c, 0xad, 0x3, 0x6, [{@rand_addr=0x64010100, 0xe}, {@loopback, 0x28de}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x6}]}]}}}}})
setsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, 0x2a) (async)
sendmsg$nl_route(r0, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0xfffffffffffffff7}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8100}, 0x4000)

20.758946033s ago: executing program 0 (id=78):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0) (async)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e21, 0xfffffff5, @empty, 0x9}}, 0x3, 0x7}, &(0x7f0000000000)=0x90)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000180)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0xff72}, 0x94)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket$nl_rdma(0x10, 0x3, 0x14) (async)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmmsg(r8, &(0x7f0000008b40)=[{{&(0x7f00000004c0)=@nl=@kern={0x10, 0x0, 0x0, 0x800000}, 0x80, &(0x7f0000002900)=[{&(0x7f0000000540)='si', 0x2}], 0x1, &(0x7f0000002980)=[{0x10, 0x110, 0x81}], 0x10}}], 0x1, 0x4000000) (async)
sendmmsg(r8, &(0x7f0000008b40)=[{{&(0x7f00000004c0)=@nl=@kern={0x10, 0x0, 0x0, 0x800000}, 0x80, &(0x7f0000002900)=[{&(0x7f0000000540)='si', 0x2}], 0x1, &(0x7f0000002980)=[{0x10, 0x110, 0x81}], 0x10}}], 0x1, 0x4000000)
openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) (async)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0)
close(r9)
r10 = socket$unix(0x1, 0x1, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="4c0100005e00250e000000000300000008007700", @ANYRES32=0x0, @ANYBLOB="3401ea802e"], 0x14c}], 0x1, 0x0, 0x0, 0x40804}, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8, 0x4, 0x2, 0x1, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r13, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x4008000) (async)
sendmsg$nl_route_sched(r12, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r13, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x4008000)
ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async)
ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

20.608908787s ago: executing program 0 (id=80):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={<r1=>0x0, 0xfff, 0x3, [0x32, 0x7, 0x1]}, &(0x7f0000000040)=0xe)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000080)={r1}, 0x8)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
getsockname$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={<r2=>r1, @in={{0x2, 0x4e24, @remote}}, 0x4}, &(0x7f0000000280)=0x90)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={r1, 0x8}, &(0x7f0000000300)=0x8)
sendmsg$inet(r0, &(0x7f0000001580)={&(0x7f0000000340)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000380)="8514a2877d2297d3a4f7e36a3d66f67cb890f4cddafdf1280f005c05172bcfe78c172e80ac895960bd9df3a407d4f124112f811f502122c0274cee9e82b5e2e3d9775dff468949c37f651ec797817f09098e992538853681c19bb7ee292dac742bc69fd94abba42e2b241ec35cef110d81d687257a8fa9501f41639d6b7003d1f71c1385f910408f3ab7db4d6771604f8be64d895fa87f8dd4f37ffbc6336f33469e7a3a992c7cf9648e3afcd3b0", 0xae}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="e4f38f6a09b8c69831e53d49815006de113279fb8be82c07f29e16da7cdf7af1212d40f52173e7d7bfd7f6fee8dc3cc2cea6861fbced7ec4ce6f1b47626e9a36c25e07857c0662cab29de2ca65d5b3e61ee7a0968442f1da3b289a8ac18886f660db066ac1532626ce94424171162893718ae55a6de00722bad49541106322e0a15adb513ae2daa9e6116ecfcee9acc7eacbc48292f2cf035ca208d6210bca1633adcb7d37d52de00ab729472c4a6dd93c5143614f90b8ce67099983eb0908c98cf9e77a37a8d0d0584e397a71c1a132a4", 0xd1}], 0x3}, 0x4040000)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000015c0)={<r4=>r1, 0xdf, "d0589c8a0b5cdef00fe456893b8a836090e314ae4cc0a68b5c4c7dd99d40d6c3f81ca6d0bcef104414c26089d5a95c26e5dd495409947d179dbd64e0ece768589e5f3295148cbe06f661bffe6a1bb063bf2886d36a1a79d988750bdd1c89442d6152dff953497daa1cded442b27c554822fab332a39ea0ded4d384653a1e60b10ba88055b7d468b9440ff1f640a583feb0228e4750d61c3607d272f69abd15dddbbc7f9a057af0665eb3adf4244ca86f6ff821885d4d623ede085367b5b9ab8f7020cbed5995199c9c970f47177b7a6b034a7e639f06db30e7bfd5aa106b4f"}, &(0x7f00000016c0)=0xe7)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000001700)={0x4b, 0x200, 0x8, 0x7fff, r4}, 0x10)
setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000001740)={0x2fc, 0xfff, 0x200, 0x5}, 0x8)
ppoll(&(0x7f0000001780)=[{r0, 0x10}, {r0, 0x40c1}, {r0, 0x1010}, {r3, 0x10}, {r3, 0x100}, {r0, 0x8}, {r0, 0x680}], 0x7, &(0x7f00000017c0)={0x77359400}, &(0x7f0000001800)={[0x2]}, 0x8)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000018c0)={'syztnl0\x00', &(0x7f0000001840)={'erspan0\x00', <r5=>0x0, 0x700, 0x1, 0x80000000, 0x2, {{0xc, 0x4, 0x1, 0x30, 0x30, 0x66, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @rand_addr=0x64010101, {[@ssrr={0x89, 0xb, 0xc4, [@loopback, @loopback]}, @timestamp={0x44, 0x10, 0x7, 0x0, 0x3, [0x6, 0x100, 0x2800]}]}}}}})
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a40)={&(0x7f0000001900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xde, 0xde, 0x8, [@struct={0xb, 0x2, 0x0, 0x4, 0x0, 0x8, [{0x7, 0x3, 0x4}, {0x7, 0x5}]}, @float={0x2, 0x0, 0x0, 0x10, 0xc}, @datasec={0xc, 0x7, 0x0, 0xf, 0x2, [{0x5, 0x8c87, 0x9}, {0x2, 0x6, 0x4}, {0x3, 0x200, 0x1}, {0x5, 0x8000, 0x9}, {0x5, 0x101, 0x401}, {0x5, 0x0, 0x8}, {0x4, 0xfffffffa, 0x604abf2e}], "23e4"}, @fwd={0x6}, @var={0xb, 0x0, 0x0, 0xe, 0x3, 0x1}, @enum64={0x6, 0x3, 0x0, 0x13, 0x1, 0x4, [{0x9, 0xa, 0x1}, {0x4, 0x7fffffff, 0x4}, {0x4, 0x3, 0x5}]}]}, {0x0, [0x5f, 0x61, 0x2e, 0x0, 0x5f, 0x61]}}, &(0x7f0000001a00)=""/55, 0x100, 0x37, 0x0, 0x7}, 0x28)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a80)={0x1b, 0x0, 0x0, 0xcd6, 0x0, 0x1, 0x4, '\x00', r5, r6, 0x5, 0x2, 0x2}, 0x50)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001c00)=<r8=>0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001c40)={0x0, 0x0, <r9=>0x0}, &(0x7f0000001c80)=0xc)
sendmsg$unix(r6, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001b00)="1483bfe50e6e365bd9bcf6366f565e3dcdb7049505111ea1fe9ae0caaf089b470c69b4069ab001f96181f9471acd9beb318fb5d9e892defcaaef718ec54b4f104195ccf63d30c990a4670acdd49108a740eb014fd43f13f299a9548949ed8030d18e2d682cebbbf093c0f36f816dc18914de6a22547f23e045f0b7347b68d7d45d77d3fb4bb126160832", 0x8a}], 0x1, &(0x7f0000001cc0)=[@rights={{0x2c, 0x1, 0x1, [r0, r0, r7, r3, r3, r3, r7]}}, @cred={{0x1c, 0x1, 0x2, {r8, 0x0, r9}}}], 0x50, 0x10}, 0x810)
ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000001d80))
getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000001dc0), &(0x7f0000001e00)=0x10)
unshare(0x8000000)
setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001e40)=@int=0x2, 0x4)
r10 = accept4(r0, &(0x7f0000001e80)=@nfc_llcp, &(0x7f0000001f00)=0x80, 0x80800)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r10, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002000)={&(0x7f0000001f80)={0x5c, 0x3, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xc8}, @CTA_TUPLE_ORIG={0x40, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000002080)={<r11=>r2, @in={{0x2, 0x4e24, @local}}}, &(0x7f0000002140)=0x84)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r10, 0x84, 0x19, &(0x7f0000002180)={r11, 0x9}, 0x8)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002200), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(r12, &(0x7f00000024c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002480)={&(0x7f0000002240)={0x228, r13, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x18c, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ea96175}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4952e4a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41e4e039}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ef65ac6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7a}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e76b791}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6978be88}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2e8838ca}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x39}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b0e05eb}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54a75088}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73cbf28a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32b61ae4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4cbf09c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e3fc4e7}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42013b26}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x20144e0b}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5cc13f92}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79bb7f7a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42fce36d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xcb95959}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24f104a2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d9065ad}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38f843d9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x186ebd68}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x194930f5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c338472}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c31cef8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69b7fab2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71bc01f9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x107e0794}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x228}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000)

19.749309568s ago: executing program 0 (id=97):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380078ac63902cc13dd95d6c800000500020000100000000009c0a070000001e34a6a636127ad6167d3d539cf600abc202fbfa45b6f66e14ff198e2ca23dbb0e4f15d463a0293da4bdbcbabc4da2001c8c0d19c9261ba65b1ac3a5f37a162650d889279bd77f87c1f5cd359cef46cf944916d042ef0c55a31824cef31454d69eef38b708dc0f24fda8eaccd3c44d59a22b5ba8e1a6d45be815ca5de4d1c9d7b3c3bf88f3ce19ac14994ebb80a3"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001780)=ANY=[@ANYBLOB="9a6ee1924de8086d27290b7f8bc21088bb84d23acba099c8b8cb22626cf2c5e480b4d4a2f8933a77cf65b55c5675cb69beec683cda6229b293e65a8208d86e7ba7ce6abd678c937c3fe964172daa885e16e275fc839d402a4dbdf7148ee42c88d1da10f4ac8c415e7992e66a576202fb114585ed926034951fb436d0ebd0e8646a", @ANYRES16, @ANYBLOB="01052cbd7000fedbdf251d00000008001d000400000008001e00300b000008000100", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000002010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000021140000001100"], 0xd8}}, 0x8090)

19.748061749s ago: executing program 0 (id=98):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r1, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000280)={0x4003, 0x3, 0x9, 0x4, 0x0, 0x0, 0x40}, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x88}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0xf, &(0x7f0000001840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0xb2}}, {}, [], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmsg(r0, &(0x7f0000000180)={&(0x7f00000000c0)=@phonet, 0x80, &(0x7f0000000b40)=[{&(0x7f00000002c0)=""/206, 0xce}, {&(0x7f0000000500)=""/195, 0xc3}, {&(0x7f0000000600)=""/144, 0x90}, {&(0x7f00000006c0)=""/236, 0xec}, {&(0x7f0000000140)=""/39, 0x27}, {&(0x7f00000009c0)=""/215, 0xd7}, {&(0x7f0000000900)=""/114, 0x72}], 0x7, &(0x7f0000000bc0)=""/88, 0x58}, 0x2030)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=@delchain={0x84, 0x65, 0x300, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0x7}, {0xfffb, 0xc}, {0xffe0, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffff9}, @filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @mcast1}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x200}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x84}, 0x1, 0x0, 0x0, 0x4080}, 0x40004)
r4 = socket(0x10, 0x3, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@private2, @in6=@ipv4={""/10, ""/2, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@empty}}}, &(0x7f0000000040)=0xe8)
ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000080)=<r6=>0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r8, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c)
listen(r8, 0x5)
accept4(r8, &(0x7f0000000240)=@x25, 0x0, 0x80800)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r9, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="07001400352c000000000000"], 0x378}, 0x1, 0x0, 0x0, 0x4004810}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2d8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x360, 0xffffffff, 0xffffffff, 0x360, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @remote, [0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xe0, 0x110, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x1, 0xcc60, 0x5a, 0x7, 0x10}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x2, 0x2}, {0xffffffffffffffff, 0x1, 0x2}, 0x5, 0x2}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "c60d", 0x1}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7, 0xc4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x338)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc800)

18.829443963s ago: executing program 0 (id=107):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
read$nci(r4, &(0x7f0000000340)=""/33, 0x21)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$unix(0x1, 0x1, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xf, 0x0, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r13 = openat$cgroup_ro(r12, &(0x7f00000000c0)='blkio.bfq.time\x00', 0x0, 0x0)
readv(r13, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1)

18.657856727s ago: executing program 1 (id=110):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
syz_emit_ethernet(0x2a, &(0x7f0000000300)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
socket$pppl2tp(0x18, 0x1, 0x1)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
clock_gettime(0x0, &(0x7f0000003c40))
r8 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r8, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r8, 0x84, 0x65, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x0, @mcast1, 0x8d43}], 0x1c)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r9, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r9, 0x400448e6, &(0x7f0000000080)="fc")

18.458065657s ago: executing program 1 (id=113):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
close(r1)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x1, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x4000)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
tee(r4, r1, 0x6, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0)

18.242740997s ago: executing program 1 (id=115):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff01000e0000000000000000000000010c00068005000100000000004700028005000100010000000600034000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x2048014}, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x400, 0x9004}, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r2, &(0x7f0000019440)=[{&(0x7f0000000200)='H\x00', 0x2}], 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004)
recvmmsg(r4, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000780)=""/260, 0x104}, {&(0x7f0000002900)=""/4114, 0x1012}, {&(0x7f00000017c0)=""/208, 0xd0}, {&(0x7f0000000400)=""/153, 0x99}, {&(0x7f00000008c0)=""/234, 0xea}], 0x6}, 0x80000002}], 0x4, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="80000000", @ANYRES16=r5, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYBLOB="0600cd0055000000590033"], 0x80}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r7=>0x0})
connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10)
sendmsg$can_bcm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="05000000000f00000f00000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x10000090}, 0x4052)
socket$nl_route(0x10, 0x3, 0x0)
r8 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14, 0x80800)
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000100)={0x1, 0x7}, 0x4)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0)

18.239229289s ago: executing program 1 (id=117):
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080), 0x18) (async)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080), 0x18)
sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0xee)
sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0xee) (async)
sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0xee)
socket(0x11, 0x3, 0x0) (async)
socket(0x11, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001a40)={'bridge_slave_1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001a40)={'bridge_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000096000a000200aaaaaaaaaa0c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x14, r1, 0x400, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40240, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'batadv0\x00'})

18.238937582s ago: executing program 1 (id=118):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380078ac63902cc13dd95d6c800000500020000100000000009c0a070000001e34a6a636127ad6167d3d539cf600abc202fbfa45b6f66e14ff198e2ca23dbb0e4f15d463a0293da4bdbcbabc4da2001c8c0d19c9261ba65b1ac3a5f37a162650d889279bd77f87c1f5cd359cef46cf944916d042ef0c55a31824cef31454d69eef38b708dc0f24fda8eaccd3c44d59a22b5ba8e1a6d45be815ca5de4d1c9d7b3c3bf88f3ce19ac14994ebb80a3"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001780)=ANY=[@ANYBLOB="9a6ee1924de8086d27290b7f8bc21088bb84d23acba099c8b8cb22626cf2c5e480b4d4a2f8933a77cf65b55c5675cb69beec683cda6229b293e65a8208d86e7ba7ce6abd678c937c3fe964172daa885e16e275fc839d402a4dbdf7148ee42c88d1da10f4ac8c415e7992e66a576202fb114585ed926034951fb436d0ebd0e8646a", @ANYRES16, @ANYBLOB="01052cbd7000fedbdf251d00000008001d000400000008001e00300b000008000100", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300f5ff0000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000021140000001100"], 0xd8}}, 0x8090)

18.232833342s ago: executing program 1 (id=119):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000080)={'gre0\x00', {0x2, 0x0, @private}})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000016c0)={0x0, "7555719556429f037cc78a59ebac5960"})
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000740)={0x0, 0x6, 0x7})
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r2, r1, 0x25, 0x0, @void}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdff}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='xprtrdma_post_recvs\x00', r4}, 0x18)
getsockname(0xffffffffffffffff, &(0x7f0000000440)=@nl=@unspec, &(0x7f0000000000)=0x80)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
unshare(0x28000600)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r6, 0x0, 0xf, 0x0, 0x0)
listen(r5, 0x0)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r8 = accept(r5, 0x0, 0x0)
recvfrom$l2tp6(r8, &(0x7f00000000c0)=""/230, 0xe6, 0x10020, 0x0, 0x0)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r8)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010027bd7000fbdbdf254400000008000300", @ANYRES32=r11, @ANYBLOB="1400238005001e000100000008001c0009000000e07ed15b9ab3c541eb0f3319c8450abb863bba5c2a1cd31fef2ab9ee45f87895329f272ecca3bcba72faad8a75da649197e1b136e96be978b4e3187f06ed931b1adf4a452662c25a92050659"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40)
shutdown(r8, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f0000000080)=ANY=[], 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
epoll_create1(0x0)

16.838927647s ago: executing program 2 (id=133):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x3, 0x0, &(0x7f0000000040)="134345", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
connect$packet(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
pipe(&(0x7f0000019480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000000500)=[{&(0x7f00000000c0)="dc52b390", 0x4}, {&(0x7f0000000100)="7681", 0x2}, {&(0x7f0000000480)="eb", 0x1}, {&(0x7f0000000a80)='`', 0x1}, {&(0x7f0000000080)="ca2d", 0x2}, {&(0x7f00000011c0)="b488c5", 0xfffffcfb}, {&(0x7f0000000340)="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", 0x109}], 0x7, 0x3)
close(r3)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4)
connect$inet(r4, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r3)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x14, r5, 0x300, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4011)
splice(r2, 0x0, r3, 0x0, 0x10500, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000), 0xe)
listen(r1, 0xf4e)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, 0x0, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
socket(0x1, 0x803, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000003e000701feffffff00000000017c0000040042800c00018006000600800a00000c00028008001480040002"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

15.926685947s ago: executing program 2 (id=134):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1000})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
unshare(0x26020480)
r4 = socket(0x22, 0x2, 0x3)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r4, 0x0, 0x83, 0x0, &(0x7f0000000180))
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x7, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x9, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x0, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x63c, 0xff, 0x24, 0x3, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x800, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x80000000, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6d, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0xfffffff9, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x0, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x3, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0xe, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x8000, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x6, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0xe, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e9, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0x3, 0xc0a1, 0x5, 0x8, 0x7, 0x59, 0x9, 0x2, 0xa3, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x70c, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x791bfd1ea2b89f05, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0)

15.926084643s ago: executing program 2 (id=135):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0xf)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x8, 0x1, &(0x7f0000000fc0)="c0", 0x9, 0x52, 0x15c2, 0x8002, 0x9, 0x0, 0xd, 'syz1\x00'})
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c000000180001002cbd7000000000000a0000000003ff02", @ANYRES32, @ANYBLOB="08001f"], 0x3c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_GET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x3c, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x829c}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x94}, 0x0)
ioctl$SIOCX25SCUDMATCHLEN(r3, 0x89e7, 0x0)
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'ipvlan1\x00', {0x2, 0x4e20, @rand_addr=0x64010100}})
ioctl$sock_x25_SIOCADDRT(r7, 0x890b, &(0x7f0000001ac0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0x0, 'lo\x00'})
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @any, 0xd1}, 0xe)
getsockopt$bt_BT_FLUSHABLE(r8, 0x112, 0x4, 0x0, &(0x7f0000000000))
unshare(0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0xb}, {0x6}, {0xf, 0x8}}}, 0x24}}, 0x4000d)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84)
sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=@getlink={0x28, 0x12, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8580}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

15.878750402s ago: executing program 2 (id=136):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380078ac63902cc13dd95d6c800000500020000100000000009c0a070000001e34a6a636127ad6167d3d539cf600abc202fbfa45b6f66e14ff198e2ca23dbb0e4f15d463a0293da4bdbcbabc4da2001c8c0d19c9261ba65b1ac3a5f37a162650d889279bd77f87c1f5cd359cef46cf944916d042ef0c55a31824cef31454d69eef38b708dc0f24fda8eaccd3c44d59a22b5ba8e1a6d45be815ca5de4d1c9d7b3c3bf88f3ce19ac14994ebb80a3"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001780)=ANY=[@ANYBLOB="9a6ee1924de8086d27290b7f8bc21088bb84d23acba099c8b8cb22626cf2c5e480b4d4a2f8933a77cf65b55c5675cb69beec683cda6229b293e65a8208d86e7ba7ce6abd678c937c3fe964172daa885e16e275fc839d402a4dbdf7148ee42c88d1da10f4ac8c415e7992e66a576202fb114585ed926034951fb436d0ebd0e8646a", @ANYRES16, @ANYBLOB="01052cbd7000fedbdf251d00000008001d000400000008001e00300b000008000100", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300fffffff5000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000021140000001100"], 0xd8}}, 0x8090)

15.767548872s ago: executing program 2 (id=137):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000040000000000000000000000100a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000006ff0a40000000000900020073797a31000000000900010073797a300000000008000f400000000a700000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000004400038040000080080003400000000234000b80200001800a00010071756f7461000000100002800c000440ffffffffffff89bf100001800a0001006c696d6974000000140000001000010000000000000000000084000a"], 0xf4}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x64004800}, 0x20000000)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

15.767212342s ago: executing program 2 (id=138):
r0 = socket$inet(0x2, 0x1, 0xda06)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1900009d88ad0004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r7=>0x0)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r7], 0xfd45}}, 0x0)
write$nci(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="7105040902020766cb440484b907eb0101f8"], 0x12)
shutdown(r3, 0x1)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000003a000000000040120000006e7000000100000000200002000a00000000800000000000000000"], 0x6c}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r1)
sendmsg$nl_route(r9, 0x0, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x800, 0x2, 0x25dfdbfc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)

3.027012999s ago: executing program 32 (id=107):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
read$nci(r4, &(0x7f0000000340)=""/33, 0x21)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$unix(0x1, 0x1, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xf, 0x0, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r13 = openat$cgroup_ro(r12, &(0x7f00000000c0)='blkio.bfq.time\x00', 0x0, 0x0)
readv(r13, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1)

3.011025672s ago: executing program 33 (id=119):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000080)={'gre0\x00', {0x2, 0x0, @private}})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000016c0)={0x0, "7555719556429f037cc78a59ebac5960"})
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000740)={0x0, 0x6, 0x7})
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r2, r1, 0x25, 0x0, @void}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdff}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='xprtrdma_post_recvs\x00', r4}, 0x18)
getsockname(0xffffffffffffffff, &(0x7f0000000440)=@nl=@unspec, &(0x7f0000000000)=0x80)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
unshare(0x28000600)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r6, 0x0, 0xf, 0x0, 0x0)
listen(r5, 0x0)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r8 = accept(r5, 0x0, 0x0)
recvfrom$l2tp6(r8, &(0x7f00000000c0)=""/230, 0xe6, 0x10020, 0x0, 0x0)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r8)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010027bd7000fbdbdf254400000008000300", @ANYRES32=r11, @ANYBLOB="1400238005001e000100000008001c0009000000e07ed15b9ab3c541eb0f3319c8450abb863bba5c2a1cd31fef2ab9ee45f87895329f272ecca3bcba72faad8a75da649197e1b136e96be978b4e3187f06ed931b1adf4a452662c25a92050659"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40)
shutdown(r8, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f0000000080)=ANY=[], 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
epoll_create1(0x0)

0s ago: executing program 34 (id=138):
r0 = socket$inet(0x2, 0x1, 0xda06)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1900009d88ad0004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', 0x200}, 0x18)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r7=>0x0)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r7], 0xfd45}}, 0x0)
write$nci(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="7105040902020766cb440484b907eb0101f8"], 0x12)
shutdown(r3, 0x1)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000003a000000000040120000006e7000000100000000200002000a00000000800000000000000000"], 0x6c}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r1)
sendmsg$nl_route(r9, 0x0, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x800, 0x2, 0x25dfdbfc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:15513' (ED25519) to the list of known hosts.
syzkaller login: [   41.452304][ T5800] cgroup: Unknown subsys name 'net'
[   41.555017][ T5800] cgroup: Unknown subsys name 'cpuset'
[   41.559701][ T5800] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   43.127093][ T5800] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.738981][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.741847][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.745345][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.748375][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.751272][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.754055][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.756663][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.759609][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.763031][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.790022][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.808408][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.811542][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.814855][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.818418][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.822943][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.886978][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   46.956166][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.958610][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.961087][ T5842] bridge_slave_0: entered allmulticast mode
[   46.963815][ T5842] bridge_slave_0: entered promiscuous mode
[   46.967080][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.969990][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.973081][ T5842] bridge_slave_1: entered allmulticast mode
[   46.975677][ T5842] bridge_slave_1: entered promiscuous mode
[   46.990189][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   46.996094][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.013472][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.041386][ T5842] team0: Port device team_slave_0 added
[   47.054262][ T5842] team0: Port device team_slave_1 added
[   47.090486][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.092956][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.100671][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.110652][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.113396][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.115614][ T5846] bridge_slave_0: entered allmulticast mode
[   47.117899][ T5846] bridge_slave_0: entered promiscuous mode
[   47.120430][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   47.125884][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.128212][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.130528][ T5846] bridge_slave_1: entered allmulticast mode
[   47.134226][ T5846] bridge_slave_1: entered promiscuous mode
[   47.136819][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.139105][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.148492][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.174160][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.189232][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.208942][ T5842] hsr_slave_0: entered promiscuous mode
[   47.211058][ T5842] hsr_slave_1: entered promiscuous mode
[   47.223323][ T5846] team0: Port device team_slave_0 added
[   47.236488][ T5846] team0: Port device team_slave_1 added
[   47.263312][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.265560][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.267783][ T5851] bridge_slave_0: entered allmulticast mode
[   47.270479][ T5851] bridge_slave_0: entered promiscuous mode
[   47.276478][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.279158][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.289266][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.293635][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.295863][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.304786][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.308595][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.311293][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.313897][ T5851] bridge_slave_1: entered allmulticast mode
[   47.316289][ T5851] bridge_slave_1: entered promiscuous mode
[   47.338735][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.355037][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.377125][ T5846] hsr_slave_0: entered promiscuous mode
[   47.379287][ T5846] hsr_slave_1: entered promiscuous mode
[   47.381343][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   47.383584][ T5846] Cannot create hsr debugfs directory
[   47.398392][ T5851] team0: Port device team_slave_0 added
[   47.405764][ T5851] team0: Port device team_slave_1 added
[   47.443808][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.446124][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.454889][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.463395][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.465575][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.474791][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.515144][ T5851] hsr_slave_0: entered promiscuous mode
[   47.517863][ T5851] hsr_slave_1: entered promiscuous mode
[   47.520093][ T5851] debugfs: 'hsr0' already exists in 'hsr'
[   47.522745][ T5851] Cannot create hsr debugfs directory
[   47.544515][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.548930][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.563965][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.568743][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.606105][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.621654][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.626706][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.637408][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.664834][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.667755][ T5842] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.670884][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.673902][ T5842] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.687834][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.690260][ T5846] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.693034][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.695852][ T5846] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.743553][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.750764][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.754931][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.763703][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.777181][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.797112][   T28] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.800404][   T28] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.806741][   T28] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.809979][   T28] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.820681][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   47.829629][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.839109][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.841959][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.856561][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.859430][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.867021][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   47.879721][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.882020][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.892921][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.895198][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.937239][ T5846] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   47.940973][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.958843][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.968099][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   47.990410][  T760] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.992740][  T760] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.997398][  T760] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.000206][  T760] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.048859][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.064944][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.100444][ T5842] veth0_vlan: entered promiscuous mode
[   48.112466][ T5846] veth0_vlan: entered promiscuous mode
[   48.118163][ T5846] veth1_vlan: entered promiscuous mode
[   48.124991][ T5842] veth1_vlan: entered promiscuous mode
[   48.147439][ T5842] veth0_macvtap: entered promiscuous mode
[   48.158184][ T5846] veth0_macvtap: entered promiscuous mode
[   48.160905][ T5842] veth1_macvtap: entered promiscuous mode
[   48.166326][ T5846] veth1_macvtap: entered promiscuous mode
[   48.180653][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.184411][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.188480][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.194426][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.200500][ T5864] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.208787][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.219390][ T5864] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.224330][ T5864] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.227811][ T5864] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.236400][ T5857] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.240036][ T5857] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.248826][ T5857] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.258220][ T5857] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.268311][ T5851] veth0_vlan: entered promiscuous mode
[   48.289929][ T5851] veth1_vlan: entered promiscuous mode
[   48.305832][  T760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.313001][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.316171][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.316575][ T5851] veth0_macvtap: entered promiscuous mode
[   48.319480][  T760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.343313][  T760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.345840][ T5851] veth1_macvtap: entered promiscuous mode
[   48.346409][  T760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.360575][  T723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.363429][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.366128][  T723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.375649][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.384607][ T5907] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.389468][ T5907] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.393339][ T5907] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.396201][ T5907] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.398383][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.448910][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.451528][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.473826][ T5913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'.
[   48.477513][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.479930][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.482876][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4'.
[   48.535238][ T5924] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   48.551795][ T5924] team0: Device sit1 is of different type
[   48.555630][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   48.574316][ T5926] bridge0: port 3(macvlan2) entered blocking state
[   48.577818][ T5926] bridge0: port 3(macvlan2) entered disabled state
[   48.580299][ T5926] macvlan2: entered allmulticast mode
[   48.582113][ T5926] bridge0: entered allmulticast mode
[   48.585506][ T5926] macvlan2: left allmulticast mode
[   48.587362][ T5926] bridge0: left allmulticast mode
[   48.635177][ T5932] Unsupported ieee802154 address type: 0
[   48.682064][ T5936] tipc: Started in network mode
[   48.685197][ T5936] tipc: Node identity 0ec05907677f, cluster identity 4711
[   48.687637][ T5936] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   48.704039][ T5936] syzkaller0: entered promiscuous mode
[   48.706224][ T5936] syzkaller0: entered allmulticast mode
[   48.727039][ T5936] tipc: Resetting bearer <eth:syzkaller0>
[   48.729986][ T5935] tipc: Resetting bearer <eth:syzkaller0>
[   48.734225][ T5935] tipc: Disabling bearer <eth:syzkaller0>
[   48.772456][   T54] Bluetooth: hci0: command tx timeout
[   48.803293][ T5952] netlink: 3688 bytes leftover after parsing attributes in process `syz.2.15'.
[   48.823698][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16'.
[   48.837422][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.840254][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.852544][   T54] Bluetooth: hci2: command tx timeout
[   48.862726][   T54] Bluetooth: hci1: command tx timeout
[   48.868215][ T5952] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   48.874688][ T5952] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   48.936195][ T5857] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   48.939272][ T5857] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   48.944802][ T5857] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   48.951495][ T5857] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   49.144597][ T5971] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18'.
[   49.148289][ T5966] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18'.
[   49.171894][ T5974] veth0: entered promiscuous mode
[   49.194229][ T5974] veth0: left promiscuous mode
[   49.289732][ T5986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'.
[   49.297210][ T5986] netlink: 'syz.2.23': attribute type 30 has an invalid length.
[   49.299825][ T5986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23'.
[   49.432380][ T6003] netlink: 51 bytes leftover after parsing attributes in process `syz.2.27'.
[   49.579151][ T6020] Driver unsupported XDP return value 0 on prog  (id 3) dev N/A, expect packet loss!
[   49.597826][ T6023] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   49.597911][ T5857] bond0: (slave bond_slave_0): interface is now down
[   49.606024][ T6023] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.614627][ T5857] bond0: (slave bond_slave_1): interface is now down
[   49.620861][ T5857] bond0: now running without any active interface!
[   49.746148][ T6035] netlink: 'syz.0.35': attribute type 1 has an invalid length.
[   49.836131][ T6039] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[   49.841916][ T6039] warning: `syz.0.36' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   49.854828][ T6039] bridge_slave_0: left allmulticast mode
[   49.857562][ T6039] bridge_slave_0: left promiscuous mode
[   49.860476][ T6039] bridge0: port 1(bridge_slave_0) entered disabled state
[   49.865800][ T6039] bridge_slave_1: left allmulticast mode
[   49.868187][ T6039] bridge_slave_1: left promiscuous mode
[   49.870417][ T6039] bridge0: port 2(bridge_slave_1) entered disabled state
[   49.877549][ T6039] bond0: (slave bond_slave_0): Releasing backup interface
[   49.881445][ T6039] bond0: (slave bond_slave_1): Releasing backup interface
[   49.888821][ T6039] team0: Port device team_slave_0 removed
[   49.893597][ T6039] team0: Port device team_slave_1 removed
[   49.896129][ T6039] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   49.898754][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_0
[   49.903900][ T6039] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   49.906638][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_1
[   49.923174][ T6039] netlink: 'syz.0.36': attribute type 10 has an invalid length.
[   49.925860][ T6039] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[   49.930482][ T6039] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.937286][ T6039] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   49.943469][ T5864] bond0: (slave wlan1): interface is now down
[   49.949244][ T5864] bond0: now running without any active interface!
[   50.195345][ T6057] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.665215][  T795] cfg80211: failed to load regulatory.db
[   50.674010][ T6039] syz.0.36 (6039) used greatest stack depth: 20112 bytes left
[   50.714682][ T6064] netlink: 'syz.0.43': attribute type 1 has an invalid length.
[   50.852746][   T54] Bluetooth: hci0: command tx timeout
[   50.932465][   T54] Bluetooth: hci2: command tx timeout
[   50.942387][   T54] Bluetooth: hci1: command tx timeout
[   50.987472][ T6089] syz.0.49 uses obsolete (PF_INET,SOCK_PACKET)
[   51.536341][ T6091] pim6reg: entered allmulticast mode
[   51.538186][ T6092] pim6reg: left allmulticast mode
[   51.617591][ T6057] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.662710][ T6057] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.670683][ T6097] Zero length message leads to an empty skb
[   51.702885][ T6057] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.707648][ T6099] vlan0: entered promiscuous mode
[   51.713586][ T6101] netlink: zone id is out of range
[   51.715330][ T6101] netlink: zone id is out of range
[   51.716986][ T6101] netlink: zone id is out of range
[   51.718782][ T6101] netlink: zone id is out of range
[   51.723195][ T6101] netlink: zone id is out of range
[   51.730536][ T6101] netlink: zone id is out of range
[   51.733400][ T6101] netlink: zone id is out of range
[   51.735529][ T6101] netlink: zone id is out of range
[   51.737554][ T6101] netlink: zone id is out of range
[   51.747844][ T5857] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.766435][ T5857] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.775561][ T5857] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.783852][ T5857] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.787415][ T6107] syzkaller0: entered promiscuous mode
[   51.789449][ T6107] syzkaller0: entered allmulticast mode
[   51.793115][ T6106] tipc: Started in network mode
[   51.795161][ T6106] tipc: Node identity d2afff6d2e28, cluster identity 4711
[   51.797989][ T6106] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   51.811916][ T6106] tipc: Resetting bearer <eth:syzkaller0>
[   51.817096][ T6106] tipc: Disabling bearer <eth:syzkaller0>
[   51.932870][    T9] IPVS: starting estimator thread 0...
[   52.022476][ T6128] IPVS: using max 92 ests per chain, 220800 per kthread
[   52.055073][ T6143] team0: Port device team_slave_0 removed
[   52.380643][ T6165] netem: change failed
[   52.558867][ T6166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   52.932638][   T54] Bluetooth: hci0: command tx timeout
[   52.955732][ T6181] kthread_run failed with err -4
[   53.012721][   T54] Bluetooth: hci1: command tx timeout
[   53.014818][ T5850] Bluetooth: hci2: command tx timeout
[   53.016684][ T6188] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   53.045500][ T6191] tipc: Started in network mode
[   53.047502][ T6191] tipc: Node identity a2980e708284, cluster identity 4711
[   53.050376][ T6191] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   53.057211][ T6192] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   53.060952][ T6192] syzkaller0: entered promiscuous mode
[   53.063633][ T6192] syzkaller0: entered allmulticast mode
[   53.079884][ T6192] tipc: Resetting bearer <eth:syzkaller0>
[   53.093783][ T6192] tipc: Disabling bearer <eth:syzkaller0>
[   53.170479][ T6202] sctp: [Deprecated]: syz.0.80 (pid 6202) Use of struct sctp_assoc_value in delayed_ack socket option.
[   53.170479][ T6202] Use struct sctp_sack_info instead
[   53.286379][ T6213] sctp: [Deprecated]: syz.0.80 (pid 6213) Use of int in max_burst socket option deprecated.
[   53.286379][ T6213] Use struct sctp_assoc_value instead
[   53.380795][ T6223] vlan2: entered promiscuous mode
[   53.382709][ T6223] bridge0: entered promiscuous mode
[   53.687556][ T6239] vlan2: entered promiscuous mode
[   53.689536][ T6239] bond0: entered promiscuous mode
[   53.691432][ T6239] bond_slave_0: entered promiscuous mode
[   53.694737][ T6239] bond_slave_1: entered promiscuous mode
[   53.698581][ T6239] vlan2: entered allmulticast mode
[   53.700750][ T6239] bond0: entered allmulticast mode
[   53.703360][ T6239] bond_slave_0: entered allmulticast mode
[   53.705743][ T6239] bond_slave_1: entered allmulticast mode
[   53.755772][ T6241] netlink: 'syz.1.92': attribute type 21 has an invalid length.
[   53.824195][ T6249] netlink: 'syz.1.93': attribute type 1 has an invalid length.
[   53.836225][ T6249] 8021q: adding VLAN 0 to HW filter on device bond1
[   53.845147][ T6249] 8021q: adding VLAN 0 to HW filter on device bond1
[   53.848110][ T6249] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[   53.853755][ T6249] bond1: (slave vcan1): Error -95 calling set_mac_address
[   53.901672][ T6251] gretap1: entered promiscuous mode
[   54.113441][ T6273] __nla_validate_parse: 14 callbacks suppressed
[   54.113454][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.100'.
[   54.120099][ T6273] gtp0: entered promiscuous mode
[   54.121679][ T6273] gtp0: entered allmulticast mode
[   54.343201][ T6291] ip6gretap1: entered promiscuous mode
[   55.003414][ T6303] netlink: 24 bytes leftover after parsing attributes in process `syz.1.108'.
[   55.012000][ T6304] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   55.015838][ T6304] syzkaller0: entered promiscuous mode
[   55.018073][ T6304] syzkaller0: entered allmulticast mode
[   55.022531][ T5850] Bluetooth: hci0: command tx timeout
[   55.040577][ T6304] tipc: Resetting bearer <eth:syzkaller0>
[   55.043660][ T6304] net_ratelimit: 5 callbacks suppressed
[   55.043671][ T6304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   55.055362][ T6303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.108'.
[   55.092875][ T5850] Bluetooth: hci1: command tx timeout
[   55.103127][ T5850] Bluetooth: hci2: command tx timeout
[   55.182584][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   55.273474][ T6314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.111'.
[   55.322664][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   55.358555][ T6318] netlink: 'syz.1.113': attribute type 3 has an invalid length.
[   55.363964][ T6318] netlink: 'syz.1.113': attribute type 10 has an invalid length.
[   55.367354][ T6318] team0: Device ipvlan1 failed to register rx_handler
[   55.397044][ T6322] netlink: 44 bytes leftover after parsing attributes in process `syz.1.115'.
[   55.399879][ T6322] netlink: 43 bytes leftover after parsing attributes in process `syz.1.115'.
[   55.403733][ T6322] netlink: 'syz.1.115': attribute type 5 has an invalid length.
[   55.406122][ T6322] netlink: 43 bytes leftover after parsing attributes in process `syz.1.115'.
[   55.408424][ T6320] netlink: 24 bytes leftover after parsing attributes in process `syz.2.114'.
[   55.411267][ T6322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.115'.
[   55.443606][ T6324] netlink: 'syz.2.116': attribute type 1 has an invalid length.
[   55.446900][ T6324] netlink: 2 bytes leftover after parsing attributes in process `syz.2.116'.
[   55.462473][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   55.602575][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   55.621209][ T6335] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   55.627013][ T6335] Bluetooth: MGMT ver 1.23
[   55.742462][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   55.779811][ T6297] tipc: Resetting bearer <eth:syzkaller0>
[   55.787351][ T6297] tipc: Disabling bearer <eth:syzkaller0>
[   56.411932][ T6332] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   56.414943][ T6332] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[   56.420512][ T6332] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   56.423467][ T6332] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[   56.427775][ T6332] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   56.430443][ T6332] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[   56.719241][ T6402] net veth1_virt_wifi : renamed from virt_wifi0
[   56.877883][ T5857] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   56.881374][ T5857] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   56.884954][ T5857] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   56.887724][ T5857] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   56.939905][ T6415] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[   57.016388][ T6419] netlink: 'syz.2.133': attribute type 1 has an invalid length.
[   57.030614][ T6419] bond1: (slave gretap1): making interface the new active one
[   57.033705][ T6419] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   57.038169][ T6419] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   57.907033][ T6426] openvswitch: netlink: Geneve opt len 11 is not a multiple of 4.
[   57.975351][ T6433] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[   71.014992][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[   71.017730][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  132.454864][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  132.456868][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  193.904545][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  193.906534][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  205.422430][   T34] INFO: task kworker/0:0:9 blocked for more than 143 seconds.
[  205.424876][   T34]       Not tainted syzkaller #0
[  205.427145][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  205.431250][   T34] task:kworker/0:0     state:D stack:26376 pid:9     tgid:9     ppid:2      task_flags:0x4208060 flags:0x00004000
[  205.436821][   T34] Workqueue: events rfkill_global_led_trigger_worker
[  205.440262][   T34] Call Trace:
[  205.441560][   T34]  <TASK>
[  205.464153][   T34]  __schedule+0x1798/0x4cc0
[  205.465939][   T34]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  205.468086][   T34]  ? __pfx___schedule+0x10/0x10
[  205.469932][   T34]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  205.473016][   T34]  ? lock_release+0x4b/0x3e0
[  205.474902][   T34]  ? rcu_is_watching+0x15/0xb0
[  205.476610][   T34]  schedule+0x165/0x360
[  205.477964][   T34]  schedule_preempt_disabled+0x13/0x30
[  205.479681][   T34]  __mutex_lock+0x7e6/0x1350
[  205.481145][   T34]  ? __mutex_lock+0x5bb/0x1350
[  205.483669][   T34]  ? rfkill_global_led_trigger_worker+0x27/0xd0
[  205.485699][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  205.487302][   T34]  ? lock_acquire+0x5f/0x360
[  205.488793][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  205.490599][   T34]  rfkill_global_led_trigger_worker+0x27/0xd0
[  205.493220][   T34]  ? process_scheduled_works+0x9ef/0x17b0
[  205.495094][   T34]  process_scheduled_works+0xae1/0x17b0
[  205.496986][   T34]  ? __pfx_process_scheduled_works+0x10/0x10
[  205.498953][   T34]  worker_thread+0x8a0/0xda0
[  205.500492][   T34]  kthread+0x711/0x8a0
[  205.501842][   T34]  ? __pfx_worker_thread+0x10/0x10
[  205.504757][   T34]  ? __pfx_kthread+0x10/0x10
[  205.506657][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  205.508440][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  205.510188][   T34]  ? __pfx_kthread+0x10/0x10
[  205.511910][   T34]  ret_from_fork+0x3fc/0x770
[  205.514141][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  205.515886][   T34]  ? __switch_to_asm+0x39/0x70
[  205.517450][   T34]  ? __switch_to_asm+0x33/0x70
[  205.519396][   T34]  ? __pfx_kthread+0x10/0x10
[  205.521090][   T34]  ret_from_fork_asm+0x1a/0x30
[  205.523838][   T34]  </TASK>
[  205.525045][   T34] INFO: task syz.0.107:6298 blocked for more than 143 seconds.
[  205.527999][   T34]       Not tainted syzkaller #0
[  205.529598][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  205.533490][   T34] task:syz.0.107       state:D stack:25744 pid:6298  tgid:6297  ppid:5842   task_flags:0x400140 flags:0x00004006
[  205.537990][   T34] Call Trace:
[  205.539380][   T34]  <TASK>
[  205.540648][   T34]  __schedule+0x1798/0x4cc0
[  205.543966][   T34]  ? __fput+0x44c/0xa70
[  205.545584][   T34]  ? rcu_is_watching+0x15/0xb0
[  205.547508][   T34]  ? kernfs_should_drain_open_files+0x20/0x2d0
[  205.550019][   T34]  ? __pfx___schedule+0x10/0x10
[  205.551961][   T34]  ? schedule+0x91/0x360
[  205.554660][   T34]  ? rcu_is_watching+0x15/0xb0
[  205.556671][   T34]  ? lock_release+0x4b/0x3e0
[  205.558434][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  205.560381][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  205.564004][   T34]  schedule+0x165/0x360
[  205.565759][   T34]  schedule_preempt_disabled+0x13/0x30
[  205.567933][   T34]  __mutex_lock+0x7e6/0x1350
[  205.569558][   T34]  ? __mutex_lock+0x5bb/0x1350
[  205.571317][   T34]  ? rfkill_unregister+0xc8/0x220
[  205.575062][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  205.576850][   T34]  ? __pfx_device_del+0x10/0x10
[  205.578410][   T34]  rfkill_unregister+0xc8/0x220
[  205.579975][   T34]  nfc_unregister_device+0x96/0x2a0
[  205.581836][   T34]  ? __pfx_virtual_ncidev_close+0x10/0x10
[  205.584271][   T34]  virtual_ncidev_close+0x56/0x90
[  205.585937][   T34]  __fput+0x44c/0xa70
[  205.587305][   T34]  task_work_run+0x1d4/0x260
[  205.589216][   T34]  ? __pfx_task_work_run+0x10/0x10
[  205.591299][   T34]  get_signal+0x11ed/0x1340
[  205.593944][   T34]  ? task_work_add+0x377/0x420
[  205.595786][   T34]  ? __pfx_vfs_read+0x10/0x10
[  205.597391][   T34]  arch_do_signal_or_restart+0x9a/0x750
[  205.599161][   T34]  ? __pfx___fput_deferred+0x10/0x10
[  205.600823][   T34]  ? __fget_files+0x2a/0x420
[  205.602962][   T34]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  205.605081][   T34]  ? __pfx_ksys_read+0x10/0x10
[  205.606587][   T34]  ? rcu_is_watching+0x15/0xb0
[  205.608096][   T34]  ? rcu_is_watching+0x15/0xb0
[  205.609627][   T34]  exit_to_user_mode_loop+0x75/0x110
[  205.611301][   T34]  do_syscall_64+0x2bd/0x3b0
[  205.613230][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.615179][   T34]  ? exc_page_fault+0x9f/0xf0
[  205.616640][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.618497][   T34] RIP: 0033:0x7f796f58ebe9
[  205.619937][   T34] RSP: 002b:00007f7970368038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  205.622970][   T34] RAX: fffffffffffffff2 RBX: 00007f796f7b5fa0 RCX: 00007f796f58ebe9
[  205.625464][   T34] RDX: 0000000000000021 RSI: 0000200000000340 RDI: 0000000000000005
[  205.628059][   T34] RBP: 00007f796f611e19 R08: 0000000000000000 R09: 0000000000000000
[  205.630602][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  205.633831][   T34] R13: 00007f796f7b6038 R14: 00007f796f7b5fa0 R15: 00007fffc6211158
[  205.636355][   T34]  </TASK>
[  205.637404][   T34] INFO: task syz.1.119:6332 blocked for more than 143 seconds.
[  205.639803][   T34]       Not tainted syzkaller #0
[  205.641355][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  205.644697][   T34] task:syz.1.119       state:D stack:25168 pid:6332  tgid:6331  ppid:5846   task_flags:0x400140 flags:0x00004006
[  205.648460][   T34] Call Trace:
[  205.649537][   T34]  <TASK>
[  205.650712][   T34]  __schedule+0x1798/0x4cc0
[  205.652940][   T34]  ? stack_trace_save+0x9c/0xe0
[  205.654874][   T34]  ? __pfx_stack_trace_save+0x10/0x10
[  205.656930][   T34]  ? __pfx___schedule+0x10/0x10
[  205.658849][   T34]  ? schedule+0x91/0x360
[  205.660470][   T34]  ? rcu_is_watching+0x15/0xb0
[  205.664101][   T34]  ? lock_release+0x4b/0x3e0
[  205.665643][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  205.667497][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  205.669502][   T34]  schedule+0x165/0x360
[  205.670851][   T34]  schedule_preempt_disabled+0x13/0x30
[  205.673084][   T34]  __mutex_lock+0x7e6/0x1350
[  205.674630][   T34]  ? __mutex_lock+0x5bb/0x1350
[  205.676153][   T34]  ? nfc_rfkill_set_block+0x50/0x2e0
[  205.677870][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  205.679627][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  205.681938][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  205.684528][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  205.686476][   T34]  nfc_rfkill_set_block+0x50/0x2e0
[  205.688176][   T34]  ? __pfx_nfc_rfkill_set_block+0x10/0x10
[  205.690108][   T34]  rfkill_set_block+0x1d2/0x440
[  205.691710][   T34]  rfkill_fop_write+0x44b/0x570
[  205.693599][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  205.695376][   T34]  ? security_kernfs_init_security+0x220/0x290
[  205.697380][   T34]  ? rw_verify_area+0x255/0x4d0
[  205.698972][   T34]  ? __pfx_rfkill_fop_write+0x10/0x10
[  205.700953][   T34]  vfs_write+0x27e/0xb30
[  205.702577][   T34]  ? __pfx_vfs_write+0x10/0x10
[  205.704153][   T34]  ? lock_release+0x4b/0x3e0
[  205.705659][   T34]  ? __fget_files+0x2a/0x420
[  205.707120][   T34]  ? __fget_files+0x3a0/0x420
[  205.708663][   T34]  ? __fget_files+0x2a/0x420
[  205.710188][   T34]  ksys_write+0x145/0x250
[  205.711626][   T34]  ? __pfx_ksys_write+0x10/0x10
[  205.713517][   T34]  ? rcu_is_watching+0x15/0xb0
[  205.715105][   T34]  ? rcu_is_watching+0x15/0xb0
[  205.716663][   T34]  do_syscall_64+0xfa/0x3b0
[  205.718143][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.720126][   T34]  ? exc_page_fault+0x9f/0xf0
[  205.721646][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.723862][   T34] RIP: 0033:0x7f326238ebe9
[  205.725439][   T34] RSP: 002b:00007f3263264038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  205.728178][   T34] RAX: ffffffffffffffda RBX: 00007f32625b5fa0 RCX: 00007f326238ebe9
[  205.730695][   T34] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000005
[  205.733580][   T34] RBP: 00007f3262411e19 R08: 0000000000000000 R09: 0000000000000000
[  205.736256][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  205.738824][   T34] R13: 00007f32625b6038 R14: 00007f32625b5fa0 R15: 00007ffe43a91308
[  205.741429][   T34]  </TASK>
[  205.742777][   T34] INFO: task syz.2.138:6432 blocked for more than 143 seconds.
[  205.745403][   T34]       Not tainted syzkaller #0
[  205.747387][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  205.750493][   T34] task:syz.2.138       state:D stack:25224 pid:6432  tgid:6431  ppid:5851   task_flags:0x400140 flags:0x00004004
[  205.754824][   T34] Call Trace:
[  205.755919][   T34]  <TASK>
[  205.756884][   T34]  __schedule+0x1798/0x4cc0
[  205.758358][   T34]  ? __pfx___schedule+0x10/0x10
[  205.760104][   T34]  ? schedule+0x91/0x360
[  205.761838][   T34]  ? rcu_is_watching+0x15/0xb0
[  205.764266][   T34]  ? lock_release+0x4b/0x3e0
[  205.765919][   T34]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  205.767834][   T34]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  205.770081][   T34]  schedule+0x165/0x360
[  205.771417][   T34]  schedule_preempt_disabled+0x13/0x30
[  205.773533][   T34]  __mutex_lock+0x7e6/0x1350
[  205.775155][   T34]  ? __mutex_lock+0x5bb/0x1350
[  205.776884][   T34]  ? rfkill_register+0x37/0x8e0
[  205.778899][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  205.780959][   T34]  ? __init_waitqueue_head+0xa9/0x150
[  205.783423][   T34]  ? device_initialize+0x24b/0x440
[  205.785084][   T34]  rfkill_register+0x37/0x8e0
[  205.786699][   T34]  nfc_register_device+0x14a/0x320
[  205.788363][   T34]  nci_register_device+0x87f/0x9d0
[  205.790281][   T34]  ? __pfx_nci_register_device+0x10/0x10
[  205.792089][   T34]  ? __raw_spin_lock_init+0x45/0x100
[  205.794314][   T34]  ? __init_waitqueue_head+0xa9/0x150
[  205.796106][   T34]  virtual_ncidev_open+0x129/0x1a0
[  205.797877][   T34]  ? __pfx_virtual_ncidev_open+0x10/0x10
[  205.800001][   T34]  misc_open+0x2bc/0x330
[  205.801371][   T34]  chrdev_open+0x4cc/0x5e0
[  205.803135][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  205.804761][   T34]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  205.806796][   T34]  ? __pfx_chrdev_open+0x10/0x10
[  205.808645][   T34]  do_dentry_open+0x953/0x13f0
[  205.810197][   T34]  vfs_open+0x3b/0x340
[  205.811448][   T34]  ? path_openat+0x2ecd/0x3830
[  205.813272][   T34]  path_openat+0x2ee5/0x3830
[  205.814840][   T34]  ? arch_stack_walk+0xfc/0x150
[  205.816419][   T34]  ? stack_depot_save_flags+0x40/0x860
[  205.818307][   T34]  ? __pfx_path_openat+0x10/0x10
[  205.820117][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.822482][   T34]  do_filp_open+0x1fa/0x410
[  205.824096][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  205.825927][   T34]  ? _raw_spin_unlock+0x28/0x50
[  205.827640][   T34]  ? alloc_fd+0x64c/0x6c0
[  205.829093][   T34]  do_sys_openat2+0x121/0x1c0
[  205.830777][   T34]  ? __se_sys_futex+0x36f/0x400
[  205.832714][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  205.834758][   T34]  ? rcu_is_watching+0x15/0xb0
[  205.836614][   T34]  __x64_sys_openat+0x138/0x170
[  205.838382][   T34]  do_syscall_64+0xfa/0x3b0
[  205.839875][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.841816][   T34]  ? exc_page_fault+0x9f/0xf0
[  205.843676][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.845540][   T34] RIP: 0033:0x7f8a7e38ebe9
[  205.846990][   T34] RSP: 002b:00007f8a7f289038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  205.849736][   T34] RAX: ffffffffffffffda RBX: 00007f8a7e5b5fa0 RCX: 00007f8a7e38ebe9
[  205.852553][   T34] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  205.855097][   T34] RBP: 00007f8a7e411e19 R08: 0000000000000000 R09: 0000000000000000
[  205.857735][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  205.860494][   T34] R13: 00007f8a7e5b6038 R14: 00007f8a7e5b5fa0 R15: 00007ffd46e0d0d8
[  205.863349][   T34]  </TASK>
[  205.864428][   T34] INFO: lockdep is turned off.
[  205.865973][   T34] NMI backtrace for cpu 1
[  205.865982][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  205.865991][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  205.865996][   T34] Call Trace:
[  205.866000][   T34]  <TASK>
[  205.866004][   T34]  dump_stack_lvl+0x189/0x250
[  205.866023][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  205.866038][   T34]  ? __pfx__printk+0x10/0x10
[  205.866058][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  205.866070][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  205.866079][   T34]  ? __pfx__printk+0x10/0x10
[  205.866089][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  205.866102][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  205.866117][   T34]  watchdog+0xf93/0xfe0
[  205.866138][   T34]  ? watchdog+0x1de/0xfe0
[  205.866155][   T34]  kthread+0x711/0x8a0
[  205.866166][   T34]  ? __pfx_watchdog+0x10/0x10
[  205.866175][   T34]  ? __pfx_kthread+0x10/0x10
[  205.866183][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  205.866195][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  205.866214][   T34]  ? __pfx_kthread+0x10/0x10
[  205.866229][   T34]  ret_from_fork+0x3fc/0x770
[  205.866244][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  205.866257][   T34]  ? __switch_to_asm+0x39/0x70
[  205.866268][   T34]  ? __switch_to_asm+0x33/0x70
[  205.866277][   T34]  ? __pfx_kthread+0x10/0x10
[  205.866289][   T34]  ret_from_fork_asm+0x1a/0x30
[  205.866310][   T34]  </TASK>
[  205.866316][   T34] Sending NMI from CPU 1 to CPUs 0:
[  205.916814][    C0] NMI backtrace for cpu 0
[  205.916832][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  205.916847][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  205.916855][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  205.916881][    C0] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d f3 66 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  205.916893][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  205.916905][    C0] RAX: c3e5a100b8f63c00 RBX: ffffffff819683b8 RCX: c3e5a100b8f63c00
[  205.916915][    C0] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8
[  205.916924][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  205.916934][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa38330
[  205.916943][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  205.916952][    C0] FS:  0000000000000000(0000) GS:ffff8880b861a000(0000) knlGS:0000000000000000
[  205.916962][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  205.916971][    C0] CR2: 00007ffea5eaa808 CR3: 0000000027d12000 CR4: 00000000000006f0
[  205.917004][    C0] Call Trace:
[  205.917011][    C0]  <TASK>
[  205.917016][    C0]  default_idle+0x13/0x20
[  205.917030][    C0]  default_idle_call+0x74/0xb0
[  205.917044][    C0]  do_idle+0x1e8/0x510
[  205.917059][    C0]  ? __pfx_do_idle+0x10/0x10
[  205.917070][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  205.917089][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  205.917105][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  205.917125][    C0]  cpu_startup_entry+0x44/0x60
[  205.917137][    C0]  rest_init+0x2de/0x300
[  205.917150][    C0]  start_kernel+0x3a9/0x410
[  205.917171][    C0]  x86_64_start_reservations+0x24/0x30
[  205.917191][    C0]  x86_64_start_kernel+0x143/0x1c0
[  205.917209][    C0]  common_startup_64+0x13e/0x147
[  205.917232][    C0]  </TASK>
[  205.917851][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  205.985862][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  205.988850][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  205.991977][   T34] Call Trace:
[  205.993031][   T34]  <TASK>
[  205.994019][   T34]  dump_stack_lvl+0x99/0x250
[  205.995488][   T34]  ? __asan_memcpy+0x40/0x70
[  205.997014][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  205.998650][   T34]  ? __pfx__printk+0x10/0x10
[  206.000138][   T34]  vpanic+0x281/0x750
[  206.001478][   T34]  ? __pfx_vpanic+0x10/0x10
[  206.003042][   T34]  ? rcu_is_watching+0x15/0xb0
[  206.004802][   T34]  ? preempt_schedule+0xae/0xc0
[  206.006538][   T34]  ? preempt_schedule_common+0x83/0xd0
[  206.008610][   T34]  panic+0xb9/0xc0
[  206.009914][   T34]  ? __pfx_panic+0x10/0x10
[  206.011434][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  206.013162][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  206.015191][   T34]  watchdog+0xfd2/0xfe0
[  206.016552][   T34]  ? watchdog+0x1de/0xfe0
[  206.018000][   T34]  kthread+0x711/0x8a0
[  206.019298][   T34]  ? __pfx_watchdog+0x10/0x10
[  206.020961][   T34]  ? __pfx_kthread+0x10/0x10
[  206.022432][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  206.024093][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  206.025746][   T34]  ? __pfx_kthread+0x10/0x10
[  206.027222][   T34]  ret_from_fork+0x3fc/0x770
[  206.029003][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  206.030631][   T34]  ? __switch_to_asm+0x39/0x70
[  206.032137][   T34]  ? __switch_to_asm+0x33/0x70
[  206.033675][   T34]  ? __pfx_kthread+0x10/0x10
[  206.035142][   T34]  ret_from_fork_asm+0x1a/0x30
[  206.036715][   T34]  </TASK>
[  206.038325][   T34] Kernel Offset: disabled
[  206.039694][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:38:48  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff88801b3a8237 R9 =1ffff11003675046 R10=dffffc0000000000 R11=ffffffff854f2040
R12=dffffc0000000000 R13=ffffffff99afb8c2 R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f20bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffea5eaa808 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff920005e9e0a RBX=000000000000000e RCX=0000000000000001 RDX=0000000000002000
RSI=000000000000000f RDI=ffffc90002f4efe0 RBP=ffffc90002f4f0d8 RSP=ffffc90002f4ef08
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc90002f4eeb8 R11=ffffffff81ac3810
R12=000000000000000f R13=dffffc0000000000 R14=ffffc90002f4efe0 R15=ffffc90002f4f050
RIP=ffffffff81ac43ec RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe9d60e7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007fe9d55876c3 00007fe9d55876c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000000000000000 000000000003bf12
XMM06=000055558ad49960 0000555500000007 XMM07=0000555500000000 000055558ad49810
XMM08=000055558ad49760 0000555500000006 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
