last executing test programs:

1.82002898s ago: executing program 0 (id=1226):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0xb4013, r1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x12, &(0x7f00000000c0)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x6b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)

1.817396094s ago: executing program 0 (id=1227):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0xffff, @mcast1, 0x2}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
sendmsg$nl_generic(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xac, 0x12, 0x200, 0x70bd2a, 0x25dfdbff, {0xe}, [@typed={0x14, 0x125, 0x0, 0x0, @ipv6=@empty}, @generic="65b0d793dd082a45f230914037fb30d1df437fb30a774c885ca324f95e0f2c2e1e7729105eae84ac69a031aedd5d140adce444e52d6039a06e8675ebf7917108a6b986f493fcba965b38a4b43ee1a01e8032f39ea5b5285bbc31a0c5407130233a8bfcafc55cddccf084cd3af8ecd77cb7f1e13c66428ce32c27a764", @generic, @typed={0x8, 0xe8, 0x0, 0x0, @fd}]}, 0xac}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c0007800837d73ec300000008000600000000000800050000000000240007800800050000230000000005000000000061ff0500000000000800050000000000040007801400078008000600002e"], 0xd0}}, 0x0)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r4, 0xe52f3db8394458de, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_DEV(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x20, r6, 0xde6bcce13c096341, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0)
writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

1.817031394s ago: executing program 0 (id=1228):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe22}, 0x1c)
listen(r0, 0x8008)
r1 = socket$netlink(0x10, 0x3, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b40)={'wlan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd6c45fcdbdf25923d110308000300", @ANYRES32=r4, @ANYBLOB="0a0006"], 0x38}, 0x1, 0x0, 0x0, 0x68040}, 0x4)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c)
bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r7, 0x0)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)

1.750555581s ago: executing program 0 (id=1229):
r0 = socket(0x11, 0x6, 0x2000)
socket$kcm(0x2, 0xa, 0x73)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
socket$kcm(0x2, 0xa, 0x2)
sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x25dfdbfb, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xfffffffc}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x4}}, @TCA_SAMPLE_RATE={0x8}]}, {0x4}, {0x24}, {0xc}}}]}]}, 0x70}}, 0x0)
getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
pselect6(0x40, &(0x7f0000000000)={0x10, 0x4, 0x80000000000, 0x3, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, &(0x7f0000000000), 0x0}, 0x20)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x0, 0x3, 0xffffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, 0x48)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan4\x00', <r6=>0x0})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$inet(0x2, 0x1, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r9)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r10, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8814}, 0x0)
sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, r10, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9}, 0x4040000)
setsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f0000000100)="441f08f7ffffffe8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d)
sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0xffffffffffffff34, 0x8, 0x1, 0x0, 0x1}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x890}, 0x0)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf2501000000080001000100000008000300", @ANYRES32=r5, @ANYBLOB="0c000600000000000000000008000300", @ANYRES32=r6, @ANYBLOB="0800e7c5c8549b84d4c07c0609aa58e1050247c321b1fb474016902108805c2f76ddf9c898999b3700f37a703f006a662854526f9b48a206df3156911a4d0187edab3bae58afc9b006bfdcb6caf4b2c32ce2fcc853402cea0771b425b904f0780427b31823a591", @ANYRES32=0x0, @ANYBLOB="0c000600010000000100000008000100030000000800010001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000810}, 0x40)

408.398191ms ago: executing program 1 (id=1261):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'pim6reg1\x00', @remote})
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000190"], 0xfdef)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000003e0007012dbd7000fcdbdf25047c0000040000001400018006000600800a000008000a"], 0x2c}, 0x1, 0xc00000000000000}, 0x0)

240.218966ms ago: executing program 1 (id=1265):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x4040}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040}, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$nci(r1, &(0x7f0000000040)=@NCI_OP_CORE_RESET_RSP={0x0, 0x1, 0x2, 0x0, 0x7, {0x1, 0x20, 0x3}}, 0x6)

169.562093ms ago: executing program 1 (id=1266):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xf8}}, 0x0)

169.282917ms ago: executing program 0 (id=1267):
r0 = socket$netlink(0x10, 0x3, 0x15)
sendmsg$nl_generic(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x130, 0x11, 0xf720b6c5c733ef9d, 0x70bd29, 0x25dfdbfc, {0x2}, [@nested={0x119, 0x28, 0x0, 0x1, [@generic="6b9a76ddada92ebede14720403b6e9288c2c72982f60e772c63ec97db5404b80efe4d441949c6059fa8c89bbd153d428b92edaa1f18bc2f59bd499d46855de415d2036bc38bcfe896f2240e5293e91cbd0456d88", @generic="1e108813e26f5e64b8dde63e7e568233732f65d65ea9d6861078446939505f72e565658ac621b3c382d690b12728b56905152170f3d39b7dfe82e0392316ad499bb51601a6dd0fa575ff02b507f689ef878cd209223dc3d58fcce4197cdd86e6e0bc07f0951503dcdecfc14904276753ba952bf37d77da106bfa6789ac2f5da32871969b2393a6a1c8a3216810b92e2118d6a80ec909b9fbd2e2676152b09de57bec1c2eadd4d4848382327b85a2cb31eb2417abd935e50200f2f4c96b8f33c7aa"]}]}, 0x130}, 0x1, 0x0, 0x0, 0x40010}, 0x20044010)

168.474005ms ago: executing program 2 (id=1268):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_delvlan={0x54, 0x71, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xf}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x5d, 0x3}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x10, 0x2}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000800}, 0x40085)
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r2 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x80010, r2, 0x3b5d000)
write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000180)={'veth1_virt_wifi', 0x32, 0x38}, 0x12)
ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f00000001c0)={0x1, 0x3, 0x1f})
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000200)={0x1, 0xfffffffffffffffa, 0x9})
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000240)=<r3=>0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000280)={0x14, 0x1, {0x3, @usage=0x6, <r4=>0x0, 0x7f, 0x9, 0x6, 0x3, 0x6, 0x5, @usage=0x80, 0xba73, 0x0, [0x1, 0x0, 0x5, 0x3c, 0x8, 0xf6]}, {0x6, @struct={0x5, 0x2fc}, 0x0, 0x5, 0xfffffffffffffffe, 0x7, 0xffffffffffffff80, 0x7, 0x1, @struct={0x8}, 0x8, 0x4, [0x1, 0x0, 0xfff, 0x4, 0x2, 0x86]}, {0x3, @struct={0x2, 0x3}, 0x0, 0x5, 0x5, 0x9, 0x8, 0xffffffff, 0x0, @struct={0x9, 0x7}, 0xfffffff8, 0x4, [0x2, 0x101, 0xffffffffffffffff, 0x9000000000, 0x8, 0x7fffffffffffffff]}, {0x401, 0x404, 0x6}})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000680)={{r2}, r3, 0x10, @unused=[0x0, 0x1, 0xb44, 0x2], @devid=r4})
r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
connect$llc(r5, &(0x7f0000001680)={0x1a, 0x6e13e839da4d8ffd, 0x3, 0x1, 0x6, 0x10, @random="c90ac326f0a4"}, 0x10)
clock_gettime(0x0, &(0x7f00000016c0)={<r6=>0x0, <r7=>0x0})
setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000001700)={r6, r7/1000+60000}, 0x10)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000001740)={@loopback, 0x67})
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000017c0)=@o_path={&(0x7f0000001780)='./file0\x00', 0xffffffffffffffff, 0x4000, r1}, 0x18)
ioctl$BTRFS_IOC_SPACE_INFO(r1, 0xc0109414, &(0x7f0000001800)={0xea7, 0x4, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
r9 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000017800)={r9, r0, 0x0, 0x13, &(0x7f00000177c0)='net_prio.ifpriomap\x00'}, 0x30)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
accept$packet(0xffffffffffffffff, &(0x7f0000017840)={0x11, 0x0, <r11=>0x0}, &(0x7f0000017880)=0x14)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000017900)=@o_path={&(0x7f00000178c0)='./file0\x00', 0x0, 0x4000, r10}, 0x18)
r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000017940)='cpuacct.stat\x00', 0x0, 0x0)
sendmsg$IPSET_CMD_GET_BYNAME(r12, &(0x7f0000017a80)={&(0x7f0000017980), 0xc, &(0x7f0000017a40)={&(0x7f00000179c0)={0x70, 0xe, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000017b00), r12)
sendmsg$IPVS_CMD_GET_DAEMON(r12, &(0x7f0000017c80)={&(0x7f0000017ac0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000017c40)={&(0x7f0000017b40)={0xc4, r13, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x21}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7aa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x17}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xe}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010101}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000)
sendmsg$L2TP_CMD_SESSION_MODIFY(r12, &(0x7f0000017d80)={&(0x7f0000017cc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000017d40)={&(0x7f0000017d00)={0x3c, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0xe30}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200000e0}, 0x44000)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000017e40)={'ip6_vti0\x00', &(0x7f0000017dc0)={'syztnl1\x00', r11, 0x0, 0x4, 0x1, 0x7, 0x14, @private2, @empty, 0x8000, 0x10, 0xfffffffb, 0x9}})

168.267254ms ago: executing program 1 (id=1269):
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0x8}, {0xa, 0x0, 0xfffffffd, @private2, 0x6}, 0x0, {[0x6, 0x200, 0x1, 0xfffffefc, 0x2d, 0x1, 0x0, 0x200003]}}, 0x5c)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a0000000000006f0000000005001b003a00000008000300", @ANYRES32], 0x2c}}, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x60, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {0x39}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4004810)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x50, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x4}, {0x5}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4005}, 0x8840)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000030000000000000000aaff0200000000000000000000000000013a"], 0xfdef)

167.25063ms ago: executing program 0 (id=1270):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="4dc07f947163300c", 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$inet(r2, &(0x7f0000007e80)=[{{0x0, 0x0, &(0x7f0000006980)=[{&(0x7f0000005800)="5c31614dab37f14078d1f8373edf", 0xe}, {&(0x7f0000005880)="ed038fbed84476f8fc703597cc83e2b9b815b685d0fe6f", 0x17}, {&(0x7f0000005940)="c0f2246b2770", 0x6}], 0x3}}], 0x1, 0x20000050)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000004c0)='illinois\x00', 0x9)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0)

166.908068ms ago: executing program 2 (id=1271):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x10001}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}, {{&(0x7f0000000880)={0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, 0x1c, &(0x7f0000001000)=[{&(0x7f00000004c0)="06", 0x1}], 0x1, &(0x7f00000018c0)=ANY=[@ANYBLOB="1400000000000000290000003e000000390d000000000000480000000000000029000000390000003a0601010000000020010000000000000000000000000000fe8000000000000000000000000000aafc0200000000000000000000000000018010"], 0x10e0}}], 0x2, 0x880) (async)
shutdown(r1, 0x1) (async)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x4}, 0x8) (async)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000500))
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'macvlan0\x00', <r3=>0x0}) (async)
r4 = socket$netlink(0x10, 0x3, 0x0) (async)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000240)={0x1d, r3}, 0x10, &(0x7f0000000340)={&(0x7f0000000400)={0x1, 0x2c, 0x2, {0x0, 0x2710}, {}, {0x3}, 0x1, @can={{0x3, 0x0, 0x1, 0x1}, 0x8, 0x3, 0x0, 0x0, "6e19ab04bb1131ea"}}, 0x48}, 0x1, 0x0, 0x0, 0x9010}, 0x4000844)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000000)={<r6=>r4, 0x80000001, 0x6, 0x3e10})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xc}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x20000884) (async)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES64=r7, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r3, @ANYBLOB="08000a00fb"], 0x84}}, 0x20008040)

90.251542ms ago: executing program 2 (id=1272):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000007110b1000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)

90.058003ms ago: executing program 1 (id=1273):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'bridge0\x00', &(0x7f0000000280)=@ethtool_stats={0x1d, 0x1, [0x9]}})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042"], 0xfc}}, 0x80)

89.760859ms ago: executing program 2 (id=1274):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@expire={0x104, 0x18, 0x1, 0x70bd27, 0x25dfdbfe, {{{@in=@remote, @in6=@empty, 0x4e20, 0x0, 0x4e24, 0x6, 0x2, 0x80, 0x180, 0x73}, {@in=@broadcast, 0x4d4, 0x6c}, @in6=@remote, {0x9, 0x0, 0x800, 0x1000, 0x800, 0x0, 0x81}, {0x8, 0xa, 0xfffffffffffffffd, 0x3}, {0x4, 0xe415, 0x7}, 0x70bd2a, 0x0, 0xa, 0x0, 0xff}, 0x4}, [@mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x104}, 0x1, 0x0, 0x0, 0x24008010}, 0x200008cc)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r1)
ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000000)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0})
getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x4, 0xfffff000, 0x7, 0x2, 0x80000000, 0x200, 0xc88, 0xfffff800}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xff6, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @empty}]}}]}, 0x48}}, 0x20000800)

87.330376ms ago: executing program 1 (id=1275):
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000001f80)=ANY=[@ANYRES16=0x0], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4)
syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0)
recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x102, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680))
socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x23, 0x100000, 0x9)
r2 = epoll_create1(0x0)
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x8})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x2})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x4})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x440, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r5, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast})
write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000001003a00fe88a43d"], 0xfdef)
socket$netlink(0x10, 0x3, 0x14)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYRES64=r7], 0x10)

483.163µs ago: executing program 2 (id=1276):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)="600000004e007f049eefc7b4d87c87406910f368911005ea366248266e311c32ba82fbd3eaef15cdd18a5e6d0d4452706ca39be850bc2da9e5d2", 0x3a}, {&(0x7f0000000180)="78cabf2dfb73fc0a512a0080f2dcb9fe06892544001100b8f9e6aaeb1ae2f6e8bcb5ee52bf06", 0x26}], 0x2}, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRES16=r0], 0x128}, 0x1, 0x0, 0x0, 0x40}, 0x0) (rerun: 64)

0s ago: executing program 2 (id=1277):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r2 = socket$inet_udplite(0x2, 0x2, 0x88) (async)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0xe, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0xc911) (async)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f00000000c0)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1, "2567a2cba4445c093fe1c104757fd7504aceef28ceab502a88b99d1735806300", 0x3, 0x24e4, 0x0, 0x401}, 0x3c) (async)
r6 = socket$igmp(0x2, 0x3, 0x2) (async)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e22, @empty}, {0x0, @remote}, 0x48, {0x2, 0x0, @empty}, 'lo\x00'})
ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000300)={{0x2, 0x4e22, @empty}, {0x306, @random="ba52b21ca535"}, 0xa, {0x2, 0x0, @broadcast}, 'veth0_to_batadv\x00'}) (async)
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSSCAUSE(r7, 0x89e1, &(0x7f0000000040)=0x65b)
r8 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000640), 0x0, &(0x7f0000000880), 0x0, 0x4044005}}], 0x1, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) (async)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000002c0)=0x401) (async)
syz_genetlink_get_family_id$smc(&(0x7f0000000280), 0xffffffffffffffff) (async)
socket$can_raw(0x1d, 0x3, 0x1) (async)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async)
socket$packet(0x11, 0x2, 0x300) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:33898' (ED25519) to the list of known hosts.
syzkaller login: [   40.915034][ T5771] cgroup: Unknown subsys name 'net'
[   41.016937][ T5771] cgroup: Unknown subsys name 'cpuset'
[   41.020637][ T5771] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.394685][ T5771] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   45.445324][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   45.448399][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   45.451260][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   45.454221][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   45.457193][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   45.463660][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   45.476845][   T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   45.479499][   T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   45.482249][   T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   45.485028][   T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   45.531866][ T5219] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   45.534827][ T5219] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   45.537512][ T5219] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   45.540551][ T5219] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   45.543468][ T5219] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   45.752868][ T5825] chnl_net:caif_netlink_parms(): no params data found
[   45.773745][ T5829] chnl_net:caif_netlink_parms(): no params data found
[   45.786912][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   45.869421][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.872208][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.874802][ T5825] bridge_slave_0: entered allmulticast mode
[   45.877885][ T5825] bridge_slave_0: entered promiscuous mode
[   45.881564][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.884178][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.887598][ T5825] bridge_slave_1: entered allmulticast mode
[   45.890246][ T5825] bridge_slave_1: entered promiscuous mode
[   45.953760][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   45.959057][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   45.962077][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.965627][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.967974][ T5829] bridge_slave_0: entered allmulticast mode
[   45.970672][ T5829] bridge_slave_0: entered promiscuous mode
[   45.973430][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.976673][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.979002][ T5836] bridge_slave_0: entered allmulticast mode
[   45.981582][ T5836] bridge_slave_0: entered promiscuous mode
[   45.984981][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.987372][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.989733][ T5836] bridge_slave_1: entered allmulticast mode
[   45.992453][ T5836] bridge_slave_1: entered promiscuous mode
[   46.008689][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.011050][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.013445][ T5829] bridge_slave_1: entered allmulticast mode
[   46.016417][ T5829] bridge_slave_1: entered promiscuous mode
[   46.035369][ T5825] team0: Port device team_slave_0 added
[   46.046114][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.056510][ T5825] team0: Port device team_slave_1 added
[   46.059533][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.063861][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.081397][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.106175][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.108463][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.117026][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.122358][ T5829] team0: Port device team_slave_0 added
[   46.131874][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.134112][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.142619][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.151160][ T5829] team0: Port device team_slave_1 added
[   46.156174][ T5836] team0: Port device team_slave_0 added
[   46.179589][ T5836] team0: Port device team_slave_1 added
[   46.203394][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.205962][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.214219][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.221470][ T5825] hsr_slave_0: entered promiscuous mode
[   46.223916][ T5825] hsr_slave_1: entered promiscuous mode
[   46.226886][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.229257][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.238875][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.243019][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.245982][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.255086][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.268549][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.270821][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.279373][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.345242][ T5829] hsr_slave_0: entered promiscuous mode
[   46.347522][ T5829] hsr_slave_1: entered promiscuous mode
[   46.349654][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.352210][ T5829] Cannot create hsr debugfs directory
[   46.367857][ T5836] hsr_slave_0: entered promiscuous mode
[   46.370095][ T5836] hsr_slave_1: entered promiscuous mode
[   46.372244][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   46.375739][ T5836] Cannot create hsr debugfs directory
[   46.525851][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.536858][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.546273][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.550459][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.578656][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   46.586935][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   46.602609][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   46.607139][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   46.612815][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.615305][ T5825] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.618149][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.620552][ T5825] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.641322][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   46.647567][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.660503][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.666051][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.683267][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.685700][ T5829] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.688167][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.690490][ T5829] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.718057][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.720429][ T5836] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.722808][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.725233][ T5836] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.738789][ T3612] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.741886][ T3612] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.745793][ T3612] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.748930][ T3612] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.751673][ T3612] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.755666][ T3612] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.779945][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.793787][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.805875][ T5825] 8021q: adding VLAN 0 to HW filter on device team0
[   46.817897][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   46.821874][ T3612] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.824181][ T3612] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.833405][ T3612] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.835857][ T3612] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.843940][ T3612] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.846417][ T3612] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.855969][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.859945][ T3612] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.862297][ T3612] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.896392][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   46.916609][ T3612] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.918977][ T3612] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.931204][ T3612] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.933566][ T3612] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.022429][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.066645][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.071132][ T5825] veth0_vlan: entered promiscuous mode
[   47.079079][ T5825] veth1_vlan: entered promiscuous mode
[   47.091160][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.115828][ T5836] veth0_vlan: entered promiscuous mode
[   47.127669][ T5825] veth0_macvtap: entered promiscuous mode
[   47.136098][ T5836] veth1_vlan: entered promiscuous mode
[   47.139593][ T5825] veth1_macvtap: entered promiscuous mode
[   47.152474][ T5829] veth0_vlan: entered promiscuous mode
[   47.160277][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.166654][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.172224][ T5825] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.176475][ T5825] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.179265][ T5825] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.182041][ T5825] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.187636][ T5829] veth1_vlan: entered promiscuous mode
[   47.214106][ T5836] veth0_macvtap: entered promiscuous mode
[   47.228702][ T5836] veth1_macvtap: entered promiscuous mode
[   47.239118][ T5829] veth0_macvtap: entered promiscuous mode
[   47.249443][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.258917][ T5829] veth1_macvtap: entered promiscuous mode
[   47.269378][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.273540][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.276850][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.280698][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.289243][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.292018][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.295391][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.298145][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.303555][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.314111][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.317398][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.320166][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.322911][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.335326][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.338211][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.394963][   T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.397406][   T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.419494][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.422005][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.429177][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   47.434776][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.439248][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.479003][   T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.482046][   T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.535722][ T5219] Bluetooth: hci1: command tx timeout
[   47.537777][   T53] Bluetooth: hci0: command tx timeout
[   47.542482][ T5898] netlink: 'syz.1.2': attribute type 1 has an invalid length.
[   47.560911][ T5898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'.
[   47.562563][ T5902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4'.
[   47.606412][ T5905] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   47.614669][ T5219] Bluetooth: hci2: command tx timeout
[   47.637941][ T5905] Zero length message leads to an empty skb
[   47.641877][ T5909] syz.1.6 uses obsolete (PF_INET,SOCK_PACKET)
[   47.721157][ T5916] bridge_slave_0: left allmulticast mode
[   47.723149][ T5916] bridge_slave_0: left promiscuous mode
[   47.726696][ T5916] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.731780][ T5916] bridge_slave_1: left allmulticast mode
[   47.733592][ T5916] bridge_slave_1: left promiscuous mode
[   47.737365][ T5916] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.742178][ T5916] bond0: (slave bond_slave_0): Releasing backup interface
[   47.747815][ T5916] bond0: (slave bond_slave_1): Releasing backup interface
[   47.756196][ T5916] team0: Port device team_slave_0 removed
[   47.760537][ T5916] team0: Port device team_slave_1 removed
[   47.762656][ T5916] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   47.766431][ T5916] batman_adv: batadv0: Removing interface: batadv_slave_0
[   47.769974][ T5916] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   47.772433][ T5916] batman_adv: batadv0: Removing interface: batadv_slave_1
[   47.833943][ T5923] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11'.
[   48.172684][ T5952] netlink: 20 bytes leftover after parsing attributes in process `syz.1.21'.
[   48.252381][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state
[   48.254975][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state
[   48.297388][ T5961] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   48.302197][ T5961] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   48.333341][ T5961] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   48.340735][ T5961] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   48.343556][ T5961] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   48.346479][ T5961] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   48.619050][ T5978] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   48.747393][ T5995] delete_channel: no stack
[   48.862983][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'.
[   48.867943][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'.
[   49.164161][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.42'.
[   49.199404][ T6059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.43'.
[   49.281596][ T6065] netlink: 83 bytes leftover after parsing attributes in process `syz.0.44'.
[   49.624529][ T5219] Bluetooth: hci1: command tx timeout
[   49.626699][   T53] Bluetooth: hci0: command tx timeout
[   49.632985][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.46'.
[   49.694396][ T5219] Bluetooth: hci2: command tx timeout
[   49.738869][ T6097] netdevsim netdevsim1: Direct firmware load for  failed with error -2
[   49.741950][ T6097] netdevsim netdevsim1: Falling back to sysfs fallback for: 
[   49.766740][ T6101] warning: `syz.2.51' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   49.771675][ T6101] netlink: 'syz.2.51': attribute type 11 has an invalid length.
[   49.780883][ T6101] xt_hashlimit: invalid rate
[   49.807910][ T6103] netlink: 'syz.2.52': attribute type 13 has an invalid length.
[   49.811830][ T6104] netlink: 'syz.2.52': attribute type 13 has an invalid length.
[   49.837514][ T6106] netlink: 'syz.2.53': attribute type 2 has an invalid length.
[   49.840241][ T6106] netlink: 'syz.2.53': attribute type 1 has an invalid length.
[   49.868917][ T6108] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[   49.990597][ T6119] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.083648][ T6121] sctp: [Deprecated]: syz.0.58 (pid 6121) Use of struct sctp_assoc_value in delayed_ack socket option.
[   50.083648][ T6121] Use struct sctp_sack_info instead
[   50.112863][ T6123] netlink: 'syz.0.59': attribute type 23 has an invalid length.
[   50.295901][ T6119] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.333948][ T6119] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.383063][ T6119] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.441869][ T6119] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.448955][ T6119] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   50.455663][ T6119] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.462380][ T6119] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   50.501380][ T6142] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   50.518745][ T6143] netlink: 'syz.2.61': attribute type 10 has an invalid length.
[   50.542051][ T6143] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   50.603518][ T6149] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[   51.058559][ T6200] netlink: 'syz.1.79': attribute type 5 has an invalid length.
[   51.143929][ T6211] veth0: entered promiscuous mode
[   51.221655][ T6223] netlink: 'syz.1.86': attribute type 1 has an invalid length.
[   51.239247][ T6223] 8021q: adding VLAN 0 to HW filter on device bond1
[   51.256414][ T6223] bond1: (slave ip6gretap1): making interface the new active one
[   51.264889][ T6223] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[   51.279825][ T6223] veth5: entered promiscuous mode
[   51.283078][ T6223] bond1: (slave veth5): Enslaving as an active interface with a down link
[   51.287989][ T6223] erspan0: entered allmulticast mode
[   51.291421][ T6223] bond1: (slave erspan0): Enslaving as an active interface with an up link
[   51.306407][ T6228] nbd: illegal input index -381222912
[   51.326163][ T6228] openvswitch: netlink: Flow key attr not present in new flow.
[   51.441409][  T972] hid-generic 0005:15C2:5505.0001: item fetching failed at offset 0/2
[   51.446526][  T972] hid-generic 0005:15C2:5505.0001: probe with driver hid-generic failed with error -22
[   51.584961][ T6248] xt_connbytes: Forcing CT accounting to be enabled
[   51.587144][ T6248] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   51.590802][ T6248] xt_bpf: check failed: parse error
[   51.620429][ T6250] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   51.707102][   T53] Bluetooth: hci1: command tx timeout
[   51.708882][ T5831] Bluetooth: hci0: command tx timeout
[   51.774589][   T53] Bluetooth: hci2: command tx timeout
[   53.139532][ T6299] __nla_validate_parse: 14 callbacks suppressed
[   53.139541][ T6299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.106'.
[   53.246597][ T6308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.108'.
[   53.284878][ T6311] 8021q: VLANs not supported on vxcan0
[   53.340200][ T6315] No such timeout policy "syz1"
[   53.775996][   T53] Bluetooth: hci1: command tx timeout
[   53.778023][ T5831] Bluetooth: hci0: command tx timeout
[   53.854362][   T53] Bluetooth: hci2: command 0x0419 tx timeout
[   54.350377][ T6336] netlink: 20 bytes leftover after parsing attributes in process `syz.1.117'.
[   54.443159][ T6343] netlink: 'syz.1.119': attribute type 3 has an invalid length.
[   54.552807][ T6358] Cannot find set identified by id 0 to match
[   54.689380][ T6376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.129'.
[   54.693723][ T6379] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.128'.
[   54.693843][ T6376] tipc: Started in network mode
[   54.700934][ T6376] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[   54.703510][ T6376] tipc: Enabled bearer <eth:team0>, priority 0
[   54.776535][ T6386] netlink: 'syz.1.130': attribute type 2 has an invalid length.
[   54.781693][ T6388] netlink: 'syz.2.133': attribute type 8 has an invalid length.
[   54.792799][ T6386] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   55.207675][ T6448] netlink: 20 bytes leftover after parsing attributes in process `syz.2.148'.
[   55.210592][ T6448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.148'.
[   55.217429][ T6448] netlink: 20 bytes leftover after parsing attributes in process `syz.2.148'.
[   55.221560][ T6448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.148'.
[   55.264461][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.147'.
[   55.308471][ T6457] netlink: 'syz.0.150': attribute type 1 has an invalid length.
[   55.310998][ T6457] netlink: 'syz.0.150': attribute type 11 has an invalid length.
[   55.642680][ T6478] netlink: 'syz.2.157': attribute type 1 has an invalid length.
[   55.646678][ T6478] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[   55.751115][ T6499] netlink: 'syz.2.160': attribute type 1 has an invalid length.
[   55.756238][ T6499] netlink: 'syz.2.160': attribute type 1 has an invalid length.
[   55.815054][   T10] tipc: Node number set to 11578026
[   55.934411][ T5219] Bluetooth: hci2: command 0x0419 tx timeout
[   55.966526][ T6527] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   56.077715][ T6540] netlink: 'syz.1.169': attribute type 1 has an invalid length.
[   56.093666][ T6543] geneve2: entered promiscuous mode
[   56.105992][ T6540] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[   56.110283][ T6540] bond2: (slave vxcan3): Error -95 calling set_mac_address
[   56.418986][ T6570] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   56.429285][ T6570] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98
[   56.824110][ T6585] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[   56.832342][ T6588] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   57.100388][ T6616] netlink: 'syz.1.190': attribute type 33 has an invalid length.
[   57.803310][ T6694] ieee802154 phy0 wpan0: encryption failed: -22
[   57.831357][ T6695] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.833894][ T6695] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.845420][ T6695] tipc: Resetting bearer <eth:team0>
[   57.885462][ T6695] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   57.891229][ T6695] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   57.940497][ T6695] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[   57.943252][ T6695] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.946579][ T6695] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.949350][ T6695] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.952078][ T6695] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   57.955196][ T6695] geneve2: left promiscuous mode
[   58.096248][ T6704] bond0: (slave wlan1): Releasing backup interface
[   58.235665][ T6721] __nla_validate_parse: 13 callbacks suppressed
[   58.235676][ T6721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.210'.
[   58.329159][ T6739] netlink: 44 bytes leftover after parsing attributes in process `syz.1.215'.
[   58.366567][ T6744] pim6reg9: entered allmulticast mode
[   58.381125][ T6746] syzkaller0: entered allmulticast mode
[   58.518995][ T6761] netlink: 'syz.1.221': attribute type 11 has an invalid length.
[   58.615405][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.226'.
[   58.628684][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.226'.
[   58.659149][ T6786] netlink: 36 bytes leftover after parsing attributes in process `syz.0.228'.
[   58.709555][ T6793] pim6reg: entered allmulticast mode
[   58.725144][ T6793] pim6reg: left allmulticast mode
[   58.813044][ T6797] tipc: Started in network mode
[   58.815655][ T6797] tipc: Node identity ac14140f, cluster identity 4711
[   58.818640][ T6797] tipc: New replicast peer: 255.255.255.255
[   58.821441][ T6797] tipc: Enabled bearer <udp:syz2>, priority 10
[   58.966910][ T6809] 8021q: VLANs not supported on xfrm0
[   58.977286][ T6809] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   59.180902][ T6822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.236'.
[   59.183677][ T6822] netlink: 208 bytes leftover after parsing attributes in process `syz.0.236'.
[   59.413758][ T6826] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[   59.691114][ T6848] validate_nla: 2 callbacks suppressed
[   59.691123][ T6848] netlink: 'syz.2.245': attribute type 10 has an invalid length.
[   59.704832][ T6848] tipc: Resetting bearer <eth:team0>
[   59.707348][ T6848] 8021q: adding VLAN 0 to HW filter on device team0
[   59.710623][ T6848] bond0: (slave team0): Enslaving as an active interface with an up link
[   59.751072][ T6850] netlink: 201916 bytes leftover after parsing attributes in process `syz.1.246'.
[   59.758067][ T6852] ieee802154 phy0 wpan0: encryption failed: -90
[   59.824661][ T2222] tipc: Node number set to 2886997007
[   60.017199][ T6863] infiniband syz!: set down
[   60.019517][ T6863] infiniband syz!: added team_slave_0
[   60.021939][ T6863] syz!: rxe_create_cq: returned err = -12
[   60.023904][ T6863] infiniband syz!: Couldn't create ib_mad CQ
[   60.026370][ T6863] infiniband syz!: Couldn't open port 1
[   60.049312][ T6863] RDS/IB: syz!: added
[   60.055210][ T6863] smc: adding ib device syz! with port count 1
[   60.057252][ T6863] smc:    ib device syz! port 1 has pnetid 
[   60.121163][ T6879] netlink: 88 bytes leftover after parsing attributes in process `syz.1.254'.
[   60.127246][ T6879] x_tables: duplicate entry at hook 1
[   60.137088][ T6879] netlink: 'syz.1.254': attribute type 1 has an invalid length.
[   60.151872][ T6879] 8021q: adding VLAN 0 to HW filter on device bond4
[   60.293774][ T6887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.257'.
[   60.528513][ T6906] netlink: 'syz.0.263': attribute type 15 has an invalid length.
[   60.617980][ T6914] syzkaller1: entered promiscuous mode
[   60.629938][ T6914] syzkaller1: entered allmulticast mode
[   60.632874][ T6918] delete_channel: no stack
[   60.728599][ T6924] bond0: (slave wlan1): Releasing backup interface
[   60.740314][ T6924] netlink: 'syz.0.271': attribute type 10 has an invalid length.
[   60.747919][ T6924] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   60.793375][ T6928] xt_socket: unknown flags 0xd0
[   61.933982][ T6999] xt_hashlimit: max too large, truncated to 1048576
[   61.936690][ T6999] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[   62.010568][ T7006] Driver unsupported XDP return value 0 on prog  (id 71) dev N/A, expect packet loss!
[   62.280232][ T7017] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[   62.304927][  T972] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   62.404711][ T7031] macsec1: entered promiscuous mode
[   62.406432][ T7031] macsec1: entered allmulticast mode
[   62.602171][ T7050] tipc: Started in network mode
[   62.603895][ T7050] tipc: Node identity f280dfecaff5, cluster identity 4711
[   62.607382][ T7050] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   62.617825][ T7050] tipc: Disabling bearer <eth:syzkaller0>
[   62.673638][ T7053] bond5: entered promiscuous mode
[   62.675579][ T7053] 8021q: adding VLAN 0 to HW filter on device bond5
[   62.679578][ T7053] netlink: 'syz.1.315': attribute type 7 has an invalid length.
[   62.927975][ T7073] syzkaller1: entered promiscuous mode
[   62.929878][ T7073] syzkaller1: entered allmulticast mode
[   62.948301][ T7073] netlink: 'syz.1.319': attribute type 1 has an invalid length.
[   62.951244][ T7073] netlink: 'syz.1.319': attribute type 1 has an invalid length.
[   63.064437][  T972] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   63.080991][ T7076] ip6t_srh: unknown srh invflags 4449
[   63.406991][ T7097] netlink: 'syz.2.326': attribute type 1 has an invalid length.
[   63.423513][ T7097] 8021q: adding VLAN 0 to HW filter on device bond1
[   63.430706][ T7101] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   63.440396][ T7097] bond1: (slave ip6gretap1): making interface the new active one
[   63.444462][ T7097] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[   63.447675][ T7098] erspan0: entered allmulticast mode
[   63.450946][ T7098] bond1: (slave erspan0): Enslaving as an active interface with an up link
[   63.680691][ T7125] __nla_validate_parse: 23 callbacks suppressed
[   63.680700][ T7125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.334'.
[   63.713084][ T7127] netlink: 2 bytes leftover after parsing attributes in process `syz.0.335'.
[   63.716913][ T7127] batadv_slave_1: entered promiscuous mode
[   63.939696][ T7148] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   64.023201][ T7151] TCP: TCP_TX_DELAY enabled
[   64.339025][ T7177] sctp: [Deprecated]: syz.2.349 (pid 7177) Use of int in max_burst socket option deprecated.
[   64.339025][ T7177] Use struct sctp_assoc_value instead
[   64.382832][ T7180] netlink: 28 bytes leftover after parsing attributes in process `syz.2.350'.
[   64.578405][ T7189] syzkaller0: entered promiscuous mode
[   64.580233][ T7189] syzkaller0: entered allmulticast mode
[   65.065036][ T7208] openvswitch: netlink: IPv6 tunnel dst address is zero
[   65.352278][ T7212] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[   65.555908][ T7214] netlink: 48 bytes leftover after parsing attributes in process `syz.2.358'.
[   65.684445][ T7225] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   65.689518][ T7225] netlink: 'syz.2.362': attribute type 3 has an invalid length.
[   65.691960][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.362'.
[   65.927735][ T7243] syzkaller1: entered promiscuous mode
[   65.929567][ T7243] syzkaller1: entered allmulticast mode
[   65.940417][ T7244] veth1_to_bond: entered allmulticast mode
[   65.957366][ T7244] veth1_to_bond: left allmulticast mode
[   66.121059][ T7252] ip6t_rpfilter: unknown options
[   66.499504][ T7258] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.503061][ T7258] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.506614][ T7258] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.509494][ T7258] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.605784][ T7262] syzkaller0: refused to change device tx_queue_len
[   66.662428][ T7263] netlink: 32 bytes leftover after parsing attributes in process `syz.1.372'.
[   66.754955][ T7267] bond1: (slave erspan0): Releasing active interface
[   66.764333][ T7267] ip6gretap1: entered promiscuous mode
[   66.768508][ T7267] bridge_slave_0: left allmulticast mode
[   66.770350][ T7267] bridge_slave_0: left promiscuous mode
[   66.772261][ T7267] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.776680][ T7267] bridge_slave_1: left allmulticast mode
[   66.778552][ T7267] bridge_slave_1: left promiscuous mode
[   66.780456][ T7267] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.785180][ T7267] bond0: (slave bond_slave_0): Releasing backup interface
[   66.788510][ T7267] bond0: (slave bond_slave_1): Releasing backup interface
[   66.792967][ T7267] team0: Port device team_slave_0 removed
[   66.796520][ T7267] team0: Port device team_slave_1 removed
[   66.798580][ T7267] batman_adv: batadv0: Removing interface: batadv_slave_0
[   66.801524][ T7267] batman_adv: batadv0: Removing interface: batadv_slave_1
[   66.806025][ T7267] bond1: (slave ip6gretap1): Releasing active interface
[   66.808333][ T7267] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 9a:5e:ae:15:d1:ea - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   66.813861][ T7267] ip6gretap1: left promiscuous mode
[   66.814144][ T7269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.374'.
[   66.822767][ T7267] bond1: (slave veth5): Releasing active interface
[   66.823070][ T7269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.374'.
[   66.889586][ T7276] trusted_key: syz.2.377 sent an empty control message without MSG_MORE.
[   66.893333][ T7276] netlink: 508 bytes leftover after parsing attributes in process `syz.2.377'.
[   66.976752][ T7281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.379'.
[   67.150105][ T7292] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[   67.230058][ T7306] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551604)
[   67.233464][ T7306] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[   67.291114][ T7313] openvswitch: netlink: Tunnel attr 226 out of range max 16
[   67.326452][ T7311] vlan3: entered promiscuous mode
[   67.328230][ T7311] vlan2: entered promiscuous mode
[   67.329962][ T7311] gretap0: entered promiscuous mode
[   67.367284][ T7318] xt_bpf: check failed: parse error
[   67.579431][    T9] IPVS: starting estimator thread 0...
[   67.608255][ T7347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.667378][ T7349] IPVS: using max 79 ests per chain, 189600 per kthread
[   67.813812][ T7369] netlink: 'syz.1.403': attribute type 4 has an invalid length.
[   68.716168][ T7407] tun0: tun_chr_ioctl cmd 1074025677
[   68.718175][ T7407] tun0: linktype set to 768
[   68.751925][ T7407] __nla_validate_parse: 6 callbacks suppressed
[   68.751936][ T7407] netlink: 16 bytes leftover after parsing attributes in process `syz.2.410'.
[   68.921524][ T7420] netlink: 'syz.2.413': attribute type 142 has an invalid length.
[   68.927045][ T7422] netlink: 'syz.1.414': attribute type 5 has an invalid length.
[   69.090881][ T7445] netlink: 100 bytes leftover after parsing attributes in process `syz.0.419'.
[   69.106221][ T7441] lo speed is unknown, defaulting to 1000
[   69.108340][ T7441] lo speed is unknown, defaulting to 1000
[   69.110725][ T7441] lo speed is unknown, defaulting to 1000
[   69.122185][ T7441] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   69.137956][ T7441] lo speed is unknown, defaulting to 1000
[   69.141518][ T7441] lo speed is unknown, defaulting to 1000
[   69.145943][ T7441] lo speed is unknown, defaulting to 1000
[   69.285140][ T7453] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.309169][ T7453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.422'.
[   69.402913][ T7466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.424'.
[   69.833397][ T7473] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.426'.
[   70.175122][ T7480] netlink: 32 bytes leftover after parsing attributes in process `syz.0.428'.
[   70.200198][ T7482] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.202716][ T7484] ieee802154 phy0 wpan0: encryption failed: -22
[   70.335958][ T6037] wlan0: Trigger new scan to find an IBSS to join
[   70.421234][ T7501] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   70.489704][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.439'.
[   70.630366][ T7513] lo speed is unknown, defaulting to 1000
[   70.791657][ T7529] openvswitch: netlink: Missing valid actions attribute.
[   70.793948][ T7529] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   70.817102][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   70.819843][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   70.873617][ T7546] netlink: 248 bytes leftover after parsing attributes in process `syz.2.450'.
[   70.897138][ T7552] netlink: 'syz.0.452': attribute type 4 has an invalid length.
[   70.902073][ T7552] netlink: 'syz.0.452': attribute type 4 has an invalid length.
[   70.926233][ T7553] erspan0: entered promiscuous mode
[   70.928151][ T7553] vlan3: entered promiscuous mode
[   70.943405][ T7552] netlink: 24 bytes leftover after parsing attributes in process `syz.0.452'.
[   70.947492][ T7552] netlink: 24 bytes leftover after parsing attributes in process `syz.0.452'.
[   70.961170][ T7551] IPVS: Error connecting to the multicast addr
[   70.964191][ T7549] IPVS: Error connecting to the multicast addr
[   71.007042][  T972] IPVS: starting estimator thread 0...
[   71.013544][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.017011][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.037114][ T7554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   71.052256][ T7561] syzkaller0: entered allmulticast mode
[   71.095012][ T7556] IPVS: using max 78 ests per chain, 187200 per kthread
[   71.116451][ T7571] bond0: (slave wlan1): Releasing backup interface
[   71.135026][ T7571] team0: Failed to send options change via netlink (err -105)
[   71.138130][ T7571] team0: Mode changed to "loadbalance"
[   71.180882][ T7580] sctp: [Deprecated]: syz.1.460 (pid 7580) Use of int in maxseg socket option.
[   71.180882][ T7580] Use struct sctp_assoc_value instead
[   71.248301][ T7587] netlink: 'syz.1.461': attribute type 3 has an invalid length.
[   71.376156][ T5219] Bluetooth: hci2: command 0x0419 tx timeout
[   71.412290][ T7605] netlink: 'syz.0.465': attribute type 21 has an invalid length.
[   71.477446][ T7612] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[   71.574517][ T7617] ieee802154 phy0 wpan0: encryption failed: -22
[   71.661797][ T7634] netlink: 'syz.0.472': attribute type 1 has an invalid length.
[   71.665056][ T7634] netlink: 'syz.0.472': attribute type 2 has an invalid length.
[   71.668871][ T7634] netlink: 'syz.0.472': attribute type 1 has an invalid length.
[   71.671910][ T7634] netlink: 'syz.0.472': attribute type 2 has an invalid length.
[   71.719004][ T7634] veth0_to_bridge: entered promiscuous mode
[   71.722662][ T7633] veth0_to_bridge: left promiscuous mode
[   71.796233][ T7643] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   72.192002][ T7673] nft_compat: unsupported protocol 5
[   72.221086][ T7675] sit1: entered promiscuous mode
[   72.456644][ T5825] cgroup: fork rejected by pids controller in /syz2
[   72.773163][ T7736] netlink: 'syz.0.502': attribute type 10 has an invalid length.
[   72.862464][ T5965] bridge_slave_1: left allmulticast mode
[   72.866820][ T5965] bridge_slave_1: left promiscuous mode
[   72.872260][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.886077][ T5965] bridge_slave_0: left allmulticast mode
[   72.887997][ T5965] bridge_slave_0: left promiscuous mode
[   72.890596][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.960273][ T5965] bond1 (unregistering): (slave ip6gretap1): Releasing active interface
[   72.963055][ T5965] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 26:85:78:0a:8e:cf - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[   72.977137][ T5965] bond1 (unregistering): (slave erspan0): making interface the new active one
[   72.992183][   T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   72.996302][   T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   72.999079][   T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   73.002051][   T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   73.005041][   T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   73.055498][ T5965] bond1 (unregistering): (slave erspan0): Releasing active interface
[   73.156140][ T5965] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   73.159941][ T5965] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   73.163772][ T5965] bond0 (unregistering): (slave team0): Releasing backup interface
[   73.167168][ T5965] tipc: Resetting bearer <eth:team0>
[   73.170415][ T5965] tipc: Resetting bearer <eth:team0>
[   73.172257][ T5965] bond0 (unregistering): Released all slaves
[   73.235719][ T5965] bond1 (unregistering): Released all slaves
[   73.297965][   T27] wlan0: Trigger new scan to find an IBSS to join
[   73.320014][ T5965] tipc: Disabling bearer <eth:team0>
[   73.325567][ T5965] tipc: Left network mode
[   73.440550][ T7774] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   73.548294][ T7751] lo speed is unknown, defaulting to 1000
[   73.668585][ T5965] hsr_slave_0: left promiscuous mode
[   73.670833][ T5965] hsr_slave_1: left promiscuous mode
[   73.679527][ T5965] batman_adv: batadv0: Removing interface: batadv_slave_0
[   73.685269][ T5965] batman_adv: batadv0: Removing interface: batadv_slave_1
[   73.863982][ T5965] team0 (unregistering): Port device team_slave_1 removed
[   73.886753][ T5965] team0 (unregistering): Port device team_slave_0 removed
[   74.110865][ T7813] __nla_validate_parse: 18 callbacks suppressed
[   74.110875][ T7813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.518'.
[   74.122018][ T7813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.518'.
[   74.188735][ T7751] chnl_net:caif_netlink_parms(): no params data found
[   74.252448][ T7819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.520'.
[   74.309798][ T7751] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.312794][ T7751] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.326858][ T7751] bridge_slave_0: entered allmulticast mode
[   74.330515][ T7751] bridge_slave_0: entered promiscuous mode
[   74.339095][ T7833] C: renamed from team_slave_0
[   74.345283][ T7833] netlink: 'syz.0.521': attribute type 4 has an invalid length.
[   74.347724][ T7833] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   74.358609][ T7751] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.361332][ T7751] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.363762][ T7751] bridge_slave_1: entered allmulticast mode
[   74.367513][ T7751] bridge_slave_1: entered promiscuous mode
[   74.401730][ T5965] IPVS: stop unused estimator thread 0...
[   74.417887][ T7751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.422779][ T7751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.505620][ T7751] team0: Port device team_slave_0 added
[   74.511413][ T7751] team0: Port device team_slave_1 added
[   74.533341][ T7751] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.536097][ T7751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.544756][ T7751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.549095][ T7751] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.551308][ T7751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   74.560891][ T7751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.608036][ T7849] netlink: 24 bytes leftover after parsing attributes in process `syz.1.524'.
[   74.629215][ T7751] hsr_slave_0: entered promiscuous mode
[   74.631579][ T7751] hsr_slave_1: entered promiscuous mode
[   74.740608][ T7859] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   74.757853][ T7858] netlink: 324 bytes leftover after parsing attributes in process `syz.0.528'.
[   74.765885][ T7858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.528'.
[   74.789907][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.529'.
[   74.817788][ T7864] vlan2: entered promiscuous mode
[   74.819851][ T7864] team0: entered promiscuous mode
[   74.939834][ T7874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.532'.
[   74.943202][ T7874] netlink: 20 bytes leftover after parsing attributes in process `syz.1.532'.
[   74.949251][ T7874] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[   74.952078][ T7874] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[   74.956864][ T7874] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0
[   74.959712][ T7874] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0
[   74.962904][ T7874] geneve2: entered promiscuous mode
[   74.966546][ T7874] geneve2: entered allmulticast mode
[   75.055082][   T53] Bluetooth: hci0: command tx timeout
[   75.093070][ T7880] 8021q: adding VLAN 0 to HW filter on device bond1
[   75.100436][ T7887] bond1: (slave ip6gretap1): making interface the new active one
[   75.104210][ T7887] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[   75.145191][ T7880] veth3: entered promiscuous mode
[   75.148346][ T7880] bond1: (slave veth3): Enslaving as an active interface with a down link
[   75.153506][ T7894] netlink: 48 bytes leftover after parsing attributes in process `syz.1.537'.
[   75.162706][ T7880] erspan0: entered allmulticast mode
[   75.168083][ T7880] bond1: (slave erspan0): Enslaving as an active interface with an up link
[   75.225963][ T7751] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   75.233345][ T7751] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   75.242073][ T7751] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   75.257204][ T7751] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   75.355877][ T7912] batman_adv: batadv0: Adding interface: virt_wifi0
[   75.358116][ T7912] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560.
[   75.375158][ T7897] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.401549][ T7912] batman_adv: batadv0: Interface activated: virt_wifi0
[   75.456047][ T7751] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.475584][ T7751] 8021q: adding VLAN 0 to HW filter on device team0
[   75.482724][ T6038] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.485225][ T6038] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.493103][ T6038] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.495559][ T6038] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.537629][ T7751] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   75.676165][ T7751] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.735404][ T7751] veth0_vlan: entered promiscuous mode
[   75.765282][ T7751] veth1_vlan: entered promiscuous mode
[   75.822010][ T7751] veth0_macvtap: entered promiscuous mode
[   75.832886][ T7751] veth1_macvtap: entered promiscuous mode
[   75.916589][ T7751] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.924002][ T7751] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.936438][ T7751] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.939262][ T7751] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.942075][ T7751] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.946797][ T7751] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.089642][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.092738][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.128411][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.131672][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.289859][ T7999] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.476933][ T8029] Bluetooth: MGMT ver 1.23
[   76.648077][ T8053] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003
[   76.817602][ T8073] bond0: (slave bond_slave_1): Releasing backup interface
[   76.956109][ T8095] tap0: tun_chr_ioctl cmd 1074025680
[   77.134628][   T53] Bluetooth: hci0: command tx timeout
[   77.360736][ T8133] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[   78.894885][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   78.963729][ T8227] validate_nla: 6 callbacks suppressed
[   78.963740][ T8227] netlink: 'syz.0.599': attribute type 1 has an invalid length.
[   78.981323][ T8227] 8021q: adding VLAN 0 to HW filter on device bond2
[   78.995181][ T8227] bond2: (slave veth5): Enslaving as an active interface with a down link
[   79.003705][ T8227] vlan2: entered allmulticast mode
[   79.005911][ T8227] bond2: entered allmulticast mode
[   79.008397][ T8227] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   79.159045][ T8242] netlink: 'syz.0.602': attribute type 6 has an invalid length.
[   79.214516][   T53] Bluetooth: hci0: command tx timeout
[   79.375929][ T5842] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   79.695209][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   79.781504][ T8225] Bluetooth: hci1: Opcode 0x0c20 failed: -4
[   79.979348][ T8285] __nla_validate_parse: 12 callbacks suppressed
[   79.979358][ T8285] netlink: 16 bytes leftover after parsing attributes in process `syz.1.616'.
[   80.065812][ T8296] netlink: 'syz.1.618': attribute type 10 has an invalid length.
[   80.071966][ T8296] bond0: (slave bridge0): Enslaving as an active interface with an up link
[   80.169835][ T8299] netlink: 92 bytes leftover after parsing attributes in process `syz.1.618'.
[   80.172883][ T8299] netlink: 92 bytes leftover after parsing attributes in process `syz.1.618'.
[   80.282619][ T8306] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   80.349367][ T8306] netlink: 20 bytes leftover after parsing attributes in process `syz.0.621'.
[   80.358747][ T8306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.621'.
[   80.369119][ T8306] netlink: 428 bytes leftover after parsing attributes in process `syz.0.621'.
[   80.372071][ T8306] netlink: 32 bytes leftover after parsing attributes in process `syz.0.621'.
[   80.417457][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   80.423231][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   80.481158][ T8325] sch_tbf: peakrate 12 is lower than or equals to rate 6561010854487373889 !
[   80.636567][ T8347] netlink: 100 bytes leftover after parsing attributes in process `syz.1.628'.
[   80.677807][ T8354] netlink: 20 bytes leftover after parsing attributes in process `syz.0.631'.
[   80.725921][ T8362] netlink: 36 bytes leftover after parsing attributes in process `syz.0.634'.
[   80.734796][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   80.866536][ T8389] netlink: 'syz.0.641': attribute type 1 has an invalid length.
[   80.880304][ T8389] 8021q: adding VLAN 0 to HW filter on device bond3
[   80.974816][   T53] Bluetooth: hci1: command 0x0c20 tx timeout
[   81.056264][   T63] cfg80211: failed to load regulatory.db
[   81.079575][ T8413] pimreg: entered allmulticast mode
[   81.087326][ T8413] pimreg: left allmulticast mode
[   81.307341][ T8433] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   81.479948][ T8451] pim6reg: entered allmulticast mode
[   81.482477][ T8451] pim6reg: left allmulticast mode
[   81.606413][ T8468] netlink: 'syz.1.667': attribute type 23 has an invalid length.
[   81.797379][ T8492] netlink: 'syz.1.677': attribute type 7 has an invalid length.
[   81.800012][ T8492] netlink: 'syz.1.677': attribute type 8 has an invalid length.
[   81.806621][ T8492] syz_tun: entered promiscuous mode
[   81.809188][ T8492] batadv_slave_1: entered promiscuous mode
[   81.812244][ T8492] erspan0: entered promiscuous mode
[   81.817188][ T8492] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network
[   81.820608][ T8492] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[   81.824136][ T8492] hsr1: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network
[   81.870658][ T8498] openvswitch: netlink: Message has 4 unknown bytes.
[   81.902345][ T8496] netlink: 'syz.2.679': attribute type 1 has an invalid length.
[   81.931855][ T8509] xt_hashlimit: size too large, truncated to 1048576
[   81.932344][ T8496] bond1 (unregistering): Released all slaves
[   81.949532][ T8510] netlink: 'syz.0.683': attribute type 1 has an invalid length.
[   82.078061][ T8517] netlink: zone id is out of range
[   82.079898][ T8517] netlink: zone id is out of range
[   82.081666][ T8517] netlink: zone id is out of range
[   82.084102][ T8517] netlink: zone id is out of range
[   82.094015][ T8517] netlink: zone id is out of range
[   82.096097][ T8517] netlink: zone id is out of range
[   82.097818][ T8517] netlink: zone id is out of range
[   82.099540][ T8517] netlink: zone id is out of range
[   82.101244][ T8517] netlink: zone id is out of range
[   82.112205][ T8519] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   82.132915][ T8522] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[   82.202112][ T8537] netlink: 'syz.2.692': attribute type 1 has an invalid length.
[   82.262286][ T8542] pim6reg1: entered promiscuous mode
[   82.264112][ T8542] pim6reg1: entered allmulticast mode
[   82.317394][ T8551] xt_ipcomp: unknown flags F7
[   82.326790][ T8551] _Z`Ԁ@: entered promiscuous mode
[   82.329026][ T8553] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[   82.892623][ T8615] raw_sendmsg: syz.1.718 forgot to set AF_INET. Fix it!
[   82.919911][ T8617] xt_socket: unknown flags 0xd0
[   83.409158][ T8664] veth0_to_bond: entered allmulticast mode
[   83.574031][ T8679] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.639656][ T8692] tls_set_device_offload: netdev not found
[   83.648209][ T8692] erspan0: entered promiscuous mode
[   83.649940][ T8692] erspan0: left allmulticast mode
[   83.683815][ T8702] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20002
[   83.746310][   T12] bond1: (slave erspan0): link status definitely down, disabling slave
[   83.749771][   T12] ip6gretap1: entered promiscuous mode
[   83.759766][ T8709] lo speed is unknown, defaulting to 1000
[   83.762246][ T8709] lo speed is unknown, defaulting to 1000
[   83.766203][ T8709] lo speed is unknown, defaulting to 1000
[   83.829532][ T8716] erspan0: left promiscuous mode
[   83.858711][ T8716] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.861583][ T8716] 8021q: adding VLAN 0 to HW filter on device team0
[   83.865515][ T8725] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[   83.886786][   T63] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   83.919388][ T8709] infiniband syz0: set active
[   83.921001][   T63] lo speed is unknown, defaulting to 1000
[   83.924342][ T8709] infiniband syz0: added lo
[   83.946859][ T8709] RDS/IB: syz0: added
[   83.948670][ T8709] smc: adding ib device syz0 with port count 1
[   83.951453][ T8709] smc:    ib device syz0 port 1 has pnetid 
[   83.955447][   T10] lo speed is unknown, defaulting to 1000
[   83.959583][ T8709] lo speed is unknown, defaulting to 1000
[   84.034569][   T63] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   84.061371][ T8709] lo speed is unknown, defaulting to 1000
[   84.152821][ T8709] lo speed is unknown, defaulting to 1000
[   84.250343][ T8716] syz.0.749 (8716) used greatest stack depth: 19672 bytes left
[   84.253887][ T8768] veth0: entered promiscuous mode
[   84.362972][ T8781] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[   84.433942][   T33] audit: type=1800 audit(1752925067.666:2): pid=8794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.777" name="blkio.bfq.time_recursive" dev="tmpfs" ino=310 res=0 errno=0
[   84.444789][   T33] audit: type=1800 audit(1752925067.676:3): pid=8795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.777" name="blkio.bfq.time_recursive" dev="tmpfs" ino=310 res=0 errno=0
[   84.460618][   T33] audit: type=1800 audit(1752925067.676:4): pid=8794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.777" name="blkio.bfq.time_recursive" dev="tmpfs" ino=310 res=0 errno=0
[   84.494400][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   84.512148][ T8807] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[   84.531934][ T8808] IPVS: length: 147 != 24
[   85.330803][ T8831] ipvlan2: entered promiscuous mode
[   85.333370][ T8831] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   85.336493][ T8831] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   85.461647][ T8838] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   85.525031][ T8844] __nla_validate_parse: 109 callbacks suppressed
[   85.525041][ T8844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.791'.
[   85.530063][ T8844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.791'.
[   85.722622][ T8851] validate_nla: 7 callbacks suppressed
[   85.722631][ T8851] netlink: 'syz.1.795': attribute type 10 has an invalid length.
[   85.732156][ T8851] batman_adv: batadv0: Adding interface: netdevsim0
[   85.734351][ T8851] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.742086][ T8851] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[   85.849256][ T8859] netlink: 68 bytes leftover after parsing attributes in process `syz.2.798'.
[   85.890778][ T8861] netlink: 'syz.1.800': attribute type 13 has an invalid length.
[   85.922530][ T8866] netlink: 'syz.2.801': attribute type 1 has an invalid length.
[   85.943410][ T8866] netlink: 244 bytes leftover after parsing attributes in process `syz.2.801'.
[   85.989683][ T8868] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.802'.
[   86.234794][ T8884] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[   86.239014][ T8883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.807'.
[   86.934384][   T12] net_ratelimit: 37 callbacks suppressed
[   86.934396][   T12] bond1: (slave erspan0): failed to get link speed/duplex
[   87.044831][ T8825] bond1: (slave erspan0): failed to get link speed/duplex
[   87.093220][ T8895] netlink: 24 bytes leftover after parsing attributes in process `syz.1.811'.
[   87.099387][ T8896] netlink: 24 bytes leftover after parsing attributes in process `syz.1.811'.
[   87.119026][ T8900] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.121498][ T8900] syzkaller0: entered promiscuous mode
[   87.123257][ T8900] syzkaller0: entered allmulticast mode
[   87.137606][ T8900] tipc: Resetting bearer <eth:syzkaller0>
[   87.140344][ T8897] tipc: Resetting bearer <eth:syzkaller0>
[   87.148913][ T8897] tipc: Disabling bearer <eth:syzkaller0>
[   87.164495][   T12] bond1: (slave erspan0): failed to get link speed/duplex
[   87.274359][   T12] bond1: (slave erspan0): failed to get link speed/duplex
[   87.318779][ T8911] syzkaller1: entered promiscuous mode
[   87.320707][ T8911] syzkaller1: entered allmulticast mode
[   87.384424][   T12] bond1: (slave erspan0): failed to get link speed/duplex
[   87.504622][ T5965] bond1: (slave erspan0): failed to get link speed/duplex
[   87.632139][ T8924] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.819'.
[   87.634502][ T5965] bond1: (slave erspan0): failed to get link speed/duplex
[   87.744376][   T12] bond1: (slave erspan0): failed to get link speed/duplex
[   87.856941][ T5965] bond1: (slave erspan0): failed to get link speed/duplex
[   87.964493][   T12] bond1: (slave erspan0): failed to get link speed/duplex
[   88.330870][ T8954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.830'.
[   88.369434][ T8964] netlink: 'syz.1.832': attribute type 1 has an invalid length.
[   88.429264][ T6040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.431836][ T6040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.468672][ T8974] xt_ecn: cannot match TCP bits for non-tcp packets
[   88.507532][ T8982] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   88.510140][ T8982] syzkaller0: entered promiscuous mode
[   88.512041][ T8982] syzkaller0: entered allmulticast mode
[   88.517740][ T8982] tipc: Resetting bearer <eth:syzkaller0>
[   88.528400][ T8981] tipc: Resetting bearer <eth:syzkaller0>
[   88.537344][ T8981] tipc: Disabling bearer <eth:syzkaller0>
[   88.699470][ T8992] delete_channel: no stack
[   89.273352][ T8998] bridge: RTM_NEWNEIGH with invalid state 0x1
[   89.276312][ T8999] bridge: RTM_NEWNEIGH with invalid state 0x1
[   89.309710][ T9001] netlink: 'syz.1.845': attribute type 6 has an invalid length.
[   89.312326][ T9001] netlink: 'syz.1.845': attribute type 7 has an invalid length.
[   89.316058][ T9001] netlink: 'syz.1.845': attribute type 8 has an invalid length.
[   89.356279][ T9006] bridge0: port 1(erspan0) entered blocking state
[   89.358775][ T9006] bridge0: port 1(erspan0) entered disabled state
[   89.781282][ T9037] bridge_slave_0: default FDB implementation only supports local addresses
[   89.828057][ T9041] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[   89.837246][ T9044] macsec1: entered promiscuous mode
[   89.839102][ T9044] macsec1: entered allmulticast mode
[   89.930991][ T9054] geneve2: entered promiscuous mode
[   89.966128][ T9057] xt_addrtype: ipv6 does not support BROADCAST matching
[   90.144003][ T9073] xt_hashlimit: size too large, truncated to 1048576
[   90.350906][ T9080] macsec1: entered promiscuous mode
[   90.353287][ T9080] macsec1: entered allmulticast mode
[   90.372772][ T9082] dvmrp8: entered allmulticast mode
[   90.390487][ T9081] dvmrp8: left allmulticast mode
[   90.759968][ T9135] __nla_validate_parse: 18 callbacks suppressed
[   90.759978][ T9135] netlink: 9 bytes leftover after parsing attributes in process `syz.0.881'.
[   90.772484][ T9135] gretap0: entered promiscuous mode
[   90.791345][ T9135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.881'.
[   90.796969][ T9135] netlink: 'syz.0.881': attribute type 1 has an invalid length.
[   90.800607][ T9135] netlink: 'syz.0.881': attribute type 2 has an invalid length.
[   90.803079][ T9135] netlink: 80 bytes leftover after parsing attributes in process `syz.0.881'.
[   90.806156][ T9143] netlink: 308 bytes leftover after parsing attributes in process `syz.1.885'.
[   90.809546][ T9135] netlink: 5 bytes leftover after parsing attributes in process `syz.0.881'.
[   90.811526][ T9143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.885'.
[   90.812766][ T9135] 0{X: renamed from gretap0
[   90.819106][ T9135] 0{X: left promiscuous mode
[   90.820769][ T9135] 0{X: entered allmulticast mode
[   90.926853][ T9164] vcan0: tx drop: invalid sa for name 0xfbfffffffffffffd
[   90.929521][ T9164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.891'.
[   91.004774][ T9173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.895'.
[   91.038606][ T9175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.896'.
[   91.080295][ T9177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.897'.
[   91.181510][ T9184] tipc: Enabled bearer <ib:ip6gre0>, priority 10
[   91.209577][ T5219] Bluetooth: hci2: link tx timeout
[   91.211393][ T5219] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[   91.627868][ T9207] netlink: 'syz.1.906': attribute type 2 has an invalid length.
[   91.944366][ T5965] net_ratelimit: 38 callbacks suppressed
[   91.944416][ T5965] bond1: (slave erspan0): failed to get link speed/duplex
[   92.054541][   T12] bond1: (slave erspan0): failed to get link speed/duplex
[   92.064162][ T9209] netlink: 'syz.2.907': attribute type 1 has an invalid length.
[   92.079504][ T9209] bond2: entered promiscuous mode
[   92.082066][ T9209] bond2: entered allmulticast mode
[   92.088426][ T9209] bridge1: the hash_elasticity option has been deprecated and is always 16
[   92.101162][ T9209] bond2: (slave bridge1): making interface the new active one
[   92.103444][ T9209] bridge1: entered promiscuous mode
[   92.105834][ T9209] bridge1: entered allmulticast mode
[   92.108023][ T9209] bond2: (slave bridge1): Enslaving as an active interface with an up link
[   92.140385][ T5892] IPVS: starting estimator thread 0...
[   92.164897][ T8825] bond1: (slave erspan0): failed to get link speed/duplex
[   92.177877][ T5837] tipc: Node number set to 1568006124
[   92.234334][ T9217] IPVS: using max 79 ests per chain, 189600 per kthread
[   92.274488][   T12] bond1: (slave erspan0): failed to get link speed/duplex
[   92.299050][ T9220] lo speed is unknown, defaulting to 1000
[   92.390251][   T12] bond1: (slave erspan0): failed to get link speed/duplex
[   92.419074][ T9238] syzkaller1: entered promiscuous mode
[   92.420848][ T9238] syzkaller1: entered allmulticast mode
[   92.459421][ T9242] Unknown status report in ack skb
[   92.495766][ T8825] bond1: (slave erspan0): failed to get link speed/duplex
[   92.574393][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   92.605483][   T12] bond1: (slave erspan0): failed to get link speed/duplex
[   92.677447][ T9266] openvswitch: netlink: Geneve opt len 126 is not a multiple of 4.
[   92.714570][ T8825] bond1: (slave erspan0): failed to get link speed/duplex
[   92.763576][ T9272] netlink: 'syz.1.929': attribute type 11 has an invalid length.
[   92.837742][ T5965] bond1: (slave erspan0): failed to get link speed/duplex
[   93.027557][ T9292] tipc: Enabled bearer <udp:syz0>, priority 10
[   93.072697][ T9297] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.075258][ T9297] syzkaller0: entered promiscuous mode
[   93.076960][ T9297] syzkaller0: entered allmulticast mode
[   93.090931][ T9297] tipc: Resetting bearer <eth:syzkaller0>
[   93.169671][ T9296] tipc: Resetting bearer <eth:syzkaller0>
[   93.177567][ T9296] tipc: Disabling bearer <eth:syzkaller0>
[   93.304857][   T53] Bluetooth: hci2: command 0x0419 tx timeout
[   93.533538][ T9330] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[   93.541493][ T9329] netlink: 'syz.1.943': attribute type 1 has an invalid length.
[   93.987490][ T9355] netlink: 'syz.0.951': attribute type 1 has an invalid length.
[   94.352096][ T9403] veth0_to_bridge: entered promiscuous mode
[   94.358502][ T9402] veth0_to_bridge: left promiscuous mode
[   94.476014][ T9422] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   94.489919][ T9422] bond5: entered promiscuous mode
[   94.491618][ T9422] bond5: entered allmulticast mode
[   94.493537][ T9422] 8021q: adding VLAN 0 to HW filter on device bond5
[   94.499728][ T9422] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[   94.515554][ T9422] bond6: entered promiscuous mode
[   94.517252][ T9422] bond6: entered allmulticast mode
[   94.519113][ T9422] 8021q: adding VLAN 0 to HW filter on device bond6
[   94.814747][ T5965] ip6gretap1: left promiscuous mode
[   94.912153][ T9445] lo speed is unknown, defaulting to 1000
[   95.369831][ T9470] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   95.460374][ T9476] netlink: 'syz.0.988': attribute type 1 has an invalid length.
[   95.461199][ T9475] bond0: entered promiscuous mode
[   95.468538][ T9475] bridge0: entered promiscuous mode
[   95.470962][ T9475] macvlan1: entered promiscuous mode
[   95.473280][ T9475] hsr2: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[   95.476869][ T9475] hsr2: Slave B (macvlan1) is not up; please bring it up to get a fully working HSR network
[   95.483177][ T9475] hsr2: entered promiscuous mode
[   95.599148][ T9483] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   95.643239][ T9486] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   95.656857][ T9483] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   95.715555][ T9483] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   95.746715][ T9490] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.749261][ T9490] syzkaller0: entered promiscuous mode
[   95.751019][ T9490] syzkaller0: entered allmulticast mode
[   95.761809][ T9490] tipc: Resetting bearer <eth:syzkaller0>
[   95.768627][ T9489] tipc: Resetting bearer <eth:syzkaller0>
[   95.775719][ T9489] tipc: Disabling bearer <eth:syzkaller0>
[   95.782849][ T9483] batman_adv: batadv0: Removing interface: netdevsim0
[   95.787881][ T9483] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[   95.858760][ T9483] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[   95.866282][ T9483] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[   95.873229][ T9483] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[   95.881801][ T9483] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[   95.941026][ T9497] __nla_validate_parse: 34 callbacks suppressed
[   95.941036][ T9497] netlink: 16 bytes leftover after parsing attributes in process `syz.1.994'.
[   96.012247][ T9513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.999'.
[   96.025163][ T9513] netlink: 148 bytes leftover after parsing attributes in process `syz.1.999'.
[   96.122477][ T9525] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1002'.
[   96.310311][ T9539] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1006'.
[   96.313357][ T9539] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1006'.
[   96.904089][ T9543] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[   96.961820][ T9546] sctp: [Deprecated]: syz.1.1008 (pid 9546) Use of int in maxseg socket option.
[   96.961820][ T9546] Use struct sctp_assoc_value instead
[   97.054722][   T13] net_ratelimit: 36 callbacks suppressed
[   97.054732][   T13] bond1: (slave erspan0): failed to get link speed/duplex
[   97.171531][   T13] bond1: (slave erspan0): failed to get link speed/duplex
[   97.227200][ T9571] netlink: 'syz.0.1015': attribute type 1 has an invalid length.
[   97.233228][ T9571] netlink: 'syz.0.1015': attribute type 4 has an invalid length.
[   97.242262][ T9571] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1015'.
[   97.252581][ T9571] netlink: 'syz.0.1015': attribute type 1 has an invalid length.
[   97.260429][ T9571] netlink: 'syz.0.1015': attribute type 4 has an invalid length.
[   97.270633][ T9571] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1015'.
[   97.274942][   T13] bond1: (slave erspan0): failed to get link speed/duplex
[   97.415830][ T9576] 8021q: adding VLAN 0 to HW filter on device bond7
[   97.434439][ T5858] bond1: (slave erspan0): failed to get link speed/duplex
[   97.462952][ T9576] netlink: 'syz.0.1017': attribute type 1 has an invalid length.
[   97.484125][ T9576] netlink: 'syz.0.1017': attribute type 4 has an invalid length.
[   97.501279][ T9576] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1017'.
[   97.515463][ T9585] netlink: 844 bytes leftover after parsing attributes in process `syz.2.1019'.
[   97.555846][   T13] bond1: (slave erspan0): failed to get link speed/duplex
[   97.685412][ T5858] bond1: (slave erspan0): failed to get link speed/duplex
[   97.804947][   T13] bond1: (slave erspan0): failed to get link speed/duplex
[   97.832971][ T9599] netlink: 'syz.2.1022': attribute type 1 has an invalid length.
[   97.934491][   T13] bond1: (slave erspan0): failed to get link speed/duplex
[   98.040138][ T9618] netlink: 'syz.2.1029': attribute type 1 has an invalid length.
[   98.042761][ T9617] netlink: 'syz.2.1029': attribute type 1 has an invalid length.
[   98.055823][   T12] bond1: (slave erspan0): failed to get link speed/duplex
[   98.070723][ T9624] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[   98.171692][ T5858] bond1: (slave erspan0): failed to get link speed/duplex
[   98.249440][ T9628] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[   98.812647][ T9654] lo speed is unknown, defaulting to 1000
[   98.937926][ T9662] bond0: (slave bridge0): Releasing backup interface
[   98.941619][ T9662] bridge0: left promiscuous mode
[   98.956254][ T9662] team0: Failed to send options change via netlink (err -105)
[   98.959276][ T9662] team0: Mode changed to "loadbalance"
[   99.377851][ T9690] lo speed is unknown, defaulting to 1000
[   99.729680][ T9703] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[   99.730404][ T9695] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  100.033347][ T9718] 8021q: adding VLAN 0 to HW filter on device bond3
[  100.607279][ T9738] lo speed is unknown, defaulting to 1000
[  101.001405][ T9757] __nla_validate_parse: 11 callbacks suppressed
[  101.001415][ T9757] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1067'.
[  101.164509][ T9782] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1069'.
[  101.229037][ T9787] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  101.389879][ T9799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1077'.
[  101.507464][ T9809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1078'.
[  101.810172][ T9826] netlink: 'syz.2.1085': attribute type 3 has an invalid length.
[  101.812625][ T9826] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1085'.
[  101.893925][ T9828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1086'.
[  101.897476][ T9828] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000
[  101.900147][ T9828] tipc: Enabled bearer <udp:syz1>, priority 10
[  101.972689][ T9837] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1088'.
[  101.977956][ T9837] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1088'.
[  102.056057][ T9845] 8021q: adding VLAN 0 to HW filter on device bond8
[  102.075492][ T5965] net_ratelimit: 36 callbacks suppressed
[  102.075508][ T5965] bond1: (slave erspan0): failed to get link speed/duplex
[  102.194668][ T5965] bond1: (slave erspan0): failed to get link speed/duplex
[  102.261660][ T9862] netlink: 'syz.0.1096': attribute type 21 has an invalid length.
[  102.264415][ T9860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  102.266176][ T9862] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1096'.
[  102.270579][ T9862] netlink: 'syz.0.1096': attribute type 5 has an invalid length.
[  102.273147][ T9862] netlink: 'syz.0.1096': attribute type 6 has an invalid length.
[  102.277671][ T9862] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1096'.
[  102.321932][ T9860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  102.377487][ T9860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  102.380987][ T9857] lo speed is unknown, defaulting to 1000
[  102.396059][ T5965] bond1: (slave erspan0): failed to get link speed/duplex
[  102.504521][ T5965] bond1: (slave erspan0): failed to get link speed/duplex
[  102.614684][ T8825] bond1: (slave erspan0): failed to get link speed/duplex
[  102.725074][ T8825] bond1: (slave erspan0): failed to get link speed/duplex
[  102.770815][ T9886] sctp: [Deprecated]: syz.2.1105 (pid 9886) Use of struct sctp_assoc_value in delayed_ack socket option.
[  102.770815][ T9886] Use struct sctp_sack_info instead
[  102.838762][   T13] bond1: (slave erspan0): failed to get link speed/duplex
[  102.944731][ T5965] bond1: (slave erspan0): failed to get link speed/duplex
[  103.083783][ T9908] netlink: 'syz.1.1113': attribute type 10 has an invalid length.
[  103.091677][ T9908] 8021q: adding VLAN 0 to HW filter on device team0
[  103.096277][ T9908] bond0: (slave team0): Enslaving as an active interface with an up link
[  103.104769][ T8825] bond1: (slave erspan0): failed to get link speed/duplex
[  103.225563][ T5858] bond1: (slave erspan0): failed to get link speed/duplex
[  103.975481][ T9921] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  104.086035][ T9926] ieee802154 phy0 wpan0: encryption failed: -22
[  104.558842][ T9935] tipc: Invalid UDP bearer configuration
[  104.558883][ T9935] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  104.715582][ T9943] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  104.965679][ T9966] netlink: 'syz.0.1131': attribute type 1 has an invalid length.
[  104.978842][ T9966] bond9: entered promiscuous mode
[  104.980890][ T9966] 8021q: adding VLAN 0 to HW filter on device bond9
[  104.992348][ T9967] bond6: entered promiscuous mode
[  104.995812][ T9967] 8021q: adding VLAN 0 to HW filter on device bond6
[  105.002775][ T9966] 8021q: adding VLAN 0 to HW filter on device bond9
[  105.005296][ T9966] bond9: (slave vcan0): The slave device specified does not support setting the MAC address
[  105.008565][ T9966] bond9: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  105.013313][ T9966] bond9: (slave vcan0): making interface the new active one
[  105.015674][ T9966] vcan0: entered promiscuous mode
[  105.018192][ T9966] bond9: (slave vcan0): Enslaving as an active interface with an up link
[  105.531682][ T9978] netlink: 'syz.2.1133': attribute type 11 has an invalid length.
[  106.068821][T10029] 0{X: left allmulticast mode
[  106.090926][T10029] batadv_slave_1: left promiscuous mode
[  106.094534][T10029] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  106.107556][T10029] veth3: left promiscuous mode
[  106.114756][T10029] macsec1: left promiscuous mode
[  106.116439][T10029] macsec1: left allmulticast mode
[  106.118522][T10029] bond5: left promiscuous mode
[  106.120146][T10029] bond5: left allmulticast mode
[  106.122394][T10029] bond6: left promiscuous mode
[  106.124020][T10029] bond6: left allmulticast mode
[  106.129327][T10029] bond9: left promiscuous mode
[  106.130984][T10029] vcan0: left promiscuous mode
[  106.133604][   T63] lo speed is unknown, defaulting to 1000
[  106.136408][   T63] syz0: Port: 1 Link DOWN
[  106.138592][   T63] lo speed is unknown, defaulting to 1000
[  106.318502][T10037] syzkaller1: entered promiscuous mode
[  106.320357][T10037] syzkaller1: entered allmulticast mode
[  106.507669][T10042] __nla_validate_parse: 10 callbacks suppressed
[  106.507685][T10042] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1152'.
[  106.645780][T10051] netlink: 'syz.0.1154': attribute type 1 has an invalid length.
[  106.648417][T10051] netlink: 'syz.0.1154': attribute type 2 has an invalid length.
[  106.652450][T10051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1154'.
[  106.923719][T10082] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1162'.
[  106.993495][T10070] lo speed is unknown, defaulting to 1000
[  107.000004][T10086] netlink: 'syz.0.1163': attribute type 25 has an invalid length.
[  107.031836][T10090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1164'.
[  107.086091][T10092] x_tables: duplicate underflow at hook 3
[  107.176779][T10099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1166'.
[  107.603678][T10125] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1177'.
[  107.750143][T10141] macsec2: entered promiscuous mode
[  107.751796][T10141] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode
[  107.754016][T10141] macsec2: entered allmulticast mode
[  107.758553][T10141] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode
[  107.948784][T10162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1186'.
[  107.948990][T10158] ieee802154 phy0 wpan0: encryption failed: -22
[  107.988601][T10164] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1187'.
[  108.202778][T10183] xt_CT: No such helper "syz0"
[  108.347514][T10197] netlink: 'syz.0.1198': attribute type 1 has an invalid length.
[  108.350236][T10197] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1198'.
[  108.355650][T10197] pim6reg1: entered promiscuous mode
[  108.357890][T10197] pim6reg1: entered allmulticast mode
[  108.452809][T10207] netlink: 'syz.0.1202': attribute type 2 has an invalid length.
[  108.493460][T10209] tipc: Started in network mode
[  108.496067][T10209] tipc: Node identity fa3be6de2329, cluster identity 4711
[  108.499075][T10209] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  108.502637][T10209] net_ratelimit: 25 callbacks suppressed
[  108.502644][T10209] openvswitch: netlink: Actions may not be safe on all matching packets
[  108.509424][T10209] syzkaller0: entered promiscuous mode
[  108.511334][T10209] syzkaller0: entered allmulticast mode
[  108.517305][T10209] tipc: Resetting bearer <eth:syzkaller0>
[  108.519965][T10208] tipc: Resetting bearer <eth:syzkaller0>
[  108.529027][T10208] tipc: Disabling bearer <eth:syzkaller0>
[  108.621577][T10225] netlink: 'syz.1.1209': attribute type 4 has an invalid length.
[  108.627720][T10225] netlink: 'syz.1.1209': attribute type 4 has an invalid length.
[  108.631670][T10225] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1209'.
[  108.778305][T10240] bridge_slave_1: left allmulticast mode
[  108.780086][T10240] bridge_slave_1: left promiscuous mode
[  108.781954][T10240] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.787666][T10240] bridge_slave_0: left allmulticast mode
[  108.789453][T10240] bridge_slave_0: left promiscuous mode
[  108.791277][T10240] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.909585][T10248] sch_tbf: burst 88 is lower than device veth9 mtu (1514) !
[  109.037022][T10261] xt_hashlimit: size too large, truncated to 1048576
[  109.865259][T10285] xt_TCPMSS: Only works on TCP SYN packets
[  109.940521][T10292] bond0: entered promiscuous mode
[  109.942196][T10292] bond_slave_0: entered promiscuous mode
[  109.980565][T10292] bond0: left promiscuous mode
[  109.982167][T10292] bond_slave_0: left promiscuous mode
[  110.307686][T10318] delete_channel: no stack
[  110.557676][T10352] RDS: rds_bind could not find a transport for 5400::4000:0:20:0, load rds_tcp or rds_rdma?
[  110.565426][T10352] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  110.680934][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.683597][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.793368][T10364] can: request_module (can-proto-4) failed.
[  110.833994][T10376] 8021q: adding VLAN 0 to HW filter on device bond7
[  110.841700][T10376] bond0: (slave team0): Releasing backup interface
[  111.016565][T10391] netlink: 'syz.2.1260': attribute type 1 has an invalid length.
[  111.071934][T10393] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  111.428615][T10432] syzkaller1: entered promiscuous mode
[  111.430555][T10432] syzkaller1: entered allmulticast mode
[  111.583907][T10446] ------------[ cut here ]------------
[  111.586312][T10446] WARNING: CPU: 1 PID: 10446 at fs/exec.c:119 path_noexec+0x1af/0x200
[  111.589737][T10446] Modules linked in:
[  111.591204][T10446] CPU: 1 UID: 0 PID: 10446 Comm: syz.2.1279 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  111.596508][T10446] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  111.600673][T10446] RIP: 0010:path_noexec+0x1af/0x200
[  111.603541][T10446] Code: 02 31 ff 48 89 de e8 70 ac 8b ff d1 eb eb 07 e8 87 a7 8b ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 d8 ad 3b 09 cc e8 72 a7 8b ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6
[  111.610240][T10446] RSP: 0018:ffffc9000448fbd8 EFLAGS: 00010283
[  111.612238][T10446] RAX: ffffffff823484ce RBX: ffff888106685680 RCX: 0000000000080000
[  111.615072][T10446] RDX: ffffc900097a5000 RSI: 0000000000002796 RDI: 0000000000002797
[  111.617618][T10446] RBP: 0000000000080000 R08: ffff88812266d640 R09: 0000000000000003
[  111.620548][T10446] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000002
[  111.623268][T10446] R13: 1ffff92000891f90 R14: 0000000000000000 R15: dffffc0000000000
[  111.626076][T10446] FS:  00007ffabc1ab6c0(0000) GS:ffff8881a3c26000(0000) knlGS:0000000000000000
[  111.629163][T10446] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  111.631545][T10446] CR2: 0000200000000680 CR3: 000000010fca4000 CR4: 00000000000006f0
[  111.634446][T10446] Call Trace:
[  111.635569][T10446]  <TASK>
[  111.636541][T10446]  do_mmap+0xa43/0x10d0
[  111.638141][T10446]  ? __pfx_do_mmap+0x10/0x10
[  111.639957][T10446]  ? down_write_killable+0x178/0x230
[  111.641723][T10446]  ? end_current_label_crit_section+0x152/0x180
[  111.643844][T10446]  ? __pfx_down_write_killable+0x10/0x10
[  111.645797][T10446]  vm_mmap_pgoff+0x31b/0x4c0
[  111.647358][T10446]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  111.649089][T10446]  ? __fget_files+0x2a/0x420
[  111.650634][T10446]  ? __fget_files+0x3a0/0x420
[  111.652359][T10446]  ? __fget_files+0x2a/0x420
[  111.654002][T10446]  ksys_mmap_pgoff+0x51f/0x760
[  111.655735][T10446]  do_syscall_64+0xfa/0x3b0
[  111.657307][T10446]  ? lockdep_hardirqs_on+0x9c/0x150
[  111.659135][T10446]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.661209][T10446]  ? exc_page_fault+0x9f/0xf0
[  111.662756][T10446]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.665303][T10446] RIP: 0033:0x7ffabb38e9a9
[  111.666882][T10446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  111.673791][T10446] RSP: 002b:00007ffabc1ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  111.676786][T10446] RAX: ffffffffffffffda RBX: 00007ffabb5b5fa0 RCX: 00007ffabb38e9a9
[  111.679306][T10446] RDX: 0000000003000004 RSI: 0000000000001000 RDI: 0000200000ffe000
[  111.681855][T10446] RBP: 00007ffabb410d69 R08: 0000000000000006 R09: 00000000ffffe000
[  111.684543][T10446] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000
[  111.687096][T10446] R13: 0000000000000000 R14: 00007ffabb5b5fa0 R15: 00007ffc67ba7598
[  111.689570][T10446]  </TASK>
[  111.690577][T10446] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  111.692943][T10446] CPU: 1 UID: 0 PID: 10446 Comm: syz.2.1279 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77-dirty #0 PREEMPT(full) 
[  111.697722][T10446] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  111.701432][T10446] Call Trace:
[  111.702707][T10446]  <TASK>
[  111.703863][T10446]  dump_stack_lvl+0x99/0x250
[  111.705575][T10446]  ? __asan_memcpy+0x40/0x70
[  111.707209][T10446]  ? __pfx_dump_stack_lvl+0x10/0x10
[  111.709152][T10446]  ? __pfx__printk+0x10/0x10
[  111.710949][T10446]  panic+0x2db/0x790
[  111.712503][T10446]  ? __pfx_panic+0x10/0x10
[  111.714160][T10446]  __warn+0x31b/0x4b0
[  111.715809][T10446]  ? path_noexec+0x1af/0x200
[  111.717728][T10446]  ? path_noexec+0x1af/0x200
[  111.719661][T10446]  report_bug+0x2be/0x4f0
[  111.721439][T10446]  ? path_noexec+0x1af/0x200
[  111.723172][T10446]  ? path_noexec+0x1af/0x200
[  111.724743][T10446]  ? path_noexec+0x1b1/0x200
[  111.726297][T10446]  handle_bug+0x84/0x160
[  111.727720][T10446]  exc_invalid_op+0x1a/0x50
[  111.729345][T10446]  asm_exc_invalid_op+0x1a/0x20
[  111.731182][T10446] RIP: 0010:path_noexec+0x1af/0x200
[  111.733305][T10446] Code: 02 31 ff 48 89 de e8 70 ac 8b ff d1 eb eb 07 e8 87 a7 8b ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 d8 ad 3b 09 cc e8 72 a7 8b ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6
[  111.740225][T10446] RSP: 0018:ffffc9000448fbd8 EFLAGS: 00010283
[  111.742347][T10446] RAX: ffffffff823484ce RBX: ffff888106685680 RCX: 0000000000080000
[  111.745047][T10446] RDX: ffffc900097a5000 RSI: 0000000000002796 RDI: 0000000000002797
[  111.747788][T10446] RBP: 0000000000080000 R08: ffff88812266d640 R09: 0000000000000003
[  111.750271][T10446] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000002
[  111.752953][T10446] R13: 1ffff92000891f90 R14: 0000000000000000 R15: dffffc0000000000
[  111.755942][T10446]  ? path_noexec+0x1ae/0x200
[  111.757590][T10446]  ? path_noexec+0x1ae/0x200
[  111.759181][T10446]  do_mmap+0xa43/0x10d0
[  111.760520][T10446]  ? __pfx_do_mmap+0x10/0x10
[  111.762043][T10446]  ? down_write_killable+0x178/0x230
[  111.763762][T10446]  ? end_current_label_crit_section+0x152/0x180
[  111.765732][T10446]  ? __pfx_down_write_killable+0x10/0x10
[  111.767512][T10446]  vm_mmap_pgoff+0x31b/0x4c0
[  111.769025][T10446]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  111.770685][T10446]  ? __fget_files+0x2a/0x420
[  111.772195][T10446]  ? __fget_files+0x3a0/0x420
[  111.773712][T10446]  ? __fget_files+0x2a/0x420
[  111.775277][T10446]  ksys_mmap_pgoff+0x51f/0x760
[  111.776810][T10446]  do_syscall_64+0xfa/0x3b0
[  111.778257][T10446]  ? lockdep_hardirqs_on+0x9c/0x150
[  111.779976][T10446]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.781989][T10446]  ? exc_page_fault+0x9f/0xf0
[  111.783517][T10446]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.785425][T10446] RIP: 0033:0x7ffabb38e9a9
[  111.786899][T10446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  111.793018][T10446] RSP: 002b:00007ffabc1ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  111.795685][T10446] RAX: ffffffffffffffda RBX: 00007ffabb5b5fa0 RCX: 00007ffabb38e9a9
[  111.798238][T10446] RDX: 0000000003000004 RSI: 0000000000001000 RDI: 0000200000ffe000
[  111.800722][T10446] RBP: 00007ffabb410d69 R08: 0000000000000006 R09: 00000000ffffe000
[  111.803244][T10446] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000
[  111.805796][T10446] R13: 0000000000000000 R14: 00007ffabb5b5fa0 R15: 00007ffc67ba7598
[  111.808384][T10446]  </TASK>
[  111.810057][T10446] Kernel Offset: disabled
[  111.811493][T10446] Rebooting in 86400 seconds..

VM DIAGNOSIS:
11:38:14  Registers:
info registers vcpu 0

CPU#0
RAX=ad4f8b1a5162ce00 RBX=ffffffff81976c78 RCX=ad4f8b1a5162ce00 RDX=0000000000000001
RSI=ffffffff8d99603b RDI=ffffffff8be28c40 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1d5f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6d54d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c27f0d9 CR3=0000000037910000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=3da488fe003a0001 0000006000000014
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00007f11eeced100 00007f11ee186440 XMM05=00007f11ee186458 00007f11ee1864a0
XMM06=00007f11ee186498 00007f11ee186490 XMM07=00007f11ee186488 00007f11ee186480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f11ee011ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000054 RBX=0000000000000054 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000007410 RDI=0000000000007411 RBP=00000000000003f8 RSP=ffffc9000448f370
R8 =ffff888021600237 R9 =1ffff110042c0046 R10=dffffc0000000000 R11=ffffffff85460db0
R12=dffffc0000000000 R13=ffffffff99aee890 R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ffabc1ab6c0 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000680 CR3=000000010fca4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007ffabb586478 00007ffabb586450 XMM03=00007ffabb586488 00007ffabb586480
XMM04=00007ffabc0ed100 00007ffabb586440 XMM05=00007ffabb586458 00007ffabb5864a0
XMM06=00007ffabb586498 00007ffabb586490 XMM07=00007ffabb586488 00007ffabb586480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007ffabb411ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
