last executing test programs:

2m20.752808586s ago: executing program 1 (id=465):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64)
r1 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@getchain={0x6c, 0x66, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x5, 0xfff2}, {0x9, 0xa}, {0xf, 0xfff1}}, [{0x8}, {0x8, 0xb, 0xf}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x40}, {0xffffffffffffffce, 0xb, 0x477f}, {0x8, 0xb, 0xfffffffc}, {0x8, 0xb, 0x7ff}]}, 0x6c}}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x900, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0)
close(r5)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) (async, rerun: 32)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) (rerun: 32)
ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="019f07"]) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x9, 0x1, 0x80000001}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)

2m20.601056681s ago: executing program 1 (id=469):
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x6)

2m20.543707824s ago: executing program 1 (id=471):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="020300030e00000000070000000000000200090008000000010000000000000003000600000000000200000000000000000000002000000002000100000000000000028d00000000030005000000000002004e23ac1414000000000000000000020013000100000028bd700003350000"], 0x70}, 0x1, 0x7}, 0x0)

2m20.438575465s ago: executing program 1 (id=474):
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000100)=0x1, &(0x7f0000000140)=0x4)

2m20.371653834s ago: executing program 1 (id=475):
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
listen(r2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
preadv(r3, &(0x7f0000000100), 0x0, 0x726, 0x7)
socket$netlink(0x10, 0x3, 0x0)
bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050019"], 0x4c}, 0x1, 0x6000000}, 0x0)

2m20.26435911s ago: executing program 1 (id=479):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socket(0x11, 0x4, 0x9) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async)
r3 = socket$xdp(0x2c, 0x3, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x2329000, 0x1800, 0x0, 0x1}, 0x20)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r6, 0x0, {0x0, 0x0, 0x6}, 0xfd}, 0x18)
setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0)
sendmsg$inet(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000200)="1479c369caf28b0c600d5d976b000089bdbf4075277f938a9d8616c6bf", 0x1d}], 0x2}, 0x4048081) (async)
bind$can_j1939(r5, &(0x7f0000000140)={0x1d, r6, 0x2, {0x2, 0x0, 0x4}, 0x2}, 0x18) (async)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r6, {0xfffd, 0xffeb}, {0xa, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x56, 0x0, 0x1}, 0x28) (async)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-des3_ede-asm\x00'}, 0x58) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
recvmmsg(r8, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))

2m5.287566458s ago: executing program 32 (id=479):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
socket(0x11, 0x4, 0x9) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async)
r3 = socket$xdp(0x2c, 0x3, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x2329000, 0x1800, 0x0, 0x1}, 0x20)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r6, 0x0, {0x0, 0x0, 0x6}, 0xfd}, 0x18)
setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0)
sendmsg$inet(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000200)="1479c369caf28b0c600d5d976b000089bdbf4075277f938a9d8616c6bf", 0x1d}], 0x2}, 0x4048081) (async)
bind$can_j1939(r5, &(0x7f0000000140)={0x1d, r6, 0x2, {0x2, 0x0, 0x4}, 0x2}, 0x18) (async)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r6, {0xfffd, 0xffeb}, {0xa, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x56, 0x0, 0x1}, 0x28) (async)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-des3_ede-asm\x00'}, 0x58) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
recvmmsg(r8, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0)
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))

29.374177747s ago: executing program 2 (id=2205):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800003300000000009500"/25], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0xfff, 0x0, 0x1, 0xa6c, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r0}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6gre0\x00', <r3=>0x0, 0x2f, 0x7, 0x3, 0x7f, 0x0, @mcast2, @empty, 0x10, 0x7, 0x3, 0x9}})
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, <r6=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x1000, &(0x7f0000001c80)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r5}, 0x90)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x14, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='GPL\x00', 0x80, 0x88, &(0x7f0000000380)=""/136, 0x41100, 0x70, '\x00', r3, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, 0x0, 0x2, &(0x7f0000000500), &(0x7f0000000540)=[{0x5, 0x5, 0xd, 0x4}, {0x4, 0x1, 0x3, 0x1}], 0x10, 0x9}, 0x94)

29.204043205s ago: executing program 2 (id=2209):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
r1 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600))
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x3, @empty}, @in={0x2, 0x4e21, @empty}]}, &(0x7f00000002c0)=0x10)
sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x11, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000300)={r3, 0xfffc, 0x9b8, 0xd346, 0xd4, 0x101}, &(0x7f0000000340)=0x14)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, 0x0, &(0x7f0000000100))
r4 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @mcast1}})
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4)
socket$rds(0x15, 0x5, 0x0) (async)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async)
socket(0x11, 0x800000003, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) (async)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x3, @empty}, @in={0x2, 0x4e21, @empty}]}, &(0x7f00000002c0)=0x10) (async)
sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async)
sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x11, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) (async)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000300)={r3, 0xfffc, 0x9b8, 0xd346, 0xd4, 0x101}, &(0x7f0000000340)=0x14) (async)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, 0x0, &(0x7f0000000100)) (async)
socket(0x10, 0x2, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @mcast1}}) (async)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) (async)

25.042015803s ago: executing program 2 (id=2209):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
r1 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600))
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x3, @empty}, @in={0x2, 0x4e21, @empty}]}, &(0x7f00000002c0)=0x10)
sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x11, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000300)={r3, 0xfffc, 0x9b8, 0xd346, 0xd4, 0x101}, &(0x7f0000000340)=0x14)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, 0x0, &(0x7f0000000100))
r4 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @mcast1}})
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4)
socket$rds(0x15, 0x5, 0x0) (async)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async)
socket(0x11, 0x800000003, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) (async)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x3, @empty}, @in={0x2, 0x4e21, @empty}]}, &(0x7f00000002c0)=0x10) (async)
sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async)
sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x11, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) (async)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000300)={r3, 0xfffc, 0x9b8, 0xd346, 0xd4, 0x101}, &(0x7f0000000340)=0x14) (async)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, 0x0, &(0x7f0000000100)) (async)
socket(0x10, 0x2, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @mcast1}}) (async)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) (async)

16.693469139s ago: executing program 2 (id=2209):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
r1 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600))
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x3, @empty}, @in={0x2, 0x4e21, @empty}]}, &(0x7f00000002c0)=0x10)
sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x11, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000300)={r3, 0xfffc, 0x9b8, 0xd346, 0xd4, 0x101}, &(0x7f0000000340)=0x14)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, 0x0, &(0x7f0000000100))
r4 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @mcast1}})
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4)
socket$rds(0x15, 0x5, 0x0) (async)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async)
socket(0x11, 0x800000003, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) (async)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x3, @empty}, @in={0x2, 0x4e21, @empty}]}, &(0x7f00000002c0)=0x10) (async)
sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async)
sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x11, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) (async)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000300)={r3, 0xfffc, 0x9b8, 0xd346, 0xd4, 0x101}, &(0x7f0000000340)=0x14) (async)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, 0x0, &(0x7f0000000100)) (async)
socket(0x10, 0x2, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @mcast1}}) (async)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) (async)

9.139434886s ago: executing program 2 (id=2209):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
r1 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600))
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x3, @empty}, @in={0x2, 0x4e21, @empty}]}, &(0x7f00000002c0)=0x10)
sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x11, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000300)={r3, 0xfffc, 0x9b8, 0xd346, 0xd4, 0x101}, &(0x7f0000000340)=0x14)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, 0x0, &(0x7f0000000100))
r4 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @mcast1}})
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4)
socket$rds(0x15, 0x5, 0x0) (async)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async)
socket(0x11, 0x800000003, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) (async)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x3, @empty}, @in={0x2, 0x4e21, @empty}]}, &(0x7f00000002c0)=0x10) (async)
sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async)
sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x11, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) (async)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000300)={r3, 0xfffc, 0x9b8, 0xd346, 0xd4, 0x101}, &(0x7f0000000340)=0x14) (async)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, 0x0, &(0x7f0000000100)) (async)
socket(0x10, 0x2, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @mcast1}}) (async)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) (async)

1.102055408s ago: executing program 3 (id=2431):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000120900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x24040010)

1.1012824s ago: executing program 0 (id=2432):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000002a80))
preadv(r4, &(0x7f0000000280)=[{&(0x7f0000000340)=""/182, 0xb6}, {&(0x7f0000000200)=""/53, 0x35}], 0x2, 0x5, 0x413)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=@newlink={0x40, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c000a0001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c0001fe0f000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r5], 0xb4}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x31, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) (async)
socket$packet(0x11, 0x2, 0x300) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async)
ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000002a80)) (async)
preadv(r4, &(0x7f0000000280)=[{&(0x7f0000000340)=""/182, 0xb6}, {&(0x7f0000000200)=""/53, 0x35}], 0x2, 0x5, 0x413) (async)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=@newlink={0x40, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c000a0001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c0001fe0f000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r5], 0xb4}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x31, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) (async)

1.100653981s ago: executing program 2 (id=2209):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
r1 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600))
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x3, @empty}, @in={0x2, 0x4e21, @empty}]}, &(0x7f00000002c0)=0x10)
sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x11, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000300)={r3, 0xfffc, 0x9b8, 0xd346, 0xd4, 0x101}, &(0x7f0000000340)=0x14)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, 0x0, &(0x7f0000000100))
r4 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @mcast1}})
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4)
socket$rds(0x15, 0x5, 0x0) (async)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async)
socket(0x11, 0x800000003, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) (async)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x3, @empty}, @in={0x2, 0x4e21, @empty}]}, &(0x7f00000002c0)=0x10) (async)
sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async)
sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x11, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) (async)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000300)={r3, 0xfffc, 0x9b8, 0xd346, 0xd4, 0x101}, &(0x7f0000000340)=0x14) (async)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, 0x0, &(0x7f0000000100)) (async)
socket(0x10, 0x2, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @mcast1}}) (async)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040), 0x4) (async)

388.405468ms ago: executing program 0 (id=2433):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="44000000020601020000000000000000000000000500010006000000050005000a0000000500120400000000050000000000000031000000000c000300e44d3df03a6970"], 0x44}}, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="44000000020601020000000000000000000000000500010006000000050005000a0000000500120400000000050000000000000031000000000c000300e44d3df03a6970"], 0x44}}, 0x0)
socket$unix(0x1, 0x2, 0x0) (async)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) (async)
sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
sendmmsg$unix(r2, &(0x7f0000000440)=[{{&(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x8000) (async)
sendmmsg$unix(r2, &(0x7f0000000440)=[{{&(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x8000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40000300) (async)
recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40000300)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff})
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
readv(r6, &(0x7f0000000180)=[{&(0x7f0000000e40)=""/234, 0xea}], 0x1) (async)
readv(r6, &(0x7f0000000180)=[{&(0x7f0000000e40)=""/234, 0xea}], 0x1)
r9 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0xfffffffe, 0x0, 0x100}, 0x1c)
r10 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f00000000c0), 0x12) (async)
write$cgroup_pid(r8, &(0x7f00000000c0), 0x12)
pread64(r10, &(0x7f0000001840)=""/4096, 0x1000, 0x1)
close(r1) (async)
close(r1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0x20000000, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd0af4adf700102c00fe800000000000000000000000000000ff0200000000000000000000000000013c40"], 0x0)
socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002840)=@delchain={0x10f0, 0x65, 0x8, 0x70bd2b, 0x7, {0x0, 0x0, 0x0, 0x0, {0xc, 0xe}, {0x5, 0xfff2}, {0x3, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_u32={{0x8}, {0x50c, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'geneve1\x00'}, @TCA_U32_ACT={0x1e8, 0x7, [@m_ctinfo={0xa8, 0x5, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x0, 0xddf388a5d05d4e39, 0x200, 0x1}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x10}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xf}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0x100, 0x308, 0xffffffffffffffff, 0x2, 0x4}}]}, {0x12, 0x6, "50c14cd95bf6553734bee4806230"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mirred={0x13c, 0x11, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x200, 0x7, 0x1ff, 0x1}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xf, 0x101, 0x10000000, 0x7fffffff, 0x1}, 0x3}}]}, {0xcd, 0x6, "77f6e0b2d8cadb9749a50b5f64d22236d6c55a22175cf554a35c7d4c3ce2be041d5d6c49382174d91104cc6ddce633ee2b262bd14559c08076b17ee246e7df8527fc203e2820e52a59c336889918bb7d0a6ffb707b1fb55117a337fea3f63731fcef8e2c9d9b9c37d4de1b7bf0440c3363073ad5b21c04a15600f8c874fdaa9c02576b392c6d3e04b06be4bee9f3e51f59606a93382a65d1a89d5e1e1997b49a98d0ea3b3e9bc8bb45b1e1ea522709b02d5c327750528b1c1b989a60d4c2e5a81ec8d37e20efda8047"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_U32_LINK={0x8, 0x3, 0x10}, @TCA_U32_DIVISOR={0x8, 0x4, 0xde}, @TCA_U32_SEL={0x2e4, 0x5, {0x9, 0x99, 0x8, 0x1ff, 0x0, 0x7, 0xfff4, 0xfff, [{0xd9, 0x5, 0x800, 0x1}, {0x7fff, 0x8, 0xd924, 0x8}, {0x2, 0xe, 0xa1, 0xd9db}, {0x0, 0x6, 0x1, 0x8}, {0x100, 0xffff5c4c, 0xd, 0x2}, {0xc01, 0x7, 0x4, 0x4}, {0x4, 0x3, 0x8, 0x7fffffff}, {0x8, 0x6c, 0xb, 0x10}, {0x814, 0x0, 0x1, 0xfffffff7}, {0x0, 0x7, 0x6, 0x1}, {0x0, 0x6, 0x9, 0xe}, {0x0, 0x5, 0x1, 0x7}, {0xd48, 0x6bbd, 0x6, 0x7}, {0x6, 0x0, 0x48c, 0x101}, {0x6, 0x8, 0x49, 0x10}, {0x5, 0x246, 0x0, 0x3}, {0x7d, 0x75, 0x59, 0x80}, {0x1000, 0x0, 0x69, 0x102}, {0x5, 0x2, 0x1, 0x2}, {0x3, 0x8, 0x7, 0x8}, {0x1, 0x5259, 0x34000000, 0x8}, {0xa, 0x3, 0x5, 0xc04}, {0x5, 0x2, 0x101, 0x8}, {0x3, 0x2, 0x7, 0x10001}, {0xff, 0x1, 0xd, 0x7}, {0x10001, 0x4}, {0x5, 0x3, 0x8, 0xc}, {0x0, 0x4, 0x7a, 0xfffffd10}, {0x6, 0x6, 0x401}, {0x5, 0xfff, 0x7, 0x4}, {0x7, 0x7, 0x9, 0x9}, {0x6, 0xc0c, 0x0, 0x1}, {0x800, 0x935b, 0x4}, {0xf008, 0x38, 0x5, 0x7fff}, {0x2, 0x0, 0x8, 0x8001}, {0x5, 0xffff, 0xd3f, 0xd}, {0x4, 0x3ff, 0x0, 0xb8c}, {0xfffffffd, 0x3, 0x6, 0x6}, {0x400, 0x7, 0x200, 0x1}, {0x5, 0x1, 0x8, 0x2}, {0x8, 0x8, 0xfb53, 0x15}, {0xfffffffb, 0x8, 0x5, 0x6}, {0x2, 0xa67d, 0x6, 0xffff}, {0x7, 0x6, 0x8001, 0x5}, {0x10002, 0xfffffffd, 0x8b, 0xce73}]}}, @TCA_U32_MARK={0x10, 0xa, {0x6, 0x6}}, @TCA_U32_FLAGS={0x8, 0xb, 0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_basic={{0xa}, {0x81c, 0x2, [@TCA_BASIC_POLICE={0x818, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x7, 0x10, 0xe, 0xee, 0xffffffff, 0x1000, 0x0, 0x0, 0x10000, 0x100, 0x0, 0x9, 0x8, 0x2, 0x2, 0x40, 0x1, 0x8, 0xfffffff7, 0x2, 0x4, 0x2, 0x80000e, 0x2, 0x80, 0x0, 0x2, 0xfffffff5, 0x3, 0x4, 0x80000000, 0x2, 0x8, 0x401, 0x6af, 0xd89, 0x1000, 0xfff, 0x5, 0x5, 0x80000001, 0xffff7a51, 0x9, 0x610c, 0x2, 0xd, 0xfa6, 0x7, 0xbae, 0x5, 0x5, 0x4, 0x2, 0x400, 0x8, 0x27, 0x3, 0x7, 0x65, 0x5e, 0x8, 0x9, 0x7f, 0x776, 0x9d, 0x6, 0x6, 0x1, 0x7fff, 0x401, 0x9f, 0x8f, 0x10001, 0xffff8000, 0x101, 0x7fff, 0x9, 0x7, 0x101, 0x9698, 0x3ff, 0x1d3, 0x5, 0x1, 0x7925173f, 0x6, 0xff, 0xff, 0x1a241f27, 0xfffffffd, 0x1000000, 0x28212caa, 0x134, 0x3, 0x3, 0x18e5, 0x7, 0x3, 0x80000001, 0x5, 0xc, 0x0, 0xffffffff, 0x40, 0x0, 0x101, 0xdd8b, 0x44d, 0x1, 0xe, 0x4, 0xd8, 0x1e, 0x3, 0x5, 0xffffffff, 0x0, 0xc44a, 0x0, 0x1, 0x6, 0xb7d3, 0xfffffff7, 0x6, 0x1, 0xe, 0x8, 0x8, 0x0, 0x401, 0x2, 0x3, 0xb6, 0xe, 0x101, 0x41, 0x4, 0x2, 0x9, 0x80000001, 0x7ff, 0x4, 0x9, 0x5, 0x100, 0xf8e, 0xfffff000, 0x80000000, 0x1, 0x5, 0x0, 0xffff, 0x0, 0x5, 0x1, 0x0, 0x8, 0x8, 0xffffffd1, 0x0, 0x3, 0x2020000, 0x0, 0x5, 0x4, 0x7, 0x2, 0x7, 0x6, 0x80, 0xe00000, 0x9, 0x3ff, 0x99, 0x6f7d6bc3, 0x3, 0x8, 0x3, 0x7, 0x9169, 0x6, 0x5, 0x1, 0x9, 0x1, 0x3, 0x2, 0xfffffff8, 0xffffffc9, 0x676, 0x100, 0x9, 0x80000001, 0x7fffffff, 0xffff, 0x0, 0x11b8, 0x8, 0xfff, 0x80000001, 0x6, 0xffffffff, 0x6292, 0x4, 0x3, 0x7f, 0x0, 0x2, 0x1, 0x7, 0x8, 0x1e1, 0x9, 0x8001, 0x2, 0x8, 0x7, 0x58, 0xfff, 0x1, 0x0, 0x1, 0x6f, 0x8, 0x2, 0xd28c, 0x4, 0x1, 0x4, 0xef, 0x3ff, 0xfd, 0x7f, 0x3, 0x4, 0x7ff, 0x7fffffff, 0x3, 0x10001, 0x101, 0x8, 0xfffffff0, 0x8f0, 0x5, 0x0, 0x0, 0x6a9e, 0x2, 0x10, 0x6, 0x4, 0x8001, 0x8, 0x4, 0xb]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xd9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x239d, 0xa5c, 0x8, 0xfffffffe, 0x1, 0x4, 0x0, 0xffffffff, 0x1ff, 0x9, 0x6, 0x1800, 0x9, 0x368, 0x0, 0x486, 0xb0, 0x7fffffff, 0x346e, 0x40, 0xe4, 0x3, 0xb8498a0, 0x0, 0x7, 0x1000, 0x7, 0xfffffffd, 0x1, 0x1, 0x3, 0xd, 0x80000001, 0x0, 0x0, 0xd, 0x4, 0x7, 0xb9e, 0x101, 0x5, 0x3ff, 0xffffff0e, 0x7, 0x0, 0x0, 0x80ad, 0x3, 0x1ab2, 0x5, 0x3e, 0x54c, 0x34d4, 0x0, 0x2, 0x100, 0x3, 0xc, 0x9, 0x1ff, 0xffffffff, 0x9, 0x8, 0xfff, 0x4, 0xff, 0x0, 0x8, 0x0, 0x3, 0x3, 0x2, 0xed93, 0x8, 0x9, 0x6, 0x8, 0xffffffff, 0xb, 0x0, 0xffff, 0x9f, 0xfffffffa, 0x5, 0x2, 0x6, 0x8535, 0x4, 0x2, 0x9, 0x4, 0x8, 0x5, 0xfffffff7, 0xd4, 0x3, 0x0, 0x1000, 0xb, 0x1c5c, 0xfffffffd, 0x9, 0x3, 0x200, 0x2, 0x6, 0x8, 0xfffffbff, 0x6, 0xc, 0x2, 0x6612, 0x0, 0x9, 0x7, 0x8, 0x1000, 0xfffffff7, 0x80, 0x76, 0x2, 0x0, 0xf, 0x8000, 0x5, 0x89, 0x6, 0x32218842, 0x4, 0x2, 0x5, 0x84, 0x8, 0x9, 0xa7b5, 0x5, 0xa, 0x9, 0x8001, 0x8, 0xff, 0x8, 0x1, 0x3, 0x60d32af6, 0x3, 0x5e, 0x5, 0x8000, 0x7, 0x400, 0x4, 0xffff, 0xd, 0x6, 0x0, 0x8, 0x200, 0x4, 0xb8, 0x0, 0xf7, 0x3b8, 0x10001, 0x400, 0x2, 0x4486de06, 0xe9400000, 0x6, 0xf939, 0x8, 0x3, 0x4, 0xfffffffe, 0x281, 0x771, 0x7, 0x6, 0xc54c, 0x0, 0x2, 0x1282, 0xa, 0xa, 0x9, 0xffff0000, 0x6, 0x80000001, 0x100000, 0xfffffffb, 0x3, 0xb, 0x1, 0x6, 0x0, 0x7, 0x800, 0x5, 0x7, 0x8ee, 0x17, 0x8, 0x8, 0x8, 0x7, 0x5, 0x8000, 0x101, 0x97a, 0xdcf0, 0xfffffff9, 0x9, 0x4, 0x6, 0x7fffffff, 0x8, 0x5f, 0x7, 0x5, 0x0, 0x1, 0x6, 0x8, 0xfffffff8, 0x8, 0x89de, 0x3ed, 0x2, 0xe, 0xfda2, 0x7, 0x5, 0x1, 0x7, 0xe117, 0xfffffffd, 0xfffffff9, 0xb8d, 0xefd9, 0x7f, 0x0, 0xff, 0x2a, 0x8, 0x2d68, 0x3, 0x2, 0x7, 0x9, 0x4, 0x2, 0x8, 0x4, 0x2, 0x9, 0x7]}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x378, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0xfff3, 0x3}}, @TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x30c, 0x1, [@m_skbmod={0xe0, 0x19, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x22}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}]}, {0xa1, 0x6, "a215774eea4438ff19e453cbb73be9c81a616d243833fcb0241b943fb39afbf29f0d0d2fed79ac25e5677069e9c0b33a161deb2a9fa06b710fec4ee0ced68213b94e8e8c6e5b1e287198a5d145b591fe25a28496f74b87c367da131c3881001a7dfe5e391b4d25bc040c717c22aa3d08c4b228502126d313d8da5786bb0a342dbfe9ad6a98793f2eba8b4394d57cbb5f5667b524c3ec7517e80bb676f7"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_skbmod={0xbc, 0x1c, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x10000000, 0x1, 0x10000000, 0x3, 0x77}, 0x3}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x0, 0x7, 0x0, 0x9e4f}, 0x10}}]}, {0x39, 0x6, "fab273e518b8f2d7a74bb358d5d99ed2954153fc070ef7f3e27794fc2bf51868d1ef3c3eadfc46132296e2313bfa206492b3be11d7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0x16c, 0x3, 0x0, 0x0, {{0xc}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x6, 0xc}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xe, 0x4}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x80, 0x3, 0x8, 0x6, 0x6}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffffb}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x9}]}, {0xe7, 0x6, "e73328685115e458feca93788f47fbde4c84ad453075d6e8a87e223f8db37fe721e5f7e0b69d1dc2e97bfd3abccdf897a9814d7dfa281adc1c2989e23183c25e0c29c0c0ea1f2bdbb3f43f32248147b6647cb65c33a496e2052810baa04cd6da9f24a9bbcf7943ab95ffb6017ed4c63fdc0207e6723e0134c9355fc24cc140ed69176085981aa7eb5bfe00c90c3883e2c99620c95afbfe71b0f2ed88f58762b60299130d77b725fd932fc2f63471d0d9ea4a3ae547defa218f06e2f0586888dfea0ed94c99f0951e08b0983e00ab71759652275b6d2d4aa2b62237e17c381904e17c33"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7, 0x3}}}}]}, @TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x3}, {0x1c, 0x5, [{0x2, 0x76, 0x9, 0x6}, {0x6, 0x0, 0x2, 0x6e}, {0x800, 0x7, 0x4, 0xf}]}}, @TCA_BPF_NAME={0xf, 0x7, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x2, 0x6, 0x6, 0x7a5a0c6b}]}}]}}]}, 0x10f0}}, 0x0)

388.184369ms ago: executing program 3 (id=2434):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r1, @ANYBLOB="01000000000000200000010000000800010000000000140004800500030007000000050003000100000008000200010000000800020001000000a00008801c000780080085000200000008000600000004"], 0xe0}}, 0x0)

329.022419ms ago: executing program 3 (id=2435):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r2, &(0x7f0000000680)=ANY=[@ANYBLOB='\t s'], 0x8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a14000000020a497f75241d4e1deb000005000006140000001100010000"], 0x3c}}, 0xc050)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r4)
sendmsg$TIPC_NL_KEY_FLUSH(r4, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008080}, 0x20000000)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), r6)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r3)
r8 = socket$kcm(0x10, 0x2, 0x10)
r9 = socket$kcm(0x10, 0x2, 0x0)
socketpair(0x28, 0xa, 0x8000, &(0x7f00000002c0))
sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x40)
sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES32=r3, @ANYRES8=r7, @ANYRESHEX=r8], 0x4c}, 0x1, 0x0, 0x0, 0x20008084}, 0x4040000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x2, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@ld={0x18, 0x0}, {}, {0x5, 0x1, 0xb, 0x1, 0x2, 0xffff}, {}, {0x5, 0x0, 0xb, 0x2, 0x0, 0x2}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x85, 0x0, 0x0, 0xae}}]}, &(0x7f0000000080)='syzkaller\x00', 0x9}, 0x94)
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="1500d300e780ee405cb05e4e000000174a9622000dfe3106f90b62c777c0ec2126ff53d874b813e21b6e6aef1f97e4b465be43a757879c8cbef1914cd653637d4b68d10f04dac1b56cfec759679fa080e9c55a9e491923df410df0cdddfe36a1061694d6b7d33ab605a0e9d56dea4dea0935448b61dbf747e761d272daa599a3b927bbc7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'gretap0\x00', <r11=>0x0, 0x7, 0x30, 0x19, 0x16, {{0x18, 0x4, 0x2, 0x0, 0x60, 0x66, 0x0, 0x80, 0x4, 0x0, @rand_addr=0x64010102, @multicast2, {[@timestamp_prespec={0x44, 0x14, 0xb1, 0x3, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffff}, {@loopback, 0x9}]}, @ssrr={0x89, 0x17, 0xd1, [@multicast1, @rand_addr=0x64010101, @multicast1, @loopback, @multicast1]}, @timestamp_addr={0x44, 0x1c, 0x57, 0x1, 0xe, [{@remote, 0x80000000}, {@rand_addr=0x64010101, 0x200}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc}]}, @generic={0x88, 0x2}]}}}}})
r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000006000000000000000000000902000000040000000000000700000000000000005f"], 0x0, 0x36}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, r12, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x8, 0x8, 0x6, 0x1e0b1, r10, 0x9, '\x00', r11, 0xffffffffffffffff, 0x1, 0x3, 0x5, 0xd, @value=r12, @void, @value=r2}, 0x50)

328.814453ms ago: executing program 0 (id=2436):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x220, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x1f8, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x158, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @private0, 0x157}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "105850071e2ab631bd00cf795354cb2c626d8b5be606d39cd0bd2ce6ebd06eb3"}, @WGPEER_A_ALLOWEDIPS={0xec, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x15}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}, {0x74, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d454d5dd835fff58334762251fb458c0abd16089d30d58ca66a1769b8a83772c"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x9, @mcast2, 0x5d}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)

213.966158ms ago: executing program 0 (id=2437):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df895d9907e4afb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b907e0974f1073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf4dee8512f3bac440f5d5e4bed6b897608b01eae26a54433e5f5c74a2ee3c2fc50067be05a677ff52a7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fedb679328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e27252804059094a318c4cdeeddd5793a427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f7}], 0x2}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
close(0x4)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f0000000080)="580000001500add427323b472545b4562e117fffffff81000e224e237f000001925aa80020007b0009", 0x29}], 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010000100ff0023fb0a065dab87000002", @ANYRES32=r3, @ANYBLOB="408f01000a200200200012800e0001006970366772657461700000000c000280060010004e240000"], 0x40}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e40)=ANY=[@ANYBLOB="500000000301050000000000000000000a0000003c0002802c000180140003"], 0x50}, 0x1, 0x0, 0x0, 0x40040}, 0x4000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0x2}, 0x6)
write$bt_hci(r5, &(0x7f0000000040)={0x1, @read_tx_power={{0xc2d, 0x3}}}, 0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xb, &(0x7f0000000580)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20008000}, {0x85, 0x0, 0x0, 0x8b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={@rand_addr=0x64010100, @rand_addr=0x64010101, @rand_addr=0x64010102}, 0xc)
sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0)

197.564146ms ago: executing program 3 (id=2438):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xca)
r3 = socket(0x10, 0x80003, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r4, 0x0, 0x1, 0x0, &(0x7f0000000040)="97", 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000280)="bf04", 0x0, 0x8000}, 0x50)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r3)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r7, 0x28, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40851}, 0x8000005)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "000f00000000000f000100000e00"}}}]}, 0x48}}, 0x0)
ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000180)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, 0x7fffffff, 0x28, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]})

116.503306ms ago: executing program 0 (id=2439):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="020300030e00000000070000000000000200090008000000010000000000000003000600000000000200000000000000000000000000000002000100000000110000028d00000000030005000000000002004e23ac1414000000000000000000020013000100000028bd700003350000"], 0x70}, 0x1, 0x7}, 0x0)

50.930519ms ago: executing program 0 (id=2440):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1)
write$cgroup_subtree(r2, &(0x7f0000000700)=ANY=[], 0xfe33)
r3 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0x1000, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x65, 0x0, 0x52, 0x6, 0x0, @private=0xa010102, @broadcast}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x10, 0x0, 0x1}}}}, 0x36)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
pipe(&(0x7f0000000080)) (async)
readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) (async)
write$cgroup_subtree(r2, &(0x7f0000000700)=ANY=[], 0xfe33) (async)
socket$kcm(0x2, 0x3, 0x2) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0x1000, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x65, 0x0, 0x52, 0x6, 0x0, @private=0xa010102, @broadcast}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x10, 0x0, 0x1}}}}, 0x36) (async)

50.421052ms ago: executing program 3 (id=2441):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r1, @ANYBLOB="01000000000000210000010000000800010000000000140004800500030007000000050003000100000008000200010000000800020001000000a00008801c000780080085000200000008000600000004"], 0xe0}}, 0x0)

0s ago: executing program 3 (id=2442):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000c0000000400000001000084fdffffff0a0000000208000000000021000000000000d6f3d3b2000020000000006100302e61615f610061"], 0x0, 0x4c}, 0x28)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="586a44962fdc76705e1301d369b4ccb1e7524dada8554b1278cdba553943595e0325de9403d99b21de39b59431ef7a01ef31ab73b2fcb6e3fca981ae5eac63eed23de0c88f8fdbeb", @ANYRES16=0x0, @ANYBLOB="20002dbd700003dcdf250f00000044000780080001000800000007ff04000900000000000000080002000300000008000100080000000c0003000600000000000000080002009c0d00000800010006000000"], 0x58}, 0x1, 0x0, 0x0, 0x8015}, 0x20040801)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000006800010000000000000000000a00000000000000060007000800000008000500", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}}, 0x0)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x20000084)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="800100003e000701feffffff00000000047c00000800428004000800b80009"], 0x180}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)
close(r4)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc9, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0xffe6, 0xb}, {0xffe0, 0xc}}, [@TCA_RATE={0xffffffffffffff98, 0x5, {0x2, 0xd8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200008b5}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

kernel console output (not intermixed with test programs):

an0: encryption failed: -22
[   71.114253][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.143234][ T6136] netlink: 'syz.2.47': attribute type 2 has an invalid length.
[   71.256947][ T5842] Bluetooth: hci0: command tx timeout
[   71.335644][ T5842] Bluetooth: hci1: command tx timeout
[   71.415330][ T5842] Bluetooth: hci2: command tx timeout
[   72.174028][ T6163] netlink: 'syz.1.56': attribute type 2 has an invalid length.
[   72.278580][ T6172] netlink: 'syz.2.60': attribute type 1 has an invalid length.
[   72.366927][ T6178] __nla_validate_parse: 4 callbacks suppressed
[   72.366939][ T6178] netlink: 42 bytes leftover after parsing attributes in process `syz.2.61'.
[   72.541459][ T6198] netlink: 'syz.0.66': attribute type 2 has an invalid length.
[   72.799585][ T6217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.73'.
[   72.803186][ T6219] sock: sock_set_timeout: `syz.0.71' (pid 6219) tries to set negative timeout
[   72.819564][ T6219] ipvlan2: entered allmulticast mode
[   72.821520][ T6219] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   72.876349][ T6225] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   72.880752][ T6225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.74'.
[   73.077117][ T6237] netlink: 32 bytes leftover after parsing attributes in process `syz.1.78'.
[   73.212834][ T6242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.80'.
[   73.371011][ T6249] syz.1.82 uses obsolete (PF_INET,SOCK_PACKET)
[   73.445430][ T6249] netlink: 28 bytes leftover after parsing attributes in process `syz.1.82'.
[   73.454797][ T6249] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.458924][ T6249] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.631954][ T6271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.88'.
[   73.646986][ T6271] netlink: 48 bytes leftover after parsing attributes in process `syz.0.88'.
[   73.652637][ T6274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.88'.
[   73.664633][ T6274] netlink: 48 bytes leftover after parsing attributes in process `syz.0.88'.
[   73.675610][ T6271] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   73.911381][ T6290] bond1: entered promiscuous mode
[   73.913551][ T6290] 8021q: adding VLAN 0 to HW filter on device bond1
[   73.938205][ T6290] 8021q: adding VLAN 0 to HW filter on device bond1
[   73.940931][ T6290] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[   73.963457][ T6290] bond1: (slave vcan1): Error -95 calling set_mac_address
[   73.994016][ T6295] IPv6: sit1: Disabled Multicast RS
[   74.069059][ T6296] af_packet: tpacket_rcv: packet too big, clamped from 65354 to 3710. macoff=82
[   74.319838][ T6310] can: request_module (can-proto-0) failed.
[   74.348003][ T6313] can: request_module (can-proto-0) failed.
[   74.847574][ T6352] validate_nla: 5 callbacks suppressed
[   74.847605][ T6352] netlink: 'syz.2.115': attribute type 8 has an invalid length.
[   74.962694][ T6362] Cannot find set identified by id 0 to match
[   75.052843][ T6369] sctp: [Deprecated]: syz.0.119 (pid 6369) Use of int in max_burst socket option.
[   75.052843][ T6369] Use struct sctp_assoc_value instead
[   75.163635][ T6377] netlink: 'syz.2.123': attribute type 2 has an invalid length.
[   75.209725][ T6379] netlink: 'syz.2.124': attribute type 8 has an invalid length.
[   75.488468][ T6395] netlink: 'syz.2.131': attribute type 2 has an invalid length.
[   75.502330][ T6401] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   75.563607][ T6403] netlink: 'syz.1.134': attribute type 1 has an invalid length.
[   75.566618][ T6403] netlink: 'syz.1.134': attribute type 2 has an invalid length.
[   75.773836][ T6422] netlink: 'syz.1.142': attribute type 8 has an invalid length.
[   75.837983][ T6429] xt_limit: Overflow, try lower: 262144/524288
[   75.962623][ T6435] syzkaller0: entered promiscuous mode
[   75.966721][ T6435] syzkaller0: entered allmulticast mode
[   76.114636][ T6442] netlink: 'syz.1.149': attribute type 8 has an invalid length.
[   77.128943][ T6457] netlink: 'syz.1.152': attribute type 2 has an invalid length.
[   77.283903][ T6464] tipc: Enabling <ib:lo> not permitted
[   77.298489][ T6464] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[   77.402767][ T6478] syzkaller1: entered promiscuous mode
[   77.404508][ T6478] syzkaller1: entered allmulticast mode
[   77.451543][ T6481] __nla_validate_parse: 15 callbacks suppressed
[   77.451556][ T6481] netlink: 27 bytes leftover after parsing attributes in process `syz.2.161'.
[   77.563455][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.164'.
[   77.572687][ T6484] bond0: entered promiscuous mode
[   77.574532][ T6484] bond_slave_0: entered promiscuous mode
[   77.579852][ T6484] bond_slave_1: entered promiscuous mode
[   77.584556][ T6484] batadv0: entered promiscuous mode
[   77.592712][ T6484] bond0: left promiscuous mode
[   77.594584][ T6484] bond_slave_0: left promiscuous mode
[   77.598577][ T6484] bond_slave_1: left promiscuous mode
[   77.598882][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.163'.
[   77.609424][ T6484] batadv0: left promiscuous mode
[   77.738496][ T6499] netlink: 'syz.0.167': attribute type 8 has an invalid length.
[   77.803798][ T6503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.168'.
[   77.821731][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.168'.
[   77.827236][ T6500] delete_channel: no stack
[   77.900598][ T6510] netlink: 20 bytes leftover after parsing attributes in process `syz.0.170'.
[   78.071166][ T6519] syz.0.173 (6519) used greatest stack depth: 20168 bytes left
[   78.518055][ T6555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.185'.
[   78.542580][ T6558] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[   78.608133][ T6559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.186'.
[   78.737543][ T6572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.192'.
[   78.740930][ T6572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.192'.
[   80.404689][ T6655] ip6tnl1: entered promiscuous mode
[   80.419924][ T6655] ip6tnl1: entered allmulticast mode
[   80.423586][ T6655] team0: Device ip6tnl1 is of different type
[   80.641907][ T6680] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun!
[   80.649910][ T6680] geneve2: entered promiscuous mode
[   80.851936][ T6698] validate_nla: 8 callbacks suppressed
[   80.851978][ T6698] netlink: 'syz.2.234': attribute type 2 has an invalid length.
[   80.870209][ T6698] `: entered promiscuous mode
[   81.148726][ T6731] tipc: Started in network mode
[   81.150359][ T6731] tipc: Node identity 72c2ab59496, cluster identity 4711
[   81.152664][ T6731] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.175313][ T6731] syzkaller0: entered promiscuous mode
[   81.177159][ T6731] syzkaller0: entered allmulticast mode
[   81.358492][ T6730] tipc: Resetting bearer <eth:syzkaller0>
[   81.386097][ T6730] tipc: Disabling bearer <eth:syzkaller0>
[   81.433025][ T6758] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[   81.583781][ T6770] netlink: 'syz.1.256': attribute type 8 has an invalid length.
[   81.615364][ T6772] netlink: 'syz.0.257': attribute type 11 has an invalid length.
[   81.698254][ T6783] syz_tun: entered allmulticast mode
[   81.726077][ T6785] syz_tun: left allmulticast mode
[   82.120881][ T6821] netlink: 'syz.0.274': attribute type 8 has an invalid length.
[   82.183900][    T9] IPVS: starting estimator thread 0...
[   82.298459][ T6828] IPVS: using max 62 ests per chain, 148800 per kthread
[   82.392679][ T6840] openvswitch: netlink: Flow actions attr not present in new flow.
[   82.467630][ T6847] netlink: 'syz.2.282': attribute type 8 has an invalid length.
[   82.478268][    T9] IPVS: starting estimator thread 0...
[   82.510432][ T6849] ip6gretap1: entered promiscuous mode
[   82.565432][ T6850] IPVS: using max 62 ests per chain, 148800 per kthread
[   82.580436][ T6855] __nla_validate_parse: 79 callbacks suppressed
[   82.580450][ T6855] netlink: 88 bytes leftover after parsing attributes in process `syz.2.284'.
[   83.053690][ T6858] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.286'.
[   83.389201][ T6876] netlink: 'syz.0.293': attribute type 3 has an invalid length.
[   83.462982][ T6885] netlink: 'syz.2.295': attribute type 2 has an invalid length.
[   83.587495][ T6893] netlink: 'syz.0.297': attribute type 1 has an invalid length.
[   83.625514][ T6893] 8021q: adding VLAN 0 to HW filter on device bond2
[   83.719170][ T6905] netlink: 'syz.2.302': attribute type 2 has an invalid length.
[   84.043933][ T6924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.310'.
[   84.061388][ T6924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.310'.
[   84.290870][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.319'.
[   84.338423][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.319'.
[   84.385125][ T6948] 8021q: VLANs not supported on nr0
[   84.491901][ T6962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.327'.
[   84.620449][ T6963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.326'.
[   84.630248][ T6968] syz.1.326 (6968) used greatest stack depth: 19696 bytes left
[   84.762586][    C0] IPv4: Oversized IP packet from 172.20.20.10
[   84.847151][ T6980] netlink: 'syz.2.333': attribute type 2 has an invalid length.
[   84.874826][ T6982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.334'.
[   85.287414][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.345'.
[   85.545768][ T7039] x_tables: unsorted entry at hook 3
[   85.910249][ T7055] validate_nla: 1 callbacks suppressed
[   85.910269][ T7055] netlink: 'syz.0.361': attribute type 2 has an invalid length.
[   86.317454][ T7089] netlink: 'syz.0.369': attribute type 1 has an invalid length.
[   86.351251][ T7089] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[   86.578160][ T7106] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20004
[   86.749595][ T7118] netlink: 'syz.0.380': attribute type 8 has an invalid length.
[   86.846412][ T7120] nbd2: detected capacity change from 0 to 63
[   86.853848][ T7129] block nbd2: NBD_DISCONNECT
[   86.861709][ T7129] block nbd2: Disconnected due to user request.
[   86.867068][ T7129] block nbd2: shutting down sockets
[   86.872759][    C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   86.876645][    C1] Buffer I/O error on dev nbd2, logical block 0, async page read
[   86.880239][    C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   86.883904][    C1] Buffer I/O error on dev nbd2, logical block 1, async page read
[   86.887191][    C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   86.890536][    C1] Buffer I/O error on dev nbd2, logical block 2, async page read
[   86.893238][    C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   86.897002][    C1] Buffer I/O error on dev nbd2, logical block 3, async page read
[   86.901227][ T6022] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   86.908568][ T6022] Buffer I/O error on dev nbd2, logical block 0, async page read
[   86.912358][ T6022] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   86.915781][ T6022] Buffer I/O error on dev nbd2, logical block 1, async page read
[   86.918536][ T6022] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   86.921437][ T6022] Buffer I/O error on dev nbd2, logical block 2, async page read
[   86.924046][ T6022] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   86.934797][ T6022] Buffer I/O error on dev nbd2, logical block 3, async page read
[   86.939835][ T6022] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   86.942511][ T6022] Buffer I/O error on dev nbd2, logical block 0, async page read
[   86.945343][ T6022] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   86.948825][ T6022] Buffer I/O error on dev nbd2, logical block 1, async page read
[   86.967554][ T6022] ldm_validate_partition_table(): Disk read failed.
[   86.970675][ T6022] Dev nbd2: unable to read RDB block 0
[   86.973484][ T6022]  nbd2: unable to read partition table
[   86.992006][ T6022] ldm_validate_partition_table(): Disk read failed.
[   86.995092][ T6022] Dev nbd2: unable to read RDB block 0
[   86.998060][ T6022]  nbd2: unable to read partition table
[   87.459710][ T7167] sctp: [Deprecated]: syz.2.397 (pid 7167) Use of struct sctp_assoc_value in delayed_ack socket option.
[   87.459710][ T7167] Use struct sctp_sack_info instead
[   87.538118][ T7169] netlink: 'syz.1.398': attribute type 2 has an invalid length.
[   87.769889][ T7180] __nla_validate_parse: 17 callbacks suppressed
[   87.769901][ T7180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.403'.
[   88.364838][ T7204] netlink: 42 bytes leftover after parsing attributes in process `syz.2.412'.
[   88.701823][ T7216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.417'.
[   88.705535][ T7216] netlink: 20 bytes leftover after parsing attributes in process `syz.1.417'.
[   89.449180][ T7247] netlink: 42 bytes leftover after parsing attributes in process `syz.0.428'.
[   89.672916][ T7253] netlink: 'syz.1.430': attribute type 8 has an invalid length.
[   89.860357][ T7261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.434'.
[   89.892225][ T7261] 8021q: adding VLAN 0 to HW filter on device bond1
[   89.907768][ T7261] pim6reg1: entered promiscuous mode
[   89.909963][ T7261] pim6reg1: entered allmulticast mode
[   89.921882][ T7261] macvlan2: entered promiscuous mode
[   89.924239][ T7261] macvlan2: entered allmulticast mode
[   90.111706][ T7266] netlink: 16 bytes leftover after parsing attributes in process `syz.1.436'.
[   90.114613][ T7266] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[   90.407439][ T7277] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   90.492302][ T7286] xt_TCPMSS: Only works on TCP SYN packets
[   90.524059][ T7280] xt_TPROXY: Can be used only with -p tcp or -p udp
[   90.631688][ T7295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.447'.
[   90.664005][ T7297] netlink: 'syz.1.450': attribute type 2 has an invalid length.
[   90.817805][ T7311] netlink: 'syz.0.453': attribute type 8 has an invalid length.
[   90.907503][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.459'.
[   90.917555][ T7325] netlink: 'syz.1.458': attribute type 2 has an invalid length.
[   90.952455][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.457'.
[   90.959146][ T7322] sit2: entered promiscuous mode
[   91.051458][ T7335] netlink: 'syz.2.460': attribute type 3 has an invalid length.
[   91.055361][ T7335] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002
[   91.092906][ T7338] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[   91.095587][ T7338] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   91.566862][ T7373] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.664620][ T7387] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.150195][ T7425] netlink: 'syz.0.494': attribute type 2 has an invalid length.
[   92.642415][ T7456] wg1: entered promiscuous mode
[   92.644549][ T7456] wg1: entered allmulticast mode
[   93.057759][ T7472] __nla_validate_parse: 7 callbacks suppressed
[   93.057771][ T7472] netlink: 42 bytes leftover after parsing attributes in process `syz.2.509'.
[   93.788244][ T7488] netlink: 'syz.0.515': attribute type 1 has an invalid length.
[   93.790769][ T7488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.515'.
[   93.898827][ T7492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.517'.
[   94.040096][ T7503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.522'.
[   94.086860][ T7503] netlink: 'syz.0.522': attribute type 3 has an invalid length.
[   94.089833][ T7503] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.522'.
[   94.153637][ T7508] netlink: 42 bytes leftover after parsing attributes in process `syz.0.524'.
[   94.210632][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.526'.
[   94.280418][ T7520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.527'.
[   94.489891][ T7525] team0 (unregistering): Port device team_slave_0 removed
[   94.499498][ T7525] team0 (unregistering): Port device team_slave_1 removed
[   94.852190][ T7535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.533'.
[   95.142421][ T7551] netlink: 36 bytes leftover after parsing attributes in process `syz.0.539'.
[   95.310170][ T7558] 8021q: VLANs not supported on tunl0
[   95.922579][ T7571] netlink: 'syz.2.548': attribute type 8 has an invalid length.
[   96.151988][ T7580] D: renamed from syzkaller0
[   96.523612][ T7596] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   96.529292][ T7596] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   96.618469][ T7603] netlink: 'syz.0.560': attribute type 2 has an invalid length.
[   97.317365][ T7626] netlink: 'syz.2.570': attribute type 2 has an invalid length.
[   98.379383][ T7641] __nla_validate_parse: 8 callbacks suppressed
[   98.379432][ T7641] netlink: 20 bytes leftover after parsing attributes in process `syz.2.577'.
[   98.472104][ T7645] netlink: 'syz.2.579': attribute type 2 has an invalid length.
[   98.535462][ T5222] Bluetooth: hci2: command 0x0405 tx timeout
[   98.633347][ T7650] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[   98.648825][ T7647] netlink: 20 bytes leftover after parsing attributes in process `syz.2.580'.
[   98.765976][ T7656] bond0: entered promiscuous mode
[   98.768087][ T7656] bond_slave_0: entered promiscuous mode
[   98.770619][ T7656] bond_slave_1: entered promiscuous mode
[   98.774687][ T7656] batadv0: entered promiscuous mode
[   98.782769][ T7656] hsr1: entered allmulticast mode
[   98.785491][ T7656] bond0: entered allmulticast mode
[   98.787591][ T7656] bond_slave_0: entered allmulticast mode
[   98.789863][ T7656] bond_slave_1: entered allmulticast mode
[   98.792438][ T7656] batadv0: entered allmulticast mode
[   98.797870][ T7656] 8021q: adding VLAN 0 to HW filter on device hsr1
[   98.802173][ T7656] bond0: left promiscuous mode
[   98.804277][ T7656] bond_slave_0: left promiscuous mode
[   98.807640][ T7656] bond_slave_1: left promiscuous mode
[   98.810882][ T7656] batadv0: left promiscuous mode
[   98.961913][ T7665] netlink: 88 bytes leftover after parsing attributes in process `syz.0.587'.
[   99.207182][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.589'.
[   99.912737][ T7691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.599'.
[  100.028981][ T7697] netlink: 'syz.0.601': attribute type 1 has an invalid length.
[  100.051669][ T7697] bond3: entered promiscuous mode
[  100.054247][ T7697] 8021q: adding VLAN 0 to HW filter on device bond3
[  100.073737][ T7697] bond3: (slave bridge2): making interface the new active one
[  100.077014][ T7697] bridge2: entered promiscuous mode
[  100.080356][ T7697] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  100.201994][ T7701] netlink: 88 bytes leftover after parsing attributes in process `syz.0.602'.
[  100.549272][ T7708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.605'.
[  100.594535][ T7708] syzkaller0: entered promiscuous mode
[  100.597159][ T7708] syzkaller0: entered allmulticast mode
[  101.008602][ T7710] netlink: 42 bytes leftover after parsing attributes in process `syz.0.606'.
[  101.848154][ T7720] netlink: 'syz.2.609': attribute type 1 has an invalid length.
[  101.851196][ T7720] netlink: 224 bytes leftover after parsing attributes in process `syz.2.609'.
[  101.971787][ T7720] netlink: 16 bytes leftover after parsing attributes in process `syz.2.609'.
[  102.018465][ T7730] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  102.446102][ T7748] netlink: 'syz.0.619': attribute type 39 has an invalid length.
[  103.208874][ T7779] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.033414][ T7789] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  104.033587][ T7790] netlink: 'syz.2.632': attribute type 11 has an invalid length.
[  104.170582][ T7801] veth0_to_bond: entered allmulticast mode
[  104.271788][ T7811] netlink: 'syz.0.640': attribute type 58 has an invalid length.
[  104.281545][ T7811] __nla_validate_parse: 4 callbacks suppressed
[  104.281558][ T7811] netlink: 20 bytes leftover after parsing attributes in process `syz.0.640'.
[  104.460080][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.644'.
[  104.516539][ T7826] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  104.602507][ T7828] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  104.606474][ T7828] batadv_slave_0: entered promiscuous mode
[  104.616088][ T7826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.645'.
[  104.914170][ T7835] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.923519][ T7835] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.039637][ T7836] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  105.134300][ T7836] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.140385][ T7836] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.143683][ T7836] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.148128][ T7836] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.391772][ T7851] netlink: 'syz.0.653': attribute type 8 has an invalid length.
[  105.624152][ T7866] netlink: 20 bytes leftover after parsing attributes in process `syz.2.659'.
[  105.689042][ T7868] DL<Y: renamed from lo
[  105.699624][ T7869] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  105.854489][ T7873] netlink: 'syz.2.661': attribute type 8 has an invalid length.
[  105.947861][ T7877] netlink: 36 bytes leftover after parsing attributes in process `syz.2.663'.
[  105.951643][ T7877] netlink: 'syz.2.663': attribute type 2 has an invalid length.
[  105.961211][ T7877] : entered promiscuous mode
[  106.000118][ T7877] netlink: 36 bytes leftover after parsing attributes in process `syz.2.663'.
[  106.003904][ T7881] netlink: 'syz.2.663': attribute type 2 has an invalid length.
[  106.140276][ T7887] netlink: 88 bytes leftover after parsing attributes in process `syz.2.665'.
[  106.660831][ T7907] netlink: 24 bytes leftover after parsing attributes in process `syz.0.672'.
[  106.751490][ T5222] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  106.756921][ T5222] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  106.760321][ T5222] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  106.768292][ T5222] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  106.772138][ T5222] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  106.952877][ T7912] chnl_net:caif_netlink_parms(): no params data found
[  107.074383][ T7930] netlink: 32 bytes leftover after parsing attributes in process `syz.2.677'.
[  107.153678][ T7912] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.156800][ T7912] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.159770][ T7912] bridge_slave_0: entered allmulticast mode
[  107.164321][ T7912] bridge_slave_0: entered promiscuous mode
[  107.177077][ T7912] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.181200][ T7912] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.184205][ T7912] bridge_slave_1: entered allmulticast mode
[  107.188898][ T7912] bridge_slave_1: entered promiscuous mode
[  107.214544][ T7938] x_tables: duplicate underflow at hook 2
[  107.239739][ T7912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  107.247511][ T7942] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  107.253006][ T7912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  107.260389][ T7942] netlink: 'syz.0.680': attribute type 12 has an invalid length.
[  107.263345][ T7942] netlink: 'syz.0.680': attribute type 29 has an invalid length.
[  107.269200][ T7942] netlink: 148 bytes leftover after parsing attributes in process `syz.0.680'.
[  107.293313][ T7942] syzkaller0: entered promiscuous mode
[  107.298996][ T7942] syzkaller0: entered allmulticast mode
[  107.305234][   T33] audit: type=1804 audit(1752667162.021:2): pid=7947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.682" name="memory.events" dev="tmpfs" ino=1273 res=1 errno=0
[  107.323753][   T33] audit: type=1800 audit(1752667162.021:3): pid=7947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.682" name="memory.events" dev="tmpfs" ino=1273 res=0 errno=0
[  107.365852][ T7912] team0: Port device team_slave_0 added
[  107.388541][ T7912] team0: Port device team_slave_1 added
[  107.482499][ T7912] batman_adv: batadv0: Adding interface: batadv_slave_0
[  107.493381][ T7912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.515078][ T7912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  107.523839][ T7960] sit1: entered promiscuous mode
[  107.530657][ T7912] batman_adv: batadv0: Adding interface: batadv_slave_1
[  107.533444][ T7912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.557996][ T7912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  107.661021][ T7912] hsr_slave_0: entered promiscuous mode
[  107.664282][ T7912] hsr_slave_1: entered promiscuous mode
[  107.678984][ T7912] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  107.681474][ T7912] Cannot create hsr debugfs directory
[  107.709461][ T7972] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  107.919153][ T7986] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  107.939238][ T7986] veth0: entered promiscuous mode
[  107.977348][ T7912] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  107.991269][ T7912] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  108.002912][ T7912] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  108.014539][ T7912] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  108.179024][ T7912] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.207071][ T7912] 8021q: adding VLAN 0 to HW filter on device team0
[  108.231614][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.234585][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.257606][ T4601] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.260524][ T4601] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.273230][ T8009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.378702][ T2335] tipc: Node number set to 1000516441
[  108.462374][ T7912] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.503904][ T7912] veth0_vlan: entered promiscuous mode
[  108.514019][ T7912] veth1_vlan: entered promiscuous mode
[  108.549892][ T7912] veth0_macvtap: entered promiscuous mode
[  108.555584][ T7912] veth1_macvtap: entered promiscuous mode
[  108.569843][ T7912] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.581307][ T7912] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.592312][ T7912] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.597803][ T7912] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.601283][ T7912] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.604761][ T7912] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.682855][ T2177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.689915][ T2177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.698314][ T7980] veth0: left promiscuous mode
[  108.730299][ T2177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.733371][ T2177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.831274][ T8032] netem: incorrect ge model size
[  108.833568][ T8032] netem: change failed
[  108.840081][ T8033] netem: incorrect ge model size
[  108.846249][ T8033] netem: change failed
[  108.855716][ T5222] Bluetooth: hci3: command tx timeout
[  108.941155][ T8043] netlink: 'syz.2.699': attribute type 8 has an invalid length.
[  109.176945][ T8058] bridge_slave_0: left allmulticast mode
[  109.179349][ T8058] bridge_slave_0: left promiscuous mode
[  109.184050][ T8058] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.192291][ T8058] bridge_slave_1: left allmulticast mode
[  109.194597][ T8058] bridge_slave_1: left promiscuous mode
[  109.201171][   T10] syz_tun: tun_net_xmit 110
[  109.204016][ T8058] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.214425][ T8058] bond0: (slave bond_slave_0): Releasing backup interface
[  109.227672][ T8058] bond0: (slave bond_slave_1): Releasing backup interface
[  109.241885][ T8058] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  109.247818][ T8058] batman_adv: batadv0: Removing interface: batadv_slave_0
[  109.265978][ T8058] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  109.269567][ T8058] batman_adv: batadv0: Removing interface: batadv_slave_1
[  109.284425][ T8058] bond3: (slave bridge2): Releasing backup interface
[  109.287764][ T8058] bridge2: left promiscuous mode
[  109.532273][ T8073] __nla_validate_parse: 1 callbacks suppressed
[  109.532292][ T8073] netlink: 14 bytes leftover after parsing attributes in process `syz.0.708'.
[  109.675875][ T8073] bond0 (unregistering): Released all slaves
[  109.769226][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.709'.
[  109.776989][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.709'.
[  109.895606][   T10] syz_tun: tun_net_xmit 110
[  109.899368][ T8083] x_tables: duplicate underflow at hook 1
[  110.371578][ T8126] netlink: 16 bytes leftover after parsing attributes in process `syz.0.727'.
[  110.626643][ T8147] netlink: 20 bytes leftover after parsing attributes in process `syz.0.732'.
[  110.781954][ T8159] sctp: [Deprecated]: syz.2.738 (pid 8159) Use of int in maxseg socket option.
[  110.781954][ T8159] Use struct sctp_assoc_value instead
[  110.814052][ T8159] bond1: entered promiscuous mode
[  110.823451][ T8159] bond1: entered allmulticast mode
[  110.831355][ T8159] 8021q: adding VLAN 0 to HW filter on device bond1
[  110.834798][ T8163] netlink: 304 bytes leftover after parsing attributes in process `syz.0.739'.
[  110.871110][ T8165] netlink: 424 bytes leftover after parsing attributes in process `syz.3.740'.
[  110.936869][ T5222] Bluetooth: hci3: command tx timeout
[  110.939492][ T8170] netlink: 'syz.2.743': attribute type 15 has an invalid length.
[  110.978918][ T8177] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.745'.
[  111.108010][ T8185] netlink: 'syz.0.750': attribute type 8 has an invalid length.
[  111.227850][ T8194] syzkaller0: entered promiscuous mode
[  111.230198][ T8194] syzkaller0: entered allmulticast mode
[  111.320413][ T8208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.757'.
[  112.600133][ T8223] tipc: Can't bind to reserved service type 2
[  112.699452][ T8238] netlink: 42 bytes leftover after parsing attributes in process `syz.3.766'.
[  112.892222][ T8254] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  113.017990][ T5222] Bluetooth: hci3: command tx timeout
[  113.480596][ T8280] netpci0: tun_chr_ioctl cmd 1074025681
[  113.545450][ T8285] IPVS: set_ctl: invalid protocol: 30985 224.0.0.2:20003
[  113.658464][ T8289] netlink: 'syz.0.783': attribute type 2 has an invalid length.
[  113.760208][ T8297] sctp: [Deprecated]: syz.0.786 (pid 8297) Use of int in maxseg socket option.
[  113.760208][ T8297] Use struct sctp_assoc_value instead
[  113.987387][ T8313] netlink: 'syz.0.792': attribute type 1 has an invalid length.
[  114.010598][ T8313] 8021q: adding VLAN 0 to HW filter on device bond4
[  114.022464][ T8313] erspan0: entered allmulticast mode
[  114.248296][ T8332] netlink: 'syz.3.796': attribute type 1 has an invalid length.
[  114.847742][ T8358] __nla_validate_parse: 3 callbacks suppressed
[  114.847753][ T8358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.806'.
[  114.853450][ T8362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.806'.
[  115.031976][ T8382] netlink: 'syz.3.808': attribute type 6 has an invalid length.
[  115.039030][ T8382] netlink: 'syz.3.808': attribute type 7 has an invalid length.
[  115.042063][ T8382] netlink: 'syz.3.808': attribute type 8 has an invalid length.
[  115.051343][ T8382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.808'.
[  115.054748][ T8382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.808'.
[  115.071886][ T8382] xt_hashlimit: size too large, truncated to 1048576
[  115.096114][ T5222] Bluetooth: hci3: command tx timeout
[  115.173019][ T8376] netlink: 'syz.3.808': attribute type 7 has an invalid length.
[  115.222896][ T8395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.814'.
[  115.262995][ T8399] netlink: 'syz.2.815': attribute type 2 has an invalid length.
[  115.359091][    T9] IPVS: starting estimator thread 0...
[  115.469979][ T8403] IPVS: using max 62 ests per chain, 148800 per kthread
[  116.362537][ T8424] netlink: 32 bytes leftover after parsing attributes in process `syz.0.821'.
[  116.456384][ T8438] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.552160][ T8442] netlink: 88 bytes leftover after parsing attributes in process `syz.3.827'.
[  116.640395][ T8448] netlink: 136 bytes leftover after parsing attributes in process `syz.0.829'.
[  116.647353][ T8448] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check.
[  116.811115][ T8455] netlink: 'syz.3.832': attribute type 2 has an invalid length.
[  117.102029][ T8474] Driver unsupported XDP return value 0 on prog  (id 418) dev N/A, expect packet loss!
[  117.293493][ T8483] netlink: 48 bytes leftover after parsing attributes in process `syz.2.840'.
[  117.364296][ T8487] netlink: 52 bytes leftover after parsing attributes in process `syz.3.842'.
[  117.485536][ T8495] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  117.488522][ T8495] batman_adv: batadv0: Removing interface: batadv_slave_0
[  117.493058][ T8495] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  117.496759][ T8495] batman_adv: batadv0: Removing interface: batadv_slave_1
[  117.661881][ T8502] veth0_to_batadv: entered promiscuous mode
[  117.671123][ T8501] veth0_to_batadv: left promiscuous mode
[  118.658109][ T8525] set match dimension is over the limit!
[  118.899649][ T8534] netlink: 'syz.2.860': attribute type 2 has an invalid length.
[  119.364494][ T8555] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  119.504802][ T8562] netlink: 'syz.0.865': attribute type 10 has an invalid length.
[  119.539317][ T8564] netlink: 'syz.3.867': attribute type 2 has an invalid length.
[  120.159404][ T8600] __nla_validate_parse: 10 callbacks suppressed
[  120.159422][ T8600] netlink: 40 bytes leftover after parsing attributes in process `syz.3.874'.
[  120.165016][ T8600] netlink: 60 bytes leftover after parsing attributes in process `syz.3.874'.
[  120.331836][ T8608] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  120.484806][ T8617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.880'.
[  120.589486][ T8620] No such timeout policy "syz1"
[  120.611145][ T8620] _Z`Ԁ@: entered promiscuous mode
[  121.006247][ T8639] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  121.066983][ T8643] netlink: 24 bytes leftover after parsing attributes in process `syz.2.888'.
[  121.341713][ T8654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.893'.
[  121.358478][ T8655] netlink: 16 bytes leftover after parsing attributes in process `syz.3.894'.
[  121.377362][ T8665] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  122.621506][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.907'.
[  122.899841][ T8715] netlink: 'syz.3.913': attribute type 16 has an invalid length.
[  122.904506][ T8715] netlink: 'syz.3.913': attribute type 3 has an invalid length.
[  122.911057][ T8715] netlink: 64066 bytes leftover after parsing attributes in process `syz.3.913'.
[  122.918907][ T8717] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.922965][ T8717] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.932661][ T8712] netlink: 720 bytes leftover after parsing attributes in process `syz.0.914'.
[  122.951695][ T8712] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (5001287)
[  122.959045][ T8712] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[  123.010384][ T8720] bridge0: entered promiscuous mode
[  123.018352][ T8720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.915'.
[  123.302734][ T8738] xt_TCPMSS: Only works on TCP SYN packets
[  123.376742][ T8746] netlink: 'syz.0.919': attribute type 2 has an invalid length.
[  123.463290][ T8753] syz_tun: tun_net_xmit 86
[  123.477916][ T8753] netlink: 'syz.0.922': attribute type 1 has an invalid length.
[  123.542202][ T8753] 8021q: adding VLAN 0 to HW filter on device bond5
[  123.616631][ T8753] veth3: entered promiscuous mode
[  123.894089][ T8784] netlink: zone id is out of range
[  123.908724][ T8784] netlink: zone id is out of range
[  123.925282][ T8784] netlink: zone id is out of range
[  123.927608][ T8784] netlink: zone id is out of range
[  123.929748][ T8784] netlink: zone id is out of range
[  123.945539][ T8784] netlink: zone id is out of range
[  123.947767][ T8784] netlink: zone id is out of range
[  123.950038][ T8784] netlink: zone id is out of range
[  123.972220][ T8784] netlink: zone id is out of range
[  123.994740][ T8789] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.173695][ T8796] tipc: Started in network mode
[  124.184555][ T8796] tipc: Node identity 3a61e14967c8, cluster identity 4711
[  124.188044][ T8796] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  124.190748][ T8796] syzkaller0: entered promiscuous mode
[  124.192479][ T8796] syzkaller0: entered allmulticast mode
[  124.219652][ T8796] tipc: Resetting bearer <eth:syzkaller0>
[  124.227338][ T8795] tipc: Resetting bearer <eth:syzkaller0>
[  124.246632][ T8795] tipc: Disabling bearer <eth:syzkaller0>
[  124.535053][    C0] syz_tun: tun_net_xmit 86
[  124.712375][ T8838] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32)
[  125.197532][ T8882] __nla_validate_parse: 6 callbacks suppressed
[  125.197553][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.951'.
[  125.203810][ T8882] netlink: 24 bytes leftover after parsing attributes in process `syz.2.951'.
[  125.248594][ T8881] netlink: 'syz.3.952': attribute type 1 has an invalid length.
[  125.306886][ T8884] netlink: 28 bytes leftover after parsing attributes in process `syz.3.952'.
[  125.454156][ T8897] xt_connbytes: Forcing CT accounting to be enabled
[  125.458196][ T8897] Cannot find set identified by id 0 to match
[  125.463277][ T8897] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  125.575183][    C0] syz_tun: tun_net_xmit 86
[  125.609271][ T8908] netlink: 36 bytes leftover after parsing attributes in process `syz.0.961'.
[  125.838201][ T8922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.967'.
[  126.050616][ T8934] netlink: 'syz.3.969': attribute type 1 has an invalid length.
[  126.078358][ T8934] 8021q: adding VLAN 0 to HW filter on device bond1
[  126.092786][ T8935] veth3: entered promiscuous mode
[  126.097733][ T8935] bond1: (slave veth3): Enslaving as an active interface with a down link
[  126.110276][ T8934] veth5: entered promiscuous mode
[  126.114362][ T8934] bond1: (slave veth5): Enslaving as an active interface with a down link
[  126.118668][ T8935] erspan0: entered allmulticast mode
[  126.132479][ T8935] bond1: (slave erspan0): making interface the new active one
[  126.137452][ T8935] erspan0: entered promiscuous mode
[  126.139310][ T8935] bond1: (slave erspan0): Enslaving as an active interface with an up link
[  126.190437][ T8940] netlink: 244 bytes leftover after parsing attributes in process `syz.3.970'.
[  126.328524][ T8947] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  126.334359][ T8947] vlan0: entered promiscuous mode
[  126.408596][ T8949] netlink: 32 bytes leftover after parsing attributes in process `syz.3.973'.
[  126.638573][ T8962] netlink: 60 bytes leftover after parsing attributes in process `syz.0.978'.
[  126.727087][ T8967] netlink: 40 bytes leftover after parsing attributes in process `syz.0.980'.
[  126.730350][ T8967] netlink: 40 bytes leftover after parsing attributes in process `syz.0.980'.
[  126.790631][ T8969] netlink: 'syz.3.981': attribute type 21 has an invalid length.
[  126.800462][    C1] Unknown status report in ack skb
[  126.830278][ T8972] delete_channel: no stack
[  126.843629][ T8972] sctp: [Deprecated]: syz.2.982 (pid 8972) Use of struct sctp_assoc_value in delayed_ack socket option.
[  126.843629][ T8972] Use struct sctp_sack_info instead
[  126.919496][ T8971] delete_channel: no stack
[  128.971418][ T9057] No such timeout policy "syz1"
[  128.995075][ T9057] netlink: 'syz.3.1005': attribute type 21 has an invalid length.
[  129.002186][ T9057] netlink: 'syz.3.1005': attribute type 5 has an invalid length.
[  129.508018][ T9072] x_tables: duplicate underflow at hook 2
[  129.511039][ T9073] x_tables: duplicate underflow at hook 2
[  130.272783][ T9089] __nla_validate_parse: 13 callbacks suppressed
[  130.272796][ T9089] netlink: 42 bytes leftover after parsing attributes in process `syz.3.1015'.
[  130.287833][ T9091] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  130.306792][ T9091] net_ratelimit: 5 callbacks suppressed
[  130.306832][ T9091] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  130.642273][ T9113] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1020'.
[  130.647307][ T9113] block nbd0: Unsupported socket: shutdown callout must be supported.
[  131.128410][ T9131] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1024'.
[  131.373258][ T9145] netlink: 'syz.3.1029': attribute type 2 has an invalid length.
[  131.377300][ T9143] xt_TCPMSS: Only works on TCP SYN packets
[  131.600349][ T9170] netlink: 'syz.3.1037': attribute type 2 has an invalid length.
[  131.626382][ T9170] : entered promiscuous mode
[  131.628247][ T9170] netlink: 'syz.3.1037': attribute type 2 has an invalid length.
[  131.650745][ T9170] netlink: 'syz.3.1037': attribute type 2 has an invalid length.
[  131.731727][ T9182] netlink: 'syz.0.1039': attribute type 2 has an invalid length.
[  132.099145][ T9192] openvswitch: netlink: IPv4 tun info is not correct
[  132.102468][ T9193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1043'.
[  132.208921][ T9200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1044'.
[  132.218020][ T9200] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1044'.
[  132.334537][ T9208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1047'.
[  132.388450][ T9211] tipc: Invalid UDP bearer configuration
[  132.388493][ T9211] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  132.505436][ T9219] IPv6: NLM_F_CREATE should be specified when creating new route
[  132.534687][ T9221] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1052'.
[  132.542106][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  132.542566][ T9221] netlink: 'syz.3.1052': attribute type 21 has an invalid length.
[  132.549109][ T9221] netlink: 'syz.3.1052': attribute type 22 has an invalid length.
[  132.551981][ T9221] netlink: 'syz.3.1052': attribute type 23 has an invalid length.
[  132.554479][ T9221] netlink: 'syz.3.1052': attribute type 25 has an invalid length.
[  132.557972][ T9221] netlink: 'syz.3.1052': attribute type 26 has an invalid length.
[  132.560658][ T9221] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1052'.
[  132.603798][ T9226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1053'.
[  132.948289][ T9251] IPVS: Scheduler module ip_vs_ not found
[  132.954518][ T9242] mac80211_hwsim hwsim4 ": renamed from wlan0
[  133.346818][ T9295] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  133.678357][ T9321] syzkaller1: entered promiscuous mode
[  133.680165][ T9321] syzkaller1: entered allmulticast mode
[  134.104529][ T9330] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.109118][ T9330] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.112403][ T9330] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.117333][ T9330] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  134.318947][ T9354] vlan0: entered promiscuous mode
[  134.320965][ T9354] bridge0: entered promiscuous mode
[  134.335149][ T9354] vlan0: entered allmulticast mode
[  134.337205][ T9354] bridge0: entered allmulticast mode
[  134.496152][  T790] syz_tun: tun_net_xmit 90
[  134.536912][   T10] syz_tun: tun_net_xmit 90
[  134.660723][ T2335] IPVS: starting estimator thread 0...
[  134.765062][ T9395] IPVS: using max 40 ests per chain, 96000 per kthread
[  134.958824][ T9417] 8021q: adding VLAN 0 to HW filter on device bond2
[  134.976817][ T9417] bond2: (slave veth7): Enslaving as an active interface with a down link
[  134.987646][ T9335] IPVS: stop unused estimator thread 0...
[  134.996007][ T9417] vlan2: entered allmulticast mode
[  134.998016][ T9417] bond2: entered allmulticast mode
[  135.001434][ T9417] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  135.275275][ T9434] __nla_validate_parse: 15 callbacks suppressed
[  135.275290][ T9434] netlink: 42 bytes leftover after parsing attributes in process `syz.2.1112'.
[  135.345288][    T9] syz_tun: tun_net_xmit 90
[  135.470999][ T9448] netlink: 492 bytes leftover after parsing attributes in process `syz.0.1117'.
[  135.521920][ T9451] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  135.536856][ T9451] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  136.348512][ T9451] syz.0.1118 (9451) used greatest stack depth: 19192 bytes left
[  136.376463][ T9461] validate_nla: 7 callbacks suppressed
[  136.376479][ T9461] netlink: 'syz.0.1121': attribute type 8 has an invalid length.
[  136.515297][ T9472] syzkaller1: entered promiscuous mode
[  136.517239][ T9472] syzkaller1: entered allmulticast mode
[  136.871341][ T9487] netlink: 'syz.3.1127': attribute type 13 has an invalid length.
[  136.875345][ T9487] netlink: 'syz.3.1127': attribute type 17 has an invalid length.
[  136.912704][ T9487] erspan0: left allmulticast mode
[  136.970152][ T9487] bridge0: left promiscuous mode
[  136.978897][ T9487] 8021q: adding VLAN 0 to HW filter on device bond0
[  136.985778][ T9487] 8021q: adding VLAN 0 to HW filter on device team0
[  136.993062][ T9487] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  137.033097][ T9495] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1131'.
[  137.169362][ T9487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.197712][ T9504] netlink: 'syz.2.1135': attribute type 1 has an invalid length.
[  137.200335][ T9504] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1135'.
[  137.236568][ T9508] netlink: 'syz.2.1137': attribute type 18 has an invalid length.
[  137.246784][ T9508] netlink: 'syz.2.1137': attribute type 18 has an invalid length.
[  137.260279][ T9489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.271201][ T9512] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1138'.
[  137.279018][ T9515] netlink: 'syz.2.1139': attribute type 8 has an invalid length.
[  137.310529][ T9518] netlink: 'syz.0.1140': attribute type 2 has an invalid length.
[  137.313194][ T9519] netlink: 'syz.2.1141': attribute type 1 has an invalid length.
[  137.358637][ T9519] 8021q: adding VLAN 0 to HW filter on device bond2
[  137.591216][ T9545] netlink: 'syz.0.1147': attribute type 8 has an invalid length.
[  137.656890][ T9553] netlink: 42 bytes leftover after parsing attributes in process `syz.0.1149'.
[  137.812870][ T9561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1151'.
[  137.968543][ T9569] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1153'.
[  137.973329][ T9569] tipc: Enabling of bearer <et:g> rejected, media not registered
[  138.049873][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1155'.
[  138.127624][ T9575] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1155'.
[  138.376016][ T9587] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  138.736197][ T9614] openvswitch: netlink: IP tunnel dst address not specified
[  139.805076][ T9702] nbd: must specify at least one socket
[  140.383396][ T9727] x_tables: duplicate underflow at hook 1
[  140.670924][ T9731] netlink: 'syz.3.1203': attribute type 11 has an invalid length.
[  140.673578][ T9731] __nla_validate_parse: 10 callbacks suppressed
[  140.673587][ T9731] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1203'.
[  140.806523][ T9734] x_tables: duplicate underflow at hook 1
[  140.886392][ T9741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1206'.
[  140.932434][ T9745] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.1208'.
[  141.076193][ T9751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1210'.
[  141.079860][ T9751] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1210'.
[  141.086569][ T9751] gtp0: entered promiscuous mode
[  141.088277][ T9751] gtp0: entered allmulticast mode
[  141.138844][ T9756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1211'.
[  141.142305][ T9756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1211'.
[  141.148397][ T9756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1211'.
[  141.291081][ T9764] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1215'.
[  141.390593][ T9764] validate_nla: 202 callbacks suppressed
[  141.390643][ T9764] netlink: 'syz.0.1215': attribute type 1 has an invalid length.
[  141.401759][ T9764] netlink: 'syz.0.1215': attribute type 2 has an invalid length.
[  141.406193][ T9764] netlink: 'syz.0.1215': attribute type 1 has an invalid length.
[  141.409108][ T9764] netlink: 'syz.0.1215': attribute type 2 has an invalid length.
[  141.418303][ T9764] netlink: 'syz.0.1215': attribute type 1 has an invalid length.
[  141.421306][ T9764] netlink: 'syz.0.1215': attribute type 2 has an invalid length.
[  141.512336][ T9784] ipt_ECN: cannot use operation on non-tcp rule
[  141.512863][ T9786] netlink: 'syz.2.1222': attribute type 2 has an invalid length.
[  141.712371][ T9807] ip6gretap0: entered promiscuous mode
[  141.716623][ T9807] ip6gretap0: left promiscuous mode
[  141.816181][ T5842] Bluetooth: hci3: command 0x0405 tx timeout
[  141.823851][ T9816] netlink: 'syz.2.1231': attribute type 2 has an invalid length.
[  141.853116][ T9820] netlink: 'syz.2.1233': attribute type 1 has an invalid length.
[  141.871193][ T9820] 8021q: adding VLAN 0 to HW filter on device bond4
[  141.886886][ T9822] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1230'.
[  141.891036][ T9820] 8021q: adding VLAN 0 to HW filter on device bond4
[  141.891094][ T9822] netlink: 'syz.0.1230': attribute type 7 has an invalid length.
[  141.893769][ T9820] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  141.901480][ T9820] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  141.936868][ T9826] gretap2: entered promiscuous mode
[  141.940248][ T9826] bond4: (slave gretap2): making interface the new active one
[  141.943873][ T9826] bond4: (slave gretap2): Enslaving as an active interface with an up link
[  142.168230][ T9844] tap0: tun_chr_ioctl cmd 1074025673
[  142.170276][ T9843] tap0: tun_chr_ioctl cmd 1074025677
[  142.172132][ T9843] tap0: linktype set to 0
[  142.258815][ T9849] bridge: RTM_NEWNEIGH with invalid ether address
[  142.649309][ T9863] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  142.694488][ T9865] syzkaller1: entered promiscuous mode
[  142.704951][ T9865] syzkaller1: entered allmulticast mode
[  143.551019][ T9913] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 60554 - 0
[  143.554065][ T9913] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 60554 - 0
[  143.558049][ T9913] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 60554 - 0
[  143.561274][ T9913] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 60554 - 0
[  143.564645][ T9913] geneve2: entered promiscuous mode
[  143.566371][ T9913] geneve2: entered allmulticast mode
[  143.627625][  T789] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  143.645483][ T9915] pim6reg1: entered promiscuous mode
[  143.647588][ T9915] pim6reg1: entered allmulticast mode
[  145.451271][ T9989] nbd: couldn't find a device at index 65546
[  145.607178][T10001] 8021q: adding VLAN 0 to HW filter on device bond6
[  145.616462][ T9997] bond5: (slave vti1): The slave device specified does not support setting the MAC address
[  145.620756][ T9997] bond5: (slave vti1): Setting fail_over_mac to active for active-backup mode
[  145.634221][ T9997] bond5: (slave vti1): making interface the new active one
[  145.639444][ T9997] bond5: (slave vti1): Enslaving as an active interface with an up link
[  146.071936][T10041] __nla_validate_parse: 11 callbacks suppressed
[  146.071953][T10041] netlink: 1172 bytes leftover after parsing attributes in process `syz.0.1306'.
[  146.082920][T10041] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1306'.
[  146.234641][T10049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1309'.
[  146.238927][T10049] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1309'.
[  146.299994][T10052] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1310'.
[  146.543446][T10063] netlink: 201916 bytes leftover after parsing attributes in process `syz.0.1314'.
[  146.600996][T10069] validate_nla: 19 callbacks suppressed
[  146.601012][T10069] netlink: 'syz.0.1317': attribute type 2 has an invalid length.
[  146.636561][T10071] netlink: 42 bytes leftover after parsing attributes in process `syz.3.1318'.
[  146.918524][T10088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1323'.
[  146.923693][T10090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1323'.
[  146.982346][T10095] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2
[  146.987169][T10095] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0
[  147.129649][T10106] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1328'.
[  147.960514][T10127] netlink: 'syz.3.1335': attribute type 39 has an invalid length.
[  148.092523][T10135] netlink: 'syz.2.1337': attribute type 5 has an invalid length.
[  149.118166][T10157] netlink: 'syz.0.1345': attribute type 8 has an invalid length.
[  149.182540][T10161] netlink: 'syz.0.1346': attribute type 11 has an invalid length.
[  149.205668][T10163] netlink: 'syz.3.1348': attribute type 2 has an invalid length.
[  149.310524][T10172] netlink: 'syz.0.1352': attribute type 8 has an invalid length.
[  149.365087][T10174] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  149.486863][T10178] : entered promiscuous mode
[  149.501171][ T2177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.504494][ T2177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.542922][T10180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  149.546643][T10185] netlink: 'syz.0.1357': attribute type 2 has an invalid length.
[  149.582644][T10187] tipc: Started in network mode
[  149.584621][T10187] tipc: Node identity 36cab83d22f6, cluster identity 4711
[  149.587632][T10187] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.590836][T10187] syzkaller0: entered promiscuous mode
[  149.593051][T10187] syzkaller0: entered allmulticast mode
[  149.739901][T10194] tipc: Resetting bearer <eth:syzkaller0>
[  149.789536][T10204] netlink: 'syz.0.1361': attribute type 8 has an invalid length.
[  150.397853][T10186] tipc: Resetting bearer <eth:syzkaller0>
[  150.409103][T10186] tipc: Disabling bearer <eth:syzkaller0>
[  150.553543][T10235] veth0_to_team: entered promiscuous mode
[  150.557293][T10235] veth0_to_team: entered allmulticast mode
[  150.749077][T10252] netlink: 'syz.3.1371': attribute type 8 has an invalid length.
[  151.574983][ T2177] wlan1: Trigger new scan to find an IBSS to join
[  151.714209][T10296] __nla_validate_parse: 10 callbacks suppressed
[  151.714220][T10296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1384'.
[  151.770243][T10297] netlink: 'syz.0.1384': attribute type 32 has an invalid length.
[  151.825542][T10306] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1386'.
[  151.993005][T10321] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0
[  151.997783][T10321] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0
[  152.001056][T10321] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0
[  152.004483][T10321] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0
[  152.017044][T10323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1393'.
[  152.022003][T10323] : renamed from bond_slave_0
[  152.078925][ T5842] Bluetooth: hci3: link tx timeout
[  152.081706][ T5842] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[  152.083332][T10335] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1396'.
[  152.090874][T10335] vlan0: left allmulticast mode
[  152.092508][T10335] bridge0: left allmulticast mode
[  152.304266][T10344] veth0_to_hsr: entered allmulticast mode
[  152.512012][T10358] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1403'.
[  152.937061][T10373] raw_sendmsg: syz.0.1407 forgot to set AF_INET. Fix it!
[  153.077740][T10386] veth1_to_bond: entered allmulticast mode
[  153.081296][T10386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1412'.
[  153.110471][T10386] bond0: (slave bond_slave_1): Releasing backup interface
[  153.113356][T10386] bond_slave_1 (unregistering): left allmulticast mode
[  153.135867][T10386] veth1_to_bond (unregistering): left allmulticast mode
[  153.435113][T10412] No such timeout policy "syz1"
[  153.549453][T10425] batadv_slave_1: entered promiscuous mode
[  153.557800][T10424] batadv_slave_1: left promiscuous mode
[  153.718334][T10442] tipc: Trying to set illegal importance in message
[  153.893918][T10453] batman_adv: batadv0: Adding interface: dummy0
[  153.897714][T10453] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.908422][T10453] batman_adv: batadv0: Interface activated: dummy0
[  154.008981][T10458] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1433'.
[  154.013436][T10458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1433'.
[  154.058669][T10462] netlink: 'syz.0.1435': attribute type 32 has an invalid length.
[  154.065311][T10462] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1435'.
[  154.084064][T10466] netlink: 320 bytes leftover after parsing attributes in process `syz.2.1436'.
[  154.135748][ T5222] Bluetooth: hci3: command 0x0405 tx timeout
[  154.146024][T10475] netlink: 'syz.2.1438': attribute type 2 has an invalid length.
[  154.176351][T10477] netlink: 'syz.3.1439': attribute type 14 has an invalid length.
[  154.181920][T10477] netlink: 'syz.3.1439': attribute type 14 has an invalid length.
[  154.270646][T10485] netlink: 'syz.2.1440': attribute type 5 has an invalid length.
[  154.459553][T10503] netlink: 'syz.3.1447': attribute type 2 has an invalid length.
[  154.615359][ T2177] wlan1: Trigger new scan to find an IBSS to join
[  154.994074][T10536] netlink: 'syz.0.1458': attribute type 5 has an invalid length.
[  155.958970][T10565] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  155.963873][T10567] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  156.278185][T10584] netlink: 'syz.2.1473': attribute type 7 has an invalid length.
[  156.281152][T10584] netlink: 'syz.2.1473': attribute type 8 has an invalid length.
[  157.412285][T10616] validate_nla: 2 callbacks suppressed
[  157.412298][T10616] netlink: 'syz.3.1484': attribute type 5 has an invalid length.
[  157.502323][T10620] __nla_validate_parse: 15 callbacks suppressed
[  157.502340][T10620] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1486'.
[  157.575119][ T2177] wlan1: Trigger new scan to find an IBSS to join
[  157.579080][T10630] netlink: 42 bytes leftover after parsing attributes in process `syz.3.1489'.
[  157.623205][T10632] netlink: 'syz.0.1490': attribute type 8 has an invalid length.
[  157.680899][T10638] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1492'.
[  157.684557][T10638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1492'.
[  157.694262][T10640] netlink: 'syz.2.1493': attribute type 5 has an invalid length.
[  157.729765][T10642] netlink: 'syz.0.1494': attribute type 3 has an invalid length.
[  157.739775][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1495'.
[  157.827487][T10648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1497'.
[  157.991478][T10651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1498'.
[  158.217793][T10655] netlink: 'syz.0.1499': attribute type 8 has an invalid length.
[  158.283910][T10659] netlink: 'syz.0.1501': attribute type 5 has an invalid length.
[  158.321845][T10661] netlink: 'syz.0.1502': attribute type 5 has an invalid length.
[  158.359961][T10663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1503'.
[  158.455308][ T4443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.531356][T10672] bridge2: the hash_elasticity option has been deprecated and is always 16
[  158.534087][T10672] bridge2: entered allmulticast mode
[  158.900779][T10685] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1509'.
[  158.908168][T10685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1509'.
[  159.214767][T10689] openvswitch: netlink: Flow key attr not present in new flow.
[  159.222237][T10689] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component
[  160.307761][T10722] gretap0: entered promiscuous mode
[  160.311731][T10722] gretap0: left promiscuous mode
[  160.548039][T10742] netlink: 'syz.2.1532': attribute type 8 has an invalid length.
[  161.500414][T10812] xt_hashlimit: max too large, truncated to 1048576
[  161.590205][T10820] netlink: 'syz.0.1553': attribute type 5 has an invalid length.
[  161.600148][T10820] netlink: 'syz.0.1553': attribute type 2 has an invalid length.
[  162.649018][T10890] __nla_validate_parse: 18 callbacks suppressed
[  162.649035][T10890] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1577'.
[  162.966126][T10907] netlink: 42 bytes leftover after parsing attributes in process `syz.0.1583'.
[  163.498919][T10922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1585'.
[  163.501639][T10922] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1585'.
[  163.848430][T10942] delete_channel: no stack
[  163.916188][T10952] x_tables: duplicate underflow at hook 2
[  163.988839][T10961] netlink: 42 bytes leftover after parsing attributes in process `syz.2.1596'.
[  164.762835][T10975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1600'.
[  164.776774][T10975] bond0 (unregistering): Released all slaves
[  164.937785][T10988] validate_nla: 5 callbacks suppressed
[  164.937805][T10988] netlink: 'syz.0.1603': attribute type 58 has an invalid length.
[  164.944659][T10988] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1603'.
[  165.164407][T10997] netlink: 42 bytes leftover after parsing attributes in process `syz.0.1607'.
[  165.567427][T11002] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1608'.
[  165.751384][T11009] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1610'.
[  166.453607][T11036] netlink: 'syz.2.1620': attribute type 2 has an invalid length.
[  166.512346][T11038] pimreg: entered allmulticast mode
[  166.515923][T11037] pimreg: left allmulticast mode
[  166.535288][ T5842] Bluetooth: hci3: command 0x0405 tx timeout
[  167.039038][T11048] netlink: 'syz.0.1623': attribute type 8 has an invalid length.
[  167.131448][T11063] netlink: 'syz.0.1628': attribute type 2 has an invalid length.
[  167.215738][T11072] netlink: 'syz.0.1629': attribute type 7 has an invalid length.
[  167.237474][T11074] netlink: 'syz.2.1631': attribute type 5 has an invalid length.
[  167.264057][T11077] netlink: 'syz.2.1633': attribute type 8 has an invalid length.
[  167.344189][T11080] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode active-backup(1)
[  167.373849][T11088] netlink: 'syz.2.1637': attribute type 29 has an invalid length.
[  167.511997][T11102] IPv6: NLM_F_CREATE should be specified when creating new route
[  167.526025][T11104] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  167.681514][T11123] __nla_validate_parse: 5 callbacks suppressed
[  167.681524][T11123] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1649'.
[  167.689504][T11123] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1649'.
[  167.691148][T11124] bridge_slave_0: left allmulticast mode
[  167.704608][T11124] bridge_slave_0: left promiscuous mode
[  167.713524][T11124] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.715159][T11123] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1649'.
[  167.719473][T11123] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1649'.
[  167.752388][T11133] netlink: 'syz.3.1650': attribute type 5 has an invalid length.
[  167.762562][T11124] bridge_slave_1: left allmulticast mode
[  167.771583][T11124] bridge_slave_1: left promiscuous mode
[  167.773823][T11124] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.783184][T11124] bond0: (slave bond_slave_0): Releasing backup interface
[  167.787346][T11124] bond_slave_0: left allmulticast mode
[  167.789980][T11124] batman_adv: batadv0: Removing interface: batadv_slave_0
[  167.793814][T11124] batman_adv: batadv0: Removing interface: batadv_slave_1
[  167.801002][T11124] bond4: (slave gretap2): Releasing active interface
[  167.806430][T11124] bond5: (slave vti1): Releasing backup interface
[  167.852608][T11139] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1652'.
[  168.327876][T11162] netlink: 'syz.2.1660': attribute type 5 has an invalid length.
[  168.401687][T11162] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  168.876517][T11184] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  168.881830][T11185] syzkaller0: entered promiscuous mode
[  168.884321][T11185] syzkaller0: entered allmulticast mode
[  168.920260][T11184] tipc: Resetting bearer <eth:syzkaller0>
[  168.931569][T11184] tipc: Disabling bearer <eth:syzkaller0>
[  169.215190][T11197] vlan2: entered promiscuous mode
[  169.217307][T11197] bond0: entered promiscuous mode
[  169.225295][T11197] bond_slave_0: entered promiscuous mode
[  169.227712][T11197] bond_slave_1: entered promiscuous mode
[  169.321560][T11213] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1672'.
[  170.037398][T11223] validate_nla: 3 callbacks suppressed
[  170.037415][T11223] netlink: 'syz.0.1675': attribute type 21 has an invalid length.
[  170.043037][T11223] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1675'.
[  170.083688][T11232] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  170.268336][T11244] syz.2.1679 uses old SIOCAX25GETINFO
[  170.339361][T11251] netlink: 'syz.2.1683': attribute type 5 has an invalid length.
[  170.371215][T11253] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1684'.
[  170.377329][T11253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1684'.
[  170.789164][T11277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1690'.
[  171.289538][T11312] netlink: 'syz.3.1700': attribute type 5 has an invalid length.
[  171.301614][T11312] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0
[  171.306886][T11312] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0
[  171.310161][T11312] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0
[  171.313374][T11312] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0
[  171.322209][T11312] geneve4: entered promiscuous mode
[  171.327612][T11312] geneve4: entered allmulticast mode
[  171.451120][T11324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  171.459274][T11326] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551604)
[  171.463620][T11326] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  171.822783][T11347] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  171.856888][T11347] syzkaller0: entered promiscuous mode
[  171.859165][T11347] syzkaller0: entered allmulticast mode
[  171.861551][T11347] tipc: Resetting bearer <eth:syzkaller0>
[  172.066292][ T1225] tipc: Resetting bearer <eth:syzkaller0>
[  172.074697][T11353] Cannot find add_set index 4 as target
[  172.111944][T11355] netlink: 'syz.2.1712': attribute type 8 has an invalid length.
[  172.501460][T11378] netlink: 'syz.2.1718': attribute type 58 has an invalid length.
[  172.646980][T11346] tipc: Resetting bearer <eth:syzkaller0>
[  172.927140][ T2335] tipc: Node number set to 1571414345
[  173.441028][T11410] __nla_validate_parse: 14 callbacks suppressed
[  173.441039][T11410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1725'.
[  173.751065][T11346] tipc: Disabling bearer <eth:syzkaller0>
[  173.812799][T11413] netlink: 'syz.2.1727': attribute type 5 has an invalid length.
[  173.828676][T11415] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  173.936455][T11419] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  173.940577][T11419] syzkaller0: entered promiscuous mode
[  173.942777][T11419] syzkaller0: entered allmulticast mode
[  173.969235][T11419] tipc: Resetting bearer <eth:syzkaller0>
[  174.000290][T11418] tipc: Resetting bearer <eth:syzkaller0>
[  174.036080][T11418] tipc: Disabling bearer <eth:syzkaller0>
[  174.086070][T11429] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  174.193996][T11438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1732'.
[  174.202660][T11441] netlink: 'syz.3.1734': attribute type 5 has an invalid length.
[  174.540388][ T9335] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  175.134298][T11473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1743'.
[  175.139772][T11476] dummy0: entered allmulticast mode
[  175.142597][T11474] dummy0: left allmulticast mode
[  175.171480][T11471] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1742'.
[  175.233386][T11486] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1747'.
[  175.384743][T11501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1753'.
[  175.508006][T11505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1752'.
[  175.639746][T11513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1756'.
[  175.724722][T11523] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  175.832432][T11528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1760'.
[  175.837855][T11530] netlink: 'syz.0.1761': attribute type 2 has an invalid length.
[  175.918954][T11535] pim6reg1: entered promiscuous mode
[  175.921093][T11535] pim6reg1: entered allmulticast mode
[  175.925344][   T33] audit: type=1804 audit(1752667230.641:4): pid=11535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1763" name="/newroot/586/cgroup.controllers" dev="tmpfs" ino=2991 res=1 errno=0
[  175.934936][   T33] audit: type=1800 audit(1752667230.651:5): pid=11535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1763" name="cgroup.controllers" dev="tmpfs" ino=2991 res=0 errno=0
[  176.244567][T11547] netlink: 'syz.3.1768': attribute type 5 has an invalid length.
[  176.283320][T11549] netlink: 'syz.3.1770': attribute type 2 has an invalid length.
[  176.307633][T11551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1769'.
[  176.313006][T11551] netlink: 'syz.2.1769': attribute type 1 has an invalid length.
[  176.744147][T11574] netlink: 'syz.3.1777': attribute type 8 has an invalid length.
[  177.119712][T11592] netlink: 'syz.2.1784': attribute type 8 has an invalid length.
[  177.270223][T11615] netlink: 'syz.2.1792': attribute type 8 has an invalid length.
[  177.523049][T11641] netlink: 'syz.2.1802': attribute type 8 has an invalid length.
[  177.562902][T11639] veth0: entered promiscuous mode
[  177.581121][T11639] veth0 (unregistering): left promiscuous mode
[  178.117624][T11652] netlink: 'syz.0.1806': attribute type 1 has an invalid length.
[  178.571355][T11672] __nla_validate_parse: 12 callbacks suppressed
[  178.571371][T11672] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1812'.
[  179.499745][T11693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1818'.
[  179.524312][T11693] 8021q: adding VLAN 0 to HW filter on device bond3
[  179.693770][T11707] netlink: 'syz.3.1821': attribute type 2 has an invalid length.
[  179.837692][T11718] xt_socket: unknown flags 0xd0
[  179.985610][T11732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1828'.
[  180.052380][T11741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1831'.
[  180.061704][T11741] sctp: [Deprecated]: syz.3.1831 (pid 11741) Use of int in max_burst socket option.
[  180.061704][T11741] Use struct sctp_assoc_value instead
[  180.581756][T11778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1842'.
[  180.592569][T11780] IPVS: set_ctl: invalid protocol: 372 172.20.20.187:20003
[  180.636720][T11784] netlink: 42 bytes leftover after parsing attributes in process `syz.0.1844'.
[  180.850106][T11798] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.897471][T11800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1849'.
[  180.900220][T11800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1849'.
[  181.076857][T11805] bpq0: entered promiscuous mode
[  181.078631][T11805] bpq0: entered allmulticast mode
[  181.374759][T11835] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1859'.
[  181.388867][T11836] pim6reg: entered allmulticast mode
[  181.503381][T11843] validate_nla: 2 callbacks suppressed
[  181.503391][T11843] netlink: 'syz.2.1862': attribute type 12 has an invalid length.
[  181.671026][T11843] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1862'.
[  181.901621][T11872] netlink: 'syz.0.1871': attribute type 8 has an invalid length.
[  182.156801][T11885] netlink: 'syz.0.1876': attribute type 39 has an invalid length.
[  182.436858][T11894] batman_adv: batadv0: Interface deactivated: dummy0
[  182.440321][T11894] batman_adv: batadv0: Removing interface: dummy0
[  182.676200][T11912] netlink: 'syz.2.1885': attribute type 5 has an invalid length.
[  182.718753][T11916] netlink: 'syz.3.1887': attribute type 64 has an invalid length.
[  182.844197][T11925] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  182.982898][T11933] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.987606][T11932] syzkaller0: entered promiscuous mode
[  182.989914][T11932] syzkaller0: entered allmulticast mode
[  183.072377][T11938] tipc: Resetting bearer <eth:syzkaller0>
[  183.098143][T11938] tipc: Disabling bearer <eth:syzkaller0>
[  183.330872][T11950] netlink: 'syz.2.1896': attribute type 1 has an invalid length.
[  183.608406][T11963] netlink: 'syz.0.1901': attribute type 2 has an invalid length.
[  183.648779][T11967] netlink: 'syz.2.1903': attribute type 5 has an invalid length.
[  184.125770][T12003] netlink: 'syz.2.1912': attribute type 5 has an invalid length.
[  184.203937][T12009] __nla_validate_parse: 7 callbacks suppressed
[  184.203950][T12009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1913'.
[  184.286175][T12024] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1918'.
[  184.328476][T12032] nbd: couldn't find device at index 536870912
[  184.346129][T12033] netlink: 'syz.0.1921': attribute type 2 has an invalid length.
[  184.491545][T12043] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1924'.
[  184.619281][T12055] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1929'.
[  184.705918][T12064] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1931'.
[  184.726648][T12065] pim6reg1: entered promiscuous mode
[  184.728285][T12065] pim6reg1: entered allmulticast mode
[  184.836949][T12074] netlink: 3340 bytes leftover after parsing attributes in process `syz.3.1935'.
[  184.913894][T12082] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1936'.
[  185.177308][T12099] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  185.183114][T12099] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  185.189675][T12099] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  185.297958][T12113] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1945'.
[  185.492218][T12126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1950'.
[  185.496533][T12126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1950'.
[  185.817337][ T5835] Bluetooth: hci0: command 0x0406 tx timeout
[  185.819747][ T5835] Bluetooth: hci1: command 0x0406 tx timeout
[  185.875801][T12098] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  185.878805][T12098] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  185.881645][T12098] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  186.120437][T12169] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  186.392031][T12199] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  186.611488][T12209] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  186.616426][T12208] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  186.717337][T12224] syzkaller1: entered promiscuous mode
[  186.720487][T12224] syzkaller1: entered allmulticast mode
[  186.891415][T12239] validate_nla: 9 callbacks suppressed
[  186.891429][T12239] netlink: 'syz.2.1979': attribute type 2 has an invalid length.
[  187.012211][T12251] netlink: 'syz.3.1984': attribute type 5 has an invalid length.
[  187.329914][T12291] netlink: 'syz.3.1995': attribute type 1 has an invalid length.
[  187.490692][T12303] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  187.497693][T12303] netlink: 'syz.3.1999': attribute type 10 has an invalid length.
[  187.501075][T12303] dummy0: entered promiscuous mode
[  187.503614][T12303] bridge0: port 3(dummy0) entered blocking state
[  187.508804][T12303] bridge0: port 3(dummy0) entered disabled state
[  187.511683][T12303] dummy0: entered allmulticast mode
[  187.873101][T12317] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  187.876327][T12317] IPv6: NLM_F_CREATE should be set when creating new route
[  187.879115][T12317] IPv6: NLM_F_CREATE should be set when creating new route
[  187.881335][T12317] IPv6: NLM_F_CREATE should be set when creating new route
[  187.883686][T12318] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  188.348855][T12338] netlink: 'syz.3.2010': attribute type 5 has an invalid length.
[  188.359669][T12337] trusted_key: syz.2.2011 sent an empty control message without MSG_MORE.
[  188.458881][ T5222] Bluetooth: hci3: command 0x0405 tx timeout
[  188.521105][T12345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  188.591930][T12340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  188.603749][T12353] netlink: 'syz.2.2016': attribute type 2 has an invalid length.
[  188.650424][T12340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  188.973303][T12374] netlink: 'syz.2.2023': attribute type 15 has an invalid length.
[  189.024297][T12376] IPVS: Unknown mcast interface: lo
[  189.028649][T12376] nbd: illegal input index -381222912
[  189.283111][T12390] __nla_validate_parse: 35 callbacks suppressed
[  189.283122][T12390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2028'.
[  190.218173][T12414] netlink: 'syz.3.2036': attribute type 11 has an invalid length.
[  190.221965][T12414] netlink: 'syz.3.2036': attribute type 4 has an invalid length.
[  190.227782][T12414] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2036'.
[  190.341038][T12418] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2037'.
[  190.345190][T12419] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2037'.
[  190.405515][T12429] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.560543][T12445] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2046'.
[  190.621034][T12447] netlink: 'syz.3.2047': attribute type 58 has an invalid length.
[  190.623496][T12447] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2047'.
[  190.949960][T12452] 8021q: adding VLAN 0 to HW filter on device bond0
[  191.952414][T12484] sctp: [Deprecated]: syz.2.2058 (pid 12484) Use of struct sctp_assoc_value in delayed_ack socket option.
[  191.952414][T12484] Use struct sctp_sack_info instead
[  192.148348][T12492] netlink: 42 bytes leftover after parsing attributes in process `syz.2.2061'.
[  192.351703][T12495] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2062'.
[  192.677615][T12513] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2065'.
[  192.880829][T12535] ip6gretap1: entered allmulticast mode
[  192.978948][T12540] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  192.989182][T12541] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  192.992644][T12541] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  192.998602][T12540] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  193.001816][T12540] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  193.260507][T12559] netlink: 42 bytes leftover after parsing attributes in process `syz.2.2080'.
[  193.688281][T12582] netlink: 'syz.3.2090': attribute type 5 has an invalid length.
[  193.691614][T12582] netlink: 'syz.3.2090': attribute type 6 has an invalid length.
[  194.133535][T12592] netlink: 'syz.2.2094': attribute type 10 has an invalid length.
[  194.137444][T12592] batman_adv: batadv0: Adding interface: netdevsim0
[  194.139658][T12592] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.148369][T12592] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  194.891097][T12624] netlink: 'syz.3.2102': attribute type 83 has an invalid length.
[  195.156790][T12642] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  195.163588][T12642] syzkaller0: entered promiscuous mode
[  195.167270][T12642] syzkaller0: entered allmulticast mode
[  195.180243][T12642] tipc: Resetting bearer <eth:syzkaller0>
[  195.257992][T12641] tipc: Resetting bearer <eth:syzkaller0>
[  195.286993][T12641] tipc: Disabling bearer <eth:syzkaller0>
[  195.372245][T12659] __nla_validate_parse: 5 callbacks suppressed
[  195.372255][T12659] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2111'.
[  195.385726][T12659] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2111'.
[  195.388527][T12659] netlink: 'syz.2.2111': attribute type 4 has an invalid length.
[  195.665059][T12680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2115'.
[  196.051547][T12703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2122'.
[  196.060592][T12703] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2122'.
[  196.393020][T12730] netlink: 'syz.2.2133': attribute type 5 has an invalid length.
[  196.448907][T12734] IPv6: NLM_F_CREATE should be specified when creating new route
[  196.604295][T12745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2137'.
[  196.713117][T12753] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  196.713214][T12754] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  197.545115][T12774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2144'.
[  197.761822][T12777] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2146'.
[  197.765823][T12777] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2146'.
[  197.790565][T12782] sctp: [Deprecated]: syz.2.2147 (pid 12782) Use of int in maxseg socket option.
[  197.790565][T12782] Use struct sctp_assoc_value instead
[  197.822815][T12788] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2150'.
[  197.837456][T12790] netlink: 'syz.3.2149': attribute type 5 has an invalid length.
[  198.079130][T12805] netlink: 'syz.0.2155': attribute type 10 has an invalid length.
[  199.574347][T12886] netlink: 'syz.0.2168': attribute type 5 has an invalid length.
[  199.813815][T12904] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  199.860091][T12904] syzkaller0: entered promiscuous mode
[  199.862256][T12904] syzkaller0: entered allmulticast mode
[  201.447783][T12951] __nla_validate_parse: 7 callbacks suppressed
[  201.447796][T12951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2184'.
[  201.466961][T12949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2185'.
[  201.470408][T12949] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2185'.
[  201.488143][T12952] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2183'.
[  201.638001][T12945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2183'.
[  201.733160][T12971] netlink: 'syz.2.2189': attribute type 5 has an invalid length.
[  201.866566][T12974] bridge0: port 4(veth0_to_bridge) entered blocking state
[  201.874659][T12974] bridge0: port 4(veth0_to_bridge) entered disabled state
[  201.887563][T12974] veth0_to_bridge: entered allmulticast mode
[  201.899140][T12974] veth0_to_bridge: entered promiscuous mode
[  201.986479][T12991] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  201.994790][T12991] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  201.999302][T12991] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  202.001962][T12991] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  202.118897][T13000] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2198'.
[  202.122473][T13000] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2198'.
[  202.126023][T13000] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2198'.
[  202.226890][T13010] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2199'.
[  202.237528][T13009] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2199'.
[  202.335049][T13017] netlink: 'syz.3.2201': attribute type 7 has an invalid length.
[  202.339655][T13017] netlink: 'syz.3.2201': attribute type 10 has an invalid length.
[  202.446293][T13020] bridge6: entered allmulticast mode
[  202.628432][T13037] openvswitch: netlink: Flow key attr not present in new flow.
[  203.030109][ T5222] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  203.036440][ T5222] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  203.040928][ T5222] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  203.044789][ T5222] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  203.053979][ T5222] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  203.103500][T13058] netlink: 'syz.0.2214': attribute type 2 has an invalid length.
[  203.110552][T13058] netlink: 'syz.0.2214': attribute type 1 has an invalid length.
[  203.326687][T13053] chnl_net:caif_netlink_parms(): no params data found
[  203.416234][T13080] 8021q: adding VLAN 0 to HW filter on device bond0
[  203.442011][T13089] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  203.501197][T13053] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.507963][T13053] bridge0: port 1(bridge_slave_0) entered disabled state
[  203.514645][T13053] bridge_slave_0: entered allmulticast mode
[  203.520286][T13053] bridge_slave_0: entered promiscuous mode
[  203.533756][T13053] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.537174][T13053] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.539532][T13053] bridge_slave_1: entered allmulticast mode
[  203.542919][T13053] bridge_slave_1: entered promiscuous mode
[  203.578015][T13053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  203.593756][T13053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  203.618685][T13053] team0: Port device team_slave_0 added
[  203.622953][T13053] team0: Port device team_slave_1 added
[  203.649365][T13053] batman_adv: batadv0: Adding interface: batadv_slave_0
[  203.651459][T13053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  203.663741][T13053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  203.668912][T13053] batman_adv: batadv0: Adding interface: batadv_slave_1
[  203.671150][T13053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  203.680906][T13053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  203.755857][T13053] hsr_slave_0: entered promiscuous mode
[  203.758327][T13053] hsr_slave_1: entered promiscuous mode
[  203.760608][T13053] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  203.762865][T13053] Cannot create hsr debugfs directory
[  203.940015][T13110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  204.052862][T13053] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.060357][T13107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  204.115061][T13053] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.217209][T13053] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.347304][T13053] batman_adv: batadv0: Removing interface: netdevsim0
[  204.350944][T13053] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.509803][T13053] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  204.517107][T13053] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  204.521818][T13053] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  204.527129][T13053] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  204.589752][T13053] 8021q: adding VLAN 0 to HW filter on device bond0
[  204.606473][T13053] 8021q: adding VLAN 0 to HW filter on device team0
[  204.614072][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.616922][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  204.638663][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.641505][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  204.801679][T13053] 8021q: adding VLAN 0 to HW filter on device batadv0
[  204.844838][T13053] veth0_vlan: entered promiscuous mode
[  204.856854][T13053] veth1_vlan: entered promiscuous mode
[  204.884737][T13053] veth0_macvtap: entered promiscuous mode
[  204.891937][T13053] veth1_macvtap: entered promiscuous mode
[  204.909625][T13053] batman_adv: batadv0: Interface activated: batadv_slave_0
[  204.919825][T13053] batman_adv: batadv0: Interface activated: batadv_slave_1
[  204.927843][T13053] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  204.931243][T13053] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  204.934618][T13053] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  204.939373][T13053] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.021462][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.028183][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.061372][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.064488][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.106293][ T5842] Bluetooth: hci2: command tx timeout
[  205.593143][T13163] netlink: 'syz.0.2242': attribute type 2 has an invalid length.
[  206.567761][T13177] netlink: 'syz.0.2247': attribute type 10 has an invalid length.
[  206.570956][T13177] __nla_validate_parse: 11 callbacks suppressed
[  206.570968][T13177] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2247'.
[  206.585237][T13177] dummy0: entered promiscuous mode
[  206.587585][T13177] dummy0: entered allmulticast mode
[  206.591445][T13177] bridge0: port 1(dummy0) entered blocking state
[  206.594001][T13177] bridge0: port 1(dummy0) entered disabled state
[  206.607913][T13177] bridge0: port 1(dummy0) entered blocking state
[  206.610447][T13177] bridge0: port 1(dummy0) entered forwarding state
[  206.674551][T13181] 8021q: adding VLAN 0 to HW filter on device bond5
[  206.680265][T13181] bond5: entered promiscuous mode
[  206.682974][T13181] bond0: (slave bond5): Enslaving as an active interface with an up link
[  206.805459][T13190] netlink: 'syz.3.2252': attribute type 2 has an invalid length.
[  206.851416][ T5853] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.135086][T13198] block nbd0: server does not support multiple connections per device.
[  207.140077][T13198] block nbd0: shutting down sockets
[  207.145251][T13199] nbd: must specify an index to disconnect
[  207.251042][ T5222] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  207.257167][ T5222] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  207.260704][ T5222] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  207.265454][ T5222] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  207.268464][ T5222] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  207.311122][T13207] netlink: 22 bytes leftover after parsing attributes in process `syz.3.2257'.
[  207.375542][T13207] syzkaller0: entered promiscuous mode
[  207.377716][T13207] syzkaller0: entered allmulticast mode
[  207.805810][T13219] netlink: 'syz.0.2260': attribute type 2 has an invalid length.
[  208.963552][T13204] chnl_net:caif_netlink_parms(): no params data found
[  209.100725][T13204] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.103571][T13204] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.109142][T13204] bridge_slave_0: entered allmulticast mode
[  209.113201][T13204] bridge_slave_0: entered promiscuous mode
[  209.118053][T13204] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.120886][T13204] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.124035][T13204] bridge_slave_1: entered allmulticast mode
[  209.131851][T13204] bridge_slave_1: entered promiscuous mode
[  209.144411][T13240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2267'.
[  209.187285][T13204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  209.192387][T13204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  209.238183][T13204] team0: Port device team_slave_0 added
[  209.242444][T13204] team0: Port device team_slave_1 added
[  209.279750][T13204] batman_adv: batadv0: Adding interface: batadv_slave_0
[  209.281853][T13204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.302969][T13204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  209.316367][T13204] batman_adv: batadv0: Adding interface: batadv_slave_1
[  209.319017][T13204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.336728][ T5842] Bluetooth: hci2: command tx timeout
[  209.340447][T13204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  209.366107][ T5853] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.407545][T13204] hsr_slave_0: entered promiscuous mode
[  209.410663][T13204] hsr_slave_1: entered promiscuous mode
[  209.413545][T13204] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  209.417006][T13204] Cannot create hsr debugfs directory
[  209.435428][ T5853] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.498219][ T5853] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.665575][ T5853] bridge_slave_1: left allmulticast mode
[  209.668860][ T5853] bridge_slave_1: left promiscuous mode
[  209.672056][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.680164][ T5853] bridge_slave_0: left allmulticast mode
[  209.682432][ T5853] bridge_slave_0: left promiscuous mode
[  209.684409][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.088413][T13259] IPv6: Can't replace route, no match found
[  210.191128][ T5853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  210.200582][ T5853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  210.206788][ T5853] bond0 (unregistering): Released all slaves
[  210.224495][T13267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2270'.
[  210.359396][T13262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2271'.
[  210.552693][T13278] netlink: 324 bytes leftover after parsing attributes in process `syz.0.2274'.
[  210.602290][T13278] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2274'.
[  210.606891][T13278] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2274'.
[  210.617393][T13279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2274'.
[  210.620013][T13278] netlink: 'syz.0.2274': attribute type 6 has an invalid length.
[  210.620849][T13279] netlink: 'syz.0.2274': attribute type 2 has an invalid length.
[  210.784673][ T5853] hsr_slave_0: left promiscuous mode
[  210.787461][T13285] netlink: 178248 bytes leftover after parsing attributes in process `syz.0.2277'.
[  210.802304][ T5853] hsr_slave_1: left promiscuous mode
[  210.806358][ T5853] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  210.809324][ T5853] batman_adv: batadv0: Removing interface: batadv_slave_0
[  210.826801][ T5853] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  210.829649][ T5853] batman_adv: batadv0: Removing interface: batadv_slave_1
[  210.849591][ T5853] veth1_macvtap: left promiscuous mode
[  210.851568][ T5853] veth0_macvtap: left promiscuous mode
[  210.853317][ T5853] veth1_vlan: left promiscuous mode
[  210.856087][ T5853] veth0_vlan: left promiscuous mode
[  211.340323][ T5853] team0 (unregistering): Port device team_slave_1 removed
[  211.379528][ T5853] team0 (unregistering): Port device team_slave_0 removed
[  211.425141][ T5842] Bluetooth: hci2: command tx timeout
[  211.852916][T13291] bridge_slave_0: entered promiscuous mode
[  212.067545][T13204] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  212.082351][T13204] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  212.105750][T13204] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  212.113818][T13204] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  212.293336][T13204] 8021q: adding VLAN 0 to HW filter on device bond0
[  212.309688][T13204] 8021q: adding VLAN 0 to HW filter on device team0
[  212.320182][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.322402][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  212.337149][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.339385][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  212.393164][T13204] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  212.411225][T13204] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  212.718524][T13204] 8021q: adding VLAN 0 to HW filter on device batadv0
[  212.810885][T13204] veth0_vlan: entered promiscuous mode
[  212.831138][T13204] veth1_vlan: entered promiscuous mode
[  212.890870][T13204] veth0_macvtap: entered promiscuous mode
[  212.903567][T13204] veth1_macvtap: entered promiscuous mode
[  212.944288][T13204] batman_adv: batadv0: Interface activated: batadv_slave_0
[  212.967055][T13204] batman_adv: batadv0: Interface activated: batadv_slave_1
[  212.984498][T13204] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  212.995156][T13204] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.001390][T13204] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.007776][T13204] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.325253][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.328297][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.365299][T13361] netlink: 'syz.3.2297': attribute type 10 has an invalid length.
[  213.367801][T13361] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2297'.
[  213.375623][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.380738][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.439180][T13367] netlink: 'syz.3.2299': attribute type 5 has an invalid length.
[  213.801363][T13394] netlink: 'syz.0.2307': attribute type 5 has an invalid length.
[  213.989690][T13402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2310'.
[  213.997650][T13402] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2310'.
[  214.003629][T13402] netlink: 'syz.0.2310': attribute type 3 has an invalid length.
[  214.010097][T13402] netlink: 199068 bytes leftover after parsing attributes in process `syz.0.2310'.
[  214.015562][T13402] veth0: entered promiscuous mode
[  214.018918][T13401] veth0: left promiscuous mode
[  214.337562][T13410] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2314'.
[  214.882575][T13427] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2319'.
[  214.914251][T13429] netlink: 280 bytes leftover after parsing attributes in process `syz.3.2320'.
[  215.469008][ T9335] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.727279][ T5222] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  215.732316][ T5222] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  215.738158][ T5222] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  215.742744][ T5222] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  215.747182][ T5222] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  215.969087][T13438] chnl_net:caif_netlink_parms(): no params data found
[  216.058213][T13438] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.061014][T13438] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.063807][T13438] bridge_slave_0: entered allmulticast mode
[  216.070294][T13438] bridge_slave_0: entered promiscuous mode
[  216.075231][T13438] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.077942][T13438] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.080712][T13438] bridge_slave_1: entered allmulticast mode
[  216.084093][T13438] bridge_slave_1: entered promiscuous mode
[  216.144356][T13438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  216.150236][T13438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  216.179343][T13438] team0: Port device team_slave_0 added
[  216.182814][T13438] team0: Port device team_slave_1 added
[  216.208784][T13438] batman_adv: batadv0: Adding interface: batadv_slave_0
[  216.210982][T13438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.219686][T13438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  216.227871][T13438] batman_adv: batadv0: Adding interface: batadv_slave_1
[  216.230691][T13438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.241069][T13438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  216.245825][T13453] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2325'.
[  216.276154][T13438] hsr_slave_0: entered promiscuous mode
[  216.279527][T13438] hsr_slave_1: entered promiscuous mode
[  216.282247][T13438] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  216.286040][T13438] Cannot create hsr debugfs directory
[  216.367074][T13455] netlink: ct family unspecified
[  216.368661][T13455] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  216.460695][T13462] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2328'.
[  216.564023][T13471] netlink: 'syz.0.2331': attribute type 13 has an invalid length.
[  216.958310][T13481] netlink: 'syz.0.2336': attribute type 5 has an invalid length.
[  217.034439][ T9335] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.120871][ T9335] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.191766][ T9335] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.439388][T13501] netlink: 'syz.3.2342': attribute type 21 has an invalid length.
[  217.442128][ T9335] bridge_slave_1: left allmulticast mode
[  217.443891][ T9335] bridge_slave_1: left promiscuous mode
[  217.456435][ T9335] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.469136][ T9335] bridge_slave_0: left allmulticast mode
[  217.470840][ T9335] bridge_slave_0: left promiscuous mode
[  217.483311][ T9335] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.816529][ T5842] Bluetooth: hci2: command tx timeout
[  217.879474][ T9335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  217.883959][ T9335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  217.888970][ T9335] bond0 (unregistering): Released all slaves
[  218.636419][ T9335] hsr_slave_0: left promiscuous mode
[  218.649318][ T9335] hsr_slave_1: left promiscuous mode
[  218.658365][ T9335] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  218.672556][ T9335] batman_adv: batadv0: Removing interface: batadv_slave_0
[  218.683762][ T9335] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  218.696869][ T9335] batman_adv: batadv0: Removing interface: batadv_slave_1
[  218.762225][ T9335] veth1_macvtap: left promiscuous mode
[  218.771169][ T9335] veth0_macvtap: left promiscuous mode
[  218.777573][ T9335] veth1_vlan: left promiscuous mode
[  218.782710][ T9335] veth0_vlan: left promiscuous mode
[  219.442021][ T9335] team0 (unregistering): Port device team_slave_1 removed
[  219.472872][ T9335] team0 (unregistering): Port device team_slave_0 removed
[  219.848033][    C0] Unknown status report in ack skb
[  219.905200][ T5842] Bluetooth: hci2: command tx timeout
[  220.011842][T13438] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  220.021788][T13438] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  220.039380][T13438] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  220.051228][T13438] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  220.116029][T13549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2353'.
[  220.177998][T13549] block nbd0: shutting down sockets
[  220.447960][T13438] 8021q: adding VLAN 0 to HW filter on device bond0
[  220.450559][T13576] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2357'.
[  220.468254][T13572] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2357'.
[  220.475127][T13578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2356'.
[  220.480881][T13438] 8021q: adding VLAN 0 to HW filter on device team0
[  220.485785][T13572] IPVS: set_ctl: invalid protocol: 8345 172.30.1.4:20003
[  220.499975][T13572] Cannot find add_set index 3 as target
[  220.505752][T13578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2356'.
[  220.508535][T13578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2356'.
[  220.516867][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.519239][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  220.528330][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.530677][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  220.547649][ T6052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.551960][ T6052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.580878][T13572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  220.722596][T13438] 8021q: adding VLAN 0 to HW filter on device batadv0
[  220.763264][T13438] veth0_vlan: entered promiscuous mode
[  220.772379][T13438] veth1_vlan: entered promiscuous mode
[  220.793865][T13438] veth0_macvtap: entered promiscuous mode
[  220.800389][T13438] veth1_macvtap: entered promiscuous mode
[  220.812694][T13438] batman_adv: batadv0: Interface activated: batadv_slave_0
[  220.822712][T13438] batman_adv: batadv0: Interface activated: batadv_slave_1
[  220.829892][T13438] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  220.832673][T13438] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  220.835649][T13438] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  220.839274][T13438] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  220.902450][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.909847][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.927947][ T6052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.930449][ T6052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  221.147869][T13591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2358'.
[  221.152635][T13591] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2358'.
[  221.161834][T13591] gtp0: entered promiscuous mode
[  221.163552][T13591] gtp0: entered allmulticast mode
[  221.269699][T13595] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2359'.
[  221.449052][T13603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2361'.
[  221.492937][T13605] ip6gre2: entered allmulticast mode
[  221.769887][T13614] netlink: 'syz.0.2364': attribute type 8 has an invalid length.
[  221.932706][T13620] netlink: 'syz.0.2365': attribute type 5 has an invalid length.
[  222.021229][T13627] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  222.343448][T13648] netlink: 'syz.0.2373': attribute type 5 has an invalid length.
[  222.454295][T13658] netlink: 'syz.0.2378': attribute type 2 has an invalid length.
[  222.750416][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.302285][T13677] lo: entered allmulticast mode
[  223.307964][T13676] netlink: 'syz.0.2383': attribute type 8 has an invalid length.
[  223.309737][T13677] dvmrp8: entered allmulticast mode
[  223.320585][T13674] lo: left allmulticast mode
[  223.369111][T13681] Dead loop on virtual device ip6_vti0, fix it urgently!
[  223.532923][ T5222] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  223.536638][ T5222] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  223.539322][ T5222] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  223.543313][ T5222] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  223.548475][ T5222] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  223.677482][T13691] chnl_net:caif_netlink_parms(): no params data found
[  223.738438][T13691] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.740691][T13691] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.742872][T13691] bridge_slave_0: entered allmulticast mode
[  223.747241][T13691] bridge_slave_0: entered promiscuous mode
[  223.750763][T13691] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.752858][T13691] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.755490][T13691] bridge_slave_1: entered allmulticast mode
[  223.758164][T13691] bridge_slave_1: entered promiscuous mode
[  223.782733][T13691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  223.789503][T13691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  223.819028][T13691] team0: Port device team_slave_0 added
[  223.822653][T13691] team0: Port device team_slave_1 added
[  223.847900][T13691] batman_adv: batadv0: Adding interface: batadv_slave_0
[  223.850127][T13691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.859106][T13691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  223.863458][T13691] batman_adv: batadv0: Adding interface: batadv_slave_1
[  223.866930][T13691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.874445][T13691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  223.911447][T13691] hsr_slave_0: entered promiscuous mode
[  223.913958][T13691] hsr_slave_1: entered promiscuous mode
[  223.916860][T13691] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  223.919220][T13691] Cannot create hsr debugfs directory
[  224.328689][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.431730][T13704] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  224.505809][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.580410][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.830236][   T12] bridge_slave_1: left allmulticast mode
[  224.837325][   T12] bridge_slave_1: left promiscuous mode
[  224.839625][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.866841][   T12] bridge_slave_0: left allmulticast mode
[  224.879336][   T12] bridge_slave_0: left promiscuous mode
[  224.886013][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.410110][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  225.415179][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  225.420332][   T12] bond0 (unregistering): Released all slaves
[  225.582408][ T5222] Bluetooth: hci2: command tx timeout
[  225.806921][T13724] __nla_validate_parse: 9 callbacks suppressed
[  225.806933][T13724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2397'.
[  225.860682][   T12] hsr_slave_0: left promiscuous mode
[  225.863570][   T12] hsr_slave_1: left promiscuous mode
[  225.875620][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  225.878312][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  225.889590][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  225.892091][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  225.967807][   T12] veth1_macvtap: left promiscuous mode
[  225.969964][   T12] veth0_macvtap: left promiscuous mode
[  225.972169][   T12] veth1_vlan: left promiscuous mode
[  225.974927][   T12] veth0_vlan: left promiscuous mode
[  226.637942][   T12] team0 (unregistering): Port device team_slave_1 removed
[  226.678511][   T12] team0 (unregistering): Port device team_slave_0 removed
[  226.813778][T13735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2398'.
[  226.877006][T13736] netlink: 'syz.3.2398': attribute type 11 has an invalid length.
[  227.388519][T13739] Dead loop on virtual device ip6_vti0, fix it urgently!
[  227.418599][T13691] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  227.428861][T13691] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  227.469865][T13691] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  227.502239][T13691] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  227.655724][ T5222] Bluetooth: hci2: command tx timeout
[  227.813842][T13691] 8021q: adding VLAN 0 to HW filter on device bond0
[  227.885776][T13691] 8021q: adding VLAN 0 to HW filter on device team0
[  227.909961][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.913029][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  227.943560][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.946778][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  228.072487][T13771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2403'.
[  228.184691][T13778] netlink: zone id is out of range
[  228.187859][T13778] netlink: zone id is out of range
[  228.189753][T13778] netlink: zone id is out of range
[  228.191249][T13778] netlink: zone id is out of range
[  228.194440][T13778] netlink: zone id is out of range
[  228.211743][T13778] netlink: zone id is out of range
[  228.213778][T13778] netlink: zone id is out of range
[  228.227140][T13778] netlink: zone id is out of range
[  228.229266][T13778] netlink: zone id is out of range
[  228.286233][T13691] 8021q: adding VLAN 0 to HW filter on device batadv0
[  228.369669][T13691] veth0_vlan: entered promiscuous mode
[  228.378092][T13691] veth1_vlan: entered promiscuous mode
[  228.429960][T13691] veth0_macvtap: entered promiscuous mode
[  228.449106][T13691] veth1_macvtap: entered promiscuous mode
[  228.467874][T13691] batman_adv: batadv0: Interface activated: batadv_slave_0
[  228.483816][T13691] batman_adv: batadv0: Interface activated: batadv_slave_1
[  228.526405][T13691] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  228.544239][T13691] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  228.554023][T13691] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  228.567403][T13691] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  229.397966][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  229.400884][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  229.466098][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  229.471873][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  229.631201][T13806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  229.639278][T13802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2413'.
[  229.642122][T13802] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2413'.
[  229.768731][T13812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2417'.
[  229.772208][T13812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2417'.
[  229.835178][T13816] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2418'.
[  229.840863][T13816] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2418'.
[  230.199940][T13838] netlink: 'syz.3.2423': attribute type 1 has an invalid length.
[  230.358886][T13846] netlink: 'syz.3.2426': attribute type 10 has an invalid length.
[  230.363320][T13846] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2426'.
[  230.524575][T13853] netlink: 'syz.3.2428': attribute type 13 has an invalid length.
[  230.534443][T13853] netlink: 'syz.3.2428': attribute type 17 has an invalid length.
[  230.540813][T13853] netlink: 'syz.3.2428': attribute type 27 has an invalid length.
[  230.742265][T13861] vlan2: entered allmulticast mode
[  230.744028][T13861] bridge_slave_0: entered allmulticast mode
[  230.973639][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  231.438224][T13869] __nla_validate_parse: 3 callbacks suppressed
[  231.438238][T13869] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2433'.
[  231.443924][T13870] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2433'.
[  231.456427][T13872] netlink: 'syz.3.2434': attribute type 5 has an invalid length.
[  231.548964][T13876] netlink: 'syz.3.2435': attribute type 10 has an invalid length.
[  231.551696][T13876] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2435'.
[  231.623424][T13881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2437'.
[  231.627196][T13881] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2437'.
[  231.718630][T13883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2438'.
[  231.731525][T12150] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  231.746993][T12150] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  231.751045][T12150] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  231.757402][T12150] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  231.761084][T12150] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  231.815100][T12150] Bluetooth: hci3: command 0x0405 tx timeout
[  231.824721][T13891] netlink: 'syz.3.2441': attribute type 5 has an invalid length.
[  231.850562][T13892] syzkaller1: entered promiscuous mode
[  231.852276][T13892] syzkaller1: entered allmulticast mode
[  231.870399][T13894] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  231.873051][T13894] syzkaller0: entered promiscuous mode
[  231.876019][T13894] syzkaller0: entered allmulticast mode
[  231.879401][T13894] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2442'.
[  231.900424][ T7378] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  232.016489][T13894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2442'.
[  232.147056][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.277176][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.422340][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.492140][T13894] tipc: Resetting bearer <eth:syzkaller0>
[  232.509557][T13894] tipc: Disabling bearer <eth:syzkaller0>
[  232.600161][   T12] bridge_slave_1: left allmulticast mode
[  232.603143][   T12] bridge_slave_1: left promiscuous mode
[  232.607199][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.611957][   T12] bridge_slave_0: left allmulticast mode
[  232.615785][   T12] bridge_slave_0: left promiscuous mode
[  232.617680][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.983580][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  232.989732][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  232.994635][   T12] bond0 (unregistering): Released all slaves
[  233.277113][   T12] hsr_slave_0: left promiscuous mode
[  233.281636][   T12] hsr_slave_1: left promiscuous mode
[  233.284291][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  233.289265][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  233.292847][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  233.298598][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  233.322378][   T12] veth1_macvtap: left promiscuous mode
[  233.324601][   T12] veth0_macvtap: left promiscuous mode
[  233.327348][   T12] veth1_vlan: left promiscuous mode
[  233.329469][   T12] veth0_vlan: left promiscuous mode
[  233.812338][   T12] team0 (unregistering): Port device team_slave_1 removed
[  233.857330][   T12] team0 (unregistering): Port device team_slave_0 removed
[  234.648074][   T12] bond0 (unregistering): Released all slaves
[  237.495793][    C0] net_ratelimit: 10 callbacks suppressed
[  237.495810][    C0] Dead loop on virtual device ip6_vti0, fix it urgently!

VM DIAGNOSIS:
12:01:26  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000007 RBX=0000000000000003 RCX=0000000000000007 RDX=0000000000000000
RSI=0000000000000000 RDI=ffff88801c2e0000 RBP=0000000000000007 RSP=ffffc900001078f0
R8 =0000000000000000 R9 =ffffffff8b3cf902 R10=dffffc0000000000 R11=ffffffff8b3cf830
R12=0000000000020000 R13=0000000000000000 R14=ffff88801c2e0b40 R15=ffff88801c2e0af0
RIP=ffffffff819e45ae RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000002280 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fc1b2a11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000001 RCX=0000000000000000 RDX=0000000000000000
RSI=ffff888108cae158 RDI=ffff888108cad640 RBP=0000000000000000 RSP=ffffc9000315ec68
R8 =0000000000000000 R9 =ffffffff8172aae5 R10=ffffc9000315eeb8 R11=ffffffff81ad03a0
R12=0000000000020007 R13=0000000000000001 R14=ffff888108cae158 R15=2e9e6a6b919e55df
RIP=ffffffff819e49a9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2467ce7d60 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f24671856a3 00007f24671856a3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=000055557cd9782f 000055557cd97610
XMM06=000055557cd95e14 000055557cd95e10 XMM07=0000000000003072 656c6c616b7a7973
XMM08=01ffffffffffffff ffdf08018a800340 XMM09=6769726f5f74696e 695f636e5f766461
XMM10=666666666666660a 342e79656b5f5f2e XMM11=6174616220622030 6534633130613966
XMM12=6666666666660a31 342e79656b5f5f2e XMM13=73766f2062203061 6663313061396666
XMM14=2e79656b5f5f2e74 656e5f74696e695f XMM15=6331306139666666 66666666660a3334
