last executing test programs:

1m9.595197541s ago: executing program 3 (id=2490):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0xfffffffe}, 0x14)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010000000000004c00128009000100626f6e64000000003c000280050001000200000008000a0000000000050001000200000005000c00ffff"], 0x7c}, 0x1, 0x0, 0x0, 0x11}, 0x0)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x17)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000140), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e20, 0x5, @private2, 0x101}}, 0x0, 0x0, 0x37, 0x0, "519735377d32b88020bf607ef96a39a098fe75f5d3d27c08f4b730e4d98f9a126d3c0c9fb6b2c5bff110ff98c12832a47ada00db468d8168c288acc3385d69f0ac9d615f0ea8931d512a3b08c312d9bd"}, 0xd8)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r10=>0x0})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="997425bd7000fbdbdf25150000004c0001800d0001007564703a73797a32000000003800040038d10100"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x2400c000)
sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYRESDEC=r5, @ANYRES16], 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYRESOCT, @ANYRES32=r10, @ANYBLOB="04005b000600650040000000"], 0x28}}, 0x0)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r14, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32, @ANYBLOB="05005b"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r2, @ANYBLOB="2521ac6435c6c691a475d1f1ffcc27a3e2839164e8b91c60cb2e808a385a598cc31367c841f3ccdd1203d1df6e10874a9ec1258e69ae150e0000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r15 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)

1m8.594496395s ago: executing program 3 (id=2499):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x50, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x8}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x9}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x2}, @TCA_FQ_RATE_ENABLE={0x8}]}}]}, 0x50}}, 0x4000000)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1m8.274281619s ago: executing program 3 (id=2502):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x1, 0x4)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
ppoll(&(0x7f00000001c0)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0)
write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)
write$rfkill(r1, &(0x7f0000000340)={0x8, 0x0, 0x5, 0x0, 0x1}, 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x4, @any, 0x1, 0x1}, 0xe)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, 0x0, 0x0, 0x931766f6319eed40)
shutdown(r3, 0x1)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x7}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fbffffff00000000000000008500000041000000850000001100010095000000000000001324287584fa8591db1b54fb1fa002d0623fe331814284b3df1d728cb3f27ee19de56c7dd7f017518ce509a60629a4153fb861956545ea9b1f24d7b548df845e4f20212f207ab2c4e591adeff10063fc29e43bb0b3e8b48d184fc5efab217e44"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r4, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10)
sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_msfilter(r4, 0x0, 0x29, 0x0, 0x1c)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x286043, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'xfrm0\x00', 0x8000})
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)})
bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
connect$inet(r6, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10)
write$bt_hci(r7, &(0x7f0000000040)=ANY=[], 0x6)
socket$nl_route(0x10, 0x3, 0x0)

1m7.285480824s ago: executing program 3 (id=2514):
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
splice(r0, 0x0, r1, &(0x7f00000002c0), 0x6, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x90)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e)
r4 = epoll_create(0x6)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000dc0)={0x15})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x2d, 0x20040040)
bind$unix(r3, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
recvmmsg(r2, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10020, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r5, &(0x7f0000000000)={&(0x7f00000005c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000029000000040000000200000000000000280000000000000029000000050000000002020100"], 0x40}, 0x20040000)
socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4880)

1m7.109544955s ago: executing program 3 (id=2515):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa434147875", 0x43}], 0x1}, 0x48804)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)

1m7.041532283s ago: executing program 3 (id=2516):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
unshare(0x6a040000)
unshare(0x44000000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0xfffffdef}}, 0x0)
recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
close(0xffffffffffffffff)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0xffff, 0x380000, @loopback}, 0x1c)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x10814)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r3, &(0x7f0000000280), 0x0}, 0x20)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
read$rfkill(r5, &(0x7f0000000140), 0x8)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r7=>0xffffffffffffffff})
splice(r6, 0x0, r4, 0x0, 0xf3a, 0xc)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000001c0)='rpcgss_upcall_msg\x00', r8, 0x0, 0x10001}, 0x18)
close(r7)

1m6.202933372s ago: executing program 1 (id=2523):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4008000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', <r2=>0x0})
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
accept4(r4, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x803, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000500)={0x0, @default, @netrom={'nr', 0x0}, 0x9, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xd2, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'veth1\x00', <r11=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0)
r12 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r12, 0x891c, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r13 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0)
writev(r13, &(0x7f00000002c0)=[{&(0x7f0000000080)="93d90400000300", 0x7}, {&(0x7f00000001c0)="17eacf168e74c5", 0x7}, {&(0x7f0000000100)="5a51c7936b6a3c3a3bcb0e8e4c0f14cc9218914951df503f3f4f0f27511150516e3664b4bf3d28e5b6103093f8f429feff6e39afbfd7a227886020d02280ef8f08cda4ad0233a063cb2e6fc01aef3de3b45e7163c171958ad6196c3df11f355c3484ebc6125f9900da0a792347d124fc5740c216c255101508ce515e6b2da403b929454a19a4a289c436e58a0bbbb3ae3e2470bf80ac753c01f31b19c7a268e6f825", 0xa2}, {&(0x7f0000000200)="a5e373f720b88603fc05482dd8f03c46d7b1636c4f254f3eaabf5abba7f81e9fb176cbe422b4a0a322c5a28dc94389f8f918f300b993534359ffe1e527d1e28b2a1dcf8935f9c371885b00672ee6ef8de286ed21c32fc66205f7404927d99a09e47f63939086062a798f83cba396c5859d6c25eac8c4724617856e071b41d313d6baffbc177d8bfc1768b64abc1401f1dd5596c97b545f4df98d6e9396bf830fd5f2c522c3c7dcd777c0375fbe61b1dba8231faf", 0xb4}], 0x4)

1m5.685656227s ago: executing program 1 (id=2530):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0xfffffffc, 0x15, 0x3}, 0x10)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000100000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000080000000500000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x40, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m5.590164881s ago: executing program 0 (id=2532):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) (async)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
sendto$inet(r1, &(0x7f0000000280)="1a14d470", 0x4, 0x5810, &(0x7f0000000300)={0x2, 0x4e24, @empty}, 0x10) (async)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async)
recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000400)=""/146, 0x92}, {&(0x7f0000000300)=""/23, 0x17}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400})
mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r2, 0x80000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYRES8=r2], 0x7c}}, 0x840)

1m5.439859714s ago: executing program 1 (id=2534):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x13c, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0x128, 0x1, [@m_simple={0x124, 0xb, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xfffff001, 0x6, 0x3, 0x9, 0x2}}, @TCA_DEF_DATA={0x8, 0x3, 'nbd\x00'}]}, {0xd7, 0x6, "f4a56c982a65e3d18dfcf0040b31159bcfb9e4d1270451fbe6211810269144fb7e3162b8aca50adc87891689f8cf5d0a5c66b2871766a6bfae1c5d72c505009507d1b464cba3918d332d8543b52aa3f6bdf5ed00552cfcaa57201335a5e6320bd2861993b1f560eeb27541641d1b84d78630bb6ce405c2a64befd602d5ad79292acf8b34b66a4550bdec93bdd0db25998f986c92a3dd302f7ef6b6c09ced9d64e20b7bb6393cd38e90d10e5cbf5a07fe73c44bb14ae119c836d46d6c18f3d57d0c69069c0d90e9332533da6c262796b4794d5a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x6}}}}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000)

1m5.361368637s ago: executing program 0 (id=2535):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e24, 0xfdffffb1, @private0, 0x5}, {0xa, 0x4e23, 0x7, @mcast2, 0x56504}, 0xfffe, {[0x5447, 0x3, 0x7, 0xc4, 0x3, 0xffffffff, 0x7, 0xfffffffa]}}, 0x5c)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000100100000c000000290066ffbf2b53b5"], 0x28}, 0x20004000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x14, 0x4, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x400261f3, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x400}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x54}}, 0x0)
r7 = accept4(r5, 0x0, 0x0, 0x0)
r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000480), r7)
sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)={0x14, r8, 0x1, 0x70bd27, 0x255fdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2081}, 0x2000c0c0)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r8, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x9a}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x80)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000019000000", @ANYBLOB="01000000000000001c001280090001"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)

1m5.292603921s ago: executing program 1 (id=2537):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000000f00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000059c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r4, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000005c80)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r2, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x1, 0x27}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c0}, 0x200840b0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b94eef96755cc6fdd33068440700", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m5.27944133s ago: executing program 2 (id=2538):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)="18000000140081044e81f782db44b9040a1d080211000000", 0x18}, {&(0x7f00000001c0)="adce622357450c0462d00191e869e9df80be8313ad62cb55c3d9f20225bac27954dc7c86be0992e3477c3e082b60d2397d28fb9236e3", 0x36}], 0x2, 0x0, 0x0, 0x7400}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000)
setsockopt$MRT6_DONE(r2, 0x29, 0xc9, 0x0, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000000))
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000001300)={&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/203, 0xcb, 0x0, &(0x7f0000001200)}, &(0x7f0000000040)=0x40)

1m5.14550662s ago: executing program 2 (id=2539):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x4, 0x4}, 0x50)
sendfile(r0, r0, &(0x7f0000000080)=0x1, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000440)}, 0x10)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast2}, 0x1c)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00@\x00'/28], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x9, 0x20, &(0x7f00000010c0)=ANY=[@ANYBLOB="180000000000010000000000ff7f000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018450000feffffff0000000000000000017a020001000000181a0000", @ANYRES32=r0, @ANYBLOB="00000000000000008510000003000000183d0000020000000000000000000000180100002064bd2500000000002020207b1af8ff00000000bfa100000000002c24b5aa94b6c30007010000f8ffffffb702000008000000b70300000000000085000000060000008520000004000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x7, 0xd9, &(0x7f00000006c0)=""/217, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x3, 0x1, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000800)=[r3], &(0x7f0000000840)=[{0x10000000, 0x3, 0x9, 0x1}, {0x4, 0x1, 0x6, 0x7}, {0x4, 0x2, 0xe, 0x3}, {0x4, 0x4, 0x8, 0x5}, {0x1, 0x2, 0xe, 0x3}, {0x1, 0x5, 0xf, 0x2}, {0x4, 0x3, 0x2, 0x1}, {0x3, 0x3, 0x1, 0x5}], 0x10, 0x7fff}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc)
sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
setsockopt$inet6_udp_int(r2, 0x88, 0x1, &(0x7f0000000080), 0x4)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0)
preadv(r9, 0x0, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

1m5.015119654s ago: executing program 1 (id=2540):
unshare(0x20000400)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x220242, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)={0x90000002})
r2 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r2, &(0x7f0000000000), 0x10)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000040)=[{{0x3}, {0x3, 0x0, 0x1, 0x1}}], 0x8)
close(r2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c000014000280060012000000000006000f0011"], 0x44}}, 0x0)
r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @multicast2}, &(0x7f0000000340)=0x10, 0x40000)
ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @broadcast}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x8, {0x2, 0x4e21, @remote}, 'veth0_to_team\x00'})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f00000001c0)={0x0, @isdn={0x22, 0x7, 0x8, 0xf6, 0x2}, @hci={0x1f, 0xffffffffffffffff}, @isdn={0x22, 0x8, 0x9, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)='bond_slave_1\x00', 0x5, 0x27, 0x9490})
socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000440)={<r5=>r3, 0x10000, 0xe13b, 0x8000})
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, r1, 0x0, 0x4}, 0x50)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8)
getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x80, 0x2000, {0x0, 0x0, 0x0, r9, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x27, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, [@generic={0x3, 0x9, 0xe, 0x3, 0x7b4e}, @ringbuf_query, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xde}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @exit, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xb}]}, &(0x7f0000000640)='GPL\x00', 0x9, 0x95, &(0x7f0000000680)=""/149, 0x0, 0x22, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0x3, 0xffffff7f, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r1, @ANYBLOB="42199a4bb9440102f779d0d2878bb7387857275e3f7b8c52f19a4fc2a65ea7cc9915b5e11eac738023baf5a2c9eb5aacfed04f101eb90dadcb9242390cb1f28fe57471b386e83cf97899ce58b77402585423007cffb391b5c72e66a53256a0f3a5df10ad10430781d18e4b34bdfc"], 0x50}}, 0x4000480)

1m4.674248425s ago: executing program 1 (id=2541):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'batadv_slave_1\x00', {0x2, 0x0, @initdev}})
unshare(0x6a040000)
socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES8=r2], 0x38}}, 0x50)
unshare(0x44000000)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRESDEC], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5}, 0x10)
unshare(0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)
nanosleep(0x0, 0x0)
listen(r4, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r7, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0xd30e4a27f72a5dfb}}, 0x20)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x800)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1)
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, r8, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, '\x00', 0x5}}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4008840)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000240), &(0x7f0000000380)=0x4)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000300)=0x7, 0x4)

1m4.289995135s ago: executing program 0 (id=2543):
socket$packet(0x11, 0x3, 0x300)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x1)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000c40), 0x12)
read(r2, &(0x7f0000000240)=""/193, 0xc1)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={<r6=>0x0, 0x7, 0x0, 0x9, 0x337, 0x200}, &(0x7f0000000080)=0x14)
setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f00000000c0)={r6, 0x80000000, 0x8001, 0x3}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000fcffffff000000008000000085000000a800000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
pwritev(r5, &(0x7f0000000100), 0x0, 0xc5f, 0x800)

1m4.113558834s ago: executing program 2 (id=2544):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00'}, 0x10)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x0, 0x80}, &(0x7f0000000500)=0x90)
socket(0x15, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000000)=@fragment={0x2c, 0x0, 0x40, 0x1, 0x0, 0x3, 0x64}, 0x8)
setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000050c0), r3)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, &(0x7f00000051c0)={0x0, 0x0, &(0x7f0000005180)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="71c928bd7000fddbdf251000000006001000ffff0000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x40044}, 0x8)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000d38a95ca491af33e9c02ca92fda9ce7e996127e30834abde4a6e904790c81a352de749e1ae20621a29e1dde6132ad8f1c56c3d18451c876fe2e4efcfd11a5b6c9229846864c0dfda13c0fa308564e8fcb64f2f3b843e63b0114f6eefcdc582316d07c37966b79161582b14a81094906e", @ANYRES16=r5, @ANYBLOB="7961fdffffff000000007e0000000c0099006d91000015000000"], 0x20}}, 0x4000054)
sendmsg$NL80211_CMD_RELOAD_REGDB(r1, 0x0, 0x20008004)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r6}, 0x18)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r6, 0x0, 0x0}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0b440400040000000000000008000100736974001400023805e4e1458008000300ffffffff08000c"], 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)

1m3.862632488s ago: executing program 0 (id=2545):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10)
connect$llc(r0, &(0x7f00000001c0)={0x1a, 0x303, 0x81, 0x1, 0x10, 0x8e, @broadcast}, 0x10)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
close(r1) (async)
socket$inet_udp(0x2, 0x2, 0x0)
shutdown(r1, 0x0) (async)
recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) (async)
read(r1, &(0x7f0000000000)=""/31, 0x1f) (async)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) (async, rerun: 32)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (rerun: 32)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYRES16, @ANYRESHEX=r3], 0x14}, 0x1, 0x0, 0x0, 0x20008041}, 0xc000041) (async, rerun: 32)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000e80)=@gcm_256={{0x303, 0x36}, "437e509e2d2800", "8b3de2aabceef2a0640000d5a66fd32f419e59f3000000000400", "7d939a3c"}, 0x38) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'bond0\x00', <r4=>0x0})
mmap(&(0x7f000015c000/0x1000)=nil, 0x1000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async, rerun: 32)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x5, '\x00', r4, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x50) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x12, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000085ee0f12000000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b70300008000000085005b0000bf09000000fdff0055090100000000009500000000000000db09f8ffecffffff852000000500000095000000000000bf91000000000000b7020000000000008500000085000000b7000000abf7a6449500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94)

1m3.761867961s ago: executing program 2 (id=2546):
r0 = socket$netlink(0x10, 0x3, 0x4)
ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000001980)={0xdad, 0xfffffffffffffffb, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001900)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01040400000a00120002002800000019002d4400009b84136ef75afb83de066a5b00e1baac341b61130000f2ff00000100"/85, 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x54ba127bacedb3d2}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_deladdr={0x88, 0x15, 0x300, 0x70bd2d, 0x25dfdbfb, {0xa, 0x10, 0x10, 0x0, r1}, [@IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @local}}, @IFA_FLAGS={0x8}, @IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_FLAGS={0x8, 0x8, 0x402}, @IFA_FLAGS={0x8, 0x8, 0x20}, @IFA_CACHEINFO={0x14, 0x6, {0x4, 0x5, 0x2, 0x2}}, @IFA_LOCAL={0x14, 0x2, @private2}, @IFA_FLAGS={0x8, 0x8, 0x444}]}, 0x88}, 0x1, 0x0, 0x0, 0xc840}, 0x4040)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000200)="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")

1m3.614396349s ago: executing program 0 (id=2548):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async, rerun: 64)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast1, 0x0, 0x0, 'sh\x00', 0x2e, 0xff, 0xf}, 0x2c) (async, rerun: 64)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x4}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0xffffffffffffffd7, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) (async)
r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000201000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/174, 0xae, 0x0, &(0x7f00000002c0)=""/224, 0xe0}, &(0x7f00000003c0)=0x40)

1m3.600529691s ago: executing program 2 (id=2549):
bpf$BPF_PROG_TEST_RUN(0x12, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
socket$xdp(0x2c, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x2b, 0x80801, 0x1)
setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000100)=0xffff8000, 0x4)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c)
r2 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200cc0c5, &(0x7f0000001100)={0xa, 0x4e27, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x2d}}, 0x1c)
sendto$inet6(r2, &(0x7f0000001000)="2501d77b330b7e73d6b1d1b8a457ff7420b4b43ce0861f000000714fa228ee1f5b4840402df131465c3df68077b209c3198404025e71d52c49f8f0d11a25a16fa6b27c76460f19ec7067a419e973a8445a76f5379cacbef4c9be6f4fc2e140fc3626eb84564f550a14fe3f2e3786efe6ad3ac0e0c0de558c35f6dfb5b49f95c2491289020b1862b331b2cdb52d9455fbe52b645eba5738b070d9e5c4d8b645df979c556d7aab0bbf90738dad2e651e3c18847295b3a541190fd39ca8", 0xfffffffffffffe57, 0x40440c4, 0x0, 0xffffffffffffffd6)
r3 = socket$xdp(0x2c, 0x3, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000440)=0x199c0, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r5=>0x0})
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockname(r7, &(0x7f0000000180)=@sco={0x1f, @none}, &(0x7f00000002c0)=0x80)
setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r8=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
r9 = socket$alg(0x26, 0x5, 0x0)
r10 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r10, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8)
connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c)
sendmmsg$inet6(r10, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000002440)="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", 0x4fe}], 0x1}}], 0x1, 0x4000000)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000340)="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", 0xfa)
bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10)
bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r6}, 0x60)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x0)

1m2.989369699s ago: executing program 2 (id=2552):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1200000006000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000f147000000000000e0ff00db42179e0000000000000000000000af99cf7a502936907e2a3d43157e030048e781b6a8613cff10c160385932"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000340), &(0x7f0000000140)}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580)=0x2, &(0x7f00000000c0)}, 0x20)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', <r2=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@mcast1, r2}, 0x14)
sendto$inet6(r1, &(0x7f0000000040)="800065b6eedadd18", 0x8, 0x0, &(0x7f0000004200)={0xa, 0xfff9, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x10000}, 0x1c)
close(0x4)
unshare(0x6a040000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x9)
socket$inet_mptcp(0x2, 0x1, 0x106)
r5 = accept(r4, &(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f00000001c0)=0xffffffbc)
syz_emit_ethernet(0x56, &(0x7f0000000880)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa08006001044a00203afffe8000000000000000000000000000bbfe8000000000000000000000000000aa880090780000ff070000000000000000f3000000000000bb0201000000000000"], 0x0)
sendmsg$NL80211_CMD_SET_WOWLAN(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1480040}, 0xfffffffffffffed8, &(0x7f00000002c0)={&(0x7f0000003740)=ANY=[], 0x2c4c}, 0x1, 0x0, 0x0, 0x2}, 0x4011)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2c, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @private0}}}, 0x108)
setsockopt$inet6_tcp_buf(r4, 0x6, 0xb, &(0x7f0000000900)="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", 0x1000)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a090400000000000000000200000044000480140001800c0001006e6f747261636b00040002802c0001800e0001000002800c00028005000100c400000008000140000000090900010073797a30000000000900020073797a3200000000140000001100010000000000000008000000000a00"/152], 0x98}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001900)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES64=r8, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094)

1m2.846867296s ago: executing program 0 (id=2553):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000001000ffff25bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2402000000200500300012800b00010065727370616e0000200002800400120006001800050f00000500160002000000050017"], 0x50}}, 0x8000) (async, rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0, 0x0, 0x10004}, 0x18) (rerun: 64)
unshare(0x44000000) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='kvm_dirty_ring_exit\x00', r0, 0x0, 0xd}, 0x18) (async)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r3, 0x0) (async)
r4 = socket(0x400000000010, 0x3, 0x0)
write(r4, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030003000500e1000c0400070080000700", 0x33a)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async, rerun: 64)
r6 = accept(r2, 0x0, 0x0) (rerun: 64)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10)

1m2.717815358s ago: executing program 4 (id=2554):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000000)={0x2a, 0x1}, 0xc)
connect$qrtr(r1, &(0x7f0000000600)={0x2a, 0x4, 0x4000}, 0xc)
bind$alg(r0, &(0x7f0000000b00)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) (async)
bind$alg(r0, &(0x7f0000000b00)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4)
r2 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r2, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="f703010010fff3be522ba800000000", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba1282", 0x12}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2000847}], 0x1, 0x40800)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x4, 0x1, 0x0, @remote, @local}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0x18}}}}}, 0x0) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x4, 0x1, 0x0, @remote, @local}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0x18}}}}}, 0x0)
recvmmsg$unix(r2, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000580)=""/21, 0x15}, {&(0x7f0000000640)=""/11, 0xb}], 0x2}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/192, 0xc0}], 0x1}}], 0x2, 0x40000000, 0x0) (async)
recvmmsg$unix(r2, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000580)=""/21, 0x15}, {&(0x7f0000000640)=""/11, 0xb}], 0x2}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/192, 0xc0}], 0x1}}], 0x2, 0x40000000, 0x0)

54.384796618s ago: executing program 4 (id=2555):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x2000)
ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(r2, 0x89f3, &(0x7f0000000000))
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
r4 = socket(0x1f, 0x3, 0x2)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x1, 0xfff1}, {0xa, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080)

49.861430868s ago: executing program 32 (id=2516):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
unshare(0x6a040000)
unshare(0x44000000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0xfffffdef}}, 0x0)
recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
close(0xffffffffffffffff)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0xffff, 0x380000, @loopback}, 0x1c)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x10814)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r3, &(0x7f0000000280), 0x0}, 0x20)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(0x0, r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
read$rfkill(r5, &(0x7f0000000140), 0x8)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r7=>0xffffffffffffffff})
splice(r6, 0x0, r4, 0x0, 0xf3a, 0xc)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000001c0)='rpcgss_upcall_msg\x00', r8, 0x0, 0x10001}, 0x18)
close(r7)

47.759885325s ago: executing program 33 (id=2541):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'batadv_slave_1\x00', {0x2, 0x0, @initdev}})
unshare(0x6a040000)
socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES8=r2], 0x38}}, 0x50)
unshare(0x44000000)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRESDEC], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5}, 0x10)
unshare(0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)
nanosleep(0x0, 0x0)
listen(r4, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081140000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105a00000000001d300500000000004704000001ed00000f030000000000001d44020000000000620a00fe040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a8641aa05a1336b3b4c4becea710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343cccc953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c9102"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r7, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0xd30e4a27f72a5dfb}}, 0x20)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x800)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1)
sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, r8, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, '\x00', 0x5}}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4008840)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000240), &(0x7f0000000380)=0x4)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000300)=0x7, 0x4)

45.17098457s ago: executing program 34 (id=2553):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000001000ffff25bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2402000000200500300012800b00010065727370616e0000200002800400120006001800050f00000500160002000000050017"], 0x50}}, 0x8000) (async, rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0, 0x0, 0x10004}, 0x18) (rerun: 64)
unshare(0x44000000) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='kvm_dirty_ring_exit\x00', r0, 0x0, 0xd}, 0x18) (async)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r3, 0x0) (async)
r4 = socket(0x400000000010, 0x3, 0x0)
write(r4, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030003000500e1000c0400070080000700", 0x33a)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async, rerun: 64)
r6 = accept(r2, 0x0, 0x0) (rerun: 64)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10)

42.929837489s ago: executing program 35 (id=2552):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1200000006000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000f147000000000000e0ff00db42179e0000000000000000000000af99cf7a502936907e2a3d43157e030048e781b6a8613cff10c160385932"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000340), &(0x7f0000000140)}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580)=0x2, &(0x7f00000000c0)}, 0x20)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', <r2=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@mcast1, r2}, 0x14)
sendto$inet6(r1, &(0x7f0000000040)="800065b6eedadd18", 0x8, 0x0, &(0x7f0000004200)={0xa, 0xfff9, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x10000}, 0x1c)
close(0x4)
unshare(0x6a040000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x9)
socket$inet_mptcp(0x2, 0x1, 0x106)
r5 = accept(r4, &(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f00000001c0)=0xffffffbc)
syz_emit_ethernet(0x56, &(0x7f0000000880)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa08006001044a00203afffe8000000000000000000000000000bbfe8000000000000000000000000000aa880090780000ff070000000000000000f3000000000000bb0201000000000000"], 0x0)
sendmsg$NL80211_CMD_SET_WOWLAN(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1480040}, 0xfffffffffffffed8, &(0x7f00000002c0)={&(0x7f0000003740)=ANY=[], 0x2c4c}, 0x1, 0x0, 0x0, 0x2}, 0x4011)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2c, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @private0}}}, 0x108)
setsockopt$inet6_tcp_buf(r4, 0x6, 0xb, &(0x7f0000000900)="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", 0x1000)
syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a090400000000000000000200000044000480140001800c0001006e6f747261636b00040002802c0001800e0001000002800c00028005000100c400000008000140000000090900010073797a30000000000900020073797a3200000000140000001100010000000000000008000000000a00"/152], 0x98}}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001900)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES64=r8, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094)

41.960169768s ago: executing program 4 (id=2560):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000010c0)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf361500000008002a000500000008000300", @ANYRES32=r2, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4040041}, 0x810)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000020000000000000000000000957c502f7f7ef2fb02b2c94b15b3e477ea779fbb172142592a8d9c53784a4302ea4224296430afbeacde22e5dfb2ba9ddaf5f0f049ee5107521d92eaa931217e432cc3e87e6373dce223236ada9877777acb36f5ae547251ccef69374cec639640e732081cb300a8fb751b7c81cf51e89e3aa3c3f5c5da526d00000000000000"], &(0x7f0000000500)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), r8)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r9, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {0x0, 0x4107}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040000)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r11, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r12 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r8)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r6, @ANYRES16=r12, @ANYBLOB="017664bdb0128c491abc3a0000000000f1a90b"], 0x24}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20)
close(r5)
recvmsg(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000005c0)=""/85, 0x55}], 0x1}, 0x40002142)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', <r13=>0x0})
r14 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r13, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18)
r15 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450)
sendmsg$NFT_BATCH(r15, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a00000509000200c9797a32000000001c000480180001800d00010073796e70726fbf052bfcc48a6f4e787900000000040002800900010073797a3100000000140000001100010000000000000000000e00000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$NFT_BATCH(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0)
socketpair(0x2a, 0x4, 0xb, &(0x7f0000000180))
r16 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYRESHEX=r13, @ANYRES64, @ANYRESHEX], &(0x7f00000004c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r14, 0xffffffffffffffff, 0x4, r16}, 0x10)
socket$igmp(0x2, 0x3, 0x2)

32.349220081s ago: executing program 4 (id=2561):
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, 0x0)
r0 = socket$inet(0x2, 0x3, 0x30)
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r1, &(0x7f00000039c0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c044)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="8000000002000200080004000000000008001b"], 0x30}}, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x60, 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x48, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004c004}, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58)
r7 = accept4$alg(r6, 0x0, 0x0, 0x0)
sendmmsg$sock(r7, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000006c0)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83a7404087d4bcb64f6ecad05459d12595d5b8b2657f2f29656a15e5a18e3168946dcb5faa59f7b404bad393ba06734d170b0513aeb0d051", 0xd5}, {&(0x7f00000004c0)="62c99e05d98775ed1beb5d67431ead896f7060f03e5b8671b283168d0df1573bef271f3a22b9cac06e27c7e87b34a19188d3e10e670bc070f0d3eb88d2f891d242747e0deec4a10609b12d4058b0fbff28bb01e6e49b533b03b11288ff4da1ab3226a2e3ba5fc47969142f1a1a0ca9ba4cece2ac9a5fcd89343de7e57dfcbb6216499555bd04f2fcb91c3c6c72868a3797ec63f8138ab74b5034878812df8b0445704cb33f81bffed93c3e645a206db134f626a59f4fac53fbf23489cf2f45d05d735e64033376671da045df97bcb989bda1d17ba14afbfd19e32a8222ebf934c17fed237b86aef2e830", 0xea}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd46493862d9eb11d188464208592330ac482436286448", 0x20}], 0x3}}], 0xaa, 0x4000010)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)

22.595520492s ago: executing program 4 (id=2562):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x7fffefff}], 0x2}], 0x1, 0x0)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000580)=0xe, 0x4)
sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x1402, 0x200, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x48040)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xb4}}, 0x800)

16.561089982s ago: executing program 4 (id=2563):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
unshare(0x62040200)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x800)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3425}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000500)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)
recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)

0s ago: executing program 36 (id=2563):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
unshare(0x62040200)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000061000000b70000004000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x800)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3425}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000500)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)
recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)

kernel console output (not intermixed with test programs):

0
[  288.334727][T12056]  ? skb_clone+0x246/0x3a0
[  288.334753][T12056]  ? __netlink_deliver_tap+0x807/0x850
[  288.334783][T12056]  ? netlink_deliver_tap+0x2e/0x1b0
[  288.334823][T12056]  ? netlink_deliver_tap+0x2e/0x1b0
[  288.334864][T12056]  netlink_unicast+0x82f/0x9e0
[  288.334902][T12056]  ? __pfx_netlink_unicast+0x10/0x10
[  288.334932][T12056]  ? netlink_sendmsg+0x642/0xb30
[  288.334958][T12056]  ? skb_put+0x11b/0x210
[  288.334990][T12056]  netlink_sendmsg+0x805/0xb30
[  288.335027][T12056]  ? __pfx_netlink_sendmsg+0x10/0x10
[  288.335060][T12056]  ? aa_sock_msg_perm+0xf1/0x1d0
[  288.335090][T12056]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  288.335109][T12056]  ? __pfx_netlink_sendmsg+0x10/0x10
[  288.335138][T12056]  __sock_sendmsg+0x21c/0x270
[  288.335167][T12056]  ____sys_sendmsg+0x505/0x830
[  288.335196][T12056]  ? __pfx_____sys_sendmsg+0x10/0x10
[  288.335228][T12056]  ? import_iovec+0x74/0xa0
[  288.335257][T12056]  ___sys_sendmsg+0x21f/0x2a0
[  288.335281][T12056]  ? __pfx____sys_sendmsg+0x10/0x10
[  288.335349][T12056]  ? __fget_files+0x2a/0x420
[  288.335368][T12056]  ? __fget_files+0x3a0/0x420
[  288.335401][T12056]  __x64_sys_sendmsg+0x19b/0x260
[  288.335426][T12056]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  288.335467][T12056]  ? do_syscall_64+0xbe/0xfa0
[  288.335497][T12056]  do_syscall_64+0xfa/0xfa0
[  288.335522][T12056]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.335542][T12056]  ? clear_bhb_loop+0x60/0xb0
[  288.335568][T12056]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.335588][T12056] RIP: 0033:0x7ff169b8efc9
[  288.335610][T12056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  288.335637][T12056] RSP: 002b:00007ff167dd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  288.335662][T12056] RAX: ffffffffffffffda RBX: 00007ff169de6090 RCX: 00007ff169b8efc9
[  288.335677][T12056] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  288.335690][T12056] RBP: 00007ff169c11f91 R08: 0000000000000000 R09: 0000000000000000
[  288.335703][T12056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  288.335716][T12056] R13: 00007ff169de6128 R14: 00007ff169de6090 R15: 00007ffde5397098
[  288.335755][T12056]  </TASK>
[  288.853018][T12056] Mem-Info:
[  288.856348][T12056] active_anon:4694 inactive_anon:0 isolated_anon:0
[  288.856348][T12056]  active_file:3334 inactive_file:39961 isolated_file:0
[  288.856348][T12056]  unevictable:768 dirty:164 writeback:0
[  288.856348][T12056]  slab_reclaimable:11490 slab_unreclaimable:189210
[  288.856348][T12056]  mapped:29347 shmem:1352 pagetables:1087
[  288.856348][T12056]  sec_pagetables:0 bounce:0
[  288.856348][T12056]  kernel_misc_reclaimable:0
[  288.856348][T12056]  free:1235309 free_pcp:14746 free_cma:0
[  288.856994][T12077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1521'.
[  288.904105][T12056] Node 0 active_anon:18776kB inactive_anon:0kB active_file:13336kB inactive_file:159644kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117388kB dirty:656kB writeback:0kB shmem:3872kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13820kB pagetables:4200kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  288.947617][T12056] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  288.950037][T12079] netlink: 'syz.0.1522': attribute type 1 has an invalid length.
[  288.987717][T12056] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  289.036074][T12079] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1522'.
[  289.055952][T12056] lowmem_reserve[]: 0 2505 2505 2505 2505
[  289.062631][T12056] Node 0 DMA32 free:1026476kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18676kB inactive_anon:0kB active_file:13336kB inactive_file:159644kB unevictable:1536kB writepending:656kB zspages:0kB present:3129332kB managed:2565224kB mlocked:0kB bounce:0kB free_pcp:45144kB local_pcp:20776kB free_cma:0kB
[  289.128617][T12056] lowmem_reserve[]: 0 0 0 0 0
[  289.138949][T12056] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  289.192145][T12087] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  289.209222][T12056] lowmem_reserve[]: 0 0 0 0 0
[  289.214440][T12056] Node 1 Normal free:3899528kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13988kB local_pcp:8580kB free_cma:0kB
[  289.248909][T12056] lowmem_reserve[]: 0 0 0 0 0
[  289.254033][T12056] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  289.267482][T12056] Node 0 DMA32: 1473*4kB (UME) 301*8kB (UME) 115*16kB (UME) 386*32kB (UM) 369*64kB (UM) 142*128kB (UM) 71*256kB (UME) 28*512kB (UM) 16*1024kB (UME) 6*2048kB (UM) 220*4096kB (UM) = 1026588kB
[  289.286882][T12056] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  289.299078][T12056] Node 1 Normal: 186*4kB (UME) 36*8kB (UME) 38*16kB (UME) 171*32kB (UME) 51*64kB (UME) 6*128kB (UME) 3*256kB (UM) 3*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3899528kB
[  289.318098][T12056] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  289.327982][T12056] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  289.337649][T12056] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  289.347363][T12056] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  289.357085][T12056] 44643 total pagecache pages
[  289.361833][T12056] 0 pages in swap cache
[  289.366239][T12056] Free swap  = 124996kB
[  289.370698][T12056] Total swap = 124996kB
[  289.376321][T12056] 2097051 pages RAM
[  289.380298][T12056] 0 pages HighMem/MovableOnly
[  289.385160][T12056] 424103 pages reserved
[  289.389435][T12056] 0 pages cma reserved
[  289.440419][T12092] syzkaller0: entered promiscuous mode
[  289.450336][T12092] syzkaller0: entered allmulticast mode
[  289.532714][T12098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1529'.
[  289.580304][T12098] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1529'.
[  289.732548][T12103] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  289.816014][T12112] netlink: 416 bytes leftover after parsing attributes in process `syz.3.1532'.
[  290.106720][ T5840] Bluetooth: hci4: command 0x0405 tx timeout
[  291.025484][T12128] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1536'.
[  291.034835][T12128] netlink: 'syz.1.1536': attribute type 7 has an invalid length.
[  291.042850][T12128] netlink: 'syz.1.1536': attribute type 8 has an invalid length.
[  291.050889][T12128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1536'.
[  292.250952][T12128] team0: entered promiscuous mode
[  292.277769][T12128] debugfs: 'hsr1' already exists in 'hsr'
[  292.325151][T12128] Cannot create hsr debugfs directory
[  292.330924][T12128] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network
[  292.385222][ T8205] net_ratelimit: 16 callbacks suppressed
[  292.385245][ T8205] bond5: (slave macvlan3): failed to get link speed/duplex
[  292.470426][T12134] vxcan1 speed is unknown, defaulting to 1000
[  292.595195][ T8205] bond5: (slave macvlan3): failed to get link speed/duplex
[  292.639201][T12144] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  292.648566][T12144] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode
[  292.656459][T12144] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode
[  292.664655][T12144] tipc: Resetting bearer <eth:syzkaller0>
[  292.717914][ T8205] bond5: (slave macvlan3): failed to get link speed/duplex
[  292.856228][ T8531] bond5: (slave macvlan3): failed to get link speed/duplex
[  292.976307][ T8531] bond5: (slave macvlan3): failed to get link speed/duplex
[  293.032586][T12154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1544'.
[  293.096177][ T6783] bond5: (slave macvlan3): failed to get link speed/duplex
[  293.220136][ T8531] bond5: (slave macvlan3): failed to get link speed/duplex
[  293.294800][T12138] vxcan1 speed is unknown, defaulting to 1000
[  293.294891][T12134] virt_wifi0 speed is unknown, defaulting to 1000
[  293.375162][ T8531] bond5: (slave macvlan3): failed to get link speed/duplex
[  293.626736][ T8203] bond5: (slave macvlan3): failed to get link speed/duplex
[  293.735433][ T6783] bond5: (slave macvlan3): failed to get link speed/duplex
[  294.040170][T12138] virt_wifi0 speed is unknown, defaulting to 1000
[  294.544596][T12186] veth1_to_team: entered promiscuous mode
[  294.566287][T12186] hsr2: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network
[  294.577186][T12186] hsr2: Slave B (bridge0) is not up; please bring it up to get a fully working HSR network
[  294.591063][T12186] hsr2: entered allmulticast mode
[  294.605488][T12186] veth1_to_team: entered allmulticast mode
[  294.612613][T12186] bridge0: entered allmulticast mode
[  294.739815][T12197] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1555'.
[  294.808893][T12201] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1555'.
[  294.810535][T12202] netlink: 'syz.0.1556': attribute type 13 has an invalid length.
[  295.524082][T12202] tipc: Resetting bearer <eth:syzkaller0>
[  295.764584][ T6783] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  295.790265][ T6783] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 43727 - 0
[  295.817507][ T6783] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  295.849829][ T6783] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 43727 - 0
[  295.880424][ T6783] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  295.900519][ T6783] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 43727 - 0
[  295.945928][ T6783] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  295.954347][ T6783] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 43727 - 0
[  296.104494][T12243] vxcan1 speed is unknown, defaulting to 1000
[  296.458263][T12257] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1570'.
[  296.468148][T12259] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1570'.
[  296.498821][T12257] netlink: 'syz.3.1570': attribute type 32 has an invalid length.
[  296.529586][T12259] netlink: 'syz.3.1570': attribute type 32 has an invalid length.
[  296.554028][T12257] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  296.580604][T12259] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  296.757765][T12243] virt_wifi0 speed is unknown, defaulting to 1000
[  297.147166][T12271] syzkaller1: entered promiscuous mode
[  297.163183][T12271] syzkaller1: entered allmulticast mode
[  297.233201][T12273] netlink: 'syz.3.1575': attribute type 29 has an invalid length.
[  297.297232][T12273] netlink: 'syz.3.1575': attribute type 29 has an invalid length.
[  297.303787][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1576'.
[  297.318787][T12273] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1575'.
[  297.323969][T12275] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1576'.
[  297.499373][T12275] gretap1: entered promiscuous mode
[  297.525112][ T8205] net_ratelimit: 17 callbacks suppressed
[  297.525135][ T8205] bond5: (slave macvlan3): failed to get link speed/duplex
[  297.564054][T12277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1578'.
[  297.584631][T12277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1578'.
[  297.645138][ T8205] bond5: (slave macvlan3): failed to get link speed/duplex
[  297.796363][ T6783] bond5: (slave macvlan3): failed to get link speed/duplex
[  297.915274][ T6783] bond5: (slave macvlan3): failed to get link speed/duplex
[  298.165102][ T6783] bond5: (slave macvlan3): failed to get link speed/duplex
[  298.285084][ T8531] bond5: (slave macvlan3): failed to get link speed/duplex
[  298.400086][ T8203] bond5: (slave macvlan3): failed to get link speed/duplex
[  298.545233][ T8203] bond5: (slave macvlan3): failed to get link speed/duplex
[  298.613608][T12313] vxcan1 speed is unknown, defaulting to 1000
[  298.652823][T12326] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1589'.
[  298.664359][T12327] SET target dimension over the limit!
[  298.670141][ T8205] bond5: (slave macvlan3): failed to get link speed/duplex
[  298.684199][ T8524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  298.726446][ T8524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  298.795252][ T8525] bond5: (slave macvlan3): failed to get link speed/duplex
[  299.103770][T12341] syzkaller0: entered promiscuous mode
[  299.115204][T12341] syzkaller0: entered allmulticast mode
[  299.569602][T12313] virt_wifi0 speed is unknown, defaulting to 1000
[  299.636680][ T8531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  299.648597][ T8531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  299.802937][T12372] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  299.854243][T12372] __nla_validate_parse: 3 callbacks suppressed
[  299.854265][T12372] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1601'.
[  299.932246][T12375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1602'.
[  300.142855][T12382] ip6gretap3: entered promiscuous mode
[  300.302396][T12389] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1604'.
[  300.677447][T12394] bond3: option fail_over_mac: invalid value (253)
[  300.691296][T12394] bond3 (unregistering): Released all slaves
[  300.733828][T12401] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1610'.
[  300.959012][T12408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1613'.
[  301.159493][T12426] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1616'.
[  301.205949][T12430] netlink: 'syz.3.1618': attribute type 42 has an invalid length.
[  301.221745][T12430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1618'.
[  301.272404][T12426] nbd: socks must be embedded in a SOCK_ITEM attr
[  301.323381][T12434] sctp: [Deprecated]: syz.4.1612 (pid 12434) Use of struct sctp_assoc_value in delayed_ack socket option.
[  301.323381][T12434] Use struct sctp_sack_info instead
[  301.614177][T12447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1622'.
[  301.856704][T12453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1624'.
[  301.896210][T12453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1624'.
[  301.913450][T12453] macvlan0: entered promiscuous mode
[  301.925639][T12407] infiniband syz0: set active
[  301.930392][T12407] infiniband syz0: added veth1_to_hsr
[  301.956012][T12407] syz0: rxe_create_cq: returned err = -12
[  301.963677][T12407] infiniband syz0: Couldn't create ib_mad CQ
[  301.982456][T12407] infiniband syz0: Couldn't open port 1
[  302.067080][T12407] RDS/IB: syz0: added
[  302.077002][T12407] smc: adding ib device syz0 with port count 1
[  302.098295][T12407] smc:    ib device syz0 port 1 has pnetid SYZ0 (user defined)
[  302.251823][T12470] vxcan1 speed is unknown, defaulting to 1000
[  302.625170][   T51] net_ratelimit: 32 callbacks suppressed
[  302.625194][   T51] bond5: (slave macvlan3): failed to get link speed/duplex
[  302.792632][   T51] bond5: (slave macvlan3): failed to get link speed/duplex
[  302.826581][T12494] netlink: 'syz.2.1632': attribute type 13 has an invalid length.
[  302.967858][ T8200] bond5: (slave macvlan3): failed to get link speed/duplex
[  303.055666][T12470] virt_wifi0 speed is unknown, defaulting to 1000
[  303.105333][ T8200] bond5: (slave macvlan3): failed to get link speed/duplex
[  303.225129][ T8200] bond5: (slave macvlan3): failed to get link speed/duplex
[  303.335134][ T8200] bond5: (slave macvlan3): failed to get link speed/duplex
[  303.445106][ T8531] bond5: (slave macvlan3): failed to get link speed/duplex
[  303.706355][ T8531] bond5: (slave macvlan3): failed to get link speed/duplex
[  303.815344][ T8531] bond5: (slave macvlan3): failed to get link speed/duplex
[  303.935127][ T8531] bond5: (slave macvlan3): failed to get link speed/duplex
[  304.405347][T12506] geneve3: entered promiscuous mode
[  304.412360][ T8200] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  304.420767][T12490] siw: device registration error -23
[  304.428064][T12488] vxcan1 speed is unknown, defaulting to 1000
[  304.430919][ T8200] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  304.445014][ T8200] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  304.453314][ T8200] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  304.588104][T12488] virt_wifi0 speed is unknown, defaulting to 1000
[  305.810550][T12539] tap0: tun_chr_ioctl cmd 1074025677
[  305.824008][T12539] tap0: linktype set to 776
[  305.870661][T12547] xt_CT: You must specify a L4 protocol and not use inversions on it
[  306.199751][T12562] __nla_validate_parse: 4 callbacks suppressed
[  306.199775][T12562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1655'.
[  306.420109][T12564] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1653'.
[  306.482287][T12580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1659'.
[  306.542217][T12586] vlan0: entered allmulticast mode
[  306.551371][T12586] batadv0: entered allmulticast mode
[  307.022608][T12609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1669'.
[  307.131333][T12614] hsr0: entered promiscuous mode
[  307.144827][T12613] hsr0: left promiscuous mode
[  307.728317][T12641] FAULT_INJECTION: forcing a failure.
[  307.728317][T12641] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  307.742899][T12641] CPU: 1 UID: 0 PID: 12641 Comm: syz.3.1678 Not tainted syzkaller #0 PREEMPT(full) 
[  307.742929][T12641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  307.742941][T12641] Call Trace:
[  307.742949][T12641]  <TASK>
[  307.742959][T12641]  dump_stack_lvl+0x189/0x250
[  307.742991][T12641]  ? __pfx____ratelimit+0x10/0x10
[  307.743014][T12641]  ? __pfx_dump_stack_lvl+0x10/0x10
[  307.743041][T12641]  ? __pfx__printk+0x10/0x10
[  307.743063][T12641]  ? __might_fault+0xb0/0x130
[  307.743104][T12641]  should_fail_ex+0x414/0x560
[  307.743139][T12641]  _copy_from_iter+0x1de/0x1790
[  307.743168][T12641]  ? rcu_is_watching+0x15/0xb0
[  307.743197][T12641]  ? kmalloc_reserve+0xbd/0x290
[  307.743227][T12641]  ? __pfx__copy_from_iter+0x10/0x10
[  307.743252][T12641]  ? __build_skb_around+0x262/0x3f0
[  307.743284][T12641]  ? netlink_sendmsg+0x642/0xb30
[  307.743313][T12641]  ? skb_put+0x11b/0x210
[  307.743347][T12641]  netlink_sendmsg+0x6b2/0xb30
[  307.743388][T12641]  ? __pfx_netlink_sendmsg+0x10/0x10
[  307.743423][T12641]  ? aa_sock_msg_perm+0xf1/0x1d0
[  307.743453][T12641]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  307.743472][T12641]  ? __pfx_netlink_sendmsg+0x10/0x10
[  307.743502][T12641]  __sock_sendmsg+0x21c/0x270
[  307.743532][T12641]  ____sys_sendmsg+0x505/0x830
[  307.743558][T12641]  ? __pfx_____sys_sendmsg+0x10/0x10
[  307.743598][T12641]  ? import_iovec+0x74/0xa0
[  307.743626][T12641]  ___sys_sendmsg+0x21f/0x2a0
[  307.743648][T12641]  ? __pfx____sys_sendmsg+0x10/0x10
[  307.743705][T12641]  ? __fget_files+0x2a/0x420
[  307.743723][T12641]  ? __fget_files+0x3a0/0x420
[  307.743753][T12641]  __x64_sys_sendmsg+0x19b/0x260
[  307.743776][T12641]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  307.743808][T12641]  ? __pfx_ksys_write+0x10/0x10
[  307.743838][T12641]  ? do_syscall_64+0xbe/0xfa0
[  307.743865][T12641]  do_syscall_64+0xfa/0xfa0
[  307.743886][T12641]  ? lockdep_hardirqs_on+0x9c/0x150
[  307.743915][T12641]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.743934][T12641]  ? clear_bhb_loop+0x60/0xb0
[  307.743959][T12641]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  307.743978][T12641] RIP: 0033:0x7ff169b8efc9
[  307.743997][T12641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  307.744013][T12641] RSP: 002b:00007ff167df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  307.744038][T12641] RAX: ffffffffffffffda RBX: 00007ff169de5fa0 RCX: 00007ff169b8efc9
[  307.744053][T12641] RDX: 0000000004040800 RSI: 0000200000000500 RDI: 0000000000000003
[  307.744066][T12641] RBP: 00007ff167df6090 R08: 0000000000000000 R09: 0000000000000000
[  307.744078][T12641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  307.744089][T12641] R13: 00007ff169de6038 R14: 00007ff169de5fa0 R15: 00007ffde5397098
[  307.744125][T12641]  </TASK>
[  307.745153][ T8200] net_ratelimit: 31 callbacks suppressed
[  307.745170][ T8200] bond5: (slave macvlan3): failed to get link speed/duplex
[  308.025356][T12645] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1680'.
[  308.159896][T12646] vxcan1 speed is unknown, defaulting to 1000
[  308.175218][ T8525] bond5: (slave macvlan3): failed to get link speed/duplex
[  308.296609][ T8200] bond5: (slave macvlan3): failed to get link speed/duplex
[  308.392014][T12664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1683'.
[  308.405260][ T8525] bond5: (slave macvlan3): failed to get link speed/duplex
[  308.535164][ T8200] bond5: (slave macvlan3): failed to get link speed/duplex
[  308.675484][ T8525] bond5: (slave macvlan3): failed to get link speed/duplex
[  308.813944][T12679] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  308.877060][ T8527] bond5: (slave macvlan3): failed to get link speed/duplex
[  308.940383][T12648] vxcan1 speed is unknown, defaulting to 1000
[  308.986918][T12646] virt_wifi0 speed is unknown, defaulting to 1000
[  309.036443][ T8525] bond5: (slave macvlan3): failed to get link speed/duplex
[  309.044435][ T8527] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  309.196844][   T51] bond5: (slave macvlan3): failed to get link speed/duplex
[  309.270588][T12702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1692'.
[  309.335248][ T8525] bond5: (slave macvlan3): failed to get link speed/duplex
[  309.358810][T12703] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1693'.
[  309.663477][T12648] virt_wifi0 speed is unknown, defaulting to 1000
[  310.024589][T12713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1696'.
[  310.133446][T12719] netlink: 'syz.0.1699': attribute type 2 has an invalid length.
[  310.171495][T12719] netlink: 'syz.0.1699': attribute type 1 has an invalid length.
[  310.200222][T12721] netlink: 'syz.0.1699': attribute type 13 has an invalid length.
[  310.212726][T12721] netlink: 'syz.0.1699': attribute type 17 has an invalid length.
[  310.330247][T12721] wg1: left promiscuous mode
[  310.340784][T12721] wg1: left allmulticast mode
[  310.389659][T12721] hsr1: left promiscuous mode
[  310.399544][T12721] tipc: Resetting bearer <eth:syzkaller0>
[  310.439991][T12721] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode
[  310.457295][T12721] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode
[  310.477976][T12721] geneve2: left promiscuous mode
[  310.501136][T12721] gretap1: left promiscuous mode
[  310.534607][T12721] macvlan0: left promiscuous mode
[  310.562660][T12721] geneve3: left promiscuous mode
[  310.619907][T12730] can: request_module (can-proto-3) failed.
[  310.650585][T12725] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  310.681717][T12726] netlink: 'syz.4.1698': attribute type 12 has an invalid length.
[  310.693687][ T8527] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  310.707442][ T8527] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  310.804509][ T8527] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  310.813973][ T8527] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  310.891003][T12737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1702'.
[  311.556886][T12761] __nla_validate_parse: 4 callbacks suppressed
[  311.556910][T12761] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1708'.
[  311.684836][T12750] vxcan1 speed is unknown, defaulting to 1000
[  311.930483][T12782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1710'.
[  311.942042][T12782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1710'.
[  312.006929][T12766] vxcan1 speed is unknown, defaulting to 1000
[  312.334257][T12786] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  312.355449][T12786] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode
[  312.363579][T12786] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode
[  312.376404][T12786] tipc: Resetting bearer <eth:syzkaller0>
[  312.382375][T12766] virt_wifi0 speed is unknown, defaulting to 1000
[  312.384831][T12786] netem: change failed
[  312.393507][T12750] virt_wifi0 speed is unknown, defaulting to 1000
[  312.925121][   T51] net_ratelimit: 17 callbacks suppressed
[  312.925147][   T51] bond5: (slave macvlan3): failed to get link speed/duplex
[  313.105503][ T8525] bond5: (slave macvlan3): failed to get link speed/duplex
[  313.218292][ T8525] bond5: (slave macvlan3): failed to get link speed/duplex
[  313.797610][T12819] IPVS: set_ctl: invalid protocol: 29 10.1.1.1:20001
[  313.815289][ T6108] IPVS: starting estimator thread 0...
[  313.826814][ T8203] bond5: (slave macvlan3): failed to get link speed/duplex
[  313.925191][T12822] IPVS: using max 24 ests per chain, 57600 per kthread
[  313.955128][ T8203] bond5: (slave macvlan3): failed to get link speed/duplex
[  314.065113][ T8527] bond5: (slave macvlan3): failed to get link speed/duplex
[  314.105079][ T6111] IPVS: starting estimator thread 0...
[  314.125326][T12824] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  314.139242][T12831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1722'.
[  314.175117][ T8525] bond5: (slave macvlan3): failed to get link speed/duplex
[  314.191179][T12832] netlink: 'syz.4.1724': attribute type 54 has an invalid length.
[  314.205129][T12830] IPVS: using max 26 ests per chain, 62400 per kthread
[  314.412833][ T8527] bond5: (slave macvlan3): failed to get link speed/duplex
[  314.595420][ T8525] bond5: (slave macvlan3): failed to get link speed/duplex
[  314.673165][T12844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1727'.
[  314.890306][T12852] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1731'.
[  315.230424][T12852] vxcan1 speed is unknown, defaulting to 1000
[  315.490019][T12871] ªªªªª: renamed from hsr0
[  315.742754][T12855] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1731'.
[  315.793992][T12882] netlink: 'syz.2.1731': attribute type 17 has an invalid length.
[  315.966825][T12885] tipc: Resetting bearer <eth:syzkaller0>
[  316.522971][T12852] virt_wifi0 speed is unknown, defaulting to 1000
[  316.527145][T12864] vxcan1 speed is unknown, defaulting to 1000
[  316.546296][T12885] tipc: Resetting bearer <eth:syzkaller0>
[  316.779621][T12896] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1740'.
[  316.937876][T12902] bridge7: entered allmulticast mode
[  317.103583][T12891] vxcan1 speed is unknown, defaulting to 1000
[  317.115172][T12864] virt_wifi0 speed is unknown, defaulting to 1000
[  317.667147][T12898] vxcan1 speed is unknown, defaulting to 1000
[  317.910676][T12906] vxcan1 speed is unknown, defaulting to 1000
[  317.935235][ T8527] net_ratelimit: 18 callbacks suppressed
[  317.935257][ T8527] bond5: (slave macvlan3): failed to get link speed/duplex
[  318.055383][ T8527] bond5: (slave macvlan3): failed to get link speed/duplex
[  318.063670][T12906] virt_wifi0 speed is unknown, defaulting to 1000
[  318.074325][T12898] virt_wifi0 speed is unknown, defaulting to 1000
[  318.099147][T12891] virt_wifi0 speed is unknown, defaulting to 1000
[  318.165155][ T8203] bond5: (slave macvlan3): failed to get link speed/duplex
[  318.280453][ T8527] bond5: (slave macvlan3): failed to get link speed/duplex
[  318.766504][ T8527] bond5: (slave macvlan3): failed to get link speed/duplex
[  318.857519][   T30] audit: type=1804 audit(1761207655.841:3): pid=12914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1744" name="/newroot/346/cgroup.controllers" dev="tmpfs" ino=1794 res=1 errno=0
[  318.924741][   T30] audit: type=1800 audit(1761207655.851:4): pid=12914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1744" name="cgroup.controllers" dev="tmpfs" ino=1794 res=0 errno=0
[  318.961649][   T51] bond5: (slave macvlan3): failed to get link speed/duplex
[  318.974056][T12916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1745'.
[  319.085603][ T8203] bond5: (slave macvlan3): failed to get link speed/duplex
[  319.089810][T12919] vxcan1: tx drop: invalid sa for name 0xffffffffffffffff
[  319.215582][ T8203] bond5: (slave macvlan3): failed to get link speed/duplex
[  319.329368][ T8525] bond5: (slave macvlan3): failed to get link speed/duplex
[  319.472966][T12920] vxcan1 speed is unknown, defaulting to 1000
[  319.615155][ T8529] bond5: (slave macvlan3): failed to get link speed/duplex
[  319.702211][T12934] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1751'.
[  320.281965][T12939] netlink: 'syz.3.1752': attribute type 1 has an invalid length.
[  320.308559][T12939] 8021q: adding VLAN 0 to HW filter on device bond7
[  320.316062][T12919] vxcan1 speed is unknown, defaulting to 1000
[  320.348764][T12939] veth5: entered promiscuous mode
[  320.361678][T12939] bond7: (slave veth5): Enslaving as an active interface with a down link
[  320.563111][T12919] virt_wifi0 speed is unknown, defaulting to 1000
[  320.596250][T12920] virt_wifi0 speed is unknown, defaulting to 1000
[  320.673220][T12943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1753'.
[  320.769522][T12943] vlan2: entered promiscuous mode
[  320.785135][T12943] team0: entered promiscuous mode
[  321.020027][T12952] bond7 (unregistering): Released all slaves
[  321.464568][T12967] netlink: 'syz.2.1760': attribute type 6 has an invalid length.
[  321.494773][T12967] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1760'.
[  321.855538][T12974] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.920841][T12974] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 56067 - 0
[  321.973219][T12974] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 44149 - 0
[  322.369588][T12974] netdevsim netdevsim3 netdevsim2 (unregistering): left allmulticast mode
[  322.386053][T12974] netdevsim netdevsim3 netdevsim2 (unregistering): left promiscuous mode
[  322.403943][T12974] bridge0: port 1(netdevsim2) entered disabled state
[  322.427043][T12974] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.437746][T12974] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 56067 - 0
[  322.448624][T12974] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 44149 - 0
[  322.547999][T12981] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1764'.
[  322.626168][T12974] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.637466][T12974] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 56067 - 0
[  322.648673][T12974] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 44149 - 0
[  322.800915][T12974] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.831847][T12974] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 56067 - 0
[  322.860116][T12974] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 44149 - 0
[  322.966479][   T51] net_ratelimit: 16 callbacks suppressed
[  322.966502][   T51] bond5: (slave macvlan3): failed to get link speed/duplex
[  323.005671][T12987] syzkaller1: entered promiscuous mode
[  323.011295][T12987] syzkaller1: entered allmulticast mode
[  323.123857][ T8203] bond5: (slave macvlan3): failed to get link speed/duplex
[  323.189976][T12990] xt_HMARK: proto mask must be zero with L3 mode
[  323.288356][T12990] ip6t_srh: unknown srh match flags  4000
[  323.345910][ T8203] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 44149 - 0
[  323.359512][ T8203] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 56067 - 0
[  323.378062][ T8203] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  323.386788][ T8203] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 44149 - 0
[  323.403074][ T8203] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 56067 - 0
[  323.412061][ T8203] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  323.539789][T12994] bond7: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms
[  323.556057][T12994] bond7: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms
[  323.575893][ T8200] bond5: (slave macvlan3): failed to get link speed/duplex
[  323.678384][ T8529] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 44149 - 0
[  323.715249][ T8529] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 56067 - 0
[  323.723744][ T8529] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  323.745481][ T8203] bond5: (slave macvlan3): failed to get link speed/duplex
[  323.787138][ T8529] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 44149 - 0
[  323.807515][ T8529] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 56067 - 0
[  323.819738][ T8529] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  323.855113][ T8529] bond5: (slave macvlan3): failed to get link speed/duplex
[  323.978137][ T8527] bond5: (slave macvlan3): failed to get link speed/duplex
[  324.095329][ T8203] bond5: (slave macvlan3): failed to get link speed/duplex
[  324.205167][ T8200] bond5: (slave macvlan3): failed to get link speed/duplex
[  324.216829][T13034] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1779'.
[  324.336131][ T8200] bond5: (slave macvlan3): failed to get link speed/duplex
[  324.445247][ T8527] bond5: (slave macvlan3): failed to get link speed/duplex
[  324.455467][T13042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1782'.
[  324.477718][T13042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1782'.
[  324.721746][T13052] netlink: 'syz.2.1786': attribute type 10 has an invalid length.
[  324.793769][T13056] vxcan1 speed is unknown, defaulting to 1000
[  325.026965][T13068] tipc: Failed to remove unknown binding: 66,1,1/207984351:3426040137/3426040139
[  325.036645][T13068] tipc: Failed to remove unknown binding: 66,1,1/207984351:3426040137/3426040139
[  325.090493][T13070] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1793'.
[  325.138816][T13060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1789'.
[  325.180102][T13060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1789'.
[  325.204705][T13060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1789'.
[  325.233054][T13060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1789'.
[  325.256008][T13075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1795'.
[  325.323977][T13056] virt_wifi0 speed is unknown, defaulting to 1000
[  326.737424][T13117] vxcan1 speed is unknown, defaulting to 1000
[  327.730018][T13157] __nla_validate_parse: 23 callbacks suppressed
[  327.730039][T13157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1817'.
[  327.830621][T13159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1817'.
[  327.836446][T13161] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1819'.
[  328.070351][T13117] virt_wifi0 speed is unknown, defaulting to 1000
[  328.136602][ T8200] net_ratelimit: 26 callbacks suppressed
[  328.136627][ T8200] bond5: (slave macvlan3): failed to get link speed/duplex
[  328.256043][ T8527] bond5: (slave macvlan3): failed to get link speed/duplex
[  328.371058][T13175] netlink: 'syz.3.1821': attribute type 1 has an invalid length.
[  328.380336][ T8527] bond5: (slave macvlan3): failed to get link speed/duplex
[  328.412431][T13175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1821'.
[  328.448746][T13175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1821'.
[  328.515165][ T8529] bond5: (slave macvlan3): failed to get link speed/duplex
[  328.552220][T13177] netlink: 'syz.0.1823': attribute type 142 has an invalid length.
[  328.635097][ T8529] bond5: (slave macvlan3): failed to get link speed/duplex
[  328.788636][ T8529] bond5: (slave macvlan3): failed to get link speed/duplex
[  328.844126][T13194] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode
[  328.865163][T13194] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode
[  328.982782][T13194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1826'.
[  329.045399][ T8529] bond5: (slave macvlan3): failed to get link speed/duplex
[  329.188415][ T8529] bond5: (slave macvlan3): failed to get link speed/duplex
[  329.315971][ T8200] bond5: (slave macvlan3): failed to get link speed/duplex
[  329.513463][T13211] vxcan1 speed is unknown, defaulting to 1000
[  329.516504][ T8529] bond5: (slave macvlan3): failed to get link speed/duplex
[  329.944242][T13236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1838'.
[  329.963862][T13236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1838'.
[  330.103280][T13238] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1839'.
[  330.171729][T13241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1840'.
[  330.179558][T13211] virt_wifi0 speed is unknown, defaulting to 1000
[  330.181904][T13220] vxcan1 speed is unknown, defaulting to 1000
[  330.335725][T13247] tipc: Enabled bearer <udp:syz2>, priority 10
[  330.503059][T13253] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  330.536068][T13253] veth1_virt_wifi: entered allmulticast mode
[  330.607076][T13253] tipc: Resetting bearer <eth:syzkaller0>
[  330.729248][T13252] tipc: Disabling bearer <eth:syzkaller0>
[  330.918754][T13220] virt_wifi0 speed is unknown, defaulting to 1000
[  331.049366][T13264] netlink: 'syz.0.1849': attribute type 30 has an invalid length.
[  331.614882][ T6111] tipc: Node number set to 1226341824
[  331.678250][T13220] tipc: can't start tipc receive workqueue
[  332.253943][T13288] bond8: option primary_reselect: invalid value (6)
[  332.264492][T13288] bond8 (unregistering): Released all slaves
[  332.363659][T13289] bond8: option primary_reselect: invalid value (6)
[  332.378583][T13289] bond8 (unregistering): Released all slaves
[  332.414639][T13299] netlink: 'syz.0.1856': attribute type 10 has an invalid length.
[  332.703258][T13308] ip6erspan0: entered allmulticast mode
[  332.957565][T13318] netlink: 7580 bytes leftover after parsing attributes in process `syz.2.1860'.
[  333.024579][T13320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1861'.
[  333.205104][ T8203] net_ratelimit: 17 callbacks suppressed
[  333.205126][ T8203] bond5: (slave macvlan3): failed to get link speed/duplex
[  333.375297][ T8203] bond5: (slave macvlan3): failed to get link speed/duplex
[  333.555703][ T8529] bond5: (slave macvlan3): failed to get link speed/duplex
[  333.689104][T13331] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  333.746034][T13333] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.797173][T13340] veth0_to_bridge: entered promiscuous mode
[  333.814544][T13338] veth0_to_bridge: left promiscuous mode
[  333.869347][T13333] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.915934][ T8203] bond5: (slave macvlan3): failed to get link speed/duplex
[  333.933113][T13344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1868'.
[  333.977173][T13333] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.998880][T13344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1868'.
[  334.078310][T13333] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.228214][T13348] bond3: invalid ARP target 0.0.0.0 specified for addition
[  334.250737][T13348] bond3: option arp_ip_target: invalid value (0)
[  334.265187][T13348] bond3 (unregistering): Released all slaves
[  334.345328][ T8529] bond5: (slave macvlan3): failed to get link speed/duplex
[  334.461857][ T8525] bond5: (slave macvlan3): failed to get link speed/duplex
[  334.537698][ T8525] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  334.606767][ T8203] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  334.664086][T13366] vxcan1 speed is unknown, defaulting to 1000
[  334.672170][ T8203] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  334.712076][   T51] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  334.816277][T13378] sctp: [Deprecated]: syz.2.1880 (pid 13378) Use of int in maxseg socket option.
[  334.816277][T13378] Use struct sctp_assoc_value instead
[  334.925353][   T51] bond5: (slave macvlan3): failed to get link speed/duplex
[  334.954128][T13366] virt_wifi0 speed is unknown, defaulting to 1000
[  335.045302][ T8203] bond5: (slave macvlan3): failed to get link speed/duplex
[  335.146279][T13390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1885'.
[  335.165147][ T8529] bond5: (slave macvlan3): failed to get link speed/duplex
[  335.238907][T13390] 8021q: adding VLAN 0 to HW filter on device bond8
[  335.287941][T13393] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.444690][T13393] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.529965][T13393] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.646443][T13408] vxcan1 speed is unknown, defaulting to 1000
[  335.656021][T13393] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  335.725620][   T51] bond5: (slave macvlan3): failed to get link speed/duplex
[  335.939094][T13408] virt_wifi0 speed is unknown, defaulting to 1000
[  336.453330][T13428] siw: device registration error -23
[  337.178290][T13456] netlink: 'syz.2.1901': attribute type 1 has an invalid length.
[  337.260512][T13462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1903'.
[  337.269172][T13456] 8021q: adding VLAN 0 to HW filter on device bond9
[  337.269844][T13462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1903'.
[  337.290669][T13460] 8021q: adding VLAN 0 to HW filter on device batadv1
[  337.301129][T13460] bond9: (slave batadv1): making interface the new active one
[  337.307802][T13456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1901'.
[  337.310807][T13460] bond9: (slave batadv1): Enslaving as an active interface with an up link
[  337.479546][T13456] bond9 (unregistering): (slave batadv1): Releasing active interface
[  337.490762][T13456] bond9 (unregistering): Released all slaves
[  337.776072][T13476] netlink: 'syz.0.1906': attribute type 2 has an invalid length.
[  337.895967][T13476] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1906'.
[  338.007074][T13485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1908'.
[  338.093988][ T8525] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  338.161252][T13496] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1911'.
[  338.231894][ T8525] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  338.246351][ T8525] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  338.295166][ T8525] net_ratelimit: 17 callbacks suppressed
[  338.295189][ T8525] bond5: (slave macvlan3): failed to get link speed/duplex
[  338.348728][ T8525] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  338.385188][T13503] nbd0: detected capacity change from 0 to 127
[  338.388216][T13505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1914'.
[  338.415187][T13505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1914'.
[  338.425171][   T51] bond5: (slave macvlan3): failed to get link speed/duplex
[  338.449540][ T5840] block nbd0: Receive control failed (result -32)
[  338.526375][T13516] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1916'.
[  338.535961][   T51] bond5: (slave macvlan3): failed to get link speed/duplex
[  338.645115][ T8203] bond5: (slave macvlan3): failed to get link speed/duplex
[  338.755532][ T8525] bond5: (slave macvlan3): failed to get link speed/duplex
[  338.875771][ T8200] bond5: (slave macvlan3): failed to get link speed/duplex
[  338.959185][T13540] ip6gre2: entered allmulticast mode
[  338.968129][T13543] xt_hashlimit: max too large, truncated to 1048576
[  338.995532][ T8200] bond5: (slave macvlan3): failed to get link speed/duplex
[  339.105717][ T8529] bond5: (slave macvlan3): failed to get link speed/duplex
[  339.125478][T13553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1927'.
[  339.173032][T13553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1927'.
[  339.305799][ T8527] bond5: (slave macvlan3): failed to get link speed/duplex
[  339.320296][T13553] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1927'.
[  339.380883][T13569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1931'.
[  339.405281][T13569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1931'.
[  339.446120][ T8527] bond5: (slave macvlan3): failed to get link speed/duplex
[  339.533330][T13576] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode
[  339.544910][T13576] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode
[  340.047309][T13586] vxcan1 speed is unknown, defaulting to 1000
[  341.377016][T13586] virt_wifi0 speed is unknown, defaulting to 1000
[  341.572843][T13641] vxcan1 speed is unknown, defaulting to 1000
[  342.209950][T13641] virt_wifi0 speed is unknown, defaulting to 1000
[  342.623365][T13662] ip6t_srh: unknown srh match flags  C404
[  342.698982][T13664] bond8: option fail_over_mac: invalid value (253)
[  342.710284][T13664] bond8 (unregistering): Released all slaves
[  345.236875][T13678] syzkaller0: entered promiscuous mode
[  345.242927][T13678] syzkaller0: entered allmulticast mode
[  345.262086][T13683] __nla_validate_parse: 2 callbacks suppressed
[  345.262111][T13683] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1958'.
[  345.336178][ T8215] net_ratelimit: 26 callbacks suppressed
[  345.336202][ T8215] bond5: (slave macvlan3): failed to get link speed/duplex
[  345.412891][T13696] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1960'.
[  345.485522][ T8215] bond5: (slave macvlan3): failed to get link speed/duplex
[  345.615366][ T8215] bond5: (slave macvlan3): failed to get link speed/duplex
[  345.660824][T13703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1962'.
[  345.680338][T13703] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1962'.
[  345.923709][T13705] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1963'.
[  345.975670][ T8527] bond5: (slave macvlan3): failed to get link speed/duplex
[  346.018574][T13710] IPVS: length: 209 != 24
[  346.246771][ T8203] bond5: (slave macvlan3): failed to get link speed/duplex
[  346.486206][ T8215] bond5: (slave macvlan3): failed to get link speed/duplex
[  346.529801][T13739] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1969'.
[  346.566720][T13739] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1969'.
[  346.726302][ T8527] bond5: (slave macvlan3): failed to get link speed/duplex
[  346.875079][ T8200] bond5: (slave macvlan3): failed to get link speed/duplex
[  346.995372][ T8200] bond5: (slave macvlan3): failed to get link speed/duplex
[  347.105561][ T8203] bond5: (slave macvlan3): failed to get link speed/duplex
[  347.199100][T13775] team0: Mode changed to "activebackup"
[  347.226800][T13774] syzkaller1: entered promiscuous mode
[  347.237757][T13774] syzkaller1: entered allmulticast mode
[  347.478661][T13783] vxcan1 speed is unknown, defaulting to 1000
[  347.943644][T13793] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1985'.
[  347.997192][T13796] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1986'.
[  348.018310][T13795] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1986'.
[  348.060143][T13785] vxcan1 speed is unknown, defaulting to 1000
[  348.060305][T13783] virt_wifi0 speed is unknown, defaulting to 1000
[  348.464170][T13815] netlink: 'syz.3.1990': attribute type 10 has an invalid length.
[  348.504712][T13815] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  348.838377][T13828] bridge9: entered promiscuous mode
[  348.854753][T13828] bridge9: entered allmulticast mode
[  348.880397][T13828] team0: Port device bridge9 added
[  348.887709][T13785] virt_wifi0 speed is unknown, defaulting to 1000
[  349.725064][T13859] ip6gretap0: entered promiscuous mode
[  349.772577][T13842] vxcan1 speed is unknown, defaulting to 1000
[  350.354311][T13873] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5)
[  350.395102][ T8527] net_ratelimit: 22 callbacks suppressed
[  350.395127][ T8527] bond5: (slave macvlan3): failed to get link speed/duplex
[  350.535611][ T8200] bond5: (slave macvlan3): failed to get link speed/duplex
[  350.695100][ T8527] bond5: (slave macvlan3): failed to get link speed/duplex
[  350.805809][   T51] bond5: (slave macvlan3): failed to get link speed/duplex
[  350.945584][ T8203] bond5: (slave macvlan3): failed to get link speed/duplex
[  351.065049][ T8203] bond5: (slave macvlan3): failed to get link speed/duplex
[  351.077235][T13842] virt_wifi0 speed is unknown, defaulting to 1000
[  351.188025][ T8203] bond5: (slave macvlan3): failed to get link speed/duplex
[  351.315697][ T8529] bond5: (slave macvlan3): failed to get link speed/duplex
[  351.377600][T13911] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  351.396889][T13911] syzkaller0: entered promiscuous mode
[  351.408080][T13911] syzkaller0: entered allmulticast mode
[  351.425113][ T8203] bond5: (slave macvlan3): failed to get link speed/duplex
[  351.439212][T13911] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  351.483194][T13909] tipc: Resetting bearer <eth:syzkaller0>
[  351.536812][T13909] tipc: Disabling bearer <eth:syzkaller0>
[  351.575066][ T8203] bond5: (slave macvlan3): failed to get link speed/duplex
[  352.221779][T13932] netlink: 'syz.1.2020': attribute type 13 has an invalid length.
[  352.258542][T13932] netlink: 'syz.1.2020': attribute type 17 has an invalid length.
[  352.298675][T13932] lo: left promiscuous mode
[  352.378912][T13932] tunl0: left promiscuous mode
[  352.436812][T13932] gre0: left promiscuous mode
[  352.448565][T13932] gretap0: left promiscuous mode
[  352.729659][T13953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  352.802186][T13937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  352.931774][T13932] ip_vti0: left promiscuous mode
[  352.941726][T13932] ip6_vti0: left promiscuous mode
[  352.948563][T13932] sit0: left promiscuous mode
[  352.973525][T13932] ip6tnl0: left promiscuous mode
[  352.994685][T13932] ip6gre0: left promiscuous mode
[  353.002557][T13932] ip6gretap0: left promiscuous mode
[  353.032392][T13932] vcan0: left promiscuous mode
[  353.116988][T13932] 8021q: adding VLAN 0 to HW filter on device team0
[  353.139235][T13932] nlmon0: left promiscuous mode
[  353.160641][T13932] caif0: left promiscuous mode
[  353.216412][T13955] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  353.333537][T13943] vxcan1 speed is unknown, defaulting to 1000
[  353.342590][T13951] tipc: Disabling bearer <eth:syzkaller0>
[  353.424021][T13963] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  353.453212][T13963] syzkaller0: entered promiscuous mode
[  353.459381][T13963] syzkaller0: entered allmulticast mode
[  353.530666][T13963] tipc: Resetting bearer <eth:syzkaller0>
[  353.565193][T13962] tipc: Resetting bearer <eth:syzkaller0>
[  353.616033][T13962] tipc: Disabling bearer <eth:syzkaller0>
[  353.737052][T13943] virt_wifi0 speed is unknown, defaulting to 1000
[  353.744874][T13933] vxcan1 speed is unknown, defaulting to 1000
[  354.009531][T13987] __nla_validate_parse: 3 callbacks suppressed
[  354.009556][T13987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2032'.
[  354.512793][T13933] virt_wifi0 speed is unknown, defaulting to 1000
[  354.669438][ T5828] Bluetooth: hci4: command 0x0405 tx timeout
[  355.118059][T14053] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2045'.
[  355.165966][T14053] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2045'.
[  355.364354][T14060] netlink: 'syz.2.2047': attribute type 10 has an invalid length.
[  355.490990][T14060] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  355.503512][T14070] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2050'.
[  355.535276][T14060] team0: Failed to send options change via netlink (err -105)
[  355.544074][T14060] team0: Port device dummy0 added
[  355.595457][T14061] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.623387][T14070] block nbd0: NBD_DISCONNECT
[  355.628864][T14047] net_ratelimit: 18 callbacks suppressed
[  355.628885][T14047] bond5: (slave macvlan3): failed to get link speed/duplex
[  355.643656][T14070] block nbd0: Send disconnect failed -32
[  355.656569][T14070] block nbd0: shutting down sockets
[  355.698934][T14061] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.785181][T14061] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.835528][ T8205] bond5: (slave macvlan3): failed to get link speed/duplex
[  355.938159][T14061] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.045167][ T8205] bond5: (slave macvlan3): failed to get link speed/duplex
[  356.179318][T14047] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  356.223659][T14083] sctp: [Deprecated]: syz.3.2054 (pid 14083) Use of int in max_burst socket option.
[  356.223659][T14083] Use struct sctp_assoc_value instead
[  356.227008][T14036] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  356.293793][T14047] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  356.375992][ T8213] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  356.385689][T14086] netlink: 'syz.4.2055': attribute type 1 has an invalid length.
[  356.405322][ T8213] bond5: (slave macvlan3): failed to get link speed/duplex
[  356.413645][T14088] netlink: 'syz.0.2056': attribute type 1 has an invalid length.
[  356.486300][T14090] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2056'.
[  356.516068][ T8213] bond5: (slave macvlan3): failed to get link speed/duplex
[  356.533399][T14094] netlink: 'syz.4.2058': attribute type 9 has an invalid length.
[  356.550572][T14088] bond3: (slave gretap2): making interface the new active one
[  356.559502][T14088] bond3: (slave gretap2): Enslaving as an active interface with an up link
[  356.577177][T14088] macvlan1: entered promiscuous mode
[  356.582509][T14088] macvlan1: entered allmulticast mode
[  356.588807][T14088] bond3: entered promiscuous mode
[  356.593955][T14088] gretap2: entered promiscuous mode
[  356.600596][T14088] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  356.608413][T14088] bond3: (slave macvlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  356.627377][T14088] bond3: left promiscuous mode
[  356.632217][T14088] gretap2: left promiscuous mode
[  356.675320][T14047] bond5: (slave macvlan3): failed to get link speed/duplex
[  356.904028][T14103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2061'.
[  356.915599][ T8205] bond5: (slave macvlan3): failed to get link speed/duplex
[  357.148297][T14047] bond5: (slave macvlan3): failed to get link speed/duplex
[  357.313259][T14123] vxcan1 speed is unknown, defaulting to 1000
[  357.321137][   T51] bond5: (slave macvlan3): failed to get link speed/duplex
[  357.369992][T14127] gtp0: entered promiscuous mode
[  357.373876][T14121] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2064'.
[  357.390542][T14127] gtp0: entered allmulticast mode
[  357.446407][   T51] bond5: (slave macvlan3): failed to get link speed/duplex
[  357.794279][T14141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2069'.
[  357.807415][T14145] netlink: 'syz.1.2070': attribute type 2 has an invalid length.
[  357.815294][T14141] netlink: 'syz.2.2069': attribute type 30 has an invalid length.
[  357.815763][T14145] netlink: 'syz.1.2070': attribute type 1 has an invalid length.
[  357.834066][T14141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2069'.
[  357.841968][T14145] netlink: 'syz.1.2070': attribute type 1 has an invalid length.
[  357.926661][T14149] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2070'.
[  358.074830][T14123] virt_wifi0 speed is unknown, defaulting to 1000
[  358.084052][T14145] vxcan1 speed is unknown, defaulting to 1000
[  358.671525][T14145] virt_wifi0 speed is unknown, defaulting to 1000
[  359.254480][T14191] __nla_validate_parse: 4 callbacks suppressed
[  359.254500][T14191] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2079'.
[  359.299218][T14191] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2079'.
[  359.384745][T14201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2082'.
[  359.427202][T14203] netlink: 'syz.3.2083': attribute type 1 has an invalid length.
[  359.475797][T14204] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2079'.
[  359.526443][T14205] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2082'.
[  360.394267][T14223] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2088'.
[  360.419450][T14225] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[  360.447516][T14227] netlink: 'syz.3.2088': attribute type 12 has an invalid length.
[  360.626315][T14226] vxcan1 speed is unknown, defaulting to 1000
[  360.669847][T14235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2091'.
[  360.785267][   T51] net_ratelimit: 21 callbacks suppressed
[  360.785292][   T51] bond5: (slave macvlan3): failed to get link speed/duplex
[  360.925969][   T51] bond5: (slave macvlan3): failed to get link speed/duplex
[  361.061346][T14244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2095'.
[  361.075508][   T51] bond5: (slave macvlan3): failed to get link speed/duplex
[  361.134010][T14226] virt_wifi0 speed is unknown, defaulting to 1000
[  361.158963][T14248] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2095'.
[  361.275316][   T51] bond5: (slave macvlan3): failed to get link speed/duplex
[  361.396104][ T8205] bond5: (slave macvlan3): failed to get link speed/duplex
[  361.525169][   T51] bond5: (slave macvlan3): failed to get link speed/duplex
[  361.667878][T14260] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2100'.
[  361.681197][T14036] bond5: (slave macvlan3): failed to get link speed/duplex
[  361.859644][T14264] 8021q: adding VLAN 0 to HW filter on device bond0
[  361.885661][T14036] bond5: (slave macvlan3): failed to get link speed/duplex
[  361.996817][ T8205] bond5: (slave macvlan3): failed to get link speed/duplex
[  362.032689][T14264] 8021q: adding VLAN 0 to HW filter on device batadv1
[  362.050426][T14272] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  362.058117][T14264] bond0: (slave batadv1): Enslaving as an active interface with an up link
[  362.058276][T14272] IPv6: NLM_F_CREATE should be set when creating new route
[  362.074817][T14272] IPv6: NLM_F_CREATE should be set when creating new route
[  362.082103][T14272] IPv6: NLM_F_CREATE should be set when creating new route
[  362.376529][T14267] bond0 (unregistering): (slave batadv1): Releasing backup interface
[  362.392364][T14267] bond0 (unregistering): Released all slaves
[  362.425115][T14036] bond5: (slave macvlan3): failed to get link speed/duplex
[  362.433697][T14282] bond0: Master is either lo or non-ether device
[  362.544649][T14290] sctp: [Deprecated]: syz.3.2109 (pid 14290) Use of int in maxseg socket option.
[  362.544649][T14290] Use struct sctp_assoc_value instead
[  362.580447][T14290] sctp: [Deprecated]: syz.3.2109 (pid 14290) Use of struct sctp_assoc_value in delayed_ack socket option.
[  362.580447][T14290] Use struct sctp_sack_info instead
[  362.683827][T14296] netlink: 'syz.2.2111': attribute type 1 has an invalid length.
[  363.124416][T14309] batadv_slave_0: left promiscuous mode
[  363.138201][T14309] vlan0: left allmulticast mode
[  363.143401][T14309] bridge_slave_0: left allmulticast mode
[  363.151230][T14309] geneve0: left promiscuous mode
[  363.183671][T14309] ip6erspan0: left allmulticast mode
[  363.215884][ T8205] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  363.253839][ T8205] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  363.265715][ T8205] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  363.281634][ T8205] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  363.479868][T14319] netlink: 'syz.0.2116': attribute type 12 has an invalid length.
[  363.648465][T14332] syz_tun: entered allmulticast mode
[  363.695479][T14332] vxcan1 speed is unknown, defaulting to 1000
[  363.832188][T14344] batadv2: entered promiscuous mode
[  364.029686][T14332] virt_wifi0 speed is unknown, defaulting to 1000
[  364.030089][T14344] vxcan1 speed is unknown, defaulting to 1000
[  364.417828][T14344] virt_wifi0 speed is unknown, defaulting to 1000
[  364.455546][T14331] syz_tun: left allmulticast mode
[  364.547555][T14358] netlink: 'syz.4.2128': attribute type 6 has an invalid length.
[  364.749774][T14363] netlink: 'syz.4.2129': attribute type 11 has an invalid length.
[  364.761571][T14363] __nla_validate_parse: 10 callbacks suppressed
[  364.761592][T14363] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2129'.
[  365.163907][   T30] audit: type=1800 audit(1761207702.151:5): pid=14375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2132" name=CB dev="tmpfs" ino=2271 res=0 errno=0
[  365.250820][T14380] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2133'.
[  365.665020][T14386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2135'.
[  365.895277][ T8205] net_ratelimit: 23 callbacks suppressed
[  365.895301][ T8205] bond5: (slave macvlan3): failed to get link speed/duplex
[  366.038741][T14047] bond5: (slave macvlan3): failed to get link speed/duplex
[  366.046318][T14417] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  366.093240][T14420] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2142'.
[  366.178473][ T8205] bond5: (slave macvlan3): failed to get link speed/duplex
[  366.296453][ T8205] bond5: (slave macvlan3): failed to get link speed/duplex
[  366.318079][T14433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2146'.
[  366.336063][T14433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2146'.
[  366.373244][T14433] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode
[  366.380798][T14433] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  366.415412][ T8205] bond5: (slave macvlan3): failed to get link speed/duplex
[  366.647253][T14436] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2147'.
[  366.747200][T14444] vxcan1 speed is unknown, defaulting to 1000
[  366.755395][T14047] bond5: (slave macvlan3): failed to get link speed/duplex
[  366.885078][ T8205] bond5: (slave macvlan3): failed to get link speed/duplex
[  367.005752][T14047] bond5: (slave macvlan3): failed to get link speed/duplex
[  367.101876][T14444] virt_wifi0 speed is unknown, defaulting to 1000
[  367.115103][ T8213] bond5: (slave macvlan3): failed to get link speed/duplex
[  367.354690][T14480] netlink: 'syz.3.2158': attribute type 1 has an invalid length.
[  367.399427][T14478] Bluetooth: MGMT ver 1.23
[  367.414617][T14480] netlink: 'syz.3.2158': attribute type 6 has an invalid length.
[  367.423054][T14480] netlink: 'syz.3.2158': attribute type 3 has an invalid length.
[  367.649467][T14490] netlink: 'syz.3.2162': attribute type 1 has an invalid length.
[  367.771765][T14492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2163'.
[  367.824812][T14492] netlink: 'syz.0.2163': attribute type 3 has an invalid length.
[  367.838597][T14490] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2162'.
[  367.920889][T14490] 8021q: adding VLAN 0 to HW filter on device bond8
[  368.058066][T14504] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  368.105222][T14510] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2167'.
[  368.247817][T14512] vxcan1 speed is unknown, defaulting to 1000
[  368.744070][T14512] virt_wifi0 speed is unknown, defaulting to 1000
[  369.220581][T14540] bond0: Removing last arp target with arp_interval on
[  369.465333][ T5828] Bluetooth: hci4: command 0x0405 tx timeout
[  369.525246][T14565] netlink: 'syz.1.2179': attribute type 39 has an invalid length.
[  369.579943][T14572] netlink: 'syz.1.2179': attribute type 5 has an invalid length.
[  369.803246][T14584] __nla_validate_parse: 7 callbacks suppressed
[  369.803269][T14584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2182'.
[  369.856451][T14583] vxcan1 speed is unknown, defaulting to 1000
[  370.355753][T14608] netlink: 'syz.4.2187': attribute type 13 has an invalid length.
[  370.374818][T14608] netlink: 'syz.4.2187': attribute type 17 has an invalid length.
[  370.499768][T14607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2189'.
[  370.531409][T14608] ip6gretap0: left promiscuous mode
[  370.705466][T14623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2189'.
[  370.789816][T14622] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2192'.
[  370.830962][T14622] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2192'.
[  370.956189][ T8213] net_ratelimit: 26 callbacks suppressed
[  370.956212][ T8213] bond5: (slave macvlan3): failed to get link speed/duplex
[  370.981437][T14583] virt_wifi0 speed is unknown, defaulting to 1000
[  370.982120][T14617] vxcan1 speed is unknown, defaulting to 1000
[  371.208246][T14635] geneve2: entered promiscuous mode
[  371.247674][ T8219] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  371.275111][ T8219] bond5: (slave macvlan3): failed to get link speed/duplex
[  371.316362][ T8213] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  371.347354][ T8213] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  371.382531][ T8213] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  371.475117][ T8205] bond5: (slave macvlan3): failed to get link speed/duplex
[  371.605267][T14036] bond5: (slave macvlan3): failed to get link speed/duplex
[  371.693294][T14617] virt_wifi0 speed is unknown, defaulting to 1000
[  371.795208][T14047] bond5: (slave macvlan3): failed to get link speed/duplex
[  372.035063][   T51] bond5: (slave macvlan3): failed to get link speed/duplex
[  372.155604][T14047] bond5: (slave macvlan3): failed to get link speed/duplex
[  372.265748][T14047] bond5: (slave macvlan3): failed to get link speed/duplex
[  372.465061][   T51] bond5: (slave macvlan3): failed to get link speed/duplex
[  372.670732][T14666] vxcan1 speed is unknown, defaulting to 1000
[  372.688278][T14047] bond5: (slave macvlan3): failed to get link speed/duplex
[  372.765108][T14680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2207'.
[  372.796660][T14680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2207'.
[  373.074414][T14682] xt_CT: No such helper "netbios-ns"
[  373.340375][T14666] virt_wifi0 speed is unknown, defaulting to 1000
[  373.356742][T14677] vxcan1 speed is unknown, defaulting to 1000
[  373.589573][T14691] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2209'.
[  373.788327][T14694] netlink: 'syz.3.2210': attribute type 2 has an invalid length.
[  373.797207][T14694] netlink: 'syz.3.2210': attribute type 3 has an invalid length.
[  373.805468][T14694] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2210'.
[  374.065203][T14679] vxcan1 speed is unknown, defaulting to 1000
[  374.072511][T14677] virt_wifi0 speed is unknown, defaulting to 1000
[  374.596304][T14697] vxcan1 speed is unknown, defaulting to 1000
[  374.638966][T14702] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2212'.
[  374.986459][T14697] virt_wifi0 speed is unknown, defaulting to 1000
[  375.016405][T14679] virt_wifi0 speed is unknown, defaulting to 1000
[  375.124686][T14713] syzkaller1: entered promiscuous mode
[  375.139072][T14713] syzkaller1: entered allmulticast mode
[  375.339264][T14715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2217'.
[  375.587906][T14719] syz_tun: entered allmulticast mode
[  375.678960][T14720] netlink: 'syz.4.2219': attribute type 32 has an invalid length.
[  375.995042][T14036] net_ratelimit: 23 callbacks suppressed
[  375.995067][T14036] bond5: (slave macvlan3): failed to get link speed/duplex
[  376.017030][T14720] syz_tun: left allmulticast mode
[  376.201839][T14724] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2220'.
[  376.419016][T14728] vxcan1 speed is unknown, defaulting to 1000
[  376.555251][ T8213] bond5: (slave macvlan3): failed to get link speed/duplex
[  376.677857][ T8219] bond5: (slave macvlan3): failed to get link speed/duplex
[  376.805160][ T8219] bond5: (slave macvlan3): failed to get link speed/duplex
[  376.956586][T14734] wlan1: mtu greater than device maximum
[  376.979843][ T8219] bond5: (slave macvlan3): failed to get link speed/duplex
[  377.010536][T14728] virt_wifi0 speed is unknown, defaulting to 1000
[  377.105046][ T8213] bond5: (slave macvlan3): failed to get link speed/duplex
[  377.235097][ T8213] bond5: (slave macvlan3): failed to get link speed/duplex
[  377.296437][T14745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2226'.
[  377.326551][T14745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2226'.
[  377.336403][T14751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2228'.
[  377.359387][T14745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2226'.
[  377.420535][T14745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2226'.
[  377.461084][T14745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2226'.
[  377.473429][T14745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2226'.
[  377.503683][T14745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2226'.
[  377.534136][T14745] 8021q: adding VLAN 0 to HW filter on device bond0
[  377.543661][T14745] 8021q: adding VLAN 0 to HW filter on device team0
[  377.567702][T14745] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  377.626524][ T8213] bond5: (slave macvlan3): failed to get link speed/duplex
[  377.685889][T14755] vxcan1 speed is unknown, defaulting to 1000
[  378.696124][T14755] virt_wifi0 speed is unknown, defaulting to 1000
[  379.299235][T14775] netlink: 'syz.0.2235': attribute type 23 has an invalid length.
[  379.443615][T14775] xt_CT: No such helper "netbios-ns"
[  379.678198][T14773] vxcan1 speed is unknown, defaulting to 1000
[  380.354103][T14822] netlink: 'syz.3.2242': attribute type 10 has an invalid length.
[  380.452039][T14820] bond0: (slave dummy0): Releasing backup interface
[  380.468131][T14820] dummy0: left promiscuous mode
[  380.707601][T14825] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  380.722739][T14825] syzkaller0: entered promiscuous mode
[  380.732389][T14825] syzkaller0: entered allmulticast mode
[  380.767608][T14825] tipc: Resetting bearer <eth:syzkaller0>
[  380.817887][T14824] tipc: Resetting bearer <eth:syzkaller0>
[  380.877772][T14824] tipc: Disabling bearer <eth:syzkaller0>
[  380.933039][T14773] virt_wifi0 speed is unknown, defaulting to 1000
[  380.943446][T14833] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  380.977357][T14835] netlink: 'syz.3.2247': attribute type 12 has an invalid length.
[  381.248813][T14840] __nla_validate_parse: 10 callbacks suppressed
[  381.248836][T14840] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2248'.
[  381.254288][T14842] vxcan1 speed is unknown, defaulting to 1000
[  381.699153][T14856] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2251'.
[  382.089948][T14842] virt_wifi0 speed is unknown, defaulting to 1000
[  382.862113][T14869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2254'.
[  383.337513][T14872] vxcan1 speed is unknown, defaulting to 1000
[  383.338575][T14869] team1 (uninitialized): Failed to send options change via netlink (err -105)
[  383.549698][T14869] team1: entered promiscuous mode
[  383.555791][T14869] team1: entered allmulticast mode
[  384.020353][T14872] virt_wifi0 speed is unknown, defaulting to 1000
[  384.190611][T14903] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2263'.
[  384.245623][T14904] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  384.264892][T14902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2262'.
[  384.537057][T14911] pim6reg: entered allmulticast mode
[  384.563699][T14911] pim6reg: left allmulticast mode
[  385.033949][T14926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2269'.
[  385.151107][T14922] syzkaller1: entered promiscuous mode
[  385.170196][T14922] syzkaller1: entered allmulticast mode
[  385.394374][T14919] batman_adv: batadv0: Adding interface: dummy0
[  385.405700][T14919] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  385.488161][T14919] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  385.532325][T14933] netlink: 'syz.4.2271': attribute type 1 has an invalid length.
[  385.548864][T14933] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2271'.
[  385.640308][T14936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2271'.
[  385.777959][T14941] netlink: 'syz.3.2273': attribute type 2 has an invalid length.
[  385.796266][T14941] netlink: 119 bytes leftover after parsing attributes in process `syz.3.2273'.
[  386.070104][T14947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2273'.
[  386.181120][T14941] bond_slave_1: left promiscuous mode
[  386.190974][T14941] bond_slave_1: left allmulticast mode
[  386.252532][T14955] warn_alloc: 1 callbacks suppressed
[  386.252554][T14955] syz.1.2276: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  386.313290][T14955] CPU: 0 UID: 0 PID: 14955 Comm: syz.1.2276 Not tainted syzkaller #0 PREEMPT(full) 
[  386.313323][T14955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  386.313341][T14955] Call Trace:
[  386.313349][T14955]  <TASK>
[  386.313358][T14955]  dump_stack_lvl+0x189/0x250
[  386.313404][T14955]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  386.313436][T14955]  ? __pfx_dump_stack_lvl+0x10/0x10
[  386.313464][T14955]  ? __pfx__printk+0x10/0x10
[  386.313486][T14955]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  386.313513][T14955]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  386.313550][T14955]  warn_alloc+0x214/0x310
[  386.313579][T14955]  ? stack_depot_save_flags+0x40/0x860
[  386.313613][T14955]  ? __pfx_warn_alloc+0x10/0x10
[  386.313644][T14955]  ? kasan_save_track+0x3e/0x80
[  386.313670][T14955]  ? __kasan_kmalloc+0x93/0xb0
[  386.313700][T14955]  ? xsk_setsockopt+0x4dc/0x8d0
[  386.313718][T14955]  ? do_sock_setsockopt+0x17c/0x1b0
[  386.313746][T14955]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  386.313772][T14955]  ? do_syscall_64+0xfa/0xfa0
[  386.313793][T14955]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.313826][T14955]  __vmalloc_node_range_noprof+0x125/0x12d0
[  386.313892][T14955]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  386.313927][T14955]  ? __kasan_kmalloc+0x93/0xb0
[  386.313965][T14955]  vmalloc_user_noprof+0xad/0xf0
[  386.313995][T14955]  ? xskq_create+0xbf/0x170
[  386.314018][T14955]  xskq_create+0xbf/0x170
[  386.314045][T14955]  xsk_init_queue+0xb0/0x110
[  386.314071][T14955]  xsk_setsockopt+0x4dc/0x8d0
[  386.314095][T14955]  ? __pfx_xsk_setsockopt+0x10/0x10
[  386.314120][T14955]  ? __pfx_aa_sk_perm+0x10/0x10
[  386.314175][T14955]  ? aa_sock_opt_perm+0xff/0x1b0
[  386.314209][T14955]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  386.314228][T14955]  ? __pfx_xsk_setsockopt+0x10/0x10
[  386.314251][T14955]  do_sock_setsockopt+0x17c/0x1b0
[  386.314289][T14955]  __x64_sys_setsockopt+0x13f/0x1b0
[  386.314328][T14955]  do_syscall_64+0xfa/0xfa0
[  386.314350][T14955]  ? lockdep_hardirqs_on+0x9c/0x150
[  386.314384][T14955]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.314405][T14955]  ? clear_bhb_loop+0x60/0xb0
[  386.314431][T14955]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.314451][T14955] RIP: 0033:0x7f3f9bd8efc9
[  386.314472][T14955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  386.314491][T14955] RSP: 002b:00007f3f99fd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  386.314516][T14955] RAX: ffffffffffffffda RBX: 00007f3f9bfe6180 RCX: 00007f3f9bd8efc9
[  386.314532][T14955] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b
[  386.314545][T14955] RBP: 00007f3f9be11f91 R08: 0000000000000004 R09: 0000000000000000
[  386.314558][T14955] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  386.314572][T14955] R13: 00007f3f9bfe6218 R14: 00007f3f9bfe6180 R15: 00007ffe78b59b08
[  386.314610][T14955]  </TASK>
[  386.326118][T14941] xfrm0: left promiscuous mode
[  386.335562][T14955] Mem-Info:
[  386.356892][T14941] xfrm0: left allmulticast mode
[  386.357898][T14955] active_anon:4749 inactive_anon:0 isolated_anon:0
[  386.357898][T14955]  active_file:3529 inactive_file:39999 isolated_file:0
[  386.357898][T14955]  unevictable:772 dirty:214 writeback:0
[  386.357898][T14955]  slab_reclaimable:12503 slab_unreclaimable:202315
[  386.357898][T14955]  mapped:32458 shmem:1352 pagetables:1113
[  386.357898][T14955]  sec_pagetables:0 bounce:0
[  386.357898][T14955]  kernel_misc_reclaimable:0
[  386.357898][T14955]  free:1221849 free_pcp:13317 free_cma:0
[  386.689142][T14955] Node 0 active_anon:18996kB inactive_anon:0kB active_file:14116kB inactive_file:159796kB unevictable:1552kB isolated(anon):0kB isolated(file):0kB mapped:138032kB dirty:856kB writeback:0kB shmem:3872kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15360kB pagetables:4404kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  386.732776][T14968] __nla_validate_parse: 1 callbacks suppressed
[  386.732797][T14968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2279'.
[  386.732999][T14955] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  386.786125][T14955] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  386.817499][T14955] lowmem_reserve[]: 0 2505 2505 2505 2505
[  386.821566][T14941] ipvlan1: left promiscuous mode
[  386.832461][T14941] ipvlan1: left allmulticast mode
[  386.838176][T14941] veth0_vlan: left allmulticast mode
[  386.845491][T14955] Node 0 DMA32 free:971412kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18796kB inactive_anon:0kB active_file:14116kB inactive_file:159796kB unevictable:1552kB writepending:856kB zspages:0kB present:3129332kB managed:2565224kB mlocked:16kB bounce:0kB free_pcp:41264kB local_pcp:23752kB free_cma:0kB
[  386.880025][T14955] lowmem_reserve[]: 0 0 0 0 0
[  386.886534][T14955] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  386.917257][T14955] lowmem_reserve[]: 0 0 0 0 0
[  386.922432][T14955] Node 1 Normal free:3900624kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12960kB local_pcp:4672kB free_cma:0kB
[  386.958431][T14955] lowmem_reserve[]: 0 0 0 0 0
[  386.963734][T14955] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  386.983191][T14955] Node 0 DMA32: 1556*4kB (UME) 536*8kB (UM) 282*16kB (UME) 955*32kB (UM) 376*64kB (UME) 95*128kB (UME) 53*256kB (UME) 25*512kB (UM) 21*1024kB (UME) 11*2048kB (UM) 200*4096kB (UM) = 971408kB
[  386.983688][T14941] geneve2: left promiscuous mode
[  387.002857][T14955] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  387.020082][T14941] geneve2: left allmulticast mode
[  387.026733][T14955] Node 1 Normal: 186*4kB (UME) 37*8kB (UME) 38*16kB (UME) 187*32kB (UME) 60*64kB (UME) 6*128kB (UME) 3*256kB (UM) 3*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3900624kB
[  387.047133][T14955] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  387.056844][T14955] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  387.066740][T14955] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  387.077668][T14955] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  387.088017][T14955] 44876 total pagecache pages
[  387.092903][T14955] 0 pages in swap cache
[  387.097235][T14955] Free swap  = 124996kB
[  387.101679][T14955] Total swap = 124996kB
[  387.106618][T14955] 2097051 pages RAM
[  387.110520][T14955] 0 pages HighMem/MovableOnly
[  387.115550][T14955] 424103 pages reserved
[  387.117331][T14941] bridge7: left promiscuous mode
[  387.119865][T14955] 0 pages cma reserved
[  387.124812][T14941] bridge7: left allmulticast mode
[  387.136372][T14941] geneve4: left promiscuous mode
[  387.143136][T14941] bond3: left promiscuous mode
[  387.148598][T14941] bond3: left allmulticast mode
[  387.161948][T14941] ip6gretap3: left promiscuous mode
[  387.169483][T14941] veth5: left promiscuous mode
[  387.176356][T14941] ip6gre2: left allmulticast mode
[  387.182460][T14941] bridge9: left allmulticast mode
[  387.189802][T14941] gtp0: left promiscuous mode
[  387.194628][T14941] gtp0: left allmulticast mode
[  387.208376][T14947] hsr_slave_0: left promiscuous mode
[  387.214836][T14947] hsr_slave_1: left promiscuous mode
[  387.252669][T14968] chnl_net:caif_netlink_parms(): no params data found
[  387.269128][ T8219] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 44149 - 0
[  387.278123][ T8219] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 56067 - 0
[  387.287141][ T8219] netdevsim netdevsim3 eth0: unset [1, 2] type 2 family 0 port 6081 - 0
[  387.296247][ T8219] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 44149 - 0
[  387.306043][ T8219] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 56067 - 0
[  387.315402][ T8219] netdevsim netdevsim3 eth1: unset [1, 2] type 2 family 0 port 6081 - 0
[  387.327029][ T8219] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 44149 - 0
[  387.345392][ T8219] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 56067 - 0
[  387.354224][ T8219] netdevsim netdevsim3 eth2: unset [1, 2] type 2 family 0 port 6081 - 0
[  387.363194][ T8219] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 44149 - 0
[  387.386253][ T8219] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 56067 - 0
[  387.403817][ T8219] netdevsim netdevsim3 eth3: unset [1, 2] type 2 family 0 port 6081 - 0
[  387.450248][T14976] siw: device registration error -23
[  387.735655][T14989] net_ratelimit: 11 callbacks suppressed
[  387.735678][T14989] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  387.801947][T14990] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  387.959459][T14995] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2286'.
[  388.109572][T14997] netlink: 'syz.0.2287': attribute type 11 has an invalid length.
[  388.132765][T14997] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2287'.
[  388.291924][T15001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2288'.
[  388.333144][T15001] 8021q: adding VLAN 0 to HW filter on device bond4
[  388.754872][T15006] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2289'.
[  388.829698][T15006] 8021q: adding VLAN 0 to HW filter on device bond5
[  388.853044][T15009] bond5: (slave batadv1): Opening slave failed
[  389.060185][T15013] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2291'.
[  389.174359][T15018] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2293'.
[  389.458595][T15023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2294'.
[  390.073065][T15051] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2301'.
[  390.082426][T15051] block nbd0: not configured, cannot reconfigure
[  390.420073][T15061] macsec0: entered allmulticast mode
[  390.433224][T15061] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  390.615653][T15068] 8021q: adding VLAN 0 to HW filter on device bond5
[  390.626258][T15073] netlink: 'syz.0.2308': attribute type 8 has an invalid length.
[  390.626677][T15068] bond0: (slave bond5): Enslaving as an active interface with a down link
[  390.637616][T15074] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2306'.
[  390.673889][T15071] vxcan1 speed is unknown, defaulting to 1000
[  390.996774][T15071] virt_wifi0 speed is unknown, defaulting to 1000
[  392.180328][T15097] __nla_validate_parse: 1 callbacks suppressed
[  392.180352][T15097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2315'.
[  392.263221][T15097] netlink: 'syz.0.2315': attribute type 5 has an invalid length.
[  392.279666][T15097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2315'.
[  392.304494][T15110] netlink: 'syz.3.2319': attribute type 13 has an invalid length.
[  392.329337][T15110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2319'.
[  392.349635][   T53] Bluetooth: hci4: command 0x0405 tx timeout
[  392.467890][T15112] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  392.541074][T15112] bond6 (unregistering): Released all slaves
[  392.949707][T15128] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2323'.
[  393.179377][T15138] netlink: 'syz.4.2326': attribute type 1 has an invalid length.
[  393.282710][T15143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2327'.
[  393.302597][T15143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2327'.
[  393.327112][T15138] 8021q: adding VLAN 0 to HW filter on device bond6
[  393.383979][T15143] batman_adv: batadv0: Removing interface: dummy0
[  393.432567][T15145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2329'.
[  393.521594][T15152] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  393.690643][T15160] FAULT_INJECTION: forcing a failure.
[  393.690643][T15160] name failslab, interval 1, probability 0, space 0, times 1
[  393.720423][T15160] CPU: 1 UID: 0 PID: 15160 Comm: syz.0.2332 Not tainted syzkaller #0 PREEMPT(full) 
[  393.720454][T15160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  393.720467][T15160] Call Trace:
[  393.720475][T15160]  <TASK>
[  393.720484][T15160]  dump_stack_lvl+0x189/0x250
[  393.720519][T15160]  ? __pfx____ratelimit+0x10/0x10
[  393.720543][T15160]  ? __pfx_dump_stack_lvl+0x10/0x10
[  393.720570][T15160]  ? __pfx__printk+0x10/0x10
[  393.720598][T15160]  ? __pfx___might_resched+0x10/0x10
[  393.720618][T15160]  ? fs_reclaim_acquire+0x7d/0x100
[  393.720653][T15160]  should_fail_ex+0x414/0x560
[  393.720687][T15160]  should_failslab+0xa8/0x100
[  393.720708][T15160]  __kmalloc_noprof+0xcb/0x7f0
[  393.720734][T15160]  ? security_sk_alloc+0x52/0x390
[  393.720763][T15160]  security_sk_alloc+0x52/0x390
[  393.720786][T15160]  sk_prot_alloc+0x101/0x220
[  393.720814][T15160]  ? sk_alloc+0x26/0x410
[  393.720844][T15160]  sk_alloc+0x39/0x410
[  393.720870][T15160]  ? bpf_ctx_init+0x167/0x1d0
[  393.720903][T15160]  bpf_prog_test_run_skb+0x313/0x1550
[  393.720939][T15160]  ? __fget_files+0x2a/0x420
[  393.720965][T15160]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  393.720994][T15160]  bpf_prog_test_run+0x2c7/0x340
[  393.721020][T15160]  __sys_bpf+0x562/0x860
[  393.721041][T15160]  ? __pfx___sys_bpf+0x10/0x10
[  393.721080][T15160]  ? ksys_write+0x22a/0x250
[  393.721112][T15160]  ? __pfx_ksys_write+0x10/0x10
[  393.721144][T15160]  __x64_sys_bpf+0x7c/0x90
[  393.721174][T15160]  do_syscall_64+0xfa/0xfa0
[  393.721197][T15160]  ? lockdep_hardirqs_on+0x9c/0x150
[  393.721219][T15160]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.721248][T15160]  ? clear_bhb_loop+0x60/0xb0
[  393.721272][T15160]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.721291][T15160] RIP: 0033:0x7f406918efc9
[  393.721310][T15160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  393.721328][T15160] RSP: 002b:00007f406a075038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  393.721351][T15160] RAX: ffffffffffffffda RBX: 00007f40693e5fa0 RCX: 00007f406918efc9
[  393.721366][T15160] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a
[  393.721379][T15160] RBP: 00007f406a075090 R08: 0000000000000000 R09: 0000000000000000
[  393.721389][T15160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  393.721400][T15160] R13: 00007f40693e6038 R14: 00007f40693e5fa0 R15: 00007ffc6187fa78
[  393.721435][T15160]  </TASK>
[  393.731965][T15163] netlink: 'syz.3.2334': attribute type 10 has an invalid length.
[  393.878803][T15168] netlink: 'syz.0.2335': attribute type 1 has an invalid length.
[  394.308532][T15195] siw: device registration error -23
[  394.360839][T15194] vxcan1 speed is unknown, defaulting to 1000
[  394.736035][T15194] virt_wifi0 speed is unknown, defaulting to 1000
[  394.736950][T15205] vxcan1 speed is unknown, defaulting to 1000
[  395.049826][T15189] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  395.135399][T15214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2346'.
[  395.156483][T15214] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2346'.
[  395.213372][T15214] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2346'.
[  395.338321][T15205] virt_wifi0 speed is unknown, defaulting to 1000
[  395.425225][T15222] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  395.449398][T15224] netlink: 'syz.0.2349': attribute type 6 has an invalid length.
[  395.620501][T15226] vxcan1 speed is unknown, defaulting to 1000
[  396.174221][T15226] virt_wifi0 speed is unknown, defaulting to 1000
[  396.283720][T15247] syzkaller1: entered promiscuous mode
[  396.289611][T15247] syzkaller1: entered allmulticast mode
[  396.415759][T15248] ip6gre1: entered allmulticast mode
[  397.437770][T15261] bridge9: port 1(veth7) entered blocking state
[  397.444464][T15261] bridge9: port 1(veth7) entered disabled state
[  397.451430][T15261] veth7: entered allmulticast mode
[  397.501869][T15261] veth7: entered promiscuous mode
[  397.548005][T15262] bridge9: port 2(vlan4) entered blocking state
[  397.555864][T15262] bridge9: port 2(vlan4) entered disabled state
[  397.563968][T15262] vlan4: entered allmulticast mode
[  397.577644][T15262] vlan4: entered promiscuous mode
[  397.593173][T15262] veth1: entered promiscuous mode
[  397.625699][T15266] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  397.714378][T15270] netlink: 'syz.0.2361': attribute type 5 has an invalid length.
[  397.901129][T15275] vxcan1 speed is unknown, defaulting to 1000
[  397.914121][T15278] batadv_slave_0: entered promiscuous mode
[  398.360739][T15294] __nla_validate_parse: 5 callbacks suppressed
[  398.360934][T15294] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2367'.
[  398.823398][T15275] virt_wifi0 speed is unknown, defaulting to 1000
[  398.891547][T15306] FAULT_INJECTION: forcing a failure.
[  398.891547][T15306] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  398.925112][T15306] CPU: 1 UID: 0 PID: 15306 Comm: syz.2.2370 Not tainted syzkaller #0 PREEMPT(full) 
[  398.925142][T15306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  398.925154][T15306] Call Trace:
[  398.925162][T15306]  <TASK>
[  398.925171][T15306]  dump_stack_lvl+0x189/0x250
[  398.925203][T15306]  ? __pfx____ratelimit+0x10/0x10
[  398.925226][T15306]  ? __pfx_dump_stack_lvl+0x10/0x10
[  398.925251][T15306]  ? __pfx__printk+0x10/0x10
[  398.925286][T15306]  should_fail_ex+0x414/0x560
[  398.925319][T15306]  _copy_to_user+0x31/0xb0
[  398.925346][T15306]  bpf_test_finish+0x56f/0x700
[  398.925385][T15306]  ? __pfx_bpf_test_finish+0x10/0x10
[  398.925430][T15306]  bpf_prog_test_run_skb+0xef8/0x1550
[  398.925479][T15306]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  398.925517][T15306]  bpf_prog_test_run+0x2c7/0x340
[  398.925541][T15306]  __sys_bpf+0x562/0x860
[  398.925561][T15306]  ? __pfx___sys_bpf+0x10/0x10
[  398.925613][T15306]  ? ksys_write+0x22a/0x250
[  398.925642][T15306]  ? __pfx_ksys_write+0x10/0x10
[  398.925675][T15306]  __x64_sys_bpf+0x7c/0x90
[  398.925704][T15306]  do_syscall_64+0xfa/0xfa0
[  398.925726][T15306]  ? lockdep_hardirqs_on+0x9c/0x150
[  398.925750][T15306]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.925770][T15306]  ? clear_bhb_loop+0x60/0xb0
[  398.925801][T15306]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.925821][T15306] RIP: 0033:0x7f00a298efc9
[  398.925839][T15306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  398.925875][T15306] RSP: 002b:00007f00a0bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  398.925899][T15306] RAX: ffffffffffffffda RBX: 00007f00a2be5fa0 RCX: 00007f00a298efc9
[  398.925915][T15306] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a
[  398.925928][T15306] RBP: 00007f00a0bf6090 R08: 0000000000000000 R09: 0000000000000000
[  398.925941][T15306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  398.925953][T15306] R13: 00007f00a2be6038 R14: 00007f00a2be5fa0 R15: 00007fff705f5aa8
[  398.926000][T15306]  </TASK>
[  399.489777][T15318] syzkaller1: entered promiscuous mode
[  399.503055][T15318] syzkaller1: entered allmulticast mode
[  399.533725][T15323] netlink: 'syz.2.2377': attribute type 9 has an invalid length.
[  399.618433][T15319] vxcan1 speed is unknown, defaulting to 1000
[  399.869876][T15331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2379'.
[  399.895488][T15331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2379'.
[  400.321255][T15335] netlink: 'syz.2.2380': attribute type 10 has an invalid length.
[  400.339288][T15335] netlink: 'syz.2.2380': attribute type 10 has an invalid length.
[  400.347969][T15335] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2380'.
[  400.366165][T15335] batadv0: entered promiscuous mode
[  400.371503][T15335] batadv0: entered allmulticast mode
[  400.382001][T15335] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  400.401115][T15318] vxcan1 speed is unknown, defaulting to 1000
[  400.407921][T15319] virt_wifi0 speed is unknown, defaulting to 1000
[  400.568079][T15347] FAULT_INJECTION: forcing a failure.
[  400.568079][T15347] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  400.593761][T15344] netlink: 'syz.4.2382': attribute type 1 has an invalid length.
[  400.614732][T15347] CPU: 0 UID: 0 PID: 15347 Comm: syz.1.2383 Not tainted syzkaller #0 PREEMPT(full) 
[  400.614762][T15347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  400.614774][T15347] Call Trace:
[  400.614783][T15347]  <TASK>
[  400.614792][T15347]  dump_stack_lvl+0x189/0x250
[  400.614826][T15347]  ? __pfx____ratelimit+0x10/0x10
[  400.614849][T15347]  ? __pfx_dump_stack_lvl+0x10/0x10
[  400.614876][T15347]  ? __pfx__printk+0x10/0x10
[  400.614915][T15347]  should_fail_ex+0x414/0x560
[  400.614950][T15347]  _copy_to_user+0x31/0xb0
[  400.614977][T15347]  simple_read_from_buffer+0xe1/0x170
[  400.615013][T15347]  proc_fail_nth_read+0x1b3/0x220
[  400.615044][T15347]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  400.615073][T15347]  ? rw_verify_area+0x2a6/0x4d0
[  400.615099][T15347]  ? __lock_acquire+0xab9/0xd20
[  400.615116][T15347]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  400.615143][T15347]  vfs_read+0x200/0xa30
[  400.615169][T15347]  ? fdget_pos+0x247/0x320
[  400.615193][T15347]  ? __pfx___mutex_lock+0x10/0x10
[  400.615219][T15347]  ? __pfx_vfs_read+0x10/0x10
[  400.615247][T15347]  ? __fget_files+0x2a/0x420
[  400.615272][T15347]  ? __fget_files+0x3a0/0x420
[  400.615289][T15347]  ? __fget_files+0x2a/0x420
[  400.615319][T15347]  ksys_read+0x145/0x250
[  400.615348][T15347]  ? __pfx_ksys_read+0x10/0x10
[  400.615381][T15347]  ? do_syscall_64+0xbe/0xfa0
[  400.615407][T15347]  do_syscall_64+0xfa/0xfa0
[  400.615427][T15347]  ? lockdep_hardirqs_on+0x9c/0x150
[  400.615449][T15347]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.615470][T15347]  ? clear_bhb_loop+0x60/0xb0
[  400.615504][T15347]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.615524][T15347] RIP: 0033:0x7f3f9bd8d9dc
[  400.615542][T15347] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  400.615559][T15347] RSP: 002b:00007f3f9cb43030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  400.615582][T15347] RAX: ffffffffffffffda RBX: 00007f3f9bfe5fa0 RCX: 00007f3f9bd8d9dc
[  400.615597][T15347] RDX: 000000000000000f RSI: 00007f3f9cb430a0 RDI: 0000000000000004
[  400.615610][T15347] RBP: 00007f3f9cb43090 R08: 0000000000000000 R09: 0000000000000000
[  400.615623][T15347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  400.615635][T15347] R13: 00007f3f9bfe6038 R14: 00007f3f9bfe5fa0 R15: 00007ffe78b59b08
[  400.615673][T15347]  </TASK>
[  400.864669][T15344] netlink: 'syz.4.2382': attribute type 20 has an invalid length.
[  400.874817][T15344] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2382'.
[  400.930595][T15334] vxcan1 speed is unknown, defaulting to 1000
[  400.990447][T15318] virt_wifi0 speed is unknown, defaulting to 1000
[  400.991169][T15351] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2384'.
[  401.314787][T15355] batadv1: entered promiscuous mode
[  401.357575][T15357] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2386'.
[  401.586703][T15334] virt_wifi0 speed is unknown, defaulting to 1000
[  401.634063][T15360] vxcan1 speed is unknown, defaulting to 1000
[  401.765150][T15366] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2389'.
[  401.812207][T15366] xt_recent: Unsupported userspace flags (000000b1)
[  402.307114][T15376] pimreg: entered allmulticast mode
[  402.314498][T15376] pimreg: left allmulticast mode
[  402.404642][T15360] virt_wifi0 speed is unknown, defaulting to 1000
[  402.566499][T15378] Bluetooth: MGMT ver 1.23
[  402.571072][T15378] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  403.429753][T15409] netlink: 'syz.3.2396': attribute type 1 has an invalid length.
[  404.034541][T15423] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2400'.
[  404.273943][T15435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2400'.
[  404.283522][T15435] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2400'.
[  404.783507][T15443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2406'.
[  404.827633][T15443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2406'.
[  404.876679][T15443] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode
[  404.888432][T15443] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode
[  404.907983][T15450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2405'.
[  404.918360][T15443] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2406'.
[  404.940658][T15443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2406'.
[  404.992728][T15443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2406'.
[  405.242205][T15456] netlink: 'syz.0.2409': attribute type 5 has an invalid length.
[  405.256500][T15456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2409'.
[  405.311516][T15459] pim6reg: entered allmulticast mode
[  405.506424][T15468] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  405.767817][T15457] pim6reg: left allmulticast mode
[  407.110568][T15502] vxcan1 speed is unknown, defaulting to 1000
[  408.191036][T15502] virt_wifi0 speed is unknown, defaulting to 1000
[  408.191051][T15522] vxcan1 speed is unknown, defaulting to 1000
[  408.782379][T15523] vxcan1 speed is unknown, defaulting to 1000
[  408.796282][T15522] virt_wifi0 speed is unknown, defaulting to 1000
[  409.011163][T15563] netlink: 'syz.2.2436': attribute type 1 has an invalid length.
[  409.584050][T15545] vxcan1 speed is unknown, defaulting to 1000
[  410.183630][T15523] virt_wifi0 speed is unknown, defaulting to 1000
[  410.662406][T15587] syzkaller1: entered promiscuous mode
[  410.689994][T15587] syzkaller1: entered allmulticast mode
[  410.902641][T15545] virt_wifi0 speed is unknown, defaulting to 1000
[  411.380608][T15601] openvswitch: netlink: Actions may not be safe on all matching packets
[  411.696509][T15598] sctp: [Deprecated]: syz.2.2446 (pid 15598) Use of int in max_burst socket option deprecated.
[  411.696509][T15598] Use struct sctp_assoc_value instead
[  413.653057][T15622] __nla_validate_parse: 15 callbacks suppressed
[  413.653081][T15622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2453'.
[  413.977347][T15622] 8021q: adding VLAN 0 to HW filter on device bond6
[  414.069107][T15630] netlink: 'syz.3.2454': attribute type 58 has an invalid length.
[  414.094165][T15630] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2454'.
[  414.381972][T15627] bond6 (unregistering): Released all slaves
[  414.514877][T15632] xfrm1: entered allmulticast mode
[  414.778618][T15643] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2458'.
[  414.813083][T15641] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2458'.
[  414.868077][T15645] bridge0: entered promiscuous mode
[  414.891480][T15645] bridge0: entered allmulticast mode
[  414.926866][T15645] team0: Port device bridge0 added
[  414.987591][T15649] netlink: 'syz.4.2459': attribute type 12 has an invalid length.
[  415.068751][T15645] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2457'.
[  415.123392][T15658] xt_ecn: cannot match TCP bits for non-tcp packets
[  415.164344][T15642] Cannot find del_set index 4 as target
[  415.213109][T15664] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2462'.
[  415.463256][T15668] netlink: 'syz.3.2463': attribute type 1 has an invalid length.
[  415.489857][T15668] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2463'.
[  415.839605][T15677] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  415.849090][T15678] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode
[  415.857385][T15678] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode
[  415.876646][T15677] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  415.891395][T15679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2465'.
[  416.140973][T15603] Set syz1 is full, maxelem 65536 reached
[  416.555734][T15706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2473'.
[  416.575717][T15706] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2473'.
[  416.599817][T15706] gretap1: entered promiscuous mode
[  417.342928][T15729] unsupported nlmsg_type 40
[  417.588312][T15740] x_tables: duplicate underflow at hook 2
[  417.757869][T15745] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  417.774877][T15747] netlink: 'syz.0.2483': attribute type 1 has an invalid length.
[  417.841180][T15747] bond6: entered promiscuous mode
[  417.848569][T15747] 8021q: adding VLAN 0 to HW filter on device bond6
[  417.936528][T15749] bond6: (slave bridge5): making interface the new active one
[  417.958888][T15749] bridge5: entered promiscuous mode
[  417.976109][T15749] bond6: (slave bridge5): Enslaving as an active interface with an up link
[  417.992716][T15764] netlink: 'syz.3.2489': attribute type 10 has an invalid length.
[  418.010565][T15764] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  418.394252][T15775] team0 (unregistering): left promiscuous mode
[  418.419187][T15775] team0 (unregistering): Port device bridge1 removed
[  418.441796][T15775] team0 (unregistering): Port device bridge7 removed
[  418.454729][T15775] team0 (unregistering): Port device bridge0 removed
[  418.553980][T15783] bond9: option primary_reselect: invalid value (255)
[  418.564879][T15783] bond9 (unregistering): Released all slaves
[  418.786940][T15790] vlan0 (unregistering): left promiscuous mode
[  418.794437][T15790] team0: Port device vlan0 removed
[  418.820561][T15796] syz_tun: entered allmulticast mode
[  418.836235][T15798] dummy0: entered promiscuous mode
[  418.851813][T15797] dummy0: left promiscuous mode
[  418.919410][T15802] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  419.068652][T15805] bond11: option arp_interval: invalid value (18446744073709551615)
[  419.077265][T15805] bond11: option arp_interval: allowed values 0 - 2147483647
[  419.107175][T15805] bond11 (unregistering): Released all slaves
[  419.120645][T15811] __nla_validate_parse: 8 callbacks suppressed
[  419.120667][T15811] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2499'.
[  420.019499][T15857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2509'.
[  420.228460][T15864] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2512'.
[  420.390998][T15867] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2513'.
[  420.661171][T15853] netlink: 'syz.0.2508': attribute type 29 has an invalid length.
[  420.735643][T15877] vxcan1 speed is unknown, defaulting to 1000
[  420.946132][T15887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2517'.
[  421.086259][T15887] bridge10: entered allmulticast mode
[  421.160732][T15901] netlink: 'syz.2.2520': attribute type 13 has an invalid length.
[  421.324232][T15908] netlink: 'syz.0.2521': attribute type 7 has an invalid length.
[  421.354065][T15908] netlink: 'syz.0.2521': attribute type 8 has an invalid length.
[  421.371952][T15908] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2521'.
[  421.508142][T15914] netlink: 'syz.1.2523': attribute type 1 has an invalid length.
[  421.650692][T15914] 8021q: adding VLAN 0 to HW filter on device bond6
[  421.715264][T15917] 8021q: adding VLAN 0 to HW filter on device bond6
[  421.738944][T15917] bond6: (slave wlan0): Opening slave failed
[  421.765744][T15929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2527'.
[  421.775293][T15929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2527'.
[  421.776118][T15923] vlan2: entered allmulticast mode
[  421.814449][T15923] bond6: (slave vlan2): making interface the new active one
[  421.844304][T15923] bond6: (slave vlan2): Enslaving as an active interface with an up link
[  421.870459][T15927] vxcan4: entered allmulticast mode
[  421.944314][T15877] virt_wifi0 speed is unknown, defaulting to 1000
[  421.944857][T15929] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode
[  421.975499][T15929] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode
[  421.982989][T15878] vxcan1 speed is unknown, defaulting to 1000
[  422.026643][    T9] page_pool_release_retry() stalled pool shutdown: id 74, 1 inflight 60 sec
[  422.462202][T15959] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2535'.
[  423.135486][T15878] virt_wifi0 speed is unknown, defaulting to 1000
[  423.356137][T15972] vxcan1 speed is unknown, defaulting to 1000
[  423.526932][T15979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2542'.
[  423.608983][T15983] netlink: 'syz.2.2544': attribute type 16 has an invalid length.
[  423.918371][T15974] vxcan1 speed is unknown, defaulting to 1000
[  424.195569][T16001] netlink: 'syz.0.2548': attribute type 13 has an invalid length.
[  424.245087][T16001] __nla_validate_parse: 3 callbacks suppressed
[  424.245107][T16001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2548'.
[  424.328383][T16003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2549'.
[  424.536502][T15972] virt_wifi0 speed is unknown, defaulting to 1000
[  424.576330][T15974] virt_wifi0 speed is unknown, defaulting to 1000
[  424.600301][T16012] syzkaller0: entered promiscuous mode
[  424.625203][T16012] syzkaller0: entered allmulticast mode
[  424.906520][T16015] vxcan1 speed is unknown, defaulting to 1000
[  460.603668][   T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  460.932264][   T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  461.062945][   T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  461.383960][   T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  461.712507][   T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  462.394209][ T5828] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  462.552675][ T5828] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  462.873041][ T5828] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  463.341514][ T5828] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  463.494643][ T5828] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  464.281374][ T5828] Bluetooth: hci5: command tx timeout
[  464.701777][   T53] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  464.883856][   T53] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  465.023345][   T53] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  465.494170][   T53] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  465.813491][   T53] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  465.861416][T16015] virt_wifi0 speed is unknown, defaulting to 1000
[  466.122897][T16019] vxcan1 speed is unknown, defaulting to 1000
[  466.354842][ T5828] Bluetooth: hci5: command tx timeout
[  466.832129][   T53] Bluetooth: hci6: command tx timeout
[  467.284314][ T5828] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  467.373584][ T5828] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  467.603132][ T5828] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  468.052536][ T5828] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  468.232796][ T5828] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  468.462162][ T5828] Bluetooth: hci5: command tx timeout
[  468.751344][   T53] Bluetooth: hci7: command tx timeout
[  468.962595][ T5828] Bluetooth: hci6: command tx timeout
[  470.532995][ T5828] Bluetooth: hci5: command tx timeout
[  470.868180][ T5828] Bluetooth: hci7: command tx timeout
[  470.994402][ T5828] Bluetooth: hci6: command tx timeout
[  471.318558][ T5828] Bluetooth: hci8: command tx timeout
[  472.912183][ T5828] Bluetooth: hci7: command tx timeout
[  473.072114][ T5828] Bluetooth: hci6: command tx timeout
[  473.394688][ T5828] Bluetooth: hci8: command tx timeout
[  474.992610][ T5828] Bluetooth: hci7: command tx timeout
[  475.473775][ T5828] Bluetooth: hci8: command tx timeout
[  477.552530][ T5828] Bluetooth: hci8: command tx timeout
[  481.122665][T16054] vxcan1 speed is unknown, defaulting to 1000
[  513.354783][   T53] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  513.452473][   T53] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  513.762903][   T53] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  514.212173][   T53] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  514.334692][   T53] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  517.961305][   T53] Bluetooth: hci9: command tx timeout
[  520.052380][   T53] Bluetooth: hci9: command tx timeout
[  522.122904][   T53] Bluetooth: hci9: command tx timeout
[  524.192452][   T53] Bluetooth: hci9: command tx timeout
[  528.044370][ T5828] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  528.094310][ T5828] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  528.273419][ T5828] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  528.971419][ T5828] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  529.283306][ T5828] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  530.202245][ T5840] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  530.441619][ T5828] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  530.544732][ T5828] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  530.653240][ T5828] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  530.681536][ T5831] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  530.843777][ T5831] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  531.273972][ T5828] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  531.293026][ T5831] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  531.423284][ T5831] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  531.752195][ T5828] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  532.122685][ T5840] Bluetooth: hci10: command tx timeout
[  533.422706][   T53] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  533.523338][   T53] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  533.722644][   T53] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  534.073886][   T53] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  534.201381][   T53] Bluetooth: hci10: command tx timeout
[  534.322546][   T53] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  534.342908][T16054] virt_wifi0 speed is unknown, defaulting to 1000
[  534.363153][   T53] Bluetooth: hci11: command tx timeout
[  534.832631][ T5828] Bluetooth: hci12: command tx timeout
[  536.284209][   T53] Bluetooth: hci10: command tx timeout
[  536.434600][   T53] Bluetooth: hci11: command tx timeout
[  536.933335][   T53] Bluetooth: hci12: command tx timeout
[  537.231860][   T53] Bluetooth: hci13: command tx timeout
[  538.359486][   T53] Bluetooth: hci10: command tx timeout
[  538.523965][   T53] Bluetooth: hci11: command tx timeout
[  539.033123][   T53] Bluetooth: hci12: command tx timeout
[  539.313131][   T53] Bluetooth: hci13: command tx timeout
[  539.724152][T16019] virt_wifi0 speed is unknown, defaulting to 1000
[  539.751768][T16062] vxcan1 speed is unknown, defaulting to 1000
[  540.602918][   T53] Bluetooth: hci11: command tx timeout
[  541.082364][   T53] Bluetooth: hci12: command tx timeout
[  541.432435][   T53] Bluetooth: hci13: command tx timeout
[  543.492851][   T53] Bluetooth: hci13: command tx timeout
[  569.733291][T16067] vxcan1 speed is unknown, defaulting to 1000
[  571.054478][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  571.191497][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  571.364590][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  571.701525][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  572.043094][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  574.922349][ T5828] Bluetooth: hci2: command tx timeout
[  577.002517][ T5828] Bluetooth: hci2: command tx timeout
[  579.084526][ T5828] Bluetooth: hci2: command tx timeout
[  580.612025][   T53] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  580.791442][   T53] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  580.973357][   T53] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  581.153028][   T53] Bluetooth: hci2: command tx timeout
[  581.484254][   T53] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  581.692362][   T53] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  584.103308][ T5840] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  584.234180][ T5840] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  584.381433][ T5840] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  584.521793][ T5840] Bluetooth: hci14: command tx timeout
[  584.961812][ T5840] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  585.164334][ T5840] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  585.802793][ T5840] Bluetooth: hci5: command 0x0406 tx timeout
[  586.592283][ T5840] Bluetooth: hci14: command tx timeout
[  587.313980][T16056] vxcan1 speed is unknown, defaulting to 1000
[  587.713659][ T5828] Bluetooth: hci15: command tx timeout
[  588.682253][ T5840] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  588.703681][   T53] Bluetooth: hci14: command tx timeout
[  588.761569][   T53] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  589.193411][T16087] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  589.293738][T16087] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  589.423295][T16087] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  589.714271][T16109] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  589.813218][T16108] Bluetooth: hci15: command tx timeout
[  589.922984][T16109] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  589.931361][T16108] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  590.482287][ T5828] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  590.773607][ T5828] Bluetooth: hci14: command tx timeout
[  590.823184][ T5828] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  591.232189][ T5828] Bluetooth: hci6: command 0x0406 tx timeout
[  591.232783][T16108] Bluetooth: hci7: command 0x0406 tx timeout
[  591.872134][ T5828] Bluetooth: hci15: command tx timeout
[  592.441619][ T5831] Bluetooth: hci16: command tx timeout
[  593.791212][ T5831] Bluetooth: hci17: command tx timeout
[  593.983580][ T5840] Bluetooth: hci15: command tx timeout
[  594.522034][ T5840] Bluetooth: hci16: command tx timeout
[  595.872158][ T5840] Bluetooth: hci17: command tx timeout
[  596.122929][ T5840] Bluetooth: hci8: command 0x0406 tx timeout
[  596.613719][ T5831] Bluetooth: hci16: command tx timeout
[  596.703413][T16079] vxcan1 speed is unknown, defaulting to 1000
[  597.959051][ T5831] Bluetooth: hci17: command tx timeout
[  598.682402][ T5831] Bluetooth: hci16: command tx timeout
[  600.034720][ T5831] Bluetooth: hci17: command tx timeout
[  606.953645][T16058] vxcan1 speed is unknown, defaulting to 1000
[  615.082521][T16058] virt_wifi0 speed is unknown, defaulting to 1000
[  615.903337][T16056] virt_wifi0 speed is unknown, defaulting to 1000
[  615.930746][T16084] vxcan1 speed is unknown, defaulting to 1000
[  616.384785][T16067] virt_wifi0 speed is unknown, defaulting to 1000
[  618.193463][T16062] virt_wifi0 speed is unknown, defaulting to 1000
[  618.733577][T16079] virt_wifi0 speed is unknown, defaulting to 1000
[  632.203226][ T5840] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  632.373067][ T5840] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  632.591430][ T5840] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  633.072949][ T5840] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  633.212193][ T5840] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  635.953763][ T5840] Bluetooth: hci18: command tx timeout
[  638.033113][ T5840] Bluetooth: hci18: command tx timeout
[  640.121063][ T5831] Bluetooth: hci18: command tx timeout
[  642.121233][ T5831] Bluetooth: hci9: command 0x0406 tx timeout
[  642.194089][ T5831] Bluetooth: hci18: command tx timeout
[  645.463971][ T5831] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1
[  645.783120][ T5831] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9
[  645.851618][ T5831] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9
[  646.204299][ T5831] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4
[  646.401341][ T5831] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2
[  647.211656][T16108] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1
[  647.332323][T16108] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9
[  647.694349][T16108] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9
[  647.953806][T16088] vxcan1 speed is unknown, defaulting to 1000
[  648.173660][T16108] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4
[  648.482561][T16108] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2
[  649.184260][T16108] Bluetooth: hci19: command tx timeout
[  649.673065][ T5840] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1
[  649.923866][ T5840] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9
[  650.134275][ T5840] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9
[  650.473213][ T5840] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4
[  650.659887][ T5840] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2
[  650.994517][T16108] Bluetooth: hci20: command tx timeout
[  651.232974][T16108] Bluetooth: hci19: command tx timeout
[  652.672491][ T5840] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1
[  652.794311][ T5840] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9
[  652.953411][ T5831] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9
[  653.074707][ T5831] Bluetooth: hci20: command tx timeout
[  653.312632][ T5831] Bluetooth: hci21: command tx timeout
[  653.332568][ T5831] Bluetooth: hci19: command tx timeout
[  653.363409][ T5831] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4
[  653.993887][ T5831] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2
[  655.164446][ T5831] Bluetooth: hci20: command tx timeout
[  655.394660][ T5831] Bluetooth: hci19: command tx timeout
[  655.402370][ T5840] Bluetooth: hci21: command tx timeout
[  657.084669][T16087] Bluetooth: hci22: command tx timeout
[  657.232136][T16087] Bluetooth: hci20: command tx timeout
[  657.482762][ T5831] Bluetooth: hci12: command 0x0406 tx timeout
[  657.503194][T16087] Bluetooth: hci10: command 0x0406 tx timeout
[  657.524375][ T5831] Bluetooth: hci11: command 0x0406 tx timeout
[  657.563146][T16087] Bluetooth: hci13: command 0x0406 tx timeout
[  657.594422][ T5831] Bluetooth: hci21: command tx timeout
[  659.172598][ T5840] Bluetooth: hci22: command tx timeout
[  659.631915][ T5828] Bluetooth: hci21: command tx timeout
[  661.232116][   T53] Bluetooth: hci22: command tx timeout
[  663.313373][   T53] Bluetooth: hci22: command tx timeout
[  673.103572][T16100] vxcan1 speed is unknown, defaulting to 1000
[  691.193376][ T5828] Bluetooth: hci23: unexpected cc 0x0c03 length: 249 > 1
[  691.331604][ T5828] Bluetooth: hci23: unexpected cc 0x1003 length: 249 > 9
[  691.624640][ T5828] Bluetooth: hci23: unexpected cc 0x1001 length: 249 > 9
[  692.173338][ T5828] Bluetooth: hci23: unexpected cc 0x0c23 length: 249 > 4
[  692.571185][ T5828] Bluetooth: hci23: unexpected cc 0x0c38 length: 249 > 2
[  696.532154][   T53] Bluetooth: hci23: command tx timeout
[  697.103777][   T31] INFO: task syz.2.2552:16015 blocked for more than 143 seconds.
[  697.281363][   T31]       Not tainted syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  697.433639][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  697.593598][   T31] task:syz.2.2552      state:D stack:23712 pid:16015 tgid:16014 ppid:5829   task_flags:0x400140 flags:0x00080003
[  697.792336][   T31] Call Trace:
[  697.862156][   T31]  <TASK>
[  697.934346][   T31]  __schedule+0x1798/0x4cc0
[  698.061179][   T31]  ? __lock_acquire+0xab9/0xd20
[  698.193868][   T31]  ? __lock_acquire+0xab9/0xd20
[  698.401635][   T31]  ? __pfx___schedule+0x10/0x10
[  698.433906][   T53] Bluetooth: hci2: command 0x0406 tx timeout
[  698.524438][   T31]  ? schedule+0x91/0x360
[  698.602630][   T53] Bluetooth: hci23: command tx timeout
[  698.674522][   T31]  schedule+0x165/0x360
[  698.801465][   T31]  schedule_preempt_disabled+0x13/0x30
[  698.921231][   T31]  rwsem_down_write_slowpath+0x872/0xfe0
[  699.094053][   T31]  ? rwsem_down_write_slowpath+0x472/0xfe0
[  699.272561][   T31]  ? __pfx_rwsem_down_write_slowpath+0x10/0x10
[  699.431775][   T31]  ? __lock_acquire+0xab9/0xd20
[  699.643083][   T31]  ? rdma_dev_exit_net+0x8c/0x340
[  699.772036][   T31]  down_write+0x1ab/0x1f0
[  699.983625][   T31]  ? __pfx_down_write+0x10/0x10
[  700.101191][   T31]  ? rdma_net_to_dev_net+0x23/0x240
[  700.412559][   T31]  ? rdma_net_to_dev_net+0x23/0x240
[  700.521488][   T31]  ? rdma_net_to_dev_net+0x1ed/0x240
[  700.672718][   T53] Bluetooth: hci23: command tx timeout
[  700.691503][   T31]  rdma_dev_exit_net+0x8c/0x340
[  700.833875][   T31]  ? __pfx___might_resched+0x10/0x10
[  700.992293][   T31]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  701.142240][   T31]  ? net_generic+0x1e/0x240
[  701.262435][   T31]  ? mutex_is_locked+0x17/0x50
[  701.364246][   T31]  ? rtnl_is_locked+0x15/0x20
[  701.472460][   T31]  ops_undo_list+0x49a/0x990
[  701.593984][   T31]  ? __pfx_ops_undo_list+0x10/0x10
[  701.721193][   T31]  ? ops_init+0x469/0x5c0
[  701.923712][   T31]  setup_net+0x2d6/0x320
[  702.021243][   T31]  ? __pfx_setup_net+0x10/0x10
[  702.124016][   T31]  ? copy_net_ns+0x337/0x4e0
[  702.272803][   T31]  ? down_read_killable+0x1d1/0x350
[  702.361307][   T31]  ? preinit_net+0x47d/0x780
[  702.483861][   T31]  copy_net_ns+0x34e/0x4e0
[  702.612421][   T31]  create_new_namespaces+0x3f3/0x720
[  702.691701][   T31]  ? security_capable+0x7e/0x2e0
[  702.751718][   T53] Bluetooth: hci23: command tx timeout
[  702.941019][   T31]  unshare_nsproxy_namespaces+0x11c/0x170
[  703.053211][   T31]  ksys_unshare+0x4c8/0x8c0
[  703.214519][   T31]  ? __pfx_ksys_unshare+0x10/0x10
[  703.284569][   T31]  __x64_sys_unshare+0x38/0x50
[  703.432582][   T31]  do_syscall_64+0xfa/0xfa0
[  703.523726][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  703.573619][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  703.772082][   T31]  ? clear_bhb_loop+0x60/0xb0
[  703.821006][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  704.001311][   T31] RIP: 0033:0x7f00a298efc9
[  704.073748][   T31] RSP: 002b:00007f00a0bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  704.194239][   T31] RAX: ffffffffffffffda RBX: 00007f00a2be5fa0 RCX: 00007f00a298efc9
[  704.313387][   T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000
[  704.433563][   T31] RBP: 00007f00a2a11f91 R08: 0000000000000000 R09: 0000000000000000
[  704.562495][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  704.643291][   T31] R13: 00007f00a2be6038 R14: 00007f00a2be5fa0 R15: 00007fff705f5aa8
[  704.701487][   T31]  </TASK>
[  704.704632][   T31] 
[  704.704632][   T31] Showing all locks held in the system:
[  704.833591][   T31] 2 locks held by kworker/0:0/9:
[  704.842073][   T31] 1 lock held by rcu_exp_gp_kthr/18:
[  704.851024][   T31] 1 lock held by khungtaskd/31:
[  704.858663][   T31]  #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  704.872232][   T31] 2 locks held by getty/5589:
[  704.901541][   T31]  #0: ffff8880339650a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  705.132311][   T31]  #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  705.433866][   T31] 4 locks held by kworker/u9:2/5828:
[  705.531737][   T31]  #0: ffff888079c7e948 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  705.722277][   T31]  #1: ffffc900040cfba0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  705.962236][   T31]  #2: ffff88805b464dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  706.123824][   T31]  #3: ffff88805b4640b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30
[  706.242768][   T31] 3 locks held by kworker/0:3/5890:
[  706.284615][   T31] 1 lock held by kworker/1:13/6108:
[  706.393966][   T31] 5 locks held by kworker/u8:15/8213:
[  706.473710][   T31] 3 locks held by kworker/u8:18/8219:
[  706.533480][   T31]  #0: ffff88814c3d6148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  706.673112][   T31]  #1: ffffc9001caefba0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  706.922254][   T31]  #2: ffffffff8f2cc988 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  706.983555][   T31] 2 locks held by kworker/u8:38/14036:
[  707.054465][   T31] 2 locks held by syz.1.2541/15974: