last executing test programs:

1.564518228s ago: executing program 0 (id=8081):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000140)=""/75}, 0x20)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000080), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r2=>0x0})
sendmsg$can_bcm(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
r3 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x1d, 0x2, 0x6)
r6 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r7=>0x0})
bind$can_j1939(r5, &(0x7f0000000400)={0x1d, r7, 0x2, {0x0, 0xf0}}, 0x18)
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00'})
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r9, &(0x7f0000000340)='syz1\x00', 0x1ff)
openat$cgroup_subtree(r9, &(0x7f0000000340), 0x2, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0x7}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)
connect$can_bcm(r1, &(0x7f00000002c0)={0x1d, r2}, 0x10)
socket$can_raw(0x1d, 0x3, 0x1)
accept4(r6, &(0x7f0000000100)=@rc={0x1f, @none}, &(0x7f0000000200)=0x80, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe8, 0xe8, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3}}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x33, 0x0, 0x44, 0x1}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x2, 0x3}, {0x10, 0x4}, {0xa}]}, @func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0x4, 0x3}, {0x0, 0x3}, {0xc, 0x2}, {0xf, 0x3}, {0x0, 0x3}, {0x8}, {0x1, 0x3}, {0x10, 0x3}, {0xe, 0x8002}]}, @const={0xd, 0x0, 0x0, 0xa, 0x5}, @enum={0xa, 0x1, 0x0, 0x6, 0x4, [{0x7, 0x9}]}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x2, 0x7}, @enum64={0x9, 0x1, 0x0, 0x13, 0x1, 0x2, [{0x7, 0xcfa2, 0x2}]}]}, {0x0, [0x0]}}, &(0x7f0000000640)=""/134, 0x103, 0x86, 0x0, 0x7}, 0x28)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r10}, 0x18)
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
bind$bt_hci(r11, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)

1.389824542s ago: executing program 1 (id=8082):
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4400, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}, 0x3}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r0, 0x8b2c, &(0x7f0000000040))
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000340)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000002c0)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000800)="ff", 0x1}], 0x1}}], 0x2, 0x931766f6119eed40)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="312000000000000014002b8008000100", @ANYRES32, @ANYBLOB="080002000300000008001b"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r7=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x1e, &(0x7f0000000700)=@raw=[@ldst={0x1, 0x1, 0x4, 0x8, 0x6, 0xffffffffffffff77, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffd}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @generic={0x0, 0x2, 0x2, 0x40, 0x1}, @exit, @jmp={0x5, 0x1, 0xd, 0x7, 0x2, 0x4, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000d40)='GPL\x00', 0x27e1, 0x3a, &(0x7f0000000d80)=""/58, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000e00)={0x5, 0x9, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000e40)=[0x1, r1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000e80)=[{0x4, 0x3, 0x8, 0x2}, {0x2, 0x3, 0xd, 0xb}, {0x5, 0x3, 0xc, 0x1}, {0x3, 0x2, 0x3, 0x2}, {0x2, 0x4, 0xa, 0x9}, {0x1, 0x5, 0x3, 0x5}, {0x1, 0x2, 0xd}, {0x4, 0x1, 0x10, 0x8}], 0x10, 0x8}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000011c0)={0x6, 0x15, &(0x7f0000000fc0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x22}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffb}, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x6}], &(0x7f0000001080)='GPL\x00', 0x6, 0x0, 0x0, 0x60980, 0x7a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000010c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000001100)={0x4, 0xc, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001140)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000001180)=[{0x0, 0x3, 0x5, 0x5}, {0x4, 0x5, 0x3}], 0x10, 0x7}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x6, 0xd, &(0x7f0000001280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe0}, [@map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf}, @ldst={0x2, 0x2, 0x4, 0x1f, 0xb, 0xfffffffffffffff4}, @alu={0x4, 0x0, 0xa, 0xb, 0xa, 0x40, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x4}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x4}, @alu={0x3, 0x0, 0x7, 0xa, 0x4, 0xfffffffffffffff8, 0xfffffffffffffffc}]}, &(0x7f0000001300)='syzkaller\x00', 0xb40, 0x25, &(0x7f0000001340)=""/37, 0x41000, 0x50, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001380)={0x2, 0xd, 0xff, 0x8001}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f00000013c0)=[{0x1, 0x1, 0x0, 0x2}, {0x3, 0x4, 0x7, 0x1}, {0x1, 0x5, 0x1, 0x1}, {0x2, 0x2, 0x0, 0x6}, {0x5, 0x4, 0x5, 0x3}, {0x1, 0x4, 0x3, 0x2}, {0x1, 0x3, 0x8, 0x4}, {0x0, 0x3, 0x1, 0x2}], 0x10, 0xa}, 0x94)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_SET(r8, &(0x7f000000b100)={0x0, 0x0, &(0x7f000000b0c0)={&(0x7f000000af00)={0x58, r9, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x4b}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x64000840}, 0x2000c044)
bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x20, 0x1e, &(0x7f0000001500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @jmp={0x5, 0x1, 0x8, 0x5, 0xa, 0x30, 0xfffffffffffffffc}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @jmp={0x5, 0x0, 0xa, 0x7, 0xb, 0x2, 0x10}, @ringbuf_query, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4e}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x0, 0x0, 0x4, 0x7, 0x7, 0x10, 0xfffffffffffffff0}]}, &(0x7f0000001600)='syzkaller\x00', 0x7, 0xdd, &(0x7f0000001640)=""/221, 0x41100, 0x21, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000001740)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001780)={0x2, 0x6, 0x8, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f0000000840)=[0x1], &(0x7f0000001800)=[{0x1, 0x2, 0x1, 0xc}, {0x0, 0x4, 0x0, 0x3}, {0x0, 0x5, 0x5, 0x8}, {0x3, 0x3, 0x3, 0x2}, {0x2, 0x4, 0x5, 0xd}, {0x5, 0x3, 0xc, 0x3}, {0x2, 0x3, 0x1, 0x6}]}, 0x94)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a00)=@setlink={0x10c, 0x13, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x840, 0xc0}, [@IFLA_PROP_LIST={0xb8, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ip6gretap0\x00'}, {0x14, 0x35, 'virt_wifi0\x00'}, {0x14, 0x35, 'veth0\x00'}, {0x14, 0x35, 'vcan0\x00'}, {0x14}, {0x14, 0x35, 'batadv_slave_1\x00'}, {0x14, 0x35, 'pim6reg0\x00'}, {0x14, 0x35, 'ip6gre0\x00'}, {0x14, 0x35, 'ipvlan0\x00'}]}, @IFLA_XDP={0x4}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5, 0x5, 0x8}, @IFLA_IPTUN_FWMARK={0x8}]}}}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x77}, @IFLA_IFALIASn={0x4}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20048050}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000140)={'wg2\x00', <r10=>0x0})
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x28}, 0xc, &(0x7f0000000180)={&(0x7f0000001b40)=ANY=[@ANYBLOB="d4040000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="060006004e240000060006004e23000008000100", @ANYRES32=r10, @ANYBLOB="ec030880380000801400040002004e22ac14140d0000000000000000200004000a004e20fffffe01ff010000000000000000000000000001010000000c000080060005002f00000054000080240001000000000000000000000000000000000000000000000000000000000000000000060005000010000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b84020080200004000a004e2200000edcfc00000000000000000000000000000004000000400209801c000080060001000200000008000200ac1414aa050003000300000094000080060001000200000008000200ac1414bb0500030003000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000200000008000200e00000010500030000000000060001000200000008000200e00000020500030002000000060001000a000000140002000000000000000000000000000000000105000300000000001c000080060001000200000008000200ac1414bb05000300030000007c000080060001000a00000014000200ff0100000000000000000000000000010500030002000000060001000200000008000200000000000500030002000000060001000200000008000200e00000010500030003000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000f4000080060001000200000008000200000000000500030002000000060001000a00000014000200200100000000000000000000000000010500030001000000060001000a00000014000200fc0000000000000000000000000000010500030003000000060001000200000008000200ac1414aa0500030002000000060001000200000008000200640101010500030000000000060001000a00000014000200000000000000000000000000000000010500030003000000060001000200000008000200ac1414bb0500030003000000060001000a00000014000200fe8000000000000000000000000000170500030000000000200004000a004e2100004558fc010000000000000000000000000001030000008c0000801400040002004e22ac1e0001000000000000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff06000500040000001400040002004e24ffffffff000000000000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff08000a000100000008000300020000004000008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c08000a000100000006000500010000000800030006000000060006004e230000"], 0x4d4}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000420000000700000008000000000000", @ANYBLOB="00000000000000000000000000000000000000005a55a9a14924"], 0x50)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000020000003c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000001000000a80c0000000000000a00000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000ff00000000000000010000000000000084010500fe8000000000000000000000000000bb000004d53c00000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000fe8000000000000000000000000000bb000004d43c00000000000000fe8000000000000000000000000000000000000000000000000800000000000001000000ff010000000000000000000000000001000000006c"], 0x23c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000400)=""/72, 0x48, 0x40002020, &(0x7f0000000680)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48)
shutdown(r1, 0x1)

1.389575619s ago: executing program 2 (id=8083):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ioctl$int_in(r0, 0x5452, 0x0)
getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000080)={0x6, 0x7, 'syz1\x00'}, &(0x7f00000000c0)=0x28)
pselect6(0x40, &(0x7f0000000000)={0x10, 0x4, 0x80000000000, 0x3, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xb, 0x10, r0, 0xf044d000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000000), 0x0}, 0x20)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmmsg$sock(r0, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004b00)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x18}}], 0x2, 0x20000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000003400010300bd7000fedbdb25030000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x240088d4)

1.310351367s ago: executing program 0 (id=8084):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1, 0x5}, 0x90)

1.307658982s ago: executing program 1 (id=8085):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
recvmmsg(r0, &(0x7f0000002d00)=[{{&(0x7f0000000000)=@in6, 0x80, &(0x7f0000002140)=[{&(0x7f0000000080)=""/128, 0x80}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)=""/4, 0x4}], 0x4}, 0x8}, {{&(0x7f0000002180)=@llc, 0x80, &(0x7f00000024c0)=[{&(0x7f0000002200)=""/249, 0xf9}, {&(0x7f0000002300)=""/130, 0x82}, {&(0x7f00000023c0)=""/3, 0x3}, {&(0x7f0000002400)=""/129, 0x81}], 0x4, &(0x7f0000002500)=""/200, 0xc8}, 0x4}, {{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002600)=""/62, 0x3e}, {&(0x7f0000002640)=""/13, 0xd}, {&(0x7f0000002680)=""/65, 0x41}, {&(0x7f0000002700)=""/35, 0x23}, {&(0x7f0000002740)=""/232, 0xe8}, {&(0x7f0000002840)=""/234, 0xea}], 0x6}}, {{&(0x7f00000029c0)=@nfc, 0x80, &(0x7f0000002a40), 0x0, &(0x7f0000002a80)=""/51, 0x33}, 0x2e0}, {{&(0x7f0000002ac0)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002b40)=""/60, 0x3c}, {&(0x7f0000002b80)=""/252, 0xfc}], 0x2, &(0x7f0000002cc0)=""/58, 0x3a}, 0x800}], 0x5, 0x20, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002e40)={@in={{0x2, 0x4e21, @rand_addr=0x64010101}}, 0x0, 0x0, 0x5, 0x0, "c981b3fe880cc812394edf5935e16ba608d406d26fe85d65d3b7fb68a78d9c3d4b0834c0c058d4295926406efa29e40dc2247b882ca74d0925ab6f9984a0450d1044a7fe4190589d43654b912b37ed63"}, 0xd8)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002f40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000002fc0)={'wg2\x00', <r3=>0x0})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000003000)={<r4=>r1, 0x6, 0xd, 0x3})
r5 = bpf$TOKEN_CREATE(0x24, &(0x7f00000030c0)={0x0, r1}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000003040)=@bloom_filter={0x1e, 0x41f8, 0x7ff, 0x800, 0x50800, r2, 0x1, '\x00', r3, r4, 0x5, 0x3, 0x5, 0x8, @void, @value, @value=r5}, 0x50)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000003200)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000031c0)={&(0x7f0000003140)={0x70, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7292, 0x22}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x23b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x157}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000003240)={r4, r3, 0x25, 0x12, @void}, 0x10)
ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f0000003300)={0x1, 0x48, '\x00', 0x0, &(0x7f0000003280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
connect$inet(r4, &(0x7f0000003340)={0x2, 0x4e22, @multicast2}, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000033c0), r4)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000003480)={&(0x7f0000003380), 0xc, &(0x7f0000003440)={&(0x7f0000003400)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x48011)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r7, &(0x7f00000034c0)={0xa, 0x4e21, 0x80, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000035c0)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x14, 0x7, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x8000)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000003640)=@generic={&(0x7f0000003600)='./file0\x00', 0x0, 0x10}, 0x18)
bind$rds(r4, &(0x7f0000003680)={0x2, 0x4e22, @broadcast}, 0x10)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000003700), r4)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f00000037c0)={&(0x7f00000036c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)={0x30, r9, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0xd, 0xc, 0x400, 0xffffff01}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0xdfea5dcc595c852b}, 0x810)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000003800)={<r11=>0x0, 0x1, 0x5, 0x1}, &(0x7f0000003840)=0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f0000003880)={0x8, 0x800e, 0x0, 0x8, r11}, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000038c0), r8)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000003900)={0x0, 'wg0\x00', {0x2}, 0x1})
r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003980), r4)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r8, &(0x7f0000003ac0)={&(0x7f0000003940)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003a80)={&(0x7f00000039c0)={0x88, r12, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x88}, 0x1, 0x0, 0x0, 0xc4}, 0x80)

470.233951ms ago: executing program 2 (id=8086):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000100)="1c824d4581eaaabbee635e70df3d9bb2d1f674c28a750b5ed8159b26e2aed482d62c19728e24c2a28350b20c201b0da678e8d261448be20b620c58d2bb94d7ac02e6a9dd4db9c67e2616a6d39988b5fb6efc", &(0x7f0000000180)=""/73}, 0x20)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000020642500000000002020207b1af8ff00000000bfa108000000000047010000f6ffffffb702000008"], &(0x7f0000000300)='GPL\x00', 0x1, 0x17, &(0x7f0000000000)=""/23}, 0x94)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
epoll_create1(0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, &(0x7f0000004c80)={0xf9c, 0x5, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0d030000000000000000130000001c000980080002"], 0x30}}, 0x0)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001740)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000000)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38)
setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="e89520b0358fd34d"], 0x8)
recvmsg(r6, &(0x7f0000001700)={&(0x7f0000000480)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000001680)=[{&(0x7f00000003c0)=""/15, 0xf}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/82, 0x52}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/137, 0x89}], 0x5}, 0x40010102)
setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0x303}, "6ca1a6d77a28e69e", "7e15d87b4a8a2b48ff8aaca4f1730e818ea5f89d3e72b1df46e812944f978945", 'KP!4', "8679abeb8bed6817"}, 0x38)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x2d, 0xff, 0xf}, 0x2c)
r7 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000340)=0x8, 0x4)

469.748568ms ago: executing program 0 (id=8087):
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1e, 0x7, 0x8002, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x8, 0x40, 0x42}, 0x48)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) (async)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x800)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8)
write$rfkill(r1, &(0x7f00000003c0)={0x7, 0x5, 0x0, 0x0, 0x1}, 0x8) (async)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x10801, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r3], 0x18}}, 0x0) (async)
setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000020000210d0000aaa8fa017242ba9380d440fe0000000000002900000003000000", 0xfe60)
write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x3, 0x1}, 0x8) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000010c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) (async)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000009c0)={0x0, 0x2, 0xf000}, &(0x7f0000000a00)=0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, 0x0, 0x0)
sendmmsg$inet6(r6, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000005c0)="8c7f924c55205cbf860621af9cffa024f339da7627d94ad102646641643a0295beead32ec1c0f6549e114ed345f8abb0c7096bf936fbe530e377ef9e15ddf1af09eb058230e647585f856a22a1b6c6c8273c8d617589b13a5073", 0x5a}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0x200006, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000500)='\x00', 0x1}], 0x1}}], 0x2, 0x4048010)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r9}, 0x18)
sendmsg$nl_generic(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdbfa, {0x5}}, 0x14}}, 0x0)

410.170062ms ago: executing program 2 (id=8088):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x1d, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x4000000, 0x0, 0x3}})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc000000000000000000000000000000008600907887ffffffffffffff000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

409.546367ms ago: executing program 1 (id=8089):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000040), 0x10)
sendmsg$can_bcm(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x38}, 0x300}, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040)=0xfffffffd, 0x4)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000000c0)=0x5, 0x4) (async, rerun: 32)
r2 = socket$alg(0x26, 0x5, 0x0) (rerun: 32)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async)
r3 = accept4(r2, 0x0, 0x0, 0x80800)
sendmmsg$alg(r3, &(0x7f0000002340)=[{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000540)="919f31e60f56df74b694d3cc94ed8834859e582836", 0x15}, {&(0x7f0000000400)="4c1d5e", 0x3}, {&(0x7f0000000880)="05320bd521013374aee1b80e190737", 0xf}], 0x1}], 0x1, 0x10)
ioctl$SIOCAX25CTLCON(r3, 0x89e8, &(0x7f0000000100)={@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x8, 0x8000, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)

350.557438ms ago: executing program 0 (id=8090):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000120005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e00080077617265677561726400000004"], 0x38}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000fcffffffffffffff00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)={0x2c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x2c}}, 0x24040890)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYRES64=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="300000003e000701feffffff00000000017c000008004280040008000c00038016000600800a000008000a"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x80)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000540)={0x2, {{0xa, 0x4e20, 0x1, @remote, 0x6}}, {{0xa, 0x4e22, 0x3, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x6}}}, 0x108)
read(r0, &(0x7f0000000140)=""/157, 0x9d)
r10 = socket$netlink(0x10, 0x3, 0x15)
r11 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r11, &(0x7f0000000040), 0x10)
r12 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r12, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60)
r13 = socket$pppl2tp(0x18, 0x1, 0x1)
getsockopt$sock_buf(r13, 0x1, 0x4b, &(0x7f00000000c0)=""/244, &(0x7f00000001c0)=0xf4)
getsockopt$inet_buf(r12, 0x118, 0x0, 0x0, &(0x7f00000003c0)=0x14)
sendmsg$can_bcm(r11, &(0x7f00000000c0)={0x0, 0xfffffef9, &(0x7f0000000780)={0x0, 0xfffffffffffffe8f}, 0x300, 0x0, 0x0, 0x4c05c}, 0x20000080)
sendmsg$netlink(r10, &(0x7f0000003500)={0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000130001000000000000000000f3c1837c3e366b798e3a850b657658215cbbbe26ac11b044d3e84eceaf37ff81b7bcefe98ef957720913fc8e5edcfec4f94edfbb6e1609f174d456c1c9e2e74a9f"], 0xe0}], 0x1}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x137000, 0x0)

350.095119ms ago: executing program 1 (id=8091):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1000})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000024f5638c074706e20000000008000140af6a000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c00048028"], 0xdc}}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x88802, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/3222], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000)={0x3, 0xb}, 0x10}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x80400)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@bridge_newvlan={0x3c, 0x70, 0x400, 0x70bd2d, 0x25dfdbfd, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xc}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xe}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xf}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2000000000000021, 0x2, 0x10000000000002)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="185ea4ae00000000000000000700"/30], &(0x7f0000000000)='syzkaller\x00'}, 0x90)

230.798378ms ago: executing program 2 (id=8092):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8)
unshare(0x20000400)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2d}, 0x12)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f00000002c0)}, 0x10)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000040080000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000d9a0cf819d9774520000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r3 = socket(0x8, 0x3, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000000)={0x2, 'wg1\x00', {0x4}, 0x7f})
socket$inet_smc(0x2b, 0x1, 0x0)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000006040), 0x0, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201)
ioctl$sock_netrom_SIOCADDRT(r3, 0x6180, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000180))
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="68020000210001000000000000000000ff0200000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000a001000060000000000000008000b00000000002c001300e0000001000000000000000000000000fc0000000000000000000000000000000000000000000000cc0111"], 0x268}}, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0)

140.286047ms ago: executing program 2 (id=8093):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000000c0), 0x10)
sendmmsg$sock(r0, &(0x7f00000003c0)=[{{&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x1, @remote, 'geneve1\x00'}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)="dd1d4d348677b58410a9bc8fc1830ebfc34fe976b4116fccc6ec1e10676fe7a98cd1bf4015d08677f800b502426625a55cb1346cb8da8957", 0x38}], 0x1}}], 0x1, 0x800)

137.28489ms ago: executing program 0 (id=8094):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0xa888, 0x0, 0x5000000}}]}}]}, 0x48}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800a00010063616e"], 0x48}}, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000000)=0x31001, 0x4)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010003b14000010000000000000000000", @ANYRES32=0x0, @ANYBLOB="70900400000000001800128008000100677470000c00028008000100", @ANYRES32=r5, @ANYBLOB="08000a004af4d5"], 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x2}}}}, 0x30}}, 0x0)

55.526472ms ago: executing program 1 (id=8095):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="87bc955ad0151f00000000000000000001000140fffffffe06000240000600000900010073797a30000000000500030001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc080)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000069113200000000008510000002000000850800008b00000095000000000000009500a50500000000699b43160164f7d8c18db44ce3cf122c2d74e3c1b081c16865a27cd49574c26244542623f02a5e19f2aba86f807a3b25c228c3cae180920fc8dba13064e95243659a6a2355e361a2d17b47c4f7044cc168d2a93340ecbce95e922dcf4259932d2d25198c032df2700688ffbbf0d97ccecea92abf074d8dd932426e7dd470472a9b80bfa515d611ef8e7b18b5bcfc5f7b3bcf89bd8b88c9351c1ab6f92bf13a5bc2c7d1fd1c1b148404f8d416483603c238ef00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket(0x2a, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$inet6(r7, &(0x7f0000000040)={0x1d, 0x4e24, 0x2, @remote, 0x2}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002cc0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000)

55.30758ms ago: executing program 2 (id=8096):
r0 = socket$inet(0xa, 0x801, 0x84)
listen(r0, 0x10000008) (async, rerun: 64)
r1 = socket$inet(0xa, 0x801, 0x84) (rerun: 64)
listen(r1, 0xfffffffd)
r2 = socket$inet(0xa, 0x801, 0x84)
listen(r2, 0x8)
r3 = socket$inet(0xa, 0x801, 0x84)
listen(r3, 0x8) (async)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
listen(r4, 0x7) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0xa00}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async, rerun: 32)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x60, 0x2, 0x6, 0x1, 0x6000000, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x11}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) (rerun: 32)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r7, 0x100) (async)
r8 = socket$netlink(0x10, 0x3, 0x4)
writev(r8, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r8)

54.336271ms ago: executing program 1 (id=8097):
r0 = socket(0x10, 0x3, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000001c0)={@private2, <r1=>0x0}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtclass={0x48, 0x28, 0x10, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x7, 0x17}, {0x0, 0xffff}, {0x0, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x32}}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x1, 0x8d}}, @tclass_kind_options=@c_sfb={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x0, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x3}, {0xa, 0xd}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0xff, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

0s ago: executing program 0 (id=8098):
socket(0x10, 0x3, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
listen(r0, 0x1000)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
socket$l2tp6(0xa, 0x2, 0x73)
r2 = socket(0x23, 0x2, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r2)
close(0x3)
r3 = socket(0x2, 0x80805, 0x4000)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(0xffffffffffffffff, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000001c0)={<r5=>0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000080)={0x9, 0x1, 0x8002, 0x3, 0xeb020000, 0x519, 0x8, 0x3ff, r5}, &(0x7f0000000240)=0x20)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0x3, @bcast, 0xffffffffffffffff})
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0)
getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9b5251693d09000000000000007000000049c1489940850069d548000000", @ANYRES32=r8, @ANYBLOB="000000000000000030001280080001007300000800034bca2b257ecd1a01ac8a9014c11980d55721b74479f74cc7c051931e78de690fe69d9a261d7c6fb3f80876f8701660b91400"/84], 0x50}}, 0x24000000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYRES8], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002cbd7000fcdbdf250600000008000400f8ffffff080004000600000008000200030000000800030003000000050005000b00000072c01c32887fed602cdbbcd522862b78621bdac3fa1503515d9a238fac23e866a5b0e0d8124022c8c90f751d5a0c3ad010a1db7d68f751a23c4dd3ee11ef4e914b08f184e132798b63d4b0ad7bf9ee142dba318aeb1303f9accdb90a2a529c32b05c15a8016194d6c011fbce5369b1bbfa721d0cecd1266d4d29465cf9ad45703e02758c91a7ad534c6c427142b405b5313a97caeb7ea8420fcd0d66b71ab6ed400896b2b0cb52a256ec879c708ef95b"], 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)

kernel console output (not intermixed with test programs):

r after parsing attributes in process `syz.2.5814'.
[  444.506781][T25990] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5814'.
[  444.559203][T25995] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5816'.
[  444.886283][T26011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5822'.
[  445.057219][T26029] sch_fq: defrate 0 ignored.
[  445.114003][T26036] netlink: 'syz.0.5829': attribute type 10 has an invalid length.
[  445.116646][T26036] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5829'.
[  445.324887][T26044] IPVS: set_ctl: invalid protocol: 44 172.20.20.45:20000
[  445.454224][T26051] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5832'.
[  445.603887][T26059] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20003
[  446.074256][T26062] netlink: 'syz.2.5837': attribute type 1 has an invalid length.
[  446.265759][T26071] syzkaller1: entered promiscuous mode
[  446.268032][T26071] syzkaller1: entered allmulticast mode
[  446.302155][T26071] xfrm1: entered promiscuous mode
[  446.304343][T26071] xfrm1: entered allmulticast mode
[  446.697647][T26105] syzkaller1: entered promiscuous mode
[  446.699661][T26105] syzkaller1: entered allmulticast mode
[  446.895161][T26122] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  447.048560][T26145] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004
[  447.144382][T26145] nbd9: detected capacity change from 0 to 127
[  447.147466][   T56] block nbd9: Receive control failed (result -32)
[  447.193222][T26161] 0{X: entered promiscuous mode
[  447.200914][T26161] 1{X: renamed from 30{X
[  447.219263][T26161] 1{X: left promiscuous mode
[  447.222921][T26161] 1{X: entered allmulticast mode
[  447.227782][T26161] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check.
[  447.376215][T26178] netlink: 'syz.0.5875': attribute type 7 has an invalid length.
[  447.381757][T26174] netlink: 'syz.1.5874': attribute type 5 has an invalid length.
[  447.427968][T26181] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  447.451738][T26181] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  447.456648][T26184] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  447.460994][T26184] syzkaller0: entered promiscuous mode
[  447.463063][T26184] syzkaller0: entered allmulticast mode
[  447.483888][T26188] veth0_to_bridge: entered promiscuous mode
[  447.509659][T26188] veth0_to_bridge: left promiscuous mode
[  447.786741][T26199] openvswitch: netlink: Flow actions attr not present in new flow.
[  447.975841][T26218] netlink: 'syz.1.5888': attribute type 30 has an invalid length.
[  448.088424][T26227] netlink: 'syz.1.5892': attribute type 11 has an invalid length.
[  448.218424][T26242] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  448.362537][T26253] gtp2: entered promiscuous mode
[  448.364283][T26253] gtp2: entered allmulticast mode
[  448.417464][T26258] netlink: 'syz.1.5901': attribute type 5 has an invalid length.
[  448.533419][T26268] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  449.433510][T26290] __nla_validate_parse: 22 callbacks suppressed
[  449.433525][T26290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5909'.
[  449.438652][T26290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5909'.
[  449.445292][T26290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5909'.
[  449.448693][T26290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5909'.
[  449.452213][T26290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5909'.
[  449.455679][T26290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5909'.
[  449.458617][T26290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5909'.
[  449.474804][T26290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5909'.
[  449.478023][T26290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5909'.
[  449.491616][T26290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5909'.
[  449.777129][T26318] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  449.837183][T26321] netlink: 'syz.2.5917': attribute type 4 has an invalid length.
[  450.466441][T26327] bridge_slave_1: default FDB implementation only supports local addresses
[  450.562411][T26333] ip6gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue
[  450.664325][T26339] netlink: 'syz.1.5925': attribute type 1 has an invalid length.
[  450.678066][T26339] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  450.948779][T26360] netlink: 'syz.0.5932': attribute type 13 has an invalid length.
[  450.951691][T26360] netlink: 'syz.0.5932': attribute type 17 has an invalid length.
[  450.975346][T26360] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  451.300015][T26375] netlink: 'syz.2.5939': attribute type 10 has an invalid length.
[  451.553414][T26387] dvmrp1: left allmulticast mode
[  451.697545][T26398] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  451.724381][T26399] netlink: 'syz.2.5945': attribute type 10 has an invalid length.
[  451.774559][T26404] netlink: 'syz.1.5947': attribute type 5 has an invalid length.
[  451.875062][T26410] sctp: [Deprecated]: syz.0.5950 (pid 26410) Use of int in maxseg socket option.
[  451.875062][T26410] Use struct sctp_assoc_value instead
[  451.890003][T26412] netlink: 'syz.1.5949': attribute type 1 has an invalid length.
[  451.900506][T26412] netlink: 'syz.1.5949': attribute type 1 has an invalid length.
[  451.959961][T26418] netlink: 'syz.1.5949': attribute type 6 has an invalid length.
[  452.147543][T26430] bond62: (slave wireguard2): Releasing backup interface
[  452.814197][T26440] Bluetooth: hci0: Opcode 0x080f failed: -22
[  452.872284][T26446] netlink: 'syz.1.5961': attribute type 11 has an invalid length.
[  453.852927][T26507] C: renamed from team_slave_0
[  454.538441][T26554] __nla_validate_parse: 88 callbacks suppressed
[  454.538457][T26554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5996'.
[  454.551006][T26554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5996'.
[  454.586139][T26559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5998'.
[  454.589741][T26559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5998'.
[  454.831073][ T5240] Bluetooth: hci0: command tx timeout
[  454.848761][T26581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6004'.
[  454.915904][T26587] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6006'.
[  454.919436][T26587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6006'.
[  454.943348][T26587] 8021q: adding VLAN 0 to HW filter on device bond83
[  454.958414][T26587] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  454.968146][T26587] bond83: (slave macvlan0): Enslaving as an active interface with an up link
[  455.069385][T26603] netlink: zone id is out of range
[  455.074101][T26603] netlink: zone id is out of range
[  455.076133][T26603] netlink: zone id is out of range
[  455.078153][T26603] netlink: zone id is out of range
[  455.080744][T26603] netlink: zone id is out of range
[  455.086800][T26603] netlink: zone id is out of range
[  455.088825][T26603] netlink: zone id is out of range
[  455.090807][T26603] netlink: zone id is out of range
[  455.092461][T26603] netlink: zone id is out of range
[  455.095033][T26603] netlink: zone id is out of range
[  455.179985][T26613] netpci0: tun_chr_ioctl cmd 1074025681
[  455.300375][T26622] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.6016'.
[  455.304891][T26622] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.6016'.
[  455.449736][T26633] IPVS: set_ctl: invalid protocol: 4 224.0.0.1:20001
[  457.445941][T26690] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6036'.
[  457.476772][T26693] lo speed is unknown, defaulting to 1000
[  457.479455][T26693] lo speed is unknown, defaulting to 1000
[  457.485247][T26693] lo speed is unknown, defaulting to 1000
[  457.959803][T26723] validate_nla: 7 callbacks suppressed
[  457.959814][T26723] netlink: 'syz.0.6046': attribute type 4 has an invalid length.
[  458.035665][T26723] netlink: 'syz.0.6046': attribute type 41 has an invalid length.
[  458.143547][T26734] ip6gre2: entered allmulticast mode
[  458.147534][T26733] tap0: tun_chr_ioctl cmd 1074025680
[  458.190537][T26733] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  458.334421][T26745] netlink: 'syz.0.6054': attribute type 1 has an invalid length.
[  458.338621][T26745] workqueue: Failed to create a rescuer kthread for wq "bond64": -EINTR
[  458.457779][T26756] netlink: 'syz.1.6058': attribute type 10 has an invalid length.
[  458.464268][T26757] netlink: 'syz.1.6058': attribute type 10 has an invalid length.
[  458.757047][T26778] netlink: 'syz.2.6064': attribute type 1 has an invalid length.
[  458.995529][T26795] netlink: 'syz.2.6071': attribute type 5 has an invalid length.
[  481.668706][T26837] netlink: 'syz.0.6082': attribute type 1 has an invalid length.
[  481.679836][T26827] lo speed is unknown, defaulting to 1000
[  481.684447][T26827] lo speed is unknown, defaulting to 1000
[  481.688048][T26827] lo speed is unknown, defaulting to 1000
[  481.744890][T26843] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  481.791772][T26842] __nla_validate_parse: 11 callbacks suppressed
[  481.791783][T26842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6084'.
[  481.812336][T26853] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6085'.
[  482.125291][T26874] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6089'.
[  482.288392][   T33] audit: type=1800 audit(1755308869.589:8): pid=26878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6089" name="memory.events" dev="tmpfs" ino=9889 res=0 errno=0
[  482.459980][T26887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6092'.
[  482.474138][T26887] net_ratelimit: 16 callbacks suppressed
[  482.474150][T26887] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  482.715465][T26912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6098'.
[  483.099224][T26935] syzkaller0: entered allmulticast mode
[  483.116434][T26935] syzkaller0 (unregistering): left allmulticast mode
[  483.291299][T26940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6106'.
[  483.472033][T26956] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.6111'.
[  483.476557][T26956] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.6111'.
[  483.551670][T26960] netlink: 'syz.0.6112': attribute type 1 has an invalid length.
[  483.554603][T26960] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6112'.
[  483.557513][T26960] netlink: 97 bytes leftover after parsing attributes in process `syz.0.6112'.
[  483.561260][T26960] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  484.152550][   T33] audit: type=1804 audit(1755308871.449:9): pid=26978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6116" name="/newroot/2130/cgroup.controllers" dev="tmpfs" ino=10890 res=1 errno=0
[  484.160176][   T33] audit: type=1800 audit(1755308871.449:10): pid=26978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6116" name="cgroup.controllers" dev="tmpfs" ino=10890 res=0 errno=0
[  485.143056][T27002] netlink: 'syz.0.6122': attribute type 29 has an invalid length.
[  485.169540][T27006] netlink: 'syz.2.6124': attribute type 1 has an invalid length.
[  485.338584][T27015] syzkaller0: entered promiscuous mode
[  485.343136][T27015] syzkaller0: entered allmulticast mode
[  485.366881][T27020] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  485.589189][T27041] netlink: 'syz.1.6132': attribute type 1 has an invalid length.
[  485.597574][T27042] netlink: 'syz.0.6128': attribute type 1 has an invalid length.
[  485.605775][T27042] netlink: 'syz.0.6128': attribute type 1 has an invalid length.
[  486.656130][T27020] tipc: Disabling bearer <eth:syzkaller0>
[  486.946745][T27080] __nla_validate_parse: 11 callbacks suppressed
[  486.946757][T27080] netlink: 124 bytes leftover after parsing attributes in process `syz.2.6144'.
[  486.969094][T27082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6145'.
[  488.043714][   T13] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6
[  488.047318][T27138] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6157'.
[  488.167447][T27146] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6162'.
[  488.356448][T27167] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.6168'.
[  488.547892][T27179] dvmrp8: entered allmulticast mode
[  488.551927][T27178] dvmrp8: left allmulticast mode
[  488.634410][T27186] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6172'.
[  488.694631][T27190] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6174'.
[  488.697956][T27190] 1{X: entered promiscuous mode
[  488.699644][T27190] 1{X: left allmulticast mode
[  488.705573][T27190] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6174'.
[  488.708477][T27190] 0{X: renamed from 31{X
[  488.711459][T27190] 0{X: left promiscuous mode
[  488.713404][T27190] 0{X: entered allmulticast mode
[  488.716849][T27190] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  488.993796][T27204] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6179'.
[  489.153047][T27210] netlink: 'syz.2.6182': attribute type 2 has an invalid length.
[  489.156945][T27210] netlink: 'syz.2.6182': attribute type 1 has an invalid length.
[  489.160614][T27210] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6182'.
[  489.258698][T27225] netlink: 'syz.2.6188': attribute type 1 has an invalid length.
[  489.428192][T27235] netlink: 'syz.2.6192': attribute type 5 has an invalid length.
[  489.431461][T27236] netlink: 'syz.2.6192': attribute type 5 has an invalid length.
[  490.176335][T27301] netlink: 'syz.1.6215': attribute type 4 has an invalid length.
[  490.198692][T27300] lo speed is unknown, defaulting to 1000
[  490.212003][T27300] lo speed is unknown, defaulting to 1000
[  490.214804][T27300] lo speed is unknown, defaulting to 1000
[  490.866026][T27326] netlink: 'syz.1.6224': attribute type 6 has an invalid length.
[  490.868577][T27326] netlink: 'syz.1.6224': attribute type 5 has an invalid length.
[  490.911568][T27326] netlink: 'syz.1.6224': attribute type 1 has an invalid length.
[  491.106950][T27337] netlink: 'syz.1.6228': attribute type 1 has an invalid length.
[  491.908631][T27377] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  491.915050][T27377] syzkaller0: entered promiscuous mode
[  491.916769][T27377] syzkaller0: entered allmulticast mode
[  492.047131][T27387] lo speed is unknown, defaulting to 1000
[  492.049954][T27387] lo speed is unknown, defaulting to 1000
[  492.052872][T27387] lo speed is unknown, defaulting to 1000
[  492.057886][T27390] lo speed is unknown, defaulting to 1000
[  492.063949][T27390] lo speed is unknown, defaulting to 1000
[  492.161611][T27390] lo speed is unknown, defaulting to 1000
[  492.383931][T27397] lo speed is unknown, defaulting to 1000
[  492.386834][T27397] lo speed is unknown, defaulting to 1000
[  492.389491][T27397] lo speed is unknown, defaulting to 1000
[  492.401845][T27404] syzkaller1: entered promiscuous mode
[  492.403931][T27404] syzkaller1: entered allmulticast mode
[  492.560146][T27413] __nla_validate_parse: 17 callbacks suppressed
[  492.560156][T27413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6248'.
[  492.568717][T27415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6248'.
[  492.843852][T27420] gtp2: left promiscuous mode
[  492.845401][T27420] gtp2: left allmulticast mode
[  492.853041][T27420] ip6gre2: left allmulticast mode
[  492.866442][T24581] lo speed is unknown, defaulting to 1000
[  492.868526][T24581] syz1: Port: 1 Link DOWN
[  492.892047][T27430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6254'.
[  493.026632][T27437] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6256'.
[  493.091388][T27439] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6257'.
[  493.258425][T27447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6258'.
[  493.261985][T27448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6258'.
[  493.335826][T27452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6262'.
[  493.412744][T27455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6263'.
[  493.421266][   T33] audit: type=1800 audit(1755308880.729:11): pid=27456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6262" name="memory.events" dev="tmpfs" ino=10251 res=0 errno=0
[  493.436217][   T33] audit: type=1804 audit(1755308880.739:12): pid=27456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.6262" name="/newroot/2004/memory.events" dev="tmpfs" ino=10251 res=1 errno=0
[  493.589198][T27459] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6263'.
[  493.683977][T27472] IPv6: Can't replace route, no match found
[  493.781659][ T3143] lo speed is unknown, defaulting to 1000
[  493.783559][ T3143] syz1: Port: 1 Link ACTIVE
[  493.904617][ T5855] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  493.910913][T27496] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  494.237165][T27526] pim6reg1: entered promiscuous mode
[  494.243860][T27526] pim6reg1: entered allmulticast mode
[  494.633365][T27536] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  494.734016][T27542] validate_nla: 6 callbacks suppressed
[  494.734032][T27542] netlink: 'syz.0.6290': attribute type 2 has an invalid length.
[  494.841887][T27549] netlink: 'syz.0.6292': attribute type 4 has an invalid length.
[  494.855556][ T5908] lo speed is unknown, defaulting to 1000
[  494.857938][ T5908] syz1: Port: 1 Link DOWN
[  494.860619][T27549] netlink: 'syz.0.6292': attribute type 4 has an invalid length.
[  494.867735][ T5908] lo speed is unknown, defaulting to 1000
[  494.870901][ T5908] syz1: Port: 1 Link ACTIVE
[  494.961017][T24581] lo speed is unknown, defaulting to 1000
[  494.962860][T24581] syz1: Port: 1 Link DOWN
[  495.010113][T27555] lo speed is unknown, defaulting to 1000
[  495.021299][T27555] lo speed is unknown, defaulting to 1000
[  495.023915][T27555] lo speed is unknown, defaulting to 1000
[  496.247453][T27620] netlink: 'syz.2.6312': attribute type 4 has an invalid length.
[  496.415406][T27627] nbd: must specify at least one socket
[  496.525924][ T3143] lo speed is unknown, defaulting to 1000
[  496.527905][ T3143] syz0: Port: 1 Link DOWN
[  496.532418][T27629] lo speed is unknown, defaulting to 1000
[  496.589289][T27634] netlink: 'syz.2.6316': attribute type 1 has an invalid length.
[  496.613237][T27634] bond84: (slave vti1): The slave device specified does not support setting the MAC address
[  496.616708][T27634] bond84: (slave vti1): Setting fail_over_mac to active for active-backup mode
[  496.621350][T27634] bond84: (slave vti1): making interface the new active one
[  496.624396][T27634] bond84: (slave vti1): Enslaving as an active interface with an up link
[  496.908724][T27654] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[  496.996526][T27663] netlink: del zone limit has 4 unknown bytes
[  497.166635][T27680] lo speed is unknown, defaulting to 1000
[  497.169222][T27680] lo speed is unknown, defaulting to 1000
[  497.174471][T27680] lo speed is unknown, defaulting to 1000
[  497.204920][T27683] netlink: 'syz.0.6331': attribute type 13 has an invalid length.
[  497.233847][T27683] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  497.238648][ T5908] lo speed is unknown, defaulting to 1000
[  497.240959][ T5908] syz1: Port: 1 Link ACTIVE
[  497.424522][T27700] netlink: 'syz.1.6338': attribute type 4 has an invalid length.
[  497.508984][T27706] netlink: 'syz.1.6340': attribute type 4 has an invalid length.
[  497.695233][T27712] __nla_validate_parse: 10 callbacks suppressed
[  497.695243][T27712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6342'.
[  497.703833][T27712] netlink: 18252 bytes leftover after parsing attributes in process `syz.1.6342'.
[  497.739264][T27716] openvswitch: netlink: Message has 4 unknown bytes.
[  497.923672][T27721] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode
[  497.959574][T27724] syzkaller0: entered promiscuous mode
[  497.964929][T27724] syzkaller0: entered allmulticast mode
[  497.969190][T27723] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  498.246052][T27744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6349'.
[  498.285584][T27748] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6351'.
[  498.540032][T27778] syzkaller1: entered promiscuous mode
[  498.542248][T27778] syzkaller1: entered allmulticast mode
[  498.544930][T27776] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6362'.
[  498.545442][T27778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6363'.
[  498.548242][T27776] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  498.554401][T27774] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6361'.
[  498.625251][T27784] netlink: 'syz.2.6365': attribute type 1 has an invalid length.
[  498.627663][T27784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6365'.
[  498.634248][T27784] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6365'.
[  498.698968][T27792] lo speed is unknown, defaulting to 1000
[  498.701826][T27792] lo speed is unknown, defaulting to 1000
[  498.704320][T27792] lo speed is unknown, defaulting to 1000
[  498.749253][T27797] sctp: [Deprecated]: syz.2.6370 (pid 27797) Use of struct sctp_assoc_value in delayed_ack socket option.
[  498.749253][T27797] Use struct sctp_sack_info instead
[  499.163837][T27820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6376'.
[  500.104108][T27897] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  500.651959][T27933] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  500.678607][T27933] syzkaller0: entered promiscuous mode
[  500.680389][T27933] syzkaller0: entered allmulticast mode
[  500.696438][T27933] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  500.979453][T27962] bond80: (slave bridge18): Releasing active interface
[  501.053902][T27965] dvmrp8: entered allmulticast mode
[  501.083048][T27954] dvmrp8: left allmulticast mode
[  501.113798][T27967] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  501.120018][T27967] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  501.142450][T27960] ip6gretap3: entered promiscuous mode
[  501.152612][ T1362] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  501.187032][T27975] netlink: 'syz.0.6426': attribute type 2 has an invalid length.
[  502.038775][T27998] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  502.043657][T27997] IPVS: stopping backup sync thread 27998 ...
[  502.133240][T28003] lo speed is unknown, defaulting to 1000
[  502.136930][T28003] lo speed is unknown, defaulting to 1000
[  502.156980][T28003] lo speed is unknown, defaulting to 1000
[  502.276202][T28013] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  502.279074][T28013] IPv6: NLM_F_CREATE should be set when creating new route
[  502.306939][T28013] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  502.314517][T28016] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  502.315141][T28015] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  502.318507][T28016] syzkaller0: entered promiscuous mode
[  502.323680][T28016] syzkaller0: entered allmulticast mode
[  502.570589][T28028] syzkaller1: entered promiscuous mode
[  502.572340][T28028] syzkaller1: entered allmulticast mode
[  503.131563][T28078] tun0: tun_chr_ioctl cmd 2147767520
[  503.133550][T28074] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  503.352081][T28101] __nla_validate_parse: 22 callbacks suppressed
[  503.352093][T28101] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6462'.
[  503.522393][T28116] bridge0: entered promiscuous mode
[  503.524067][T28116] bridge0: entered allmulticast mode
[  503.531703][T28115] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  503.538400][T28117] delete_channel: no stack
[  503.555769][T28114] tipc: Disabling bearer <eth:syzkaller0>
[  503.732088][T28137] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6471'.
[  503.735891][T28137] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6471'.
[  503.739912][T28136] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6472'.
[  503.757811][T28136] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6472'.
[  503.897923][T28149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6476'.
[  503.935173][T28157] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6478'.
[  503.938127][T28157] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6478'.
[  503.941373][T28157] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6478'.
[  503.944896][T28157] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6478'.
[  504.005920][T28164] netlink: 'syz.0.6481': attribute type 1 has an invalid length.
[  531.569237][T28171] __nla_validate_parse: 1 callbacks suppressed
[  531.569249][T28171] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6483'.
[  532.311530][T28194] lo speed is unknown, defaulting to 1000
[  532.315087][T28194] lo speed is unknown, defaulting to 1000
[  532.318676][T28194] lo speed is unknown, defaulting to 1000
[  532.559276][T28200] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6490'.
[  532.686580][T28202] netlink: 'syz.0.6491': attribute type 1 has an invalid length.
[  532.689610][T28202] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6491'.
[  532.739533][T28204] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6492'.
[  532.845617][T28216] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  532.848841][T28216] syzkaller0: entered promiscuous mode
[  532.851933][T28216] syzkaller0: entered allmulticast mode
[  532.857085][T28216] tipc: Resetting bearer <eth:syzkaller0>
[  532.869570][T28216] tipc: Resetting bearer <eth:syzkaller0>
[  532.880710][T28216] tipc: Disabling bearer <eth:syzkaller0>
[  533.328615][T28249] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6505'.
[  533.368983][T28252] netlink: 277 bytes leftover after parsing attributes in process `syz.0.6506'.
[  533.418646][T28260] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6509'.
[  533.423232][T28260] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6509'.
[  533.427397][T28260] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6509'.
[  533.830139][T28287] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  533.853599][T28287] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  533.861543][T28287] sch_tbf: burst 2 is lower than device lo mtu (11337746) !
[  533.989771][T28294] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6516'.
[  534.026234][T28297] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  534.029156][T28297] netlink: 'syz.0.6517': attribute type 1 has an invalid length.
[  534.033118][T28297] netlink: 'syz.0.6517': attribute type 2 has an invalid length.
[  534.036558][T28297] netlink: 'syz.0.6517': attribute type 1 has an invalid length.
[  534.039598][T28297] netlink: 'syz.0.6517': attribute type 2 has an invalid length.
[  534.061871][T28299] sock: sock_timestamping_bind_phc: sock not bind to device
[  534.412978][T28314] netlink: 'syz.0.6523': attribute type 2 has an invalid length.
[  534.616400][T28327] syzkaller0: entered promiscuous mode
[  534.618181][T28327] syzkaller0: entered allmulticast mode
[  534.694401][T28333] netlink: 'syz.2.6530': attribute type 1 has an invalid length.
[  534.729346][T28333] bond85: (slave vxcan7): The slave device specified does not support setting the MAC address
[  534.749128][T28333] bond85: (slave vxcan7): Error -95 calling set_mac_address
[  534.764014][ T5863] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  534.766452][ T5863] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  534.768988][ T5863] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  534.780798][ T5863] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  534.906210][T28349] netlink: 'syz.2.6536': attribute type 1 has an invalid length.
[  534.922686][T28349] 8021q: adding VLAN 0 to HW filter on device bond86
[  535.083888][T28365] netlink: 'syz.0.6539': attribute type 1 has an invalid length.
[  535.404348][T28395] openvswitch: netlink: Message has 1 unknown bytes.
[  535.406643][T28395] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  535.410176][T28393] openvswitch: netlink: Message has 8 unknown bytes.
[  535.447272][T28403] netlink: 'syz.0.6552': attribute type 10 has an invalid length.
[  535.619962][T28417] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  535.626087][T28417] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  535.717652][T28419] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  536.030771][ T5240] Bluetooth: hci0: command tx timeout
[  536.441861][T28469] lo speed is unknown, defaulting to 1000
[  536.445586][T28469] lo speed is unknown, defaulting to 1000
[  536.449296][T28469] lo speed is unknown, defaulting to 1000
[  536.651739][T28489] smc: removing net device bond0 with user defined pnetid SYZ2
[  536.655034][T28489] bond0 (unregistering): Released all slaves
[  536.963256][T28499] __nla_validate_parse: 28 callbacks suppressed
[  536.963268][T28499] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6580'.
[  537.036673][T28500] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6580'.
[  537.039815][T28500] netlink: 19 bytes leftover after parsing attributes in process `syz.2.6580'.
[  537.043274][T28500] netlink: 19 bytes leftover after parsing attributes in process `syz.2.6580'.
[  537.088398][T28502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6581'.
[  537.120654][T28502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6581'.
[  537.126865][T28502] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  537.144956][T28502] smc: adding net device bond0 with user defined pnetid SYZ2
[  537.340991][T28505] lo speed is unknown, defaulting to 1000
[  537.374464][T28505] lo speed is unknown, defaulting to 1000
[  537.377874][T28505] lo speed is unknown, defaulting to 1000
[  537.843208][T28528] syzkaller0: entered promiscuous mode
[  537.845123][T28528] syzkaller0: entered allmulticast mode
[  537.852450][T28528] validate_nla: 4 callbacks suppressed
[  537.852463][T28528] netlink: 'syz.0.6589': attribute type 1 has an invalid length.
[  537.892105][T28538] netlink: 'syz.2.6591': attribute type 3 has an invalid length.
[  538.029205][T28544] netlink: 'syz.2.6592': attribute type 14 has an invalid length.
[  538.125222][T28550] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6593'.
[  538.136620][T28551] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6595'.
[  538.141947][T28551] netlink: 'syz.0.6595': attribute type 13 has an invalid length.
[  538.144598][T28551] netlink: 'syz.0.6595': attribute type 17 has an invalid length.
[  538.155326][T28551] bridge0: left promiscuous mode
[  538.156937][T28551] bridge0: left allmulticast mode
[  538.162634][T28551] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  538.184896][T28551] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6595'.
[  538.227871][T28551] lo speed is unknown, defaulting to 1000
[  538.242021][T28551] lo speed is unknown, defaulting to 1000
[  538.245711][T28551] lo speed is unknown, defaulting to 1000
[  538.322278][T28563] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6598'.
[  538.431909][T28567] openvswitch: netlink: Flow key attr not present in new flow.
[  539.046993][T28620] netlink: 'syz.0.6617': attribute type 1 has an invalid length.
[  562.593438][ T1362] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  565.030777][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  565.033676][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  565.114236][T28651] __nla_validate_parse: 18 callbacks suppressed
[  565.114253][T28651] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6625'.
[  565.240790][T28655] nbd10: detected capacity change from 0 to 127
[  565.264507][ T6761] block nbd10: Receive control failed (result -32)
[  565.275165][T28659] netlink: 'syz.2.6628': attribute type 4 has an invalid length.
[  565.607265][T28688] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6637'.
[  565.707212][T28699] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6639'.
[  565.722443][T28699] 0{X: renamed from gretap0
[  565.726984][T28699] 0{X: entered allmulticast mode
[  565.737675][T28699] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  565.815733][T28699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6639'.
[  565.843261][T28708] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6641'.
[  565.851508][T28708] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6641'.
[  565.860991][T28708] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  566.055271][T28728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6647'.
[  566.114175][T28713] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[  566.168279][T28718] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6643'.
[  566.259910][T28734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6648'.
[  566.274872][T28734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6648'.
[  568.409358][T28885] netlink: 'syz.0.6682': attribute type 4 has an invalid length.
[  568.409404][T28886] netlink: 'syz.0.6682': attribute type 4 has an invalid length.
[  568.415676][T28873] openvswitch: netlink: Message has 8 unknown bytes.
[  568.419253][ T5908] lo speed is unknown, defaulting to 1000
[  568.422572][ T5908] syz1: Port: 1 Link DOWN
[  568.431948][ T3143] lo speed is unknown, defaulting to 1000
[  568.434059][ T3143] syz1: Port: 1 Link ACTIVE
[  568.863224][T28938] veth18: entered allmulticast mode
[  569.019031][T28945] lo speed is unknown, defaulting to 1000
[  569.025834][T28945] lo speed is unknown, defaulting to 1000
[  569.029842][T28945] lo speed is unknown, defaulting to 1000
[  569.165302][T28946] netlink: 'syz.0.6699': attribute type 13 has an invalid length.
[  569.167792][T28946] netlink: 'syz.0.6699': attribute type 17 has an invalid length.
[  569.172835][T28946] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  569.522735][T28954] netlink: 'syz.2.6702': attribute type 10 has an invalid length.
[  569.700150][T28965] lo speed is unknown, defaulting to 1000
[  569.708655][T28965] lo speed is unknown, defaulting to 1000
[  569.713969][T28965] lo speed is unknown, defaulting to 1000
[  570.220709][T29006] netlink: 'syz.2.6716': attribute type 10 has an invalid length.
[  570.239870][T29005] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  570.379719][T29022] __nla_validate_parse: 18 callbacks suppressed
[  570.379729][T29022] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6721'.
[  570.414290][T29026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6723'.
[  570.502446][  T365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  570.505900][  T365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  570.513234][T29039] netlink: 'syz.1.6726': attribute type 2 has an invalid length.
[  570.526844][T29039] : entered promiscuous mode
[  570.538321][T29042] netlink: 'syz.2.6728': attribute type 4 has an invalid length.
[  570.639049][T29048] lo speed is unknown, defaulting to 1000
[  570.649836][T29048] lo speed is unknown, defaulting to 1000
[  570.655723][T29048] lo speed is unknown, defaulting to 1000
[  570.667963][T29056] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  570.678314][T29056] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  571.251798][T29082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6737'.
[  571.354853][T29093] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6739'.
[  571.390170][T29093] bond83 (unregistering): Released all slaves
[  571.559574][T29102] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6740'.
[  571.587644][T29104] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6742'.
[  571.587827][T29105] netlink: 'syz.1.6742': attribute type 10 has an invalid length.
[  571.818928][T29115] lo speed is unknown, defaulting to 1000
[  571.824610][T29115] lo speed is unknown, defaulting to 1000
[  571.827549][T29115] lo speed is unknown, defaulting to 1000
[  571.862274][T29117] netlink: 192 bytes leftover after parsing attributes in process `syz.1.6744'.
[  571.877892][T29117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6744'.
[  571.936005][T29117] netlink: 'syz.1.6744': attribute type 2 has an invalid length.
[  571.939612][T29117] netlink: 'syz.1.6744': attribute type 2 has an invalid length.
[  572.424642][T29165] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  572.463693][T29168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6753'.
[  572.476208][T29167] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  572.827555][T29186] netlink: 'syz.1.6758': attribute type 1 has an invalid length.
[  572.850520][T29186] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  573.473538][T29194] bridge0: port 1(erspan0) entered blocking state
[  573.476389][T29194] bridge0: port 1(erspan0) entered disabled state
[  573.479149][T29194] erspan0: entered allmulticast mode
[  573.485049][T29194] erspan0: entered promiscuous mode
[  573.617514][T29198] nbd: couldn't find device at index 536870912
[  573.620041][T29197] nbd: couldn't find device at index 536870912
[  573.620256][T29198] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6760'.
[  573.848423][T29210] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[  573.930796][T29221] lo speed is unknown, defaulting to 1000
[  573.933951][T29221] lo speed is unknown, defaulting to 1000
[  573.936899][T29221] lo speed is unknown, defaulting to 1000
[  574.819981][T29282] lo speed is unknown, defaulting to 1000
[  574.834712][T29282] lo speed is unknown, defaulting to 1000
[  574.837626][T29282] lo speed is unknown, defaulting to 1000
[  574.868140][T29286] netlink: 'syz.0.6785': attribute type 21 has an invalid length.
[  574.870828][T29286] netlink: 'syz.0.6785': attribute type 6 has an invalid length.
[  575.032256][T29291] netlink: 'syz.1.6788': attribute type 1 has an invalid length.
[  575.243417][T29303] lo speed is unknown, defaulting to 1000
[  575.246256][T29303] lo speed is unknown, defaulting to 1000
[  575.248978][T29303] lo speed is unknown, defaulting to 1000
[  575.467570][T29322] lo speed is unknown, defaulting to 1000
[  575.683821][T29342] __nla_validate_parse: 10 callbacks suppressed
[  575.683833][T29342] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6804'.
[  575.780254][T29349] netlink: 596 bytes leftover after parsing attributes in process `syz.0.6804'.
[  575.995790][ T5863] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x82
[  576.101327][T29359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6808'.
[  576.151499][T29375] netlink: 'syz.1.6810': attribute type 9 has an invalid length.
[  576.206561][T29375] netlink: 'syz.1.6810': attribute type 6 has an invalid length.
[  577.083050][T29398] netlink: 'syz.1.6816': attribute type 12 has an invalid length.
[  577.086218][T29398] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6816'.
[  577.124973][T29398] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6816'.
[  577.427642][T29405] netlink: 'syz.2.6818': attribute type 1 has an invalid length.
[  577.452913][T29405] 8021q: adding VLAN 0 to HW filter on device bond87
[  577.459896][T29405] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6818'.
[  577.718999][T29415] netlink: 324 bytes leftover after parsing attributes in process `syz.2.6821'.
[  577.728679][T29415] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6821'.
[  577.734024][T29415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6821'.
[  577.745249][T29415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6821'.
[  577.862127][T29425] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  577.880080][T29427] IPVS: length: 150 != 84136430776
[  577.937006][T29425] netlink: 'syz.2.6823': attribute type 3 has an invalid length.
[  577.968853][T29432] openvswitch: netlink: Flow key attr not present in new flow.
[  577.997810][T29432] IPv6: Can't replace route, no match found
[  578.089855][T29449] tipc: Enabled bearer <eth:vlan0>, priority 21
[  578.180952][T29464] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  578.211179][T29468] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  578.214863][T29468] syzkaller0: entered promiscuous mode
[  578.216570][T29468] syzkaller0: entered allmulticast mode
[  578.217235][T29470] netlink: 'syz.1.6839': attribute type 62 has an invalid length.
[  578.222123][T29464] netlink: 'syz.0.6836': attribute type 3 has an invalid length.
[  578.707188][T29516] siw: device registration error -23
[  578.808194][T29518] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  578.814352][T29518] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  579.072711][T29527] netlink: 'syz.1.6849': attribute type 39 has an invalid length.
[  579.285161][T29539] sctp: [Deprecated]: syz.1.6854 (pid 29539) Use of int in maxseg socket option.
[  579.285161][T29539] Use struct sctp_assoc_value instead
[  579.647744][T29566] netlink: 'syz.1.6862': attribute type 83 has an invalid length.
[  579.863713][T29586] netlink: 'syz.1.6868': attribute type 12 has an invalid length.
[  579.931225][T29590] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20001
[  580.222826][T29603] tipc: Enabling of bearer <ib:ip6gre0> rejected, max 3 bearers permitted
[  580.905857][T29612] lo speed is unknown, defaulting to 1000
[  580.911823][T29613] lo speed is unknown, defaulting to 1000
[  580.915815][T29612] lo speed is unknown, defaulting to 1000
[  580.927832][T29613] lo speed is unknown, defaulting to 1000
[  580.929770][T29615] __nla_validate_parse: 11 callbacks suppressed
[  580.929780][T29615] netlink: 14453 bytes leftover after parsing attributes in process `syz.1.6876'.
[  580.931468][T29612] lo speed is unknown, defaulting to 1000
[  581.133055][T29613] lo speed is unknown, defaulting to 1000
[  581.226897][T29625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6878'.
[  581.258897][T29630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6879'.
[  581.864292][T29660] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6886'.
[  581.868760][T29664] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6886'.
[  581.882794][T29667] validate_nla: 3 callbacks suppressed
[  581.882806][T29667] netlink: 'syz.0.6887': attribute type 29 has an invalid length.
[  581.888184][T29667] netlink: 'syz.0.6887': attribute type 29 has an invalid length.
[  581.893277][T29667] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  581.898969][T29658] netlink: 'syz.2.6885': attribute type 10 has an invalid length.
[  581.965247][T29675] netlink: zone id is out of range
[  581.967034][T29675] netlink: zone id is out of range
[  581.968739][T29675] netlink: zone id is out of range
[  581.973447][T29675] netlink: zone id is out of range
[  581.975107][T29675] netlink: zone id is out of range
[  581.978057][T29675] netlink: zone id is out of range
[  581.978499][T29672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6889'.
[  581.979787][T29675] netlink: zone id is out of range
[  581.985965][T29675] netlink: zone id is out of range
[  581.988215][T29675] netlink: zone id is out of range
[  582.055758][T29683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6892'.
[  582.058531][T29681] netlink: 'syz.0.6891': attribute type 1 has an invalid length.
[  582.059441][T29683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6892'.
[  582.064108][T29681] netlink: 184 bytes leftover after parsing attributes in process `syz.0.6891'.
[  582.068777][T29681] netlink: 'syz.0.6891': attribute type 1 has an invalid length.
[  582.193531][T29601] Bluetooth: hci2: command 0x0405 tx timeout
[  582.210796][T29695] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6895'.
[  582.219768][T29700] netlink: 'syz.2.6896': attribute type 1 has an invalid length.
[  582.269580][T29704] netlink: 'syz.2.6898': attribute type 1 has an invalid length.
[  582.308023][T29704] 8021q: adding VLAN 0 to HW filter on device bond88
[  582.313736][T29708] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  582.316747][T29708] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  582.479548][T29714] bond89: entered promiscuous mode
[  582.482952][T29714] bond89: entered allmulticast mode
[  582.485704][T29714] 8021q: adding VLAN 0 to HW filter on device bond89
[  582.959937][T29742] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  582.968228][T29738] netlink: 'syz.1.6906': attribute type 9 has an invalid length.
[  582.972398][T29742] syzkaller0: entered promiscuous mode
[  582.974543][T29742] syzkaller0: entered allmulticast mode
[  583.358971][T29774] net_ratelimit: 17 callbacks suppressed
[  583.358983][T29774] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  583.364916][T29773] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  583.368760][T29770] netlink: 'syz.1.6914': attribute type 2 has an invalid length.
[  583.488859][T29787] bridge35: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  583.666828][T29797] netlink: 'syz.1.6920': attribute type 1 has an invalid length.
[  583.815769][T29807] smc: net device bond0 applied user defined pnetid SYZ2
[  584.032610][T29830] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[  584.035011][T29830] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  584.038674][T29830] netlink: 'syz.2.6932': attribute type 11 has an invalid length.
[  584.117211][T29836] openvswitch: netlink: IPv4 tun info is not correct
[  584.126584][T29836] vlan0: entered promiscuous mode
[  584.128364][T29836] hsr_slave_1: entered promiscuous mode
[  584.130246][T29836] vlan0: entered allmulticast mode
[  584.140481][T29836] hsr_slave_1: entered allmulticast mode
[  584.199537][T29840] bridge_slave_1: default FDB implementation only supports local addresses
[  584.209419][T29840] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  584.348977][T29846] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  584.525079][T29853] 8021q: adding VLAN 0 to HW filter on device bond83
[  584.614990][T29856] tipc: Resetting bearer <ib:ip6gre0>
[  584.696157][   T24] lo speed is unknown, defaulting to 1000
[  584.698187][   T24] syz1: Port: 1 Link DOWN
[  584.713855][ T5863] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  584.717149][ T5863] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  584.721373][ T5863] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  584.740218][ T5863] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  585.139325][T29903] lo speed is unknown, defaulting to 1000
[  585.146875][T29903] lo speed is unknown, defaulting to 1000
[  585.150223][T29903] lo speed is unknown, defaulting to 1000
[  585.356324][T29917] bond0: peer notification delay (198) is not a multiple of miimon (100), value rounded to 100 ms
[  585.361877][T29917] bond0: entered promiscuous mode
[  585.363861][T29917] bond0: entered allmulticast mode
[  585.366041][T29917] 8021q: adding VLAN 0 to HW filter on device bond0
[  585.375687][T29917] batadv2: entered promiscuous mode
[  585.377366][T29917] batadv2: entered allmulticast mode
[  585.747544][T29938] pim6reg: entered allmulticast mode
[  585.749737][T29939] pim6reg: left allmulticast mode
[  585.874092][T29951] batadv1: entered promiscuous mode
[  586.004730][T29957] __nla_validate_parse: 30 callbacks suppressed
[  586.004742][T29957] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6965'.
[  586.209267][T29981] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6974'.
[  586.212716][T29981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6974'.
[  586.224326][T29981] tipc: Resetting bearer <ib:ip6gre0>
[  586.305763][T29993] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  586.405032][T30001] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  586.408972][T29996] lo speed is unknown, defaulting to 1000
[  586.412441][T29996] lo speed is unknown, defaulting to 1000
[  586.418124][T29996] lo speed is unknown, defaulting to 1000
[  586.434755][T30001] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6978'.
[  586.646055][T30021] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6984'.
[  586.659175][T30021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6984'.
[  586.782947][T30031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6987'.
[  587.097221][T30039] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6988'.
[  587.100871][T30035] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6988'.
[  587.268216][T30047] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.6991'.
[  587.497822][T30052] validate_nla: 15 callbacks suppressed
[  587.497838][T30052] netlink: 'syz.0.6992': attribute type 29 has an invalid length.
[  587.765386][T30059] can: request_module (can-proto-0) failed.
[  588.035794][T30074] openvswitch: netlink: IP tunnel dst address not specified
[  588.105834][T30072] dvmrp8: entered allmulticast mode
[  588.109179][T30071] dvmrp8: left allmulticast mode
[  588.113586][T30077] netlink: 'syz.2.7002': attribute type 1 has an invalid length.
[  588.117040][T30077] netlink: 'syz.2.7002': attribute type 1 has an invalid length.
[  588.232880][T30077] netlink: 'syz.2.7002': attribute type 1 has an invalid length.
[  588.258572][T30077] 8021q: adding VLAN 0 to HW filter on device bond91
[  588.273980][T30077] mac80211_hwsim hwsim27 wlan0: left promiscuous mode
[  588.283542][T30077] bond91: (slave wlan0): Enslaving as an active interface with a down link
[  588.314458][T30077] vlan0: entered allmulticast mode
[  588.316115][T30077] veth1: entered allmulticast mode
[  588.318274][T30077] bond91: (slave vlan0): Opening slave failed
[  588.480042][T30104] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  588.542372][T30111] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  588.548568][T30111] IPv6: NLM_F_CREATE should be set when creating new route
[  588.834575][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  588.837286][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  589.323696][T30134] lo speed is unknown, defaulting to 1000
[  589.804004][T30171] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  589.808244][T30171] syzkaller0: entered promiscuous mode
[  589.811052][T30171] syzkaller0: entered allmulticast mode
[  589.816850][T30171] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  589.845867][T30171] tipc: Resetting bearer <eth:syzkaller0>
[  589.854184][T30170] tipc: Resetting bearer <eth:syzkaller0>
[  589.868472][T30170] tipc: Disabling bearer <eth:syzkaller0>
[  590.054626][T30193] netlink: 'syz.1.7034': attribute type 20 has an invalid length.
[  590.058262][T30193] netlink: 'syz.1.7034': attribute type 20 has an invalid length.
[  590.296396][T30215] netlink: 'syz.0.7041': attribute type 4 has an invalid length.
[  590.300074][T30211] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  590.398444][T30224] vlan1: entered allmulticast mode
[  590.542067][T30236] netlink: 'syz.1.7048': attribute type 1 has an invalid length.
[  590.547520][T30236] netlink: 'syz.1.7048': attribute type 3 has an invalid length.
[  590.550027][T30236] netlink: 'syz.1.7048': attribute type 1 has an invalid length.
[  590.564507][T30236] NCSI netlink: No device for ifindex 0
[  590.812772][T30260] bond0: left promiscuous mode
[  590.814757][T30260] bond0: left allmulticast mode
[  591.033737][T30282] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  591.157698][T30290] __nla_validate_parse: 11 callbacks suppressed
[  591.157713][T30290] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7059'.
[  591.419534][T30305] nbd: must specify at least one socket
[  591.426952][T30305] netlink: 324 bytes leftover after parsing attributes in process `syz.2.7064'.
[  591.432342][T30305] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7064'.
[  591.435916][T30305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7064'.
[  591.449090][T30305] netlink: 9896 bytes leftover after parsing attributes in process `syz.2.7064'.
[  591.467205][T30305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7064'.
[  591.471729][T30305] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7064'.
[  591.601465][T30310] lo speed is unknown, defaulting to 1000
[  591.612124][T30310] lo speed is unknown, defaulting to 1000
[  591.615715][T30310] lo speed is unknown, defaulting to 1000
[  592.285558][T30365] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  592.345165][T29152] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  592.544802][T30376] validate_nla: 1 callbacks suppressed
[  592.544817][T30376] netlink: 'syz.2.7085': attribute type 9 has an invalid length.
[  592.550025][T30376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7085'.
[  592.688419][T30394] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  592.697497][T30395] syzkaller0: entered promiscuous mode
[  592.699721][T30395] syzkaller0: entered allmulticast mode
[  592.706607][T30394] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  592.709712][T30394] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  592.714094][T30398] openvswitch: netlink: Flow actions attr not present in new flow.
[  592.722302][T30394] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  592.725919][T30394] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  592.729449][T30394] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  592.800057][T30398] : renamed from bond_slave_0
[  593.457612][T30463] netlink: 212364 bytes leftover after parsing attributes in process `syz.0.7106'.
[  593.461389][T30463] openvswitch: netlink: Message has 5 unknown bytes.
[  593.464366][T30463] netlink: 212364 bytes leftover after parsing attributes in process `syz.0.7106'.
[  593.467892][T30463] openvswitch: netlink: Message has 5 unknown bytes.
[  593.497623][T30463] openvswitch: netlink: Message has 5 unknown bytes.
[  593.502069][T30463] openvswitch: netlink: Message has 5 unknown bytes.
[  593.505084][T30463] openvswitch: netlink: Message has 5 unknown bytes.
[  593.508311][T30463] openvswitch: netlink: Message has 5 unknown bytes.
[  593.521009][T30463] openvswitch: netlink: Message has 5 unknown bytes.
[  593.543579][T30468] 0{X: left allmulticast mode
[  593.755085][T30487] netlink: 'syz.1.7112': attribute type 10 has an invalid length.
[  593.998708][T30501] netlink: 'syz.2.7116': attribute type 9 has an invalid length.
[  594.441354][T30533] can: request_module (can-proto-0) failed.
[  594.560152][T30542] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  594.564520][T30542] syzkaller0: entered promiscuous mode
[  594.566549][T30542] syzkaller0: entered allmulticast mode
[  594.623670][T30546] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  595.151955][T30582] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  595.155684][T30582] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  595.389632][T30593] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  595.420608][T30593] tipc: Resetting bearer <eth:syzkaller0>
[  595.485564][T30592] tipc: Disabling bearer <eth:syzkaller0>
[  595.613774][T30614] netlink: 'syz.1.7148': attribute type 12 has an invalid length.
[  595.779664][T30632] netlink: 'syz.0.7152': attribute type 5 has an invalid length.
[  595.809960][T30635] netlink: 'syz.1.7153': attribute type 1 has an invalid length.
[  595.826092][T30632] lo speed is unknown, defaulting to 1000
[  595.829601][T30632] lo speed is unknown, defaulting to 1000
[  595.838762][T30632] lo speed is unknown, defaulting to 1000
[  595.911416][T30640] ip6gretap0: entered promiscuous mode
[  595.923917][T30640] macsec0: entered promiscuous mode
[  595.927088][T30640] macsec0: entered allmulticast mode
[  595.934249][T30640] ip6gretap0: entered allmulticast mode
[  595.949612][T30644] pim6reg0: tun_chr_ioctl cmd 1074025677
[  595.956483][T30644] pim6reg0: linktype set to 774
[  596.160220][T30654] erspan0: left allmulticast mode
[  596.165132][T30654] erspan0: left promiscuous mode
[  596.167382][T30654] bridge0: port 1(erspan0) entered disabled state
[  596.225835][T30654] bond91: (slave wlan0): Releasing active interface
[  596.242490][T30654] bond81: (slave bridge17): Releasing active interface
[  596.247216][T30654] bond83: (slave macvlan0): Releasing backup interface
[  596.255787][T30654] bond84: (slave vti1): Releasing backup interface
[  596.280065][T30650] bond84: (slave vxcan1): The slave device specified does not support setting the MAC address
[  596.287573][T30650] bond84: (slave vxcan1): Error -95 calling set_mac_address
[  596.299276][T30655] macvlan0: entered promiscuous mode
[  596.303052][T30655] macvlan0: entered allmulticast mode
[  596.305163][T30655] bond84: (slave macvlan0): Error -98 calling set_mac_address
[  596.505283][T30666] __nla_validate_parse: 81 callbacks suppressed
[  596.505301][T30666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7161'.
[  596.719468][T30683] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  596.722344][T30683] syzkaller0: entered promiscuous mode
[  596.724085][T30683] syzkaller0: entered allmulticast mode
[  596.729986][T30683] tipc: Resetting bearer <eth:syzkaller0>
[  596.736900][T30682] tipc: Resetting bearer <eth:syzkaller0>
[  596.789570][T30682] tipc: Disabling bearer <eth:syzkaller0>
[  596.855344][T30685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7167'.
[  596.859206][T30685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7167'.
[  596.881445][T30685] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  596.887600][T30685] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  596.999391][T30694] netlink: 'syz.0.7169': attribute type 10 has an invalid length.
[  597.007557][T30705] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7171'.
[  597.644560][T30734] GUP no longer grows the stack in syz.0.7179 (30734): 200000003000-20000000a000 (200000001000)
[  597.648900][T30734] CPU: 1 UID: 0 PID: 30734 Comm: syz.0.7179 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  597.648921][T30734] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  597.648931][T30734] Call Trace:
[  597.648937][T30734]  <TASK>
[  597.648944][T30734]  dump_stack_lvl+0x189/0x250
[  597.648970][T30734]  ? __pfx_dump_stack_lvl+0x10/0x10
[  597.648987][T30734]  ? __pfx__printk+0x10/0x10
[  597.649005][T30734]  ? find_vma+0xe7/0x160
[  597.649024][T30734]  ? __lock_acquire+0xab9/0xd20
[  597.649053][T30734]  __get_user_pages+0x24d0/0x2ce0
[  597.649071][T30734]  ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190
[  597.649111][T30734]  ? rcu_is_watching+0x15/0xb0
[  597.649129][T30734]  __gup_longterm_locked+0xde9/0x1660
[  597.649157][T30734]  ? sanity_check_pinned_pages+0x123a/0x1300
[  597.649182][T30734]  gup_fast_fallback+0x1e6a/0x2010
[  597.649225][T30734]  ? __pfx_gup_fast_fallback+0x10/0x10
[  597.649241][T30734]  ? stack_trace_save+0x9c/0xe0
[  597.649256][T30734]  ? __pfx_stack_trace_save+0x10/0x10
[  597.649281][T30734]  ? pin_user_pages_fast+0x4d/0xb0
[  597.649300][T30734]  iov_iter_extract_pages+0x35a/0x5e0
[  597.649322][T30734]  extract_iter_to_sg+0xe46/0x24e0
[  597.649354][T30734]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  597.649387][T30734]  ? __asan_memset+0x22/0x50
[  597.649405][T30734]  af_alg_get_rsgl+0x436/0x810
[  597.649435][T30734]  aead_recvmsg+0x4cc/0x13f0
[  597.649470][T30734]  ? __pfx_aead_recvmsg+0x10/0x10
[  597.649490][T30734]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  597.649506][T30734]  ? __pfx_aead_recvmsg+0x10/0x10
[  597.649524][T30734]  sock_recvmsg_nosec+0x186/0x1c0
[  597.649544][T30734]  ____sys_recvmsg+0x3aa/0x460
[  597.649572][T30734]  ? __pfx_____sys_recvmsg+0x10/0x10
[  597.649606][T30734]  ? import_iovec+0x74/0xa0
[  597.649622][T30734]  ___sys_recvmsg+0x1b5/0x510
[  597.649647][T30734]  ? __pfx____sys_recvmsg+0x10/0x10
[  597.649693][T30734]  ? __might_fault+0xb0/0x130
[  597.649720][T30734]  do_recvmmsg+0x307/0x770
[  597.649748][T30734]  ? __pfx_do_recvmmsg+0x10/0x10
[  597.649767][T30734]  ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0
[  597.649829][T30734]  ? __pfx_do_futex+0x10/0x10
[  597.649861][T30734]  __x64_sys_recvmmsg+0x190/0x240
[  597.649886][T30734]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  597.649906][T30734]  ? rcu_is_watching+0x15/0xb0
[  597.649925][T30734]  ? do_syscall_64+0xbe/0x3b0
[  597.649946][T30734]  do_syscall_64+0xfa/0x3b0
[  597.649963][T30734]  ? lockdep_hardirqs_on+0x9c/0x150
[  597.649979][T30734]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  597.649994][T30734]  ? exc_page_fault+0x9f/0xf0
[  597.650012][T30734]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  597.650026][T30734] RIP: 0033:0x7f8136f8ebe9
[  597.650052][T30734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  597.650065][T30734] RSP: 002b:00007f8137dd8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  597.650081][T30734] RAX: ffffffffffffffda RBX: 00007f81371b5fa0 RCX: 00007f8136f8ebe9
[  597.650091][T30734] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000014
[  597.650100][T30734] RBP: 00007f8137011e19 R08: 0000000000000000 R09: 0000000000000000
[  597.650108][T30734] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[  597.650117][T30734] R13: 00007f81371b6038 R14: 00007f81371b5fa0 R15: 00007ffd81df1ea8
[  597.650141][T30734]  </TASK>
[  597.796068][T30739] netlink: 'syz.2.7181': attribute type 2 has an invalid length.
[  597.799252][T30739] netlink: 'syz.2.7181': attribute type 1 has an invalid length.
[  597.922420][T30748] 8021q: VLANs not supported on nlmon0
[  598.052312][T30754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7187'.
[  598.289352][T30760] netlink: 67 bytes leftover after parsing attributes in process `syz.1.7188'.
[  598.333684][T30762] netlink: 844 bytes leftover after parsing attributes in process `syz.1.7189'.
[  598.979399][T30785] unknown channel width for channel at 909000KHz?
[  598.979585][T30784] lo speed is unknown, defaulting to 1000
[  598.990042][T30784] lo speed is unknown, defaulting to 1000
[  598.994476][T30784] lo speed is unknown, defaulting to 1000
[  599.068289][T30791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7198'.
[  599.077301][T30791] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7198'.
[  599.102108][T30791] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7198'.
[  599.273450][T30787] netlink: 'syz.0.7196': attribute type 13 has an invalid length.
[  599.276297][T30787] netlink: 'syz.0.7196': attribute type 17 has an invalid length.
[  599.326146][T30787] net_ratelimit: 62 callbacks suppressed
[  599.326154][T30787] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  599.334800][T30158] lo speed is unknown, defaulting to 1000
[  599.337736][T30158] syz1: Port: 1 Link ACTIVE
[  599.973340][T30803] 8021q: adding VLAN 0 to HW filter on device bond92
[  599.983050][T30803] bond0: (slave bond92): Enslaving as an active interface with a down link
[  600.110154][T30809] _Z`Ԁ@: entered promiscuous mode
[  600.264931][T30827] netlink: 'syz.2.7211': attribute type 1 has an invalid length.
[  600.291410][T30827] 8021q: adding VLAN 0 to HW filter on device bond93
[  600.387403][T30841] netlink: 'syz.1.7214': attribute type 10 has an invalid length.
[  600.612647][T30865] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  600.789806][T30880] netlink: 'syz.1.7224': attribute type 1 has an invalid length.
[  600.914400][T30886] svc: failed to register nfsdv3 RPC service (errno 111).
[  600.918238][T30886] svc: failed to register nfsaclv3 RPC service (errno 111).
[  601.087646][T30900] netlink: 'syz.1.7229': attribute type 1 has an invalid length.
[  601.092650][T30900] netlink: 'syz.1.7229': attribute type 2 has an invalid length.
[  601.677221][T30919] __nla_validate_parse: 7 callbacks suppressed
[  601.677239][T30919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7235'.
[  601.934554][T30921] block nbd12: server does not support multiple connections per device.
[  601.941322][T30921] block nbd12: shutting down sockets
[  602.203537][T30930] lo speed is unknown, defaulting to 1000
[  602.208180][T30930] lo speed is unknown, defaulting to 1000
[  602.213097][T30930] lo speed is unknown, defaulting to 1000
[  602.699030][T30937] lo speed is unknown, defaulting to 1000
[  602.706031][T30937] lo speed is unknown, defaulting to 1000
[  602.709860][T30937] lo speed is unknown, defaulting to 1000
[  603.045521][T30953] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.7243'.
[  603.067035][T30948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7242'.
[  603.163916][T30963] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7245'.
[  603.265972][T30965] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7246'.
[  603.553975][T30970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7247'.
[  603.895340][T30979] openvswitch: netlink: Message has 28 unknown bytes.
[  604.029496][T30985] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  604.055824][T30985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7253'.
[  604.145846][T30993] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  604.149417][T30994] netlink: 296 bytes leftover after parsing attributes in process `syz.2.7254'.
[  604.163072][T30994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7254'.
[  604.938624][T31004] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  605.003112][T31009] netlink: 19 bytes leftover after parsing attributes in process `syz.2.7259'.
[  605.058051][T31011] nbd: nbd1 already in use
[  605.060223][T31011] block nbd1: NBD_DISCONNECT
[  605.062386][T31011] block nbd1: Send disconnect failed -32
[  605.064420][T31011] block nbd1: shutting down sockets
[  605.349548][T31030] sctp: [Deprecated]: syz.2.7265 (pid 31030) Use of int in maxseg socket option.
[  605.349548][T31030] Use struct sctp_assoc_value instead
[  605.543292][T31039] netlink: 'syz.1.7269': attribute type 1 has an invalid length.
[  605.566897][T31039] 8021q: adding VLAN 0 to HW filter on device bond86
[  606.033626][T31059] dvmrp8: entered allmulticast mode
[  606.050882][T31057] dvmrp8: left allmulticast mode
[  606.193920][T31071] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  606.197423][T31071] syzkaller0: entered promiscuous mode
[  606.199164][T31071] syzkaller0: entered allmulticast mode
[  606.387754][T31089] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode
[  606.426760][T31092] tipc: Resetting bearer <eth:vlan0>
[  606.497582][   T13] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  606.501507][   T13] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  606.514057][T31100] IPVS: stopping backup sync thread 29993 ...
[  606.520903][   T10] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  606.585556][T31103] bridge37: port 1(veth31) entered blocking state
[  606.587970][T31103] bridge37: port 1(veth31) entered disabled state
[  606.590468][T31103] veth31: entered allmulticast mode
[  606.594377][T31103] veth31: entered promiscuous mode
[  606.606353][T31103] bridge37: port 2(veth0_to_bond) entered blocking state
[  606.609783][T31103] bridge37: port 2(veth0_to_bond) entered disabled state
[  606.612917][T31103] veth0_to_bond: entered allmulticast mode
[  606.616435][T31103] veth0_to_bond: entered promiscuous mode
[  606.731324][T31114] lo speed is unknown, defaulting to 1000
[  606.734085][T31114] lo speed is unknown, defaulting to 1000
[  606.738100][T31114] lo speed is unknown, defaulting to 1000
[  606.960875][   T10] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  607.061641][   T10] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  607.299663][T31135] __nla_validate_parse: 14 callbacks suppressed
[  607.299679][T31135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7296'.
[  607.388178][T31146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7300'.
[  607.667550][T31165] netlink: 248 bytes leftover after parsing attributes in process `syz.2.7305'.
[  607.673580][T31165] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7305'.
[  607.679954][T31165] netlink: 'syz.2.7305': attribute type 55 has an invalid length.
[  607.692770][T31165] 0{X: left allmulticast mode
[  607.707048][T31165] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  607.712637][T30158] lo speed is unknown, defaulting to 1000
[  607.714628][T30158] syz0: Port: 1 Link ACTIVE
[  607.716266][T30158] lo speed is unknown, defaulting to 1000
[  607.808485][T31173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7308'.
[  607.894897][T31184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7312'.
[  607.902793][T31184] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7312'.
[  608.085378][T31189] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  608.172624][T31194] openvswitch: netlink: Duplicate or invalid key (type 0).
[  608.178865][T31194] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  608.218155][T31196] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7315'.
[  608.472671][T31215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7320'.
[  608.509954][T31215] bridge0: port 1(veth19) entered blocking state
[  608.512705][T31215] bridge0: port 1(veth19) entered disabled state
[  608.515272][T31215] veth19: entered allmulticast mode
[  608.525221][T31215] veth19: entered promiscuous mode
[  608.535823][T31215] bridge0: port 2(veth0_to_bond) entered blocking state
[  608.538144][T31215] bridge0: port 2(veth0_to_bond) entered disabled state
[  608.542716][T31215] veth0_to_bond: entered allmulticast mode
[  608.552401][T31215] veth0_to_bond: entered promiscuous mode
[  608.562485][T31215] vlan0: entered allmulticast mode
[  608.564361][T31215] bridge0: port 3(vlan0) entered blocking state
[  608.567000][T31215] bridge0: port 3(vlan0) entered disabled state
[  608.571579][T31215] vlan0: entered promiscuous mode
[  608.573822][T31215] veth1: entered promiscuous mode
[  609.072993][T31239] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7325'.
[  609.114829][T31239] lo speed is unknown, defaulting to 1000
[  609.117867][T31239] lo speed is unknown, defaulting to 1000
[  609.121655][T31239] lo speed is unknown, defaulting to 1000
[  609.279074][T31242] syzkaller1: entered promiscuous mode
[  609.283015][T31242] syzkaller1: entered allmulticast mode
[  609.748396][T31272] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  609.752558][T31272] syzkaller0: entered promiscuous mode
[  609.754403][T31272] syzkaller0: entered allmulticast mode
[  609.896906][T31275] lo speed is unknown, defaulting to 1000
[  609.929814][T31280] netlink: 'syz.2.7333': attribute type 6 has an invalid length.
[  609.939666][T31280] netlink: 'syz.2.7333': attribute type 5 has an invalid length.
[  609.973971][T31275] lo speed is unknown, defaulting to 1000
[  609.977729][T31275] lo speed is unknown, defaulting to 1000
[  610.103096][T31285] netlink: 'syz.1.7335': attribute type 1 has an invalid length.
[  610.270951][    C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  610.634900][T31310] pim6reg: entered allmulticast mode
[  610.637733][T31310] pim6reg: left allmulticast mode
[  610.834640][T31317] netlink: 'syz.0.7345': attribute type 1 has an invalid length.
[  610.903860][T31323] netlink: del zone limit has 4 unknown bytes
[  611.030259][T31328] lo speed is unknown, defaulting to 1000
[  611.051292][T31328] lo speed is unknown, defaulting to 1000
[  611.055787][T31328] lo speed is unknown, defaulting to 1000
[  611.302542][T31346] netlink: 'syz.1.7352': attribute type 21 has an invalid length.
[  611.453896][T31354] openvswitch: netlink: Flow key attribute not present in set flow.
[  611.727498][T31367] netlink: 'syz.1.7358': attribute type 13 has an invalid length.
[  611.731184][T31367] netlink: 'syz.1.7358': attribute type 17 has an invalid length.
[  611.750920][T31367] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  611.844657][T31367] lo speed is unknown, defaulting to 1000
[  611.849838][T31367] lo speed is unknown, defaulting to 1000
[  611.854118][T31367] lo speed is unknown, defaulting to 1000
[  611.915253][T31377] lo speed is unknown, defaulting to 1000
[  611.918141][T31377] lo speed is unknown, defaulting to 1000
[  612.002613][T31377] lo speed is unknown, defaulting to 1000
[  612.502090][T31388] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  612.529657][T31388] syzkaller0: entered promiscuous mode
[  612.535539][T31388] syzkaller0: entered allmulticast mode
[  612.538288][T31388] tipc: Resetting bearer <eth:syzkaller0>
[  612.568908][T31390] lo speed is unknown, defaulting to 1000
[  612.571921][T31390] lo speed is unknown, defaulting to 1000
[  612.574182][T31387] tipc: Resetting bearer <eth:syzkaller0>
[  614.031772][T31387] tipc: Disabling bearer <eth:syzkaller0>
[  614.036039][T31390] lo speed is unknown, defaulting to 1000
[  614.425555][T31420] __nla_validate_parse: 11 callbacks suppressed
[  614.425574][T31420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7371'.
[  614.502280][T31427] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  614.516920][T31427] tipc: Resetting bearer <eth:syzkaller0>
[  614.532057][T31425] tipc: Disabling bearer <eth:syzkaller0>
[  614.552951][T31429] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7374'.
[  614.598131][T31429] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  614.604788][T31429] syzkaller0: entered promiscuous mode
[  614.606633][T31429] syzkaller0: entered allmulticast mode
[  614.754346][T31440] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  614.765618][T31440] syzkaller0: entered promiscuous mode
[  614.769777][T31440] syzkaller0: entered allmulticast mode
[  614.805109][T31446] netlink: 'syz.0.7377': attribute type 1 has an invalid length.
[  614.811535][T31442] smc: removing net device bond0 with user defined pnetid SYZ2
[  614.814192][T31442] bond0 (unregistering): Released all slaves
[  616.501453][T31476] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7385'.
[  616.517115][T31478] netlink: 'syz.1.7386': attribute type 4 has an invalid length.
[  616.742455][T31497] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7391'.
[  616.746866][T31497] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  617.195247][T31510] veth21: entered promiscuous mode
[  617.434792][T31532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7399'.
[  617.437674][T31532] netlink: 'syz.2.7399': attribute type 20 has an invalid length.
[  617.442668][T31532] netlink: 'syz.2.7399': attribute type 21 has an invalid length.
[  617.478636][T31536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7400'.
[  617.525598][T31541] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7401'.
[  617.606523][T31545] netlink: 'syz.2.7403': attribute type 2 has an invalid length.
[  617.621365][T31545] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  617.866146][T31571] netlink: 100 bytes leftover after parsing attributes in process `syz.2.7406'.
[  617.965492][T31575] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7408'.
[  617.971427][T31575] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  617.974305][T31575] syzkaller0: entered promiscuous mode
[  617.976144][T31575] syzkaller0: entered allmulticast mode
[  617.994456][T31575] tipc: Resetting bearer <eth:syzkaller0>
[  617.998756][T31574] tipc: Resetting bearer <eth:syzkaller0>
[  618.009162][T31578] netlink: 112 bytes leftover after parsing attributes in process `syz.2.7409'.
[  618.013499][T31574] tipc: Disabling bearer <eth:syzkaller0>
[  618.106722][T31583] bridge0: port 1(erspan0) entered blocking state
[  618.109542][T31583] bridge0: port 1(erspan0) entered disabled state
[  618.115312][T31583] erspan0: entered allmulticast mode
[  618.118085][T31583] erspan0: entered promiscuous mode
[  618.124561][T31583] bridge0: port 1(erspan0) entered blocking state
[  618.126569][T31583] bridge0: port 1(erspan0) entered listening state
[  618.132605][T31583] erspan0: left allmulticast mode
[  618.134562][T31583] erspan0: left promiscuous mode
[  618.136263][T31583] bridge0: port 1(erspan0) entered disabled state
[  618.204027][T31590] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  618.209026][T31590] netlink: 'syz.0.7413': attribute type 10 has an invalid length.
[  618.218606][T31590] veth0_to_bond: left allmulticast mode
[  618.220939][T31590] veth0_to_bond: left promiscuous mode
[  618.223144][T31590] bridge37: port 2(veth0_to_bond) entered disabled state
[  618.232715][T31590] tipc: Resetting bearer <eth:vlan0>
[  618.235671][T31590] veth31: left allmulticast mode
[  618.237626][T31590] veth31: left promiscuous mode
[  618.239774][T31590] bridge37: port 1(veth31) entered disabled state
[  618.256912][T31590] netlink: 'syz.0.7413': attribute type 10 has an invalid length.
[  618.260095][T31590] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  618.263100][T30158] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  618.268704][T31590] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  618.273559][T31590] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  618.280522][    C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  618.899578][T31603] lo speed is unknown, defaulting to 1000
[  618.903782][T31603] lo speed is unknown, defaulting to 1000
[  618.907715][T31603] lo speed is unknown, defaulting to 1000
[  618.953670][T31606] geneve5: entered promiscuous mode
[  618.958227][T31606] geneve5: entered allmulticast mode
[  619.070490][T30158] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  619.308578][T31614] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  619.329227][T31614] veth0_to_bond: left allmulticast mode
[  619.332803][T31614] veth0_to_bond: left promiscuous mode
[  619.335030][T31614] bridge0: port 2(veth0_to_bond) entered disabled state
[  619.344799][T31614] veth19: left allmulticast mode
[  619.346550][T31614] veth19: left promiscuous mode
[  619.348338][T31614] bridge0: port 1(veth19) entered disabled state
[  619.353986][T31614] vlan0: left promiscuous mode
[  619.355930][T31614] veth1: left promiscuous mode
[  619.358135][T31614] bridge0: port 3(vlan0) entered disabled state
[  619.369078][T31614] netlink: 'syz.1.7418': attribute type 10 has an invalid length.
[  619.374847][T31614] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  620.189877][T31649] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  620.303334][T31657] netlink: 'syz.0.7428': attribute type 7 has an invalid length.
[  620.306278][T31657] netlink: 'syz.0.7428': attribute type 8 has an invalid length.
[  620.375470][T31668] atomic_op ffff88811c2ec198 conn xmit_atomic 0000000000000000
[  620.470881][T31674] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  620.515627][T31676] 8021q: VLANs not supported on nlmon0
[  620.663849][T31694] nbd: must specify a device to reconfigure
[  620.709537][T31697] dvmrp0: entered allmulticast mode
[  620.717162][T31697] __nla_validate_parse: 3 callbacks suppressed
[  620.717230][T31697] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7443'.
[  620.730740][T31697] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7443'.
[  620.738437][T31697] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7443'.
[  620.754680][T31697] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7443'.
[  620.851424][T31710] IPVS: set_ctl: invalid protocol: 137 127.0.0.1:20004
[  620.862019][T31712] netlink: 'syz.1.7446': attribute type 21 has an invalid length.
[  620.869191][T31710] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7445'.
[  620.873207][T31710] nbd: must specify at least one socket
[  621.099945][T31726] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.7450'.
[  621.296307][T31739] syzkaller0: entered promiscuous mode
[  621.298549][T31739] syzkaller0: entered allmulticast mode
[  621.646835][T31752] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7458'.
[  621.760387][T31756] syz.0.7459: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  621.774596][T31756] CPU: 0 UID: 0 PID: 31756 Comm: syz.0.7459 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  621.774627][T31756] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  621.774637][T31756] Call Trace:
[  621.774644][T31756]  <TASK>
[  621.774651][T31756]  dump_stack_lvl+0x189/0x250
[  621.774676][T31756]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  621.774699][T31756]  ? __pfx_dump_stack_lvl+0x10/0x10
[  621.774718][T31756]  ? __pfx__printk+0x10/0x10
[  621.774741][T31756]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  621.774759][T31756]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  621.774785][T31756]  warn_alloc+0x214/0x310
[  621.774809][T31756]  ? stack_depot_save_flags+0x40/0x860
[  621.774829][T31756]  ? __pfx_warn_alloc+0x10/0x10
[  621.774853][T31756]  ? kasan_save_track+0x4f/0x80
[  621.774872][T31756]  ? xskq_create+0x56/0x170
[  621.774888][T31756]  ? xsk_init_queue+0xb0/0x110
[  621.774902][T31756]  ? xsk_setsockopt+0x4dc/0x8d0
[  621.774915][T31756]  ? do_sock_setsockopt+0x17c/0x1b0
[  621.774935][T31756]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  621.774954][T31756]  ? do_syscall_64+0xfa/0x3b0
[  621.774973][T31756]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  621.774995][T31756]  __vmalloc_node_range_noprof+0x125/0x12f0
[  621.775042][T31756]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  621.775065][T31756]  ? xskq_create+0x56/0x170
[  621.775083][T31756]  ? __kasan_kmalloc+0x93/0xb0
[  621.775105][T31756]  vmalloc_user_noprof+0xad/0xf0
[  621.775127][T31756]  ? xskq_create+0xbf/0x170
[  621.775144][T31756]  xskq_create+0xbf/0x170
[  621.775164][T31756]  xsk_init_queue+0xb0/0x110
[  621.775183][T31756]  xsk_setsockopt+0x4dc/0x8d0
[  621.775201][T31756]  ? __pfx_xsk_setsockopt+0x10/0x10
[  621.775216][T31756]  ? __pfx_aa_sk_perm+0x10/0x10
[  621.775239][T31756]  ? aa_sock_opt_perm+0xff/0x1b0
[  621.775263][T31756]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  621.775279][T31756]  ? __pfx_xsk_setsockopt+0x10/0x10
[  621.775296][T31756]  do_sock_setsockopt+0x17c/0x1b0
[  621.775321][T31756]  __x64_sys_setsockopt+0x13f/0x1b0
[  621.775346][T31756]  do_syscall_64+0xfa/0x3b0
[  621.775364][T31756]  ? lockdep_hardirqs_on+0x9c/0x150
[  621.775382][T31756]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  621.775396][T31756]  ? exc_page_fault+0x9f/0xf0
[  621.775415][T31756]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  621.775430][T31756] RIP: 0033:0x7f8136f8ebe9
[  621.775444][T31756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  621.775486][T31756] RSP: 002b:00007f8137db7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  621.775503][T31756] RAX: ffffffffffffffda RBX: 00007f81371b6090 RCX: 00007f8136f8ebe9
[  621.775515][T31756] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  621.775524][T31756] RBP: 00007f8137011e19 R08: 0000000000000004 R09: 0000000000000000
[  621.775533][T31756] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  621.775542][T31756] R13: 00007f81371b6128 R14: 00007f81371b6090 R15: 00007ffd81df1ea8
[  621.775568][T31756]  </TASK>
[  621.775574][T31756] Mem-Info:
[  621.821450][T31755] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7459'.
[  621.824107][T31756] active_anon:17639 inactive_anon:0 isolated_anon:0
[  621.824107][T31756]  active_file:1427 inactive_file:38416 isolated_file:0
[  621.824107][T31756]  unevictable:1768 dirty:125 writeback:0
[  621.824107][T31756]  slab_reclaimable:11697 slab_unreclaimable:108709
[  621.824107][T31756]  mapped:18244 shmem:2423 pagetables:1199
[  621.824107][T31756]  sec_pagetables:0 bounce:0
[  621.824107][T31756]  kernel_misc_reclaimable:0
[  621.824107][T31756]  free:219918 free_pcp:23598 free_cma:0
[  621.901253][T31756] Node 0 active_anon:35112kB inactive_anon:0kB active_file:1960kB inactive_file:131156kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:27520kB dirty:288kB writeback:0kB shmem:4840kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10112kB pagetables:2112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  621.913751][T31756] Node 1 active_anon:35444kB inactive_anon:0kB active_file:3748kB inactive_file:22508kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:45456kB dirty:212kB writeback:0kB shmem:4852kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9916kB pagetables:2684kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  621.925292][T31756] Node 0 DMA free:15056kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:280kB local_pcp:280kB free_cma:0kB
[  621.936603][T31756] lowmem_reserve[]: 0 811 811 811 811
[  621.938961][T31756] Node 0 DMA32 free:177612kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35112kB inactive_anon:0kB active_file:1960kB inactive_file:131156kB unevictable:3536kB writepending:288kB present:1556484kB managed:830996kB mlocked:0kB bounce:0kB free_pcp:25912kB local_pcp:10260kB free_cma:0kB
[  621.951138][T31756] lowmem_reserve[]: 0 0 0 0 0
[  621.953005][T31756] Node 1 DMA32 free:409056kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:20564kB local_pcp:9500kB free_cma:0kB
[  621.963932][T31756] lowmem_reserve[]: 0 0 854 854 854
[  621.966021][T31756] Node 1 Normal free:277948kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35444kB inactive_anon:0kB active_file:3748kB inactive_file:22508kB unevictable:3536kB writepending:212kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:47652kB local_pcp:21320kB free_cma:0kB
[  621.977183][T31756] lowmem_reserve[]: 0 0 0 0 0
[  621.979070][T31756] Node 0 DMA: 6*4kB (U) 7*8kB (U) 6*16kB (U) 7*32kB (U) 7*64kB (U) 7*128kB (U) 6*256kB (U) 7*512kB (U) 6*1024kB (U) 1*2048kB (U) 0*4096kB = 15056kB
[  621.985478][T31756] Node 0 DMA32: 153*4kB (ME) 685*8kB (UME) 488*16kB (UME) 412*32kB (UME) 166*64kB (UME) 199*128kB (UME) 119*256kB (UM) 50*512kB (UME) 27*1024kB (U) 3*2048kB (M) 6*4096kB (UM) = 177612kB
[  621.993050][T31756] Node 1 DMA32: 72*4kB (UM) 68*8kB (UM) 56*16kB (UME) 69*32kB (UM) 60*64kB (UM) 59*128kB (UM) 58*256kB (UM) 44*512kB (UE) 36*1024kB (UME) 2*2048kB (ME) 77*4096kB (UM) = 409056kB
[  622.000402][T31756] Node 1 Normal: 909*4kB (UM) 137*8kB (UME) 552*16kB (UME) 246*32kB (UME) 118*64kB (UM) 199*128kB (UM) 157*256kB (UME) 108*512kB (UME) 117*1024kB (UM) 2*2048kB (M) 1*4096kB (U) = 277948kB
[  622.007175][T31756] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  622.010818][T31756] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  622.014302][T31756] 42267 total pagecache pages
[  622.016130][T31756] 0 pages in swap cache
[  622.017756][T31756] Free swap  = 124996kB
[  622.019421][T31756] Total swap = 124996kB
[  622.021383][T31756] 786301 pages RAM
[  622.022870][T31756] 0 pages HighMem/MovableOnly
[  622.024714][T31756] 241320 pages reserved
[  622.026277][T31756] 0 pages cma reserved
[  623.123238][T31765] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7461'.
[  623.125665][T31766] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7462'.
[  623.629185][T31809] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  623.629229][T31807] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  623.766669][T31821] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  623.798430][T31823] openvswitch: netlink: IP tunnel dst address not specified
[  624.034929][ T1362] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  624.217081][T31853] lo speed is unknown, defaulting to 1000
[  624.223251][T31853] lo speed is unknown, defaulting to 1000
[  624.224626][T31852] lo speed is unknown, defaulting to 1000
[  624.227740][T31853] lo speed is unknown, defaulting to 1000
[  624.242485][T31852] lo speed is unknown, defaulting to 1000
[  624.248185][T31854] IPv6: Can't replace route, no match found
[  624.438406][T31852] lo speed is unknown, defaulting to 1000
[  624.619052][T31865] veth0_to_bond: entered allmulticast mode
[  624.880089][T31883] netlink: 'syz.1.7495': attribute type 8 has an invalid length.
[  625.107918][T31888] netlink: 'syz.1.7497': attribute type 178 has an invalid length.
[  625.436940][T31916] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  625.512014][T31919] netlink: 'syz.2.7506': attribute type 4 has an invalid length.
[  625.764933][T31928] netlink: 'syz.0.7509': attribute type 1 has an invalid length.
[  625.795118][T31928] bond64: entered promiscuous mode
[  625.798498][T31928] 8021q: adding VLAN 0 to HW filter on device bond64
[  625.804231][T31928] __nla_validate_parse: 13 callbacks suppressed
[  625.804247][T31928] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7509'.
[  625.816526][T31928] batadv2: entered promiscuous mode
[  625.818476][T31928] batadv2: entered allmulticast mode
[  625.821574][T31928] 8021q: adding VLAN 0 to HW filter on device batadv2
[  625.825366][T31928] bond64: (slave batadv2): making interface the new active one
[  625.829387][T31928] bond64: (slave batadv2): Enslaving as an active interface with an up link
[  625.952675][T31928] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7509'.
[  625.958659][T31928] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7509'.
[  625.963419][T31928] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7509'.
[  626.116532][T31936] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  626.199747][T31940] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  626.318925][T31946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7515'.
[  626.325370][T31947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7515'.
[  626.815953][T31969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7522'.
[  626.819471][T31969] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7522'.
[  626.826834][T31970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7522'.
[  626.830699][T31970] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7522'.
[  629.166723][T32013] netlink: 'syz.0.7537': attribute type 1 has an invalid length.
[  629.473775][T32024] bridge23: entered promiscuous mode
[  629.554158][T32024] tipc: Resetting bearer <ib:ip6gre0>
[  629.574213][T32024] veth0_to_bond: left allmulticast mode
[  629.581311][T32024] tipc: Resetting bearer <eth:syzkaller0>
[  629.586952][T32024] syzkaller0: left promiscuous mode
[  629.591655][T32024] syzkaller0: left allmulticast mode
[  629.609264][T32024] xfrm1: left promiscuous mode
[  629.616826][T32024] xfrm1: left allmulticast mode
[  629.654245][T32024] ip6gretap0: left allmulticast mode
[  629.657293][T32024] macsec0: left promiscuous mode
[  629.659669][T32024] macsec0: left allmulticast mode
[  629.684257][T32024] vlan0: left allmulticast mode
[  629.686520][T32024] bridge23: left promiscuous mode
[  629.886266][T32054] syzkaller1: entered allmulticast mode
[  629.925628][T32061] syzkaller0: entered promiscuous mode
[  629.927761][T32061] syzkaller0: entered allmulticast mode
[  630.584116][T32103] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  630.688676][T32106] netlink: 'syz.1.7558': attribute type 33 has an invalid length.
[  631.021892][T32111] __nla_validate_parse: 15 callbacks suppressed
[  631.021911][T32111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7560'.
[  631.189778][T32122] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7562'.
[  631.303776][T32122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7562'.
[  631.309688][T32122] netlink: 428 bytes leftover after parsing attributes in process `syz.2.7562'.
[  631.314779][T32122] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7562'.
[  631.387979][T32127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7563'.
[  631.650365][T32145] 8021q: VLANs not supported on ip_vti0
[  631.795810][T32155] netlink: 'syz.2.7570': attribute type 10 has an invalid length.
[  631.800799][T32155] netlink: 'syz.2.7570': attribute type 10 has an invalid length.
[  632.520471][   T36] wlan0: Trigger new scan to find an IBSS to join
[  632.626930][T32176] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7577'.
[  632.629777][T32176] netlink: 'syz.2.7577': attribute type 2 has an invalid length.
[  632.653285][T32182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7579'.
[  632.656064][T32182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7579'.
[  632.658824][T32182] netlink: 'syz.1.7579': attribute type 7 has an invalid length.
[  632.687512][T32186] netlink: 'syz.1.7581': attribute type 32 has an invalid length.
[  632.754913][T32187] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  632.790172][T32187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7580'.
[  632.990496][    C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  633.539601][T32189] netlink: 'syz.0.7582': attribute type 1 has an invalid length.
[  633.578867][T32189] 8021q: adding VLAN 0 to HW filter on device bond66
[  633.592809][T32189] vlan1: entered promiscuous mode
[  633.594668][T32189] bond66: entered promiscuous mode
[  633.596601][T32189] vlan1: entered allmulticast mode
[  633.598435][T32189] bond66: entered allmulticast mode
[  633.613026][T32189] bond66: (slave gretap0): making interface the new active one
[  633.615635][T32189] gretap0: entered promiscuous mode
[  633.617720][T32189] gretap0: entered allmulticast mode
[  633.621962][T32189] bond66: (slave gretap0): Enslaving as an active interface with an up link
[  633.713641][T32203] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  633.959259][T32229] netlink: 'syz.1.7593': attribute type 1 has an invalid length.
[  633.988450][T32229] smc: adding net device bond0 with user defined pnetid SYZ2
[  634.011681][T32229] bond0: (slave geneve0): making interface the new active one
[  634.014412][T32229] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  634.017326][ T5905] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  634.021420][ T5905] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  634.024844][ T5905] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  634.027898][ T5905] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  634.032451][T32237] rose0: entered promiscuous mode
[  634.034920][T32237] rose0: entered allmulticast mode
[  634.191642][T32246] netlink: 'syz.1.7596': attribute type 9 has an invalid length.
[  634.194434][T32246] netlink: 'syz.1.7596': attribute type 6 has an invalid length.
[  634.242367][ T5863] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  634.246165][ T5863] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  634.248830][ T5863] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  634.254971][ T5863] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  634.502546][T32273] tipc: Resetting bearer <eth:vlan0>
[  634.530890][T24586] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  634.552106][T32278] bond0: (slave geneve0): Releasing active interface
[  634.557495][   T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  634.560811][   T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  634.563568][   T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  634.566393][   T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  634.577138][T32278] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  634.580115][T32278] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  634.589737][T32275] openvswitch: netlink: Multiple metadata blocks provided
[  634.592455][T32275] netlink: 'syz.2.7605': attribute type 11 has an invalid length.
[  635.319526][T32297] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  635.324109][T24586] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured!
[  635.429814][T32301] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  635.484285][T32301] syzkaller0: entered promiscuous mode
[  635.486492][T32301] syzkaller0: entered allmulticast mode
[  635.489277][T32301] tipc: Resetting bearer <eth:syzkaller0>
[  635.495076][T32300] tipc: Resetting bearer <eth:syzkaller0>
[  635.505875][T32300] tipc: Resetting bearer <eth:syzkaller0>
[  635.509450][T32307] Unsupported xt match
[  635.509464][T32307] unable to load match
[  635.514360][T32300] tipc: Resetting bearer <eth:syzkaller0>
[  635.551004][T30581] wlan0: Trigger new scan to find an IBSS to join
[  637.003383][T32300] tipc: Disabling bearer <eth:syzkaller0>
[  637.007836][T32307] __nla_validate_parse: 11 callbacks suppressed
[  637.007846][T32307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7614'.
[  637.012706][T32307] Unsupported xt match
[  637.012713][T32307] unable to load match
[  637.205520][T32321] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7616'.
[  637.208922][T32321] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7616'.
[  637.259372][T32335] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7620'.
[  637.332507][T32338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7622'.
[  637.405512][T32347] validate_nla: 5 callbacks suppressed
[  637.405523][T32347] netlink: 'syz.0.7623': attribute type 1 has an invalid length.
[  637.464522][   T47] lo speed is unknown, defaulting to 1000
[  637.465691][T32347] workqueue: Failed to create a rescuer kthread for wq "bond67": -EINTR
[  637.467159][   T47] syz0: Port: 1 Link DOWN
[  637.477360][   T47] lo speed is unknown, defaulting to 1000
[  637.686391][T32368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7630'.
[  637.737274][T32371] lo speed is unknown, defaulting to 1000
[  637.740591][T32371] lo speed is unknown, defaulting to 1000
[  637.743467][T32371] lo speed is unknown, defaulting to 1000
[  638.227901][T32384] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7634'.
[  638.234010][T32384] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7634'.
[  638.311408][   T33] audit: type=1800 audit(1755309025.609:13): pid=32390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7636" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=12489 res=0 errno=0
[  638.445990][T32402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7639'.
[  638.449653][T32402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7639'.
[  638.590897][T29137] wlan0: Trigger new scan to find an IBSS to join
[  638.643170][T32419] syzkaller1: entered promiscuous mode
[  638.645730][T32419] syzkaller1: entered allmulticast mode
[  638.982496][T32432] IPv6: Can't replace route, no match found
[  639.166716][T32461] lo speed is unknown, defaulting to 1000
[  639.169763][T32461] lo speed is unknown, defaulting to 1000
[  639.174222][T32461] lo speed is unknown, defaulting to 1000
[  639.438667][T32484] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  639.588452][T29152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  639.647476][T32496] lo speed is unknown, defaulting to 1000
[  639.651559][T32503] netlink: 'syz.0.7665': attribute type 1 has an invalid length.
[  639.654456][T32496] lo speed is unknown, defaulting to 1000
[  639.665898][T32496] lo speed is unknown, defaulting to 1000
[  639.926077][T32526] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  639.983002][T32522] tipc: Resetting bearer <ib:ip6gre0>
[  640.004524][T32522] tipc: Resetting bearer <eth:vlan0>
[  640.032048][T32522] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  640.043113][T32522] mac80211_hwsim hwsim23 wlan0: left promiscuous mode
[  640.077283][T32522] bond64: left promiscuous mode
[  640.082909][T32522] batadv2: left promiscuous mode
[  640.084597][T32522] batadv2: left allmulticast mode
[  640.097568][T32522] vlan1: left promiscuous mode
[  640.099123][T32522] bond66: left promiscuous mode
[  640.104643][T32522] gretap0: left promiscuous mode
[  640.107033][T32522] vlan1: left allmulticast mode
[  640.108568][T32522] bond66: left allmulticast mode
[  640.110128][T32522] gretap0: left allmulticast mode
[  640.115991][   T47] lo speed is unknown, defaulting to 1000
[  640.117749][   T47] syz1: Port: 1 Link DOWN
[  640.296660][T32535] syzkaller0: entered promiscuous mode
[  640.298772][T32535] syzkaller0: entered allmulticast mode
[  641.759166][T32569] IPVS: length: 252 != 8
[  641.901797][T32575] vlan1: entered allmulticast mode
[  641.903453][T32575] bridge_slave_0: entered allmulticast mode
[  642.058208][T32584] mac80211_hwsim hwsim4 ": renamed from wlan0 (while UP)
[  642.126309][T32591] __nla_validate_parse: 15 callbacks suppressed
[  642.126325][T32591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7683'.
[  642.181317][T32591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7683'.
[  642.694292][T32610] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7689'.
[  642.941269][T32616] netlink: 'syz.1.7691': attribute type 7 has an invalid length.
[  642.944650][T32616] netlink: 'syz.1.7691': attribute type 8 has an invalid length.
[  643.016860][T32618] netlink: 'syz.1.7692': attribute type 1 has an invalid length.
[  643.019931][T32618] netlink: 600 bytes leftover after parsing attributes in process `syz.1.7692'.
[  643.628375][T32643] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:20004
[  643.720776][T32643] nbd1: detected capacity change from 0 to 127
[  643.724305][ T6761] block nbd1: Receive control failed (result -32)
[  643.802629][T32660] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7697'.
[  643.867751][T32668] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7701'.
[  644.124547][T32696] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.7704'.
[  644.185848][T32704] netlink: 'syz.1.7705': attribute type 29 has an invalid length.
[  644.189112][T32704] netlink: 'syz.1.7705': attribute type 29 has an invalid length.
[  644.193666][T32704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7705'.
[  644.458544][T32726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7711'.
[  644.475937][T32722] sit0: entered allmulticast mode
[  644.527010][T32738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7713'.
[  646.445417][  T307] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  646.633476][  T318] tipc: Enabling of bearer <udp:syz1> rejected, max 3 bearers permitted
[  646.697139][  T319] netlink: 'syz.1.7730': attribute type 4 has an invalid length.
[  646.907773][  T323] veth32: entered allmulticast mode
[  647.423619][  T336] __nla_validate_parse: 6 callbacks suppressed
[  647.423634][  T336] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7737'.
[  647.555452][  T343] lo speed is unknown, defaulting to 1000
[  647.558055][  T343] lo speed is unknown, defaulting to 1000
[  647.560914][  T343] lo speed is unknown, defaulting to 1000
[  647.935915][  T381] netlink: 172 bytes leftover after parsing attributes in process `syz.0.7746'.
[  648.134338][  T395] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  648.340248][  T409] dvmrp8: entered allmulticast mode
[  648.342882][  T411] netlink: 232 bytes leftover after parsing attributes in process `syz.2.7755'.
[  648.361451][  T407] dvmrp8: left allmulticast mode
[  648.383282][  T413] netlink: 'syz.2.7756': attribute type 11 has an invalid length.
[  648.631454][  T433] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7760'.
[  649.468492][  T444] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  649.555471][  T445] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  649.901702][  T462] bridge19: left allmulticast mode
[  649.905673][  T462] ip6gretap3: left promiscuous mode
[  649.908047][  T462] bond89: left promiscuous mode
[  649.909838][  T462] bond89: left allmulticast mode
[  649.929489][  T468] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7772'.
[  649.934622][  T468] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7772'.
[  649.939435][  T462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7769'.
[  649.942429][  T469] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7772'.
[  649.948202][  T469] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7772'.
[  650.054755][  T481] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7776'.
[  650.348381][  T509] netlink: 'syz.2.7783': attribute type 4 has an invalid length.
[  650.627856][  T545] wireguard2: entered promiscuous mode
[  650.633957][  T545] wireguard2: entered allmulticast mode
[  650.654897][  T546] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  650.714178][  T546] syzkaller0: entered promiscuous mode
[  650.716422][  T546] syzkaller0: entered allmulticast mode
[  650.726906][  T544] tipc: Resetting bearer <eth:syzkaller0>
[  650.743796][  T544] tipc: Disabling bearer <eth:syzkaller0>
[  651.011241][  T579] lo speed is unknown, defaulting to 1000
[  651.016969][  T579] lo speed is unknown, defaulting to 1000
[  651.019566][  T579] lo speed is unknown, defaulting to 1000
[  651.168003][  T592] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  651.535671][  T618] netlink: 'syz.1.7808': attribute type 1 has an invalid length.
[  651.661171][  T623] netlink: 'syz.1.7810': attribute type 9 has an invalid length.
[  651.664301][  T623] netlink: 'syz.1.7810': attribute type 6 has an invalid length.
[  652.393764][  T640] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  652.818234][  T661] syzkaller0: entered promiscuous mode
[  652.821953][  T661] syzkaller0: entered allmulticast mode
[  652.825893][  T660] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  652.844129][  T660] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  652.849986][  T660] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  652.881264][  T660] tipc: Resetting bearer <eth:syzkaller0>
[  652.902825][  T660] tipc: Disabling bearer <eth:syzkaller0>
[  653.135283][  T687] netlink: 'syz.0.7829': attribute type 4 has an invalid length.
[  653.175354][  T692] netlink: 'syz.0.7831': attribute type 39 has an invalid length.
[  653.198535][  T688] __nla_validate_parse: 13 callbacks suppressed
[  653.198551][  T688] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7830'.
[  653.233810][  T695] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7831'.
[  653.270020][  T699] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7833'.
[  653.299042][  T701] nbd: must specify a size in bytes for the device
[  653.506619][  T730] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  653.524255][ T5855] nci: nci_rsp_packet: unsupported rsp opcode 0xf2d
[  653.550245][  T734] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7841'.
[  653.664994][  T751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7846'.
[  653.776904][  T759] lo speed is unknown, defaulting to 1000
[  653.779575][  T759] lo speed is unknown, defaulting to 1000
[  653.784909][  T759] lo speed is unknown, defaulting to 1000
[  653.823453][  T760] netlink: 92 bytes leftover after parsing attributes in process `syz.1.7849'.
[  654.017237][  T766] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7850'.
[  654.109051][  T769] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7851'.
[  654.159546][  T771] netlink: 'syz.1.7852': attribute type 1 has an invalid length.
[  654.203818][  T771] bond87: entered promiscuous mode
[  654.206321][  T771] 8021q: adding VLAN 0 to HW filter on device bond87
[  654.221756][  T771] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7852'.
[  654.253258][  T771] batadv0: entered promiscuous mode
[  654.255748][  T771] batadv0: entered allmulticast mode
[  654.260098][  T771] 8021q: adding VLAN 0 to HW filter on device batadv0
[  654.292184][  T771] bond87: (slave batadv0): making interface the new active one
[  654.296942][  T771] bond87: (slave batadv0): Enslaving as an active interface with an up link
[  654.390587][  T774] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7852'.
[  654.515354][  T777] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  654.666932][  T786] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  654.804725][  T800] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  654.808317][  T800] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  655.833577][  T830] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  655.837206][  T830] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  655.884961][  T833] veth0_to_bond: entered allmulticast mode
[  655.889741][  T833] netlink: 'syz.0.7875': attribute type 1 has an invalid length.
[  655.909802][  T837] nbd: must specify at least one socket
[  656.484672][  T872] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  656.488200][  T872] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  656.521347][  T874] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  656.595012][  T879] netlink: 'syz.0.7884': attribute type 1 has an invalid length.
[  656.635275][  T879] bond67: entered promiscuous mode
[  656.637766][  T879] 8021q: adding VLAN 0 to HW filter on device bond67
[  656.647211][  T878] batadv3: entered promiscuous mode
[  656.649263][  T878] batadv3: entered allmulticast mode
[  656.826606][  T888] lo speed is unknown, defaulting to 1000
[  656.837836][  T888] lo speed is unknown, defaulting to 1000
[  656.851982][  T888] lo speed is unknown, defaulting to 1000
[  657.047794][  T897] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  657.113373][  T897] syzkaller0: entered promiscuous mode
[  657.116137][  T897] syzkaller0: entered allmulticast mode
[  659.194330][  T948] lo speed is unknown, defaulting to 1000
[  659.197226][  T948] lo speed is unknown, defaulting to 1000
[  659.200104][  T948] lo speed is unknown, defaulting to 1000
[  659.626336][  T960] netem: incorrect ge model size
[  659.628749][  T960] netem: change failed
[  659.654310][  T960] __nla_validate_parse: 14 callbacks suppressed
[  659.654323][  T960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7905'.
[  659.713986][  T966] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7908'.
[  659.788069][  T971] syzkaller1: entered promiscuous mode
[  659.795156][  T971] syzkaller1: entered allmulticast mode
[  659.907206][  T977] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7910'.
[  659.979258][  T981] netlink: 'syz.2.7912': attribute type 5 has an invalid length.
[  660.027585][  T983] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[  660.057304][  T983] sctp: [Deprecated]: syz.2.7913 (pid 983) Use of struct sctp_assoc_value in delayed_ack socket option.
[  660.057304][  T983] Use struct sctp_sack_info instead
[  660.115437][  T985] netlink: 'syz.0.7914': attribute type 9 has an invalid length.
[  660.118304][  T985] netlink: 'syz.0.7914': attribute type 7 has an invalid length.
[  660.122035][  T985] netlink: 'syz.0.7914': attribute type 8 has an invalid length.
[  660.129411][  T985] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7914'.
[  660.137371][  T985] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7914'.
[  660.189401][  T993] netlink: 'syz.0.7916': attribute type 1 has an invalid length.
[  660.224357][  T989] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7915'.
[  660.302781][  T999] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7918'.
[  660.327869][  T999] pim6reg1: entered promiscuous mode
[  660.329665][  T999] pim6reg1: entered allmulticast mode
[  660.483872][ T1003] netlink: 'syz.2.7920': attribute type 3 has an invalid length.
[  660.487029][ T1003] netlink: 'syz.2.7920': attribute type 1 has an invalid length.
[  660.490101][ T1003] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.7920'.
[  660.561278][   T33] audit: type=1800 audit(1755309047.859:14): pid=1008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.7922" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=13466 res=0 errno=0
[  660.807356][ T1038] netlink: 'syz.1.7931': attribute type 41 has an invalid length.
[  660.869118][ T1038] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.7931'.
[  660.983486][ T1055] netlink: 'syz.2.7934': attribute type 13 has an invalid length.
[  661.013102][ T1055] lo speed is unknown, defaulting to 1000
[  661.016926][ T1055] lo speed is unknown, defaulting to 1000
[  661.020969][ T1055] lo speed is unknown, defaulting to 1000
[  661.052491][ T1057] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7936'.
[  661.571248][ T1100] netlink: 'syz.1.7942': attribute type 29 has an invalid length.
[  662.102345][ T1135] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  662.668713][ T1180] sctp: [Deprecated]: syz.2.7963 (pid 1180) Use of int in maxseg socket option.
[  662.668713][ T1180] Use struct sctp_assoc_value instead
[  662.803159][ T1192] bond94: (slave bridge27): making interface the new active one
[  662.806779][ T1192] bond94: (slave bridge27): Enslaving as an active interface with an up link
[  662.933154][   T33] audit: type=1107 audit(1755309050.239:15): pid=1202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='2zsqH9(ޯPzOhѩmUO*W
[  662.933154][   T33] A˼="v@t炨}pbVr"$c\ȔB7͜[_D##0TX.sJhiPqLM]FA@B
[  662.933154][   T33] 
[  662.933154][   T33] 
[  662.933154][   T33] d&tEo	;ۊmR'eYC6|OG1.wNHbmeR4	=k83|1EՌ(KQn<²1cZT<'
[  662.965221][ T1203] tipc: Disabling bearer <eth:vlan0>
[  663.067424][ T1211] syz.0.7971 uses old SIOCAX25GETINFO
[  663.157627][ T5863] syzkaller0: tun_net_xmit 76
[  663.159535][ T1213] syzkaller0: create flow: hash 2116110006 index 1
[  663.161092][ T5863] syzkaller0: tun_net_xmit 48
[  663.182405][ T5908] syzkaller0: tun_net_xmit 76
[  663.190812][ T5908] syzkaller0: tun_net_xmit 76
[  663.247840][ T1221] syzkaller0: delete flow: hash 2116110006 index 1
[  664.746073][ T1235] __nla_validate_parse: 13 callbacks suppressed
[  664.746083][ T1235] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7977'.
[  664.959874][ T1247] syzkaller1: entered promiscuous mode
[  664.964168][ T1247] syzkaller1: entered allmulticast mode
[  665.099534][ T1257] bond64: (slave batadv2): Releasing active interface
[  665.106784][ T1257] bond66: (slave gretap0): Releasing active interface
[  665.115559][ T1260] validate_nla: 5 callbacks suppressed
[  665.115578][ T1260] netlink: 'syz.2.7984': attribute type 1 has an invalid length.
[  665.121795][ T1260] netlink: 'syz.2.7984': attribute type 4 has an invalid length.
[  665.125420][ T1260] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.7984'.
[  665.130778][ T1260] netlink: 'syz.2.7984': attribute type 1 has an invalid length.
[  665.133900][ T1260] netlink: 'syz.2.7984': attribute type 4 has an invalid length.
[  665.137059][ T1260] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.7984'.
[  665.229138][ T1263] netlink: 'syz.2.7986': attribute type 21 has an invalid length.
[  665.232641][ T1263] netlink: 'syz.2.7986': attribute type 4 has an invalid length.
[  665.235860][ T1263] netlink: 14325 bytes leftover after parsing attributes in process `syz.2.7986'.
[  665.318899][ T1267] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7987'.
[  665.324868][ T1267] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7987'.
[  665.336320][ T1267] bond0: (slave bond92): Releasing active interface
[  665.341701][ T1267] bond94: (slave bridge27): Releasing active interface
[  665.353546][ T1267] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  665.628352][ T1284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7991'.
[  665.696821][ T1284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7991'.
[  665.706337][ T1287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7993'.
[  665.711889][ T1287] netlink: 47 bytes leftover after parsing attributes in process `syz.2.7993'.
[  665.824478][ T1299] netlink: 'syz.2.7996': attribute type 3 has an invalid length.
[  665.868480][ T1301] netlink: 'syz.2.7997': attribute type 8 has an invalid length.
[  666.289923][ T1323] nbd: must specify at least one socket
[  666.293552][ T1322] nbd: must specify at least one socket
[  666.517525][ T1331] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  666.732876][ T1356] netlink: 'syz.0.8010': attribute type 1 has an invalid length.
[  666.994009][ T1387] netlink: 'syz.1.8018': attribute type 1 has an invalid length.
[  694.038684][ T1423] __nla_validate_parse: 15 callbacks suppressed
[  694.038700][ T1423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8028'.
[  694.094904][ T1432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8031'.
[  694.098826][ T1430] netlink: 'syz.0.8030': attribute type 2 has an invalid length.
[  694.128855][ T1436] nbd: must specify at least one socket
[  694.136346][ T1436] netlink: 324 bytes leftover after parsing attributes in process `syz.1.8032'.
[  694.139196][ T1436] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8032'.
[  694.143128][ T1436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8032'.
[  694.157839][ T1436] netlink: 9896 bytes leftover after parsing attributes in process `syz.1.8032'.
[  694.171077][ T1436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8032'.
[  694.180567][ T1436] netlink: 84 bytes leftover after parsing attributes in process `syz.1.8032'.
[  694.224087][ T1440] tipc: Resetting bearer <ib:ip6gre0>
[  694.665848][ T1484] netlink: 'syz.0.8045': attribute type 1 has an invalid length.
[  694.753384][ T1495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8048'.
[  694.758212][ T1495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8048'.
[  694.853522][ T1492] netlink: 'syz.2.8047': attribute type 25 has an invalid length.
[  695.216365][ T1523] nbd12: detected capacity change from 0 to 127
[  695.225288][ T6761] block nbd12: Receive control failed (result -32)
[  695.249356][ T1527] netlink: 'syz.0.8056': attribute type 2 has an invalid length.
[  695.326255][ T1539] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  695.329711][ T1539] syzkaller0: entered promiscuous mode
[  695.331515][ T1539] syzkaller0: entered allmulticast mode
[  695.467243][ T1554] vxcan0: entered promiscuous mode
[  695.941074][ T1583] nbd: must specify an index to disconnect
[  695.947107][ T1585] nbd: must specify an index to disconnect
[  696.062431][ T1593] lo speed is unknown, defaulting to 1000
[  696.064951][ T1593] lo speed is unknown, defaulting to 1000
[  696.068109][ T1593] lo speed is unknown, defaulting to 1000
[  696.083933][ T1593] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  696.102802][ T1593] lo speed is unknown, defaulting to 1000
[  696.105790][ T1593] lo speed is unknown, defaulting to 1000
[  696.108681][ T1593] lo speed is unknown, defaulting to 1000
[  696.273726][ T1602] netlink: 'syz.1.8078': attribute type 1 has an invalid length.
[  696.304231][ T1602] 8021q: adding VLAN 0 to HW filter on device bond89
[  696.583646][ T1629] netlink: 'syz.1.8082': attribute type 2 has an invalid length.
[  696.592426][ T1629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  696.598551][T24586] lo speed is unknown, defaulting to 1000
[  696.601223][T24586] syz2: Port: 1 Link ACTIVE
[  697.460042][ T1641] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  697.630100][ T1656] netlink: 'syz.1.8091': attribute type 1 has an invalid length.
[  697.653204][ T1656] 8021q: adding VLAN 0 to HW filter on device bond90
[  697.677103][ T1656] 8021q: adding VLAN 0 to HW filter on device bond90
[  697.681563][ T1656] bond90: (slave vxcan1): The slave device specified does not support setting the MAC address
[  697.686226][ T1656] bond90: (slave vxcan1): Error -95 calling set_mac_address
[  697.951796][ T1681] netlink: 'syz.1.8097': attribute type 12 has an invalid length.
[  697.955670][ T1681] netlink: 'syz.1.8097': attribute type 12 has an invalid length.
[  698.002935][ T1683] 
[  698.003972][ T1683] ======================================================
[  698.007296][ T1683] WARNING: possible circular locking dependency detected
[  698.010051][ T1683] 6.16.0-syzkaller-12063-g37816488247d-dirty #0 Not tainted
[  698.013716][ T1683] ------------------------------------------------------
[  698.016916][ T1683] syz.1.8099/1683 is trying to acquire lock:
[  698.019467][ T1683] ffffffff8f689f18 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0
[  698.023335][ T1683] 
[  698.023335][ T1683] but task is already holding lock:
[  698.026350][ T1683] ffff8880400de770 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570
[  698.029933][ T1683] 
[  698.029933][ T1683] which lock already depends on the new lock.
[  698.029933][ T1683] 
[  698.033832][ T1683] 
[  698.033832][ T1683] the existing dependency chain (in reverse order) is:
[  698.036729][ T1683] 
[  698.036729][ T1683] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  698.039195][ T1683]        lock_acquire+0x120/0x360
[  698.041080][ T1683]        _raw_spin_lock_bh+0x36/0x50
[  698.042762][ T1683]        nr_rt_device_down+0x12a/0x720
[  698.044840][ T1683]        nr_device_event+0x137/0x150
[  698.046918][ T1683]        notifier_call_chain+0x1b6/0x3e0
[  698.049024][ T1683]        __dev_notify_flags+0x18d/0x2e0
[  698.050897][ T1683]        netif_change_flags+0xe8/0x1a0
[  698.052738][ T1683]        dev_change_flags+0x130/0x260
[  698.054746][ T1683]        dev_ioctl+0x7b4/0x1150
[  698.056656][ T1683]        sock_do_ioctl+0x22c/0x300
[  698.058674][ T1683]        sock_ioctl+0x576/0x790
[  698.060305][ T1683]        __se_sys_ioctl+0xfc/0x170
[  698.062329][ T1683]        do_syscall_64+0xfa/0x3b0
[  698.064311][ T1683]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.066801][ T1683] 
[  698.066801][ T1683] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  698.069831][ T1683]        lock_acquire+0x120/0x360
[  698.071711][ T1683]        _raw_spin_lock_bh+0x36/0x50
[  698.073391][ T1683]        nr_rt_device_down+0xa9/0x720
[  698.075254][ T1683]        nr_device_event+0x137/0x150
[  698.077346][ T1683]        notifier_call_chain+0x1b6/0x3e0
[  698.079563][ T1683]        __dev_notify_flags+0x18d/0x2e0
[  698.081738][ T1683]        netif_change_flags+0xe8/0x1a0
[  698.083914][ T1683]        dev_change_flags+0x130/0x260
[  698.086049][ T1683]        dev_ioctl+0x7b4/0x1150
[  698.087977][ T1683]        sock_do_ioctl+0x22c/0x300
[  698.089974][ T1683]        sock_ioctl+0x576/0x790
[  698.091889][ T1683]        __se_sys_ioctl+0xfc/0x170
[  698.093505][ T1683]        do_syscall_64+0xfa/0x3b0
[  698.095063][ T1683]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.097655][ T1683] 
[  698.097655][ T1683] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  698.100602][ T1683]        validate_chain+0xb9b/0x2140
[  698.102392][ T1683]        __lock_acquire+0xab9/0xd20
[  698.104439][ T1683]        lock_acquire+0x120/0x360
[  698.106154][ T1683]        _raw_spin_lock_bh+0x36/0x50
[  698.108014][ T1683]        nr_remove_neigh+0x25/0xe0
[  698.110024][ T1683]        nr_add_node+0x1d9f/0x2570
[  698.111984][ T1683]        nr_rt_ioctl+0xc12/0xd50
[  698.113861][ T1683]        sock_do_ioctl+0xdc/0x300
[  698.115786][ T1683]        sock_ioctl+0x576/0x790
[  698.117658][ T1683]        __se_sys_ioctl+0xfc/0x170
[  698.119603][ T1683]        do_syscall_64+0xfa/0x3b0
[  698.121545][ T1683]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.123986][ T1683] 
[  698.123986][ T1683] other info that might help us debug this:
[  698.123986][ T1683] 
[  698.127770][ T1683] Chain exists of:
[  698.127770][ T1683]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  698.127770][ T1683] 
[  698.132775][ T1683]  Possible unsafe locking scenario:
[  698.132775][ T1683] 
[  698.135593][ T1683]        CPU0                    CPU1
[  698.137654][ T1683]        ----                    ----
[  698.139734][ T1683]   lock(&nr_node->node_lock);
[  698.141268][ T1683]                                lock(nr_node_list_lock);
[  698.143440][ T1683]                                lock(&nr_node->node_lock);
[  698.145679][ T1683]   lock(nr_neigh_list_lock);
[  698.147160][ T1683] 
[  698.147160][ T1683]  *** DEADLOCK ***
[  698.147160][ T1683] 
[  698.149827][ T1683] 1 lock held by syz.1.8099/1683:
[  698.151355][ T1683]  #0: ffff8880400de770 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570
[  698.154316][ T1683] 
[  698.154316][ T1683] stack backtrace:
[  698.156138][ T1683] CPU: 0 UID: 0 PID: 1683 Comm: syz.1.8099 Not tainted 6.16.0-syzkaller-12063-g37816488247d-dirty #0 PREEMPT(full) 
[  698.156150][ T1683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  698.156156][ T1683] Call Trace:
[  698.156162][ T1683]  <TASK>
[  698.156167][ T1683]  dump_stack_lvl+0x189/0x250
[  698.156182][ T1683]  ? __pfx_dump_stack_lvl+0x10/0x10
[  698.156193][ T1683]  ? __pfx__printk+0x10/0x10
[  698.156204][ T1683]  ? stack_trace_save+0x9c/0xe0
[  698.156217][ T1683]  print_circular_bug+0x2ee/0x310
[  698.156228][ T1683]  check_noncircular+0x134/0x160
[  698.156239][ T1683]  validate_chain+0xb9b/0x2140
[  698.156252][ T1683]  __lock_acquire+0xab9/0xd20
[  698.156264][ T1683]  ? nr_remove_neigh+0x25/0xe0
[  698.156273][ T1683]  lock_acquire+0x120/0x360
[  698.156284][ T1683]  ? nr_remove_neigh+0x25/0xe0
[  698.156294][ T1683]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  698.156304][ T1683]  ? nr_remove_neigh+0x25/0xe0
[  698.156312][ T1683]  _raw_spin_lock_bh+0x36/0x50
[  698.156323][ T1683]  ? nr_remove_neigh+0x25/0xe0
[  698.156331][ T1683]  nr_remove_neigh+0x25/0xe0
[  698.156340][ T1683]  nr_add_node+0x1d9f/0x2570
[  698.156349][ T1683]  ? __asan_memcpy+0x40/0x70
[  698.156359][ T1683]  ? nr_call_to_digi+0x126/0x1b0
[  698.156368][ T1683]  nr_rt_ioctl+0xc12/0xd50
[  698.156378][ T1683]  ? kasan_quarantine_put+0xdd/0x220
[  698.156387][ T1683]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  698.156399][ T1683]  ? apparmor_capable+0x137/0x1b0
[  698.156409][ T1683]  ? capable+0x89/0xe0
[  698.156417][ T1683]  ? nr_ioctl+0x1b1/0x3b0
[  698.156428][ T1683]  sock_do_ioctl+0xdc/0x300
[  698.156438][ T1683]  ? __pfx_sock_do_ioctl+0x10/0x10
[  698.156446][ T1683]  ? __lock_acquire+0xab9/0xd20
[  698.156460][ T1683]  sock_ioctl+0x576/0x790
[  698.156468][ T1683]  ? __pfx_sock_ioctl+0x10/0x10
[  698.156476][ T1683]  ? __fget_files+0x2a/0x420
[  698.156488][ T1683]  ? __fget_files+0x3a0/0x420
[  698.156500][ T1683]  ? __fget_files+0x2a/0x420
[  698.156512][ T1683]  ? bpf_lsm_file_ioctl+0x9/0x20
[  698.156523][ T1683]  ? __pfx_sock_ioctl+0x10/0x10
[  698.156530][ T1683]  __se_sys_ioctl+0xfc/0x170
[  698.156540][ T1683]  do_syscall_64+0xfa/0x3b0
[  698.156551][ T1683]  ? lockdep_hardirqs_on+0x9c/0x150
[  698.156560][ T1683]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.156569][ T1683]  ? exc_page_fault+0x9f/0xf0
[  698.156578][ T1683]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.156588][ T1683] RIP: 0033:0x7f3fd2d8ebe9
[  698.156597][ T1683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  698.156606][ T1683] RSP: 002b:00007f3fd3cd0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  698.156614][ T1683] RAX: ffffffffffffffda RBX: 00007f3fd2fb5fa0 RCX: 00007f3fd2d8ebe9
[  698.156621][ T1683] RDX: 0000200000000440 RSI: 000000000000890b RDI: 0000000000000005
[  698.156626][ T1683] RBP: 00007f3fd2e11e19 R08: 0000000000000000 R09: 0000000000000000
[  698.156631][ T1683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  698.156636][ T1683] R13: 00007f3fd2fb6038 R14: 00007f3fd2fb5fa0 R15: 00007ffe1b1e0de8
[  698.156646][ T1683]  </TASK>

VM DIAGNOSIS:
01:51:25  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000064 RBX=0000000000000064 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000122e RDI=000000000000122f RBP=00000000000003f8 RSP=ffffc90022537070
R8 =ffff8881085e8237 R9 =1ffff110210bd046 R10=dffffc0000000000 R11=ffffffff854e7250
R12=dffffc0000000000 R13=ffffffff99af4910 R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e72cc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f3fd3cd06c0 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000008 CR3=000000003f5e0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f3fd2f87498 00007f3fd2f87470 XMM03=00007f3fd2f874a8 00007f3fd2f874a0
XMM04=00007f3fd3aed100 00007f3fd2f87460 XMM05=00007f3fd2f87478 00007f3fd2f874c0
XMM06=00007f3fd2f874b8 00007f3fd2f874b0 XMM07=00007f3fd2f874a8 00007f3fd2f874a0
XMM08=0000000000000000 00007f3fd2e12ee7 XMM09=0000000000000000 00007f3fd2e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffff88810a7f2104 RCX=dffffc0000000000 RDX=dffffc0000000000
RSI=ffffffff8182b3f6 RDI=ffffc9000303ef68 RBP=dffffc0000000000 RSP=ffffc9000303ee88
R8 =ffffc9000303f030 R9 =0000000000000008 R10=ffffc9000303efb8 R11=ffffffff81ac3890
R12=1ffff92000607ded R13=ffffc9000303efa0 R14=ffffc9000303ef68 R15=ffffc9000303fa40
RIP=ffffffff81a7162a RFL=00000a03 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557e061500 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8137ce56c0 CR3=000000010fb62000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f8137012e53
XMM06=0000000000000000 00007f8137012e4d XMM07=0000000000000000 00007f8137012e61
XMM08=0000000000000000 00007f8137012ee7 XMM09=0000000000000000 00007f8137012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
