last executing test programs:

2.918231271s ago: executing program 4 (id=4296):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x800}, 0x8)
write(r0, &(0x7f0000000000)="240000001a00110414f9f4070009040080fffffffe110001000000000800040001000000", 0x24)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x100, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000200))
setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x6f, 0x0, 0x2}, 0xc)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipv4_newrule={0x30, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth1_to_team\x00'}]}, 0x30}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x80111500, &(0x7f0000000040)={'wlan0\x00'})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x0, 0xe, 0x0, &(0x7f0000000240)="ffffffff75664a0a90f73e9eb3cf", 0x0, 0x6100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.658429547s ago: executing program 4 (id=4297):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r0}, 0x18)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=@newtaction={0x15c, 0x30, 0xb, 0x0, 0x0, {}, [{0x148, 0x1, [@m_ct={0x144, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @dev}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_NAT_PORT_MAX={0x6}, @TCA_CT_ACTION={0x6}]}, {0xc2, 0x6, "767f3c3d85817a3115631838f805a54b8975ca258145f722f9d6c22e507af9e761a1977308f2443cddece15eb6cdfc5505e4c0dc82e7c8dcd24ad7992152989316e306039559142435e607649bbfbf86748828a4f4d61544cde1249be1d96b0605fe2832a1489dc3c8a2b7b8e4753796695bf701b3680309f2242dd8cb310ba40d57e40a6d1b036c76effd0ade73fe448e17ce3fb0476faebb17a22241be8866cc7b20cac7e92a7e4558a4efe41dd374895ac1a025c56226827086aba6cd"}, {0xc}, {0xc}}}]}]}, 0x15c}}, 0x0)
listen(r1, 0xc)
accept(r1, 0x0, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, 0x0, 0x0)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0000200, @private}, 0x10)
setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3e, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
close(r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4)
connect$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x4, @empty, 0x202}, 0x1c)
sendto$inet6(r5, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0)
writev(r5, &(0x7f0000000580)=[{&(0x7f0000000100)="f4febbdad6", 0x5}], 0x1)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r4, &(0x7f00000012c0)='&', 0x1, 0x20004891, 0x0, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="2300000000d848cf6d8e4174075ffc3c604043df0000000000000000000000000000f0b7e8f2a0e8041bc01caa27d0a563784c97bbe1570092b4126908513f6182464b7037bdc9f623adaf1f31c9e5ded74ce588706091478eccc9baf4", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800900015300626f6e64000000001c00028008000f0006000000050010008f00000006001800000000"], 0x4c}}, 0x0)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="28102f6bbdcebd7000fedbdf254c"], 0x14}, 0x1, 0x0, 0x0, 0x8890}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.657961798s ago: executing program 2 (id=4298):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r2, 0x9fe4a776c35cd1bf, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x4048002) (fail_nth: 4)

2.249828391s ago: executing program 2 (id=4299):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0103000b000000000000010000000900020073797a30000000000900010073797a30000000001c000380"], 0xd8}}, 0x0)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r3, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x5, 0x5, @multicast1}]}, 0x38}}, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x40}, {0x6}]}, 0x10)
sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001380)={0x28, 0xe, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x28000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r5, 0x903, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c80)

2.249681669s ago: executing program 3 (id=4300):
r0 = socket(0x11, 0x3, 0x1)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r1)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}]}, 0x28}}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000003c0)={'wlan1\x00', {0x2, 0x0, @empty=0xcf05fdfd}})

2.222641598s ago: executing program 0 (id=4301):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r2, 0x0, 0x18, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000004000000000000000419f72466bc741b00"/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000110000000000201d0000000018120000", @ANYRES32=r3, @ANYBLOB="00000046eec83465ceda65aa6ff009910000000000b708838b2d9e87dbaba9f8ff00800600bfa200200000000007020000f8ff1200b803fcffffffb704008afeff07e562811f004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={r3, &(0x7f00000001c0)="a294238a60599e0c170c975906b66fefb05768afcb889fda2d66465d950225082ac8e85b9d51", &(0x7f0000000340)=""/86, 0x5943bb55469cc16e}, 0x20)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket(0x2000000000000021, 0x2, 0x10000000000002)
sendmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000100100000b"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa0}}, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8993, &(0x7f0000000080)={'bond0\x00', &(0x7f0000001700)=@ethtool_modinfo={0x42, 0x0, 0x10000}})
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0)
epoll_create(0x9)
socket$kcm(0x29, 0x7, 0x0)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000040))

2.038509373s ago: executing program 3 (id=4302):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0)
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2f83e44f34d450b5d445e3996fff56184c8e5a3e1249eee16d2279d88c7e76cb6854dc071904f912c075ee18a82b2a912da5cbb10583890622ba7b7ed850c36c61de0f3ee0b7118904962430f7bfecddefae34ca8c6b64cf7f6bc991eb290b163611fff83c62ea29fa9c62bdf55ac4f9584c6c5599616faf30defa9f746290fdb4df35e20e7a5abf1e836424477d100cfeea663bc1665f535ee0d571f72d1b609984c306e5adc0297862c26d289b0c1ed5bbd3e8621dc3230b73180c6ca4837f1ccde3cc6cc6b180803d", @ANYRES16=r2, @ANYBLOB="1d0028bd7000fcdbdf2512000000640005804c00028008000400001000000800010010000000080003000900000008000300acac00000800040006000000080002000600000008000100000000000800010015000000080001001600000008000100756470000c0002800800040005000000"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x884)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, &(0x7f0000000400))
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x30, r4, 0x5, 0x4000, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac0c, 0xfac08]}]]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r4, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x2008011)

2.032844792s ago: executing program 0 (id=4304):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$inet_smc(0x2b, 0x1, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000700)={'dvmrp1\x00', 0x1000}) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async, rerun: 64)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f0000000680)={'syztnl2\x00', <r3=>0x0, 0x29, 0x8, 0x1, 0x6, 0x3a, @loopback, @mcast1, 0x8000, 0x20, 0xb42, 0x1}}) (rerun: 64)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="c1d3eb1ca237ba03c7d2605916d12d3ad984c070742c14c2794401db89bac9197aedc2632b39ee306a05c0644ba4ad377f0e93d463f77662833ce8f677889f03", 0x40}, {&(0x7f0000000400)="071175f662016234ed565f985299858e6be3eb7db5b215a8bf1c61508011ea3efb14effa86a63a25b1d2c05663c0d0a608a9cad6d9dc4a965f247fffa2a883bd9fb0b3bd91af80946f36bf81e643f3f29add049c1ccb5c70bdf15c8aa99b97b86957a03137af29486870b86db7d2f6d01dd5642d5871f7e9faf8ad3a91962ae2349f125d846419d1e5819df980e03235", 0x90}, {&(0x7f00000004c0)="d3d5c7262103f72615b1093eefabd803fa0a760f872c54e915d2c108c4c765eed2c8d93cb8b0934435f5922ff4", 0x2d}], 0x3, &(0x7f00000007c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast1, @remote}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0x41, 0x0, 0x6, [0x7, 0x8, 0x808, 0x7fffffff, 0x6]}, @timestamp_prespec={0x44, 0xc, 0x57, 0x3, 0x0, [{@local, 0x4}]}, @noop]}}}, @ip_retopts={{0x44, 0x0, 0x7, {[@ssrr={0x89, 0x13, 0x74, [@loopback, @private=0xa010102, @remote, @private=0xa010101]}, @timestamp={0x44, 0x20, 0xb8, 0x0, 0x2, [0xffffffff, 0x4, 0x0, 0x8, 0xfffffffa, 0x3, 0x6]}, @noop]}}}], 0xb8}}], 0x1, 0x8000) (async, rerun: 32)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000240), &(0x7f0000000380)=r2}, 0x20) (async, rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
syz_extract_tcp_res(0x0, 0xa3a, 0x5)
socket$igmp(0x2, 0x3, 0x2) (async)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='rxrpc_peer\x00', r5, 0x0, 0xfffffffffffffff9}, 0x18) (async)
r6 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) (async)
sendmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000bf6b10010000010000000a00000000000000"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) (async, rerun: 32)
r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (rerun: 32)
setsockopt$llc_int(r7, 0x10c, 0x8, &(0x7f0000000780), 0x4)
bpf$MAP_CREATE(0x24, &(0x7f0000000080)=@bloom_filter, 0xa1) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb08000000000086dd6100000000083afffe8000000000000000000000000000aa0000000000000000000000000000000180009078ba9efff7"], 0x0) (async, rerun: 32)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) (rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) (async, rerun: 64)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @private=0xa010101}}}, &(0x7f0000000300)=0x90) (async, rerun: 64)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000880)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x110, 0x220, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @local, 0x4, 0xffffffff}}}, {{@arp={@private=0xa010102, @loopback, 0xff000000, 0xffffff, 0x2, 0x7, {@mac=@multicast, {[0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0x0, 0x0, 0x0, 0xff]}}, 0x1, 0xd, 0x3, 0x4, 0x7, 0x2, 'veth0_to_bridge\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="cbf707286c8c", @private=0xa010102, @loopback, 0x5, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x2, 0x0}, @multicast2, 0x0, 0x0, 0x0, 0x8, {@mac, {[0x0, 0x0, 0x0, 0xff]}}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'pim6reg0\x00', 'netpci0\x00', {}, {0xff}, 0x0, 0x341}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x110}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)

2.022335291s ago: executing program 2 (id=4305):
ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, &(0x7f0000000000))
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, 0x14, 0x2, 0x70bd25, 0x25dfdbfc, {0xf, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x32, 0x1, "7eecf3a7263051952683ae548a7c79adc78c7ba3fc69befdf107e66fc5cec2c1a01bb36cd1126e7a4292ee1b19e5"}, @INET_DIAG_REQ_BYTECODE={0x3f, 0x1, "fd3a59a26fccba06ad9a0ed317c99ae9071f998131e186135cf2cfd0dac1099e63acf070f6b51f0e834b9880817aa3c25626d96dabe33133012b3b"}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x24004040)
r1 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f00000001c0)={0x1, "ff"}, 0x2)
r2 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000200))
ioctl$SIOCPNGETOBJECT(r2, 0x89e0, &(0x7f0000000240)=0xf6)
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000280)='veth1_macvtap\x00')
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f00000002c0)={0xf02, 0x40, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
bpf$OBJ_GET_MAP(0x7, &(0x7f0000016b40)=@o_path={&(0x7f0000016b00)='./file0\x00', 0x0, 0x18, r2}, 0x18)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000016b80)=0xb, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000016bc0), r3)
r5 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, &(0x7f0000016c00)={0x2, 0x4e23, @loopback}, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000016c80), r3)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000016cc0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000016f00)={&(0x7f0000016c40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000016ec0)={&(0x7f0000016d00)={0x1a4, r6, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x7c}, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xb3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x5f}, @NL80211_ATTR_VENDOR_DATA={0xf2, 0xc5, "bfcb0a2f649374a94a9d53f75081bc8f1327799d3f00a0c5c2e574cb80f58942e7b3c0f486a3708b8dad14abd3b08b310cbe6251597471ca6e96924701fb48ba43a9463f35c6e96197d107199697d36d3ad1a52400397e0693a1284a1fe531691a79d5557858ac3fe6847ce822f508d0d651d04217820eda40d1e2f71f516104ecf0dea392023c3a7b1b47cf3ec5a6a55b6f6ae6ad962c129c5f69289e866b3593e087a2b2d5b4508a5ba6d714b0ed698031d68431a984f16f8780fa0455f9b1981a913ec3f51f9ebeea1f7021c7c1d080f35eb4ccce9a327121aeeca8489064d88ca06a5c77c78197050a876c63"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_DATA={0x4e, 0xc5, "49ce8e39f1cad5fb746e9f804254b23c283f4f24e2ca4d8c984b2c0eecf447c0d5138d13fb72881493fc28dec1b8dfa75a6e5819fa636ad94a563c07e3d75cc833547ed4ff67185fd57a"}, @NL80211_ATTR_VENDOR_DATA={0x1c, 0xc5, "14774aa019a6631ac33a67767ecc055a6951d08f868e489e"}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x8000}, 0x804)
readv(r5, &(0x7f0000017fc0)=[{&(0x7f0000016f40)=""/83, 0x53}, {&(0x7f0000016fc0)=""/4096, 0x1000}], 0x2)
getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000018040)=<r8=>0x0, &(0x7f0000018080)=0x4)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000018140)={'gretap0\x00', &(0x7f00000180c0)={'sit0\x00', <r9=>0x0, 0x20, 0x7800, 0x8, 0x6b, {{0x9, 0x4, 0x3, 0x0, 0x24, 0x65, 0x0, 0xb3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3a}, {[@rr={0x7, 0xf, 0xbe, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x20}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000182c0)={'syztnl2\x00', &(0x7f0000018180)={'erspan0\x00', <r10=>0x0, 0x7800, 0x7, 0xffffffff, 0x4, {{0x45, 0x4, 0x1, 0x2, 0x114, 0x68, 0x0, 0x0, 0x29, 0x0, @private=0xa010101, @remote, {[@ra={0x94, 0x4}, @rr={0x7, 0x27, 0x15, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @remote, @empty, @multicast2, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101]}, @end, @timestamp_prespec={0x44, 0x1c, 0x66, 0x3, 0x7, [{@broadcast, 0x2}, {@multicast2, 0x40}, {@multicast1, 0x400}]}, @rr={0x7, 0x1f, 0xd0, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @remote, @rand_addr=0x64010100, @remote, @dev={0xac, 0x14, 0x14, 0x39}]}, @cipso={0x86, 0x3f, 0xffffffffffffffff, [{0x1, 0x10, "5051c4d02233ab59726042d21f71"}, {0x5, 0x8, "44e3bf6e4f6a"}, {0x1, 0x5, "e6a95f"}, {0x5, 0x8, "8ad5c2782c6b"}, {0x0, 0x12, "06882485267044e2c17773b6d7381f7e"}, {0x1, 0x2}]}, @lsrr={0x83, 0x7, 0x50, [@rand_addr=0x64010102]}, @lsrr={0x83, 0x1b, 0xb, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @broadcast, @rand_addr=0x64010102, @multicast2, @remote]}, @rr={0x7, 0xf, 0x1a, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @cipso={0x86, 0x29, 0x0, [{0x2, 0x11, "719b7bf20c1b5bfb3b8226a000abc3"}, {0x6, 0x8, "9441f9f2650c"}, {0x0, 0x8, "723edb2bd7df"}, {0x2, 0x2}]}]}}}}})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000018400)={&(0x7f0000018000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000183c0)={&(0x7f0000018300)={0x9c, r4, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000080)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000018480), r3)
sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000018640)={&(0x7f0000018440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000018600)={&(0x7f00000184c0)={0x104, r11, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x145}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x704}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f6c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000018680), 0x840, 0x0)
ioctl$TUNSETLINK(r12, 0x400454cd, 0x302)
r13 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY_LEVEL(r13, 0x0, 0x2, &(0x7f00000186c0), &(0x7f0000018700)=0x4)
openat$tun(0xffffffffffffff9c, &(0x7f0000018740), 0x2080, 0x0)

1.802410863s ago: executing program 3 (id=4306):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="159f865967b6a60521a275536960d598e963c4b3f2c61dd4127989bf78bfce83", 0x20)
r1 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/86, 0x56}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/195, 0xc3}], 0x1}, 0x31}], 0x2, 0x0, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES8=r0, @ANYRESHEX, @ANYRES16=r3], 0xfc}, 0x1, 0x0, 0x0, 0x400c8d0}, 0x4000)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$SO_COOKIE(r5, 0x1, 0x2a, 0x0, &(0x7f0000000240))
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x34, r7, 0x1, 0x70bd2f, 0xfffffffc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x72}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x82c)
sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25fe880000000000000000000000000101ac1414bb0000000000000000000000004e240002000700010a0080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e00010000009c0011001901010000000000000000000000000020010000000000000000000000000001ac14143e0000000000c8b10000000000ac1414bb00000000000000000000000032fcff00073500000a00020000000000000000000000020000000000ac1e01010000000000000000000000000a010102000000000000000000000000fe80000000000000000000000000002f33"], 0xec}}, 0x20000000)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000000)={0x2, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @remote}, 0x10)
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x3c1, 0x3, 0xb10, 0x170, 0xc8, 0x8, 0x170, 0x5803, 0xa40, 0x2e8, 0x2e8, 0xa40, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @private2, [], [0x0, 0x0, 0xffffffff], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x128, 0x170, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@devgroup={{0x38}, {0x5, 0x0, 0xc7}}, @common=@dst={{0x48}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@uncond, 0x0, 0x8b0, 0x8d0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0xd8}], [], 0x0, 0x4}, {[{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}, {[], [{0x1}, {0x6b1cab00}]}, {[{}, {}, {}, {}, {}, {}, {}, {0xffffffff}], [{0x0, 0x800}, {}, {}, {0x4}]}, {}, {[{0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x7caf1687, 0x3}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}]}, {[{}, {}, {}, {}, {}, {}, {}, {}, {0x943d}, {}, {0xfffffffc}], [], 0x0, 0xfe}, {[], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}]}, {[{}, {}, {}, {}, {}, {0x8}], [{}, {}, {}, {}, {}, {}, {0x20000000}, {0x2}]}, {[{}, {}, {0x0, 0x3}]}, {[{}, {}, {}, {}, {}, {0x0, 0x1}]}]}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xb70)

1.801356282s ago: executing program 0 (id=4307):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x3}, {0x0, 0x2}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x4, 0x4}]}}, 0x0, 0x56}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) (async, rerun: 64)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$IPSET_CMD_TEST(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000b0601021c00000000000000070000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0xc00c0) (async, rerun: 32)
r2 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 32)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000)
r8 = socket(0x10, 0x803, 0x0) (async, rerun: 32)
r9 = socket$unix(0x1, 0x2, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtfilter={0x38, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xb, 0x3}, {}, {0x1, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x10000}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x24008000)
close(r3)
syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r1)

1.756950715s ago: executing program 4 (id=4309):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r2, 0x9fe4a776c35cd1bf, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x4048002) (fail_nth: 5)

1.511639484s ago: executing program 1 (id=4310):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x22}, [@ldst={0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
socketpair(0x21, 0x6, 0x5, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001780)={r0, 0xe0, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3e, &(0x7f0000001540)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000015c0), &(0x7f0000001600), 0x8, 0xe, 0x8, 0x8, &(0x7f0000001640)}}, 0x10)
pipe(&(0x7f00000017c0)={<r2=>0xffffffffffffffff})
write$cgroup_subtree(r2, &(0x7f0000001800)={[{0x2b, 'rlimit'}, {0x2d, 'hugetlb'}, {0x2d, 'rlimit'}, {0x2d, 'io'}, {0x2b, 'devices'}]}, 0x26)
sendmsg$kcm(r1, &(0x7f0000001440)={&(0x7f0000000080)=@rc={0x1f, @none, 0x23}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000100)="f4b02f72c0136f99c3b7618b749a3a67943f07a892cceaab6cb1c6014b3cbbe740675bb06239cc987eec7f693e42b36bf3d1b53a26317be273c467aaef6076162670a333dcba6414ddba7c1ca8445c198d5236254dc66411bb9105decd0b0cbe18801751de6c0df76b82efa8bdd321aa09b1507bae8a4ec7f6d879fb3a2c34f45fc21030357cd79ea24d0fe3d5ee17dc9af97262f25909efc50f7f1969e9fcb15f9baa2df078e9d9f6c080db0f7e870ba2bd8e1e03345ea7bd485b4365c026fe417a7c7db45dc0e84de85e14f9546fec5e197128", 0xd4}, {&(0x7f0000000200)="83f1a5870e4eb9e40691dd295b64482f30a7ded7e971bc93e53d1dba15d632982c0fdcd5a371611a6f091e6b67ab933c15a80542febd241d647a6e8a9cfa3ab6a32aeb6ba3b7b6ad29611101277271036614f50ab00681022aed1776e555dae9fa3c2b125bcd91b9357845438e0992c7c6d5193ae8de4073e7020ef9ca4554e82ddc7547085c90cc058f7e042210b10cdbdd0ae83654707fed8f756a31a0daa92a1c799b2322332abe0a8107a5cabf18c852abd8e800bbdf7d3478f46b8949", 0xbf}, {&(0x7f00000002c0)="75a1aed3cad64351ff7536d76e03ea4289b8e4c1919ced240883bf8d7512c8a6dc4848a085548b454f4b66b1124fb2977edbe77e466a4d4d294626324d3f26b8058e44af203cb297b20596690ea170c484e1b37ba02054960ae3d431e5dc32d3aaebde5966a232ecf22d48ee49e0f60a2d00d7388c1a0aa544096c643a77eeda418003f6965e28dcbf177eaa137a34a2e7a39b904870e6e1c22cece59615e3e57ae19658f6601c0731d6ab7ed472ea6f5959b66abde4", 0xb6}, {&(0x7f0000000380)="377a2952ea19e80a229d39", 0xb}], 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="10100000000000000000000006000000e43e01bba297f86045962796eefb5d798ca30b33730f57bf54eb26cc6a6c7328169be3da66d59e1e90bfbc2ed745a18b8cba55c74976d106eed7acd026ed5e00d832924af22fe363968825c2fc3b80be7c486885efcd50b46d3c59612b9b6d7e4a9585061cc1305d3c96cbf9f100da458b11791513b23aca0f5d597ba309ebe273c7e96432c6fdd6ac0915f80873fe667f439d4b9c785180ef4138d34c1abfd2f25385fb5de07245ef7a10317c4cf09d3f667065975e8b5c8521c1bec92523c5d7395579586683bc414de7e70e69976bd929f5f154754f02c40a1e913515c6bdc2bd635352ecdb9e39c247adde160181c645fcca18842dee093472e30e6668931e2a09e0c257658ed722ce7bf4945818974fe1b87250c05a7146be9a07f262716f975412b4763945d7cbd17ca65367b05328f7b16c1f0a1664d34ec5c19e0c77a5c7a23408bc5ed414e7a1f1250f1a3a751f3aeedabe3572e29baa357409175dc8647ebcf56ebadf2ad76dfa3cd4c58af8e6b9a73947803ade443b95b909c92cf063f979d1f3306e4304c9e3c5c628a1571575bc2e090a4ed62140ec66f35e40f038285edd396576887300c5495fe265af3b9b2580b16cb8953ae1c243cbff881c1a4defab02abd986cb48f30b094bdbcb667e049994191a6f47e351f6b0d95befbbdc709275c9e60ca7df507711479a67ae9bbcbaf51ec890670a35f6be0d0cafc61c3557328fd33213a0d71d865543d49f2e0076207f414eeea1788f6fc9faff3beb7201e237a21d9e33a3301dd548eb502ead0814924177ae774f51193ed709acdf626f510bd4229b4e7718abb8f482c865dc341c24f50695a27fa612bbff7877dbdc85d31f7a0909319931d182a401d398f2cc4d2e0fcb51a4d767affcdc26dbc1207dd86510fa9a7212db5a9556e7462b42f0a2f91e46efd4efd124c601d3e95f67eb126ca1d6fbe43c27e6b1da8859bd172b2dedd2b2e2d52c60b7dd2dfb3542b8e7b10fa94e6034d3c21d118a9a963061a1e6ccba36e047ebfdf6ebbfa2b4cab0cb966bc624843fd4c4f417599f8c0679e8e4f5b828447b2b6b36e43aededa9f89d2c3b0e42a1998682e75c4d721f2cb393e38e14f5f3d16afc404b2c7c2a188666faddc18e35d5b0e127daa324f52d3fe750e4fcad3c2f68b8f7da97054fa38199e3b3cc03be5b5565529a041c0676f7e79c3f1509947e5cde813fd71e8ba927349aabfb18d4119613ff2b534f592f4d2d452e91c1c7a4398b9342f13b55e54c68069306db9ccd4b2ace5f50041d8d2d3f88efc9e4486034b1e7d13b1e8a7a33ff4e760d06e7e1fafeeb5f3c210ed83a2620844e3c813158453e44793f0715b386e60d18a91fdd11002641d514b5dc7bff67eceeed89f6eddd8c4a02ee940f0154d25510be00c30db1259743d41870f9bad5e541e76470a5c722350791c7ebe3b24e5a7e2b2809c58a4e9b947689132aaa0ae5d0492464dc52816f7868bf0ed8b53fbc14e03de6dc73471c1692fa2fb11b80144c087287cb61bb82ca5e0066bfb5b036f0a48c8ca77a00914245a00c5d76b8ab43330ef45113735f49cb393bce2a766f7128a96c9ce233c414764d8b1f48b4dbf9eab94ca105dcfa2a8f3acb302f64e84b30f56ad55661db2e416a02ed61fa470bb452ec1e6469a569fce480fc7e4b5c116432c079df69db53048367af5023447da3a866880cbaebd7b3fceb5d0e469b8d586e1b6229c8e3454dd7fae101b5f6d8694df744c1fd0267b1d5d55a546478e689609bd24872e2324819d700a44df09bff93ef943178266b2c347f5b0b2676bb3dcba0988c78fdbe614fdf1610a0200d6100556a7c677b97c9b841fadbbab333317df827fa630c0a0e9820b0bf82faf2f42729e3d35e06beca5dabfa48864638d147464bc078142257647a4fa3ab685e341fb7f7dd5f3a7f2fef99a98ab2c6eee5cc9576386fc0d169f8eccfb1b88b6564fa1468dd2d60413e8ed3f21a25756a2fbf692ec8e07f1e20bc7ab28113609587605e23cc30f9e07de5eb9cd114c74bca0fa75271ff6dc26f73db6798be6065a6e38e9efb1f40fadfadaa9b49fb1f5c51b53f7a87370e3a31e34a18a33cd85d55fda7a6f56cb91e9b322462e795bbd17537992212214e06853e0315e2432d5c2fea944cba19ae00bcc34cd64e1b5bf683e18dee8090b54779046fa67c9075b33d6e24e6d7d1f23cc6760366fd1db8ca2d3e125591be3d904ca6344062c8a8a1bd286bd5b34465fa9e1e9a75821592b9f3b834db096ba1dbd63a5765d02dc72d9c42ed0e6ef580a6ea42482d9dfe2994873ee4414578f3b108421944b370820f134aa9e7f8a8e8289078d0a20e6dcd6ca24bd787b0f944f33c6e40ee722e727edcb68bcae94babde1f867b2f62b80404211407d8235e733f81894361547c58fa59be60bbc5d04939fbab4205de082f880f127f71d2bf33b6476bcdf24f24f509169e56455682629d74fd14797d8b870852bfd2fd08d19afb889d20865d2fa070236156fd8bb88a4aeb063b82603f54928fef6474b6956db28323739df99398fe9eea699aa96b68684464627ded171ece2158d04eaeba163f13c058041bf3f622182482d4539326ef66210088a4daae320158fab3489676ae14751e3ec373b1924de24c66532fd7ce105696638c47e904f93dda7a866bb3e1f5c95959cdbd0b8b95dca961a9c10fbc6a4a3df5fe66a3b48d0b71a34b04b2f6c1b12990240960c293cc2faae6b7b80e50e7698875b86743c623024b43fe6d034399d51fdacb163824d80ce4385edea22e1a33ce131b6b3ec7ee35992b86a1b331e87af3be696e9483237b5d9f330072451b5de718c58f25c97fcc1f26d6a0825aeeb0958ddd200f69b0e29f2e01b118e17339f19b247a6a7fcbb3c7fdf87afabec66dd340c0a5fb761d8e5f94f6904d602ebebc9819efeab4dd64f1d2b7a59a4c8e7d05bac57573cbc8ffc6ba67d9b27238234099d7c56c59b14695f5a19aac2e6936e3cbd237de1c96a5b4cdf6963372614b6d5a1e693473dad1cdf6087750d37ffd12f302fa27731e23b24b79a77a58f9305777868738c9a7323a1fe7525c639e8a9fbda70860dcf8e024e8b0ff51155b26aca5b7c2537bc8a7381688928f49a84d39b63ce60485b4317041c3a557458cc7731d045f9e77091a525d2c0fe6e5475fe73e962a7e8871d52d4113ae322b028a89608cd511e05aab2b56e3263ce1850ad0158a436cdb554ab66ad1b5bf09d61e134d92e24123718905fda14032a125d58e6ef31fd429e0877998463175a500cc4bdc6f49b40df68f601ec7add7b92d210ee18e2306890a22bb7435551a976008fa9141cec8339dc607975463624f93be81703a47e9cdb0aed14d80ec85b269eb97222065c6cd800b5b4a3aa91a56e5fe4500f21d071edd757a385f71bcb536fdea2a12d01c7f446cd26d62b9bb3ab1fd4b4b6da99f5d4c7b86cd46d7b87d63272f7a6cd909b9d7ab28ba5e5f13c6339ae91f56490f36c72efb68ed57a3e5e00bda81a041e041602eb8dbf4a59a219fe594302990f47b206bc4146de97931233d5d4ee24bb889f9142031f40a6fe45592af93c14f69dd0f0592e20ef277244a0e7f897cce0a8fdea18eb5d8d4f859def5f8de64cb071a3056c263dc446f4dd5f3e9a9d932e7c25e79b2ff3af9625d20f48bb54a04ccd889532e941f3af2f3171439d371b3ed865529489214b7af0848f696d8b2513778153cf409496c44d6898559a6eaa4c7b48177accac87bab4c1f3d2b58c71bdbe45be09f52da88094815a2975ff0ddd1e583cf4832ddf9bd4a333cb7b0a0859ce57e0a263a46142bf35ef1972310d90350a3e1712767f20622b446f302b14af6a05e8b781f5192d17412a1f408888bbdea08942504e03e2b23e3f3ffdc7cc7b5fe65137932836efd9351f65c1bb862599cad5a8aab66c94c18bbc2fa05564227b0691efdd130451fcb0b0138665515ca3285481b1a759d3b1f7284c5bc6f8053bec14ee2515a301a84205113fd3e0342113482b3ee73c329b7adbc3280d457bb58988bbbc5ad6d2564e8aa55178b5be42784b4a911ba5b1b78fde729c317dd8f42d00c941a47d4c186265b4428bbf374a9021b3a96497c0e69ac17f34dc6becea73cfb10f2fb3e21ab186b1a9ba17c29d173bcfe67ffb241366923842582f666db083e447d87f8911e532dcdf97e68b939ab86a27b9da964bfb1df61d16bf9a7b3ff752ff213eda4700d4c691467771877abbad6b3c96ce8b77257a1e72590aa9b6082cd85769cf36120ce1e11ad9847f96a3780dceb3ea9ae919d42cac458bfa6183328d1831f47af40eb3c67de5ffcff5c92d95b31430c5265f5208eb0654b926080b0087218831c2b4c0565fe4fc2b4ed7a2ad7f6f551b96ab5823c8d337e637cf99621d7edf44cf40a0a14cb8ce0b56db9bdb0d01d517af7973e1666f539f32c1697b803318065877d70a692216d6de35ec16cee402d9f7b1f3aa9f3c20ea5ffc47f16dab8c9e35d96c1cc7fad812c20eefa4bec5e9c41a0a321659f6e55b224a1501ea1f2a5584ba3f7f5d86f7cbc0551d058353700da15e9067f4ab6e1ce76a08febe8e27fed440a854c7632ae292bab3ff86dbf39c4ad39a4312f425b74574b0cb03bd3b4fe590ab692c4f6762d6ba8b4ab7f33e7279dd87ebe97497dc5049171c6f0173107a028c152a4c8a962878a5b90c38941fcf633edeeb1d4005a8bd4b22bee02b81ef359fda91a6e505326868591469d3b660f2a29812db34e27c767acad46f488a3b0c7d03b9ee7d02cbd07a4fcea2305b00fee106057f33d4ad36a8bedf5efe85d7b2ffe932b3127be3b48310d553f51f3ea4c3ae027e6e02fbcc6b01b9c09c54ef18f1d78ac35d44327b3b3f2d90470769f8f1695243a0619b8dcb4a8b812c384ecf5bbacc18496d967ceb20b7abc6aa34075660ed268b24dc8996b182df6bd27355a11c173bf5fe3eab136d968f64c2b0538574b0b45d9eb253b9e3b368e6b5130c8d445ae5913cf3156b20b637d0a1e21de2f39882ad27e6baf253ca311523a546bd1fc265083294ca60c0f6f54d6e2e602fa2c4c4c7ba9d7b77c6f7d68fa4e4860475565c94cac1461887c97d6ba2b759541233ac40ab0d6f40bfb2d3aff5c342d3cd61a74acb95f474398ebefa31a41f29195935d8de860e6d8281b32d3459b4c56eec053f299ddadc6bc3102424e529cbeaff977c3873fec51a326d95b7d40efb2382fe99acea9e79da710eec32f0374cbabac2b99503cbdd48adfce506481a9a4e22205ef74d3768c84c60a8cbb1c2a0b22a2fa78c3f0ff86b63dfa22f220b01bf8303fd695ac8a065a585a9539477003058482645ea869c7119231daaac1c604d7f98c72fad91f878b9ad3d00bf5512d74b4030c3870817454fe08d655c118d308a805e6d8d03c085a74a3eb68245beb1cb2071ff9cadb92f4f2ef421bed6c4e715efb75a65517afe92eb62ca887ec917797c13ea3f82112c44f4bd414352c270519b0f275588b9f8a2f15619d35b2ebd420983ab14ad00e34af1cf743430245365e3dc01573bb769bb25d2fca79893a07c3c0ae7d6e90d8b4bfea2036a84f46d81d4acbea0ec47d974162406aa76971dfeb7e1162355694e49b999173f7d4af69927c575757e1babfaee57e6053910afbd56050c3de5f648273af6708ea1bbe3753c9b8b30b210ddcf58eee0c3f5a9043df116e935b5ca5a2641ea987c865e9b03a58c58b115c5ca11502a87a39d85c2912ffa62ad68ec8409d5d57"], 0x1010}, 0x40001)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x22}, [@ldst={0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async)
socketpair(0x21, 0x6, 0x5, &(0x7f0000000000)) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001780)={r0, 0xe0, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3e, &(0x7f0000001540)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000015c0), &(0x7f0000001600), 0x8, 0xe, 0x8, 0x8, &(0x7f0000001640)}}, 0x10) (async)
pipe(&(0x7f00000017c0)) (async)
write$cgroup_subtree(r2, &(0x7f0000001800)={[{0x2b, 'rlimit'}, {0x2d, 'hugetlb'}, {0x2d, 'rlimit'}, {0x2d, 'io'}, {0x2b, 'devices'}]}, 0x26) (async)
sendmsg$kcm(r1, &(0x7f0000001440)={&(0x7f0000000080)=@rc={0x1f, @none, 0x23}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000100)="f4b02f72c0136f99c3b7618b749a3a67943f07a892cceaab6cb1c6014b3cbbe740675bb06239cc987eec7f693e42b36bf3d1b53a26317be273c467aaef6076162670a333dcba6414ddba7c1ca8445c198d5236254dc66411bb9105decd0b0cbe18801751de6c0df76b82efa8bdd321aa09b1507bae8a4ec7f6d879fb3a2c34f45fc21030357cd79ea24d0fe3d5ee17dc9af97262f25909efc50f7f1969e9fcb15f9baa2df078e9d9f6c080db0f7e870ba2bd8e1e03345ea7bd485b4365c026fe417a7c7db45dc0e84de85e14f9546fec5e197128", 0xd4}, {&(0x7f0000000200)="83f1a5870e4eb9e40691dd295b64482f30a7ded7e971bc93e53d1dba15d632982c0fdcd5a371611a6f091e6b67ab933c15a80542febd241d647a6e8a9cfa3ab6a32aeb6ba3b7b6ad29611101277271036614f50ab00681022aed1776e555dae9fa3c2b125bcd91b9357845438e0992c7c6d5193ae8de4073e7020ef9ca4554e82ddc7547085c90cc058f7e042210b10cdbdd0ae83654707fed8f756a31a0daa92a1c799b2322332abe0a8107a5cabf18c852abd8e800bbdf7d3478f46b8949", 0xbf}, {&(0x7f00000002c0)="75a1aed3cad64351ff7536d76e03ea4289b8e4c1919ced240883bf8d7512c8a6dc4848a085548b454f4b66b1124fb2977edbe77e466a4d4d294626324d3f26b8058e44af203cb297b20596690ea170c484e1b37ba02054960ae3d431e5dc32d3aaebde5966a232ecf22d48ee49e0f60a2d00d7388c1a0aa544096c643a77eeda418003f6965e28dcbf177eaa137a34a2e7a39b904870e6e1c22cece59615e3e57ae19658f6601c0731d6ab7ed472ea6f5959b66abde4", 0xb6}, {&(0x7f0000000380)="377a2952ea19e80a229d39", 0xb}], 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1010}, 0x40001) (async)

1.511306318s ago: executing program 4 (id=4311):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0)
r0 = socket$inet(0x2, 0x80001, 0x84)
r1 = socket$inet(0x2, 0x80001, 0x84)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4)
bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}}, 0x0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003240)={&(0x7f0000000180)=ANY=[@ANYBLOB="9d2e22b50ef41b58efebefb2414fe0656481123c9f6eaa73921440425c4e98398f392d9c8b09c755b799bb75f680da0409790505666611f41c68e0173dfa16045ca5fda91f7b1244da9a46d9a7ab17e42f9d627567e14fcfc75230f51e450b5174499a4979bb8bdc5d543f76c38f98d49176a7599b53ead933b6a43e72eeab2182d21012a222cd0191c34286567d8828cf084a1a47159387c5a1ed2bc7775cc55da384f6f3a839ef3e98ad7f046969cd656dca985e928ef215cebe"], 0x18}}, 0x0)
unshare(0x22020400)
setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000280), 0x4)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r6, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r7, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xfffffff2, 0x7f}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x1)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_AP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="bfd12cbd7000fddbdf251000000008000300", @ANYRES32, @ANYBLOB="e963db90458935ff19f0b48756644c59100fd723cefc85721e33ed80925e9887340e677ae939887ce2a78ad5bf0e501a7d0afa5c9106b97ac03b11c9c1d1996f63fec06664d0ba34f34eb20eea"], 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x4048002)
ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000000)={@private2, @private1})

1.293244953s ago: executing program 1 (id=4312):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x40, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x62b4e7cbb8b4f193}, 0x8040)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081130000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071106500000000001d300500000000004704000001ed00000f030000000000001d44020000000000620a00fe040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a8641aa05a1336b3b4c4becea710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343cccc953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c9102"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

1.170457884s ago: executing program 1 (id=4313):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000006800010000000000000000000200000000000000060007000800000008000500", @ANYRES32=r3, @ANYBLOB="18000880"], 0x40}}, 0x0) (async, rerun: 64)
sendmsg$qrtr(r2, &(0x7f0000000580)={&(0x7f0000000280)={0x2a, 0x0, 0x3fff}, 0xc, &(0x7f0000000540)=[{&(0x7f00000002c0)="015a75573cebd56804f622f9f977e8b676acce13e9add355d03157cb4f0bb1bf2f1f", 0x22}, {&(0x7f0000000440)="f8bb6c3a3b86709f7260097a0f715038d7d44d4d66819d9c0c76b4726ed183bcf1cc0a8cfc71be42b078754a63762e1ac711eba2a31e1fa637fda46a68f5073ab77c03c74a14856f8a89637b851ffafb263df2d8490c050c0dd78019755a3b9c28bded33a4b909a57f48e9d563834ff1e7d87661515a8fc210c880c4fb3d4a988ed8014cdbc4e023ee77c7df9796ecbd5833eff5133884bbd1a32033072f72cc108f6e3e9f43341b4c21a21af77166f1b56bc82ee5acfc5ec1345987ee3a37f1c33c92d95c3c", 0xc6}], 0x2, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x3e0, 0x20000000}, 0x38) (async, rerun: 64)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001800dd8d29bd700000000000020010897cbe436e2e8f0000ff0000060000007f0600150000000023100016800c00088060068de9cfdace25"], 0x34}}, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x1, 0x40, 0x9, 0x6, {{0x6, 0x4, 0x1, 0x4, 0x18, 0x66, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x22}, {[@noop]}}}}})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) (async)
socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001c00080029bd7000fedbdfc0c92196fb4de1a8251c0000005214f954d84cb4e0fcf50a4659dfed80bfb886b6a55e92d37cafdc832cfdc09571c025b0832d7f5a8df0c21f9ee6878c130f4debde9835be3ded196f9aa4f594ba033128bd057c16c7d389d3d9d1f4283c13b8424987e1e0efc7fb", @ANYRES64=r1, @ANYBLOB="800004081400030008000000f8ffffff030000008f00000008000100ac1414bb06000500020000000a000100ffffffffffff00000600f0db83f536e9c055"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x8081)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0)
r5 = socket(0x1e, 0x3, 0x2) (async)
sendto$inet(r2, &(0x7f00000005c0)="eb559a00651c441c1416211cf583c0c540baa7e71c81543afe2a5c80dc3277df18b5d89b70d7244660864de8a4fdcfa7d170ca9568ee0eceacea0e5766c7b4462c9e5287fb52bf2496cd05c26b3060d17acaef2b4c196d1201ff0e675dcc58dcdeeb7b115be1d5ff0686dd43a595eca8f8473c8516e5aace02d6dc8d16e2760b427d5bb82904447a3421bed40aee4495f11e5702cd0febdafd5dedce", 0x9c, 0x4001000, 0x0, 0x0) (async)
ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f0000000680)={0x0, 0x11, "5a767fa103ab2084082bf8cf24230f6ab4"}) (async, rerun: 32)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58000000020601080000270700000000000000000900020073797a31000000000500010007000000050005000a0000000c000780080006400007000011000300686173683a6e65742c6e657400000000050004"], 0x58}}, 0x0) (async)
write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24)

1.110527636s ago: executing program 4 (id=4314):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
r1 = socket(0x1d, 0x2, 0x6) (async)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0xa, @multicast, 'ip6tnl0\x00'}}, 0x1e)
r3 = socket$isdn(0x22, 0x2, 0x24)
close(r3) (async)
sendto(r2, 0x0, 0x0, 0x79990aa19219dbe7, 0x0, 0x0)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x6a, 0x5, 0x20000000, 0x3) (async, rerun: 32)
r4 = accept4$x25(r0, &(0x7f0000000040), &(0x7f0000000080)=0x12, 0x80800) (rerun: 32)
ioctl$SIOCX25GFACILITIES(r4, 0x89e2, &(0x7f00000000c0))

1.109199297s ago: executing program 3 (id=4315):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000300)={0x0, 0x4}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000300)={0x0, 0x4}, 0x8)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r2, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4)
r3 = socket$kcm(0x2, 0x0, 0x2)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000000)={0x17c04}) (async)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000000)={0x17c04})
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4050000000000007110770000000000460000000000000095000000004a000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x8}, 0x10, 0xffffffffffffffff}, 0x94)

1.052899595s ago: executing program 0 (id=4316):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='cdg\x00', 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x50}, 0x48)
syz_emit_ethernet(0x1a8, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0)

1.040979031s ago: executing program 2 (id=4317):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x8, 0x4, 0x4, 0x20007}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

942.336541ms ago: executing program 4 (id=4318):
syz_emit_ethernet(0x207, &(0x7f0000000040)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '@\x00', 0x1d1, 0x2c, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, @local, {[@srh={0xc, 0xa, 0x4, 0x5, 0x4, 0x10, 0x1, [@mcast2, @private0, @loopback, @mcast1, @empty]}, @dstopts={0x5f, 0x4, '\x00', [@hao={0xc9, 0x10, @loopback}, @pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}]}, @dstopts={0x48, 0x27, '\x00', [@ra, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @calipso={0x7, 0x50, {0x0, 0x12, 0x2, 0x7, [0x3, 0x7, 0xc2b, 0x8000, 0x1, 0x6, 0x4, 0x4, 0x7]}}, @enc_lim={0x4, 0x1, 0x4}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @ra={0x5, 0x2, 0x8}, @generic={0x75, 0xbe, "e55e6303298ee5ed4f52441bbdedc12a631326395fd94f41e29b383bba3d18dbc921a46ffef268c942dffa6c70568482f157f64d94628aadd70af3f5dd79e42ce3f8c7f4cb4240d772cd54ff282269f6e344c85dac2a50a2d9ba7bfe63c276129285aea9e33b7b99212240b9e473407aace2fa6de06d0737776245dbdf80356f78be8d55a5b4048abbbcb1c36fc8520640617e32f4f927717fcc3f5982c921b420ad5984a8208d47003324a8fb4f42172af24cd9e9cdf58d6a4dceba0bef"}, @ra={0x5, 0x2, 0x6}]}], '3'}}}}}, 0x0)
r0 = socket(0x11, 0x800000002, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000200)={'ipvlan0\x00', {0x2, 0x0, @loopback=0xac141437}})
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}})
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="68000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a30000000002000078005000300000000000c0001800800014080ffffff05001400fa00000005000500020000000500010006"], 0x68}}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0)
write$nci(r1, &(0x7f0000001800)=ANY=[@ANYBLOB="710502180102820681055a05997713b9affa06070203267a53"], 0x19)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x5, 0xe, 0x0, &(0x7f0000000000)="251200d800"/14, 0x0, 0x7ff, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r9 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000280)={0x8, @dev={0xac, 0x14, 0x14, 0x21}, 0x4e20, 0x3, 'sh\x00', 0x28, 0x2792, 0x45}, 0x2c)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x20004000}, 0x814)

938.074699ms ago: executing program 1 (id=4319):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x60}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x3, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4081)

857.448258ms ago: executing program 0 (id=4320):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x20) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x20)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000100000000000200000000000000", @ANYRES32=r1, @ANYBLOB="408f010008200200280012800e0001006970366772657461700000001400028006001100"], 0x48}}, 0x0)

835.352229ms ago: executing program 1 (id=4321):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r2, 0x9fe4a776c35cd1bf, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x4048002) (fail_nth: 6)

694.486972ms ago: executing program 2 (id=4322):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', <r2=>0x0})
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) (async)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendfile(r4, r3, 0x0, 0xfffbffff)
syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xffffffda}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001300)=@newtfilter={0x70, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_ACT={0x34, 0x1, [@m_police={0x30, 0x9, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001300)=@newtfilter={0x70, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_ACT={0x34, 0x1, [@m_police={0x30, 0x9, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000500)={&(0x7f0000000040), 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1d4, r5, 0x100, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r2}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000804)
r10 = socket(0x18, 0x0, 0x1)
getsockopt$nfc_llcp(r10, 0x111, 0x0, 0x0, 0x90aa62107f0000)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2, 0x20000000}, 0x10)
unshare(0x42000000) (async)
unshare(0x42000000)

637.145292ms ago: executing program 0 (id=4323):
r0 = socket(0x10, 0x803, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r1 = socket(0x8, 0x0, 0x8000)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20)
ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0)
recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10002, 0x0)
sendmmsg$inet6(r0, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="73abd9fefb4d169a1bafa26d535011a7063b6ca398c09a89fda1a123412a1b67e0ceab7373d90a810cf593c061bc14f0a54356d1929231ebe8b804ffa7f1381a6b0ef3b6024d3de7c54b5c644cdff7cbe142f2cb67271f38dbc690fe93370bdf2a8ce953c8ddd9b22c0c89f3882505d14e493364b77fe76931bff53138b93937780ab4d0b735412fd9d8", 0x8a}], 0x1}}], 0x1, 0xc0000)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x200004, 0x0, 0x1}})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000ab0c000003000000020000009c0a0000", @ANYRES32, @ANYBLOB="d8bf00000000000000000000000a00000000000086", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="01000000010000000300"/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r4}, &(0x7f0000000240), &(0x7f00000004c0)=r2}, 0x20)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES16=r2, @ANYBLOB="010028bd700000000000020000002c00078008000200040000000c000300040000000000000008000200ffffffff0c00040003000000000000006c000580070001006962000007000100696200002c0002800800010000000000080003000b0000000800020044fc000008000300ffffff7f0800020001000000080001007564700024000280080004000000000008000100080000001800028014000380080001008100000008000200fdffffff0000000000"], 0xc4}, 0x1, 0x0, 0x0, 0x20044080}, 0x0)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x4}, &(0x7f00000000c0)=0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x68060a00)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0)
socket$rds(0x15, 0x5, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000021c0), 0x0, 0x42, &(0x7f0000002300))
socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x3e2c02, 0x0)

344.120792ms ago: executing program 3 (id=4324):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x24040804)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x0)
r3 = socket$caif_stream(0x25, 0x1, 0x0)
setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f0000000c80)=0xe3, 0x4) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0x1, <r4=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000280)='%pK    \x00'}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000440)}, 0x20) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={0x1}, 0x4) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000540)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x1}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000000}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @jmp={0x5, 0x1, 0x1, 0xa, 0x0, 0x6, 0x1}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x10, 0x9}, 0x90) (async)
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x891e, 0x0) (async)
connect$caif(r3, &(0x7f0000000cc0), 0x18)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)

170.35306ms ago: executing program 3 (id=4325):
r0 = socket$alg(0x26, 0x5, 0x0) (async)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r1, &(0x7f0000001640)=[{{&(0x7f0000000640)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000001140)="c59a9693bd6a6c6f68ff71648498a367bdd52f96c8c8c32944821a214b18eeae3026eca24316d74dab904d48ca637f80acae1aed1a92b9eeed726e39fcb8852848a8ef3dc763d87488bad0b1ccc03b780aaedb671c0405a083db6ac3d2c0c643d53d0280347df6222f5ebdfdf9c27d021458b1368ab240eca40fb3329706f869d159def1c4feab40790624fefb6174e24d0334afa341225350a6236445cb9a29929abae2e059732f998afc3b4226190bc6aa0ea3e9413c92a8dafb1d594ff2e1759d8d616e450534a0f3b97c544b397a9e7d915cabfa37e0b30859a9", 0xdc}], 0x1}}, {{&(0x7f0000000480)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000800)="931748ffe238461bdd06ee7e0d91513b33ece4dcaea59e2e0347875bf70f67848d383772091cd824a63ddbe4c37eaa9010826853e1b39394932183afd94615404d05a248bd0e18029c91f1", 0x4b}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r2=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0x2}, 0x8) (async, rerun: 64)
bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) (rerun: 64)
socketpair(0xf, 0x0, 0x2, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x84, r4, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x84}, 0x1, 0x0, 0x0, 0x8800}, 0x4) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async, rerun: 64)
r5 = socket(0x10, 0x803, 0x0) (rerun: 64)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 32)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(0x0, r7) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, 0x0) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(r7, 0x0, 0x0) (async, rerun: 32)
r8 = socket(0x1, 0x803, 0x0) (rerun: 32)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x50}}, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) (async)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x0, 0x22}}}}}, 0x0)

13.102895ms ago: executing program 1 (id=4326):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000c40)={@empty, @local}, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x43c, r3, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x3b9, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_b, @initial, {0xe, 0x6}}, @val={0x0, 0x1a, @random="982c407fd820f2aface8aeb823fa33f89f26da79b5be28009397"}, @val={0x1, 0x6, [{0xc, 0x1}, {0x2, 0x1}, {0x36}, {0x6, 0x1}, {0xc, 0x1}, {0xb, 0x1}]}, @val={0x3, 0x1, 0x1}, @void, @val={0x72, 0x6}, [{0xdd, 0xb4, "a282608b016c926fbc0de208a63d2d96780f3b75d6eaaac390718d6b1af691b7b6523efda5ee25e91070d944b60de809a232475ed7d2a1b9c12088ebb478f2552a0eda50f891fa1ba0b52619a8c4298fc7e16826ec62818c6cf84549b913eaa3c48e433d1cb077ff07947a7fde6e866ab58d4518a9c8ad96a10c9b698b99a11ad0baaf013501810329584724d3f484af78f0d1be86127fed61a56bb507298431fdb7ef46291d3a011850588b2cfa9762ba74fed2"}, {0xdd, 0xf7, "7db3eccde867973617853ff353ef1e90986b2dc7e29814684224d4df667862f18e3cc57e75cad95a36c36d0e3390f9168e67b2793cebb55d50da652a75881242c9ed40b28acdc5d896a4eac9758e940ccfd4c7d85300972046baa38d5596ebb8a85d67a073a4994b76bbf7eb2c42633effeaada22100ac6e323fb4fe0975dd48fda363bb1ec584459c90cdcad8152edcb5bc2af915a1c6244428717f1c5d15163f4729c546460eb24d03845e70046e3b70a06daec929e392266ab3fbdf23e12209cb1b96a890226f72dc84d6c94f3dd18a56dfe960117381b758f73e536d8c693ac065a3a3790aed6e44fc65758515ff998206484c7586"}, {0xdd, 0x17, "c6fd2d268db5733d8bf00163ff07abcef860e0616c2291"}, {0xdd, 0x8, "b006e4834e7c72bb"}, {0xdd, 0xde, "4810bb19427a22053ffc24a8274ee6e080d8427e7843172ab5f9f917672aacf150cc15d19dcdad584e89915a3d4b6837be2a77a663adbec665fe701e9f879e8e27a3c60a64029a735fb3c348a8586a408706ff393590f7fb1923efb38c3f571f9582be1ec100e604383cf632b2dd861c59b2ebdaa8c95c716877b8018235f4fdbb3d376042f6a4f8e1c7c789fc8188ef85d24c2a326c8373a42a5d3ffa345bae32cbe12dd8c9bfba9b4878a9b0a1cd49ca3279a5604cb5792c11a523e2ae9bf1f792aadecb9dd803c9acc5324737e567a709efe67f4c68a299b550ad2351"}, {0xdd, 0xba, "6c92c7500160602ab86a05031add9e8dbd07b80acf70e96a4490031e09a80f02c49ed947674aa8fe53092b74f05a1cf87169023e166fa7b5b7ecf566ae6065cde17dad347f6c9b5bb2b1e95e9147e6f2681c6e5ccac744bb09fe8f2d3ff720b47217448ecb44f4ddea3d63718fa62e2692d08decfd1702b68387a2af20ba5bcec3cc7eaeff6a5232dc91fde61c396dadfc34375aacb5445513a121a83befc9e547f39d65768f34080d62817610c900cd8f050fb4438ec53f9c6a"}]}}, @NL80211_ATTR_FRAME={0x62, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x10}, @broadcast, @device_a, @initial, {0xc, 0x9}, @value=@ver_80211n={0x0, 0x62, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0x0, 0x2, {0x0, 0x20, @random="dc163e2684a46b566800013c4a5c9a0c0000958474a4c78fed00000000000000"}, @void, @val={0x2d, 0x1a, {0x80, 0x2, 0x2, 0x0, {0xf, 0x9, 0x0, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x8, 0x3, 0x5}}}}]}, 0x43c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

0s ago: executing program 2 (id=4327):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_emit_ethernet(0x32, &(0x7f0000000500)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}}}}}}}, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c9", 0x1)
syz_emit_ethernet(0x29, &(0x7f0000000000)={@random="37d1a525beb8", @empty, @void, {@generic={0x9200, "fffe370d85c68c7509402a333f5f8fc48c2946b826443cfb9b34b9"}}}, &(0x7f0000000040)={0x0, 0x3, [0xc97, 0x1aa, 0xcdf, 0x5ef]})

kernel console output (not intermixed with test programs):

340.766683][T10470] bond9 (unregistering): Released all slaves
[  340.793224][T15394] macvtap0: entered allmulticast mode
[  340.801988][T15394] macvtap0: refused to change device tx_queue_len
[  340.913790][T15401] __nla_validate_parse: 54 callbacks suppressed
[  340.913810][T15401] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2791'.
[  340.968088][T10470] tipc: Disabling bearer <eth:syzkaller0>
[  341.010812][T10470] tipc: Left network mode
[  341.198667][T15412] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2793'.
[  341.236817][T15412] netlink: 'syz.0.2793': attribute type 4 has an invalid length.
[  341.236873][T10470] IPVS: stopping master sync thread 6077 ...
[  341.300588][T15413] team0: Device gtp0 is up. Set it down before adding it as a team port
[  341.365907][T15422] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2793'.
[  341.499166][T15424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2797'.
[  341.535106][T15426] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  341.611258][T15424] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2797'.
[  341.734456][T15436] netlink: 'syz.3.2800': attribute type 4 has an invalid length.
[  341.998953][T15340] chnl_net:caif_netlink_parms(): no params data found
[  341.999155][T15443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2803'.
[  342.316757][ T5858] Bluetooth: hci2: command tx timeout
[  342.681165][T15467] netlink: 212216 bytes leftover after parsing attributes in process `syz.4.2809'.
[  342.950917][T15486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2814'.
[  342.964661][T15487] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2813'.
[  343.051914][T15340] bridge0: port 1(bridge_slave_0) entered blocking state
[  343.082800][T15340] bridge0: port 1(bridge_slave_0) entered disabled state
[  343.098006][T15340] bridge_slave_0: entered allmulticast mode
[  343.149498][T15340] bridge_slave_0: entered promiscuous mode
[  343.153890][T15493] netlink: 'syz.4.2815': attribute type 7 has an invalid length.
[  343.181924][T15340] bridge0: port 2(bridge_slave_1) entered blocking state
[  343.210492][T15340] bridge0: port 2(bridge_slave_1) entered disabled state
[  343.213422][T15493] netlink: 'syz.4.2815': attribute type 8 has an invalid length.
[  343.237060][T15340] bridge_slave_1: entered allmulticast mode
[  343.302503][T15340] bridge_slave_1: entered promiscuous mode
[  343.340624][T15507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2816'.
[  343.627287][T10470] hsr_slave_0: left promiscuous mode
[  343.646987][T10470] hsr_slave_1: left promiscuous mode
[  343.750133][T10470] veth1_vlan: left promiscuous mode
[  343.768293][T10470] veth0_vlan: left promiscuous mode
[  344.397933][ T5858] Bluetooth: hci2: command tx timeout
[  344.830332][T15532] bond10: (slave wlan0): Releasing active interface
[  344.868738][T15532] bond3: (slave gretap1): Releasing active interface
[  344.899031][T15532] bond4: (slave macvlan3): Releasing backup interface
[  344.908437][T15532] vlan1: left allmulticast mode
[  344.913359][T15532] veth0_vlan: left allmulticast mode
[  344.919166][T15532] vlan1: left promiscuous mode
[  344.927555][T15532] bond7: (slave gretap2): Releasing active interface
[  344.953255][T15536] tipc: Enabling of bearer <eth:vlan1> rejected, failed to enable media
[  344.982372][T15340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  345.003899][T15340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  345.212018][T15340] team0: Port device team_slave_0 added
[  345.231469][T15340] team0: Port device team_slave_1 added
[  345.398134][T15340] batman_adv: batadv0: Adding interface: batadv_slave_0
[  345.405149][T15340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  345.497397][T15340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  345.536786][T15340] batman_adv: batadv0: Adding interface: batadv_slave_1
[  345.584763][T15340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  345.647569][T15340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  345.812379][T15340] hsr_slave_0: entered promiscuous mode
[  345.833039][T15340] hsr_slave_1: entered promiscuous mode
[  345.857188][T10470] IPVS: stop unused estimator thread 0...
[  346.228969][T15594] xt_hashlimit: size too large, truncated to 1048576
[  346.247976][T15595] netlink: 'syz.3.2839': attribute type 4 has an invalid length.
[  346.288754][T15595] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2839'.
[  346.339895][T15600] netlink: 'syz.4.2840': attribute type 11 has an invalid length.
[  346.355584][T15600] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2840'.
[  346.477854][ T5858] Bluetooth: hci2: command tx timeout
[  346.791061][T15613] macvlan0: entered promiscuous mode
[  346.813278][T15613] macvlan0: entered allmulticast mode
[  347.068989][T15617] netlink: 'syz.4.2843': attribute type 21 has an invalid length.
[  347.078706][T15617] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2843'.
[  347.094371][T15617] netlink: 'syz.4.2843': attribute type 5 has an invalid length.
[  347.114050][T15617] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2843'.
[  347.500665][T15340] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  347.547146][T15340] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  347.582455][T15340] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  347.621294][T15340] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  347.824644][T15652] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2854'.
[  347.853239][T15652] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2854'.
[  347.877684][T15652] netlink: 'syz.2.2854': attribute type 6 has an invalid length.
[  347.890984][T15652] netlink: 'syz.2.2854': attribute type 5 has an invalid length.
[  347.910189][T15652] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2854'.
[  347.925269][T15340] 8021q: adding VLAN 0 to HW filter on device bond0
[  348.004713][T15340] 8021q: adding VLAN 0 to HW filter on device team0
[  348.024108][T10470] bridge0: port 1(bridge_slave_0) entered blocking state
[  348.031324][T10470] bridge0: port 1(bridge_slave_0) entered forwarding state
[  348.077958][T10470] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.086027][T10470] bridge0: port 2(bridge_slave_1) entered forwarding state
[  348.151052][T15664] xt_nfacct: accounting object `syz1' does not exists
[  348.322345][T15670] netlink: 'syz.0.2860': attribute type 1 has an invalid length.
[  348.326298][T15672] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  348.370562][T15670] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2860'.
[  348.403078][T15673] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2862'.
[  348.429923][T15676] netlink: 'syz.3.2861': attribute type 178 has an invalid length.
[  348.672981][T15340] 8021q: adding VLAN 0 to HW filter on device batadv0
[  348.836404][T15340] veth0_vlan: entered promiscuous mode
[  348.878194][T15340] veth1_vlan: entered promiscuous mode
[  348.931989][T15340] veth0_macvtap: entered promiscuous mode
[  348.954367][T15340] veth1_macvtap: entered promiscuous mode
[  349.009872][T15340] batman_adv: batadv0: Interface activated: batadv_slave_0
[  349.023956][T15340] batman_adv: batadv0: Interface activated: batadv_slave_1
[  349.071259][T15340] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  349.091796][T15340] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  349.102516][T15707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2868'.
[  349.122952][T15340] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  349.132365][T15340] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  349.152259][T15710] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  349.161620][T15711] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  349.169762][T15710] netlink: 'syz.4.2869': attribute type 13 has an invalid length.
[  349.292896][T15710] 8021q: adding VLAN 0 to HW filter on device team0
[  349.413743][T15710] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  349.651529][T10467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  349.681891][T10467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  349.781075][T10467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  349.794994][T10467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  349.806646][T15731] netlink: 'syz.2.2876': attribute type 83 has an invalid length.
[  349.828006][T15732] netlink: 'syz.2.2876': attribute type 11 has an invalid length.
[  350.013484][T15745] netlink: 'syz.2.2880': attribute type 24 has an invalid length.
[  350.827388][T15769] erspan0: entered promiscuous mode
[  350.855198][T15769] erspan0: left promiscuous mode
[  351.238617][ T5866] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  351.255833][ T5866] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  351.264430][ T5866] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  351.272686][ T5866] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  351.280754][ T5866] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  351.324854][T15788] sctp: [Deprecated]: syz.3.2892 (pid 15788) Use of struct sctp_assoc_value in delayed_ack socket option.
[  351.324854][T15788] Use struct sctp_sack_info instead
[  351.405312][T15791] validate_nla: 1 callbacks suppressed
[  351.405331][T15791] netlink: 'syz.0.2893': attribute type 62 has an invalid length.
[  351.530287][T10467] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  351.565778][T10467] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.579882][T10467] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  351.599585][T15804] __nla_validate_parse: 9 callbacks suppressed
[  351.599606][T15804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2895'.
[  351.636521][T15803] netlink: 'syz.1.2897': attribute type 29 has an invalid length.
[  351.742619][T10467] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  351.766884][T10467] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.778765][T10467] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  351.806397][T15803] netlink: 'syz.1.2897': attribute type 29 has an invalid length.
[  351.856489][T15808] netlink: 'syz.1.2897': attribute type 29 has an invalid length.
[  351.867483][T15813] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2898'.
[  351.867627][T15808] netlink: 'syz.1.2897': attribute type 29 has an invalid length.
[  351.899988][T15810] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2895'.
[  351.930848][T15810] tc_dump_action: action bad kind
[  352.059905][T10467] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  352.084323][T10467] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.114288][T10467] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  352.172105][T15828] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2901'.
[  352.210643][T15825] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2900'.
[  352.266726][T15825] openvswitch: netlink: VXLAN extension message has 12 unknown bytes.
[  352.278366][T10467] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  352.291787][T15833] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2901'.
[  352.317796][T10467] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.354538][T10467] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  352.488759][T15838] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2903'.
[  352.690113][T15850] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2907'.
[  352.721626][T15784] vxcan1 speed is unknown, defaulting to 1000
[  352.809907][T15854] netlink: 'syz.2.2909': attribute type 33 has an invalid length.
[  352.828725][T15854] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2909'.
[  353.060162][T15867] tipc: Resetting bearer <eth:team0>
[  353.157535][T15829] siw: device registration error -23
[  353.359969][ T5858] Bluetooth: hci3: command tx timeout
[  353.645145][T10467] bridge3: port 1(bond8) entered disabled state
[  353.697376][T15897] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2918'.
[  353.930241][T10467] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface
[  353.938859][T10467] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 86:0a:f7:54:9a:ae - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  354.084116][T10467] bond3 (unregistering): (slave gretap1): Releasing active interface
[  354.111079][T10467] bond5 (unregistering): (slave gretap2): Releasing active interface
[  354.200094][T10467] bond7 (unregistering): (slave geneve3): Releasing active interface
[  354.211229][T10467] geneve3 (unregistering): left promiscuous mode
[  354.474627][T10467] bond0 (unregistering): (slave veth3): Releasing backup interface
[  354.486532][T10467] bond0 (unregistering): Released all slaves
[  354.502688][T10467] bond1 (unregistering): (slave veth7): Releasing backup interface
[  354.512916][T10467] bond1 (unregistering): Released all slaves
[  354.627669][T10467] bond2 (unregistering): Released all slaves
[  354.735123][T10467] bond3 (unregistering): Released all slaves
[  354.750560][T10467] bond4 (unregistering): Released all slaves
[  354.854185][T10467] bond5 (unregistering): Released all slaves
[  354.871897][T10467] bond6 (unregistering): Released all slaves
[  354.970549][T10467] bond7 (unregistering): Released all slaves
[  355.078760][T10467] bond8 (unregistering): Released all slaves
[  355.339972][T15912] (unnamed net_device) (uninitialized): (slave ip_vti0): Device is not bonding slave
[  355.378329][T15912] (unnamed net_device) (uninitialized): option active_slave: invalid value (ip_vti0)
[  355.434208][T10467] tipc: Left network mode
[  355.436598][ T5858] Bluetooth: hci3: command tx timeout
[  355.543354][T15929] bridge_slave_0: left allmulticast mode
[  355.580072][T15929] bridge_slave_0: left promiscuous mode
[  355.591850][T15929] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.631038][T15929] bridge_slave_1: left allmulticast mode
[  355.654912][T15929] bridge_slave_1: left promiscuous mode
[  355.664310][T15929] bridge0: port 2(bridge_slave_1) entered disabled state
[  355.700175][T15929] bond0: (slave bond_slave_0): Releasing backup interface
[  355.724524][T15929] bond0: (slave bond_slave_1): Releasing backup interface
[  355.757866][T15929] team0: Port device team_slave_0 removed
[  355.771954][T15929] team0: Port device team_slave_1 removed
[  355.779307][T15929] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  355.789634][T15929] batman_adv: batadv0: Removing interface: batadv_slave_0
[  355.798452][T15929] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  355.806351][T15929] batman_adv: batadv0: Removing interface: batadv_slave_1
[  356.070930][T15784] chnl_net:caif_netlink_parms(): no params data found
[  356.636966][T15984] __nla_validate_parse: 7 callbacks suppressed
[  356.636987][T15984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2941'.
[  356.663932][T15984] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2941'.
[  356.793754][T15984] netlink: 'syz.2.2941': attribute type 4 has an invalid length.
[  356.836952][T15784] bridge0: port 1(bridge_slave_0) entered blocking state
[  356.868556][T15784] bridge0: port 1(bridge_slave_0) entered disabled state
[  356.889425][T15784] bridge_slave_0: entered allmulticast mode
[  356.964606][T15784] bridge_slave_0: entered promiscuous mode
[  356.993129][T15784] bridge0: port 2(bridge_slave_1) entered blocking state
[  357.030396][T15784] bridge0: port 2(bridge_slave_1) entered disabled state
[  357.057955][T15784] bridge_slave_1: entered allmulticast mode
[  357.123092][T15784] bridge_slave_1: entered promiscuous mode
[  357.490460][T10467] hsr_slave_0: left promiscuous mode
[  357.507000][T10467] hsr_slave_1: left promiscuous mode
[  357.513085][T10467] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  357.515752][ T5858] Bluetooth: hci3: command tx timeout
[  357.524420][T10467] batman_adv: batadv0: Removing interface: batadv_slave_0
[  357.539462][T10467] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  357.556061][T10467] batman_adv: batadv0: Removing interface: batadv_slave_1
[  357.593155][T10467] veth0_macvtap: left promiscuous mode
[  357.614394][T16029] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  357.723434][T16034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2956'.
[  357.769403][T16036] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  357.930053][T16043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2956'.
[  358.126417][T10467] team0 (unregistering): Port device team_slave_1 removed
[  358.171410][T10467] team0 (unregistering): Port device C removed
[  358.552776][T15784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  358.724506][T15784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  358.873879][T15784] team0: Port device team_slave_0 added
[  358.909805][T15784] team0: Port device team_slave_1 added
[  359.053070][T15784] batman_adv: batadv0: Adding interface: batadv_slave_0
[  359.068444][T15784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.096443][T15784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  359.133918][T16064] ip6tnl3: entered promiscuous mode
[  359.146921][T16064] ip6tnl3: entered allmulticast mode
[  359.151546][T10467] IPVS: stop unused estimator thread 0...
[  359.173689][T16065] dvmrp0: entered allmulticast mode
[  359.180043][T15784] batman_adv: batadv0: Adding interface: batadv_slave_1
[  359.187237][T15784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  359.216750][T15784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  359.232812][T16066] dvmrp0: left allmulticast mode
[  359.379169][T15784] hsr_slave_0: entered promiscuous mode
[  359.400041][T15784] hsr_slave_1: entered promiscuous mode
[  359.409665][T15784] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  359.420903][T15784] Cannot create hsr debugfs directory
[  359.454756][T16078] netlink: 'syz.0.2968': attribute type 1 has an invalid length.
[  359.470169][T16078] netlink: 'syz.0.2968': attribute type 1 has an invalid length.
[  359.595589][ T5858] Bluetooth: hci3: command tx timeout
[  359.684725][T16090] x_tables: ip6_tables: tcp match: only valid for protocol 6
[  359.931688][T16105] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2973'.
[  359.948869][T16096] bond9 (unregistering): Released all slaves
[  360.739364][T16153] netlink: 'syz.0.2987': attribute type 1 has an invalid length.
[  360.779119][T16153] netlink: 15 bytes leftover after parsing attributes in process `syz.0.2987'.
[  360.798502][T15784] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  360.820905][T15784] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  360.867602][T15784] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  360.898683][T15784] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  361.039002][T16170] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2990'.
[  361.152398][T15784] 8021q: adding VLAN 0 to HW filter on device bond0
[  361.235283][T15784] 8021q: adding VLAN 0 to HW filter on device team0
[  361.277035][ T7590] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.284190][ T7590] bridge0: port 1(bridge_slave_0) entered forwarding state
[  361.362619][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  361.369978][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  361.572453][T16191] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2997'.
[  361.908722][T15784] 8021q: adding VLAN 0 to HW filter on device batadv0
[  362.385572][T16230] openvswitch: netlink: IP tunnel dst address not specified
[  362.492949][T16230] bridge0: entered promiscuous mode
[  362.511326][T16234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3007'.
[  362.524809][T16230] macvtap1: entered allmulticast mode
[  362.537730][T16230] bridge0: entered allmulticast mode
[  362.556254][T16240] xt_addrtype: ipv6 does not support BROADCAST matching
[  362.563339][T16234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3007'.
[  362.584960][T16230] bridge0: port 1(macvtap1) entered blocking state
[  362.592106][T16230] bridge0: port 1(macvtap1) entered disabled state
[  362.626634][T16230] bridge0: left allmulticast mode
[  362.649010][T16230] bridge0: left promiscuous mode
[  362.711955][T16243] netlink: 'syz.2.3009': attribute type 8 has an invalid length.
[  362.903048][T15784] veth0_vlan: entered promiscuous mode
[  362.951607][T15784] veth1_vlan: entered promiscuous mode
[  362.973890][T16258] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3012'.
[  363.030717][T16259] xt_recent: Unsupported userspace flags (00000061)
[  363.032919][T16266] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3012'.
[  363.065102][T16261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3014'.
[  363.155254][T15784] veth0_macvtap: entered promiscuous mode
[  363.245747][T15784] veth1_macvtap: entered promiscuous mode
[  363.311595][T15784] batman_adv: batadv0: Interface activated: batadv_slave_0
[  363.339328][T15784] batman_adv: batadv0: Interface activated: batadv_slave_1
[  363.395996][T15784] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  363.420136][T15784] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  363.431796][T15784] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  363.443767][T15784] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  363.539214][T16275] syz.2.3017 (16275) used greatest stack depth: 17992 bytes left
[  363.652413][T16285] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3022'.
[  363.718722][T10470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  363.746622][T10470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  363.818442][T10469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  363.832597][T10469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  363.951363][T16299] Bluetooth: MGMT ver 1.23
[  364.301609][T16312] netlink: 'syz.3.3028': attribute type 1 has an invalid length.
[  364.310268][T16312] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3028'.
[  364.326106][T16312] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3028'.
[  364.860433][T16330] tipc: Started in network mode
[  364.878101][T16330] tipc: Node identity , cluster identity 4711
[  364.905322][T16330] tipc: Failed to obtain node identity
[  364.931554][T16330] tipc: Enabling of bearer <eth:ip6gre0> rejected, failed to enable media
[  364.983241][ T5866] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  365.001773][ T5866] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  365.021512][ T5866] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  365.048498][ T5866] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  365.057937][ T5866] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  365.140951][T10469] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.258126][T16347] 8021q: VLANs not supported on xfrm0
[  365.340697][T10469] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.473442][T10469] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.500995][T16369] nbd: must specify a size in bytes for the device
[  365.596294][T16370] team0: Device vti0 is up. Set it down before adding it as a team port
[  365.699635][T10469] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.898410][T16391] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3051'.
[  366.126644][T16337] vxcan1 speed is unknown, defaulting to 1000
[  366.186961][T10469] tipc: Resetting bearer <eth:xfrm0>
[  366.263237][T16407] xt_ecn: cannot match TCP bits for non-tcp packets
[  366.572203][T10469] tipc: Disabling bearer <eth:xfrm0>
[  366.723627][T16412] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.3057'.
[  367.124144][ T5858] Bluetooth: hci0: command tx timeout
[  367.169371][T10469] bond0 (unregistering): Released all slaves
[  367.274234][T10469] bond1 (unregistering): Released all slaves
[  367.294791][T10469] bond2 (unregistering): Released all slaves
[  367.323091][T16408] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR
[  367.481548][T10469] tipc: Disabling bearer <udp:syz1>
[  367.543675][T10469] tipc: Left network mode
[  368.089202][T16451] xt_CT: No such helper "snmp"
[  368.146172][T16399] vxcan1 speed is unknown, defaulting to 1000
[  368.329751][T16337] chnl_net:caif_netlink_parms(): no params data found
[  368.850554][T16481] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3072'.
[  369.125187][T16337] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.140789][T16337] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.150369][T16337] bridge_slave_0: entered allmulticast mode
[  369.202350][ T5858] Bluetooth: hci0: command tx timeout
[  369.250660][T16337] bridge_slave_0: entered promiscuous mode
[  369.260540][T16337] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.268676][T16337] bridge0: port 2(bridge_slave_1) entered disabled state
[  369.284212][T16337] bridge_slave_1: entered allmulticast mode
[  369.309140][T16337] bridge_slave_1: entered promiscuous mode
[  369.581126][T10469] hsr_slave_0: left promiscuous mode
[  369.624603][T10469] hsr_slave_1: left promiscuous mode
[  369.664474][T10469] veth0_macvtap: left allmulticast mode
[  369.686220][T10469] veth0_macvtap: left promiscuous mode
[  369.695298][T10469] veth1_macvtap: left promiscuous mode
[  370.528410][ T1566] smc: removing ib device sûÿ2
[  370.971217][T16337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  370.990565][ T6010] vxcan1 speed is unknown, defaulting to 1000
[  371.012279][ T6010] sûÿ2: Port: 1 Link DOWN
[  371.104735][T16509] veth0_to_hsr: entered allmulticast mode
[  371.151613][T16337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  371.285575][ T5858] Bluetooth: hci0: command tx timeout
[  371.542649][T16337] team0: Port device team_slave_0 added
[  371.574568][T16337] team0: Port device team_slave_1 added
[  372.043622][T16337] batman_adv: batadv0: Adding interface: batadv_slave_0
[  372.068922][T16337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  372.187038][T16337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  372.267250][T16337] batman_adv: batadv0: Adding interface: batadv_slave_1
[  372.282384][T16337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  372.351996][T16549] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3089'.
[  372.384370][T16337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  372.680106][T16337] hsr_slave_0: entered promiscuous mode
[  372.698164][T16337] hsr_slave_1: entered promiscuous mode
[  372.717616][T16337] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  372.725249][T16337] Cannot create hsr debugfs directory
[  372.997514][T10469] IPVS: stop unused estimator thread 0...
[  373.235068][T16587] netlink: 'syz.2.3101': attribute type 1 has an invalid length.
[  373.246344][T16587] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3101'.
[  373.358331][ T5858] Bluetooth: hci0: command tx timeout
[  373.622420][T16337] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  373.640921][T16337] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  373.653030][T16337] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  373.670507][T16337] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  373.701206][T16599] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3104'.
[  373.822800][T16337] 8021q: adding VLAN 0 to HW filter on device bond0
[  373.861596][T16337] 8021q: adding VLAN 0 to HW filter on device team0
[  373.879506][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  373.886742][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  373.913098][T10469] bridge0: port 2(bridge_slave_1) entered blocking state
[  373.920344][T10469] bridge0: port 2(bridge_slave_1) entered forwarding state
[  373.992300][T16337] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  374.242627][T16616] openvswitch: netlink: Missing key (keys=40, expected=80)
[  374.350611][T16621] dvmrp1: entered allmulticast mode
[  374.364972][T16622] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3109'.
[  374.390040][T16624] Bluetooth: MGMT ver 1.23
[  374.469902][T16337] 8021q: adding VLAN 0 to HW filter on device batadv0
[  374.516098][T16629] netlink: 'syz.3.3113': attribute type 10 has an invalid length.
[  374.601985][T16630] vlan0: entered promiscuous mode
[  374.608555][T16630] hsr_slave_1: entered promiscuous mode
[  374.614268][T16630] vlan0: entered allmulticast mode
[  374.619662][T16630] hsr_slave_1: entered allmulticast mode
[  374.707610][T16337] veth0_vlan: entered promiscuous mode
[  374.733373][T16337] veth1_vlan: entered promiscuous mode
[  374.804393][T16337] veth0_macvtap: entered promiscuous mode
[  374.831770][T16337] veth1_macvtap: entered promiscuous mode
[  374.853823][T16636] syz.4.3115 uses old SIOCAX25GETINFO
[  374.878302][T16337] batman_adv: batadv0: Interface activated: batadv_slave_0
[  374.912812][T16337] batman_adv: batadv0: Interface activated: batadv_slave_1
[  374.929327][T16337] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  374.945669][T16337] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  374.954440][T16337] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  374.978815][T16337] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  375.191902][T10469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  375.217301][T10469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  375.403318][ T7590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  375.408234][T16647] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3119'.
[  375.413960][ T7590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  375.496234][T16647] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3119'.
[  375.523256][T16647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3119'.
[  375.674096][T16661] IPv4: Oversized IP packet from 172.20.20.24
[  375.682740][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  375.689406][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  375.760407][T16669] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3125'.
[  375.771062][T16669] netlink: 21 bytes leftover after parsing attributes in process `syz.4.3125'.
[  375.781766][T16669] netlink: 21 bytes leftover after parsing attributes in process `syz.4.3125'.
[  376.192668][T16684] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  376.547195][T16692] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3133'.
[  376.639973][T16696] Cannot find del_set index 17 as target
[  376.669692][ T5866] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  376.682751][ T5866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  376.691378][ T5866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  376.701429][ T5866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  376.730592][ T5866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  376.841018][T16706] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3136'.
[  376.898898][T16692] bond0 (unregistering): Released all slaves
[  376.989930][T16706] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.030099][T16706] bridge_slave_1 (unregistering): left allmulticast mode
[  377.044561][T16706] bridge_slave_1 (unregistering): left promiscuous mode
[  377.052730][T16706] bridge0: port 2(bridge_slave_1) entered disabled state
[  378.808185][ T5858] Bluetooth: hci1: command tx timeout
[  380.459354][T16753] netlink: 'syz.1.3146': attribute type 21 has an invalid length.
[  380.582248][T16760] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  380.789689][T16773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3153'.
[  380.817972][T16772] vxcan0: entered allmulticast mode
[  380.862504][T16772] vxcan0: left allmulticast mode
[  380.876111][ T5858] Bluetooth: hci1: command tx timeout
[  381.050336][T16780] netlink: 'syz.3.3155': attribute type 16 has an invalid length.
[  381.065813][T16780] netlink: 'syz.3.3155': attribute type 17 has an invalid length.
[  381.102914][T16780] tipc: Resetting bearer <eth:team0>
[  381.250292][T16786] IPVS: persistence engine module ip_vs_pe_À
 not found
[  381.533912][T16697] chnl_net:caif_netlink_parms(): no params data found
[  381.830520][T16697] bridge0: port 1(bridge_slave_0) entered blocking state
[  381.850775][T16697] bridge0: port 1(bridge_slave_0) entered disabled state
[  381.858725][T16697] bridge_slave_0: entered allmulticast mode
[  381.869955][T16697] bridge_slave_0: entered promiscuous mode
[  381.880067][T16697] bridge0: port 2(bridge_slave_1) entered blocking state
[  381.887573][T16697] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.895085][T16697] bridge_slave_1: entered allmulticast mode
[  381.903107][T16697] bridge_slave_1: entered promiscuous mode
[  382.040441][T16697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  382.089773][T16697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  382.355040][T16697] team0: Port device team_slave_0 added
[  382.390290][T16697] team0: Port device team_slave_1 added
[  382.415803][   T30] audit: type=1800 audit(1752917530.889:4): pid=16849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3172" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=3114 res=0 errno=0
[  382.514119][T16859] sctp: [Deprecated]: syz.0.3176 (pid 16859) Use of struct sctp_assoc_value in delayed_ack socket option.
[  382.514119][T16859] Use struct sctp_sack_info instead
[  382.533214][T16697] batman_adv: batadv0: Adding interface: batadv_slave_0
[  382.550311][T16697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  382.589504][T16697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  382.684733][T16697] batman_adv: batadv0: Adding interface: batadv_slave_1
[  382.705335][T16697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  382.744264][T16697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  382.768044][T16863] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3178'.
[  382.781250][T16863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3178'.
[  382.941964][T16874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3183'.
[  382.965933][ T5858] Bluetooth: hci1: command tx timeout
[  382.971541][T16874] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3183'.
[  382.978823][T16697] hsr_slave_0: entered promiscuous mode
[  383.002253][T16697] hsr_slave_1: entered promiscuous mode
[  383.018182][T16697] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  383.026307][T16697] Cannot create hsr debugfs directory
[  383.106408][T16882] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  383.138517][T16885] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3187'.
[  383.191639][T16881] pim6reg: entered allmulticast mode
[  383.231616][T16884] vlan2: entered promiscuous mode
[  383.251491][T16884] bridge0: entered promiscuous mode
[  383.389362][T16895] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3190'.
[  383.506358][T16897] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3191'.
[  383.537750][T16900] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3192'.
[  383.578057][T16900] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  383.966388][T16915] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535)
[  384.057145][T16697] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  384.102378][T16697] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  384.133318][T16697] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  384.161528][T16697] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  384.406459][T16937] IPVS: length: 24 != 216
[  384.923897][T16922] bridge7: entered promiscuous mode
[  384.929353][T16922] bridge7: entered allmulticast mode
[  384.962717][T16937] team0: Device vti0 is of different type
[  385.045729][ T5858] Bluetooth: hci1: command tx timeout
[  385.176661][T16943] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  385.219811][T16943] syzkaller0: entered promiscuous mode
[  385.225356][T16943] syzkaller0: entered allmulticast mode
[  385.318620][T16958] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3208'.
[  385.337518][T16943] tipc: Resetting bearer <eth:syzkaller0>
[  385.364292][T16941] tipc: Resetting bearer <eth:syzkaller0>
[  385.402792][T16941] tipc: Disabling bearer <eth:syzkaller0>
[  385.669833][T16697] 8021q: adding VLAN 0 to HW filter on device bond0
[  385.752580][T16697] 8021q: adding VLAN 0 to HW filter on device team0
[  385.789877][ T7590] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.797160][ T7590] bridge0: port 1(bridge_slave_0) entered forwarding state
[  385.851887][ T7590] bridge0: port 2(bridge_slave_1) entered blocking state
[  385.859152][ T7590] bridge0: port 2(bridge_slave_1) entered forwarding state
[  386.139186][T16985] xt_policy: output policy not valid in PREROUTING and INPUT
[  386.301875][T16990] __nla_validate_parse: 1 callbacks suppressed
[  386.301897][T16990] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3216'.
[  386.595123][T17003] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3219'.
[  386.627686][T17008] netlink: 'syz.0.3220': attribute type 4 has an invalid length.
[  386.698770][T16697] 8021q: adding VLAN 0 to HW filter on device batadv0
[  386.854091][T16697] veth0_vlan: entered promiscuous mode
[  386.930029][T16697] veth1_vlan: entered promiscuous mode
[  387.086156][T17016] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3223'.
[  387.184907][T16697] veth0_macvtap: entered promiscuous mode
[  387.260633][T16697] veth1_macvtap: entered promiscuous mode
[  387.613368][T16697] batman_adv: batadv0: Interface activated: batadv_slave_0
[  387.672452][T16697] batman_adv: batadv0: Interface activated: batadv_slave_1
[  387.724594][T16697] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  387.754627][T16697] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  387.771443][T16697] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  387.790486][T16697] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  387.897253][T17043] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3233'.
[  388.248848][ T7588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  388.269585][ T7588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  388.401637][ T1566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  388.441509][ T1566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  388.465712][T17062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3237'.
[  388.493353][T17064] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3241'.
[  388.520073][T17062] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  388.594620][T17070] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3242'.
[  388.731831][T17075] netlink: 'syz.0.3245': attribute type 10 has an invalid length.
[  388.802619][T17074] netlink: 'syz.0.3245': attribute type 21 has an invalid length.
[  388.874651][T17075] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  388.896351][T17074] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3245'.
[  389.135984][T17087] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3249'.
[  389.181541][T17087] netlink: 'syz.2.3249': attribute type 7 has an invalid length.
[  389.207485][T17087] netlink: 'syz.2.3249': attribute type 8 has an invalid length.
[  389.250354][T17087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3249'.
[  389.720365][ T5866] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  389.731021][ T5866] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  389.745995][ T5866] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  389.754276][ T5866] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  389.767090][ T5866] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  389.899367][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  389.922031][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.012259][T17110] netlink: 'syz.4.3257': attribute type 1 has an invalid length.
[  390.043061][T17110] netlink: 'syz.4.3257': attribute type 1 has an invalid length.
[  390.116773][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  390.143354][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.279490][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  390.297762][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.314699][T17119] netlink: 'syz.4.3261': attribute type 1 has an invalid length.
[  390.369116][T17119] netlink: 'syz.4.3261': attribute type 10 has an invalid length.
[  390.423586][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  390.460513][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.032993][T17140] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  391.127396][T17141] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  391.348784][T17147] __nla_validate_parse: 6 callbacks suppressed
[  391.348806][T17147] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3265'.
[  391.688352][T10469] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xea
[  391.839237][ T5858] Bluetooth: hci4: command tx timeout
[  391.867018][   T12] dvmrp0 (unregistering): left allmulticast mode
[  392.351168][   T12] bond0 (unregistering): Released all slaves
[  392.370141][   T12] bond1 (unregistering): Released all slaves
[  392.387848][   T12] bond2 (unregistering): Released all slaves
[  392.504844][   T12] bond3 (unregistering): Released all slaves
[  392.520804][   T12] bond4 (unregistering): Released all slaves
[  392.535486][   T12] bond5 (unregistering): Released all slaves
[  392.550566][   T12] bond6 (unregistering): Released all slaves
[  392.572280][   T12] bond7 (unregistering): Released all slaves
[  392.599917][   T12] bond8 (unregistering): Released all slaves
[  392.751997][T17099] chnl_net:caif_netlink_parms(): no params data found
[  392.892383][   T12] tipc: Disabling bearer <eth:team0>
[  392.922275][   T12] tipc: Left network mode
[  393.179745][T17193] netlink: 808 bytes leftover after parsing attributes in process `syz.1.3276'.
[  393.260466][T17194] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3277'.
[  393.630373][T17099] bridge0: port 1(bridge_slave_0) entered blocking state
[  393.641278][T17099] bridge0: port 1(bridge_slave_0) entered disabled state
[  393.651563][T17099] bridge_slave_0: entered allmulticast mode
[  393.660048][T17099] bridge_slave_0: entered promiscuous mode
[  393.721934][T17099] bridge0: port 2(bridge_slave_1) entered blocking state
[  393.744905][T17099] bridge0: port 2(bridge_slave_1) entered disabled state
[  393.752352][T17099] bridge_slave_1: entered allmulticast mode
[  393.759710][T17208] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3280'.
[  393.765651][T17099] bridge_slave_1: entered promiscuous mode
[  393.925893][ T5858] Bluetooth: hci4: command tx timeout
[  393.937960][T17208] (unnamed net_device) (uninitialized): (slave sit0): Device is not bonding slave
[  393.966188][T17208] (unnamed net_device) (uninitialized): option active_slave: invalid value (sit0)
[  394.062501][T17099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  394.121089][T17099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  394.334607][   T12] veth1_macvtap: left promiscuous mode
[  394.354373][   T12] veth0_macvtap: left promiscuous mode
[  394.591165][T17231] netlink: 'syz.1.3286': attribute type 1 has an invalid length.
[  394.635591][T17231] netlink: 'syz.1.3286': attribute type 2 has an invalid length.
[  394.998890][ T7588] smc: removing ib device syz2
[  395.357079][T17225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3284'.
[  395.393294][T17099] team0: Port device team_slave_0 added
[  395.580191][T17099] team0: Port device team_slave_1 added
[  395.886614][T17099] batman_adv: batadv0: Adding interface: batadv_slave_0
[  395.893613][T17099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  395.996124][ T5858] Bluetooth: hci4: command tx timeout
[  396.026490][T17099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  396.082868][T17253] sctp: [Deprecated]: syz.2.3293 (pid 17253) Use of int in maxseg socket option.
[  396.082868][T17253] Use struct sctp_assoc_value instead
[  396.185393][T17099] batman_adv: batadv0: Adding interface: batadv_slave_1
[  396.195770][T17099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  396.244405][T17099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  396.596537][T17099] hsr_slave_0: entered promiscuous mode
[  396.612899][T17099] hsr_slave_1: entered promiscuous mode
[  396.637341][T17099] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  396.644948][T17099] Cannot create hsr debugfs directory
[  396.693008][T17272] netlink: 'syz.4.3299': attribute type 39 has an invalid length.
[  397.302451][T17293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3308'.
[  397.360961][T17291] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[  397.376859][T17291] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[  397.391459][T17291] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[  397.402173][T17291] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[  397.416927][T17291] geneve2: entered promiscuous mode
[  397.424246][T17291] geneve2: entered allmulticast mode
[  397.440612][T17293] netlink: 'syz.2.3308': attribute type 4 has an invalid length.
[  397.690953][T17305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3310'.
[  397.940117][T17314] netlink: 'syz.1.3313': attribute type 23 has an invalid length.
[  398.016176][   T12] IPVS: stop unused estimator thread 0...
[  398.034688][T17316] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3314'.
[  398.077916][ T5858] Bluetooth: hci4: command tx timeout
[  398.283519][T17329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3319'.
[  398.546589][T17337] netlink: 'syz.1.3321': attribute type 10 has an invalid length.
[  398.783881][T17350] x_tables: arp_tables: MARK.2 target: invalid size 8 (kernel) != (user) 0
[  398.793410][T17099] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  398.835150][T17353] netlink: 'syz.4.3327': attribute type 1 has an invalid length.
[  398.857791][T17099] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  398.937855][T17353] 8021q: adding VLAN 0 to HW filter on device bond1
[  398.952564][T17099] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  398.968548][T17099] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  399.024489][T17361] bond1: (slave veth5): Enslaving as an active interface with a down link
[  399.053898][T17353] vlan2: entered allmulticast mode
[  399.071680][T17353] veth1: entered allmulticast mode
[  399.177532][T17376] tipc: Started in network mode
[  399.182485][T17376] tipc: Node identity 7a817619d948, cluster identity 4711
[  399.190698][T17376] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  399.207039][T17376] syzkaller0: entered promiscuous mode
[  399.212565][T17376] syzkaller0: entered allmulticast mode
[  399.290507][ T7590] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  399.311799][T17378] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  399.342426][T17382] netlink: 'syz.1.3332': attribute type 15 has an invalid length.
[  399.355975][T17376] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3330'.
[  399.373987][T17382] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3332'.
[  399.420716][T17376] tipc: Resetting bearer <eth:syzkaller0>
[  399.459438][T17375] tipc: Resetting bearer <eth:syzkaller0>
[  399.548823][T17375] tipc: Disabling bearer <eth:syzkaller0>
[  399.600441][T17099] 8021q: adding VLAN 0 to HW filter on device bond0
[  399.662284][T17099] 8021q: adding VLAN 0 to HW filter on device team0
[  399.688473][ T7588] bridge0: port 1(bridge_slave_0) entered blocking state
[  399.695712][ T7588] bridge0: port 1(bridge_slave_0) entered forwarding state
[  399.713191][ T7590] bridge0: port 2(bridge_slave_1) entered blocking state
[  399.720389][ T7590] bridge0: port 2(bridge_slave_1) entered forwarding state
[  399.793320][T17401] FAULT_INJECTION: forcing a failure.
[  399.793320][T17401] name failslab, interval 1, probability 0, space 0, times 0
[  399.811087][T17401] CPU: 0 UID: 0 PID: 17401 Comm: syz.2.3336 Not tainted 6.16.0-rc6-syzkaller-00124-g96e056ffba91 #0 PREEMPT(full) 
[  399.811118][T17401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  399.811136][T17401] Call Trace:
[  399.811145][T17401]  <TASK>
[  399.811154][T17401]  dump_stack_lvl+0x189/0x250
[  399.811193][T17401]  ? __pfx____ratelimit+0x10/0x10
[  399.811216][T17401]  ? __pfx_dump_stack_lvl+0x10/0x10
[  399.811243][T17401]  ? __pfx__printk+0x10/0x10
[  399.811275][T17401]  ? __pfx___might_resched+0x10/0x10
[  399.811300][T17401]  ? fs_reclaim_acquire+0x7d/0x100
[  399.811327][T17401]  should_fail_ex+0x414/0x560
[  399.811355][T17401]  should_failslab+0xa8/0x100
[  399.811390][T17401]  __kmalloc_noprof+0xcb/0x4f0
[  399.811418][T17401]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  399.811442][T17401]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  399.811473][T17401]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  399.811505][T17401]  genl_family_rcv_msg_doit+0xb8/0x300
[  399.811536][T17401]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  399.811563][T17401]  ? rcu_is_watching+0x15/0xb0
[  399.811592][T17401]  ? apparmor_capable+0x137/0x1b0
[  399.811623][T17401]  ? bpf_lsm_capable+0x9/0x20
[  399.811652][T17401]  ? security_capable+0x7e/0x2e0
[  399.811681][T17401]  genl_rcv_msg+0x60e/0x790
[  399.811712][T17401]  ? __pfx_genl_rcv_msg+0x10/0x10
[  399.811731][T17401]  ? ref_tracker_free+0x63a/0x7d0
[  399.811753][T17401]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  399.811772][T17401]  ? __pfx_nl80211_new_key+0x10/0x10
[  399.811792][T17401]  ? __pfx_nl80211_post_doit+0x10/0x10
[  399.811813][T17401]  ? __pfx_ref_tracker_free+0x10/0x10
[  399.811849][T17401]  netlink_rcv_skb+0x208/0x470
[  399.811880][T17401]  ? __pfx_genl_rcv_msg+0x10/0x10
[  399.811903][T17401]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  399.811952][T17401]  ? down_read+0x1ad/0x2e0
[  399.811980][T17401]  genl_rcv+0x28/0x40
[  399.812000][T17401]  netlink_unicast+0x75c/0x8e0
[  399.812039][T17401]  netlink_sendmsg+0x805/0xb30
[  399.812080][T17401]  ? __pfx_netlink_sendmsg+0x10/0x10
[  399.812127][T17401]  ? aa_sock_msg_perm+0x94/0x160
[  399.812151][T17401]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  399.812191][T17401]  ? __pfx_netlink_sendmsg+0x10/0x10
[  399.812219][T17401]  __sock_sendmsg+0x21c/0x270
[  399.812247][T17401]  ____sys_sendmsg+0x505/0x830
[  399.812283][T17401]  ? __pfx_____sys_sendmsg+0x10/0x10
[  399.812323][T17401]  ? import_iovec+0x74/0xa0
[  399.812355][T17401]  ___sys_sendmsg+0x21f/0x2a0
[  399.812387][T17401]  ? __pfx____sys_sendmsg+0x10/0x10
[  399.812455][T17401]  ? __fget_files+0x2a/0x420
[  399.812471][T17401]  ? __fget_files+0x3a0/0x420
[  399.812499][T17401]  __x64_sys_sendmsg+0x19b/0x260
[  399.812532][T17401]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  399.812572][T17401]  ? __pfx_ksys_write+0x10/0x10
[  399.812597][T17401]  ? rcu_is_watching+0x15/0xb0
[  399.812625][T17401]  ? do_syscall_64+0xbe/0x3b0
[  399.812652][T17401]  do_syscall_64+0xfa/0x3b0
[  399.812672][T17401]  ? lockdep_hardirqs_on+0x9c/0x150
[  399.812693][T17401]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.812712][T17401]  ? clear_bhb_loop+0x60/0xb0
[  399.812735][T17401]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.812763][T17401] RIP: 0033:0x7fc75f38e9a9
[  399.812781][T17401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  399.812798][T17401] RSP: 002b:00007fc760248038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  399.812820][T17401] RAX: ffffffffffffffda RBX: 00007fc75f5b5fa0 RCX: 00007fc75f38e9a9
[  399.812835][T17401] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003
[  399.812847][T17401] RBP: 00007fc760248090 R08: 0000000000000000 R09: 0000000000000000
[  399.812859][T17401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  399.812870][T17401] R13: 0000000000000000 R14: 00007fc75f5b5fa0 R15: 00007ffcb63da408
[  399.812901][T17401]  </TASK>
[  400.223779][T17099] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  400.234383][T17099] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  400.555080][T17415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3340'.
[  400.592479][T17415] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3340'.
[  400.616183][T17417] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3339'.
[  400.704287][T17099] 8021q: adding VLAN 0 to HW filter on device batadv0
[  400.828444][T17424] openvswitch: netlink: IP tunnel dst address not specified
[  400.864574][T17099] veth0_vlan: entered promiscuous mode
[  400.899766][T17099] veth1_vlan: entered promiscuous mode
[  400.968959][T17099] veth0_macvtap: entered promiscuous mode
[  401.014935][T17099] veth1_macvtap: entered promiscuous mode
[  401.084828][T17431] FAULT_INJECTION: forcing a failure.
[  401.084828][T17431] name failslab, interval 1, probability 0, space 0, times 0
[  401.103577][T17099] batman_adv: batadv0: Interface activated: batadv_slave_0
[  401.127153][T17431] CPU: 0 UID: 0 PID: 17431 Comm: syz.1.3348 Not tainted 6.16.0-rc6-syzkaller-00124-g96e056ffba91 #0 PREEMPT(full) 
[  401.127185][T17431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  401.127199][T17431] Call Trace:
[  401.127207][T17431]  <TASK>
[  401.127215][T17431]  dump_stack_lvl+0x189/0x250
[  401.127247][T17431]  ? __pfx____ratelimit+0x10/0x10
[  401.127269][T17431]  ? __pfx_dump_stack_lvl+0x10/0x10
[  401.127298][T17431]  ? __pfx__printk+0x10/0x10
[  401.127331][T17431]  ? __pfx___might_resched+0x10/0x10
[  401.127356][T17431]  ? fs_reclaim_acquire+0x7d/0x100
[  401.127384][T17431]  should_fail_ex+0x414/0x560
[  401.127413][T17431]  should_failslab+0xa8/0x100
[  401.127448][T17431]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  401.127480][T17431]  ? __alloc_skb+0x112/0x2d0
[  401.127516][T17431]  __alloc_skb+0x112/0x2d0
[  401.127551][T17431]  netlink_ack+0x146/0xa50
[  401.127578][T17431]  ? __pfx_genl_rcv_msg+0x10/0x10
[  401.127598][T17431]  ? ref_tracker_free+0x63a/0x7d0
[  401.127619][T17431]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  401.127639][T17431]  ? __pfx_nl80211_post_doit+0x10/0x10
[  401.127660][T17431]  ? __pfx_ref_tracker_free+0x10/0x10
[  401.127694][T17431]  netlink_rcv_skb+0x28c/0x470
[  401.127725][T17431]  ? __pfx_genl_rcv_msg+0x10/0x10
[  401.127750][T17431]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  401.127800][T17431]  ? down_read+0x1ad/0x2e0
[  401.127829][T17431]  genl_rcv+0x28/0x40
[  401.127850][T17431]  netlink_unicast+0x75c/0x8e0
[  401.127889][T17431]  netlink_sendmsg+0x805/0xb30
[  401.127931][T17431]  ? __pfx_netlink_sendmsg+0x10/0x10
[  401.127964][T17431]  ? aa_sock_msg_perm+0x94/0x160
[  401.127992][T17431]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  401.128016][T17431]  ? __pfx_netlink_sendmsg+0x10/0x10
[  401.128048][T17431]  __sock_sendmsg+0x21c/0x270
[  401.128076][T17431]  ____sys_sendmsg+0x505/0x830
[  401.128115][T17431]  ? __pfx_____sys_sendmsg+0x10/0x10
[  401.128156][T17431]  ? import_iovec+0x74/0xa0
[  401.128188][T17431]  ___sys_sendmsg+0x21f/0x2a0
[  401.128222][T17431]  ? __pfx____sys_sendmsg+0x10/0x10
[  401.128297][T17431]  ? __fget_files+0x2a/0x420
[  401.128313][T17431]  ? __fget_files+0x3a0/0x420
[  401.128344][T17431]  __x64_sys_sendmsg+0x19b/0x260
[  401.128382][T17431]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  401.128427][T17431]  ? __pfx_ksys_write+0x10/0x10
[  401.128454][T17431]  ? rcu_is_watching+0x15/0xb0
[  401.128486][T17431]  ? do_syscall_64+0xbe/0x3b0
[  401.128515][T17431]  do_syscall_64+0xfa/0x3b0
[  401.128538][T17431]  ? lockdep_hardirqs_on+0x9c/0x150
[  401.128560][T17431]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.128583][T17431]  ? clear_bhb_loop+0x60/0xb0
[  401.128609][T17431]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.128630][T17431] RIP: 0033:0x7f7336b8e9a9
[  401.128650][T17431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  401.128669][T17431] RSP: 002b:00007f7337a83038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  401.128692][T17431] RAX: ffffffffffffffda RBX: 00007f7336db5fa0 RCX: 00007f7336b8e9a9
[  401.128708][T17431] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003
[  401.128721][T17431] RBP: 00007f7337a83090 R08: 0000000000000000 R09: 0000000000000000
[  401.128735][T17431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  401.128748][T17431] R13: 0000000000000000 R14: 00007f7336db5fa0 R15: 00007ffe18d21f28
[  401.128783][T17431]  </TASK>
[  401.157863][T17099] batman_adv: batadv0: Interface activated: batadv_slave_1
[  401.510880][T17099] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  401.565981][T17445] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3351'.
[  401.584865][T17099] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  401.597208][T17099] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  401.631435][T17099] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  401.954970][T10470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  401.984670][T10470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  402.027980][ T7588] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  402.053759][ T7588] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  402.237057][T17466] SET target dimension over the limit!
[  402.294029][T17472] netlink: 'syz.3.3246': attribute type 11 has an invalid length.
[  402.325107][T17472] netlink: 'syz.3.3246': attribute type 11 has an invalid length.
[  402.356450][T17472] __nla_validate_parse: 3 callbacks suppressed
[  402.356470][T17472] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3246'.
[  402.444922][T17487] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3364'.
[  402.496001][T17488] netlink: 'syz.2.3365': attribute type 11 has an invalid length.
[  402.672805][T17501] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  402.680137][T17501] IPv6: NLM_F_CREATE should be set when creating new route
[  402.699280][T17501] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  402.711471][T17505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3370'.
[  402.742100][T17505] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  402.752320][T17505] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  402.761821][T17505] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  402.771257][T17505] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  402.791036][T17505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3370'.
[  402.955648][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  403.439712][T17543] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3384'.
[  403.481021][T17546] syz.0.3385: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  403.524673][T17546] CPU: 1 UID: 0 PID: 17546 Comm: syz.0.3385 Not tainted 6.16.0-rc6-syzkaller-00124-g96e056ffba91 #0 PREEMPT(full) 
[  403.524704][T17546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  403.524716][T17546] Call Trace:
[  403.524724][T17546]  <TASK>
[  403.524732][T17546]  dump_stack_lvl+0x189/0x250
[  403.524764][T17546]  ? __pfx_dump_stack_lvl+0x10/0x10
[  403.524796][T17546]  ? __pfx__printk+0x10/0x10
[  403.524824][T17546]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  403.524852][T17546]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  403.524879][T17546]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  403.524909][T17546]  warn_alloc+0x214/0x310
[  403.524927][T17546]  ? stack_depot_save_flags+0x40/0x900
[  403.524952][T17546]  ? __pfx_warn_alloc+0x10/0x10
[  403.524973][T17546]  ? kasan_save_track+0x4f/0x80
[  403.525001][T17546]  ? xskq_create+0x56/0x170
[  403.525018][T17546]  ? xsk_init_queue+0xb0/0x110
[  403.525033][T17546]  ? xsk_setsockopt+0x43f/0x710
[  403.525062][T17546]  ? do_sock_setsockopt+0x17c/0x1b0
[  403.525088][T17546]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  403.525115][T17546]  ? do_syscall_64+0xfa/0x3b0
[  403.525135][T17546]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.525162][T17546]  __vmalloc_node_range_noprof+0x125/0x12f0
[  403.525221][T17546]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  403.525258][T17546]  ? __kasan_kmalloc+0x93/0xb0
[  403.525289][T17546]  vmalloc_user_noprof+0xad/0xf0
[  403.525319][T17546]  ? xskq_create+0xbf/0x170
[  403.525340][T17546]  xskq_create+0xbf/0x170
[  403.525364][T17546]  xsk_init_queue+0xb0/0x110
[  403.525389][T17546]  xsk_setsockopt+0x43f/0x710
[  403.525423][T17546]  ? __pfx_xsk_setsockopt+0x10/0x10
[  403.525456][T17546]  ? __fget_files+0x2a/0x420
[  403.525474][T17546]  ? aa_sock_opt_perm+0x74/0x110
[  403.525498][T17546]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  403.525519][T17546]  ? __pfx_xsk_setsockopt+0x10/0x10
[  403.525551][T17546]  do_sock_setsockopt+0x17c/0x1b0
[  403.525585][T17546]  __x64_sys_setsockopt+0x13f/0x1b0
[  403.525620][T17546]  do_syscall_64+0xfa/0x3b0
[  403.525641][T17546]  ? lockdep_hardirqs_on+0x9c/0x150
[  403.525661][T17546]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.525692][T17546]  ? clear_bhb_loop+0x60/0xb0
[  403.525715][T17546]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.525734][T17546] RIP: 0033:0x7f7555b8e9a9
[  403.525767][T17546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  403.525793][T17546] RSP: 002b:00007f7556a0a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  403.525814][T17546] RAX: ffffffffffffffda RBX: 00007f7555db5fa0 RCX: 00007f7555b8e9a9
[  403.525828][T17546] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  403.525840][T17546] RBP: 00007f7555c10d69 R08: 0000000000000004 R09: 0000000000000000
[  403.525853][T17546] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  403.525865][T17546] R13: 0000000000000000 R14: 00007f7555db5fa0 R15: 00007ffca4df1a98
[  403.525897][T17546]  </TASK>
[  403.830032][T17546] Mem-Info:
[  403.835468][T17546] active_anon:4394 inactive_anon:0 isolated_anon:0
[  403.835468][T17546]  active_file:1609 inactive_file:39948 isolated_file:0
[  403.835468][T17546]  unevictable:768 dirty:93 writeback:0
[  403.835468][T17546]  slab_reclaimable:11406 slab_unreclaimable:103668
[  403.835468][T17546]  mapped:29115 shmem:1368 pagetables:1090
[  403.835468][T17546]  sec_pagetables:0 bounce:0
[  403.835468][T17546]  kernel_misc_reclaimable:0
[  403.835468][T17546]  free:1320381 free_pcp:14353 free_cma:0
[  403.924760][T17546] Node 0 active_anon:17632kB inactive_anon:0kB active_file:6436kB inactive_file:159592kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116388kB dirty:368kB writeback:0kB shmem:3936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12880kB pagetables:4272kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  403.960145][T17546] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  403.994759][T17546] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  404.023860][T17546] lowmem_reserve[]: 0 2498 2500 2500 2500
[  404.029757][T17546] Node 0 DMA32 free:1360464kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17684kB inactive_anon:0kB active_file:6436kB inactive_file:158024kB unevictable:1536kB writepending:364kB present:3129332kB managed:2558500kB mlocked:0kB bounce:0kB free_pcp:39700kB local_pcp:19564kB free_cma:0kB
[  404.064448][T17546] lowmem_reserve[]: 0 0 1 1 1
[  404.069575][T17546] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB
[  404.107387][T17546] lowmem_reserve[]: 0 0 0 0 0
[  404.126230][T17546] Node 1 Normal free:3906708kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:16832kB local_pcp:9024kB free_cma:0kB
[  404.205924][T17546] lowmem_reserve[]: 0 0 0 0 0
[  404.210752][T17546] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  404.285300][T17546] Node 0 DMA32: 616*4kB (UM) 448*8kB (UM) 365*16kB (UM) 313*32kB (UME) 84*64kB (UME) 56*128kB (UM) 122*256kB (UM) 91*512kB (UME) 45*1024kB (UME) 5*2048kB (UME) 291*4096kB (UM) = 1360528kB
[  404.317666][T17546] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  404.324821][T17566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3390'.
[  404.342152][T17546] Node 1 Normal: 209*4kB (UME) 62*8kB (UME) 46*16kB (UME) 164*32kB (UME) 42*64kB (UME) 9*128kB (UME) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 950*4096kB (ME) = 3906708kB
[  404.349926][T17566] netlink: 'syz.4.3390': attribute type 8 has an invalid length.
[  404.374956][T17546] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  404.393466][T17546] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  404.446825][T17546] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  404.487177][T17546] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  404.522248][T17546] 42921 total pagecache pages
[  404.541486][T17546] 0 pages in swap cache
[  404.558195][T17546] Free swap  = 124996kB
[  404.572454][T17546] Total swap = 124996kB
[  404.591247][T17577] syzkaller0: entered promiscuous mode
[  404.600431][T17577] syzkaller0: entered allmulticast mode
[  404.615010][T17546] 2097051 pages RAM
[  404.629498][T17546] 0 pages HighMem/MovableOnly
[  404.634266][T17546] 425384 pages reserved
[  404.645291][T17546] 0 pages cma reserved
[  404.818736][T17590] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3399'.
[  404.882914][T17594] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3397'.
[  405.415314][T17624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3409'.
[  405.474310][T17629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3410'.
[  406.261924][T17670] netlink: 'syz.1.3421': attribute type 1 has an invalid length.
[  406.327311][T17670] 8021q: adding VLAN 0 to HW filter on device bond3
[  406.376226][T17678] 8021q: adding VLAN 0 to HW filter on device bond3
[  406.388991][T17678] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  406.409633][T17678] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  406.482521][T17680] vlan2: entered allmulticast mode
[  406.509753][T17680] bond3: entered allmulticast mode
[  406.967250][   T30] audit: type=1800 audit(1752917555.429:5): pid=17713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3435" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=512 res=0 errno=0
[  407.299767][T17735] netlink: 'syz.0.3441': attribute type 29 has an invalid length.
[  407.482703][T17747] __nla_validate_parse: 15 callbacks suppressed
[  407.482724][T17747] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3440'.
[  407.552838][T17754] netlink: 165 bytes leftover after parsing attributes in process `syz.0.3446'.
[  407.616847][T17747] syzkaller0: entered promiscuous mode
[  407.622378][T17747] syzkaller0: entered allmulticast mode
[  407.647961][T17747] veth1_to_bridge: mtu less than device minimum
[  407.731954][T17763] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3450'.
[  408.022609][T17794] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3453'.
[  408.032727][T17794] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3453'.
[  408.050867][T17794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3453'.
[  408.421129][T17827] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  408.499426][T17832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3461'.
[  408.510131][T17832] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3461'.
[  408.528677][T17832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3461'.
[  408.560405][T17832] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3461'.
[  409.154885][T17878] team0: Device gtp0 is up. Set it down before adding it as a team port
[  409.228222][T17882] openvswitch: netlink: nsh attribute has 1 unknown bytes.
[  409.241959][T17882] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  409.254446][T17882] openvswitch: netlink: Key type 29 is not supported
[  409.270033][T17882] sock: sock_set_timeout: `syz.0.3473' (pid 17882) tries to set negative timeout
[  409.293833][T17886] openvswitch: netlink: Flow actions attr not present in new flow.
[  409.467900][T17895] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  409.925592][T17918] tap0: tun_chr_ioctl cmd 1074025676
[  409.931032][T17918] tap0: owner set to 0
[  409.991568][T17921] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  410.450113][T17944] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  410.508574][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  410.533737][T17943] xt_l2tp: unknown flags: 18
[  410.607941][T17951] netlink: 'syz.0.3495': attribute type 8 has an invalid length.
[  411.125306][T17987] IPv6: NLM_F_CREATE should be specified when creating new route
[  411.446395][T17997] netlink: 'syz.1.3508': attribute type 1 has an invalid length.
[  411.454604][T17997] netlink: 'syz.1.3508': attribute type 3 has an invalid length.
[  411.564198][T18004] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  411.602493][T18007] netlink: 'syz.1.3510': attribute type 4 has an invalid length.
[  411.863606][T18020] netlink: 'syz.4.3514': attribute type 29 has an invalid length.
[  411.899840][T18021] netlink: 'syz.4.3514': attribute type 2 has an invalid length.
[  412.191195][T18033] syzkaller0: entered promiscuous mode
[  412.201365][T18033] syzkaller0: entered allmulticast mode
[  412.219142][T18044] pimreg3: entered allmulticast mode
[  412.488271][T18059] netlink: 'syz.1.3525': attribute type 11 has an invalid length.
[  412.506898][T18061] xt_hashlimit: size too large, truncated to 1048576
[  412.515098][T18063] __nla_validate_parse: 17 callbacks suppressed
[  412.515116][T18063] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3528'.
[  412.530704][T18059] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3525'.
[  412.603920][T18069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3527'.
[  413.312733][T18091] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3533'.
[  414.848977][T18100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3536'.
[  414.871333][T18106] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3538'.
[  414.897954][T18106] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3538'.
[  415.117989][T18116] IPv6: addrconf: prefix option has invalid lifetime
[  415.182653][T18121] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3542'.
[  415.272687][T18129] netlink: 'syz.1.3546': attribute type 10 has an invalid length.
[  415.302045][T18129] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3546'.
[  415.320970][T18132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3547'.
[  415.329705][T18129] dummy0: entered promiscuous mode
[  415.343232][T18129] bridge0: port 1(dummy0) entered blocking state
[  415.375711][T18129] bridge0: port 1(dummy0) entered disabled state
[  415.431486][T18129] dummy0: entered allmulticast mode
[  415.469593][T18129] bridge0: port 1(dummy0) entered blocking state
[  415.476145][T18129] bridge0: port 1(dummy0) entered forwarding state
[  415.678855][T18149] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  415.943294][T18162] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  415.974927][T18169] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  416.069196][T18171] 8021q: adding VLAN 0 to HW filter on device bond0
[  416.121503][T18171] bond0: (slave rose0): Enslaving as an active interface with an up link
[  416.272676][T18185] ªªªªªª†³?ÂHº: renamed from lo (while UP)
[  416.449911][T18197] pimreg: entered allmulticast mode
[  416.481416][T18193] bridge0: port 1(dummy0) entered disabled state
[  416.507382][T18197] macsec0: entered promiscuous mode
[  416.524129][T18197] pimreg: left allmulticast mode
[  416.615535][T18193] dummy0: left allmulticast mode
[  416.625860][T18193] bridge0: port 1(dummy0) entered disabled state
[  416.706179][T18193] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check.
[  416.766194][T18203] netlink: 'syz.0.3566': attribute type 29 has an invalid length.
[  416.810868][ T5857] hid-generic 0005:0C45:1012.0002: item fetching failed at offset 0/1
[  416.854094][ T5857] hid-generic 0005:0C45:1012.0002: probe with driver hid-generic failed with error -22
[  417.344670][T18246] 8021q: adding VLAN 0 to HW filter on device bond2
[  417.488877][T18254] bridge_slave_1: left allmulticast mode
[  417.494592][T18254] bridge_slave_1: left promiscuous mode
[  417.500799][T18254] bridge0: port 2(bridge_slave_1) entered disabled state
[  417.511856][T18254] bridge_slave_0: left allmulticast mode
[  417.533127][T18254] bridge_slave_0: left promiscuous mode
[  417.547253][T18254] bridge0: port 1(bridge_slave_0) entered disabled state
[  417.761329][T18266] __nla_validate_parse: 7 callbacks suppressed
[  417.761349][T18266] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.3579'.
[  417.827213][T18254] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3577'.
[  418.059083][T18282] netlink: 'syz.3.3583': attribute type 1 has an invalid length.
[  418.345113][T18297] xt_CT: No such helper "snmp"
[  418.598872][T18312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3588'.
[  418.612673][T18312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3588'.
[  418.627554][T18312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3588'.
[  418.659227][T18312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3588'.
[  418.894559][T18321] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3590'.
[  419.086909][T18337] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3591'.
[  419.254652][T18346] netlink: 'syz.0.3595': attribute type 5 has an invalid length.
[  419.729261][T18366] veth0: entered promiscuous mode
[  419.762470][T18366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3600'.
[  419.841835][T18369] A link change request failed with some changes committed already. Interface ªªªªªª†³?ÂHº may have been left with an inconsistent configuration, please check.
[  419.990148][T18364] veth0: left promiscuous mode
[  420.116243][T18385] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3606'.
[  420.148428][T18386] !
: renamed from dummy0 (while UP)
[  420.164802][T18385] netlink: 'syz.0.3606': attribute type 1 has an invalid length.
[  420.419890][T18399] gretap1: entered promiscuous mode
[  420.996507][    C0] Unknown status report in ack skb
[  421.270386][T18444] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  421.526594][T18464] netlink: 'syz.4.3630': attribute type 25 has an invalid length.
[  421.540193][T18462] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  421.547498][T18462] IPv6: NLM_F_CREATE should be set when creating new route
[  421.562905][T18464] netlink: 'syz.4.3630': attribute type 1 has an invalid length.
[  421.587959][ T9452] IPVS: starting estimator thread 0...
[  421.592659][T18464] bridge0: port 1(bridge_slave_0) entered learning state
[  421.676469][T18471] IPVS: using max 31 ests per chain, 74400 per kthread
[  421.796862][T18479] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20000
[  421.861504][T18483] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  422.028790][T18497] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  422.113138][T18497] dvmrp0: entered allmulticast mode
[  422.194072][T18509] netlink: 'syz.0.3641': attribute type 8 has an invalid length.
[  422.917587][T18539] smc: net device team_slave_1 applied user defined pnetid SYZ2
[  422.946987][T18539] __nla_validate_parse: 8 callbacks suppressed
[  422.947013][T18539] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3649'.
[  423.254606][T18539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  423.282941][T18539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  423.310072][T18539] bond0 (unregistering): Released all slaves
[  423.348923][T18552] team_slave_0: entered promiscuous mode
[  423.354985][T18552] team_slave_1: entered promiscuous mode
[  423.367202][T18552] macsec2: entered allmulticast mode
[  423.425420][T18552] team0: entered allmulticast mode
[  423.430816][T18552] team_slave_0: entered allmulticast mode
[  423.449356][T18552] team_slave_1: entered allmulticast mode
[  423.471210][T18552] team0: left allmulticast mode
[  423.486644][T18552] team_slave_0: left allmulticast mode
[  423.496657][T18552] team_slave_1: left allmulticast mode
[  423.509774][T18552] team_slave_0: left promiscuous mode
[  423.515294][T18552] team_slave_1: left promiscuous mode
[  423.519274][T18565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3655'.
[  423.660185][T18557] bridge0: port 2(bridge_slave_1) entered disabled state
[  423.669417][T18557] bridge0: port 1(bridge_slave_0) entered disabled state
[  423.848749][T18580] tipc: Started in network mode
[  423.858427][T18580] tipc: Node identity ac1414aa, cluster identity 4711
[  423.867103][T18578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3658'.
[  423.896390][T18578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3658'.
[  423.905482][T18580] tipc: Enabled bearer <udp:s>, priority 10
[  423.912713][T18583] pimreg: entered allmulticast mode
[  423.916531][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  424.081593][T18591] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3663'.
[  424.090791][T18590] netlink: 'syz.3.3662': attribute type 10 has an invalid length.
[  424.146083][T18590] bridge_slave_1: left allmulticast mode
[  424.173236][T18590] bridge_slave_1: left promiscuous mode
[  424.192116][T18590] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.231707][T18590] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  424.254866][T18600] netlink: 'syz.2.3667': attribute type 9 has an invalid length.
[  424.341651][T18602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3668'.
[  424.391939][T18602] team1: entered promiscuous mode
[  424.426631][T18602] team1: entered allmulticast mode
[  424.758969][T18627] netlink: 'syz.0.3679': attribute type 3 has an invalid length.
[  424.769720][T18631] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3678'.
[  424.779061][T18627] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3679'.
[  424.843668][T18639] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3676'.
[  425.005822][ T9454] tipc: Node number set to 2886997162
[  425.094549][T18644] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  425.149091][T18653] A link change request failed with some changes committed already. Interface ªªªªªª†³?ÂHº may have been left with an inconsistent configuration, please check.
[  425.354509][T18662] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  425.453744][T18665] 8021q: adding VLAN 0 to HW filter on device bond1
[  425.463532][T18665] bridge0: port 2(bond1) entered blocking state
[  425.471449][T18665] bridge0: port 2(bond1) entered disabled state
[  425.481874][T18665] bond1: entered allmulticast mode
[  425.490669][T18665] bond1: entered promiscuous mode
[  425.637695][T18677] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3690'.
[  425.793872][T18653] infiniband syz!: set active
[  425.820611][T18653] infiniband syz!: added team_slave_0
[  425.953996][T18653] RDS/IB: syz!: added
[  425.986067][T18653] smc: adding ib device syz! with port count 1
[  425.992335][T18653] smc:    ib device syz! port 1 has pnetid 
[  427.153024][T18750] veth0: entered promiscuous mode
[  427.181254][T18748] veth0: left promiscuous mode
[  427.210278][T18752] ip6tnl2: entered promiscuous mode
[  427.238494][T18752] ip6tnl2: entered allmulticast mode
[  428.097269][T18785] __nla_validate_parse: 5 callbacks suppressed
[  428.097287][T18785] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3725'.
[  428.327243][T18792] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3726'.
[  428.736447][T18801] tipc: Started in network mode
[  428.741532][T18801] tipc: Node identity aaaaaaaaaa35, cluster identity 4711
[  428.750338][T18801] tipc: Enabled bearer <eth:macvlan1>, priority 10
[  428.947569][T18806] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  429.024333][T18811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3733'.
[  429.165129][T18816] ipvlan0: entered promiscuous mode
[  429.172913][T18816] ipvlan0: entered allmulticast mode
[  429.184581][T18816] veth0_vlan: entered allmulticast mode
[  429.277381][T18818] tipc: Started in network mode
[  429.282506][T18818] tipc: Node identity ac14140f, cluster identity 4711
[  429.307574][T18818] tipc: New replicast peer: 255.255.255.255
[  429.314193][T18818] tipc: Enabled bearer <udp:syz2>, priority 10
[  429.512458][T18827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3738'.
[  429.717585][T18837] netlink: 'syz.0.3741': attribute type 1 has an invalid length.
[  429.866740][ T9458] tipc: Node number set to 10463914
[  430.018910][T18845] netlink: 163948 bytes leftover after parsing attributes in process `syz.2.3743'.
[  430.163060][T18865] sctp: [Deprecated]: syz.1.3747 (pid 18865) Use of int in maxseg socket option.
[  430.163060][T18865] Use struct sctp_assoc_value instead
[  430.299186][T18872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3750'.
[  430.308400][T18873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3750'.
[  430.428225][ T9458] tipc: Node number set to 2886997007
[  430.588941][T18889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3756'.
[  430.603047][T18884] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.619575][T18890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3757'.
[  430.621787][T18884] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  430.685125][T18892] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3758'.
[  430.854356][T18900] xt_ecn: cannot match TCP bits for non-tcp packets
[  431.273835][T18929] netlink: 'syz.0.3770': attribute type 1 has an invalid length.
[  431.286296][T18929] netlink: 'syz.0.3770': attribute type 21 has an invalid length.
[  431.294325][T18929] netlink: 'syz.0.3770': attribute type 22 has an invalid length.
[  431.303058][T18929] netlink: 'syz.0.3770': attribute type 23 has an invalid length.
[  431.311987][T18929] netlink: 'syz.0.3770': attribute type 25 has an invalid length.
[  431.322820][T18929] only policy match revision 0 supported
[  431.322837][T18929] unable to load match
[  431.982623][T18964] tipc: Enabled bearer <udp:syz0>, priority 10
[  432.010583][T18963] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  432.165273][T18975] netlink: 'syz.2.3784': attribute type 21 has an invalid length.
[  432.207487][T18968] netlink: 'syz.4.3781': attribute type 21 has an invalid length.
[  432.247135][T18968] IPv6: NLM_F_CREATE should be specified when creating new route
[  432.264544][T18968] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  432.271900][T18968] IPv6: NLM_F_CREATE should be set when creating new route
[  432.279224][T18968] IPv6: NLM_F_CREATE should be set when creating new route
[  432.286496][T18968] IPv6: NLM_F_CREATE should be set when creating new route
[  432.313503][T18983] gtp0: entered promiscuous mode
[  432.346034][T18983] gtp0: entered allmulticast mode
[  432.378158][T18982] netlink: 'syz.1.3785': attribute type 2 has an invalid length.
[  432.657715][T18996] bridge_slave_0: left allmulticast mode
[  432.663422][T18996] bridge_slave_0: left promiscuous mode
[  432.684617][T19004] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  432.703971][T18996] bridge0: port 1(bridge_slave_0) entered disabled state
[  432.770856][T18996] bridge_slave_1: left allmulticast mode
[  432.836200][T18996] bridge_slave_1: left promiscuous mode
[  432.862554][T18996] bridge0: port 2(bridge_slave_1) entered disabled state
[  433.041722][T18996] team0: Port device team_slave_0 removed
[  433.110162][T18996] team0: Port device team_slave_1 removed
[  433.133426][T18996] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  433.141486][T18996] batman_adv: batadv0: Removing interface: batadv_slave_0
[  433.163389][T18996] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  433.177327][T18996] batman_adv: batadv0: Removing interface: batadv_slave_1
[  433.293134][T19008] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  433.494331][T19034] __nla_validate_parse: 9 callbacks suppressed
[  433.494349][T19034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3798'.
[  433.513909][T19037] netlink: 'syz.2.3796': attribute type 1 has an invalid length.
[  433.549146][T19040] IPVS: set_ctl: invalid protocol: 43 172.30.1.4:20007
[  433.640244][T19037] 8021q: adding VLAN 0 to HW filter on device bond0
[  433.771665][T19045] IPVS: set_ctl: invalid protocol: 98 255.255.255.255:20000
[  433.821640][T19046] bond0: (slave gretap1): making interface the new active one
[  433.848412][T19046] bond0: (slave gretap1): Enslaving as an active interface with an up link
[  433.962754][T19061] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  434.132168][T19067] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3804'.
[  434.212214][T19067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3804'.
[  434.404211][T19074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3805'.
[  434.420786][T19074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3805'.
[  434.439038][T19074] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3805'.
[  434.563610][T19078] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3807'.
[  434.703655][T19085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3809'.
[  435.192577][T19107] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3814'.
[  435.209178][T19106] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  435.308768][T19106] tipc: Disabling bearer <eth:syzkaller0>
[  435.387942][T19104] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  435.554468][T19124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3820'.
[  435.748412][T19139] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  435.797203][T19144] xt_hashlimit: size too large, truncated to 1048576
[  435.823495][T19139] openvswitch: netlink: IPv6 tunnel dst address is zero
[  435.973369][T19145] macvlan2: entered promiscuous mode
[  436.063932][T19145] macvlan2: entered allmulticast mode
[  436.110968][T19161] team0: Device vti0 is of different type
[  436.255280][T19148] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  436.462494][T19176] netlink: 'syz.4.3831': attribute type 7 has an invalid length.
[  436.481815][T19176] netlink: 'syz.4.3831': attribute type 8 has an invalid length.
[  436.561455][T19180] IPv6: NLM_F_REPLACE set, but no existing node found!
[  436.667673][T19183] block nbd1: Unsupported socket: shutdown callout must be supported.
[  436.765307][T19192] netlink: 'syz.1.3839': attribute type 21 has an invalid length.
[  436.796198][T19192] netlink: 'syz.1.3839': attribute type 1 has an invalid length.
[  436.944888][T19207] netlink: 'syz.2.3842': attribute type 4 has an invalid length.
[  437.236918][T19221] netlink: 'syz.1.3845': attribute type 3 has an invalid length.
[  437.450933][T19232] tipc: Started in network mode
[  437.458449][T19232] tipc: Node identity 8639ac9c9902, cluster identity 4711
[  437.466478][T19232] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  437.606944][T19232] syzkaller0: entered promiscuous mode
[  437.625873][T19232] syzkaller0: entered allmulticast mode
[  437.640455][T19232] tipc: Resetting bearer <eth:syzkaller0>
[  437.723635][T19231] tipc: Resetting bearer <eth:syzkaller0>
[  437.798290][T19248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  438.467053][ T9454] tipc: Node number set to 524004508
[  438.488390][T19274] netlink: 'syz.1.3862': attribute type 2 has an invalid length.
[  438.507331][T19274] __nla_validate_parse: 10 callbacks suppressed
[  438.507349][T19274] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3862'.
[  438.524289][T19274] nbd: must specify a device to reconfigure
[  439.476307][T19231] tipc: Disabling bearer <eth:syzkaller0>
[  439.729042][T19291] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3864'.
[  439.857883][T19296] netlink: 'syz.0.3869': attribute type 7 has an invalid length.
[  439.873266][T19296] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3869'.
[  439.882813][T19298] netlink: 252 bytes leftover after parsing attributes in process `syz.1.3871'.
[  440.034835][T19309] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  440.043930][T19312] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  440.044261][T19312] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  440.054007][T19309] x_tables: duplicate underflow at hook 1
[  440.066275][T19312] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  440.068985][T19312] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  440.089632][T19312] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  440.100665][T19311] netlink: 252 bytes leftover after parsing attributes in process `syz.0.3874'.
[  440.135987][T19312] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  440.136026][T19312] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0
[  440.379561][T19323] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present
[  440.389053][T19323] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1)
[  440.754084][T19348] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3886'.
[  440.757696][T19346] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3883'.
[  440.766499][T19348] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3886'.
[  440.802579][T19350] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3887'.
[  440.843002][T19348] gretap0: entered promiscuous mode
[  440.878064][T19348] gretap0: left promiscuous mode
[  440.979621][T19350] tipc: Failed to remove unknown binding: 66,1,1/10463914:2270547295/2270547297
[  441.112413][T19361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3891'.
[  441.138801][T19364] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  442.093407][T19413] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  442.410083][T19434] netlink: 'syz.3.3914': attribute type 1 has an invalid length.
[  442.488257][T19431] netlink: 'syz.3.3914': attribute type 1 has an invalid length.
[  442.513359][T19431] workqueue: Failed to create a rescuer kthread for wq "phy3": -EINTR
[  442.979502][T19468] netlink: 'syz.4.3921': attribute type 1 has an invalid length.
[  443.152267][T19473] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  443.186928][T19473] netlink: 'syz.4.3924': attribute type 2 has an invalid length.
[  443.203891][T19473] vlan3: entered allmulticast mode
[  443.209172][T19473] mac80211_hwsim hwsim26 wlan0: entered allmulticast mode
[  443.451066][T19490] netlink: 'syz.3.3930': attribute type 64 has an invalid length.
[  443.541084][T19494] __nla_validate_parse: 14 callbacks suppressed
[  443.541106][T19494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3931'.
[  443.864350][T19514] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3938'.
[  444.018748][T19521] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3940'.
[  444.094352][T19527] netlink: 'syz.3.3941': attribute type 1 has an invalid length.
[  444.150174][T19530] netlink: 'syz.1.3944': attribute type 13 has an invalid length.
[  444.174521][T19527] 8021q: adding VLAN 0 to HW filter on device bond2
[  444.224901][T19531] bond2: (slave geneve2): making interface the new active one
[  444.241984][T19531] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  444.254454][T19530] veth0_macvtap: left promiscuous mode
[  444.268558][T19530] macvtap0: entered allmulticast mode
[  444.279467][T19530] macvtap0: refused to change device tx_queue_len
[  444.304320][T19527] bond2: entered promiscuous mode
[  444.312707][T19527] geneve2: entered promiscuous mode
[  444.358722][T19539] netlink: 'syz.0.3945': attribute type 24 has an invalid length.
[  444.499771][T19543] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3946'.
[  444.598536][T19551] netlink: 'syz.1.3946': attribute type 13 has an invalid length.
[  444.715530][T19556] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3952'.
[  444.718468][T19558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3952'.
[  444.782885][T19551] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  445.251792][T19581] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  445.301890][T19581] batman_adv: batadv0: Removing interface: batadv_slave_0
[  445.354228][T19582] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3957'.
[  445.381573][T19582] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  445.420811][T19581] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  445.449736][T19581] batman_adv: batadv0: Removing interface: batadv_slave_1
[  445.945260][T19608] netlink: 'syz.0.3962': attribute type 1 has an invalid length.
[  445.990768][T19612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3964'.
[  446.101430][T19608] 8021q: adding VLAN 0 to HW filter on device bond4
[  446.209931][T19608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3962'.
[  446.237667][T19617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3962'.
[  446.916971][T19659] netlink: zone id is out of range
[  446.941114][T19659] netlink: del zone limit has 4 unknown bytes
[  446.959732][T19661] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  446.968642][T19661] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  446.977613][T19661] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  446.986998][T19661] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  447.142330][T19669] digital: digital_start_poll: Unknown protocol
[  447.318602][T19683] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  447.346193][T19683] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  447.517143][T19697] : entered promiscuous mode
[  447.755005][T19715] x_tables: duplicate underflow at hook 1
[  447.874244][T19720] sctp: [Deprecated]: syz.3.4002 (pid 19720) Use of struct sctp_assoc_value in delayed_ack socket option.
[  447.874244][T19720] Use struct sctp_sack_info instead
[  447.892687][T19725] sctp: [Deprecated]: syz.1.4003 (pid 19725) Use of struct sctp_assoc_value in delayed_ack socket option.
[  447.892687][T19725] Use struct sctp_sack_info instead
[  448.042386][T19731] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  448.068204][T19732] sctp: [Deprecated]: syz.1.4006 (pid 19732) Use of struct sctp_assoc_value in delayed_ack socket option.
[  448.068204][T19732] Use struct sctp_sack_info instead
[  448.119545][T19736] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  448.375007][T19745] tipc: Can't bind to reserved service type 2
[  448.411493][T19747] openvswitch: netlink: Message has 4 unknown bytes.
[  448.443466][T19751] validate_nla: 3 callbacks suppressed
[  448.443486][T19751] netlink: 'syz.2.4011': attribute type 2 has an invalid length.
[  448.630378][T19759] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  448.852831][T19774] macvtap1: entered promiscuous mode
[  448.868095][T19774] vlan0: entered promiscuous mode
[  448.874612][T19774] macvtap1: entered allmulticast mode
[  448.882161][T19778] netlink: 'syz.1.4021': attribute type 39 has an invalid length.
[  448.895099][T19774] vlan0: entered allmulticast mode
[  449.261911][T19797] __nla_validate_parse: 15 callbacks suppressed
[  449.261933][T19797] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4026'.
[  449.281430][T19796] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4026'.
[  449.292491][T19795] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4026'.
[  449.318771][T19799] netlink: 'syz.1.4027': attribute type 12 has an invalid length.
[  449.362518][T19802] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  449.457171][T19811] netlink: 'syz.2.4030': attribute type 1 has an invalid length.
[  449.497723][T19811] 8021q: adding VLAN 0 to HW filter on device bond3
[  449.538283][T19811] 8021q: adding VLAN 0 to HW filter on device bond3
[  449.546547][T19811] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  449.564993][T19811] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  449.615336][T19819] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4030'.
[  449.679243][T19820] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4030'.
[  449.691115][T19820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4030'.
[  449.704901][ T9462] IPVS: starting estimator thread 0...
[  449.749956][T19818] veth3: entered promiscuous mode
[  449.773904][T19818] bond3: (slave veth3): Enslaving as an active interface with a down link
[  449.784627][T19819] 8021q: adding VLAN 0 to HW filter on device bond3
[  449.796655][T19821] IPVS: using max 24 ests per chain, 57600 per kthread
[  450.155919][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  450.252126][T19843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4036'.
[  450.312532][T19846] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4039'.
[  450.659466][T19859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4043'.
[  450.704257][T19859] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4043'.
[  450.865077][T19868] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  450.929840][T19872] team0: Cannot enslave team device to itself
[  451.142558][T19886] netlink: 'syz.4.4051': attribute type 1 has an invalid length.
[  451.176732][T19886] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  451.259854][T19896] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode active-backup(1)
[  451.913287][T19916] team0: Device gtp0 is of different type
[  453.236978][T19987] netlink: 'syz.1.4083': attribute type 1 has an invalid length.
[  453.301504][T19982] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  453.352919][T19987] ip6tnl1: entered promiscuous mode
[  453.360006][T19987] ip6tnl1: entered allmulticast mode
[  453.368067][T19987] bond5: (slave ip6tnl1): The slave device specified does not support setting the MAC address
[  453.379141][T19987] bond5: (slave ip6tnl1): Setting fail_over_mac to active for active-backup mode
[  453.392570][T19987] bond5: (slave ip6tnl1): making interface the new active one
[  453.403322][T19987] bond5: (slave ip6tnl1): Enslaving as an active interface with an up link
[  454.393447][T20041] __nla_validate_parse: 12 callbacks suppressed
[  454.393467][T20041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4098'.
[  455.247680][T20061] syzkaller0: entered promiscuous mode
[  455.277505][T20061] syzkaller0: entered allmulticast mode
[  455.556332][T20085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4112'.
[  455.583740][T20085] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4112'.
[  457.364870][T20088] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4114'.
[  457.411449][T20090] sctp: [Deprecated]: syz.2.4113 (pid 20090) Use of int in maxseg socket option.
[  457.411449][T20090] Use struct sctp_assoc_value instead
[  457.450544][T20091] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4114'.
[  457.562393][T20095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4115'.
[  457.980201][T20124] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  458.106232][T20129] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4128'.
[  458.116880][T20129] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4128'.
[  458.126686][T20129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4128'.
[  458.141096][T20135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4129'.
[  458.264800][T20140] netlink: 'syz.3.4131': attribute type 10 has an invalid length.
[  458.302043][T20140] 8021q: adding VLAN 0 to HW filter on device batadv0
[  458.306941][T20138] netlink: 'syz.1.4130': attribute type 1 has an invalid length.
[  458.337800][T20140] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  458.453066][T20145] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  458.858175][T20161] netlink: 'syz.2.4136': attribute type 2 has an invalid length.
[  458.892241][ T5849] IPVS: starting estimator thread 0...
[  458.996258][T20163] IPVS: using max 25 ests per chain, 60000 per kthread
[  459.460104][T20181] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[  459.488629][T20183] netlink: 'syz.1.4144': attribute type 33 has an invalid length.
[  459.497557][T20183] __nla_validate_parse: 7 callbacks suppressed
[  459.497577][T20183] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4144'.
[  459.551965][T20181] RDS: rds_bind could not find a transport for fe88::1003, load rds_tcp or rds_rdma?
[  459.733336][T20192] nbd: couldn't find a device at index 0
[  459.875305][T20201] netlink: 'syz.0.4150': attribute type 2 has an invalid length.
[  460.004607][T20206] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  460.103472][T20213] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4152'.
[  460.203197][T20215] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4155'.
[  460.214209][T20221] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4157'.
[  460.351849][T20225] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4159'.
[  460.363124][T20225] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4159'.
[  461.019744][T20262] netlink: 'syz.4.4169': attribute type 1 has an invalid length.
[  461.044353][T20262] netlink: 208 bytes leftover after parsing attributes in process `syz.4.4169'.
[  461.664186][T20302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4179'.
[  461.726548][T20306] netlink: 'syz.2.4180': attribute type 7 has an invalid length.
[  461.755546][T20306] netlink: 'syz.2.4180': attribute type 8 has an invalid length.
[  461.789632][T20312] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4177'.
[  461.893809][T20319] xt_socket: unknown flags 0x2
[  462.050705][T20321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4183'.
[  462.151391][T20337] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:20002
[  462.478290][ T5866] Bluetooth: hci2: command 0x0406 tx timeout
[  462.770115][T20368] IPv6: Can't replace route, no match found
[  462.901607][T20370] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  463.105205][T20368] bridge0: port 1(bridge_slave_0) entered disabled state
[  463.112044][T20384] sctp: [Deprecated]: syz.1.4197 (pid 20384) Use of int in maxseg socket option.
[  463.112044][T20384] Use struct sctp_assoc_value instead
[  463.304715][T20394] netlink: 'syz.4.4200': attribute type 1 has an invalid length.
[  463.531863][T20410] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  463.567165][T20410] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  463.721527][T20420] netlink: 'syz.2.4207': attribute type 21 has an invalid length.
[  463.741378][T20420] netlink: 'syz.2.4207': attribute type 5 has an invalid length.
[  463.784072][T20422] netlink: 'syz.4.4209': attribute type 1 has an invalid length.
[  464.643530][T20459] netlink: 'syz.1.4222': attribute type 1 has an invalid length.
[  464.653712][T20459] netlink: 'syz.1.4222': attribute type 2 has an invalid length.
[  464.665215][T20458] netlink: 'syz.1.4222': attribute type 1 has an invalid length.
[  464.679012][T20458] netlink: 'syz.1.4222': attribute type 2 has an invalid length.
[  464.688196][T20459] __nla_validate_parse: 13 callbacks suppressed
[  464.688212][T20459] netlink: 808 bytes leftover after parsing attributes in process `syz.1.4222'.
[  464.751897][T20463] tipc: Enabled bearer <udp:syz1>, priority 10
[  464.773351][T20458] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  464.827492][T20467] netlink: 'syz.3.4224': attribute type 1 has an invalid length.
[  464.853512][T20467] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4224'.
[  464.953104][T20472] netlink: 'syz.1.4228': attribute type 5 has an invalid length.
[  465.015223][T20475] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4227'.
[  465.130663][T20483] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4226'.
[  465.234495][T20487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4231'.
[  465.259861][T20487] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  465.272535][T20492] x_tables: duplicate underflow at hook 1
[  465.281072][T20487] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  465.297448][T20492] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4232'.
[  465.340888][T20492] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4232'.
[  465.604076][T20505] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4234'.
[  465.626583][T20508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4236'.
[  465.649636][T20508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4236'.
[  465.670856][T20511] bridge5: entered promiscuous mode
[  465.682063][T20511] bridge5: entered allmulticast mode
[  467.602505][T20618] x_tables: duplicate underflow at hook 2
[  467.759366][T20628] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20002
[  468.467272][T20628] Bluetooth: hci4: Opcode 0x0401 failed: -4
[  468.620946][T20670] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms
[  468.690687][T20670] bond6: entered promiscuous mode
[  468.696654][T20670] bond6: entered allmulticast mode
[  468.703296][T20670] 8021q: adding VLAN 0 to HW filter on device bond6
[  468.942475][T20688] validate_nla: 2 callbacks suppressed
[  468.942497][T20688] netlink: 'syz.0.4289': attribute type 4 has an invalid length.
[  468.960124][T20692] netlink: 'syz.2.4290': attribute type 12 has an invalid length.
[  469.027711][T20692] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255)
[  469.242594][T20709] openvswitch: netlink: Key 22 has unexpected len 2 expected 4
[  469.444041][T20717] FAULT_INJECTION: forcing a failure.
[  469.444041][T20717] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  469.459031][T20717] CPU: 0 UID: 0 PID: 20717 Comm: syz.2.4298 Not tainted 6.16.0-rc6-syzkaller-00124-g96e056ffba91 #0 PREEMPT(full) 
[  469.459064][T20717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  469.459077][T20717] Call Trace:
[  469.459085][T20717]  <TASK>
[  469.459095][T20717]  dump_stack_lvl+0x189/0x250
[  469.459126][T20717]  ? __pfx____ratelimit+0x10/0x10
[  469.459150][T20717]  ? __pfx_dump_stack_lvl+0x10/0x10
[  469.459176][T20717]  ? __pfx__printk+0x10/0x10
[  469.459204][T20717]  ? __might_fault+0xb0/0x130
[  469.459247][T20717]  should_fail_ex+0x414/0x560
[  469.459276][T20717]  _copy_from_iter+0x1db/0x16f0
[  469.459307][T20717]  ? rcu_is_watching+0x15/0xb0
[  469.459334][T20717]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  469.459367][T20717]  ? __pfx__copy_from_iter+0x10/0x10
[  469.459395][T20717]  ? __build_skb_around+0x257/0x3e0
[  469.459429][T20717]  ? netlink_sendmsg+0x642/0xb30
[  469.459457][T20717]  ? skb_put+0x11b/0x210
[  469.459491][T20717]  netlink_sendmsg+0x6b2/0xb30
[  469.459532][T20717]  ? __pfx_netlink_sendmsg+0x10/0x10
[  469.459565][T20717]  ? aa_sock_msg_perm+0x94/0x160
[  469.459590][T20717]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  469.459612][T20717]  ? __pfx_netlink_sendmsg+0x10/0x10
[  469.459643][T20717]  __sock_sendmsg+0x21c/0x270
[  469.459671][T20717]  ____sys_sendmsg+0x505/0x830
[  469.459710][T20717]  ? __pfx_____sys_sendmsg+0x10/0x10
[  469.459754][T20717]  ? import_iovec+0x74/0xa0
[  469.459787][T20717]  ___sys_sendmsg+0x21f/0x2a0
[  469.459830][T20717]  ? __pfx____sys_sendmsg+0x10/0x10
[  469.459903][T20717]  ? __fget_files+0x2a/0x420
[  469.459921][T20717]  ? __fget_files+0x3a0/0x420
[  469.459952][T20717]  __x64_sys_sendmsg+0x19b/0x260
[  469.459993][T20717]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  469.460039][T20717]  ? rcu_is_watching+0x15/0xb0
[  469.460064][T20717]  ? trace_sys_enter+0x25/0x120
[  469.460092][T20717]  do_syscall_64+0xfa/0x3b0
[  469.460114][T20717]  ? lockdep_hardirqs_on+0x9c/0x150
[  469.460135][T20717]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.460156][T20717]  ? clear_bhb_loop+0x60/0xb0
[  469.460183][T20717]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.460203][T20717] RIP: 0033:0x7fc75f38e9a9
[  469.460222][T20717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  469.460240][T20717] RSP: 002b:00007fc760248038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  469.460264][T20717] RAX: ffffffffffffffda RBX: 00007fc75f5b5fa0 RCX: 00007fc75f38e9a9
[  469.460279][T20717] RDX: 0000000004048002 RSI: 0000200000000140 RDI: 0000000000000003
[  469.460293][T20717] RBP: 00007fc760248090 R08: 0000000000000000 R09: 0000000000000000
[  469.460306][T20717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  469.460318][T20717] R13: 0000000000000000 R14: 00007fc75f5b5fa0 R15: 00007ffcb63da408
[  469.460351][T20717]  </TASK>
[  469.811825][T20718] dvmrp0: entered allmulticast mode
[  469.836692][ T5858] Bluetooth: hci4: command 0x0405 tx timeout
[  469.855030][T20720] dvmrp0: left allmulticast mode
[  469.897476][T20724] __nla_validate_parse: 14 callbacks suppressed
[  469.897496][T20724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4299'.
[  469.944824][T20718] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4297'.
[  470.153831][T20738] bridge: RTM_NEWNEIGH with invalid ether address
[  470.188337][T20738] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  470.344150][T20744] netdevsim netdevsim3 netdevsim3: entered allmulticast mode
[  470.380784][T20749] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4308'.
[  470.410181][T20751] FAULT_INJECTION: forcing a failure.
[  470.410181][T20751] name failslab, interval 1, probability 0, space 0, times 0
[  470.411295][T20744] xt_CT: You must specify a L4 protocol and not use inversions on it
[  470.423812][T20751] CPU: 1 UID: 0 PID: 20751 Comm: syz.4.4309 Not tainted 6.16.0-rc6-syzkaller-00124-g96e056ffba91 #0 PREEMPT(full) 
[  470.423847][T20751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  470.423863][T20751] Call Trace:
[  470.423872][T20751]  <TASK>
[  470.423882][T20751]  dump_stack_lvl+0x189/0x250
[  470.423917][T20751]  ? __pfx____ratelimit+0x10/0x10
[  470.423943][T20751]  ? __pfx_dump_stack_lvl+0x10/0x10
[  470.423970][T20751]  ? __pfx__printk+0x10/0x10
[  470.424012][T20751]  ? ref_tracker_alloc+0x318/0x460
[  470.424042][T20751]  should_fail_ex+0x414/0x560
[  470.424074][T20751]  should_failslab+0xa8/0x100
[  470.424113][T20751]  kmem_cache_alloc_noprof+0x73/0x3c0
[  470.424146][T20751]  ? skb_clone+0x212/0x3a0
[  470.424175][T20751]  skb_clone+0x212/0x3a0
[  470.424203][T20751]  __netlink_deliver_tap+0x404/0x850
[  470.424253][T20751]  ? netlink_deliver_tap+0x2e/0x1b0
[  470.424289][T20751]  netlink_deliver_tap+0x19c/0x1b0
[  470.424323][T20751]  netlink_unicast+0x730/0x8e0
[  470.424367][T20751]  netlink_sendmsg+0x805/0xb30
[  470.424412][T20751]  ? __pfx_netlink_sendmsg+0x10/0x10
[  470.424450][T20751]  ? aa_sock_msg_perm+0x94/0x160
[  470.424479][T20751]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  470.424504][T20751]  ? __pfx_netlink_sendmsg+0x10/0x10
[  470.424538][T20751]  __sock_sendmsg+0x21c/0x270
[  470.424571][T20751]  ____sys_sendmsg+0x505/0x830
[  470.424614][T20751]  ? __pfx_____sys_sendmsg+0x10/0x10
[  470.424662][T20751]  ? import_iovec+0x74/0xa0
[  470.424708][T20751]  ___sys_sendmsg+0x21f/0x2a0
[  470.424748][T20751]  ? __pfx____sys_sendmsg+0x10/0x10
[  470.424837][T20751]  ? __fget_files+0x2a/0x420
[  470.424857][T20751]  ? __fget_files+0x3a0/0x420
[  470.424892][T20751]  __x64_sys_sendmsg+0x19b/0x260
[  470.424932][T20751]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  470.424982][T20751]  ? __pfx_ksys_write+0x10/0x10
[  470.425011][T20751]  ? rcu_is_watching+0x15/0xb0
[  470.425046][T20751]  ? do_syscall_64+0xbe/0x3b0
[  470.425077][T20751]  do_syscall_64+0xfa/0x3b0
[  470.425102][T20751]  ? lockdep_hardirqs_on+0x9c/0x150
[  470.425127][T20751]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.425151][T20751]  ? clear_bhb_loop+0x60/0xb0
[  470.425179][T20751]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.425199][T20751] RIP: 0033:0x7f00e4f8e9a9
[  470.425218][T20751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  470.425238][T20751] RSP: 002b:00007f00e5e0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  470.425263][T20751] RAX: ffffffffffffffda RBX: 00007f00e51b5fa0 RCX: 00007f00e4f8e9a9
[  470.425282][T20751] RDX: 0000000004048002 RSI: 0000200000000140 RDI: 0000000000000003
[  470.425297][T20751] RBP: 00007f00e5e0f090 R08: 0000000000000000 R09: 0000000000000000
[  470.425312][T20751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  470.425327][T20751] R13: 0000000000000000 R14: 00007f00e51b5fa0 R15: 00007ffe8e1d5878
[  470.425365][T20751]  </TASK>
[  471.023174][T20769] delete_channel: no stack
[  471.299824][T20793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4320'.
[  471.442635][T20799] FAULT_INJECTION: forcing a failure.
[  471.442635][T20799] name failslab, interval 1, probability 0, space 0, times 0
[  471.473015][T20799] CPU: 0 UID: 0 PID: 20799 Comm: syz.1.4321 Not tainted 6.16.0-rc6-syzkaller-00124-g96e056ffba91 #0 PREEMPT(full) 
[  471.473046][T20799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  471.473059][T20799] Call Trace:
[  471.473067][T20799]  <TASK>
[  471.473076][T20799]  dump_stack_lvl+0x189/0x250
[  471.473108][T20799]  ? __pfx____ratelimit+0x10/0x10
[  471.473131][T20799]  ? __pfx_dump_stack_lvl+0x10/0x10
[  471.473156][T20799]  ? __pfx__printk+0x10/0x10
[  471.473193][T20799]  ? __pfx___might_resched+0x10/0x10
[  471.473218][T20799]  ? fs_reclaim_acquire+0x7d/0x100
[  471.473245][T20799]  should_fail_ex+0x414/0x560
[  471.473273][T20799]  should_failslab+0xa8/0x100
[  471.473307][T20799]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  471.473336][T20799]  ? __pfx___dev_queue_xmit+0x10/0x10
[  471.473357][T20799]  ? __alloc_skb+0x112/0x2d0
[  471.473391][T20799]  __alloc_skb+0x112/0x2d0
[  471.473425][T20799]  netlink_ack+0x146/0xa50
[  471.473453][T20799]  ? ref_tracker_free+0x63a/0x7d0
[  471.473474][T20799]  ? __copy_skb_header+0xa7/0x550
[  471.473518][T20799]  ? __pfx_ref_tracker_free+0x10/0x10
[  471.473552][T20799]  netlink_rcv_skb+0x28c/0x470
[  471.473581][T20799]  ? __pfx_genl_rcv_msg+0x10/0x10
[  471.473603][T20799]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  471.473668][T20799]  ? down_read+0x1ad/0x2e0
[  471.473697][T20799]  genl_rcv+0x28/0x40
[  471.473716][T20799]  netlink_unicast+0x75c/0x8e0
[  471.473754][T20799]  netlink_sendmsg+0x805/0xb30
[  471.473800][T20799]  ? __pfx_netlink_sendmsg+0x10/0x10
[  471.473836][T20799]  ? aa_sock_msg_perm+0x94/0x160
[  471.473867][T20799]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  471.473891][T20799]  ? __pfx_netlink_sendmsg+0x10/0x10
[  471.473921][T20799]  __sock_sendmsg+0x21c/0x270
[  471.473950][T20799]  ____sys_sendmsg+0x505/0x830
[  471.473989][T20799]  ? __pfx_____sys_sendmsg+0x10/0x10
[  471.474032][T20799]  ? import_iovec+0x74/0xa0
[  471.474066][T20799]  ___sys_sendmsg+0x21f/0x2a0
[  471.474100][T20799]  ? __pfx____sys_sendmsg+0x10/0x10
[  471.474176][T20799]  ? __fget_files+0x2a/0x420
[  471.474195][T20799]  ? __fget_files+0x3a0/0x420
[  471.474227][T20799]  __x64_sys_sendmsg+0x19b/0x260
[  471.474263][T20799]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  471.474307][T20799]  ? __pfx_ksys_write+0x10/0x10
[  471.474342][T20799]  ? do_syscall_64+0xbe/0x3b0
[  471.474371][T20799]  do_syscall_64+0xfa/0x3b0
[  471.474393][T20799]  ? lockdep_hardirqs_on+0x9c/0x150
[  471.474413][T20799]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.474434][T20799]  ? clear_bhb_loop+0x60/0xb0
[  471.474461][T20799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.474481][T20799] RIP: 0033:0x7f7336b8e9a9
[  471.474500][T20799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  471.474519][T20799] RSP: 002b:00007f7337a62038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  471.474541][T20799] RAX: ffffffffffffffda RBX: 00007f7336db6080 RCX: 00007f7336b8e9a9
[  471.474556][T20799] RDX: 0000000004048002 RSI: 0000200000000140 RDI: 0000000000000003
[  471.474571][T20799] RBP: 00007f7337a62090 R08: 0000000000000000 R09: 0000000000000000
[  471.474584][T20799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  471.474596][T20799] R13: 0000000000000001 R14: 00007f7336db6080 R15: 00007ffe18d21f28
[  471.474630][T20799]  </TASK>
[  471.809729][T20802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4324'.
[  471.820692][T20802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4324'.
[  472.170389][T20818] Oops: general protection fault, probably for non-canonical address 0xdffffc00000e1851: 0000 [#1] SMP KASAN PTI
[  472.182422][T20818] KASAN: probably user-memory-access in range [0x000000000070c288-0x000000000070c28f]
[  472.191992][T20818] CPU: 1 UID: 0 PID: 20818 Comm: syz.0.4323 Not tainted 6.16.0-rc6-syzkaller-00124-g96e056ffba91 #0 PREEMPT(full) 
[  472.204158][T20818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  472.214229][T20818] RIP: 0010:atmtcp_c_send+0x1da/0x950
[  472.219620][T20818] Code: 4d 8d 75 1a 4c 89 f0 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 15 06 00 00 41 0f b7 1e 4d 8d b7 60 05 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 13 06 00 00 66 41 89 1e 4d 8d 75 1c 4c
[  472.239246][T20818] RSP: 0018:ffffc90003b0f810 EFLAGS: 00010202
[  472.245334][T20818] RAX: 00000000000e1851 RBX: 0000000000008007 RCX: 0000000000000002
[  472.253324][T20818] RDX: ffff888051045a00 RSI: 00000000ffffffff RDI: ffff88806377c34c
[  472.261307][T20818] RBP: ffff88803027e3c0 R08: ffff88806377c403 R09: 1ffff1100c6ef880
[  472.269294][T20818] R10: dffffc0000000000 R11: ffffffff870d4b20 R12: dffffc0000000000
[  472.277279][T20818] R13: ffff88806377c340 R14: 000000000070c288 R15: 000000000070bd28
[  472.285259][T20818] FS:  00007f75569c86c0(0000) GS:ffff888125d23000(0000) knlGS:0000000000000000
[  472.294195][T20818] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  472.300790][T20818] CR2: 00007f7555b74460 CR3: 0000000069066000 CR4: 00000000003526f0
[  472.308861][T20818] Call Trace:
[  472.312148][T20818]  <TASK>
[  472.315097][T20818]  vcc_sendmsg+0xa13/0xc60
[  472.319551][T20818]  ? __pfx_vcc_sendmsg+0x10/0x10
[  472.324529][T20818]  ? __pfx_autoremove_wake_function+0x10/0x10
[  472.330619][T20818]  ? aa_sock_msg_perm+0x94/0x160
[  472.335571][T20818]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  472.340875][T20818]  ? __pfx_vcc_sendmsg+0x10/0x10
[  472.345833][T20818]  __sock_sendmsg+0x21c/0x270
[  472.350529][T20818]  ____sys_sendmsg+0x505/0x830
[  472.355338][T20818]  ? __pfx_____sys_sendmsg+0x10/0x10
[  472.360656][T20818]  ? import_iovec+0x74/0xa0
[  472.365184][T20818]  ___sys_sendmsg+0x21f/0x2a0
[  472.369896][T20818]  ? __pfx____sys_sendmsg+0x10/0x10
[  472.375138][T20818]  ? __fget_files+0x2a/0x420
[  472.379743][T20818]  ? __fget_files+0x3a0/0x420
[  472.384446][T20818]  __x64_sys_sendmsg+0x19b/0x260
[  472.389408][T20818]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  472.394886][T20818]  ? rcu_is_watching+0x15/0xb0
[  472.399675][T20818]  ? do_syscall_64+0xbe/0x3b0
[  472.404402][T20818]  do_syscall_64+0xfa/0x3b0
[  472.408921][T20818]  ? lockdep_hardirqs_on+0x9c/0x150
[  472.414131][T20818]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.420210][T20818]  ? clear_bhb_loop+0x60/0xb0
[  472.424907][T20818]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.430817][T20818] RIP: 0033:0x7f7555b8e9a9
[  472.435262][T20818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  472.454889][T20818] RSP: 002b:00007f75569c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  472.463324][T20818] RAX: ffffffffffffffda RBX: 00007f7555db6160 RCX: 00007f7555b8e9a9
[  472.471307][T20818] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004
[  472.479294][T20818] RBP: 00007f7555c10d69 R08: 0000000000000000 R09: 0000000000000000
[  472.487277][T20818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  472.495259][T20818] R13: 0000000000000000 R14: 00007f7555db6160 R15: 00007ffca4df1a98
[  472.503248][T20818]  </TASK>
[  472.506285][T20818] Modules linked in:
[  472.512118][T20818] ---[ end trace 0000000000000000 ]---
[  472.579004][T20818] RIP: 0010:atmtcp_c_send+0x1da/0x950
[  472.597241][T20818] Code: 4d 8d 75 1a 4c 89 f0 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 15 06 00 00 41 0f b7 1e 4d 8d b7 60 05 00 00 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 13 06 00 00 66 41 89 1e 4d 8d 75 1c 4c
[  472.619464][T20818] RSP: 0018:ffffc90003b0f810 EFLAGS: 00010202
[  472.626574][T20818] RAX: 00000000000e1851 RBX: 0000000000008007 RCX: 0000000000000002
[  472.637326][T20818] RDX: ffff888051045a00 RSI: 00000000ffffffff RDI: ffff88806377c34c
[  472.647076][T20818] RBP: ffff88803027e3c0 R08: ffff88806377c403 R09: 1ffff1100c6ef880
[  472.659877][T20818] R10: dffffc0000000000 R11: ffffffff870d4b20 R12: dffffc0000000000
[  472.670857][T20818] R13: ffff88806377c340 R14: 000000000070c288 R15: 000000000070bd28
[  472.683456][T20818] FS:  00007f75569c86c0(0000) GS:ffff888125c23000(0000) knlGS:0000000000000000
[  472.693402][T20818] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  472.700853][T20818] CR2: 00007f7556985f98 CR3: 0000000069066000 CR4: 00000000003526f0
[  472.709655][T20818] Kernel panic - not syncing: Fatal exception
[  472.716091][T20818] Kernel Offset: disabled
[  472.720425][T20818] Rebooting in 86400 seconds..