last executing test programs:

3.58581471s ago: executing program 1 (id=1783):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000040)="ac19f2616d3a8bbb949571b35058915ade1490b4cc921ed55bcba0b2ecd5f43138ce10fd849b9ca375d542e0663e0ae92628a82d77c3de0a66b143c777030a58e212561b45b32c14523afdc432f834d5a7e7a258567207127bdd62c4dad1", 0x5e)
write$cgroup_subtree(r0, 0x0, 0x32600)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x60d7e03f28f4c8dd, 0x10010, r0, 0x3f495000)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f0000001080)=""/4072, &(0x7f0000000000)=0xfe8)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000001c0))

3.583095714s ago: executing program 1 (id=1784):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0x301, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x5c}}, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x2c, r3, 0x431, 0x70bd2b, 0xffffffff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @remote, @val={@void, {0x8100, 0x7, 0x1, 0x3}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd690b", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8848}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}}}}}}}, 0x0)
socket$phonet(0x23, 0x2, 0x1)
syz_emit_ethernet(0x86, &(0x7f00000010c0)=ANY=[@ANYBLOB="ffffffffffffbb00000000000000780a010102ac1414aa0c0090780100000047000000000000000011000000000000e0000002440c0001ac1414bb4e216eb5e1cfce0000443c0001e000000100000000ac1414bb00000000ac141400000000000000000000000000000000ac1e000100"/129], 0x0)
getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x24, 0x10, 0xfd9d9bf8e11c35ca, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_VF_PORTS={0x4}]}, 0x24}}, 0x0)
pipe(&(0x7f0000000000))

3.506481781s ago: executing program 1 (id=1785):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801"], 0x0}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000200)=0x38)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES64, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x9303, 0x30, 0x7, 0x4}, &(0x7f0000000500)=0x18)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0xa, 0x4, 0x4, 0xc}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local})
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet(r7, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)='e', 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e23, @rand_addr=0x64010105}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000008c0)='K', 0x1}], 0x1}}], 0x2, 0x4000)
shutdown(r7, 0x1)
setsockopt(r7, 0x84, 0x7d, &(0x7f00000002c0)="aa8e0cf56164be5b", 0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r5}, 0x10)
close(r2)

1.737804432s ago: executing program 2 (id=1806):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x1c, r1, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x4000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010100000000000000000000000a58000000090a030000000000000000000004000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021080003400000005408000f400000000a0c000b400000ee"], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0xffffffe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff]}, @TCA_POLICE_TBF={0xf, 0x1, {0x0, 0x256da761e0644cfa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xffff, 0xffffc3fd}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x488}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff01000e0000000000000000000000010c00068005000100000000004700028005000100010000000600034000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x2048014}, 0x0)

1.637173761s ago: executing program 2 (id=1807):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
read(r0, &(0x7f0000000080)=""/164, 0xa4)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x18, 0x1401, 0x1, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x54}, 0x4800)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000400)=0xc)
sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r3], 0x44}}, 0x0)

756.69894ms ago: executing program 2 (id=1821):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x2002, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x96f0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x5c, &(0x7f0000000000)={&(0x7f00000003c0)=@newtaction={0x68, 0x30, 0xffff}, 0x68}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$xdp(0x2c, 0x3, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="12000000140100000800000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000001d80), 0x0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r4, &(0x7f0000000340), 0x0}, 0x20) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xa00, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="140100000000b2000500000000000000850000007b00000095"], 0x0, 0x0, 0xfffffffffffffe5f, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async)
bind$netrom(r5, &(0x7f0000000300)={{0x3, @bcast}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}, 0x48) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) (async)
socket$key(0xf, 0x3, 0x2)
socket$inet_smc(0x2b, 0x1, 0x0)
close(0xffffffffffffffff) (async)
ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000240)={'rose0\x00'}) (async)
write$cgroup_int(r5, &(0x7f0000000200)=0x10001, 0x12) (async)
sendfile(r5, r2, 0x0, 0xf03a0005)
r8 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_opts(r8, 0x0, 0xd, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)

754.684362ms ago: executing program 2 (id=1823):
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x1, 0x8, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000801)
r2 = socket(0x22, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8)
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0x18000}, {0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x3}, 0x4}, 0x0, {[0x6, 0x0, 0x2, 0xfffffef9, 0x0, 0x0, 0x1464410e, 0x7]}}, 0x5c)
r3 = socket$inet(0x2, 0x3, 0x30)
getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000200)=<r4=>0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x11, 0x2, 0x0, 0x1, [@nested={0xc, 0x14, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @u32=0x9}]}, @generic='V']}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001800200080000000fcdbcf250a1480008801fd07000900000800190088a849b0a159c6429b3484e0cc5b1801166d7cca110afbd0382b701c5ef9b6603ed0ec9bf32de03aadfe79a441b514b14fb68d2eb2ffc46d6fba2b2a2bc9bba39260817cff7f0d15528c811dad20154e3e96a94cbeb9c11275fff88918968eb0cabf13b49faf08f184673d8ed8d0523eaed8195556f064c71f87abe942c653d982f665d92b4d748fe2ec34d5de168a70caf363340baa033cb8ff10f3f80bdadf3740fded2e9aedeb03000000b3e11cffa8bf1ec77675ceb9a0c0e944fee76a232fe0759ef388fe951b445a6e9eb1619fbb7868fc5e88e9e1b1f35a5a1ad305b38e700fd45ad97f22126a4434c70496c86f", @ANYRES32=r4, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x8000080}, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

694.23136ms ago: executing program 2 (id=1825):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x18) (async)
r1 = socket$inet(0x2, 0x5, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000000000a03000000000000000000000a"], 0x0, 0x3e}, 0x20) (async)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f0000000340)="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", &(0x7f00000001c0)=""/109}, 0x20) (async)
shutdown(r1, 0x0) (async)
recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)

618.606846ms ago: executing program 2 (id=1826):
r0 = socket$kcm(0x29, 0x5, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @local, 0x5}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x0, 'rose0\x00', {}, 0x7})
write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r3, 0x0, 0xffffffff000)

298.097875ms ago: executing program 0 (id=1832):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf25200100000120010000000000000000000700000001000000004e210002020000006c00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe3200000000000000000000000000ffffac1414bb000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000043050000000000000400000000000000ffffffffffffff7f000000000000000000000000000000000000000000000000000000002cbd7000003500000a000400500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000600000003834fd81d166017e0db9a200000000c538c7cb7a1c000400027fb259788e0ba6da05d083db4f958474bdd61ee1e97bd6646c016e042aee5cf952d278c9383e57bf82802d238db735ffd933a02b9bf69617c78ffcf9626c3706ca7dfe19a22419d017519eb853ed221d6ed37044ca2f582bd3612471e61cd901d42bdc04c355a1f9e0021f5b0ddbc0ba9d9a51af772e4e7932b0de5031c35814837f0f9704f68642f5046fe90a2df57aab17e05ed84954669019d001750185965ee5a2f83fb4928a88786f6804d4f3e589d344432263d0"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0)

218.041135ms ago: executing program 0 (id=1833):
bpf$MAP_CREATE(0x0, 0x0, 0x50) (async)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)="3703c70f70e244b7878fedf0c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b0da4173b9e63544ee1f32fc67080b7b83c0a31", 0x3c, 0x2)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r2=>0x0, 0x29, 0x8, 0x4, 0x0, 0x0, @remote, @remote, 0x7, 0x80, 0x80000000, 0xa}}) (async)
r3 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async)
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x3c}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x24000000) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r6=>0x0}, &(0x7f0000000200)=0xc) (async)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000240)={@mcast1, <r7=>0x0}, &(0x7f0000000280)=0x14)
sendmsg$nl_xfrm(r0, &(0x7f00000008c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f00000002c0)=@updsa={0x104, 0x1a, 0x100, 0x70bd2d, 0x25dfdbfd, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x2, 0x0}, 0x4e23, 0x0, 0x4e23, 0x0, 0x2, 0x20, 0xc0, 0x62, r2, r6}, {@in=@private=0xa010102, 0x4d6, 0x6c}, @in6=@local, {0x73b, 0x8, 0x97, 0x9, 0x6, 0x3, 0x8, 0x8}, {0x3d31, 0xce, 0x3074, 0x2}, {0xff, 0x8}, 0x70bd27, 0x3505, 0xa, 0x3, 0x8, 0x4}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @offload={0xc, 0x1c, {r7, 0x3}}]}, 0x104}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000001)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r9, 0x0) (async)
getsockopt$inet6_tcp_buf(r9, 0x6, 0xb, 0x0, &(0x7f0000000300)) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x48, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x1c}, [@typed={0x4, 0x11f}, @nested={0x8, 0xb4, 0x0, 0x1, [@nested={0x4, 0x1f}]}, @nested={0x4, 0xd9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000182"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
r11 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$ARPT_SO_SET_REPLACE(r11, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x0, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x0, 0xffffff00, 0x13, 0x0, {@mac=@remote, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0xfe01, 0x0, 0x0, 0x0, 0x0, 0xfffd, 'team_slave_1\x00', 'veth1_macvtap\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="1758a179fe8f", @rand_addr=0x64010100, @multicast1, 0x2, 0xffffffff}}}, {{@arp={@rand_addr=0x64010101, @rand_addr, 0x0, 0x0, 0xc, 0x3, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x8a8cfb792f7af7f0]}}, 0x0, 0xfffc, 0x0, 0xa51, 0x0, 0x1000, 'team_slave_0\x00', 'veth0\x00', {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4}}}, {{@arp={@local, @remote, 0xffffffff, 0x0, 0x0, 0x9, {@mac}, {@mac=@random="7c3a86e2977f", {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffff, 'veth0_to_bond\x00', 'geneve1\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @empty, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x440) (async)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0)

217.151658ms ago: executing program 0 (id=1834):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000d10000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x60000000}, 0x10}, 0x94)

145.077117ms ago: executing program 0 (id=1835):
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
socket$inet(0x2, 0x1, 0x1)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x304}, "38b1acb1812aceed", "be6be3349bf6781aa925736d4238a19268a4f736feceb0837781f81ad518bb6e", "05ba26bf", "e5c8a6a300"}, 0x38)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x11}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x280048d1}, 0x80)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000080)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180))
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x700, 0x1, 0xfffffffc, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @broadcast, @multicast2}}}})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r7=>0x0})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000940)=[{{&(0x7f00000004c0)={0xa, 0x4e1d, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000020000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x500}, 0x10}, 0x94)
r9 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r9, @ANYRES32=r9], 0x44}}, 0x0)

88.226539ms ago: executing program 1 (id=1836):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e)
recvmmsg(0xffffffffffffffff, &(0x7f000000c800)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/25, 0x19}, {&(0x7f0000000380)=""/93, 0x5d}, {&(0x7f0000000a00)=""/4096, 0xe22}, {&(0x7f0000001a00)=""/110, 0x6e}, {&(0x7f0000000400)=""/217, 0xd9}], 0x5}, 0xc}, {{0x0, 0x0, 0x0}, 0x24c9ddb}, {{0x0, 0x0, 0x0}, 0xf04}, {{0x0, 0x0, 0x0}, 0x1}], 0x4, 0x40000000, 0x0)

87.648637ms ago: executing program 1 (id=1837):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001a00010000000000fcdbdf2581"], 0x1c}}, 0x4000080)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001a00010000000000fcdbdf2581"], 0x1c}}, 0x4000080) (async)

6.950217ms ago: executing program 0 (id=1838):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x8000}}]}}]}, 0x48}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0)
ioctl$SIOCAX25DELUID(r5, 0x89e2, &(0x7f00000000c0)={0x3, @null})
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000009c0)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x0, 0x80001088, 0x73}, 0x2c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newtfilter={0x30, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {}, {0x8, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x14)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0)
getsockname$packet(r7, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.194561ms ago: executing program 1 (id=1839):
socket$netlink(0x10, 0x3, 0x9) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
close(0xffffffffffffffff)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x4}, @ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x2}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r0}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={<r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d5f47f000000000000010000000000020000000000140000000000000000000000020000000000000000000000140000000000000000000000020000000000000000000000110000000000000000000000010000000000000000000000110000000000000002000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a000002"], 0xf}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async)
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) (async)
syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) (async)
connect$rose(r4, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a00000000000061194c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async)
bind$alg(0xffffffffffffffff, 0x0, 0x0) (async)
r5 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0xc000000) (async)
setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x0, 0xb63e}, 0xc) (async)
setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4e24, 0x0, @mcast2}, 0x0, {[0x0, 0xfffffffc, 0x0, 0x0, 0x6]}}, 0x5c)
r6 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f0000000180)=0x5, 0x4) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@datasec={0x3, 0x1, 0x0, 0xf, 0xfe97, [{0x40105, 0x1, 0x5}], 'M6U'}, @datasec={0x7, 0x0, 0x0, 0xf, 0x1, [], "b5"}]}, {0x0, [0x61, 0x2e, 0x61]}}, &(0x7f0000001b00)=""/3, 0x45, 0x3, 0x1, 0x5}, 0x28) (async)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x14, 0x9, 0x3, 0x3, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_x_nat_t_type={0x1, 0x14, 0x9}]}, 0x18}}, 0x40) (async)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f00000004c0)=""/4096, &(0x7f0000000180)=0x1000)

0s ago: executing program 0 (id=1840):
ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_delrule={0x30, 0x21, 0x2, 0x70bd25, 0x25dfdbfc, {0xa, 0x80, 0x14, 0x8, 0x5, 0x0, 0x0, 0x7, 0x4}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000800}, 0x20040004)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='net_prio.prioidx\x00', 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc8, 0xc8, 0x6, [@struct={0xa, 0xa, 0x0, 0x4, 0x0, 0x1, [{0x4, 0x5, 0x8}, {0xd, 0x1, 0x4}, {0x10, 0x1, 0xa4f}, {0x10, 0x4, 0x34d}, {0x2, 0x5, 0x9}, {0xe, 0x1, 0xa8}, {0xf, 0x5}, {0x9, 0x5, 0xffffffff}, {0x9, 0x1, 0x48dc}, {0x8, 0x1, 0x2a}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x3}]}, @typedef={0x5, 0x0, 0x0, 0x8, 0x1}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0xf, 0xf}, {0xe, 0x4}, {0x8, 0x3}]}]}, {0x0, [0x2e, 0x0, 0x5f, 0x61]}}, &(0x7f0000000340)=""/164, 0xe6, 0xa4, 0x0, 0x40}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x20, &(0x7f00000006c0)={&(0x7f00000004c0)=""/242, 0xf2, <r2=>0x0, &(0x7f00000005c0)=""/244, 0xf4}}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x5, 0x1d, &(0x7f0000000740)=@raw=[@tail_call, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}}, @ldst={0x2, 0x0, 0x6, 0x8, 0x9, 0x6, 0x10}, @map_fd={0x18, 0x2}], &(0x7f0000000840)='syzkaller\x00', 0xfffffffc, 0x9b, &(0x7f0000000880)=""/155, 0x41100, 0x3, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000980)={0x3, 0x9, 0x6, 0xb9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f00000009c0)=[0x1, 0x1], &(0x7f0000000a00)=[{0x3, 0x4, 0xd, 0x6}, {0x1, 0x5, 0xc, 0x7}, {0x2, 0x4, 0x5, 0x8}, {0x0, 0x4, 0xa, 0xd}, {0x0, 0x3, 0x8, 0x5}], 0x10, 0x2}, 0x94)
r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b40)={0x0, 0xae}, 0xc)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{0xffffffffffffffff, <r6=>0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000c40)}, 0x20)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000cc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{0xffffffffffffffff, <r8=>0xffffffffffffffff}, &(0x7f0000000d40), &(0x7f0000000d80)='%pB    \x00'}, 0x20)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000e00)={<r9=>0xffffffffffffffff, 0x94a, 0xc4c, 0x84a})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e40)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x916a71e730be03cb, 0x17, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8625}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x4, r1, 0x8, &(0x7f0000000440)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x3, 0x4, 0x3}, 0x10, r2, r3, 0x0, &(0x7f0000000e80)=[r4, r5, r6, r7, r8, r9, r10, 0xffffffffffffffff], 0x0, 0x10, 0x83}, 0x94)
r11 = openat$cgroup_ro(r9, &(0x7f0000000f80)='memory.events\x00', 0x0, 0x0)
ioctl$sock_rose_SIOCADDRT(r11, 0x890b, &(0x7f0000000fc0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @null, @null, @null]})
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000001040)={0xdb6, 0xc21e, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000015980)={0x32, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x0, 'wrr\x00', 0xa, 0x8, 0x2c}, 0x2c)
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000159c0)=<r12=>0x0, &(0x7f0000015a00)=0x4)
connect$inet6(r0, &(0x7f0000015a40)={0xa, 0x4e23, 0x7ff, @mcast1, 0x80000001}, 0x1c)
ioctl$SIOCRSSL2CALL(r9, 0x89e2, &(0x7f0000015a80)=@default)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r9, &(0x7f0000015b80)={&(0x7f0000015ac0)={0x10, 0x0, 0x0, 0x4020000}, 0xc, &(0x7f0000015b40)={&(0x7f0000015b00)={0x24, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xffff}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40004)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000015d80)={&(0x7f0000015bc0)="edd00e815b0ee4ef31c094e9a7a3f826e62dd48a66586289409410927b476178c725aceb69161e6b952f8530dff54609969351607f0690bd892f40342dce57da1bcecf82a874b22ba88bc48a3040c8ed82921aa515e475a5863da08fcec021b2938507d5e81d3fa0722e8d438c2aebfdb5db2bb2321d03f1ef2a8f7c10dd3fd6b3ea8007b21fd9a914119f49a77b2d459384236744202bd6f82dcfb9167b5970e5fb99aa7eb51e1ca10aeded1b3ff9616586ecf2973eee7e15094615b89affbc9542c80f0eb5c3ff4d2b120b71302cd440", &(0x7f0000015cc0)=""/56, &(0x7f0000015d00)="9324b28e5405b9c60b5b0c3d493bb28b6bb4db55", &(0x7f0000015d40)="0a159610df5d0b3b33e2ab6640cfcdfdc639", 0x0, r8, 0x4}, 0x38)
ioctl$BTRFS_IOC_RESIZE(r6, 0x50009403, &(0x7f0000015dc0)={{r8}, {@void, @actul_num={@val=0x2b, 0x7c7, 0x47}}})
r13 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r13, 0x11b, 0x3, &(0x7f0000015e00)=0x1008450, 0x4)
openat$cgroup_procs(r11, &(0x7f0000015e40)='cgroup.procs\x00', 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000015e80), r9)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r11, &(0x7f0000015fc0)={&(0x7f0000015ec0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000015f80)={&(0x7f0000015f00)={0x5c, 0x0, 0x10, 0x70bd25, 0xff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x800)
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r9, 0x800442d4, &(0x7f0000016000)=0x4)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:15862' (ED25519) to the list of known hosts.
syzkaller login: [   56.336337][ T5815] cgroup: Unknown subsys name 'net'
[   56.451455][ T5815] cgroup: Unknown subsys name 'cpuset'
[   56.456667][ T5815] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.597255][ T5815] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.150543][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.155633][ T5221] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   64.159308][ T5221] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   64.162984][ T5221] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   64.166572][ T5221] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   64.194569][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.203527][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.206221][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.209405][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   64.212250][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.291021][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   64.295136][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   64.298713][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   64.309140][ T5221] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   64.312395][ T5221] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   64.481162][ T5830] chnl_net:caif_netlink_parms(): no params data found
[   64.535826][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   64.616943][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.620352][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.622870][ T5830] bridge_slave_0: entered allmulticast mode
[   64.626251][ T5830] bridge_slave_0: entered promiscuous mode
[   64.648448][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.650937][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.654347][ T5830] bridge_slave_1: entered allmulticast mode
[   64.658693][ T5830] bridge_slave_1: entered promiscuous mode
[   64.707150][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.711471][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.714432][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.717344][ T5834] bridge_slave_0: entered allmulticast mode
[   64.723402][ T5834] bridge_slave_0: entered promiscuous mode
[   64.744726][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.761443][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.763785][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.766688][ T5834] bridge_slave_1: entered allmulticast mode
[   64.771087][ T5834] bridge_slave_1: entered promiscuous mode
[   64.805108][ T5830] team0: Port device team_slave_0 added
[   64.816269][ T5839] chnl_net:caif_netlink_parms(): no params data found
[   64.823397][ T5830] team0: Port device team_slave_1 added
[   64.827080][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.859097][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.877486][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.881039][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.890535][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.915391][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.917585][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.926370][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.937573][ T5834] team0: Port device team_slave_0 added
[   64.971888][ T5834] team0: Port device team_slave_1 added
[   65.038150][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.040917][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.052221][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.061167][ T5830] hsr_slave_0: entered promiscuous mode
[   65.064033][ T5830] hsr_slave_1: entered promiscuous mode
[   65.067070][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.070112][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.073018][ T5839] bridge_slave_0: entered allmulticast mode
[   65.075879][ T5839] bridge_slave_0: entered promiscuous mode
[   65.080173][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.082754][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.092336][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.100444][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.102748][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.105073][ T5839] bridge_slave_1: entered allmulticast mode
[   65.108243][ T5839] bridge_slave_1: entered promiscuous mode
[   65.129373][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.135530][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.231944][ T5834] hsr_slave_0: entered promiscuous mode
[   65.235070][ T5834] hsr_slave_1: entered promiscuous mode
[   65.238047][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.241393][ T5834] Cannot create hsr debugfs directory
[   65.245757][ T5839] team0: Port device team_slave_0 added
[   65.250015][ T5839] team0: Port device team_slave_1 added
[   65.316951][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.320200][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.330052][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.346479][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.349338][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.359646][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.449531][ T5839] hsr_slave_0: entered promiscuous mode
[   65.452535][ T5839] hsr_slave_1: entered promiscuous mode
[   65.455401][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   65.458858][ T5839] Cannot create hsr debugfs directory
[   65.619460][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.630918][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.643048][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.674449][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.724240][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.737657][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.753283][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.762515][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.811504][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.824119][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.833786][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.842142][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.930829][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.964259][ T5830] 8021q: adding VLAN 0 to HW filter on device team0
[   65.975054][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.989252][ T4956] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.992300][ T4956] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.009223][ T4956] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.012092][ T4956] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.021797][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   66.033602][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.040559][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.043483][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.069304][ T4956] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.072099][ T4956] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.096483][ T5839] 8021q: adding VLAN 0 to HW filter on device team0
[   66.120442][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.123125][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.151372][ T4956] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.153635][ T4956] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.239755][ T5221] Bluetooth: hci1: command tx timeout
[   66.243239][ T5221] Bluetooth: hci0: command tx timeout
[   66.400362][ T5833] Bluetooth: hci2: command tx timeout
[   66.417256][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.444382][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.476350][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.487551][ T5830] veth0_vlan: entered promiscuous mode
[   66.504136][ T5830] veth1_vlan: entered promiscuous mode
[   66.572071][ T5830] veth0_macvtap: entered promiscuous mode
[   66.580293][ T5839] veth0_vlan: entered promiscuous mode
[   66.582704][ T5830] veth1_macvtap: entered promiscuous mode
[   66.592201][ T5834] veth0_vlan: entered promiscuous mode
[   66.597447][ T5839] veth1_vlan: entered promiscuous mode
[   66.603920][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.615031][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.630700][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.633632][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.636822][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.646685][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.652764][ T5834] veth1_vlan: entered promiscuous mode
[   66.695550][ T5839] veth0_macvtap: entered promiscuous mode
[   66.710931][ T5839] veth1_macvtap: entered promiscuous mode
[   66.757469][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.762225][ T5834] veth0_macvtap: entered promiscuous mode
[   66.773076][ T4956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.774366][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.775591][ T4956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.784106][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.787608][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.791177][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.794798][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.824125][ T5834] veth1_macvtap: entered promiscuous mode
[   66.883121][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.886976][ T3622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.894159][ T3622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.932741][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.976751][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.981022][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.984558][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.990492][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.995254][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.004005][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.006920][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.090484][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.093365][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.126379][ T5896] Zero length message leads to an empty skb
[   67.142537][ T4956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.146877][ T4956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.181513][  T650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.183958][  T650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.230706][ T5898] tipc: Started in network mode
[   67.232789][ T5898] tipc: Node identity 26d72911a8ed, cluster identity 4711
[   67.235803][ T5898] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   67.246572][ T5898] syzkaller0: entered promiscuous mode
[   67.257961][ T5898] syzkaller0: entered allmulticast mode
[   67.284314][ T5898] tipc: Resetting bearer <eth:syzkaller0>
[   67.299253][ T5897] tipc: Resetting bearer <eth:syzkaller0>
[   67.349465][ T5897] tipc: Disabling bearer <eth:syzkaller0>
[   67.377602][ T5911] netlink: 'syz.0.6': attribute type 1 has an invalid length.
[   67.631159][ T5881] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   67.634270][ T5881] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   67.671968][ T5933] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9'.
[   67.708828][ T5881] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   67.730148][ T5933] netlink: 1 bytes leftover after parsing attributes in process `syz.0.9'.
[   67.858728][ T5944] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.897679][ T5944] vlan2: entered promiscuous mode
[   67.906652][ T5944] bridge0: entered promiscuous mode
[   67.912000][ T5944] vlan2: entered allmulticast mode
[   67.916562][ T5944] bridge0: entered allmulticast mode
[   67.932430][ T5954] netlink: 92 bytes leftover after parsing attributes in process `syz.0.11'.
[   68.079382][   T33] audit: type=1804 audit(1752973433.112:2): pid=5962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.12" name="/newroot/4/cgroup.controllers" dev="tmpfs" ino=38 res=1 errno=0
[   68.098615][   T33] audit: type=1800 audit(1752973433.112:3): pid=5962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.12" name="cgroup.controllers" dev="tmpfs" ino=38 res=0 errno=0
[   68.318453][ T5833] Bluetooth: hci0: command tx timeout
[   68.320661][ T5833] Bluetooth: hci1: command tx timeout
[   68.472710][ T5981] netlink: 36 bytes leftover after parsing attributes in process `syz.1.16'.
[   68.476596][ T5982] netlink: 36 bytes leftover after parsing attributes in process `syz.1.16'.
[   68.482570][ T5221] Bluetooth: hci2: command tx timeout
[   68.514023][ T5985] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.529444][ T5985] xt_TCPMSS: Only works on TCP SYN packets
[   68.737300][ T6000] netlink: 32 bytes leftover after parsing attributes in process `syz.1.22'.
[   69.015937][ T6012] netlink: 'syz.0.27': attribute type 1 has an invalid length.
[   69.110958][ T6020] veth3: entered promiscuous mode
[   69.173617][ T6022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.30'.
[   69.190192][ T6022] xfrm1: entered promiscuous mode
[   69.192020][ T6022] xfrm1: entered allmulticast mode
[   69.268601][ T6026] sctp: [Deprecated]: syz.2.32 (pid 6026) Use of struct sctp_assoc_value in delayed_ack socket option.
[   69.268601][ T6026] Use struct sctp_sack_info instead
[   69.279756][ T6031] sctp: [Deprecated]: syz.1.33 (pid 6031) Use of int in max_burst socket option.
[   69.279756][ T6031] Use struct sctp_assoc_value instead
[   69.325827][ T6031] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:20003
[   69.492559][ T6043] Bluetooth: MGMT ver 1.23
[   69.540771][ T6049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.39'.
[   69.552625][ T6049] xfrm1: entered promiscuous mode
[   69.554863][ T6049] xfrm1: entered allmulticast mode
[   69.643073][ T6055] netlink: 28 bytes leftover after parsing attributes in process `syz.0.41'.
[   69.759037][ T6063] netlink: 24 bytes leftover after parsing attributes in process `syz.0.44'.
[   70.114114][ T6095] netlink: 'syz.0.55': attribute type 1 has an invalid length.
[   70.404266][ T5221] Bluetooth: hci1: command tx timeout
[   70.406503][ T5221] Bluetooth: hci0: command tx timeout
[   70.558327][ T5221] Bluetooth: hci2: command tx timeout
[   70.659955][ T6111] netlink: 'syz.1.60': attribute type 1 has an invalid length.
[   71.123847][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[   71.125991][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[   71.162640][ T6133] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[   71.180593][ T6133] tipc: Started in network mode
[   71.182268][ T6133] tipc: Node identity 7, cluster identity 4711
[   71.184734][ T6133] tipc: Node number set to 7
[   71.243674][ T6136] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   71.249215][ T6139] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   71.255257][ T6141] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   71.317080][ T6149] netlink: 'syz.1.70': attribute type 1 has an invalid length.
[   71.319574][    T9] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0
[   71.327263][    T9] hid-generic 0005:16C0:5505.0002: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[   71.334644][ T6149] netlink: 'syz.1.70': attribute type 1 has an invalid length.
[   71.400731][ T6157] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.403703][ T6157] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.577095][ T6171] netlink: 'syz.1.76': attribute type 83 has an invalid length.
[   71.620859][ T6175] netlink: 'syz.1.79': attribute type 20 has an invalid length.
[   71.759722][ T6178] syz.1.80 uses obsolete (PF_INET,SOCK_PACKET)
[   71.759959][ T6181] netlink: 'syz.0.78': attribute type 1 has an invalid length.
[   71.923446][ T6187] xfrm1: entered promiscuous mode
[   71.925899][ T6187] xfrm1: entered allmulticast mode
[   72.213675][ T6203] netlink: 'syz.1.90': attribute type 13 has an invalid length.
[   72.278836][ T6203] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.281931][ T6203] bridge0: port 2(bridge_slave_1) entered listening state
[   72.285766][ T6203] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.288815][ T6203] bridge0: port 1(bridge_slave_0) entered listening state
[   72.304961][ T6203] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   72.479092][ T5221] Bluetooth: hci0: command tx timeout
[   72.482504][ T5221] Bluetooth: hci1: command tx timeout
[   72.496571][ T6219] validate_nla: 1 callbacks suppressed
[   72.496612][ T6219] netlink: 'syz.1.93': attribute type 7 has an invalid length.
[   72.639537][ T5221] Bluetooth: hci2: command tx timeout
[   72.773894][ T6238] netlink: 'syz.1.100': attribute type 1 has an invalid length.
[   72.951803][ T6252] xt_hashlimit: size too large, truncated to 1048576
[   73.019672][ T6255] __nla_validate_parse: 22 callbacks suppressed
[   73.019690][ T6255] netlink: 88 bytes leftover after parsing attributes in process `syz.2.105'.
[   73.126959][ T6260] netlink: 32 bytes leftover after parsing attributes in process `syz.1.106'.
[   73.130810][ T6260] netlink: 'syz.1.106': attribute type 39 has an invalid length.
[   73.223613][ T6265] netlink: 'syz.2.108': attribute type 64 has an invalid length.
[   73.227376][ T6265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.108'.
[   73.396050][ T6260] netlink: 248 bytes leftover after parsing attributes in process `syz.1.106'.
[   73.401002][ T6260] netlink: 20 bytes leftover after parsing attributes in process `syz.1.106'.
[   73.509419][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.110'.
[   73.762769][ T6302] netlink: 12 bytes leftover after parsing attributes in process `syz.1.116'.
[   73.775132][ T6304] lo speed is unknown, defaulting to 1000
[   73.777643][ T6304] lo speed is unknown, defaulting to 1000
[   73.785549][ T6304] lo speed is unknown, defaulting to 1000
[   73.806995][ T6304] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   73.826039][ T6304] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   73.863442][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.117'.
[   73.900691][ T6304] lo speed is unknown, defaulting to 1000
[   73.912192][ T6304] lo speed is unknown, defaulting to 1000
[   73.920088][ T6304] lo speed is unknown, defaulting to 1000
[   73.961900][ T6311] netlink: 'syz.2.120': attribute type 83 has an invalid length.
[   74.040794][ T6314] lo speed is unknown, defaulting to 1000
[   74.147662][ T6322] sctp: [Deprecated]: syz.0.123 (pid 6322) Use of int in max_burst socket option.
[   74.147662][ T6322] Use struct sctp_assoc_value instead
[   74.160172][ T6323] sctp: [Deprecated]: syz.0.123 (pid 6323) Use of int in max_burst socket option.
[   74.160172][ T6323] Use struct sctp_assoc_value instead
[   74.301540][ T6329] netlink: 36 bytes leftover after parsing attributes in process `syz.0.124'.
[   74.801442][ T6343] netlink: 'syz.0.129': attribute type 10 has an invalid length.
[   74.804375][ T6343] netlink: 40 bytes leftover after parsing attributes in process `syz.0.129'.
[   74.808267][ T6343] dummy0: entered promiscuous mode
[   74.810637][ T6343] dummy0: entered allmulticast mode
[   74.818623][ T6343] bridge0: port 3(dummy0) entered blocking state
[   74.821522][ T6343] bridge0: port 3(dummy0) entered disabled state
[   74.831647][ T6343] bridge0: port 3(dummy0) entered blocking state
[   74.834000][ T6343] bridge0: port 3(dummy0) entered forwarding state
[   74.858384][ T6347] netlink: 'syz.2.131': attribute type 1 has an invalid length.
[   74.861721][ T6347] netlink: 'syz.2.131': attribute type 2 has an invalid length.
[   75.165392][ T6371] sctp: [Deprecated]: syz.1.140 (pid 6371) Use of int in max_burst socket option.
[   75.165392][ T6371] Use struct sctp_assoc_value instead
[   75.223736][ T6379] geneve2: entered promiscuous mode
[   75.360583][ T6392] netlink: 'syz.1.145': attribute type 39 has an invalid length.
[   75.446328][ T6405] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.520699][ T6405] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.615645][ T6405] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.680417][ T6427] syzkaller0: entered promiscuous mode
[   75.682797][ T6427] syzkaller0: entered allmulticast mode
[   75.715510][ T6405] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.793107][ T6405] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.805601][ T6405] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.813428][ T6405] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.822553][ T6405] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.831300][ T6404] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.838603][ T6434] nbd: must specify an index to disconnect
[   76.916124][ T6404] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.939058][ T6437] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   76.942247][ T6437] syzkaller0: entered promiscuous mode
[   76.944363][ T6437] syzkaller0: entered allmulticast mode
[   76.964834][ T6437] tipc: Resetting bearer <eth:syzkaller0>
[   76.971625][ T6436] tipc: Resetting bearer <eth:syzkaller0>
[   76.981658][ T6436] tipc: Disabling bearer <eth:syzkaller0>
[   76.991079][ T6404] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.087629][ T6404] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.125236][ T6446] warning: `syz.1.158' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   77.143759][ T6449] netlink: 'syz.2.159': attribute type 1 has an invalid length.
[   77.257354][ T6457] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[   77.261686][ T6457] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[   77.739620][ T6488] team_slave_0: entered promiscuous mode
[   77.742176][ T6488] team_slave_1: entered promiscuous mode
[   77.747466][ T6488] 8021q: adding VLAN 0 to HW filter on device macvtap1
[   77.804641][ T6488] syzkaller1: entered promiscuous mode
[   77.807564][ T6488] syzkaller1: entered allmulticast mode
[   78.021750][ T6494] Cannot find set identified by id 2 to match
[   78.084336][ T6496] __nla_validate_parse: 9 callbacks suppressed
[   78.084354][ T6496] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.174'.
[   78.344429][ T6508] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.177'.
[   78.489275][ T6515] netlink: 40 bytes leftover after parsing attributes in process `syz.2.179'.
[   78.497500][ T6515] validate_nla: 1 callbacks suppressed
[   78.497519][ T6515] netlink: 'syz.2.179': attribute type 9 has an invalid length.
[   78.713390][ T6530] tipc: Started in network mode
[   78.715040][ T6530] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[   78.719510][ T6530] tipc: Enabled bearer <eth:vlan0>, priority 18
[   78.735655][ T6530] netlink: 204 bytes leftover after parsing attributes in process `syz.1.184'.
[   78.739980][ T6530] netlink: 16 bytes leftover after parsing attributes in process `syz.1.184'.
[   78.780623][ T6533] vxcan1: entered allmulticast mode
[   78.783631][ T6533] vxcan1: left allmulticast mode
[   78.846942][ T6533] raw_sendmsg: syz.1.185 forgot to set AF_INET. Fix it!
[   79.085909][ T6545] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.145934][ T6550] xfrm2: entered allmulticast mode
[   79.435490][ T6569] IPv6: Can't replace route, no match found
[   79.548918][ T6573] xt_CONNSECMARK: invalid mode: 254
[   79.601146][ T6580] Cannot find add_set index 0 as target
[   79.607084][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'.
[   79.609896][ T6581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'.
[   79.613185][ T6580] openvswitch: netlink: Message has 13 unknown bytes.
[   79.616816][ T6581] openvswitch: netlink: Message has 13 unknown bytes.
[   79.664918][ T6586] netlink: 240 bytes leftover after parsing attributes in process `syz.2.194'.
[   79.688097][ T6573] netlink: 168 bytes leftover after parsing attributes in process `syz.2.194'.
[   79.814959][ T6594] netlink: 'syz.2.198': attribute type 1 has an invalid length.
[   79.839681][  T793] tipc: Node number set to 10005162
[   79.873911][ T6595] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[   79.927562][ T6604] netlink: 'syz.1.200': attribute type 3 has an invalid length.
[   80.192209][ T6616] netlink: 'syz.1.204': attribute type 1 has an invalid length.
[   80.195759][ T6616] netlink: 244 bytes leftover after parsing attributes in process `syz.1.204'.
[   80.485229][ T6404] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.499184][ T6404] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.533412][ T6621] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.549702][ T6404] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.562493][ T6404] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.615954][ T6621] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.711001][ T6621] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.791992][ T6621] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.879017][ T6621] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.903919][ T6621] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.926476][ T6621] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.942632][ T6621] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.020836][ T6633] batadv1: entered promiscuous mode
[   81.229163][ T6648] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   81.552572][ T6672] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   84.762351][ T6697] sctp: [Deprecated]: syz.2.229 (pid 6697) Use of int in max_burst socket option.
[   84.762351][ T6697] Use struct sctp_assoc_value instead
[   84.987535][ T6714] __nla_validate_parse: 12 callbacks suppressed
[   84.987549][ T6714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.232'.
[   85.052908][ T6710] syzkaller0: entered promiscuous mode
[   85.054659][ T6710] syzkaller0: entered allmulticast mode
[   85.071662][ T6710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.231'.
[   85.352118][ T6729] netlink: 24 bytes leftover after parsing attributes in process `syz.1.233'.
[   86.490259][  T792] cfg80211: failed to load regulatory.db
[   86.762829][ T6744] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.240'.
[   86.770757][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.241'.
[   86.962762][   T33] audit: type=1804 audit(1752973451.992:4): pid=6759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.245" name="/newroot/70/cgroup.controllers" dev="tmpfs" ino=376 res=1 errno=0
[   86.994256][   T33] audit: type=1800 audit(1752973451.992:5): pid=6759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.245" name="cgroup.controllers" dev="tmpfs" ino=376 res=0 errno=0
[   87.080262][ T6763] netlink: 'syz.2.246': attribute type 2 has an invalid length.
[   87.082896][ T6763] netlink: 24 bytes leftover after parsing attributes in process `syz.2.246'.
[   87.107809][ T6772] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.172384][ T6772] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.244335][ T6772] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.260144][ T6777] dvmrp0: entered allmulticast mode
[   87.314589][ T6772] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.407001][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.252'.
[   87.414613][ T6781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.252'.
[   87.425681][ T6772] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.432152][ T6781] netlink: 40 bytes leftover after parsing attributes in process `syz.2.252'.
[   87.447345][ T6772] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.479034][ T6772] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.505688][ T6772] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.642509][ T6785] vlan3: entered allmulticast mode
[   87.651338][ T6785] veth1: entered allmulticast mode
[   87.869006][ T6794] netlink: 24 bytes leftover after parsing attributes in process `syz.2.258'.
[   87.975226][ T6803] xt_limit: Overflow, try lower: 0/0
[   88.426086][ T6822] 8021q: VLANs not supported on ip_vti0
[   88.990545][ T6848] veth0: entered promiscuous mode
[   89.328783][ T6867] vcan0: tx drop: invalid sa for name 0xffffffffffffffff
[   89.354578][ T6867] vcan0: tx drop: invalid sa for name 0xffffffffffffffff
[   89.569072][ T6847] veth0: left promiscuous mode
[   89.670228][ T6887] pim6reg: entered allmulticast mode
[   89.677087][ T6887] pim6reg: left allmulticast mode
[   89.713674][ T6884] lo speed is unknown, defaulting to 1000
[   89.791935][ T6888] lo speed is unknown, defaulting to 1000
[   90.237424][ T6907] __nla_validate_parse: 11 callbacks suppressed
[   90.237437][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.286'.
[   90.590058][ T6910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.287'.
[   90.964657][ T6920] netlink: 72 bytes leftover after parsing attributes in process `syz.2.290'.
[   91.029702][ T6924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.290'.
[   91.033207][ T6924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.290'.
[   91.235989][ T6920] infiniband syz!: set active
[   91.239920][ T6920] infiniband syz!: added team_slave_0
[   91.310797][ T6920] RDS/IB: syz!: added
[   91.320713][ T6920] smc: adding ib device syz! with port count 1
[   91.329866][ T6920] smc:    ib device syz! port 1 has pnetid 
[   91.335944][ T6933] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[   91.344022][ T6933] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   91.961933][ T6938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.294'.
[   92.106312][ T6940] netlink: 52 bytes leftover after parsing attributes in process `syz.0.295'.
[   92.117629][ T6940] netlink: 'syz.0.295': attribute type 1 has an invalid length.
[   92.260171][ T6944] openvswitch: netlink: Multiple metadata blocks provided
[   92.307228][ T6948] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   92.361479][ T6950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.299'.
[   92.671221][ T6962] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.303'.
[   92.936490][ T6976] dvmrp0: left allmulticast mode
[   93.060945][ T6982] netlink: 'syz.2.309': attribute type 1 has an invalid length.
[   93.064055][ T6979] netlink: 'syz.1.308': attribute type 11 has an invalid length.
[   93.092051][ T6982] bond2: entered promiscuous mode
[   93.094365][ T6982] 8021q: adding VLAN 0 to HW filter on device bond2
[   93.111098][ T6982] bond2: (slave bridge2): making interface the new active one
[   93.113710][ T6982] bridge2: entered promiscuous mode
[   93.116662][ T6982] bond2: (slave bridge2): Enslaving as an active interface with an up link
[   93.124612][ T6982] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536
[   93.300999][ T6986] team0: No ports can be present during mode change
[   93.302625][ T7006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.313'.
[   93.699197][ T7047] netlink: 'syz.2.323': attribute type 1 has an invalid length.
[   93.701906][ T7047] netlink: 'syz.2.323': attribute type 1 has an invalid length.
[   93.704477][ T7047] netlink: 'syz.2.323': attribute type 1 has an invalid length.
[   93.707632][ T7047] netlink: 'syz.2.323': attribute type 1 has an invalid length.
[   93.780037][ T7047] netlink: 'syz.2.323': attribute type 1 has an invalid length.
[   93.811760][ T7047] netlink: 'syz.2.323': attribute type 1 has an invalid length.
[   93.865722][ T7047] netlink: 'syz.2.323': attribute type 1 has an invalid length.
[   94.260183][ T7080] x_tables: duplicate underflow at hook 3
[   94.606794][ T7098] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   94.615816][ T7098] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   95.460709][ T7112] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340
[   95.542690][ T7115] __nla_validate_parse: 7 callbacks suppressed
[   95.542706][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.343'.
[   95.560094][ T7115] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[   95.567390][ T7115] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   96.298488][ T7149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'.
[   96.302258][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.351'.
[   96.379606][ T7161] netlink: 24 bytes leftover after parsing attributes in process `syz.0.355'.
[   96.487040][ T7166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.357'.
[   96.640242][ T7180] netlink: 24 bytes leftover after parsing attributes in process `syz.1.362'.
[   96.682539][ T7185] netlink: 132 bytes leftover after parsing attributes in process `syz.1.364'.
[   96.793464][ T7194] netlink: 56 bytes leftover after parsing attributes in process `syz.1.367'.
[   96.924777][ T7203] Illegal XDP return value 4294967294 on prog  (id 93) dev N/A, expect packet loss!
[   97.106180][ T7212] Set syz0 is full, maxelem 0 reached
[   97.110342][ T7212] netlink: 52 bytes leftover after parsing attributes in process `syz.1.372'.
[   97.115487][ T7212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.372'.
[   97.426662][ T7223] validate_nla: 30 callbacks suppressed
[   97.426717][ T7223] netlink: 'syz.2.376': attribute type 1 has an invalid length.
[   97.498146][ T7231] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check.
[   97.714979][ T7245] lo speed is unknown, defaulting to 1000
[   97.781307][ T7253] veth0_to_bridge: entered promiscuous mode
[   97.783711][ T7253] macsec1: entered promiscuous mode
[   98.012553][   T13] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xea
[   98.030427][ T7260] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   98.184365][ T7277] openvswitch: netlink: Key type 2576 is out of range max 32
[   98.292546][ T7284] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   98.296200][ T7284] syzkaller0: entered promiscuous mode
[   98.300389][ T7284] syzkaller0: entered allmulticast mode
[   98.512844][ T7283] tipc: Resetting bearer <eth:syzkaller0>
[   98.534533][ T7283] tipc: Disabling bearer <eth:syzkaller0>
[   99.480864][ T7347] netlink: 'syz.1.410': attribute type 32 has an invalid length.
[   99.642398][ T7355] x_tables: duplicate underflow at hook 2
[   99.968169][ T7380] xt_hashlimit: size too large, truncated to 1048576
[  100.086219][ T7383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.123024][ T7383] pim6reg1: entered allmulticast mode
[  100.683946][ T7388] netlink: 'syz.2.419': attribute type 12 has an invalid length.
[  100.687551][ T7388] netlink: 'syz.2.419': attribute type 29 has an invalid length.
[  100.693902][ T7388] __nla_validate_parse: 9 callbacks suppressed
[  100.693918][ T7388] netlink: 148 bytes leftover after parsing attributes in process `syz.2.419'.
[  100.702561][ T7388] netlink: 'syz.2.419': attribute type 2 has an invalid length.
[  100.706076][ T7388] netlink: 43 bytes leftover after parsing attributes in process `syz.2.419'.
[  100.939900][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.424'.
[  100.944130][ T7399] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  100.950419][ T7399] netlink: 'syz.1.424': attribute type 10 has an invalid length.
[  100.965951][ T7399] tipc: Resetting bearer <eth:vlan0>
[  100.985540][ T7399] veth0_vlan: left promiscuous mode
[  101.001014][ T7399] veth0_vlan: entered promiscuous mode
[  101.012642][ T7399] team0: Device veth0_vlan failed to register rx_handler
[  101.032038][ T7399] tipc: Resetting bearer <eth:vlan0>
[  101.047006][ T7401] netlink: 'syz.2.423': attribute type 1 has an invalid length.
[  101.061404][ T7399] syz.1.424 (7399) used greatest stack depth: 20168 bytes left
[  101.107603][ T7410] netlink: 'syz.1.426': attribute type 1 has an invalid length.
[  101.113261][ T7410] netlink: 'syz.1.426': attribute type 2 has an invalid length.
[  101.117516][ T7410] netlink: 'syz.1.426': attribute type 8 has an invalid length.
[  101.122768][ T7410] netlink: 1148 bytes leftover after parsing attributes in process `syz.1.426'.
[  101.218074][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.425'.
[  101.231219][ T7423] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.428'.
[  101.416970][ T7428] openvswitch: netlink: Missing valid actions attribute.
[  101.421185][ T7428] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.997343][ T7446] lo speed is unknown, defaulting to 1000
[  102.310009][ T7457] : entered promiscuous mode
[  102.313759][ T7456] bond0: option arp_validate: invalid value (18446744073491447809)
[  102.314062][ T5861] bond0: (slave bond_slave_0): interface is now down
[  102.323403][ T5861] bond0: (slave bond_slave_1): interface is now down
[  102.330992][ T5861] bond0: now running without any active interface!
[  102.424184][ T7460] netlink: 784 bytes leftover after parsing attributes in process `syz.1.436'.
[  102.479984][    C1] bridge0: port 1(bridge_slave_0) entered learning state
[  102.484275][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[  103.062314][ T7469] netlink: 104 bytes leftover after parsing attributes in process `syz.0.438'.
[  103.552062][ T7505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.450'.
[  103.555894][ T7505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.450'.
[  103.644775][  T793] IPVS: starting estimator thread 0...
[  103.689601][ T7512] wireguard: wg1: Could not create IPv4 socket
[  103.693496][ T7512] wireguard: wg1: Could not create IPv4 socket
[  103.696207][ T7512] wireguard: wg1: Could not create IPv4 socket
[  103.699820][ T7512] wireguard: wg1: Could not create IPv4 socket
[  103.702766][ T7512] wireguard: wg1: Could not create IPv4 socket
[  103.705632][ T7512] wireguard: wg1: Could not create IPv4 socket
[  103.709305][ T7512] wireguard: wg1: Could not create IPv4 socket
[  103.712373][ T7512] wireguard: wg1: Could not create IPv4 socket
[  103.714955][ T7512] wireguard: wg1: Could not create IPv4 socket
[  103.717680][ T7512] wireguard: wg1: Could not create IPv4 socket
[  103.722615][ T7512] wireguard: wg1: Could not create IPv4 socket
[  103.726181][ T7512] wireguard: wg1: Could not create IPv4 socket
[  103.729594][ T7512] wireguard: wg1: Could not create IPv4 socket
[  103.732742][ T7512] wireguard: wg1: Could not create IPv4 socket
[  103.735885][ T7512] wireguard: wg1: Could not create IPv4 socket
[  103.740398][ T7512] wireguard: wg1: Could not create IPv4 socket
[  103.743520][ T7512] wireguard: wg1: Could not create IPv4 socket
[  103.746641][ T7512] wireguard: wg1: Could not create IPv4 socket
[  103.748190][ T7510] IPVS: using max 61 ests per chain, 146400 per kthread
[  103.750482][ T7512] wireguard: wg1: Could not create IPv4 socket
[  103.755086][ T7512] wireguard: wg1: Could not create IPv4 socket
[  103.759165][ T7512] wireguard: wg1: Could not create IPv4 socket
[  103.762439][ T7512] wireguard: wg1: Could not create IPv4 socket
[  103.765497][ T7512] wireguard: wg1: Could not create IPv4 socket
[  103.770529][ T7512] wireguard: wg1: Could not create IPv4 socket
[  103.773636][ T7512] wireguard: wg1: Could not create IPv4 socket
[  103.776662][ T7512] wireguard: wg1: Could not create IPv4 socket
[  103.780304][ T7512] wireguard: wg1: Could not create IPv4 socket
[  103.783509][ T7512] wireguard: wg1: Could not create IPv4 socket
[  103.786584][ T7512] wireguard: wg1: Could not create IPv4 socket
[  103.790145][ T7512] wireguard: wg1: Could not create IPv4 socket
[  103.793129][ T7512] wireguard: wg1: Could not create IPv4 socket
[  103.796310][ T7512] wireguard: wg1: Could not create IPv4 socket
[  103.799598][ T7512] wireguard: wg1: Could not create IPv4 socket
[  103.956873][ T7521] team0: No ports can be present during mode change
[  104.566677][ T7549] validate_nla: 4 callbacks suppressed
[  104.566695][ T7549] netlink: 'syz.1.459': attribute type 1 has an invalid length.
[  104.680523][ T7555] netlink: 'syz.0.460': attribute type 11 has an invalid length.
[  104.910320][ T7562] xt_cgroup: path and classid specified
[  105.911275][ T7606] lo speed is unknown, defaulting to 1000
[  106.099699][ T7614] netlink: 'syz.0.469': attribute type 30 has an invalid length.
[  107.015799][ T7531] Set syz1 is full, maxelem 65536 reached
[  107.114367][   T33] audit: type=1800 audit(1752973472.152:6): pid=7643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.476" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=756 res=0 errno=0
[  107.174593][ T7646] xt_ecn: cannot match TCP bits for non-tcp packets
[  107.283301][ T7650] __nla_validate_parse: 7 callbacks suppressed
[  107.283314][ T7650] netlink: 32 bytes leftover after parsing attributes in process `syz.2.479'.
[  107.548942][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.484'.
[  107.574349][ T7670] netlink: 236 bytes leftover after parsing attributes in process `syz.2.485'.
[  107.706693][ T7677] netlink: 20 bytes leftover after parsing attributes in process `syz.2.487'.
[  107.713322][ T7677] netlink: 32 bytes leftover after parsing attributes in process `syz.2.487'.
[  107.975129][ T7696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  108.330111][ T7724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.500'.
[  108.339422][ T7724] smc: removing ib device syz!
[  108.610603][ T7732] veth0: entered promiscuous mode
[  108.642144][ T7729] netlink: 16 bytes leftover after parsing attributes in process `syz.2.501'.
[  108.853649][ T7734] veth0: left promiscuous mode
[  109.284657][ T7752] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  109.313255][ T7752] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  109.334978][ T7760] netlink: 16 bytes leftover after parsing attributes in process `syz.1.507'.
[  109.474701][  T792] IPVS: starting estimator thread 0...
[  109.569418][ T7770] IPVS: using max 61 ests per chain, 146400 per kthread
[  109.746380][ T7790] netlink: 24 bytes leftover after parsing attributes in process `syz.0.519'.
[  109.754847][ T7790] netlink: 24 bytes leftover after parsing attributes in process `syz.0.519'.
[  110.082840][ T7811] netlink: 'syz.0.524': attribute type 83 has an invalid length.
[  110.350565][ T7834] can: request_module (can-proto-0) failed.
[  110.775818][ T7866] vxcan2: entered promiscuous mode
[  111.341920][ T7933] lo speed is unknown, defaulting to 1000
[  111.366740][   T33] audit: type=1800 audit(1752973476.402:7): pid=7936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.560" name="memory.events" dev="tmpfs" ino=978 res=0 errno=0
[  111.561366][ T7952] sctp: [Deprecated]: syz.1.564 (pid 7952) Use of int in max_burst socket option.
[  111.561366][ T7952] Use struct sctp_assoc_value instead
[  111.583601][ T7952] : entered promiscuous mode
[  111.652973][ T7957] veth1_macvtap: left promiscuous mode
[  111.655002][ T7957] macsec0: entered promiscuous mode
[  111.666599][ T7957] veth1_macvtap: entered promiscuous mode
[  111.670295][ T7957] macsec0: left promiscuous mode
[  111.790297][ T7966] x_tables: duplicate underflow at hook 1
[  112.635312][ T8004] __nla_validate_parse: 17 callbacks suppressed
[  112.635333][ T8004] netlink: 16 bytes leftover after parsing attributes in process `syz.0.581'.
[  112.661344][  T792] IPVS: starting estimator thread 0...
[  112.665181][ T8004] netlink: 'syz.0.581': attribute type 1 has an invalid length.
[  112.703581][ T8009] SET target dimension over the limit!
[  112.723215][ T8010] bond0: option mode: unable to set because the bond device has slaves
[  112.749018][ T8007] IPVS: using max 43 ests per chain, 103200 per kthread
[  112.799044][ T8014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.585'.
[  112.937073][ T8012] bridge_slave_0: left allmulticast mode
[  112.940006][ T8012] bridge_slave_0: left promiscuous mode
[  112.943310][ T8012] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.960905][ T8012] bridge_slave_1: left allmulticast mode
[  112.963204][ T8012] bridge_slave_1: left promiscuous mode
[  112.965606][ T8012] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.976514][ T8026] netlink: 136 bytes leftover after parsing attributes in process `syz.0.588'.
[  112.980446][ T8012] bond0: (slave bond_slave_0): Releasing backup interface
[  112.989786][ T8012] bond0: (slave bond_slave_1): Releasing backup interface
[  113.006013][ T8012] team0: Port device team_slave_0 removed
[  113.019468][ T8012] team0: Port device team_slave_1 removed
[  113.022914][ T8012] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.026066][ T8012] batman_adv: batadv0: Removing interface: batadv_slave_0
[  113.032631][ T8012] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.036104][ T8012] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.060755][ T8027] pimreg: entered allmulticast mode
[  113.089182][ T8027] pimreg: left allmulticast mode
[  113.199879][ T8037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.591'.
[  113.239640][ T8039] tipc: Failed to remove unknown binding: 66,1,1/10005162:570094013/570094015
[  113.257203][ T8034] tipc: Failed to remove unknown binding: 66,1,1/10005162:570094013/570094015
[  113.262710][ T8034] tipc: Failed to remove unknown binding: 66,1,1/10005162:570094013/570094015
[  113.271112][ T8034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.590'.
[  113.274989][ T8034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.590'.
[  113.351330][ T8043] batman_adv: batadv0: Adding interface: ipvlan2
[  113.355306][ T8043] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.366625][ T8043] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[  113.552835][ T8052] syzkaller0: entered promiscuous mode
[  113.555750][ T8052] syzkaller0: entered allmulticast mode
[  113.564570][ T8052] netlink: 84 bytes leftover after parsing attributes in process `syz.0.596'.
[  113.568958][ T8052] netlink: 84 bytes leftover after parsing attributes in process `syz.0.596'.
[  113.891615][ T8061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.598'.
[  114.784927][ T8065] tipc: Invalid UDP bearer configuration
[  114.784968][ T8065] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  114.924377][ T8074] netlink: 48 bytes leftover after parsing attributes in process `syz.2.602'.
[  114.940030][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  114.943518][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  114.968128][  T793] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  115.218698][ T8085] netlink: 'syz.2.606': attribute type 2 has an invalid length.
[  115.226062][ T8085] k*]: entered promiscuous mode
[  115.310171][ T5894] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  115.752794][ T8100] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  115.815339][ T8106] netlink: 'syz.1.612': attribute type 10 has an invalid length.
[  115.863986][ T8107] pimreg: entered allmulticast mode
[  115.878627][ T8107] pimreg: left allmulticast mode
[  115.918440][ T5894] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  115.956545][ T8112] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  116.323184][ T8120] netlink: 'syz.2.616': attribute type 39 has an invalid length.
[  116.594482][ T8152] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20000
[  116.662266][ T8167] x_tables: duplicate entry at hook 1
[  116.714391][ T8169] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  116.774091][ T8169] syzkaller0: entered promiscuous mode
[  116.776587][ T8169] syzkaller0: entered allmulticast mode
[  116.778499][ T8172] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  116.784695][ T8169] tipc: Resetting bearer <eth:syzkaller0>
[  116.836776][   T83] tipc: Resetting bearer <eth:syzkaller0>
[  116.845344][ T8168] tipc: Resetting bearer <eth:syzkaller0>
[  117.837903][ T5894] tipc: Node number set to 2386176273
[  118.640809][ T8168] tipc: Disabling bearer <eth:syzkaller0>
[  118.771409][ T8197] bridge0: port 3(dummy0) entered disabled state
[  118.774093][ T8197] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.777853][ T8197] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.877975][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  118.996867][ T8197] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.034769][ T8197] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.253721][ T8197] vlan2: left promiscuous mode
[  119.257351][ T8197] bridge0: left promiscuous mode
[  119.262726][ T8197] vlan2: left allmulticast mode
[  119.264871][ T8197] bridge0: left allmulticast mode
[  119.267708][ T8197] xfrm1: left promiscuous mode
[  119.275799][ T8197] xfrm1: left allmulticast mode
[  119.281818][ T8197] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.285267][ T8197] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.289688][ T8197] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.293098][ T8197] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  119.296757][ T8197] geneve2: left promiscuous mode
[  119.304202][ T8197] vlan3: left allmulticast mode
[  119.306256][ T8197] veth1: left allmulticast mode
[  119.317425][ T8197] macsec1: left promiscuous mode
[  119.331012][   T47] lo speed is unknown, defaulting to 1000
[  119.332981][   T47] syz2: Port: 1 Link DOWN
[  119.344364][ T8202] ip6erspan0: entered allmulticast mode
[  119.496168][ T8217] netlink: 'syz.2.632': attribute type 1 has an invalid length.
[  119.501710][ T8217] __nla_validate_parse: 7 callbacks suppressed
[  119.501722][ T8217] netlink: 144 bytes leftover after parsing attributes in process `syz.2.632'.
[  119.511065][ T8217] netlink: 'syz.2.632': attribute type 1 has an invalid length.
[  119.514687][ T8217] netlink: 76 bytes leftover after parsing attributes in process `syz.2.632'.
[  119.524711][ T8217] netlink: 40 bytes leftover after parsing attributes in process `syz.2.632'.
[  119.801833][ T8225] bridge_slave_0: left allmulticast mode
[  119.804288][ T8225] bridge_slave_0: left promiscuous mode
[  119.821786][ T8225] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.827236][ T8225] bridge_slave_1: left allmulticast mode
[  119.831916][ T8225] bridge_slave_1: left promiscuous mode
[  119.835563][ T8225] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.848532][ T8239] netlink: 'syz.2.635': attribute type 10 has an invalid length.
[  119.854874][ T8225] bond0: (slave bond_slave_0): Releasing backup interface
[  119.867489][ T8225] bond0: (slave bond_slave_1): Releasing backup interface
[  119.886886][ T8225] team_slave_0: left promiscuous mode
[  119.920154][ T8225] team0: Port device team_slave_0 removed
[  119.925406][ T8225] team_slave_1: left promiscuous mode
[  119.939356][ T8225] team0: Port device team_slave_1 removed
[  119.943712][ T8225] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.947065][ T8225] batman_adv: batadv0: Removing interface: batadv_slave_0
[  119.953509][ T8225] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.956048][ T8225] batman_adv: batadv0: Removing interface: batadv_slave_1
[  119.969280][ T8225] bond1: (slave ip6gretap1): Releasing backup interface
[  119.980509][ T8225] bond2: (slave bridge2): Releasing backup interface
[  119.983044][ T8225] bridge2: left promiscuous mode
[  120.019455][ T5842] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  120.138201][ T5842] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  120.306815][ T8257] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.644'.
[  120.533933][ T8284] ip6t_srh: unknown srh match flags  4000
[  120.628018][ T8297] netlink: 16 bytes leftover after parsing attributes in process `syz.0.658'.
[  120.742494][ T8305] netlink: 'syz.0.661': attribute type 1 has an invalid length.
[  120.742712][ T8302] lo speed is unknown, defaulting to 1000
[  120.772455][ T8305] 8021q: adding VLAN 0 to HW filter on device bond5
[  120.797299][ T8305] 8021q: adding VLAN 0 to HW filter on device bond5
[  120.802571][ T8305] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address
[  120.811220][ T8305] bond5: (slave vxcan3): Error -95 calling set_mac_address
[  120.851184][ T8311] gretap2: entered promiscuous mode
[  120.857566][ T8311] bond5: (slave gretap2): making interface the new active one
[  120.861827][ T8311] bond5: (slave gretap2): Enslaving as an active interface with an up link
[  120.865043][ T8301] syzkaller1: entered promiscuous mode
[  120.866929][ T8301] syzkaller1: entered allmulticast mode
[  120.882812][ T8305] macvlan3: entered promiscuous mode
[  120.885119][ T8305] macvlan3: entered allmulticast mode
[  120.887522][ T8305] bond5: entered promiscuous mode
[  120.891485][ T8305] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  120.897329][ T8305] bond5: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap2
[  120.903795][ T8305] bond5: left promiscuous mode
[  120.978070][ T8305] syz.0.661 (8305) used greatest stack depth: 19800 bytes left
[  120.993561][ T8308] lo speed is unknown, defaulting to 1000
[  121.392536][ T8357] netlink: 92 bytes leftover after parsing attributes in process `syz.0.670'.
[  121.516755][ T8366] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  121.817471][ T8391] netlink: 724 bytes leftover after parsing attributes in process `syz.1.674'.
[  121.821637][ T8391] netlink: 83 bytes leftover after parsing attributes in process `syz.1.674'.
[  121.835246][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.675'.
[  121.971971][ T8396] lo speed is unknown, defaulting to 1000
[  122.217299][ T8420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.681'.
[  123.424623][ T8445] lo speed is unknown, defaulting to 1000
[  123.479457][ T8451] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  123.482103][ T8451] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  123.693246][ T8462] tc_dump_action: action bad kind
[  124.192390][ T8500] xt_cluster: node mask cannot exceed total number of nodes
[  124.600835][ T8514] __nla_validate_parse: 9 callbacks suppressed
[  124.600858][ T8514] netlink: 52 bytes leftover after parsing attributes in process `syz.0.712'.
[  124.607176][ T8514] netlink: 52 bytes leftover after parsing attributes in process `syz.0.712'.
[  124.616563][ T8514] netlink: 52 bytes leftover after parsing attributes in process `syz.0.712'.
[  124.637657][ T8514] netlink: 24 bytes leftover after parsing attributes in process `syz.0.712'.
[  124.823433][ T8529] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.715'.
[  124.837562][ T8528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.716'.
[  124.847190][ T8507] netlink: 32 bytes leftover after parsing attributes in process `syz.1.711'.
[  124.876152][ T8507] netlink: 52 bytes leftover after parsing attributes in process `syz.1.711'.
[  124.977117][ T8538] netlink: 28 bytes leftover after parsing attributes in process `syz.2.717'.
[  124.985959][ T8540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.719'.
[  125.280184][ T8563] pimreg: entered allmulticast mode
[  125.288051][ T8563] pimreg: left allmulticast mode
[  125.471344][ T8580] ieee802154 phy0 wpan0: encryption failed: -22
[  125.623330][ T8590] delete_channel: no stack
[  125.844842][ T8606] xt_cluster: node mask cannot exceed total number of nodes
[  125.853892][ T8597] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.146920][ T8628] netlink: 'syz.0.751': attribute type 5 has an invalid length.
[  126.622211][ T8641] netlink: 'syz.1.754': attribute type 4 has an invalid length.
[  127.020987][ T8651] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 3674977, id = 0
[  127.367144][ T8664] bond3: entered promiscuous mode
[  127.369972][ T8664] 8021q: adding VLAN 0 to HW filter on device bond3
[  127.389406][ T8664] 8021q: adding VLAN 0 to HW filter on device bond3
[  127.392109][ T8664] bond3: (slave vcan0): The slave device specified does not support setting the MAC address
[  127.398170][ T8664] bond3: (slave vcan0): Error -95 calling set_mac_address
[  127.680219][ T8680] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.803627][ T8684] netlink: 'syz.0.766': attribute type 1 has an invalid length.
[  127.842214][ T8684] 8021q: adding VLAN 0 to HW filter on device bond6
[  127.864832][ T8684] 8021q: adding VLAN 0 to HW filter on device bond6
[  127.869340][ T8684] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  127.875256][ T8684] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  127.913300][ T8686] bond6: (slave bridge2): Enslaving as an active interface with a down link
[  128.415244][  T793] hid-generic 0005:0B57:0006.0003: collection stack underflow
[  128.447981][  T793] hid-generic 0005:0B57:0006.0003: item 0 2 0 12 parsing failed
[  128.451470][  T793] hid-generic 0005:0B57:0006.0003: probe with driver hid-generic failed with error -22
[  128.838572][ T8741] netlink: 'syz.1.784': attribute type 7 has an invalid length.
[  128.901416][ T8744] dummy0: left allmulticast mode
[  128.903947][ T8744] dummy0: left promiscuous mode
[  128.906618][ T8744] bridge0: port 3(dummy0) entered disabled state
[  128.919179][ T8744] bridge_slave_1: left allmulticast mode
[  128.921658][ T8744] bridge_slave_1: left promiscuous mode
[  128.924001][ T8744] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.939370][ T8744] bridge_slave_0: left allmulticast mode
[  128.945546][ T8744] bridge_slave_0: left promiscuous mode
[  128.950523][ T8744] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.032420][ T8748] geneve1: entered promiscuous mode
[  129.034510][ T8748] geneve1: entered allmulticast mode
[  129.273003][ T8766] netlink: 'syz.1.793': attribute type 12 has an invalid length.
[  129.281485][ T8766] netlink: 'syz.1.793': attribute type 12 has an invalid length.
[  129.611046][ T8791] syz.1.803 uses old SIOCAX25GETINFO
[  129.621960][ T8793] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  129.701741][ T8794] netlink: 'syz.0.801': attribute type 1 has an invalid length.
[  129.704654][ T8794] __nla_validate_parse: 21 callbacks suppressed
[  129.704664][ T8794] netlink: 184 bytes leftover after parsing attributes in process `syz.0.801'.
[  129.711710][ T8794] netlink: 'syz.0.801': attribute type 1 has an invalid length.
[  129.825218][ T8809] xt_ipcomp: unknown flags F7
[  129.932494][ T8818] x_tables: duplicate underflow at hook 1
[  129.935149][ T8818] x_tables: duplicate underflow at hook 1
[  129.937685][ T8818] x_tables: duplicate underflow at hook 1
[  129.948537][ T8818] x_tables: duplicate underflow at hook 1
[  129.981774][ T8823] netlink: 44 bytes leftover after parsing attributes in process `syz.2.811'.
[  130.052044][ T8827] netlink: 20 bytes leftover after parsing attributes in process `syz.1.812'.
[  130.062912][ T8825] netlink: 28 bytes leftover after parsing attributes in process `syz.0.810'.
[  130.069601][ T8825] netlink: 20 bytes leftover after parsing attributes in process `syz.0.810'.
[  130.207718][ T8838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.817'.
[  130.232808][ T8843] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  130.239438][ T8843] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5)
[  130.258785][ T8838] netlink: 28 bytes leftover after parsing attributes in process `syz.1.817'.
[  130.307603][ T8848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.819'.
[  130.520824][ T8864] 8021q: VLANs not supported on lo
[  130.642399][ T8872] batman_adv: batadv0: Adding interface: dummy0
[  130.644953][ T8872] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.663750][ T8872] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  130.684184][ T8872] netlink: 772 bytes leftover after parsing attributes in process `syz.0.828'.
[  130.692881][ T8872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.828'.
[  130.696773][ T8872] ip6gretap0: entered promiscuous mode
[  130.699271][ T8872] ip6gretap0: entered allmulticast mode
[  130.852230][ T8889] batadv_slave_1: entered promiscuous mode
[  130.884241][ T8887] batadv_slave_1: left promiscuous mode
[  130.920761][ T8894] netlink: 'syz.2.835': attribute type 1 has an invalid length.
[  130.923445][ T8894] netlink: 'syz.2.835': attribute type 1 has an invalid length.
[  130.977662][ T8894] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  131.379714][ T8920] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.463317][ T8920] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.542837][ T8920] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.604455][ T8920] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.705478][ T8920] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.717686][ T8920] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.730503][ T8920] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.752705][ T8920] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.998921][ T8957] nbd0: detected capacity change from 0 to 63
[  132.021119][ T8954] netlink: 'syz.1.854': attribute type 1 has an invalid length.
[  132.040120][   T56] block nbd0: Receive control failed (result -104)
[  132.162498][ T8970] wireguard1: entered promiscuous mode
[  132.166103][ T8970] wireguard1: entered allmulticast mode
[  132.268128][ T8975] netlink: 'syz.0.857': attribute type 142 has an invalid length.
[  132.440315][ T8996] ip6erspan0: entered allmulticast mode
[  132.560215][ T1091] wlan1: Trigger new scan to find an IBSS to join
[  132.564322][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.567403][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.586642][ T9009] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.596649][ T9009] syzkaller0: entered promiscuous mode
[  132.602694][ T9009] syzkaller0: entered allmulticast mode
[  132.672747][ T9009] tipc: Resetting bearer <eth:syzkaller0>
[  132.694251][ T9008] tipc: Resetting bearer <eth:syzkaller0>
[  132.778692][ T9008] tipc: Disabling bearer <eth:syzkaller0>
[  132.905328][ T9031] lo speed is unknown, defaulting to 1000
[  133.441701][ T9064] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  134.719977][ T9115] __nla_validate_parse: 17 callbacks suppressed
[  134.719996][ T9115] netlink: 24 bytes leftover after parsing attributes in process `syz.0.885'.
[  134.753320][ T9115] bond7: entered promiscuous mode
[  134.756086][ T9115] 8021q: adding VLAN 0 to HW filter on device bond7
[  134.872404][ T9115] bond7 (unregistering): Released all slaves
[  135.152655][ T9137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.892'.
[  135.229277][ T9141] IPVS: length: 239 != 24
[  135.372812][ T9150] netlink: 'syz.0.897': attribute type 1 has an invalid length.
[  135.389807][ T9150] 8021q: adding VLAN 0 to HW filter on device bond7
[  135.409487][ T9150] bond7: (slave veth5): Enslaving as an active interface with a down link
[  135.421868][ T9150] vlan0: entered allmulticast mode
[  135.423617][ T9150] bond7: entered allmulticast mode
[  135.427634][ T9150] bond7: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  135.540709][ T9153] bridge0: entered promiscuous mode
[  135.542621][ T9153] bridge0: entered allmulticast mode
[  135.598106][   T27] wlan1: Trigger new scan to find an IBSS to join
[  135.602724][ T9154] syzkaller1: entered promiscuous mode
[  135.605014][ T9154] syzkaller1: entered allmulticast mode
[  135.665456][ T9156] veth0_to_bridge: entered promiscuous mode
[  135.672062][ T9155] veth0_to_bridge: left promiscuous mode
[  136.182178][ T9197] bridge4: entered allmulticast mode
[  136.275611][ T9202] netlink: 36 bytes leftover after parsing attributes in process `syz.0.912'.
[  136.349171][ T9206] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  136.352908][ T9206] syzkaller0: entered promiscuous mode
[  136.355219][ T9206] syzkaller0: entered allmulticast mode
[  136.364682][ T9206] tipc: Resetting bearer <eth:syzkaller0>
[  136.368959][ T9205] tipc: Resetting bearer <eth:syzkaller0>
[  136.381668][ T9205] tipc: Disabling bearer <eth:syzkaller0>
[  136.430802][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.915'.
[  136.434234][ T9208] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  136.438507][ T9208] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  136.468841][ T9210] netlink: 'syz.0.916': attribute type 9 has an invalid length.
[  136.471568][ T9210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.916'.
[  136.479415][ T9210] macvlan3: entered promiscuous mode
[  136.481571][ T9210] veth0_to_team: entered promiscuous mode
[  136.484313][ T9210] macvlan3: entered allmulticast mode
[  136.486299][ T9210] veth0_to_team: entered allmulticast mode
[  136.533845][ T9213] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  136.970373][ T9235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.919'.
[  137.871671][ T9293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.923'.
[  138.270205][ T9324] netlink: 'syz.0.932': attribute type 23 has an invalid length.
[  138.411899][ T9335] veth1_macvtap: left promiscuous mode
[  138.428275][ T9337] netlink: 28 bytes leftover after parsing attributes in process `syz.0.934'.
[  138.431911][ T9337] netlink: 28 bytes leftover after parsing attributes in process `syz.0.934'.
[  138.449399][ T9338] veth0: entered promiscuous mode
[  138.462716][ T9338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.935'.
[  138.558599][   T40] wlan1: Trigger new scan to find an IBSS to join
[  138.679730][ T9350] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.743987][ T9350] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.794596][ T9362] vti0: entered promiscuous mode
[  138.800859][ T9350] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.844776][ T9350] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.949053][ T9374] netlink: 'syz.0.946': attribute type 1 has an invalid length.
[  138.969792][ T9374] netlink: 'syz.0.946': attribute type 1 has an invalid length.
[  139.002066][ T9350] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  139.037293][ T9350] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  139.056979][ T9350] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  139.066624][ T9350] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  139.179106][ T9388] netlink: 'syz.1.951': attribute type 12 has an invalid length.
[  139.382978][ T9399] lo speed is unknown, defaulting to 1000
[  139.508851][ T8129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.836116][ T9426] __nla_validate_parse: 8 callbacks suppressed
[  139.836137][ T9426] netlink: 16 bytes leftover after parsing attributes in process `syz.2.963'.
[  139.867729][ T9426] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.963'.
[  140.303373][ T9461] @: renamed from bond_slave_0
[  140.307050][ T9462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.970'.
[  140.533276][ T9473] netlink: 5 bytes leftover after parsing attributes in process `syz.1.975'.
[  140.866684][ T9495] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.982'.
[  140.877310][ T9495] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  140.927453][ T9501] netlink: 24 bytes leftover after parsing attributes in process `syz.0.984'.
[  140.951242][ T9501] netlink: 9 bytes leftover after parsing attributes in process `syz.0.984'.
[  140.961161][ T9501] gretap0: entered promiscuous mode
[  140.993986][ T9506] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  140.997134][ T9506] IPv6: NLM_F_CREATE should be set when creating new route
[  141.000184][ T9506] IPv6: NLM_F_CREATE should be set when creating new route
[  141.003969][ T9506] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  141.033314][ T9509] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878)
[  141.044750][ T9509] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  141.050843][ T9509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.987'.
[  141.076488][ T9512] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  141.084642][ T9509] team1: entered promiscuous mode
[  141.087294][ T9509] team1: entered allmulticast mode
[  141.114128][ T9514] netlink: 'syz.1.989': attribute type 14 has an invalid length.
[  141.118812][ T9514] netlink: 'syz.1.989': attribute type 14 has an invalid length.
[  141.528226][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  141.599823][ T5833] Bluetooth: hci2: command 0x0405 tx timeout
[  141.861309][ T9548] netlink: 'syz.1.998': attribute type 9 has an invalid length.
[  141.944230][ T9551] netlink: 14 bytes leftover after parsing attributes in process `syz.0.999'.
[  141.949313][ T9551] hsr_slave_0: left promiscuous mode
[  141.952219][ T9551] hsr_slave_1: left promiscuous mode
[  142.154562][ T9562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1002'.
[  142.395934][ T9590] xt_ecn: cannot match TCP bits for non-tcp packets
[  142.470094][ T9597] vlan2: entered allmulticast mode
[  142.472452][ T9597] bridge_slave_0: entered allmulticast mode
[  142.524733][ T9600] netlink: 'syz.2.1012': attribute type 21 has an invalid length.
[  143.019689][ T9634] netlink: 'syz.1.1023': attribute type 62 has an invalid length.
[  143.041510][ T9634] netlink: 'syz.1.1023': attribute type 6 has an invalid length.
[  143.976946][ T9674] af_packet: tpacket_rcv: packet too big, clamped from 152 to 4294967272. macoff=96
[  144.096124][ T5842] hid-generic 0005:0458:5505.0004: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa
[  144.317439][ T9699] xt_l2tp: v2 tid > 0xffff: 4294967295
[  144.531019][ T9720] rdma_rxe: rxe_newlink: failed to add syzkaller0
[  144.699665][ T9733] syzkaller0: entered promiscuous mode
[  144.702467][ T9735] netlink: 'syz.0.1050': attribute type 7 has an invalid length.
[  144.705267][ T9733] syzkaller0: entered allmulticast mode
[  144.727162][ T9734] kthread_run failed with err -4
[  144.883288][ T9751] __nla_validate_parse: 18 callbacks suppressed
[  144.883308][ T9751] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1055'.
[  144.911882][ T9753] tunl0: entered promiscuous mode
[  144.914220][ T9753] netlink: 'syz.2.1056': attribute type 4 has an invalid length.
[  144.917403][ T9753] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1056'.
[  144.941786][ T9753] netlink: 'syz.2.1056': attribute type 1 has an invalid length.
[  145.070934][ T9751] bond3: entered promiscuous mode
[  145.073032][ T9751] bond3: entered allmulticast mode
[  145.075465][ T9751] 8021q: adding VLAN 0 to HW filter on device bond3
[  145.159380][ T9759] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1057'.
[  145.178024][ T9759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1057'.
[  145.270712][ T9771] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  145.319843][ T9777] netlink: 'syz.0.1061': attribute type 1 has an invalid length.
[  145.323017][ T9777] netlink: 'syz.0.1061': attribute type 2 has an invalid length.
[  145.328663][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1061'.
[  145.523376][ T9790] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1064'.
[  145.719036][ T9808] netlink: 'syz.0.1073': attribute type 12 has an invalid length.
[  145.723443][ T9808] netlink: 'syz.0.1073': attribute type 12 has an invalid length.
[  145.726335][ T9808] netlink: 'syz.0.1073': attribute type 12 has an invalid length.
[  145.730104][ T9808] netlink: 'syz.0.1073': attribute type 12 has an invalid length.
[  145.732879][ T9808] netlink: 'syz.0.1073': attribute type 12 has an invalid length.
[  145.800948][ T9813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1075'.
[  146.001269][ T9824] 8021q: adding VLAN 0 to HW filter on device bond4
[  146.010649][ T9828] pimreg: entered allmulticast mode
[  146.019701][ T9824] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  146.050382][ T9828] pimreg: left allmulticast mode
[  146.076968][ T9818] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1076'.
[  146.184796][ T9836] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1081'.
[  146.190508][ T9836] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1081'.
[  146.217135][ T9836] syz.0.1081 (9836) used obsolete PPPIOCDETACH ioctl
[  146.591428][ T9866] team0: No ports can be present during mode change
[  146.858317][ T9889] No such timeout policy "syz0"
[  147.231353][ T9924] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  147.235235][ T9924] syzkaller0: entered promiscuous mode
[  147.237718][ T9924] syzkaller0: entered allmulticast mode
[  147.268507][ T9924] tipc: Resetting bearer <eth:syzkaller0>
[  147.273752][ T9923] tipc: Resetting bearer <eth:syzkaller0>
[  147.299729][ T9923] tipc: Disabling bearer <eth:syzkaller0>
[  147.411909][ T9934] Bluetooth: MGMT ver 1.23
[  147.422456][ T9936] : entered promiscuous mode
[  147.460431][ T9940] xt_TCPMSS: Only works on TCP SYN packets
[  147.876617][ T9971] ieee802154 phy0 wpan0: encryption failed: -22
[  148.027372][ T9985] x_tables: duplicate underflow at hook 4
[  148.042949][ T9985] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  148.045874][ T9985] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  148.049005][ T9985] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  148.051891][ T9985] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  148.193399][ T9994] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5)
[  149.158906][T10055] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  149.163220][T10055] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.224461][T10055] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  149.230562][T10055] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.275292][T10055] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  149.280460][T10055] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.301239][T10060] IPVS: set_ctl: invalid protocol: 8345 172.30.1.2:20003
[  149.305827][T10060] Cannot find add_set index 3 as target
[  149.320670][T10055] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  149.324978][T10055] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.350773][   T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  149.354752][   T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  149.366324][T10060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  149.425578][T10055] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  149.429062][T10055] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  149.439514][T10055] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  149.442534][T10055] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  149.461196][T10055] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  149.464661][T10055] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  149.477209][T10055] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  149.480158][T10055] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  149.742146][T10073] bond4: entered promiscuous mode
[  149.744246][T10073] 8021q: adding VLAN 0 to HW filter on device bond4
[  149.816089][T10080] sctp: [Deprecated]: syz.2.1146 (pid 10080) Use of int in maxseg socket option.
[  149.816089][T10080] Use struct sctp_assoc_value instead
[  150.101625][T10113] __nla_validate_parse: 14 callbacks suppressed
[  150.101647][T10113] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1154'.
[  150.337326][T10125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1161'.
[  150.380385][T10127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1162'.
[  150.395288][T10127] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1162'.
[  150.420552][T10127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1162'.
[  150.424187][T10127] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1162'.
[  150.442268][T10127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1162'.
[  150.445847][T10127] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1162'.
[  150.496804][T10140] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1164'.
[  150.744486][T10164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1172'.
[  150.764009][ T5861] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  150.778135][ T5861] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  150.798514][ T5842] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  151.168031][ T5842] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  151.338024][ T5842] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  151.353423][T10219] veth1_macvtap: left promiscuous mode
[  151.355387][T10219] macsec0: entered promiscuous mode
[  151.360911][T10219] macsec0: left promiscuous mode
[  151.692348][T10240] syz.1.1197 (10240) used greatest stack depth: 18680 bytes left
[  151.792092][T10252] veth6: entered allmulticast mode
[  151.805275][T10252] veth7: entered promiscuous mode
[  151.813672][T10252] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  151.824701][T10252] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  151.876386][T10260] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  152.128389][T10280] validate_nla: 32 callbacks suppressed
[  152.128403][T10280] netlink: 'syz.1.1208': attribute type 25 has an invalid length.
[  152.370954][T10301] xt_hashlimit: max too large, truncated to 1048576
[  152.380287][T10301] No such timeout policy "syz1"
[  152.393142][T10301] smc: net device bond0 applied user defined pnetid SYZ2
[  152.431170][T10302] smc: removing net device bond0 with user defined pnetid SYZ2
[  152.435357][T10302] bond0 (unregistering): Released all slaves
[  152.696621][T10326] xt_bpf: check failed: parse error
[  152.707281][T10326] ieee802154 phy0 wpan0: encryption failed: -90
[  153.936951][T10369] xt_cluster: node mask cannot exceed total number of nodes
[  153.943202][T10369] netlink: 'syz.2.1233': attribute type 11 has an invalid length.
[  154.026359][T10375] syzkaller0: entered promiscuous mode
[  154.028977][T10375] syzkaller0: entered allmulticast mode
[  154.056482][T10376] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.100937][T10379] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  154.143564][T10382] netlink: 'syz.2.1238': attribute type 22 has an invalid length.
[  154.798007][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  154.843674][T10374] tipc: Resetting bearer <eth:syzkaller0>
[  154.861498][T10374] tipc: Disabling bearer <eth:syzkaller0>
[  155.110952][T10403] netlink: 'syz.2.1243': attribute type 3 has an invalid length.
[  155.118941][T10403] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  155.127023][T10403] __nla_validate_parse: 26 callbacks suppressed
[  155.127044][T10403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1243'.
[  155.242974][T10405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1244'.
[  155.591466][T10417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1247'.
[  155.941971][T10426] netlink: 'syz.2.1251': attribute type 4 has an invalid length.
[  155.960929][T10426] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1251'.
[  156.202038][T10433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1253'.
[  156.314562][T10435] netlink: 'syz.2.1254': attribute type 1 has an invalid length.
[  156.350644][T10437] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1255'.
[  156.363298][T10435] bond5: (slave vti1): The slave device specified does not support setting the MAC address
[  156.369310][T10435] bond5: (slave vti1): Setting fail_over_mac to active for active-backup mode
[  156.378618][T10435] bond5: (slave vti1): making interface the new active one
[  156.383819][T10435] bond5: (slave vti1): Enslaving as an active interface with an up link
[  156.818619][T10449] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1259'.
[  156.841143][T10452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1260'.
[  156.892803][T10456] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1262'.
[  156.977047][T10459] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1263'.
[  156.990410][T10459] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  157.224927][T10486] can: request_module (can-proto-4) failed.
[  157.337349][T10491] bridge0: entered promiscuous mode
[  157.353318][T10491] netlink: 'syz.1.1271': attribute type 21 has an invalid length.
[  157.356758][T10491] IPv6: NLM_F_CREATE should be specified when creating new route
[  157.813585][T10515] 8021q: adding VLAN 0 to HW filter on device bond6
[  157.823237][T10515] bond0: (slave bond6): Enslaving as an active interface with an up link
[  157.918646][ T5833] Bluetooth: hci2: command 0x0405 tx timeout
[  158.200143][T10546] netlink: 'syz.2.1291': attribute type 13 has an invalid length.
[  158.212697][T10546] netlink: 'syz.2.1291': attribute type 11 has an invalid length.
[  158.526997][T10560] C: renamed from lo
[  158.535283][T10560] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  158.685453][T10570] erspan1: entered promiscuous mode
[  158.687296][T10570] erspan1: entered allmulticast mode
[  158.700986][T10571] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  158.745812][T10576] geneve1: entered promiscuous mode
[  158.746711][T10578] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:65535
[  158.748402][T10576] geneve1: entered allmulticast mode
[  158.934607][T10591] C speed is unknown, defaulting to 1000
[  159.039036][ T5894] IPVS: starting estimator thread 0...
[  159.138021][T10594] IPVS: using max 61 ests per chain, 146400 per kthread
[  159.881452][T10626] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.043043][T10626] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.089373][ T5861] IPVS: stop unused estimator thread 0...
[  160.131117][T10626] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.140279][T10640] ieee802154 phy0 wpan0: encryption failed: -22
[  160.143135][T10640] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  160.155539][T10636] C speed is unknown, defaulting to 1000
[  160.195617][T10626] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.248885][T10626] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  160.261813][T10626] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  160.274385][T10626] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  160.285204][T10626] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  160.327030][T10647] __nla_validate_parse: 122 callbacks suppressed
[  160.327051][T10647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1320'.
[  160.382451][T10649] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.397350][T10649] vcan0: tx drop: invalid sa for name 0xfffffffffffffffe
[  160.458709][T10652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1323'.
[  160.462078][T10652] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.515360][T10654] openvswitch: netlink: ct_state flags 0000ee01 unsupported
[  160.575460][T10656] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1325'.
[  160.579965][T10656] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1325'.
[  160.585689][T10657] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1325'.
[  160.983952][T10670] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  160.994976][T10670] syzkaller0: entered promiscuous mode
[  160.996815][T10670] syzkaller0: entered allmulticast mode
[  161.056389][T10674] netlink: 'syz.0.1331': attribute type 1 has an invalid length.
[  161.091625][T10679] x_tables: duplicate underflow at hook 2
[  161.101616][T10674] 8021q: adding VLAN 0 to HW filter on device bond10
[  161.201283][T10674] bond10: (slave ip6gretap1): making interface the new active one
[  161.204967][T10674] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link
[  161.210329][T10670] tipc: Resetting bearer <eth:syzkaller0>
[  161.216400][T10669] tipc: Resetting bearer <eth:syzkaller0>
[  161.247259][T10669] tipc: Disabling bearer <eth:syzkaller0>
[  161.495829][T10698] openvswitch: netlink: Message has 24 unknown bytes.
[  161.508304][T10698] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.512211][T10698] openvswitch: netlink: Message has 24 unknown bytes.
[  161.514966][T10698] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.570226][T10698] openvswitch: netlink: Message has 24 unknown bytes.
[  161.572937][T10698] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.685204][T10707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1339'.
[  162.013372][T10744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1349'.
[  162.059707][T10733] dvmrp1: entered allmulticast mode
[  162.246865][T10764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1355'.
[  162.410500][T10782] netlink: 'syz.1.1359': attribute type 1 has an invalid length.
[  162.438661][T10782] smc: adding net device bond0 with user defined pnetid SYZ2
[  162.443158][T10782] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.455753][T10786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1360'.
[  162.464420][T10782] 8021q: adding VLAN 0 to HW filter on device batadv1
[  162.480601][T10782] bond0: (slave batadv1): making interface the new active one
[  162.484444][T10782] bond0: (slave batadv1): Enslaving as an active interface with an up link
[  162.493103][T10782] netlink: 'syz.1.1359': attribute type 1 has an invalid length.
[  162.642346][   T61] block nbd0: Possible stuck request ffff888020920000: control (read@0,1024B). Runtime 30 seconds
[  162.646312][   T61] block nbd0: Possible stuck request ffff888020920200: control (read@1024,1024B). Runtime 30 seconds
[  162.650022][   T61] block nbd0: Possible stuck request ffff888020920400: control (read@2048,1024B). Runtime 30 seconds
[  162.653506][   T61] block nbd0: Possible stuck request ffff888020920600: control (read@3072,1024B). Runtime 30 seconds
[  162.836572][T10811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1369'.
[  162.890786][T10806] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  162.894295][T10806] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  163.278047][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  163.400103][T10844] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  163.504708][T10850] gtp0: entered promiscuous mode
[  163.728888][T10859] netlink: 'syz.0.1384': attribute type 10 has an invalid length.
[  163.732598][T10859] dummy0: entered promiscuous mode
[  163.734546][T10859] dummy0: entered allmulticast mode
[  163.739135][T10859] batman_adv: batadv0: Interface activated: dummy0
[  163.741757][T10859] batman_adv: batadv0: Interface deactivated: dummy0
[  163.744517][T10859] batman_adv: batadv0: Removing interface: dummy0
[  163.748367][T10859] net_ratelimit: 125 callbacks suppressed
[  163.748382][T10859] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  163.978027][T10874] vlan0: entered promiscuous mode
[  163.980126][T10874] bond0: entered promiscuous mode
[  163.981995][T10874] bond6: entered promiscuous mode
[  164.068421][T10878] netlink: 'syz.0.1390': attribute type 9 has an invalid length.
[  164.072241][T10878] netlink: 'syz.0.1390': attribute type 6 has an invalid length.
[  164.443844][T10890] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  164.603755][T10896] netlink: 'syz.1.1395': attribute type 4 has an invalid length.
[  164.661310][T10901] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  164.812287][T10903] netlink: 'syz.1.1397': attribute type 2 has an invalid length.
[  164.816233][T10901] bond0: (slave batadv1): Releasing active interface
[  164.826778][T10902] netlink: 'syz.1.1397': attribute type 2 has an invalid length.
[  164.941380][T10915] x_tables: duplicate underflow at hook 2
[  165.196625][T10928] SET target dimension over the limit!
[  165.473080][T10939] __nla_validate_parse: 16 callbacks suppressed
[  165.473097][T10939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1407'.
[  165.802882][T10947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1410'.
[  165.885859][T10949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1411'.
[  165.891902][T10949] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1411'.
[  165.899897][T10950] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1411'.
[  165.905806][T10951] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1411'.
[  166.137132][T10959] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1413'.
[  166.284638][T10967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1415'.
[  166.347045][T10973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1418'.
[  166.352464][T10973] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  166.821000][T11000] Cannot find add_set index 4 as target
[  167.226435][T11009] syzkaller1: entered promiscuous mode
[  167.232087][T11009] syzkaller1: entered allmulticast mode
[  167.442169][T11020] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  167.476292][T11020] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  167.565434][T11025] dvmrp8: entered allmulticast mode
[  167.666943][T11035] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  167.670057][T11035] syzkaller0: entered promiscuous mode
[  167.671971][T11035] syzkaller0: entered allmulticast mode
[  167.676911][T11035] tipc: Resetting bearer <eth:syzkaller0>
[  167.683583][T11034] tipc: Resetting bearer <eth:syzkaller0>
[  167.695045][T11034] tipc: Disabling bearer <eth:syzkaller0>
[  167.731843][T11042] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1438'.
[  167.891420][T11054] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.908855][T11052] xt_ecn: cannot match TCP bits for non-tcp packets
[  167.923757][T11052] bridge5: entered promiscuous mode
[  167.956504][T11054] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.046086][T11054] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.106319][T11064] C speed is unknown, defaulting to 1000
[  168.129734][T11054] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.230328][T11016] dvmrp8: left allmulticast mode
[  168.301881][T11054] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.342252][T11054] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.386278][T11054] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.399052][T11054] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.762945][T11077] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2
[  169.309029][T11094] syzkaller1: entered promiscuous mode
[  169.311984][T11094] syzkaller1: entered allmulticast mode
[  169.317527][T11094] xt_l2tp: v2 tid > 0xffff: 4294967295
[  169.675521][T11115] ip6t_REJECT: ECHOREPLY is not supported
[  169.824029][T11127] netlink: 'syz.0.1467': attribute type 1 has an invalid length.
[  169.870313][T11127] 8021q: adding VLAN 0 to HW filter on device bond11
[  169.889778][T11129] 8021q: adding VLAN 0 to HW filter on device batadv1
[  169.902213][T11129] bond11: (slave batadv1): making interface the new active one
[  169.910300][T11129] bond11: (slave batadv1): Enslaving as an active interface with an up link
[  170.003280][T11138] macvlan0: entered allmulticast mode
[  170.011897][T11138] netlink: 'syz.1.1470': attribute type 1 has an invalid length.
[  170.018026][T11138] netlink: 'syz.1.1470': attribute type 2 has an invalid length.
[  170.495037][T11171] __nla_validate_parse: 13 callbacks suppressed
[  170.495049][T11171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1482'.
[  170.502184][T11171] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  170.505650][T11171] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  170.538565][T11169] xt_CT: No such helper "syz0"
[  170.676590][T11179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1484'.
[  170.764049][T11177] C speed is unknown, defaulting to 1000
[  170.781768][T11186] netlink: 'syz.1.1487': attribute type 1 has an invalid length.
[  170.798330][T11182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.807007][T11186] 8021q: adding VLAN 0 to HW filter on device bond5
[  170.815908][T11182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  170.863410][T11189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1487'.
[  170.866652][T11189] erspan0: entered allmulticast mode
[  171.024356][T11198] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.064969][T11198] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.133844][T11198] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.192528][T11198] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.460727][T11207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1492'.
[  171.598111][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  171.600857][ T8129] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  171.621854][T11216] netlink: 'syz.0.1495': attribute type 1 has an invalid length.
[  171.662928][T11216] 8021q: adding VLAN 0 to HW filter on device bond12
[  171.685352][T11216] bond12: (slave bridge3): making interface the new active one
[  171.690237][T11216] bond12: (slave bridge3): Enslaving as an active interface with an up link
[  171.743189][T11216] macvlan4: entered promiscuous mode
[  171.745513][T11216] macvlan4: entered allmulticast mode
[  171.754785][T11216] bond12: entered promiscuous mode
[  171.757059][T11216] bridge3: entered promiscuous mode
[  171.768390][T11216] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  171.772787][T11216] bond12: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  171.780690][T11216] bond12: left promiscuous mode
[  171.782720][T11216] bridge3: left promiscuous mode
[  171.841128][T11226] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1497'.
[  171.845438][T11226] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1497'.
[  171.850228][T11226] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1497'.
[  171.854606][T11226] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1497'.
[  171.902734][T11228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1498'.
[  171.993061][T11230] C speed is unknown, defaulting to 1000
[  172.030185][T11198] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  172.055970][T11198] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  172.060567][T11235] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  172.079972][T11198] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  172.136352][T11198] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  172.414419][T11257] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.622147][T11264] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  172.736545][T11275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1508'.
[  172.884847][T11277] xt_l2tp: missing protocol rule (udp|l2tpip)
[  172.924166][T11277] syzkaller1: entered promiscuous mode
[  172.926679][T11277] syzkaller1: entered allmulticast mode
[  173.326005][T11284] batadv_slave_1: entered promiscuous mode
[  173.329400][T11284] batadv_slave_1: left promiscuous mode
[  173.401768][T11289] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[  173.406573][T11289] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  173.607581][T11300] xt_CT: No such helper "syz0"
[  173.761533][T11309] openvswitch: netlink: Actions may not be safe on all matching packets
[  173.770591][T11309] bridge0: port 1(gretap0) entered blocking state
[  173.773393][T11309] bridge0: port 1(gretap0) entered disabled state
[  173.777118][T11309] gretap0: entered allmulticast mode
[  173.781639][T11309] gretap0: entered promiscuous mode
[  173.784735][T11309] bridge0: port 1(gretap0) entered blocking state
[  173.787692][T11309] bridge0: port 1(gretap0) entered forwarding state
[  173.967221][T11319] netlink: 'syz.2.1523': attribute type 1 has an invalid length.
[  174.016440][T11321] netlink: 'syz.2.1524': attribute type 1 has an invalid length.
[  174.021319][T11322] netlink: 'syz.2.1524': attribute type 1 has an invalid length.
[  174.266076][T11328] veth0: entered promiscuous mode
[  175.210329][T11343] trusted_key: syz.2.1531 sent an empty control message without MSG_MORE.
[  175.467714][T11351] C speed is unknown, defaulting to 1000
[  175.659743][T11361] x_tables: duplicate underflow at hook 1
[  175.689166][T11365] __nla_validate_parse: 13 callbacks suppressed
[  175.689183][T11365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1539'.
[  175.945318][T11371] netlink: 'syz.1.1542': attribute type 2 has an invalid length.
[  175.957225][T11371] netlink: 51 bytes leftover after parsing attributes in process `syz.1.1542'.
[  175.974593][T11371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1542'.
[  176.151152][T11378] bond13: entered promiscuous mode
[  176.152956][T11378] bond13: entered allmulticast mode
[  176.155257][T11378] 8021q: adding VLAN 0 to HW filter on device bond13
[  176.368435][T11397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1551'.
[  176.379841][T11397] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1551'.
[  176.391245][T11399] xt_limit: Overflow, try lower: 262144/524288
[  176.396194][T11399] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1552'.
[  176.576299][T11415] Cannot find set identified by id 1 to match
[  176.685440][T11420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1558'.
[  176.693285][T11423] tipc: Trying to set illegal importance in message
[  176.847020][T11439] netlink: 'syz.2.1562': attribute type 1 has an invalid length.
[  176.850451][T11439] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1562'.
[  176.869141][T11439] netlink: 'syz.2.1562': attribute type 1 has an invalid length.
[  176.933107][T11441] IPVS: set_ctl: invalid protocol: 25965 114.121.46.101:30309
[  176.972501][T11447] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1565'.
[  176.990546][T11447] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  176.994594][T11447] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  177.057559][T11456] ip_vti0: entered allmulticast mode
[  177.092846][T11458] netlink: 'syz.0.1568': attribute type 6 has an invalid length.
[  177.100231][T11458] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1568'.
[  177.286716][T11471] dvmrp0: entered allmulticast mode
[  177.464686][T11484] netlink: 'syz.1.1576': attribute type 2 has an invalid length.
[  177.568404][T11487] xt_TCPMSS: Only works on TCP SYN packets
[  177.646807][T11491] netlink: 'syz.2.1578': attribute type 1 has an invalid length.
[  177.705517][T11496] netlink: 'syz.1.1581': attribute type 21 has an invalid length.
[  177.712588][T11496] netlink: 'syz.1.1581': attribute type 5 has an invalid length.
[  177.850334][T11509] ieee802154 phy0 wpan0: encryption failed: -22
[  178.156221][T11530] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  178.346103][T11540] netlink: 'syz.1.1596': attribute type 7 has an invalid length.
[  178.364557][T11540] netlink: 'syz.1.1596': attribute type 8 has an invalid length.
[  178.695365][T11554] bond14: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  178.739361][T11554] veth9: entered promiscuous mode
[  178.753413][T11554] bond14: (slave veth9): Enslaving as a backup interface with a down link
[  178.762256][T11554] bond0: (slave 1@): Releasing backup interface
[  178.766971][T11554] bond0: (slave bond_slave_1): Releasing backup interface
[  178.779668][T11554] team0: Port device team_slave_0 removed
[  178.784329][T11554] team0: Port device team_slave_1 removed
[  178.787093][T11554] batman_adv: batadv0: Removing interface: batadv_slave_0
[  178.795958][T11554] batman_adv: batadv0: Removing interface: batadv_slave_1
[  178.802189][T11554] batman_adv: batadv0: Removing interface: ipvlan2
[  178.806524][T11554] bond5: (slave gretap2): Releasing active interface
[  178.817559][T11554] bond6: (slave bridge2): Releasing active interface
[  178.824853][T11554] bond7: (slave veth5): Releasing active interface
[  178.833027][T11554] bond10: (slave ip6gretap1): Releasing active interface
[  178.845554][T11554] bond11: (slave batadv1): Releasing active interface
[  178.854729][T11554] bond12: (slave bridge3): Releasing active interface
[  178.862971][T11554] bond14: (slave ip6gretap2): Releasing backup interface
[  178.865851][T11554] bond14: (slave ip6gretap2): the permanent HWaddr of slave - 16:71:e3:be:b1:97 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  178.880610][T11554] bond14: (slave veth9): Releasing backup interface
[  178.954733][T11574] RDS: rds_bind could not find a transport for fe80::18, load rds_tcp or rds_rdma?
[  179.278052][    C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  179.332982][T11611] C speed is unknown, defaulting to 1000
[  180.267145][T11684] delete_channel: no stack
[  180.564440][ T5881] hid-generic 0005:16BF:5505.0005: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[  180.812689][T11710] __nla_validate_parse: 23 callbacks suppressed
[  180.812714][T11710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1643'.
[  181.134359][T11712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1644'.
[  181.381625][T11730] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1652'.
[  181.424160][T11735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1653'.
[  181.520986][T11739] validate_nla: 10 callbacks suppressed
[  181.521004][T11739] netlink: 'syz.2.1655': attribute type 1 has an invalid length.
[  181.526428][T11739] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1655'.
[  181.670209][T11741] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1657'.
[  181.745926][T11753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1661'.
[  181.941666][T11772] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[  181.990732][T11776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1670'.
[  182.116519][T11786] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  183.355901][T11798] xt_l2tp: invalid flags combination: 4
[  183.371231][T11796] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  183.437692][T11805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1677'.
[  183.491250][T11808] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  183.684050][T11829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1685'.
[  183.690477][T11829] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  183.732207][T11829] syzkaller0: entered promiscuous mode
[  183.734000][T11829] syzkaller0: entered allmulticast mode
[  183.736144][T11829] tipc: Resetting bearer <eth:syzkaller0>
[  183.742948][T11827] tipc: Resetting bearer <eth:syzkaller0>
[  184.881383][T11827] tipc: Disabling bearer <eth:syzkaller0>
[  184.887607][T11833] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  184.894781][T11834] syzkaller0: entered promiscuous mode
[  184.897333][T11834] syzkaller0: entered allmulticast mode
[  184.909699][T11838] tipc: Resetting bearer <eth:syzkaller0>
[  184.912951][T11831] tipc: Resetting bearer <eth:syzkaller0>
[  184.933980][T11831] tipc: Disabling bearer <eth:syzkaller0>
[  185.437892][ T5221] Bluetooth: hci2: command 0x0405 tx timeout
[  185.576744][T11893] C speed is unknown, defaulting to 1000
[  185.935195][T11901] __nla_validate_parse: 2 callbacks suppressed
[  185.935207][T11901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1704'.
[  185.939962][T11901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1704'.
[  185.942770][T11901] netlink: 'syz.0.1704': attribute type 7 has an invalid length.
[  186.275941][T11906] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1707'.
[  186.472080][T11925] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1712'.
[  186.475807][T11925] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1712'.
[  186.612285][T11940] netlink: 'syz.1.1716': attribute type 12 has an invalid length.
[  186.623800][T11935] C speed is unknown, defaulting to 1000
[  186.797233][T11954] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  186.976298][T11967] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1724'.
[  186.980375][T11969] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1725'.
[  187.084271][T11974] kthread_run failed with err -4
[  187.113585][T11980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1728'.
[  187.294667][T11989] syzkaller0: entered promiscuous mode
[  187.298101][T11989] syzkaller0: entered allmulticast mode
[  187.401009][T11992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1732'.
[  187.549369][T12003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1735'.
[  187.722265][T12015] !: renamed from dummy0 (while UP)
[  188.031193][T12034] netlink: 'syz.0.1745': attribute type 83 has an invalid length.
[  188.174504][T12039] syzkaller0: entered promiscuous mode
[  188.176852][T12039] syzkaller0: entered allmulticast mode
[  188.198218][T12039] xt_CT: No such helper "pptp"
[  189.605135][T12047] 8021q: adding VLAN 0 to HW filter on device bond16
[  189.629845][T12047] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[  189.637538][T12052] netlink: 'syz.2.1750': attribute type 1 has an invalid length.
[  189.695239][T12052] 8021q: adding VLAN 0 to HW filter on device bond7
[  189.725628][T12058] veth1: entered promiscuous mode
[  189.733231][T12058] bond7: (slave veth1): Enslaving as an active interface with a down link
[  189.752299][T12052] erspan0: entered allmulticast mode
[  189.763715][T12052] bond7: (slave erspan0): making interface the new active one
[  189.769867][T12052] erspan0: entered promiscuous mode
[  189.773037][T12052] bond7: (slave erspan0): Enslaving as an active interface with an up link
[  189.831318][T12067] syzkaller1: entered promiscuous mode
[  189.833044][T12067] syzkaller1: entered allmulticast mode
[  189.839244][T12072] x_tables: unsorted entry at hook 3
[  190.047238][T12093] IPVS: Scheduler module ip_vs_sip not found
[  190.049816][T12093] IPVS: length: 8 != 446622349272
[  190.101916][T12096] netlink: 'syz.1.1763': attribute type 10 has an invalid length.
[  190.114061][T12096] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  190.228482][T12101] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  190.241847][T12101] syzkaller0: entered promiscuous mode
[  190.243991][T12101] syzkaller0: entered allmulticast mode
[  190.362271][T12110] tipc: Resetting bearer <eth:syzkaller0>
[  190.400213][T12114] netlink: 'syz.0.1770': attribute type 10 has an invalid length.
[  190.404449][T12114] batman_adv: batadv0: Adding interface: virt_wifi0
[  190.406458][T12114] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560.
[  190.415227][T12114] batman_adv: batadv0: Interface activated: virt_wifi0
[  190.462014][T12123] openvswitch: netlink: IP tunnel TTL not specified.
[  190.513387][T12126] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.552476][T12131] netlink: 'syz.0.1776': attribute type 12 has an invalid length.
[  190.574429][T12126] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.655134][T12126] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.727329][T12142] team0: Mode "ativeback" not found
[  190.733306][T12126] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.809758][T12126] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.824703][T12126] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.835086][T12126] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.854854][T12126] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.958504][ T5833] Bluetooth: hci1: command 0x0406 tx timeout
[  191.027181][T12100] tipc: Resetting bearer <eth:syzkaller0>
[  191.042865][T12100] tipc: Disabling bearer <eth:syzkaller0>
[  191.381833][T12175] __nla_validate_parse: 16 callbacks suppressed
[  191.381845][T12175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1792'.
[  191.713789][T12186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1795'.
[  191.717312][T12186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1795'.
[  192.524307][T12199] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1799'.
[  192.545260][T12197] netlink: 'syz.2.1798': attribute type 21 has an invalid length.
[  192.551984][T12197] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1798'.
[  192.555694][T12197] netlink: 'syz.2.1798': attribute type 5 has an invalid length.
[  192.559596][T12197] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1798'.
[  192.622304][T12200] netlink: 'syz.2.1798': attribute type 1 has an invalid length.
[  192.703424][T12209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1801'.
[  192.721911][   T61] block nbd0: Possible stuck request ffff888020920000: control (read@0,1024B). Runtime 60 seconds
[  192.726142][   T61] block nbd0: Possible stuck request ffff888020920200: control (read@1024,1024B). Runtime 60 seconds
[  192.730636][   T61] block nbd0: Possible stuck request ffff888020920400: control (read@2048,1024B). Runtime 60 seconds
[  192.734823][   T61] block nbd0: Possible stuck request ffff888020920600: control (read@3072,1024B). Runtime 60 seconds
[  192.789271][T12215] netlink: 880 bytes leftover after parsing attributes in process `syz.0.1803'.
[  192.799797][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.803429][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.908840][T12225] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1806'.
[  192.914277][T12225] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1806'.
[  192.918807][T12225] netlink: 'syz.2.1806': attribute type 5 has an invalid length.
[  193.391976][T12248] x_tables: duplicate underflow at hook 1
[  193.467687][T12254] set match dimension is over the limit!
[  193.546572][T12256] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  193.551194][T12256] batman_adv: batadv0: Removing interface: virt_wifi0
[  193.713437][T12259] tc_dump_action: action bad kind
[  193.898591][T12278] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  193.959307][ T5853] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  194.003804][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  194.583396][T12323] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  194.594871][T12325] pim6reg: entered allmulticast mode
[  194.597234][T12324] pim6reg: left allmulticast mode
[  195.002352][T11699] ==================================================================
[  195.005132][T11699] BUG: KASAN: slab-use-after-free in __mutex_lock+0x738/0xe80
[  195.007359][T11699] Read of size 8 at addr ffff888110eac0a0 by task khidpd_16bf5505/11699
[  195.010629][T11699] 
[  195.011777][T11699] CPU: 0 UID: 0 PID: 11699 Comm: khidpd_16bf5505 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  195.011790][T11699] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  195.011796][T11699] Call Trace:
[  195.011802][T11699]  <TASK>
[  195.011822][T11699]  dump_stack_lvl+0x189/0x250
[  195.011838][T11699]  ? __virt_addr_valid+0x1c8/0x5c0
[  195.011851][T11699]  ? rcu_is_watching+0x15/0xb0
[  195.011862][T11699]  ? __kasan_check_byte+0x12/0x40
[  195.011876][T11699]  ? __pfx_dump_stack_lvl+0x10/0x10
[  195.011885][T11699]  ? rcu_is_watching+0x15/0xb0
[  195.011894][T11699]  ? lock_release+0x4b/0x3e0
[  195.011905][T11699]  ? __virt_addr_valid+0x1c8/0x5c0
[  195.011915][T11699]  ? __virt_addr_valid+0x4a5/0x5c0
[  195.011925][T11699]  print_report+0xd2/0x2b0
[  195.011934][T11699]  ? __mutex_lock+0x738/0xe80
[  195.011942][T11699]  kasan_report+0x118/0x150
[  195.011954][T11699]  ? __mutex_lock+0x738/0xe80
[  195.011964][T11699]  __mutex_lock+0x738/0xe80
[  195.011973][T11699]  ? __mutex_lock+0x51b/0xe80
[  195.011982][T11699]  ? l2cap_unregister_user+0x6a/0x1b0
[  195.011993][T11699]  ? __pfx___mutex_lock+0x10/0x10
[  195.012001][T11699]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  195.012018][T11699]  l2cap_unregister_user+0x6a/0x1b0
[  195.012028][T11699]  hidp_session_thread+0x3c9/0x410
[  195.012039][T11699]  ? __pfx_hidp_session_thread+0x10/0x10
[  195.012047][T11699]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  195.012059][T11699]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  195.012069][T11699]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  195.012077][T11699]  ? __kthread_parkme+0x7b/0x200
[  195.012088][T11699]  ? __kthread_parkme+0x1a1/0x200
[  195.012099][T11699]  kthread+0x711/0x8a0
[  195.012110][T11699]  ? __pfx_hidp_session_thread+0x10/0x10
[  195.012119][T11699]  ? __pfx_kthread+0x10/0x10
[  195.012130][T11699]  ? _raw_spin_unlock_irq+0x23/0x50
[  195.012141][T11699]  ? lockdep_hardirqs_on+0x9c/0x150
[  195.012150][T11699]  ? __pfx_kthread+0x10/0x10
[  195.012160][T11699]  ret_from_fork+0x3fc/0x770
[  195.012171][T11699]  ? __pfx_ret_from_fork+0x10/0x10
[  195.012180][T11699]  ? __switch_to_asm+0x39/0x70
[  195.012190][T11699]  ? __switch_to_asm+0x33/0x70
[  195.012199][T11699]  ? __pfx_kthread+0x10/0x10
[  195.012210][T11699]  ret_from_fork_asm+0x1a/0x30
[  195.012224][T11699]  </TASK>
[  195.012227][T11699] 
[  195.089316][T11699] Allocated by task 5839:
[  195.090626][T11699]  kasan_save_track+0x3e/0x80
[  195.092090][T11699]  __kasan_kmalloc+0x93/0xb0
[  195.093520][T11699]  __kmalloc_noprof+0x27a/0x4f0
[  195.095028][T11699]  hci_alloc_dev_priv+0x28/0x2040
[  195.096547][T11699]  vhci_create_device+0x120/0x6e0
[  195.098091][T11699]  vhci_write+0x3ce/0x4a0
[  195.099412][T11699]  vfs_write+0x54b/0xa90
[  195.100713][T11699]  ksys_write+0x145/0x250
[  195.102024][T11699]  do_syscall_64+0xfa/0x3b0
[  195.103612][T11699]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.105886][T11699] 
[  195.106739][T11699] Freed by task 5839:
[  195.107990][T11699]  kasan_save_track+0x3e/0x80
[  195.109410][T11699]  kasan_save_free_info+0x46/0x50
[  195.110969][T11699]  __kasan_slab_free+0x62/0x70
[  195.112407][T11699]  kfree+0x18e/0x440
[  195.113685][T11699]  bt_host_release+0x82/0x90
[  195.115309][T11699]  device_release+0x9c/0x1c0
[  195.116729][T11699]  kobject_put+0x22b/0x480
[  195.118073][T11699]  vhci_release+0x88/0xd0
[  195.119372][T11699]  __fput+0x44c/0xa70
[  195.120584][T11699]  task_work_run+0x1d4/0x260
[  195.121989][T11699]  do_exit+0x6b5/0x22e0
[  195.123351][T11699]  do_group_exit+0x21c/0x2d0
[  195.125165][T11699]  __x64_sys_exit_group+0x3f/0x40
[  195.127162][T11699]  x64_sys_call+0x21ba/0x21c0
[  195.129005][T11699]  do_syscall_64+0xfa/0x3b0
[  195.130782][T11699]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  195.133098][T11699] 
[  195.134071][T11699] Last potentially related work creation:
[  195.136239][T11699]  kasan_save_stack+0x3e/0x60
[  195.138060][T11699]  kasan_record_aux_stack+0xbd/0xd0
[  195.140081][T11699]  insert_work+0x3d/0x330
[  195.141772][T11699]  __queue_work+0xbd9/0xfe0
[  195.143569][T11699]  queue_work_on+0x181/0x270
[  195.145360][T11699]  process_scheduled_works+0xae1/0x17b0
[  195.147490][T11699]  worker_thread+0x8a0/0xda0
[  195.149323][T11699]  kthread+0x711/0x8a0
[  195.150908][T11699]  ret_from_fork+0x3fc/0x770
[  195.152695][T11699]  ret_from_fork_asm+0x1a/0x30
[  195.154576][T11699] 
[  195.155532][T11699] Second to last potentially related work creation:
[  195.158071][T11699]  kasan_save_stack+0x3e/0x60
[  195.159654][T11699]  kasan_record_aux_stack+0xbd/0xd0
[  195.161286][T11699]  insert_work+0x3d/0x330
[  195.162591][T11699]  __queue_work+0xcfc/0xfe0
[  195.164220][T11699]  call_timer_fn+0x17e/0x5f0
[  195.166071][T11699]  __run_timer_base+0x646/0x860
[  195.167939][T11699]  run_timer_softirq+0xb7/0x180
[  195.169791][T11699]  handle_softirqs+0x286/0x870
[  195.171402][T11699]  __irq_exit_rcu+0xca/0x1f0
[  195.172986][T11699]  irq_exit_rcu+0x9/0x30
[  195.174683][T11699]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  195.176892][T11699]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  195.178884][T11699] 
[  195.179632][T11699] The buggy address belongs to the object at ffff888110eac000
[  195.179632][T11699]  which belongs to the cache kmalloc-8k of size 8192
[  195.183975][T11699] The buggy address is located 160 bytes inside of
[  195.183975][T11699]  freed 8192-byte region [ffff888110eac000, ffff888110eae000)
[  195.188496][T11699] 
[  195.189247][T11699] The buggy address belongs to the physical page:
[  195.191216][T11699] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x110ea8
[  195.194337][T11699] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  195.197613][T11699] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  195.200526][T11699] page_type: f5(slab)
[  195.202123][T11699] raw: 057ff00000000040 ffff88801a442280 dead000000000122 0000000000000000
[  195.205454][T11699] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  195.208859][T11699] head: 057ff00000000040 ffff88801a442280 dead000000000122 0000000000000000
[  195.212198][T11699] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  195.214999][T11699] head: 057ff00000000003 ffffea000443aa01 00000000ffffffff 00000000ffffffff
[  195.218029][T11699] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  195.221287][T11699] page dumped because: kasan: bad access detected
[  195.223788][T11699] page_owner tracks the page as allocated
[  195.226000][T11699] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5830, tgid 5830 (syz-executor), ts 64241023589, free_ts 64022802141
[  195.234173][T11699]  post_alloc_hook+0x240/0x2a0
[  195.236098][T11699]  get_page_from_freelist+0x21e4/0x22c0
[  195.238275][T11699]  __alloc_frozen_pages_noprof+0x181/0x370
[  195.240548][T11699]  alloc_pages_mpol+0x232/0x4a0
[  195.242445][T11699]  allocate_slab+0x8a/0x3b0
[  195.244278][T11699]  ___slab_alloc+0xbfc/0x1480
[  195.246170][T11699]  __kmalloc_noprof+0x305/0x4f0
[  195.247915][T11699]  cache_create_net+0x92/0x260
[  195.249361][T11699]  gss_svc_init_net+0x58/0x570
[  195.251057][T11699]  ops_init+0x35c/0x5c0
[  195.252649][T11699]  setup_net+0x219/0x4b0
[  195.254294][T11699]  copy_net_ns+0x31b/0x4d0
[  195.256020][T11699]  create_new_namespaces+0x3f3/0x720
[  195.258064][T11699]  unshare_nsproxy_namespaces+0x11c/0x170
[  195.260252][T11699]  ksys_unshare+0x4c8/0x8c0
[  195.262022][T11699]  __x64_sys_unshare+0x38/0x50
[  195.263902][T11699] page last free pid 5829 tgid 5829 stack trace:
[  195.266313][T11699]  __free_frozen_pages+0xc71/0xe70
[  195.268313][T11699]  __put_partials+0x161/0x1c0
[  195.270166][T11699]  put_cpu_partial+0x17c/0x250
[  195.272030][T11699]  __slab_free+0x2f7/0x400
[  195.273771][T11699]  qlist_free_all+0x97/0x140
[  195.275571][T11699]  kasan_quarantine_reduce+0x148/0x160
[  195.277663][T11699]  __kasan_slab_alloc+0x22/0x80
[  195.279559][T11699]  __kmalloc_cache_noprof+0x1be/0x3d0
[  195.281615][T11699]  kcov_open+0x25/0x90
[  195.283207][T11699]  open_proxy_open+0x392/0x4e0
[  195.285081][T11699]  do_dentry_open+0xdf3/0x1970
[  195.286946][T11699]  vfs_open+0x3b/0x340
[  195.288533][T11699]  path_openat+0x2ee5/0x3830
[  195.290149][T11699]  do_filp_open+0x1fa/0x410
[  195.291653][T11699]  do_sys_openat2+0x121/0x1c0
[  195.293509][T11699]  __x64_sys_openat+0x138/0x170
[  195.295434][T11699] 
[  195.296378][T11699] Memory state around the buggy address:
[  195.298554][T11699]  ffff888110eabf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  195.301634][T11699]  ffff888110eac000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  195.304766][T11699] >ffff888110eac080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  195.307848][T11699]                                ^
[  195.309853][T11699]  ffff888110eac100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  195.312935][T11699]  ffff888110eac180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  195.315976][T11699] ==================================================================
[  195.319714][T11699] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  195.322278][T11699] CPU: 0 UID: 0 PID: 11699 Comm: khidpd_16bf5505 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  195.326780][T11699] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  195.330676][T11699] Call Trace:
[  195.332032][T11699]  <TASK>
[  195.333083][T11699]  dump_stack_lvl+0x99/0x250
[  195.334553][T11699]  ? __asan_memcpy+0x40/0x70
[  195.335966][T11699]  ? __pfx_dump_stack_lvl+0x10/0x10
[  195.337511][T11699]  ? __pfx__printk+0x10/0x10
[  195.338933][T11699]  panic+0x2db/0x790
[  195.340211][T11699]  ? __pfx_panic+0x10/0x10
[  195.341592][T11699]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  195.343681][T11699]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  195.345966][T11699]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  195.348447][T11699]  ? print_memory_metadata+0x314/0x400
[  195.350516][T11699]  ? __mutex_lock+0x738/0xe80
[  195.352360][T11699]  check_panic_on_warn+0x89/0xb0
[  195.354329][T11699]  ? __mutex_lock+0x738/0xe80
[  195.356211][T11699]  end_report+0x78/0x160
[  195.357906][T11699]  kasan_report+0x129/0x150
[  195.359673][T11699]  ? __mutex_lock+0x738/0xe80
[  195.361520][T11699]  __mutex_lock+0x738/0xe80
[  195.363372][T11699]  ? __mutex_lock+0x51b/0xe80
[  195.365223][T11699]  ? l2cap_unregister_user+0x6a/0x1b0
[  195.367341][T11699]  ? __pfx___mutex_lock+0x10/0x10
[  195.369278][T11699]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  195.371557][T11699]  l2cap_unregister_user+0x6a/0x1b0
[  195.373553][T11699]  hidp_session_thread+0x3c9/0x410
[  195.375520][T11699]  ? __pfx_hidp_session_thread+0x10/0x10
[  195.377754][T11699]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  195.379784][T11699]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  195.381650][T11699]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  195.383610][T11699]  ? __kthread_parkme+0x7b/0x200
[  195.385133][T11699]  ? __kthread_parkme+0x1a1/0x200
[  195.386698][T11699]  kthread+0x711/0x8a0
[  195.387992][T11699]  ? __pfx_hidp_session_thread+0x10/0x10
[  195.389703][T11699]  ? __pfx_kthread+0x10/0x10
[  195.391173][T11699]  ? _raw_spin_unlock_irq+0x23/0x50
[  195.392845][T11699]  ? lockdep_hardirqs_on+0x9c/0x150
[  195.394703][T11699]  ? __pfx_kthread+0x10/0x10
[  195.396480][T11699]  ret_from_fork+0x3fc/0x770
[  195.398268][T11699]  ? __pfx_ret_from_fork+0x10/0x10
[  195.400284][T11699]  ? __switch_to_asm+0x39/0x70
[  195.401970][T11699]  ? __switch_to_asm+0x33/0x70
[  195.403401][T11699]  ? __pfx_kthread+0x10/0x10
[  195.405160][T11699]  ret_from_fork_asm+0x1a/0x30
[  195.406596][T11699]  </TASK>
[  195.408208][T11699] Kernel Offset: disabled
[  195.409552][T11699] Rebooting in 86400 seconds..

VM DIAGNOSIS:
01:06:00  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000039 RBX=0000000000000039 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90008887370
R8 =ffff88801f500237 R9 =1ffff11003ea0046 R10=dffffc0000000000 R11=ffffffff85460db0
R12=dffffc0000000000 R13=ffffffff99aee8dc R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fad1d8e7d60 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f7f82b86478 00007f7f82b86450 XMM03=00007f7f82b86488 00007f7f82b86480
XMM04=00007f7f836ed100 00007f7f82b86440 XMM05=00007f7f82b86458 00007f7f82b864a0
XMM06=00007f7f82b86498 00007f7f82b86490 XMM07=00007f7f82b86488 00007f7f82b86480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f7f82a11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff8214545c RDX=0000000000000000
RSI=0000000000000008 RDI=ffffffff8fa1d5f0 RBP=ffffea000462bd00 RSP=ffffc9000360f868
R8 =ffffea000462bd07 R9 =1ffffd40008c57a0 R10=dffffc0000000000 R11=fffff940008c57a1
R12=ffffea000462bd00 R13=ffffea000462bd08 R14=1ffff11020984601 R15=0000000000000000
RIP=ffffffff822227cd RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555590dab500 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5e10f79000 CR3=00000000294cc000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffff000000000000 ffff00ff00000000 XMM05=0000000000000135 0000000036313a00
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffff000000ff XMM09=353030302e353035 353a464236313a35
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
