last executing test programs:

1.870464306s ago: executing program 2 (id=4458):
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = socket$inet6_sctp(0xa, 0x78426f0b78ff7e42, 0x84)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d", @ANYRESDEC=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x2, 0x1}}, 0x2e)
getsockopt(r5, 0x111, 0x4, 0x0, &(0x7f0000000080))
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1)
socket$netlink(0x10, 0x3, 0x4) (async)
socket$inet6_sctp(0xa, 0x78426f0b78ff7e42, 0x84) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d", @ANYRESDEC=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async)
socket$pppl2tp(0x18, 0x1, 0x1) (async)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x2, 0x1}}, 0x2e) (async)
getsockopt(r5, 0x111, 0x4, 0x0, &(0x7f0000000080)) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) (async)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) (async)

1.810012026s ago: executing program 2 (id=4459):
ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f0000000000))
r0 = accept(0xffffffffffffffff, &(0x7f0000000040)=@ethernet={0x0, @remote}, &(0x7f00000000c0)=0x80)
bind$x25(r0, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12)
close(r0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x8, 0x2, @udp='udp:syz1\x00'}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x84)
r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000280)='rdma.current\x00', 0x0, 0x0)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f00000002c0)=0xd, 0x4)
recvfrom$x25(r2, &(0x7f0000000300)=""/119, 0x77, 0x1, &(0x7f0000000380), 0x12)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x10080, 0x0)
close(r4)
syz_genetlink_get_family_id$fou(&(0x7f0000000400), r2)
recvmmsg(r3, &(0x7f0000002e00)=[{{&(0x7f0000000440)=@un=@abs, 0x80, &(0x7f00000014c0)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001500)=""/140, 0x8c}, 0x7fffffff}, {{&(0x7f00000015c0)=@pppol2tp={0x18, 0x1, {0x0, <r5=>0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001640)=""/137, 0x89}], 0x1, &(0x7f0000001740)=""/143, 0x8f}, 0x1}, {{&(0x7f0000001800)=@alg, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001880)=""/123, 0x7b}, {&(0x7f0000001900)=""/89, 0x59}, {&(0x7f0000001980)}, {&(0x7f00000019c0)=""/170, 0xaa}, {&(0x7f0000001a80)=""/190, 0xbe}, {&(0x7f0000001b40)=""/159, 0x9f}, {&(0x7f0000001c00)=""/94, 0x5e}, {&(0x7f0000001c80)=""/225, 0xe1}], 0x8, &(0x7f0000001e00)=""/4096, 0x1000}, 0x1}], 0x3, 0x40000000, &(0x7f0000002ec0))
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
write$cgroup_subtree(r2, &(0x7f0000002f00)={[{0x2d, 'rlimit'}, {0x0, 'net_prio'}, {0x2b, 'net'}, {0x2b, 'memory'}, {0x2b, 'freezer'}]}, 0x28)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000002f40)={'vxcan1\x00'})
sendmsg$NFT_BATCH(r0, &(0x7f0000003140)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003100)={&(0x7f0000002fc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x6}}, [@NFT_MSG_NEWFLOWTABLE={0xac, 0x16, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x68, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'dummy0\x00'}]}]}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x0, 0x0, 0x0, {0x3}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x355}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1a}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1b}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_GC_INTERVAL={0x8}]}], {0x14}}, 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000003180)={0xfdf, 0x87, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000001b540)={&(0x7f000001ae80), 0xc, &(0x7f000001b500)={&(0x7f000001aec0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0x2e8, 0xb, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_DESC={0x2cc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_CONCAT={0x148, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe71f}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff000}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2a7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7a0c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff0001}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x61}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_CONCAT={0x140, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa0}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x184455a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xed4}]}]}, @NFT_MSG_NEWTABLE={0x228, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0xe8, 0x6, "b8dfba8a76bb5e0765cb913846060e6cc3a6eae1164149843bf013228567ec171a9b57ef468d18db4c944e1e2ea3506818243905a52d0cf4cdff2866983f54a04d2b0b5d0f4e6a9f6bfa5014b698ce45f5f29125eb47d80b98058d46a62b8f489a2cc4655ae7edb94622b8097e4a5bb64ea1bae85a6c3be0928de8132f35f0a1f3c0008cb5aad9bd584872a6b61dd0af369f129222352d4f912f75f66ef54c2ca0f4e525daee15aacff980fce61b45af280dc39ade970ec5a01277e4686886091312c089ffc68dad364655289b4c0e1d6433c876278e11c7dce8f566497b0539df03837d"}, @NFTA_TABLE_USERDATA={0xe5, 0x6, "a78a6da72d386cb398bb7d5d56ec194625c7ecb69f6e71d9edb201aee2b0840e4417a7aaf17d1300523cf3d33049cd42e7b7fddd870fe81b1dd29011d572280d758330ed8a0ba7ed38db4ddf762ab1c91a3aa1339b731e7c9bcd6a49746d01483e29b232abe2f54fa3c77b70b1b5b7dc6140fabe0521661206d2bb2816a1cf1c68cf4d0981ed5800ff29141c8c545ebd4b5124fdbb53295d1342c797a5678b618ffef3ce9c636750260b3e37d073a26799e15a6e7ad831a90ba5ebb9fb535d0da3f4d6932c59490874106fceb8f843c0243f9c33e08691a206493ef733d2263b00"}]}, @NFT_MSG_NEWTABLE={0x58, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x2e, 0x6, "7c412c1c609a661f57fa84a5be437576ccbe8a87f44d1f9c76da3c2e46f27fe6704b48485d0d02a084fa"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_DELSET={0x30, 0xb, 0xa, 0xa00, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x610}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000)
connect$l2tp6(r5, &(0x7f000001b580)={0xa, 0x0, 0x5732, @dev={0xfe, 0x80, '\x00', 0x16}, 0x2, 0x1}, 0x20)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f000001b600)=@add_del={0x2, &(0x7f000001b5c0)='batadv_slave_0\x00'})
getpeername$l2tp6(r5, &(0x7f000001b640)={0xa, 0x0, 0x0, @private1}, &(0x7f000001b680)=0x20)
ppoll(&(0x7f000001b6c0)=[{r3, 0x1643}, {r3, 0x1009}], 0x2, &(0x7f000001b700)={0x77359400}, &(0x7f000001b740)={[0x3]}, 0x8)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f000001b780)={0x2, 'bridge_slave_1\x00', {}, 0x2})
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f000001b800), r5)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f000001b9c0)={&(0x7f000001b7c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f000001b980)={&(0x7f000001b840)={0x114, r6, 0x10, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xe1f}, {0x6, 0x16, 0xb43}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x9}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x7}, {0x5}}]}, 0x114}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f000001ba40), r5)
sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f000001bb00)={&(0x7f000001ba00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f000001bac0)={&(0x7f000001ba80)={0x14, r7, 0x100, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)

1.289086599s ago: executing program 0 (id=4477):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r0 = socket$netlink(0x10, 0x3, 0x4)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000000224e0000", 0x58}], 0x1) (async)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0)
sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r1, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd70000000000021040000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0xf810, 0x8, 0xdbc, 0x101, {{0x5, 0x4, 0x1, 0x6, 0x14, 0x67, 0x0, 0x2, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x23}}}}})
getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f00000001c0)={0x0, @initdev, @multicast2}, &(0x7f0000000200)=0xc)
connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r8, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) (async)
syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @empty, @mcast1, [], "8029335287b7a081"}}}}}}}, 0x0) (async)
recvmmsg(r8, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0)

1.221459368s ago: executing program 0 (id=4478):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000040a010300000000000000000a"], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4000810) (async)
recvmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}, 0x29}], 0x1, 0x10021, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r2 = socket$phonet(0x23, 0x2, 0x1)
sendmmsg(r2, &(0x7f0000005100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) (async)
sendmsg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0x7, 0x4, 0x8})
listen(r1, 0x7d4165c9) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x88e}, 0x1c) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7)
sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c0007800837d73ec300000008000600000000000800050000000000240007800800050000230000000005000000000061ff05000000000008000500000000"], 0xd0}}, 0x48000) (async)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="9c000000d504e0dde68f2344c5d737f3bdb4cbd0235565c6dad03c2858a6fd48872aa27f50c00515f6146acb190852310dbc4890a385868f7996e5e154f4f0cd54277f35ec282006e3b0f637687577b9b023c31d5a7c46666802e151119d4f315d49068117f4b5236a79b1fe95732843e1d8b95b9ae2004d08e461e8f4943858ddf173b37694f4ad6c8c39b2ce76a44f54054f5624d9c8d71a279f2868bfee168f0a04f543212627ffe5e2905733c8fd2558726469b107b4322e79be30eb579ca38a3aef3e8478b01ee6689d4a8f60812c230afdec0075c4fbee00000000000000", @ANYRES16=r8, @ANYRESHEX=0x0], 0x9c}, 0x1, 0x0, 0x0, 0x200000c4}, 0x10008880) (async)
listen(r6, 0x0) (async)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae714de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe7630a33b6deca160d8c2fbff48eb96428300"}, 0xd8) (async)
listen(r9, 0x0)

1.220225567s ago: executing program 0 (id=4480):
socket$inet6(0xa, 0x3, 0x7)
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = socket$inet6(0xa, 0x3, 0x7)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)={0x2, [0x0, <r3=>0x0]}, &(0x7f0000000100)=0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e21, 0x2, @loopback, 0x7}}, 0x3, 0xfffd}, 0x90)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab60070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1)

1.218405265s ago: executing program 0 (id=4481):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4)
listen(r0, 0x8)
accept$ax25(r0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x7, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010000108fdffeefffddb010000000000", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b000000000018001a8004002d8000000a8000000700ff020000000000000000000000000001000008000b000000000008008100000000000700ff020000000000000000000000000001"], 0x40}, 0x1, 0x0, 0x0, 0x4040080}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r10)
r11 = socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101402, 0x0)

986.743013ms ago: executing program 2 (id=4485):
r0 = socket(0x2b, 0x80801, 0x1)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ppoll(&(0x7f0000000580)=[{r1, 0x2000}], 0x1, &(0x7f00000005c0)={0x77359400}, &(0x7f0000000600)={[0x3]}, 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4, 0x3fc, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c)
r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf)
getpeername$ax25(r2, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r4, 0x0, 0x0)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000140)=[{&(0x7f0000000340)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000300080c10000000000000000000", 0x58}], 0x1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001780)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0)
recvmmsg(r6, &(0x7f0000009a80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001c00)=""/189, 0xbd}, {&(0x7f0000001cc0)=""/101, 0x65}, {&(0x7f0000004a80)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/188, 0xbc}, {&(0x7f0000001e00)=""/74, 0x4a}], 0x5}, 0x8}], 0x3, 0x42, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r7, 0x29, 0x14, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14)
socket$netlink(0x10, 0x3, 0x9)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000180)={0x84, @rand_addr=0x64010102, 0x4e23, 0x2, 'dh\x00', 0x17, 0x5, 0x4a}, 0x2c)
ioctl$VFAT_IOCTL_READDIR_BOTH(r8, 0x82187201, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r9, 0x400448ca, 0x0)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@random="9ffbf4c8e5bfa99ac3b577c9dda93f037a6aed8189d9775647e82c64ac89f4a2", 0x20, 0x1)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080211000001080211000000080211000000000000e3ffffffffffff63822f07c13b1974f100010000060202020202020108"], 0x36)
bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0x0, 0x2}, 0xffffff38)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)

410.839306ms ago: executing program 2 (id=4492):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001000010300000020fddbdf25020000564e234e20040000060400000000000000fbffffbf00000000feffff7f0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000f1000000000800030011000000"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @none={0x0, 0x1}}, 0x14) (async)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xaa02, 0x0) (async)
splice(r2, 0x0, r3, &(0x7f00000002c0), 0x6, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000000c0)={0x90000002})

340.115785ms ago: executing program 2 (id=4493):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x100}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_GC_INTERVAL={0x8}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x205, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb0}, 0x1, 0x0, 0x0, 0xfa5b63a335fa6825}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0xf)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x220c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r8, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r9, 0x0)
r10 = socket(0x1d, 0x2, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071108500000000001f150000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x58)
bind$can_j1939(r10, 0x0, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r11, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x7d}], 0x1)

281.61835ms ago: executing program 0 (id=4494):
socket$key(0xf, 0x3, 0x2)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)={0x10f4, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_APDU={0x1004, 0x19, "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"}, @NFC_ATTR_SE_APDU={0x5b, 0x19, "593626ba8d9709a204f2a09772b222fd1d6d8e849b3076503199e469650c417fd87cf4d6fc55b1a185939253a5b1c3feee4a32c9beb9ffbd1055c2fb57af7bf62065bdc4b4b465917924138807541c3be6c7ef27bbc144"}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_APDU={0x58, 0x19, "b8cde28fc947303bc3e7849f511b8d5dbfd26e0c1512aed46c261431cfc811259d709a736dfa7a5e70708f00ea03e09519885832ebbe2ecb80a5672483b036772ebab910fc686bd94ec73c9d13b7c8067b22ef49"}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x10f4}}, 0x10)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, @in6=@empty, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x89, 0x0, 0xee01}, {0x800, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0xfffffffffffffffe}, 0x0, 0xfffffff9, 0x1, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x32}, 0x0, 0x4, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c)
socket$key(0xf, 0x3, 0x2)
setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='O', 0x1)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000004c0)=[{0x28, 0x0, 0x6, 0xff}, {0x80000006, 0x0, 0x12, 0xf6}]}, 0x10)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x2, 0x5)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000240))
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req={0xc66b, 0x7, 0x10aa4, 0x80000001}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0xc, 0x16, 0x0, 0x1, [@typed={0x8, 0xbf, 0x0, 0x0, @u32=0x7fffffff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4004800}, 0x20000000)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='vnet_skip_tx_trigger\x00', r7, 0x0, 0xffffffffffffaab2}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r8=>0x0})
sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x70, 0x12, 0x905, 0x70bd26, 0x25dfdbfb, {0xa, 0x7, 0x4, 0x0, {0x4e22, 0x4e66, [0xfffffffb, 0x924, 0x6, 0x6], [0x5, 0x1, 0x21, 0x2], r8, [0xa, 0x8ffe]}, 0x6, 0xffffffff}, [@INET_DIAG_REQ_BYTECODE={0x21, 0x1, "09911c000a1d491437ab41da78528e3b940c4f49494262fb3be84974a1"}]}, 0x70}}, 0x800)

280.865681ms ago: executing program 2 (id=4495):
r0 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000006c0)="10", 0x1}], 0x1}, 0x24000900)
sendmsg$inet(r0, &(0x7f0000000b00)={&(0x7f0000000340)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000740)='!', 0x1}], 0x1}, 0x54)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x4, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)
sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r4=>0x0})
bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0x10)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r5, &(0x7f0000000040)={0x1d, r4}, 0x10)
bind$can_raw(r3, &(0x7f0000000080)={0x1d, 0x0, 0x16}, 0x10)
recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10000)
sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

228.295222ms ago: executing program 1 (id=4498):
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x8, 0x0, @mcast2}, 0x4, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) (async, rerun: 32)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0) (async)
r1 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) (async)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@local, 0x10000, 0x0, 0x1, 0x1, 0x0, 0x2}, 0x20)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x9, @loopback}, 0x1c)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) (async)
sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x0) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(0x0, r4) (async)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, 0x0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)

141.970986ms ago: executing program 1 (id=4499):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000ffff0000000000008510000003000000180000000000000000000000000000009500e900000040000f000000000000000000000000000000930400799ec619ac78fc12c2c390374de255e3e3682cb1a53f"], 0x0, 0x5}, 0x90)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
connect$unix(r3, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000400)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000580)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x4}, 0x50)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000001080)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000140)={r5}, &(0x7f0000000180)=0x8)
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4)
connect$inet(r7, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4)
r8 = accept(r0, &(0x7f00000001c0)=@nfc, &(0x7f0000000100)=0x80)
setsockopt$EBT_SO_SET_COUNTERS(r8, 0x0, 0x81, &(0x7f0000000940)={'nat\x00', 0x0, 0x0, 0x0, [0x6, 0x7, 0x5, 0x400, 0x2, 0x78], 0x6, &(0x7f0000000240)=[{}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8)
sendmsg$DEVLINK_CMD_PORT_SET(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x44}}, 0x8000)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4048800}, 0x20008801)
socket$kcm(0xa, 0x3, 0x87)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmmsg$sock(r9, &(0x7f0000003a80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000800)="11", 0x1}], 0x1}}], 0x1, 0x0)
recvfrom(r10, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0)

141.264858ms ago: executing program 1 (id=4500):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x7d4165c9)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="040000006a455a50bfb3ea138971703201446ef3da5996b8d4ac3c99d3de93e6d5b1b1014c6ea9bbfa8ce37e0f6560f8e8bd333766fc90662652d9dd68e00a403060333c7dc139b3979e697ed1921bc383b9bb3e09527ee94973407a843fb58185938b5acd3e2ed20f0a46fa800097ddd0ad6e0903fc9fe314dc104e901fd568f886", @ANYRES16=r5, @ANYBLOB="01002dbd700000000000010000000500040001000000050002000a000000"], 0x24}, 0x1, 0x0, 0x0, 0x20048091}, 0x0)
writev(r4, &(0x7f0000000180), 0x100000000000003c)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x91, @remote, 0x1}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r8, 0x9)
listen(r7, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae714de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe763044bcb3fbff48eb964283000000000000000100"}, 0xd8)
r9 = socket$netlink(0x10, 0x3, 0x8000000004)
r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GSUBSCRIP(r10, 0x89e0, &(0x7f0000000300)={'erspan0\x00', 0x3, 0x7f})
writev(r9, &(0x7f0000000540)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)

81.999171ms ago: executing program 1 (id=4501):
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x8000)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='westwood\x00', 0x9)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x4, 0x1, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000240)="8ca325a67c", 0x5}, {&(0x7f0000000280)="da2989632dca06bfbd937b2b84344cf50f91a0e77b208a3740eed22b0e295c57fcfcdb86575f46ac92138cf9fbc588541097ebe1bcf23445e82887d1ac5a8e2b8c423d8f11b979a53d3f17090a59a2670b86effba2a5f2b2bf44e903d71812a4936659987f803267", 0x68}, {&(0x7f0000000300)="c1177c40c7a05c", 0x7}, {&(0x7f0000000340)="fc54230d5fba8b11972fd10a4564077f27373f72081d90cd26d7078d665e", 0x1e}, {&(0x7f0000000380)="3f7460ec65120f9978b0df69f1b3c9521014e596b9918a257c17b8aaf0b53f33b83fd54c7a7dbe50b198383f2cb2dd69436a1c228cb8145e7d7a7b64ff30a0304d58a52a5d1963b8dc1fa8fdc1a760e942c59b967fc328ebd12b105622ab68c034a79f59414518aca907dfa136e33a3f6591195ddfa39f1e032483c24b32d9ec72af72e0b959d0bf7bb3228f7eed2fb5f6b37e957a38b2697979ef2bb1d3d7486cd0445601fe361c05898cc97c4ff9c91bed79a2369c27025af878fcd66dc592d1211ee9f6aac64c02895739388edf3354a9c0ee553582fa855a47f37b591b29ff0e5cffbd61a5054122f2", 0xeb}, {&(0x7f0000000480)="ce060da2a508cb0cd87536245a85f65558c60c", 0x13}, {&(0x7f0000000600)="6039a134964c4577be67cfa005100291b5ff8c332fecaf4dbd35f3d0581529a4a3465d43c1288f63c2b46e923b2503a1f890ff1832", 0x35}], 0x7, &(0x7f0000000580)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x28}}}}], 0xffffffffffffff87}, 0x85)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x155558cb, 0x0, 0x13}]}}, 0x0, 0x26, 0x0, 0x9}, 0x28)
splice(r5, 0x0, r6, 0x0, 0x1, 0x0)
write(r4, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r9 = socket$rxrpc(0x21, 0x2, 0xa)
ioctl$FS_IOC_SETFSLABEL(r9, 0x41009432, &(0x7f00000006c0)="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")
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

1.225278ms ago: executing program 1 (id=4502):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0xfff}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x2, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x3, 0x181a}, {@private=0xa010102, 0x4e20, 0x2, 0xa, 0x80012d58, 0x12d5c}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
writev(r5, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f3513af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa500269b81a0bbc", 0xf0}, {&(0x7f0000000100)="1d4ac370cf8c47025bd7a6546c8bd20f3991596dfcd1abdb72276d5f80b1d38cedd7d704de6ec72fa6961cd700b4f8c0f594861c0296ca92cb6c2ef9", 0x3c}, {&(0x7f0000000380)="88e584aac45d6d83e6c2e7857149eb55d2c259a747dbdfc0787e87150d7e40953e657417f2c201284dd4714eb14ce94fb9be03e73d06a982f5502b3ae3a800c03902057e1ec6", 0x46}, {&(0x7f0000000400)="83c0b58e5bcffe6c14ab199d81f63d9e77512d040c3f3a7b41a3a1ed6cf40450443e4e377139b523eb3dd725f87a1ed946e28c6b19e1fc6ea21fe2eef736ec85289f34830b89c7169369862871b9608f2e976924a41f64f236a395563ddb3b994b4d9cf9f465dea2adad06013851713e9d30f195383be99db35611dd11a69721e423fcf5904c2af8ca4b1774bc6438d1c6218a2ada56c8b5b289274c2d116ecd4aafbd01536f931c84ec7f95ce8c6d118d1dec3bfa645c3e72018e9c154a80fd84b6e0233520ee1dc56ec6247282000000000000000000", 0xd7}, {&(0x7f0000004480)="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", 0x45b}], 0x5)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000540)={0x4, &(0x7f0000000500)=[{0x2, 0x6, 0x2, 0x92fb}, {0x9, 0x3, 0x6, 0x3}, {0xc226, 0xa9, 0x3, 0xfea7}, {0x9, 0x7, 0x4, 0xdfe}]}, 0x10)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
readv(r5, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1)

883.317µs ago: executing program 1 (id=4503):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000000224e0000", 0x58}], 0x1)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, &(0x7f0000000180))
sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getrule={0x1c, 0x22, 0x400, 0x70bd29, 0x25dfdbfd, {0x2, 0x14, 0x80, 0x9, 0x1, 0x0, 0x0, 0x7, 0x4}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x440c0}, 0x4040005)

0s ago: executing program 0 (id=4504):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x43044)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000300)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x1d}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20010)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(0x4)
r1 = socket(0x3, 0x2, 0x0)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x16)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x891f, &(0x7f0000001000)={'syztnl1\x00', 0x0})
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="021004051400000026bd7000ffdbdf210800120002000000b56b6e00070000000600ab5fedca0000000000000000000120010000000000000000000000000002010014000300000002001000000004d4000004d30000000005001a00ac1414aa000000000000000000000000ffffffffc933000000007eb80000000000000800001002001300900000002bbd7000023500"/162], 0xa0}}, 0x8000)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x3}}, 0x10)
bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}}}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a32000000007c010000020a01"], 0x250}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
recvfrom$netrom(0xffffffffffffffff, 0x0, 0x0, 0x12000, 0x0, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
unshare(0x48000280)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r5}, 0x8)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x94, &(0x7f0000000500)=""/148, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94)
ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f0000000280)=<r7=>0x0)
ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000380)={0x3, @null, r7})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000053c0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004\x00'], 0x70}}], 0x1, 0x4)

kernel console output (not intermixed with test programs):

  185.972134][T12023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1680'.
[  185.975913][T12023] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1680'.
[  185.981855][T12023] netlink: 'syz.2.1680': attribute type 16 has an invalid length.
[  185.985589][T12023] netlink: 'syz.2.1680': attribute type 17 has an invalid length.
[  185.996455][T12023] IPv6: NLM_F_REPLACE set, but no existing node found!
[  186.555662][T12044] tipc: Resetting bearer <eth:syzkaller0>
[  186.837875][T12067] netem: incorrect ge model size
[  186.902515][T12080] netlink: 'syz.2.1697': attribute type 10 has an invalid length.
[  186.910857][T12080] macvlan0: entered promiscuous mode
[  186.914450][T12080] macvlan0: entered allmulticast mode
[  186.916168][T12080] veth1_vlan: entered allmulticast mode
[  186.918132][T12080] bond0: (slave macvlan0): Enslaving as an active interface with a down link
[  187.190272][T12108] nbd: must specify an index to disconnect
[  188.867819][T12163] syzkaller0: entered promiscuous mode
[  188.869783][T12163] syzkaller0: entered allmulticast mode
[  189.067646][T12165] __nla_validate_parse: 9 callbacks suppressed
[  189.067664][T12165] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1720'.
[  190.039821][T12192] siw: device registration error -23
[  190.483906][T12196] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1729'.
[  190.520034][T12198] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1730'.
[  190.578569][T12208] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1733'.
[  190.907107][T12219] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  191.233277][T12246] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20003
[  191.555725][T12263] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1751'.
[  191.559342][T12263] gretap0: entered promiscuous mode
[  192.089977][T12314] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1766'.
[  192.092960][T12314] 8021q: VLANs not supported on ipvlan1
[  192.291370][T12352] lo: entered promiscuous mode
[  192.293062][T12352] tunl0: entered promiscuous mode
[  192.295576][T12352] gre0: entered promiscuous mode
[  192.297415][T12352] gretap0: entered promiscuous mode
[  192.299528][T12352] erspan0: entered promiscuous mode
[  192.301443][T12352] ip_vti0: entered promiscuous mode
[  192.303341][T12352] ip6_vti0: entered promiscuous mode
[  192.305746][T12352] sit0: entered promiscuous mode
[  192.307611][T12352] ip6tnl0: entered promiscuous mode
[  192.309585][T12352] ip6gre0: entered promiscuous mode
[  192.311584][T12352] syz_tun: entered promiscuous mode
[  192.313380][T12352] ip6gretap0: entered promiscuous mode
[  192.315934][T12352] vcan0: entered promiscuous mode
[  192.318226][T12352] bond0: entered promiscuous mode
[  192.320249][T12352] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  192.322743][T12352] team0: entered promiscuous mode
[  192.324710][T12352] dummy0: entered promiscuous mode
[  192.326647][T12352] nlmon0: entered promiscuous mode
[  192.328697][T12352] caif0: entered promiscuous mode
[  192.330388][T12352] batadv0: entered promiscuous mode
[  192.332120][T12352] vxcan0: entered promiscuous mode
[  192.333967][T12352] vxcan1: entered promiscuous mode
[  192.335832][T12352] veth0: entered promiscuous mode
[  192.337796][T12352] veth1: entered promiscuous mode
[  192.339702][T12352] wg0: entered promiscuous mode
[  192.341540][T12352] wg1: entered promiscuous mode
[  192.343249][T12352] wg2: entered promiscuous mode
[  192.345061][T12352] veth0_to_bridge: entered promiscuous mode
[  192.347042][T12352] bridge_slave_0: entered promiscuous mode
[  192.349262][T12352] veth1_to_bridge: entered promiscuous mode
[  192.351222][T12352] bridge_slave_1: entered promiscuous mode
[  192.353115][T12352] veth0_to_bond: entered promiscuous mode
[  192.355074][T12352] bond_slave_0: entered promiscuous mode
[  192.356970][T12352] veth1_to_bond: entered promiscuous mode
[  192.359159][T12352] bond_slave_1: entered promiscuous mode
[  192.361215][T12352] veth0_to_team: entered promiscuous mode
[  192.363411][T12352] team_slave_0: entered promiscuous mode
[  192.367014][T12352] veth1_to_team: entered promiscuous mode
[  192.368971][T12352] team_slave_1: entered promiscuous mode
[  192.371130][T12352] veth0_to_batadv: entered promiscuous mode
[  192.373228][T12352] veth1_to_batadv: entered promiscuous mode
[  192.375433][T12352] batadv_slave_1: entered promiscuous mode
[  192.377421][T12352] xfrm0: entered promiscuous mode
[  192.379293][T12352] veth0_to_hsr: entered promiscuous mode
[  192.381205][T12352] hsr_slave_0: entered promiscuous mode
[  192.383022][T12352] veth1_to_hsr: entered promiscuous mode
[  192.386481][T12352] hsr_slave_1: entered promiscuous mode
[  192.388592][T12352] veth1_virt_wifi: entered promiscuous mode
[  192.390560][T12352] veth0_virt_wifi: entered promiscuous mode
[  192.392562][T12352] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  192.395361][T12352] vlan0: entered promiscuous mode
[  192.397457][T12352] vlan1: entered promiscuous mode
[  192.399626][T12352] macvlan0: entered promiscuous mode
[  192.402001][T12352] macvlan1: entered promiscuous mode
[  192.404562][T12352] ipvlan0: entered promiscuous mode
[  192.406789][T12352] ipvlan1: entered promiscuous mode
[  192.409141][T12352] macvtap0: entered promiscuous mode
[  192.412086][T12352] macsec0: entered promiscuous mode
[  192.414619][T12352] geneve0: entered promiscuous mode
[  192.416729][T12352] geneve1: entered promiscuous mode
[  192.419832][T12352] netdevsim netdevsim1 netdevsim1: entered promiscuous mode
[  192.422775][T12352] netdevsim netdevsim1 netdevsim2: entered promiscuous mode
[  192.425464][T12352] netdevsim netdevsim1 netdevsim3: entered promiscuous mode
[  192.427964][T12352] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  192.430125][T12352] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  192.432323][T12352] macsec1: entered promiscuous mode
[  192.434130][T12352] vxlan0: entered promiscuous mode
[  192.435797][T12352] ip6erspan0: entered promiscuous mode
[  192.437522][T12352] gre1: entered promiscuous mode
[  192.439233][T12352] B: entered promiscuous mode
[  192.440749][T12352] wireguard0: entered promiscuous mode
[  192.442569][T12352] bridge1: entered promiscuous mode
[  192.444758][T12352] pimreg: entered promiscuous mode
[  192.446518][T12352] gre2: entered promiscuous mode
[  192.448235][T12352] bond1: entered promiscuous mode
[  192.449917][T12352] vlan2: entered promiscuous mode
[  192.451797][T12352] bridge0: entered promiscuous mode
[  192.453882][T12352] gtp0: entered promiscuous mode
[  192.455932][T12352] syztnl2: entered promiscuous mode
[  192.458025][T12352] bridge2: entered promiscuous mode
[  192.460076][T12352] bond2: entered promiscuous mode
[  192.462091][T12352] geneve2: entered promiscuous mode
[  192.464458][T12352] bridge3: entered promiscuous mode
[  192.466482][T12352] sit1: entered promiscuous mode
[  192.468641][T12354] syzkaller0: Caught tx_queue_len zero misconfig
[  192.931001][T12373] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1782'.
[  192.942754][T12373] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1782'.
[  193.020008][T12379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1784'.
[  193.157731][T12394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1788'.
[  193.278442][T12404] 8021q: VLANs not supported on ipvlan1
[  193.860491][T12453] syzkaller0: left promiscuous mode
[  193.863418][T12453] syzkaller0: left allmulticast mode
[  193.911999][T12459] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  193.919157][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  193.919641][T12459] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  193.925686][T12459] bond0: (slave ipvlan3): Error -95 calling set_mac_address
[  194.226886][T12480] netlink: 'syz.0.1810': attribute type 1 has an invalid length.
[  194.401797][T12494] wg1 speed is unknown, defaulting to 1000
[  194.407672][T12494] lo speed is unknown, defaulting to 1000
[  194.486335][T12500] netlink: 'syz.2.1818': attribute type 3 has an invalid length.
[  194.491638][T12500] __nla_validate_parse: 15 callbacks suppressed
[  194.491652][T12500] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1818'.
[  194.547515][T12506] sctp: [Deprecated]: syz.1.1820 (pid 12506) Use of int in max_burst socket option deprecated.
[  194.547515][T12506] Use struct sctp_assoc_value instead
[  194.698761][T12511] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1823'.
[  194.728435][T12513] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1824'.
[  195.514208][ T6573] wlan0: Trigger new scan to find an IBSS to join
[  195.524456][ T8846] wlan1: Trigger new scan to find an IBSS to join
[  195.642038][T12537] netlink: 'syz.1.1832': attribute type 1 has an invalid length.
[  195.644745][T12538] netlink: 'syz.1.1832': attribute type 1 has an invalid length.
[  195.644767][T12538] netlink: 'syz.1.1832': attribute type 11 has an invalid length.
[  195.644778][T12538] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1832'.
[  195.647283][T12538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1832'.
[  195.665444][T12537] netlink: 'syz.1.1832': attribute type 11 has an invalid length.
[  195.668194][T12537] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1832'.
[  195.780623][T12552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1835'.
[  195.835860][T12565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1836'.
[  195.854601][T12554] "syz.0.1836" (12554) uses obsolete ecb(arc4) skcipher
[  195.908853][T12573] pim6reg1: entered promiscuous mode
[  195.911002][T12573] pim6reg1: entered allmulticast mode
[  196.024409][T12577] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1840'.
[  196.799144][T12588] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  196.803103][T12588] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  196.814410][T12588] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  196.861539][T12592] 8021q: adding VLAN 0 to HW filter on device bond0
[  196.872234][T12592] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  196.955483][T12596] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1846'.
[  198.408520][T12673] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  198.411994][T12673] syzkaller0: entered promiscuous mode
[  198.415324][T12673] syzkaller0: entered allmulticast mode
[  198.420589][T12672] tipc: Resetting bearer <eth:syzkaller0>
[  198.429103][T12672] tipc: Disabling bearer <eth:syzkaller0>
[  198.474642][ T8832] wlan0: Trigger new scan to find an IBSS to join
[  198.526362][T12683] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  198.530256][T12683] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  198.533430][T12683] bond0: (slave ipvlan3): Error -95 calling set_mac_address
[  198.553614][  T158] wlan1: Trigger new scan to find an IBSS to join
[  198.557817][T12687] siw: device registration error -23
[  199.373735][  T158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.857255][T12738] __nla_validate_parse: 8 callbacks suppressed
[  199.857268][T12738] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1890'.
[  199.863080][T12738] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1890'.
[  200.056552][T12755] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  200.061840][T12755] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  200.067087][T12755] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  200.185862][   T33] audit: type=1800 audit(1756388829.336:7): pid=12763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1900" name="memory.events" dev="tmpfs" ino=3393 res=0 errno=0
[  200.208106][T12763] wg1 speed is unknown, defaulting to 1000
[  200.211237][T12763] lo speed is unknown, defaulting to 1000
[  200.385882][T12779] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1904'.
[  200.431254][T12781] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1905'.
[  200.456114][T12784] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1904'.
[  200.499308][T12781] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1905'.
[  200.561140][ T1095] wlan0: Trigger new scan to find an IBSS to join
[  200.924854][T12808] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1909'.
[  201.173036][T12827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1914'.
[  201.239730][T12842] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  201.245162][T12842] bond0: (slave ipvlan4): The slave device specified does not support setting the MAC address
[  201.251884][T12842] bond0: (slave ipvlan4): Error -95 calling set_mac_address
[  201.367229][T12853] wg1 speed is unknown, defaulting to 1000
[  201.370766][T12853] lo speed is unknown, defaulting to 1000
[  201.514737][ T1095] wlan1: Trigger new scan to find an IBSS to join
[  202.311746][T12905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1931'.
[  202.350049][T12909] ipvlan4: entered promiscuous mode
[  202.351787][T12909] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  202.358506][T12909] bond0: (slave ipvlan4): The slave device specified does not support setting the MAC address
[  202.364286][T12909] bond0: (slave ipvlan4): Error -95 calling set_mac_address
[  202.399695][T12911] netlink: 186672 bytes leftover after parsing attributes in process `syz.2.1931'.
[  202.464351][ T8823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  202.877419][   T60] block nbd1: Possible stuck request ffff88801d718000: control (read@0,1024B). Runtime 120 seconds
[  202.882252][   T60] block nbd1: Possible stuck request ffff88801d718200: control (read@1024,1024B). Runtime 120 seconds
[  202.887742][   T60] block nbd1: Possible stuck request ffff88801d718400: control (read@2048,1024B). Runtime 120 seconds
[  202.892533][   T60] block nbd1: Possible stuck request ffff88801d718600: control (read@3072,1024B). Runtime 120 seconds
[  205.127207][T13032] __nla_validate_parse: 2 callbacks suppressed
[  205.127221][T13032] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1967'.
[  205.243936][T13042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1969'.
[  205.247657][T13042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1969'.
[  205.251636][T13042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1969'.
[  205.514252][ T8832] wlan0: Trigger new scan to find an IBSS to join
[  205.709242][T13050] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1972'.
[  205.749030][T13052] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1973'.
[  205.752921][T13052] 8021q: VLANs not supported on ipvlan1
[  206.109599][T13077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1982'.
[  206.113216][T13077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1982'.
[  206.155643][T13087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1984'.
[  206.193866][T13090] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1986'.
[  206.277274][T13101] sctp: [Deprecated]: syz.2.1987 (pid 13101) Use of struct sctp_assoc_value in delayed_ack socket option.
[  206.277274][T13101] Use struct sctp_sack_info instead
[  206.532808][T13129] syzkaller1: entered allmulticast mode
[  206.658748][T13141] netlink: 'syz.2.1997': attribute type 1 has an invalid length.
[  207.503194][T13188] netlink: 'syz.0.2005': attribute type 1 has an invalid length.
[  207.713633][T13198] netlink: 'syz.1.2009': attribute type 3 has an invalid length.
[  207.755221][T13198] pimreg: left allmulticast mode
[  207.795058][T13198] siw: device registration error -23
[  207.798214][T13198] lo: left promiscuous mode
[  207.802631][T13198] tunl0: left promiscuous mode
[  207.806354][T13198] gre0: left promiscuous mode
[  207.810222][T13198] gretap0: left promiscuous mode
[  207.813413][T13198] erspan0: left promiscuous mode
[  207.823420][T13198] ip_vti0: left promiscuous mode
[  207.827257][T13198] ip6_vti0: left promiscuous mode
[  207.830258][T13198] sit0: left promiscuous mode
[  207.836131][T13198] ip6tnl0: left promiscuous mode
[  207.839167][T13198] ip6gre0: left promiscuous mode
[  207.842174][T13198] syz_tun: left promiscuous mode
[  207.847032][T13198] ip6gretap0: left promiscuous mode
[  207.850653][T13198] vcan0: left promiscuous mode
[  207.853311][T13198] bond0: left promiscuous mode
[  207.857403][T13198] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.861307][T13198] 8021q: adding VLAN 0 to HW filter on device team0
[  207.867493][T13198] dummy0: left promiscuous mode
[  207.870745][T13198] nlmon0: left promiscuous mode
[  207.874381][T13198] caif0: left promiscuous mode
[  207.876338][T13198] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  207.882411][ T5908] lo speed is unknown, defaulting to 1000
[  207.885831][ T5908] syz1: Port: 1 Link ACTIVE
[  208.074793][ T6074] Bluetooth: hci2: command 0x041b tx timeout
[  208.342355][T13241] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  209.299182][T13255] wg1 speed is unknown, defaulting to 1000
[  209.302400][T13255] lo speed is unknown, defaulting to 1000
[  209.330453][   T24] IPVS: starting estimator thread 0...
[  209.396191][T13255] ieee802154 phy0 wpan0: encryption failed: -22
[  209.414195][T13257] IPVS: using max 92 ests per chain, 220800 per kthread
[  209.557787][ T5734] IPVS: stop unused estimator thread 0...
[  210.034374][T13286] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20000
[  210.145380][T13304] __nla_validate_parse: 9 callbacks suppressed
[  210.145396][T13304] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2040'.
[  210.272907][T13325] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2045'.
[  210.791963][T13359] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2056'.
[  210.796770][T13359] nbd: must specify a size in bytes for the device
[  210.800507][T13359] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  211.017881][T13387] sctp: [Deprecated]: syz.2.2063 (pid 13387) Use of int in max_burst socket option.
[  211.017881][T13387] Use struct sctp_assoc_value instead
[  211.372408][T13406] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2069'.
[  211.533212][T13409] IPVS: stopping backup sync thread 11948 ...
[  211.664300][T13412] bond0: (slave macvlan0): Releasing backup interface
[  211.672453][T13412] macvlan0: left allmulticast mode
[  211.683553][T13412] veth1_vlan: left allmulticast mode
[  211.692623][T13411] rdma_op ffff8881196ad9f0 conn xmit_rdma 0000000000000000
[  211.693370][T13412] rdma_op ffff8881184ce1f0 conn xmit_rdma 0000000000000000
[  211.705644][T13411] netlink: 'syz.2.2071': attribute type 10 has an invalid length.
[  211.719488][T13411] bond0: (slave wlan1): Opening slave failed
[  211.901489][T13425] netlink: 'syz.1.2075': attribute type 11 has an invalid length.
[  211.904414][T13425] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2075'.
[  211.915322][T13421] netlink: 'syz.1.2075': attribute type 11 has an invalid length.
[  211.918120][T13421] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2075'.
[  211.935699][T13421] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2075'.
[  211.942071][T13421] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2075'.
[  212.016265][T13424] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  212.028711][T13424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2074'.
[  212.038388][T13424] siw: device registration error -23
[  212.105012][T13438] netlink: 'syz.1.2078': attribute type 10 has an invalid length.
[  212.110070][T13438] team0: Cannot enslave team device to itself
[  212.155552][T13440] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  212.807084][T13452] nbd: must specify an index to disconnect
[  212.909501][T13465] syzkaller1: entered promiscuous mode
[  212.911298][T13465] syzkaller1: entered allmulticast mode
[  213.117671][T13483] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2090'.
[  213.122041][T13483] 8021q: VLANs not supported on ipvlan1
[  214.450583][T13541] netlink: 'syz.1.2106': attribute type 1 has an invalid length.
[  214.656340][T13556] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  214.661397][T13556] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  214.666237][T13556] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  214.900947][T13570] openvswitch: netlink: Flow actions attr not present in new flow.
[  215.354962][T13601] netlink: 'syz.2.2124': attribute type 7 has an invalid length.
[  215.359835][T13601] : entered promiscuous mode
[  215.390185][T13603] : renamed from pim6reg1
[  215.607978][T13615] netlink: 'syz.2.2129': attribute type 13 has an invalid length.
[  215.611376][T13615] netlink: 'syz.2.2129': attribute type 17 has an invalid length.
[  215.619225][T13615] gretap0: left promiscuous mode
[  215.631787][T13615] ip_vti0: left allmulticast mode
[  215.646935][T13615] 8021q: adding VLAN 0 to HW filter on device bond0
[  215.650226][T13615] 8021q: adding VLAN 0 to HW filter on device team0
[  215.655558][T13615] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  215.756623][T13622] __nla_validate_parse: 11 callbacks suppressed
[  215.756644][T13622] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2131'.
[  215.787455][T13624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2132'.
[  215.828491][T13628] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2133'.
[  215.900197][T13633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2135'.
[  215.920180][T13635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2136'.
[  216.048492][T13648] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2141'.
[  216.160807][T13660] wg1 speed is unknown, defaulting to 1000
[  216.163237][T13660] lo speed is unknown, defaulting to 1000
[  216.213629][T13664] tls_set_device_offload_rx: netdev not found
[  216.469352][T13680] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  216.698815][T13695] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0
[  216.702076][T13694] IPVS: stopping backup sync thread 13695 ...
[  216.707183][T13694] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2155'.
[  217.032923][T13714] netlink: 'syz.1.2159': attribute type 10 has an invalid length.
[  217.036169][T13714] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2159'.
[  217.039759][T13714] dummy0: entered promiscuous mode
[  217.042328][T13714] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  217.171896][T13723] netlink: 150144 bytes leftover after parsing attributes in process `syz.1.2162'.
[  217.261464][T13726] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.2163'.
[  218.132103][T13774] syzkaller1: entered promiscuous mode
[  218.134718][T13774] syzkaller1: entered allmulticast mode
[  218.299747][T13784] tipc: Started in network mode
[  218.301520][T13784] tipc: Node identity ca496a836fd3, cluster identity 4711
[  218.304372][T13784] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  218.307954][T13784] syzkaller0: entered promiscuous mode
[  218.310473][T13784] syzkaller0: entered allmulticast mode
[  218.317287][T13784] tipc: Resetting bearer <eth:syzkaller0>
[  218.373115][T13783] tipc: Resetting bearer <eth:syzkaller0>
[  218.379803][T13783] tipc: Disabling bearer <eth:syzkaller0>
[  218.523269][T13804] openvswitch: netlink: Flow key attr not present in new flow.
[  220.978967][T13936] __nla_validate_parse: 11 callbacks suppressed
[  220.978979][T13936] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2232'.
[  221.046261][T13943] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2235'.
[  221.405841][T13957] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2239'.
[  221.421375][T13957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2239'.
[  221.638759][T13976] Bluetooth: MGMT ver 1.23
[  221.671620][T13981] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2248'.
[  221.900498][T14003] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2252'.
[  222.002038][T14018] syzkaller0: entered promiscuous mode
[  222.006240][T14018] syzkaller0: entered allmulticast mode
[  222.010238][T14017] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  222.022594][T14021] tipc: Resetting bearer <eth:syzkaller0>
[  222.031404][T14021] tipc: Disabling bearer <eth:syzkaller0>
[  222.938891][T14061] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2270'.
[  222.942146][T14061] 8021q: VLANs not supported on ipvlan1
[  222.946199][T14062] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2270'.
[  222.976861][T14067] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  222.980421][T14066] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  223.891617][T14091] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  223.956133][T14094] geneve3: entered promiscuous mode
[  223.959197][ T5734] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  223.962197][ T5734] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  223.966453][ T5734] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  223.967962][T14096] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2280'.
[  223.969149][ T5734] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  223.991014][T14096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2280'.
[  225.336912][T14180] nbd: must specify a device to reconfigure
[  225.528150][T14197] wg1 speed is unknown, defaulting to 1000
[  225.553113][T14198] syzkaller0: entered promiscuous mode
[  225.555726][T14198] syzkaller0: entered allmulticast mode
[  225.705169][T14199] ieee802154 phy0 wpan0: encryption failed: -22
[  226.069088][T14229] netlink: 'syz.1.2320': attribute type 12 has an invalid length.
[  227.342928][T14279] __nla_validate_parse: 8 callbacks suppressed
[  227.342942][T14279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2333'.
[  227.351369][T14279] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2333'.
[  227.356012][T14279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2333'.
[  227.359795][T14279] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2333'.
[  227.368737][T14279] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2333'.
[  227.426070][T14291] netlink: 'syz.0.2337': attribute type 8 has an invalid length.
[  227.550037][T14306] netlink: 'syz.0.2342': attribute type 10 has an invalid length.
[  227.553122][T14306] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2342'.
[  227.558153][T14306] veth0_vlan: left promiscuous mode
[  227.560892][T14306] veth0_vlan: entered promiscuous mode
[  227.563861][T14306] veth0_vlan: entered allmulticast mode
[  227.569215][T14306] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  227.620690][T14313] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0
[  227.643101][T14310] bond0: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  227.657289][T14310] bond0: (slave ipvlan5): The slave device specified does not support setting the MAC address
[  227.661207][T14310] bond0: (slave ipvlan5): Error -95 calling set_mac_address
[  227.831427][T14333] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2348'.
[  227.839493][T14333] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2348'.
[  227.878499][T14333] batman_adv: batadv0: Adding interface: ip6gretap1
[  227.881427][T14333] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.891880][T14333] batman_adv: batadv0: Interface activated: ip6gretap1
[  228.054018][T14347] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2353'.
[  228.057018][T14347] 8021q: VLANs not supported on ipvlan1
[  228.060517][T14347] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2353'.
[  228.098401][T14350] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  228.977098][T14369] netlink: 'syz.1.2362': attribute type 4 has an invalid length.
[  229.021014][T14370] wg1 speed is unknown, defaulting to 1000
[  229.295045][T14396] IPVS: length: 49 != 24
[  229.481777][T14411] netlink: 'syz.1.2375': attribute type 10 has an invalid length.
[  229.721033][T14437] bond0: (slave bond_slave_0): Releasing backup interface
[  229.725039][T14437] bond0: (slave bond_slave_1): Releasing backup interface
[  229.737121][T14437] batman_adv: batadv0: Removing interface: batadv_slave_0
[  229.740916][T14437] batman_adv: batadv0: Removing interface: batadv_slave_1
[  230.122455][T14496] lo speed is unknown, defaulting to 1000
[  230.125130][T14496] lo speed is unknown, defaulting to 1000
[  230.127370][T14496] lo speed is unknown, defaulting to 1000
[  230.132496][T14496] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  230.144462][T14496] lo speed is unknown, defaulting to 1000
[  230.146914][T14496] lo speed is unknown, defaulting to 1000
[  230.154234][T14496] lo speed is unknown, defaulting to 1000
[  230.222890][T14507] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  230.363753][T14513] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[  230.836836][T14540] geneve2: entered promiscuous mode
[  230.840376][ T5860] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  230.844011][ T5734] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  230.848312][ T5734] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  230.851140][ T5734] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  231.890454][T14581] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  231.894894][T14581] bond0: (slave ipvlan4): The slave device specified does not support setting the MAC address
[  231.899460][T14581] bond0: (slave ipvlan4): Error -95 calling set_mac_address
[  232.954120][   T60] block nbd1: Possible stuck request ffff88801d718000: control (read@0,1024B). Runtime 150 seconds
[  232.957510][   T60] block nbd1: Possible stuck request ffff88801d718200: control (read@1024,1024B). Runtime 150 seconds
[  232.960926][   T60] block nbd1: Possible stuck request ffff88801d718400: control (read@2048,1024B). Runtime 150 seconds
[  232.964732][   T60] block nbd1: Possible stuck request ffff88801d718600: control (read@3072,1024B). Runtime 150 seconds
[  233.215636][T14664] wg1 speed is unknown, defaulting to 1000
[  233.218755][T14664] lo speed is unknown, defaulting to 1000
[  233.707127][T14672] tipc: Resetting bearer <eth:syzkaller0>
[  234.075860][T14690] siw: device registration error -23
[  234.208261][T14701] __nla_validate_parse: 16 callbacks suppressed
[  234.208276][T14701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2455'.
[  234.474748][T14717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2459'.
[  234.531848][T14718] pim6reg: left allmulticast mode
[  234.586177][T14717] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2459'.
[  234.831413][T14723] wg1 speed is unknown, defaulting to 1000
[  234.834499][T14723] lo speed is unknown, defaulting to 1000
[  234.866123][ T5887] IPVS: starting estimator thread 0...
[  234.869873][T14723] ieee802154 phy0 wpan0: encryption failed: -22
[  234.955899][T14725] IPVS: using max 92 ests per chain, 220800 per kthread
[  235.047540][ T5860] IPVS: stop unused estimator thread 0...
[  235.679818][T14750] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2
[  235.852694][T14762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2472'.
[  235.877492][T14763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2470'.
[  235.961324][T14769] syzkaller1: entered promiscuous mode
[  235.964450][T14769] syzkaller1: entered allmulticast mode
[  235.969647][T14769] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2474'.
[  236.088598][T14771] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2475'.
[  236.267459][T14787] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  236.290807][T14791] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2481'.
[  236.295893][T14791] 8021q: VLANs not supported on ipvlan1
[  236.462475][T14797] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2483'.
[  236.574246][T14801] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2484'.
[  236.579603][T14801] xt_limit: Overflow, try lower: 604147548/4200216962
[  237.587096][T14839] bond0: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  237.591440][T14839] bond0: (slave ipvlan5): The slave device specified does not support setting the MAC address
[  237.597033][T14839] bond0: (slave ipvlan5): Error -95 calling set_mac_address
[  237.702167][T14847] netlink: 'syz.0.2498': attribute type 13 has an invalid length.
[  237.987973][T14874] 8021q: VLANs not supported on ipvlan1
[  238.241093][T14896] netlink: 'syz.1.2510': attribute type 1 has an invalid length.
[  238.257549][T14896] 8021q: adding VLAN 0 to HW filter on device bond3
[  238.289513][T14896] bond3: (slave bridge5): making interface the new active one
[  238.295416][T14896] bond3: (slave bridge5): Enslaving as an active interface with an up link
[  238.301068][T14901] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  238.305833][T14901] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  238.318669][T14896] bond3: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  238.442100][T14916] wg1 speed is unknown, defaulting to 1000
[  238.445728][T14916] lo speed is unknown, defaulting to 1000
[  238.490101][T14922] netlink: 'syz.1.2518': attribute type 1 has an invalid length.
[  238.510945][T14922] 8021q: adding VLAN 0 to HW filter on device bond4
[  238.522507][T14922] 8021q: adding VLAN 0 to HW filter on device bond4
[  238.525918][T14922] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  238.530723][T14922] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  239.527749][T14957] __nla_validate_parse: 9 callbacks suppressed
[  239.527763][T14957] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2528'.
[  239.534613][T14957] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2528'.
[  239.552902][T14956] wg1 speed is unknown, defaulting to 1000
[  239.556990][T14956] lo speed is unknown, defaulting to 1000
[  239.579009][T14962] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2530'.
[  239.583120][T14962] 8021q: VLANs not supported on xfrm0
[  239.892846][T14984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2535'.
[  239.900272][T14984] netlink: 87 bytes leftover after parsing attributes in process `syz.0.2535'.
[  239.985699][T14996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2540'.
[  239.994789][T14996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2540'.
[  239.998385][T14996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2540'.
[  240.003303][T14996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2540'.
[  240.007205][T14996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2540'.
[  240.377628][T15034] wg1 speed is unknown, defaulting to 1000
[  240.381088][T15034] lo speed is unknown, defaulting to 1000
[  240.487094][T15039] netlink: 'syz.0.2552': attribute type 4 has an invalid length.
[  240.642885][T15055] wg1 speed is unknown, defaulting to 1000
[  240.646729][T15055] lo speed is unknown, defaulting to 1000
[  240.684173][   T10] IPVS: starting estimator thread 0...
[  240.687968][T15055] ieee802154 phy0 wpan0: encryption failed: -22
[  240.793965][T15058] IPVS: using max 92 ests per chain, 220800 per kthread
[  240.894803][ T5860] IPVS: stop unused estimator thread 0...
[  241.850560][T15087] netlink: 'syz.0.2569': attribute type 1 has an invalid length.
[  241.853401][T15087] netlink: 'syz.0.2569': attribute type 3 has an invalid length.
[  241.970117][T15097] syzkaller1: entered promiscuous mode
[  241.972137][T15097] syzkaller1: entered allmulticast mode
[  242.599151][T15136] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  242.602405][T15136] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  242.656277][T15141] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  243.910481][T15206] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  243.913070][T15206] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  244.935449][T15241] __nla_validate_parse: 13 callbacks suppressed
[  244.935462][T15241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2619'.
[  244.940855][T15241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2619'.
[  245.031264][T15245] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2621'.
[  245.035403][T15245] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2621'.
[  245.238232][T15258] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  245.245849][T15258] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2625'.
[  245.392985][ T5860] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  245.460874][T15275] bond0: Error: Cannot enslave bond to itself.
[  245.546012][T15283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2633'.
[  245.550708][T15283] xfrm1: entered promiscuous mode
[  245.552320][T15283] xfrm1: entered allmulticast mode
[  246.480792][T15313] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2642'.
[  246.484368][T15313] 8021q: VLANs not supported on ipvlan1
[  246.490382][T15313] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2642'.
[  246.641900][T15324] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2644'.
[  246.646164][T15324] 8021q: VLANs not supported on ipvlan1
[  246.655692][T15326] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2644'.
[  246.664689][T15326] 8021q: VLANs not supported on ipvlan1
[  246.728091][T15333] 8021q: VLANs not supported on ipvlan1
[  246.749093][T15335] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  246.824551][T15341] wg1 speed is unknown, defaulting to 1000
[  246.827791][T15341] lo speed is unknown, defaulting to 1000
[  246.838730][T15343] netlink: 'syz.1.2652': attribute type 1 has an invalid length.
[  247.022867][T15359] syzkaller0: entered promiscuous mode
[  247.037476][T15359] syzkaller0: entered allmulticast mode
[  248.830401][T15435] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  248.836087][T15435] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  248.840304][T15435] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  248.850119][T15434] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  248.854233][T15434] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  248.857872][T15434] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  249.168504][T15452] netlink: 'syz.1.2683': attribute type 7 has an invalid length.
[  249.352622][T15470] wg1 speed is unknown, defaulting to 1000
[  249.375256][T15472] wg1 speed is unknown, defaulting to 1000
[  249.378257][T15472] lo speed is unknown, defaulting to 1000
[  249.393331][T15470] lo speed is unknown, defaulting to 1000
[  249.513610][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  249.524972][T15490] 8021q: VLANs not supported on ipvlan1
[  249.747569][T15521] bond0: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  249.752206][T15521] bond0: (slave ipvlan5): The slave device specified does not support setting the MAC address
[  249.757039][T15521] bond0: (slave ipvlan5): Error -95 calling set_mac_address
[  249.926825][T15543] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:0
[  249.946814][T15543] wg1 speed is unknown, defaulting to 1000
[  249.950091][T15543] lo speed is unknown, defaulting to 1000
[  250.063241][T15558] sctp: [Deprecated]: syz.0.2703 (pid 15558) Use of int in max_burst socket option.
[  250.063241][T15558] Use struct sctp_assoc_value instead
[  250.448163][T15613] syzkaller1: entered promiscuous mode
[  250.450019][T15613] syzkaller1: entered allmulticast mode
[  250.497029][T15621] netlink: 'syz.2.2715': attribute type 1 has an invalid length.
[  250.497582][T15620] netlink: 'syz.2.2715': attribute type 322 has an invalid length.
[  250.500056][T15621] netlink: 'syz.2.2715': attribute type 2 has an invalid length.
[  250.508438][T15620] syzkaller1: entered promiscuous mode
[  250.510568][T15620] syzkaller1: entered allmulticast mode
[  250.655399][ T5860] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1
[  250.687711][T15642] __nla_validate_parse: 13 callbacks suppressed
[  250.687724][T15642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2719'.
[  250.692764][T15642] netlink: 'syz.0.2719': attribute type 29 has an invalid length.
[  250.695735][T15642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2719'.
[  251.364910][T15655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2723'.
[  251.368821][T15656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2723'.
[  251.422607][T15657] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.2723'.
[  251.478287][T15667] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2726'.
[  251.490356][T15667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2726'.
[  251.566643][T15670] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2727'.
[  251.785233][T15700] batadv_slave_0: left promiscuous mode
[  251.788367][T15700] vlan0: left promiscuous mode
[  251.790257][T15700] macvlan0: left promiscuous mode
[  251.808077][T15700] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  251.814408][T15700] geneve2: left promiscuous mode
[  251.824710][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.828546][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.831825][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.836401][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.843943][T15705] netlink: 'syz.1.2736': attribute type 1 has an invalid length.
[  251.853778][T15705] netlink: 'syz.1.2736': attribute type 2 has an invalid length.
[  251.857373][T15705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2736'.
[  252.622318][T15737] siw: device registration error -23
[  252.661184][T15739] bond0: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  252.668928][T15739] bond0: (slave ipvlan5): The slave device specified does not support setting the MAC address
[  252.675515][T15739] bond0: (slave ipvlan5): Error -95 calling set_mac_address
[  252.816479][T15754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2750'.
[  252.922731][T15766] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  252.958629][T15766] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20003
[  253.082040][T15800] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  253.087290][T15800] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  253.092013][T15800] bond0: (slave ipvlan3): Error -95 calling set_mac_address
[  253.340947][T15814] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  255.356702][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  255.585164][T15896] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma?
[  255.618076][T15898] wg1 speed is unknown, defaulting to 1000
[  255.620852][T15898] lo speed is unknown, defaulting to 1000
[  255.651400][   T24] IPVS: starting estimator thread 0...
[  255.654391][T15898] ieee802154 phy0 wpan0: encryption failed: -22
[  255.744135][T15900] IPVS: using max 92 ests per chain, 220800 per kthread
[  255.817451][ T5860] IPVS: stop unused estimator thread 0...
[  255.943244][T15916] __nla_validate_parse: 2 callbacks suppressed
[  255.943258][T15916] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2800'.
[  255.949094][T15916] 8021q: VLANs not supported on ipvlan1
[  255.960541][T15916] macsec0: entered promiscuous mode
[  255.962681][T15916] macsec0: entered allmulticast mode
[  255.967135][T15916] netlink: 'syz.2.2800': attribute type 1 has an invalid length.
[  255.972283][T15916] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2800'.
[  256.030238][T15918] batadv_slave_1: entered promiscuous mode
[  256.048966][T15918] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2801'.
[  256.115694][T15917] batadv_slave_1: left promiscuous mode
[  256.544367][T15948] syzkaller1: entered promiscuous mode
[  256.546226][T15948] syzkaller1: entered allmulticast mode
[  256.687378][T15954] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2811'.
[  256.882540][T15972] siw: device registration error -23
[  256.886371][T15972] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2816'.
[  256.890724][T15972] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2816'.
[  257.047204][T15980] wg1 speed is unknown, defaulting to 1000
[  257.050407][T15980] lo speed is unknown, defaulting to 1000
[  257.319531][T16003] wg1 speed is unknown, defaulting to 1000
[  257.322877][T16003] lo speed is unknown, defaulting to 1000
[  257.426235][T16003] sctp: [Deprecated]: syz.1.2824 (pid 16003) Use of struct sctp_assoc_value in delayed_ack socket option.
[  257.426235][T16003] Use struct sctp_sack_info instead
[  257.432259][T16003] sctp: [Deprecated]: syz.1.2824 (pid 16003) Use of struct sctp_assoc_value in delayed_ack socket option.
[  257.432259][T16003] Use struct sctp_sack_info instead
[  257.592661][T16009] tipc: Resetting bearer <eth:syzkaller0>
[  257.599279][T16009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2826'.
[  257.602305][T16009] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2826'.
[  257.700259][T16024] dummy0: left promiscuous mode
[  257.709070][T16024] batadv0: left promiscuous mode
[  257.710943][T16024] vxcan0: left promiscuous mode
[  257.712603][T16024] vxcan1: left promiscuous mode
[  257.714654][T16024] veth0: left promiscuous mode
[  257.716297][T16024] veth1: left promiscuous mode
[  257.717953][T16024] wg0: left promiscuous mode
[  257.719552][T16024] wg1: left promiscuous mode
[  257.721314][T16024] wg2: left promiscuous mode
[  257.723226][T16024] veth0_to_bridge: left promiscuous mode
[  257.727107][T16024] bridge_slave_0: left promiscuous mode
[  257.730603][T16024] veth1_to_bridge: left promiscuous mode
[  257.733707][T16024] bridge_slave_1: left promiscuous mode
[  257.736915][T16024] veth0_to_bond: left promiscuous mode
[  257.739648][T16024] bond_slave_0: left promiscuous mode
[  257.742701][T16024] veth1_to_bond: left promiscuous mode
[  257.745598][T16024] bond_slave_1: left promiscuous mode
[  257.747583][T16024] veth0_to_team: left promiscuous mode
[  257.749679][T16024] team_slave_0: left promiscuous mode
[  257.751582][T16024] veth1_to_team: left promiscuous mode
[  257.753851][T16024] team_slave_1: left promiscuous mode
[  257.755941][T16024] veth0_to_batadv: left promiscuous mode
[  257.758023][T16024] batadv_slave_0: left promiscuous mode
[  257.760083][T16024] veth1_to_batadv: left promiscuous mode
[  257.762065][T16024] batadv_slave_1: left promiscuous mode
[  257.765190][T16024] xfrm0: left promiscuous mode
[  257.766977][T16024] veth0_to_hsr: left promiscuous mode
[  257.769012][T16024] hsr_slave_0: left promiscuous mode
[  257.770975][T16024] veth1_to_hsr: left promiscuous mode
[  257.772918][T16024] hsr_slave_1: left promiscuous mode
[  257.774908][T16024] veth1_virt_wifi: left promiscuous mode
[  257.776761][T16024] veth0_virt_wifi: left promiscuous mode
[  257.778684][T16024] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  257.781128][T16024] vlan0: left promiscuous mode
[  257.782879][T16024] vlan1: left promiscuous mode
[  257.785178][T16024] macvlan0: left promiscuous mode
[  257.786767][T16024] macvlan1: left promiscuous mode
[  257.788404][T16024] ipvlan0: left promiscuous mode
[  257.790207][T16024] ipvlan1: left promiscuous mode
[  257.792173][T16024] macvtap0: left promiscuous mode
[  257.794023][T16024] macsec0: left promiscuous mode
[  257.795736][T16024] geneve0: left promiscuous mode
[  257.797535][T16024] geneve1: left promiscuous mode
[  257.799339][T16024] netdevsim netdevsim1 netdevsim1: left promiscuous mode
[  257.801808][T16024] netdevsim netdevsim1 netdevsim2: left promiscuous mode
[  257.804213][T16024] netdevsim netdevsim1 netdevsim3: left promiscuous mode
[  257.806435][T16024] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  257.808549][T16024] macsec1: left promiscuous mode
[  257.810249][T16024] vxlan0: left promiscuous mode
[  257.812000][T16024] ip6erspan0: left promiscuous mode
[  257.813958][T16024] gre1: left promiscuous mode
[  257.815651][T16024] B: left promiscuous mode
[  257.817246][T16024] wireguard0: left promiscuous mode
[  257.819061][T16024] bridge1: left promiscuous mode
[  257.820783][T16024] gre2: left promiscuous mode
[  257.822467][T16024] bond1: left promiscuous mode
[  257.824241][T16024] vlan2: left promiscuous mode
[  257.825919][T16024] team0: left promiscuous mode
[  257.827679][T16024] bridge0: left promiscuous mode
[  257.829410][T16024] gtp0: left promiscuous mode
[  257.830952][T16024] syztnl2: left promiscuous mode
[  257.832732][T16024] bridge2: left promiscuous mode
[  257.834545][T16024] bond2: left promiscuous mode
[  257.836308][T16024] geneve2: left promiscuous mode
[  257.837985][T16024] bridge3: left promiscuous mode
[  257.839699][T16024] sit1: left promiscuous mode
[  257.841870][T16024] geneve3: left promiscuous mode
[  257.847732][T16024] xfrm1: left promiscuous mode
[  257.849477][T16024] xfrm1: left allmulticast mode
[  257.851269][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  257.856486][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  257.876629][T16028] 8021q: adding VLAN 0 to HW filter on device bond0
[  257.881589][T16028] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  257.887432][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  257.893292][T16032] IPVS: length: 24 != 103129547544
[  257.894830][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  257.930518][T16035] wg1 speed is unknown, defaulting to 1000
[  257.932943][T16035] lo speed is unknown, defaulting to 1000
[  258.615147][T16075] netlink: 'syz.1.2842': attribute type 16 has an invalid length.
[  258.618871][T16075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2842'.
[  258.622567][T16075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2842'.
[  258.902180][T16092] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  258.907070][T16091] tipc: Disabling bearer <eth:syzkaller0>
[  258.970012][T16094] netlink: 'syz.2.2851': attribute type 1 has an invalid length.
[  258.978982][T16094] bond1: entered promiscuous mode
[  258.980814][T16094] 8021q: adding VLAN 0 to HW filter on device bond1
[  258.991155][T16094] bond1: (slave bridge10): making interface the new active one
[  258.994455][T16094] bridge10: entered promiscuous mode
[  258.997247][T16094] bond1: (slave bridge10): Enslaving as an active interface with an up link
[  259.650871][T16119] openvswitch: netlink: Missing key (keys=40, expected=80)
[  260.787320][T16179] netlink: 'syz.0.2880': attribute type 1 has an invalid length.
[  261.209342][T16206] __nla_validate_parse: 6 callbacks suppressed
[  261.209366][T16206] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2888'.
[  261.676317][T16208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2889'.
[  261.727042][T16210] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2890'.
[  261.822001][T16219] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2892'.
[  261.826443][T16230] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2892'.
[  261.849693][T16226] batadv_slave_1: entered promiscuous mode
[  261.852281][T16227] batadv_slave_1: left promiscuous mode
[  261.932898][T16239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2896'.
[  261.957023][T16239] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2896'.
[  261.961781][T16239] 8021q: adding VLAN 0 to HW filter on device bond2
[  261.966523][T16239] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2896'.
[  262.002671][T16245] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2898'.
[  262.055357][T16251] syzkaller1: entered promiscuous mode
[  262.057386][T16251] syzkaller1: entered allmulticast mode
[  263.046213][   T60] block nbd1: Possible stuck request ffff88801d718000: control (read@0,1024B). Runtime 180 seconds
[  263.051841][   T60] block nbd1: Possible stuck request ffff88801d718200: control (read@1024,1024B). Runtime 180 seconds
[  263.056805][   T60] block nbd1: Possible stuck request ffff88801d718400: control (read@2048,1024B). Runtime 180 seconds
[  263.060272][   T60] block nbd1: Possible stuck request ffff88801d718600: control (read@3072,1024B). Runtime 180 seconds
[  263.466173][T16286] ieee802154 phy0 wpan0: encryption failed: -22
[  263.947671][T16301] wg1 speed is unknown, defaulting to 1000
[  263.950889][T16301] lo speed is unknown, defaulting to 1000
[  263.996003][   T10] IPVS: starting estimator thread 0...
[  264.002976][T16301] syzkaller1: entered allmulticast mode
[  264.007170][T16301] ieee802154 phy0 wpan0: encryption failed: -22
[  264.094333][T16305] IPVS: using max 92 ests per chain, 220800 per kthread
[  264.217355][ T5734] IPVS: stop unused estimator thread 0...
[  264.297373][T16334] netlink: 'syz.1.2926': attribute type 1 has an invalid length.
[  264.300448][T16334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2926'.
[  264.546200][T16361] batadv_slave_0: entered promiscuous mode
[  264.891191][T16376] netlink: 'syz.1.2937': attribute type 12 has an invalid length.
[  265.015445][T16376] bridge0: port 1(batadv1) entered blocking state
[  265.018045][T16376] bridge0: port 1(batadv1) entered disabled state
[  265.022110][T16376] batadv1: entered allmulticast mode
[  265.028361][T16376] batadv1: entered promiscuous mode
[  265.523639][   T13] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  265.527117][   T13] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  266.508278][T16452] netlink: 'syz.2.2957': attribute type 1 has an invalid length.
[  266.511456][T16452] __nla_validate_parse: 7 callbacks suppressed
[  266.511471][T16452] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2957'.
[  266.921397][T16463] netlink: 'syz.0.2960': attribute type 3 has an invalid length.
[  267.708504][T16466] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  267.711180][T16471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2961'.
[  267.717811][T16471] bridge0: port 1(batadv1) entered blocking state
[  267.719989][T16471] bridge0: port 1(batadv1) entered disabled state
[  267.722381][T16471] batadv1: entered allmulticast mode
[  267.726101][T16471] batadv1: entered promiscuous mode
[  268.224241][   T13] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  268.227834][   T13] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  269.565018][T16518] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  269.569850][T16518] bond0: (slave ipvlan4): The slave device specified does not support setting the MAC address
[  269.574349][T16518] bond0: (slave ipvlan4): Error -95 calling set_mac_address
[  269.632096][T16518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2978'.
[  269.662615][T16522] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2979'.
[  269.692909][T16522] syzkaller1: entered promiscuous mode
[  269.695759][T16522] syzkaller1: entered allmulticast mode
[  269.797163][T16530] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2980'.
[  270.269995][T16548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2984'.
[  270.374969][T16560] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20003
[  270.827555][T16572] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  270.831780][T16572] bond0: (slave ipvlan4): The slave device specified does not support setting the MAC address
[  270.837180][T16572] bond0: (slave ipvlan4): Error -95 calling set_mac_address
[  271.164232][T16598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3003'.
[  271.167257][T16598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3003'.
[  271.170146][T16598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3003'.
[  271.173029][T16598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3003'.
[  271.465833][   T33] audit: type=1800 audit(1756388900.616:8): pid=16608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3006" name="memory.events" dev="tmpfs" ino=5261 res=0 errno=0
[  271.510054][T16610] IPVS: stopping backup sync thread 11263 ...
[  271.557514][T16615] __nla_validate_parse: 1 callbacks suppressed
[  271.557535][T16615] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3009'.
[  271.564210][T16615] 8021q: VLANs not supported on ipvlan1
[  272.257230][T16657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3020'.
[  272.260789][T16657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3020'.
[  272.270926][ T5734] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  272.272506][T16657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3020'.
[  272.275637][ T5734] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  272.278848][T16657] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3020'.
[  272.281276][ T5734] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  272.281302][ T5734] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  272.413106][T16664] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3023'.
[  272.417062][T16664] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3023'.
[  272.922104][T16724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3040'.
[  272.984244][T16735] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  272.988769][T16735] bond0: (slave ipvlan4): The slave device specified does not support setting the MAC address
[  273.004696][T16735] bond0: (slave ipvlan4): Error -95 calling set_mac_address
[  273.016446][T16734] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  273.022164][T16734] bond0: (slave ipvlan4): The slave device specified does not support setting the MAC address
[  273.029341][T16734] bond0: (slave ipvlan4): Error -95 calling set_mac_address
[  273.234968][T16747] sctp: [Deprecated]: syz.1.3045 (pid 16747) Use of int in maxseg socket option.
[  273.234968][T16747] Use struct sctp_assoc_value instead
[  274.032052][T16781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3054'.
[  274.078782][T16783] netlink: 'syz.1.3055': attribute type 10 has an invalid length.
[  274.081682][T16783] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3055'.
[  274.085311][T16783] dummy0: entered promiscuous mode
[  274.087101][T16783] dummy0: entered allmulticast mode
[  274.090065][T16783] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  274.172843][T16789] IPVS: set_ctl: invalid protocol: 47 100.1.1.2:20003
[  274.271694][T16800] netlink: 'syz.2.3062': attribute type 21 has an invalid length.
[  274.324304][T16805] openvswitch: netlink: IPv4 frag type 255 is out of range max 2
[  274.626485][T16857] netlink: 'syz.0.3078': attribute type 10 has an invalid length.
[  274.633181][T16857] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  274.740785][T16875] netlink: 'syz.0.3086': attribute type 13 has an invalid length.
[  274.785569][T16879] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  275.595006][T16897] IPVS: length: 49 != 24
[  275.709024][T16920] netlink: 'syz.2.3100': attribute type 1 has an invalid length.
[  275.710852][T16918] wg1 speed is unknown, defaulting to 1000
[  275.714811][T16918] lo speed is unknown, defaulting to 1000
[  275.735994][T16922] netlink: 'syz.2.3101': attribute type 5 has an invalid length.
[  275.748335][T16922] geneve4: entered promiscuous mode
[  275.750660][T16922] geneve4: entered allmulticast mode
[  275.755251][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  275.761986][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  275.774430][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  275.778786][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  276.076905][T16958] netlink: 'syz.1.3111': attribute type 21 has an invalid length.
[  276.080042][T16958] netlink: 'syz.1.3111': attribute type 22 has an invalid length.
[  276.083256][T16958] netlink: 'syz.1.3111': attribute type 23 has an invalid length.
[  276.088049][T16958] netlink: 'syz.1.3111': attribute type 25 has an invalid length.
[  276.134723][T16964] IPVS: length: 62 != 24
[  276.408143][T16994] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  276.413146][T16994] bond0: (slave ipvlan4): The slave device specified does not support setting the MAC address
[  276.417815][T16994] bond0: (slave ipvlan4): Error -95 calling set_mac_address
[  276.737671][T17000] wg1 speed is unknown, defaulting to 1000
[  276.740080][T17000] lo speed is unknown, defaulting to 1000
[  277.177344][T17027] __nla_validate_parse: 12 callbacks suppressed
[  277.177361][T17027] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3132'.
[  277.414991][T17052] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  277.420559][T17052] bond0: (slave ipvlan4): The slave device specified does not support setting the MAC address
[  277.435593][T17052] bond0: (slave ipvlan4): Error -95 calling set_mac_address
[  277.443022][T17057] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  277.447985][T17057] bond0: (slave ipvlan4): The slave device specified does not support setting the MAC address
[  277.451543][T17057] bond0: (slave ipvlan4): Error -95 calling set_mac_address
[  277.629443][T17081] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  277.638539][T17081] bond0: (slave ipvlan4): The slave device specified does not support setting the MAC address
[  277.642715][T17081] bond0: (slave ipvlan4): Error -95 calling set_mac_address
[  277.666450][T17083] batadv_slave_1: entered promiscuous mode
[  277.678271][T17087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3145'.
[  277.681316][T17087] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3145'.
[  277.685097][T17087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3145'.
[  277.688110][T17087] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3145'.
[  277.691054][T17087] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3145'.
[  277.695871][T17083] batadv_slave_1: left promiscuous mode
[  278.132373][T17112] openvswitch: netlink: Missing valid actions attribute.
[  278.144203][T17112] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  278.152590][T17113] openvswitch: netlink: Missing valid actions attribute.
[  278.155403][T17113] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  278.296350][T17126] wg1 speed is unknown, defaulting to 1000
[  278.299141][T17126] lo speed is unknown, defaulting to 1000
[  278.309738][T17128] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3158'.
[  278.334509][T17129] netlink: 360 bytes leftover after parsing attributes in process `syz.0.3157'.
[  278.357347][T17129] wg1 speed is unknown, defaulting to 1000
[  278.363337][T17129] lo speed is unknown, defaulting to 1000
[  278.676600][T17162] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  278.681353][T17162] bond0: (slave ipvlan4): The slave device specified does not support setting the MAC address
[  278.686170][T17162] bond0: (slave ipvlan4): Error -95 calling set_mac_address
[  278.719860][T17166] dummy0: left promiscuous mode
[  278.721891][T17166] dummy0: left allmulticast mode
[  278.728855][T17166] batadv_slave_0: left promiscuous mode
[  278.738500][ T5734] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  278.746730][ T5734] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  278.752587][ T5734] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  278.757433][ T5734] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  278.799485][T17176] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  279.001979][T17200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3178'.
[  279.006298][T17200] smc: net device bond0 applied user defined pnetid SYZ
[  279.158688][T17217] netlink: 'syz.1.3182': attribute type 11 has an invalid length.
[  279.163295][T17218] netlink: 'syz.1.3182': attribute type 11 has an invalid length.
[  279.216202][T17224] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3184'.
[  279.384500][T17234] netlink: 'syz.1.3188': attribute type 9 has an invalid length.
[  279.387246][T17232] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  279.390487][T17232] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  279.395457][T17232] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  279.398252][T17232] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  279.897766][T17268] netlink: 'syz.2.3194': attribute type 1 has an invalid length.
[  279.916721][T17268] 8021q: adding VLAN 0 to HW filter on device bond3
[  279.916788][T17271] openvswitch: netlink: IPv4 tun info is not correct
[  280.420471][T17314] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  280.881726][T17382] IPVS: length: 86 != 8
[  280.892476][T17382] mac80211_hwsim hwsim5 ;: renamed from wlan0
[  280.979926][T17386] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  280.984539][T17388] syzkaller0: entered promiscuous mode
[  280.986711][T17388] syzkaller0: entered allmulticast mode
[  280.989395][T17387] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  281.001385][T17389] tipc: Resetting bearer <eth:syzkaller0>
[  281.007256][T17389] tipc: Disabling bearer <eth:syzkaller0>
[  281.521981][T17415] wg1 speed is unknown, defaulting to 1000
[  281.524699][T17415] lo speed is unknown, defaulting to 1000
[  281.612185][T17432] 8021q: VLANs not supported on ipvlan1
[  281.770915][T17452] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  281.783141][T17452] xfrm2: entered promiscuous mode
[  281.785762][T17452] xfrm2: entered allmulticast mode
[  282.698813][T17479] bond0: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  282.702880][T17479] bond0: (slave ipvlan5): The slave device specified does not support setting the MAC address
[  282.708436][T17479] bond0: (slave ipvlan5): Error -95 calling set_mac_address
[  282.785154][T17491] __nla_validate_parse: 14 callbacks suppressed
[  282.785170][T17491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3255'.
[  282.993839][T17519] wg1 speed is unknown, defaulting to 1000
[  282.996213][T17519] lo speed is unknown, defaulting to 1000
[  283.026412][T17519] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3263'.
[  283.046595][T17523] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3264'.
[  283.140204][T17533] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20003
[  283.380779][T17556] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  283.417383][T17561] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma?
[  283.817377][   T33] audit: type=1107 audit(1756388912.966:9): pid=17601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  283.899848][T17622] netlink: 'syz.0.3290': attribute type 1 has an invalid length.
[  283.981911][T17626] nbd: must specify a device to reconfigure
[  284.067858][T17642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3292'.
[  284.114330][T17647] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3296'.
[  284.121255][T17647] batadv2: entered promiscuous mode
[  284.122994][T17647] batadv2: entered allmulticast mode
[  284.221944][T17647] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3296'.
[  284.455572][T17664] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  284.544320][T17675] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3306'.
[  284.548162][T17675] 8021q: VLANs not supported on ipvlan1
[  284.608788][T17679] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  284.612732][T17679] bond0: (slave ipvlan4): The slave device specified does not support setting the MAC address
[  284.618033][T17679] bond0: (slave ipvlan4): Error -95 calling set_mac_address
[  284.720022][T17699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3313'.
[  284.812486][T17704] syzkaller0: left promiscuous mode
[  284.815141][T17704] syzkaller0: left allmulticast mode
[  284.857317][T17705] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3314'.
[  284.866296][T17705] macsec0: left promiscuous mode
[  284.868133][T17705] macsec0: left allmulticast mode
[  284.869895][T17705] bond1: left promiscuous mode
[  284.871679][T17705] bridge10: left promiscuous mode
[  284.875205][T17705] geneve4: left promiscuous mode
[  284.877055][T17705] geneve4: left allmulticast mode
[  284.884932][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  284.887519][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  284.890495][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  284.894035][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  284.904233][T17705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3314'.
[  286.140364][T17792] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  286.143284][T17792] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  286.629459][T17800] wg1 speed is unknown, defaulting to 1000
[  286.631964][T17800] lo speed is unknown, defaulting to 1000
[  286.664487][   T10] IPVS: starting estimator thread 0...
[  286.667376][T17800] ieee802154 phy0 wpan0: encryption failed: -22
[  286.760190][T17812] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  286.774367][T17802] IPVS: using max 61 ests per chain, 146400 per kthread
[  286.873032][ T5860] IPVS: stop unused estimator thread 0...
[  286.959992][T17831] syzkaller1: entered allmulticast mode
[  287.111994][T17844] wg1 speed is unknown, defaulting to 1000
[  287.115689][T17844] lo speed is unknown, defaulting to 1000
[  287.202247][T17860] syzkaller1: entered allmulticast mode
[  287.300408][T17864] bridge: RTM_NEWNEIGH with invalid ether address
[  287.653062][T17894] netlink: 'syz.0.3365': attribute type 4 has an invalid length.
[  287.967148][T17903] vxcan1: entered allmulticast mode
[  287.969237][T17903] vxcan1: left allmulticast mode
[  288.045590][T17903] raw_sendmsg: syz.1.3369 forgot to set AF_INET. Fix it!
[  288.560959][T17923] ip_vti0: entered promiscuous mode
[  288.625777][T17928] __nla_validate_parse: 4 callbacks suppressed
[  288.625794][T17928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3378'.
[  288.634351][T17928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3378'.
[  288.656313][T17931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3379'.
[  288.663886][T17931] ip_vti0: left promiscuous mode
[  288.666933][T17931] batadv_slave_0: left promiscuous mode
[  288.669819][T17931] veth0_vlan: left allmulticast mode
[  288.677662][T17931] tipc: Resetting bearer <eth:syzkaller0>
[  288.683222][T17931] bond4: left promiscuous mode
[  288.686023][T17931] ip6gre1: left promiscuous mode
[  288.688256][T17931] ip6erspan0: left promiscuous mode
[  288.691972][T17931] xfrm2: left promiscuous mode
[  288.698565][T17931] xfrm2: left allmulticast mode
[  288.702338][T17933] vlan0: entered promiscuous mode
[  288.708695][T17933] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  288.786975][T17943] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3385'.
[  288.790117][T17943] 8021q: VLANs not supported on ipvlan1
[  288.849953][T17948] pim6reg1: entered promiscuous mode
[  288.851688][T17948] pim6reg1: entered allmulticast mode
[  288.909495][T17951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3388'.
[  288.931972][T17952] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3387'.
[  288.953334][T17952] bond6 (unregistering): Released all slaves
[  289.208874][T17969] syzkaller1: entered allmulticast mode
[  289.214890][T17968] syzkaller1: left allmulticast mode
[  289.662399][T17994] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3400'.
[  289.668573][T17994] 8021q: VLANs not supported on ipvlan1
[  289.871720][T18010] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20003
[  290.488252][T18024] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3410'.
[  290.492102][T18024] 8021q: VLANs not supported on ipvlan1
[  290.937359][T18052] netlink: 'syz.2.3418': attribute type 1 has an invalid length.
[  290.937391][T18051] netlink: 'syz.2.3418': attribute type 1 has an invalid length.
[  290.940730][T18052] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3418'.
[  290.949067][T18053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3419'.
[  291.287868][T18080] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  291.290795][T18080] syzkaller0: entered promiscuous mode
[  291.292561][T18080] syzkaller0: entered allmulticast mode
[  291.296448][T18080] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  291.319158][T18084] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  291.323224][T18084] bond0: (slave ipvlan4): The slave device specified does not support setting the MAC address
[  291.327127][T18084] bond0: (slave ipvlan4): Error -95 calling set_mac_address
[  291.446648][T18102] wg1 speed is unknown, defaulting to 1000
[  291.449711][T18102] lo speed is unknown, defaulting to 1000
[  291.538423][T18108] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  291.541306][T18108] syzkaller0: entered promiscuous mode
[  291.543291][T18108] syzkaller0: entered allmulticast mode
[  291.557709][T18108] tipc: Resetting bearer <eth:syzkaller0>
[  291.562104][T18107] tipc: Resetting bearer <eth:syzkaller0>
[  291.566254][T18107] tipc: Disabling bearer <eth:syzkaller0>
[  291.837840][T18125] only policy match revision 0 supported
[  291.837855][T18125] unable to load match
[  291.891398][T18130] netlink: 'syz.1.3443': attribute type 1 has an invalid length.
[  291.962438][T18137] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20000
[  292.241296][T18147] wg1 speed is unknown, defaulting to 1000
[  292.246494][T18147] lo speed is unknown, defaulting to 1000
[  292.401342][T18162] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  292.590510][T18176] IPVS: length: 49 != 24
[  292.750313][T18192] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 4, id = 0
[  292.769470][T18197] 8021q: VLANs not supported on ipvlan1
[  292.841158][T18204] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  292.849008][T18204] bond0: (slave ipvlan4): The slave device specified does not support setting the MAC address
[  292.855712][T18204] bond0: (slave ipvlan4): Error -95 calling set_mac_address
[  292.978982][T18218] netlink: 'syz.2.3465': attribute type 1 has an invalid length.
[  293.116403][   T60] block nbd1: Possible stuck request ffff88801d718000: control (read@0,1024B). Runtime 210 seconds
[  293.120089][   T60] block nbd1: Possible stuck request ffff88801d718200: control (read@1024,1024B). Runtime 210 seconds
[  293.124490][   T60] block nbd1: Possible stuck request ffff88801d718400: control (read@2048,1024B). Runtime 210 seconds
[  293.128212][   T60] block nbd1: Possible stuck request ffff88801d718600: control (read@3072,1024B). Runtime 210 seconds
[  293.298051][T18270] netlink: 'syz.0.3481': attribute type 1 has an invalid length.
[  294.110077][T18321] netlink: 'syz.0.3495': attribute type 21 has an invalid length.
[  294.112564][T18321] __nla_validate_parse: 53 callbacks suppressed
[  294.112573][T18321] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3495'.
[  294.268488][T18348] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3502'.
[  294.271639][T18348] 8021q: VLANs not supported on ipvlan1
[  294.360745][T18356] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3504'.
[  294.467011][T18361] wg1 speed is unknown, defaulting to 1000
[  294.469901][T18361] lo speed is unknown, defaulting to 1000
[  294.500576][T18361] netlink: 'syz.0.3506': attribute type 5 has an invalid length.
[  294.504197][   T24] IPVS: starting estimator thread 0...
[  294.506771][T18361] ieee802154 phy0 wpan0: encryption failed: -22
[  294.593566][T18363] IPVS: using max 72 ests per chain, 172800 per kthread
[  294.757674][ T5860] IPVS: stop unused estimator thread 0...
[  295.190614][T18379] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3512'.
[  295.555141][T18405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3518'.
[  295.562415][ T5860] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  295.566101][T18405] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3518'.
[  295.569019][ T5860] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  295.573268][ T5860] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  295.576694][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  295.820220][T18407] sctp: [Deprecated]: syz.2.3519 (pid 18407) Use of int in max_burst socket option.
[  295.820220][T18407] Use struct sctp_assoc_value instead
[  295.955641][T18420] netlink: 'syz.2.3523': attribute type 3 has an invalid length.
[  295.960920][T18420] ip6_vti0: entered allmulticast mode
[  295.968948][T18420] siw: device registration error -23
[  295.978726][T18422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3524'.
[  295.981872][T18422] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  295.987765][T18420] 8021q: adding VLAN 0 to HW filter on device bond0
[  295.990417][T18422] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  295.991810][T18420] 8021q: adding VLAN 0 to HW filter on device team0
[  296.000797][T18420] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  296.012141][T18419] ip6_vti0: left allmulticast mode
[  296.017010][T18422] wg1 speed is unknown, defaulting to 1000
[  296.019604][T18422] lo speed is unknown, defaulting to 1000
[  296.040746][T18424] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3525'.
[  296.047798][T18424] 8021q: VLANs not supported on ipvlan1
[  296.161425][T18447] siw: device registration error -23
[  296.265188][T18462] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3535'.
[  296.269278][T18462] 8021q: VLANs not supported on ipvlan1
[  296.297119][T18466] dvmrp0: left allmulticast mode
[  296.418596][T18480] wg1 speed is unknown, defaulting to 1000
[  296.420865][T18480] lo speed is unknown, defaulting to 1000
[  296.466491][T18487] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3542'.
[  296.828034][T18521] netlink: 'syz.1.3553': attribute type 21 has an invalid length.
[  296.842681][T18527] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  297.048192][T18543] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  297.567795][T18562] netlink: 'syz.2.3565': attribute type 39 has an invalid length.
[  297.900470][T18586] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  297.910314][T18586] tun0: tun_chr_ioctl cmd 35111
[  298.257368][T18623] netlink: 'syz.0.3585': attribute type 18 has an invalid length.
[  298.268926][T18625] netlink: 'syz.0.3585': attribute type 18 has an invalid length.
[  298.338589][T18634] wg1 speed is unknown, defaulting to 1000
[  298.341418][T18634] lo speed is unknown, defaulting to 1000
[  298.944632][T18674] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  299.383180][T18698] bond0: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  299.392995][T18698] bond0: (slave ipvlan5): The slave device specified does not support setting the MAC address
[  299.401571][T18698] bond0: (slave ipvlan5): Error -95 calling set_mac_address
[  299.436121][T18704] openvswitch: netlink: Missing key (keys=40, expected=80)
[  300.028514][T18733] __nla_validate_parse: 12 callbacks suppressed
[  300.028524][T18733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3616'.
[  300.040002][T18733] netlink: 'syz.1.3616': attribute type 2 has an invalid length.
[  300.077776][T18739] netlink: 'syz.0.3618': attribute type 1 has an invalid length.
[  300.302452][T18765] wg1 speed is unknown, defaulting to 1000
[  300.306180][T18765] lo speed is unknown, defaulting to 1000
[  300.335463][T18767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3628'.
[  300.426482][T18783] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3632'.
[  300.465057][T18787] gretap2: entered promiscuous mode
[  300.470168][T18787] netlink: 'syz.0.3634': attribute type 7 has an invalid length.
[  300.506209][T18797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3635'.
[  300.508466][T18787] wg1 speed is unknown, defaulting to 1000
[  300.517046][T18787] lo speed is unknown, defaulting to 1000
[  300.541310][T18802] siw: device registration error -23
[  300.709329][T18818] tipc: Resetting bearer <eth:syzkaller0>
[  301.268021][T18837] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3648'.
[  301.271403][T18837] 8021q: VLANs not supported on ipvlan1
[  301.299069][T18839] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3649'.
[  301.340845][T18841] wg1 speed is unknown, defaulting to 1000
[  301.343230][T18841] lo speed is unknown, defaulting to 1000
[  301.375477][ T5908] IPVS: starting estimator thread 0...
[  301.378753][T18841] ieee802154 phy0 wpan0: encryption failed: -22
[  301.463787][T18843] IPVS: using max 92 ests per chain, 220800 per kthread
[  301.705215][   T13] IPVS: stop unused estimator thread 0...
[  301.772354][T18887] vlan0: left promiscuous mode
[  301.781805][   T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  301.785920][   T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  301.788867][   T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  301.789130][T18891] netlink: 'syz.0.3662': attribute type 1 has an invalid length.
[  301.795365][   T13] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  301.806014][T18891] 8021q: adding VLAN 0 to HW filter on device bond7
[  301.818974][T18891] bond7: (slave geneve3): making interface the new active one
[  301.825042][T18891] bond7: (slave geneve3): Enslaving as an active interface with an up link
[  301.827957][ T5734] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  301.830673][ T5734] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  301.834949][ T5734] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  301.838401][ T5734] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  302.708241][T18923] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3673'.
[  302.718862][T18923] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3673'.
[  302.728772][T18923] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3673'.
[  302.745299][T18928] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  302.749267][T18928] bond0: (slave ipvlan4): The slave device specified does not support setting the MAC address
[  302.752578][T18928] bond0: (slave ipvlan4): Error -95 calling set_mac_address
[  302.820102][T18937] batadv_slave_0: entered promiscuous mode
[  302.822091][T18937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3679'.
[  302.900120][T18948] netlink: 'syz.2.3681': attribute type 1 has an invalid length.
[  302.906608][T18948] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  302.933160][T18950] 8021q: VLANs not supported on ipvlan1
[  302.975249][T18950] netlink: 'syz.2.3682': attribute type 5 has an invalid length.
[  302.975268][T18951] netlink: 'syz.2.3682': attribute type 5 has an invalid length.
[  302.979598][T18950] geneve5: entered promiscuous mode
[  302.982534][T18950] geneve5: entered allmulticast mode
[  302.986515][ T5860] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  302.989165][ T5860] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  302.992545][ T5860] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  302.996607][ T5860] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  303.017955][T18962] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  303.021326][T18962] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  303.224214][T18999] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  303.306831][T19010] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20000
[  303.372394][T19013] wg1 speed is unknown, defaulting to 1000
[  303.375067][T19013] lo speed is unknown, defaulting to 1000
[  304.118727][T19036] wg1 speed is unknown, defaulting to 1000
[  304.121240][T19036] lo speed is unknown, defaulting to 1000
[  304.364214][T19050] netem: incorrect ge model size
[  304.366669][T19050] netem: change failed
[  304.496122][T19061] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  304.501810][T19061] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  305.293809][T19079] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  305.309202][T19079] syzkaller0: entered promiscuous mode
[  305.322872][T19079] syzkaller0: entered allmulticast mode
[  305.357728][T19078] tipc: Resetting bearer <eth:syzkaller0>
[  305.372104][T19078] tipc: Disabling bearer <eth:syzkaller0>
[  305.659714][T19108] __nla_validate_parse: 12 callbacks suppressed
[  305.659729][T19108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3728'.
[  305.681466][T19107] netlink: 5312 bytes leftover after parsing attributes in process `syz.1.3726'.
[  305.695734][T19107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3726'.
[  305.794353][T19110] netlink: 'syz.2.3729': attribute type 4 has an invalid length.
[  305.819164][T19110] wg1 speed is unknown, defaulting to 1000
[  305.821589][T19110] lo speed is unknown, defaulting to 1000
[  305.887485][T19124] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3734'.
[  305.935242][T19128] batadv_slave_0: entered promiscuous mode
[  306.177826][T19157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3744'.
[  306.242744][T19168] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3748'.
[  306.394792][T19191] netlink: 201916 bytes leftover after parsing attributes in process `syz.0.3755'.
[  306.511140][T19215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3760'.
[  306.723081][T19243] wg1 speed is unknown, defaulting to 1000
[  306.727919][T19243] lo speed is unknown, defaulting to 1000
[  307.134867][T19270] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3775'.
[  307.138281][T19270] 8021q: VLANs not supported on ipvlan1
[  308.290539][T19314] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3788'.
[  308.326256][T19319] tipc: Resetting bearer <eth:syzkaller0>
[  308.332478][T19319] tipc: Disabling bearer <eth:syzkaller0>
[  308.376096][T19323] openvswitch: netlink: VXLAN extension 2 out of range max 1
[  308.614964][T19350] netlink: 'syz.2.3798': attribute type 11 has an invalid length.
[  309.577802][T19396] bond0: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  309.581644][T19396] bond0: (slave ipvlan5): The slave device specified does not support setting the MAC address
[  309.586416][T19396] bond0: (slave ipvlan5): Error -95 calling set_mac_address
[  310.951032][T19438] __nla_validate_parse: 6 callbacks suppressed
[  310.951045][T19438] netlink: 464 bytes leftover after parsing attributes in process `syz.2.3823'.
[  311.241201][T19471] netlink: 'syz.2.3832': attribute type 11 has an invalid length.
[  311.503337][T19496] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3839'.
[  311.595979][T19512] bond7: (slave geneve3): Releasing active interface
[  311.601328][ T5860] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  311.604884][ T5860] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  311.609005][ T5860] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  311.611641][ T5860] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  311.902263][T19535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3851'.
[  312.107557][T19552] bond0: default FDB implementation only supports local addresses
[  312.519835][T19571] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3)
[  312.552002][T19571] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3864'.
[  312.552019][T19572] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3864'.
[  312.719640][T19599] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3872'.
[  312.750034][T19594] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3870'.
[  312.875825][T19615] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96
[  312.879399][T19618] netlink: 'syz.0.3878': attribute type 21 has an invalid length.
[  312.881941][T19618] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3878'.
[  312.956798][T19620] wg1 speed is unknown, defaulting to 1000
[  312.959856][T19620] lo speed is unknown, defaulting to 1000
[  313.021272][T19631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3881'.
[  313.040468][T19647] delete_channel: no stack
[  313.045829][T19648] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3886'.
[  313.052115][T19647] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  313.260041][T19669] batadv_slave_0: entered promiscuous mode
[  313.393109][T19677] siw: device registration error -23
[  313.762023][T19713] netlink: 'syz.1.3906': attribute type 1 has an invalid length.
[  313.775257][T19713] bond6: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  313.783968][T19713] bond6: (slave ipvlan4): The slave device specified does not support setting the MAC address
[  313.787163][T19713] bond6: (slave ipvlan4): Setting fail_over_mac to active for active-backup mode
[  313.910599][T19744] 8021q: VLANs not supported on ipvlan1
[  314.027300][T19754] syzkaller0: entered promiscuous mode
[  314.029067][T19754] syzkaller0: entered allmulticast mode
[  314.152776][T19760] netlink: 'syz.1.3920': attribute type 7 has an invalid length.
[  314.885581][T19825] lo speed is unknown, defaulting to 1000
[  314.887566][T19825] lo speed is unknown, defaulting to 1000
[  314.889664][T19825] lo speed is unknown, defaulting to 1000
[  314.896711][T19825] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  314.907066][T19825] lo speed is unknown, defaulting to 1000
[  314.910905][T19825] lo speed is unknown, defaulting to 1000
[  314.914322][T19825] lo speed is unknown, defaulting to 1000
[  315.144906][T19834] macsec2: entered promiscuous mode
[  315.146958][T19834] team0: entered promiscuous mode
[  315.679435][T19842] IPVS: stopping backup sync thread 18527 ...
[  316.045177][T19918] __nla_validate_parse: 16 callbacks suppressed
[  316.045197][T19918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3965'.
[  316.051766][T19918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3965'.
[  316.099790][T19919] syzkaller1: entered allmulticast mode
[  316.262168][T19933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3970'.
[  316.376089][T19945] sctp: [Deprecated]: syz.1.3974 (pid 19945) Use of int in max_burst socket option deprecated.
[  316.376089][T19945] Use struct sctp_assoc_value instead
[  316.805995][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  316.832829][T19974] _Z`Ԁ@S!: entered promiscuous mode
[  317.087305][T20015] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3992'.
[  317.382042][T20034] wg1 speed is unknown, defaulting to 1000
[  317.385121][T20034] lo speed is unknown, defaulting to 1000
[  317.389859][T20034] lo speed is unknown, defaulting to 1000
[  317.423998][T20034] ieee802154 phy0 wpan0: encryption failed: -22
[  317.567491][T20057] bond0: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  317.571567][T20057] bond0: (slave ipvlan5): The slave device specified does not support setting the MAC address
[  317.575502][T20057] bond0: (slave ipvlan5): Error -95 calling set_mac_address
[  317.760278][T20068] bond0: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  317.765899][T20068] bond0: (slave ipvlan5): The slave device specified does not support setting the MAC address
[  317.770463][T20068] bond0: (slave ipvlan5): Error -95 calling set_mac_address
[  317.811391][T20069] block nbd1: NBD_DISCONNECT
[  317.813353][T20069] block nbd1: Send disconnect failed -32
[  317.816089][T20069] block nbd1: shutting down sockets
[  317.819583][    C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  317.822949][    C1] Buffer I/O error on dev nbd1, logical block 0, async page read
[  317.826241][    C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  317.829803][    C1] Buffer I/O error on dev nbd1, logical block 1, async page read
[  317.832937][    C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  317.836653][    C1] Buffer I/O error on dev nbd1, logical block 2, async page read
[  317.839864][    C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  317.843624][    C1] Buffer I/O error on dev nbd1, logical block 3, async page read
[  317.848403][ T5843] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  317.851874][ T5843] Buffer I/O error on dev nbd1, logical block 0, async page read
[  317.856226][ T5843] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  317.859748][ T5843] Buffer I/O error on dev nbd1, logical block 1, async page read
[  317.862842][ T5843] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  317.866576][ T5843] Buffer I/O error on dev nbd1, logical block 2, async page read
[  317.870162][ T5843] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  317.875800][ T5843] Buffer I/O error on dev nbd1, logical block 3, async page read
[  317.879811][ T5843] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  317.883649][ T5843] Buffer I/O error on dev nbd1, logical block 0, async page read
[  317.887205][ T5843] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  317.890635][ T5843] Buffer I/O error on dev nbd1, logical block 1, async page read
[  317.896418][ T5843] ldm_validate_partition_table(): Disk read failed.
[  317.899526][ T5843] Dev nbd1: unable to read RDB block 0
[  317.902085][ T5843]  nbd1: unable to read partition table
[  317.906818][ T5843] ldm_validate_partition_table(): Disk read failed.
[  317.909505][ T5843] Dev nbd1: unable to read RDB block 0
[  317.911946][ T5843]  nbd1: unable to read partition table
[  318.097613][T20095] netlink: 'syz.1.4014': attribute type 6 has an invalid length.
[  318.112490][T20098] IPVS: stopping backup sync thread 18192 ...
[  318.119192][T20098] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4015'.
[  318.124388][T20098] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4015'.
[  318.127332][T20098] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4015'.
[  318.357033][T20120] netlink: 'syz.0.4021': attribute type 1 has an invalid length.
[  318.419928][T20126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4023'.
[  318.436841][T20126] bond0: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  318.441611][T20126] bond0: (slave ipvlan5): The slave device specified does not support setting the MAC address
[  318.449624][T20126] bond0: (slave ipvlan5): Error -95 calling set_mac_address
[  319.123823][T20160] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4032'.
[  319.186452][T20167] IPVS: sync thread started: state = BACKUP, mcast_ifn = team_slave_1, syncid = 131075, id = 0
[  319.189795][T20166] IPVS: stopping backup sync thread 20167 ...
[  319.325348][T20177] netlink: 'syz.2.4038': attribute type 12 has an invalid length.
[  319.328135][T20177] netlink: 'syz.2.4038': attribute type 18 has an invalid length.
[  319.330561][T20177] netlink: 'syz.2.4038': attribute type 21 has an invalid length.
[  319.333026][T20177] netlink: 'syz.2.4038': attribute type 26 has an invalid length.
[  319.426561][T20188] bond0: (slave ipvlan4): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  319.430454][T20188] bond0: (slave ipvlan4): The slave device specified does not support setting the MAC address
[  319.434667][T20188] bond0: (slave ipvlan4): Error -95 calling set_mac_address
[  319.512232][T20196] netlink: 'syz.2.4043': attribute type 3 has an invalid length.
[  319.540703][T20201] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4044'.
[  319.567421][T20203] geneve1: entered promiscuous mode
[  319.623678][ T6039] syzkaller0: tun_net_xmit 76
[  319.626115][ T6039] syzkaller0: tun_net_xmit 48
[  319.630253][T20205] syzkaller0: create flow: hash 3943419004 index 1
[  319.642817][T20204] syzkaller0: delete flow: hash 3943419004 index 1
[  319.920688][T20216] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (133950)
[  319.924801][T20216] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  320.586680][T20219] netlink: 'syz.2.4051': attribute type 10 has an invalid length.
[  320.589952][T20219] bond0: (slave wlan1): Opening slave failed
[  320.619599][T20219] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  320.670590][T20224] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  320.766713][T20232] netlink: 'syz.2.4056': attribute type 3 has an invalid length.
[  320.781771][T20234] ip6_vti0: entered allmulticast mode
[  320.787644][T20236] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  320.802136][T20234] ip6_vti0: left allmulticast mode
[  320.945676][T20254] netlink: 'syz.1.4061': attribute type 58 has an invalid length.
[  321.058968][T20264] __nla_validate_parse: 5 callbacks suppressed
[  321.058983][T20264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4063'.
[  321.291808][T20294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4070'.
[  321.334599][T20299] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  321.338957][T20298] IPVS: stopping backup sync thread 20299 ...
[  321.385993][T20301] veth3: entered promiscuous mode
[  321.427541][T20301] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4072'.
[  321.513834][T20308] wg1 speed is unknown, defaulting to 1000
[  321.517095][T20308] lo speed is unknown, defaulting to 1000
[  321.520462][T20308] lo speed is unknown, defaulting to 1000
[  321.738510][T20317] bond0: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  321.742995][T20317] bond0: (slave ipvlan5): The slave device specified does not support setting the MAC address
[  321.746834][T20317] bond0: (slave ipvlan5): Error -95 calling set_mac_address
[  321.909377][T20324] wg1 speed is unknown, defaulting to 1000
[  321.911707][T20324] lo speed is unknown, defaulting to 1000
[  321.915989][T20324] lo speed is unknown, defaulting to 1000
[  321.945527][T20324] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4079'.
[  322.036084][T20332] batadv_slave_0: left promiscuous mode
[  322.042044][T20332] gretap2: left promiscuous mode
[  322.096919][T20335] wg1 speed is unknown, defaulting to 1000
[  322.099524][T20335] lo speed is unknown, defaulting to 1000
[  322.102072][T20335] lo speed is unknown, defaulting to 1000
[  322.746271][T20366] batadv_slave_0: left promiscuous mode
[  323.216944][T20375] validate_nla: 2 callbacks suppressed
[  323.216971][T20375] netlink: 'syz.2.4091': attribute type 10 has an invalid length.
[  323.233517][T20375] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4091'.
[  323.236655][T20375] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  323.389179][T20385] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4095'.
[  323.518328][T20409] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4101'.
[  323.561207][T20412] IPVS: set_ctl: invalid protocol: 92 100.1.1.1:20004
[  323.709369][T20429] netlink: 'syz.2.4106': attribute type 4 has an invalid length.
[  323.712082][T20429] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4106'.
[  323.832433][T20447] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4110'.
[  323.959434][T20457] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4112'.
[  324.017287][T20459] wg1 speed is unknown, defaulting to 1000
[  324.020606][T20459] lo speed is unknown, defaulting to 1000
[  324.022961][T20459] lo speed is unknown, defaulting to 1000
[  324.088434][T20463] openvswitch: netlink: Tunnel attr 226 out of range max 16
[  324.141783][T20472] netlink: 'syz.0.4117': attribute type 1 has an invalid length.
[  324.157093][T20473] bond8 (unregistering): Released all slaves
[  324.195786][T20472] bond8: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  324.199958][T20472] bond8: (slave ipvlan5): The slave device specified does not support setting the MAC address
[  324.203518][T20472] bond8: (slave ipvlan5): Setting fail_over_mac to active for active-backup mode
[  324.297960][T20479] 8021q: VLANs not supported on ipvlan1
[  324.308126][T20479] netlink: 'syz.0.4118': attribute type 5 has an invalid length.
[  324.333375][T20479] macsec0: entered promiscuous mode
[  324.344610][T20479] macsec0: entered allmulticast mode
[  326.224791][   T33] audit: type=1800 audit(1756388955.376:10): pid=20586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4146" name="memory.events" dev="tmpfs" ino=7189 res=0 errno=0
[  326.242063][T20586] wg1 speed is unknown, defaulting to 1000
[  326.244486][T20586] lo speed is unknown, defaulting to 1000
[  326.246650][T20586] lo speed is unknown, defaulting to 1000
[  326.247863][T20590] syzkaller0: entered promiscuous mode
[  326.250382][T20590] syzkaller0: entered allmulticast mode
[  326.279166][T20586] tipc: Started in network mode
[  326.280866][T20586] tipc: Node identity 7f000001, cluster identity 4711
[  326.283391][T20586] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  326.332677][T20595] bond0: (slave netdevsim0): Releasing backup interface
[  326.337282][T20595] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  326.340478][T20595] bond2: (slave geneve2): Releasing active interface
[  326.343629][T20595] bond3: (slave bridge5): Releasing active interface
[  326.346998][T20595] batadv1: left allmulticast mode
[  326.348734][T20595] batadv1: left promiscuous mode
[  326.350565][T20595] bridge0: port 1(batadv1) entered disabled state
[  326.411218][ T6039] tipc: Left network mode
[  326.439480][T20596] ieee802154 phy0 wpan0: encryption failed: -22
[  326.643107][T20619] __nla_validate_parse: 72 callbacks suppressed
[  326.643123][T20619] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4154'.
[  326.953335][T20644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4160'.
[  326.997214][T20643] delete_channel: no stack
[  327.020523][T20648] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4161'.
[  327.024197][T20648] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4161'.
[  327.076695][ T6039] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  327.080148][ T6039] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  327.083894][ T6039] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  327.087798][ T6039] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  327.100854][T20652] IPVS: set_ctl: invalid protocol: 255 100.1.1.2:20003
[  327.348191][T20659] syz_tun: entered allmulticast mode
[  327.355815][T20659] dvmrp8: entered allmulticast mode
[  327.391060][T20658] syz_tun: left allmulticast mode
[  327.393124][T20658] dvmrp8: left allmulticast mode
[  327.532940][T20671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4168'.
[  327.538279][T20671] openvswitch: netlink: Unknown nsh attribute 0
[  327.540993][T20671] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  327.675479][T20689] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  328.485762][T20714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4179'.
[  328.682384][T20721] netlink: 'syz.1.4181': attribute type 58 has an invalid length.
[  328.686819][T20721] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4181'.
[  328.692780][T20718] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4180'.
[  328.702425][T20718] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4180'.
[  328.782400][T20732] batadv_slave_0: entered promiscuous mode
[  328.806703][T20734] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4185'.
[  329.176247][T20760] netlink: 'syz.2.4192': attribute type 1 has an invalid length.
[  329.389298][T20770] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  329.392696][T20770] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  329.968916][T20831] sock: sock_timestamping_bind_phc: sock not bind to device
[  330.129629][T20844] netlink: 'syz.2.4217': attribute type 3 has an invalid length.
[  330.216008][T20851] netlink: 'syz.1.4218': attribute type 5 has an invalid length.
[  330.221442][T20851] geneve4: entered promiscuous mode
[  330.223188][T20851] geneve4: entered allmulticast mode
[  330.228309][ T6039] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0
[  330.231748][ T6039] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0
[  330.248085][T20846] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  330.305587][T20846] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  330.359122][ T6039] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  330.366237][ T6039] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  330.376621][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  330.384424][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  330.576757][T20856] wg1 speed is unknown, defaulting to 1000
[  330.579148][T20856] lo speed is unknown, defaulting to 1000
[  330.581536][T20856] lo speed is unknown, defaulting to 1000
[  330.610192][ T5887] IPVS: starting estimator thread 0...
[  330.613005][T20856] ieee802154 phy0 wpan0: encryption failed: -22
[  330.693764][T20859] IPVS: using max 71 ests per chain, 170400 per kthread
[  330.717703][T20866] wg1 speed is unknown, defaulting to 1000
[  330.720400][T20866] lo speed is unknown, defaulting to 1000
[  330.722771][T20866] lo speed is unknown, defaulting to 1000
[  330.832385][   T13] IPVS: stop unused estimator thread 0...
[  330.983204][T20887] 8021q: VLANs not supported on ipvlan1
[  331.149300][T20896] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20003
[  331.302108][T20906] tap0: tun_chr_ioctl cmd 1074025677
[  331.305360][T20906] tap0: linktype set to 804
[  331.418422][T20920] wg1 speed is unknown, defaulting to 1000
[  331.424168][T20920] lo speed is unknown, defaulting to 1000
[  331.429944][T20920] lo speed is unknown, defaulting to 1000
[  331.466585][T20926] 8021q: VLANs not supported on ipvlan1
[  331.712331][T20957] __nla_validate_parse: 19 callbacks suppressed
[  331.712356][T20957] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4252'.
[  331.724076][T20957] 8021q: VLANs not supported on ipvlan1
[  331.790362][T20969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4256'.
[  331.839878][T20973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4255'.
[  331.842936][T20973] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[  331.850183][T20976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4258'.
[  331.951160][T20989] wg1 speed is unknown, defaulting to 1000
[  331.958023][T20989] lo speed is unknown, defaulting to 1000
[  331.960446][T20989] lo speed is unknown, defaulting to 1000
[  332.067865][T20989] netlink: 'syz.0.4263': attribute type 9 has an invalid length.
[  332.119512][T21008] openvswitch: netlink: Actions may not be safe on all matching packets
[  332.214733][T21017] netlink: 'syz.0.4273': attribute type 4 has an invalid length.
[  332.249547][T21021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4274'.
[  332.252756][T21021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4274'.
[  332.282636][T21027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4275'.
[  332.285734][T21027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4275'.
[  332.292108][   T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  332.294591][T21027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4275'.
[  332.295771][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  332.298095][T21027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4275'.
[  332.300319][   T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  332.306986][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  332.337482][T21030] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  332.640207][   T33] audit: type=1804 audit(1756388961.786:11): pid=21062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4283" name="/newroot/1511/cgroup.controllers" dev="tmpfs" ino=7755 res=1 errno=0
[  332.649479][   T33] audit: type=1800 audit(1756388961.786:12): pid=21062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4283" name="cgroup.controllers" dev="tmpfs" ino=7755 res=0 errno=0
[  332.730622][T21066] tc_dump_action: action bad kind
[  332.755320][T21068] wg1 speed is unknown, defaulting to 1000
[  332.757876][T21068] lo speed is unknown, defaulting to 1000
[  332.760251][T21068] lo speed is unknown, defaulting to 1000
[  332.971315][T21087] wg1 speed is unknown, defaulting to 1000
[  332.975198][T21087] lo speed is unknown, defaulting to 1000
[  332.978161][T21087] lo speed is unknown, defaulting to 1000
[  333.392890][T21119] syz.1.4300 (21119) used obsolete PPPIOCDETACH ioctl
[  333.438018][T21124] 8021q: VLANs not supported on ipvlan1
[  333.481417][T21128] 8021q: VLANs not supported on ipvlan1
[  333.490278][T21128] macsec3: entered promiscuous mode
[  333.492522][T21128] macsec3: entered allmulticast mode
[  335.081315][T21165] 8021q: VLANs not supported on ipvlan1
[  335.269585][T21193] batadv_slave_0: left promiscuous mode
[  335.281640][T21193] geneve1: left promiscuous mode
[  335.285926][T21193] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  335.292853][T21193] geneve5: left promiscuous mode
[  335.295443][T21193] geneve5: left allmulticast mode
[  335.298565][T21195] netlink: 'syz.1.4316': attribute type 1 has an invalid length.
[  335.394904][T21205] netlink: 'syz.0.4324': attribute type 29 has an invalid length.
[  337.042077][T21306] __nla_validate_parse: 14 callbacks suppressed
[  337.042099][T21306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4352'.
[  337.131783][T21313] netlink: 37768 bytes leftover after parsing attributes in process `syz.1.4355'.
[  337.135084][T21314] netlink: 37768 bytes leftover after parsing attributes in process `syz.1.4355'.
[  337.138443][T21314] netlink: 37768 bytes leftover after parsing attributes in process `syz.1.4355'.
[  337.141978][T21313] netlink: 37768 bytes leftover after parsing attributes in process `syz.1.4355'.
[  337.188727][T21320] bond0: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  337.195544][T21320] bond0: (slave ipvlan5): The slave device specified does not support setting the MAC address
[  337.201642][T21320] bond0: (slave ipvlan5): Error -95 calling set_mac_address
[  337.368181][T21330] wg1 speed is unknown, defaulting to 1000
[  337.370695][T21330] lo speed is unknown, defaulting to 1000
[  337.373343][T21330] lo speed is unknown, defaulting to 1000
[  337.418040][T21341] bond0: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  337.422091][T21341] bond0: (slave ipvlan5): The slave device specified does not support setting the MAC address
[  337.426905][T21341] bond0: (slave ipvlan5): Error -95 calling set_mac_address
[  337.611910][T21347] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4365'.
[  337.615891][T21350] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[  337.680262][T21357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4367'.
[  337.738166][T21363] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  337.742068][T21363] netlink: 'syz.0.4371': attribute type 1 has an invalid length.
[  337.854949][T21386] openvswitch: netlink: IP tunnel dst address not specified
[  337.927578][T21403] bond0: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  337.927830][T21396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4382'.
[  337.931598][T21403] bond0: (slave ipvlan5): The slave device specified does not support setting the MAC address
[  337.932507][T21403] bond0: (slave ipvlan5): Error -95 calling set_mac_address
[  338.330771][T21425] netlink: 'syz.2.4390': attribute type 15 has an invalid length.
[  338.333234][T21425] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4390'.
[  338.427213][T21427] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4391'.
[  338.759811][T21450] netlink: 'syz.1.4395': attribute type 4 has an invalid length.
[  338.976945][T21476] nft_compat: unsupported protocol 0
[  338.997233][T21479] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  339.044411][T21481] wg1 speed is unknown, defaulting to 1000
[  339.046792][T21481] lo speed is unknown, defaulting to 1000
[  339.049033][T21481] lo speed is unknown, defaulting to 1000
[  339.186839][T21497] netlink: 'syz.0.4415': attribute type 18 has an invalid length.
[  339.547523][T21522] syzkaller0: entered promiscuous mode
[  339.549455][T21522] syzkaller0: entered allmulticast mode
[  339.731954][T21528] bond0: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  339.736416][T21528] bond0: (slave ipvlan5): The slave device specified does not support setting the MAC address
[  339.741365][T21528] bond0: (slave ipvlan5): Error -95 calling set_mac_address
[  339.852442][T21539] sctp: [Deprecated]: syz.2.4430 (pid 21539) Use of struct sctp_assoc_value in delayed_ack socket option.
[  339.852442][T21539] Use struct sctp_sack_info instead
[  339.902369][T21545] bond9: (slave vxcan1): The slave device specified does not support setting the MAC address
[  339.907754][T21545] bond9: (slave vxcan1): Error -95 calling set_mac_address
[  339.938370][T21545] IPVS: set_ctl: invalid protocol: 92 224.0.0.2:20003
[  340.087290][T21562] wg1 speed is unknown, defaulting to 1000
[  340.089902][T21562] lo speed is unknown, defaulting to 1000
[  340.092263][T21562] lo speed is unknown, defaulting to 1000
[  340.124275][   T24] IPVS: starting estimator thread 0...
[  340.127816][T21562] ieee802154 phy0 wpan0: encryption failed: -22
[  340.215461][T21566] IPVS: using max 92 ests per chain, 220800 per kthread
[  340.218294][T21587] netlink: 'syz.0.4443': attribute type 21 has an invalid length.
[  340.222396][T21587] netlink: 'syz.0.4443': attribute type 6 has an invalid length.
[  340.267117][T21594] wg1 speed is unknown, defaulting to 1000
[  340.269540][T21594] lo speed is unknown, defaulting to 1000
[  340.272030][T21594] lo speed is unknown, defaulting to 1000
[  340.300098][ T6039] IPVS: stop unused estimator thread 0...
[  340.806423][T21617] IPVS: length: 255 != 24
[  340.868638][T21621] bond0: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  340.872751][T21621] bond0: (slave ipvlan5): The slave device specified does not support setting the MAC address
[  340.877191][T21621] bond0: (slave ipvlan5): Error -95 calling set_mac_address
[  341.601748][T21669] bond0: (slave ipvlan5): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  341.607577][T21669] bond0: (slave ipvlan5): The slave device specified does not support setting the MAC address
[  341.614735][T21669] bond0: (slave ipvlan5): Error -95 calling set_mac_address
[  341.788379][T21694] netlink: 'syz.1.4473': attribute type 1 has an invalid length.
[  341.792560][T21694] netlink: 'syz.1.4473': attribute type 23 has an invalid length.
[  341.868148][T21706] netlink: 'syz.1.4476': attribute type 2 has an invalid length.
[  341.870758][T21706] netlink: 'syz.1.4476': attribute type 1 has an invalid length.
[  341.877161][T21706] netlink: 'syz.1.4476': attribute type 2 has an invalid length.
[  341.880012][T21706] netlink: 'syz.1.4476': attribute type 1 has an invalid length.
[  342.021028][ T5860] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  342.025121][ T5860] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  342.028495][T21728] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  342.031944][ T5860] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  342.036471][ T5860] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  342.182515][T21746] __nla_validate_parse: 19 callbacks suppressed
[  342.182533][T21746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4486'.
[  342.218563][T21752] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4487'.
[  342.223053][T21752] sctp: [Deprecated]: syz.1.4487 (pid 21752) Use of int in max_burst socket option.
[  342.223053][T21752] Use struct sctp_assoc_value instead
[  342.264799][T21754] wg1 speed is unknown, defaulting to 1000
[  342.267275][T21754] lo speed is unknown, defaulting to 1000
[  342.269755][T21754] lo speed is unknown, defaulting to 1000
[  342.361052][T21754] wg1 speed is unknown, defaulting to 1000
[  342.370449][T21754] lo speed is unknown, defaulting to 1000
[  342.380220][T21754] lo speed is unknown, defaulting to 1000
[  342.549663][T21761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4490'.
[  342.662945][T21764] netlink: 'syz.1.4491': attribute type 3 has an invalid length.
[  342.694894][T21764] syz_tun: entered allmulticast mode
[  342.715323][T21767] Unsupported ieee802154 address type: 0
[  342.719452][T21764] siw: device registration error -23
[  342.764963][T21764] 8021q: adding VLAN 0 to HW filter on device bond0
[  342.767995][T21764] 8021q: adding VLAN 0 to HW filter on device team0
[  342.785020][T21764] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  342.790087][   T10] lo speed is unknown, defaulting to 1000
[  342.791964][   T10] syz1: Port: 1 Link ACTIVE
[  342.825828][T21763] syz_tun: left allmulticast mode
[  342.938454][T21799] netlink: 'syz.0.4494': attribute type 11 has an invalid length.
[  343.040028][T21815] netlink: 'syz.1.4501': attribute type 1 has an invalid length.
[  343.156072][T21828] wg1 speed is unknown, defaulting to 1000
[  343.158670][T21828] lo speed is unknown, defaulting to 1000
[  343.160895][T21828] lo speed is unknown, defaulting to 1000
[  343.166753][T21830] ==================================================================
[  343.169406][T21830] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x666/0xca0
[  343.171940][T21830] Write of size 8 at addr ffff888110589228 by task syz.1.4505/21830
[  343.175454][T21830] 
[  343.176667][T21830] CPU: 0 UID: 0 PID: 21830 Comm: syz.1.4505 Not tainted syzkaller #0 PREEMPT(full) 
[  343.176680][T21830] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  343.176688][T21830] Call Trace:
[  343.176693][T21830]  <TASK>
[  343.176699][T21830]  dump_stack_lvl+0x189/0x250
[  343.176717][T21830]  ? __virt_addr_valid+0x1c8/0x5c0
[  343.176728][T21830]  ? rcu_is_watching+0x15/0xb0
[  343.176741][T21830]  ? __pfx_dump_stack_lvl+0x10/0x10
[  343.176751][T21830]  ? rcu_is_watching+0x15/0xb0
[  343.176760][T21830]  ? lock_release+0x4b/0x3e0
[  343.176774][T21830]  ? __virt_addr_valid+0x1c8/0x5c0
[  343.176783][T21830]  ? __virt_addr_valid+0x4a5/0x5c0
[  343.176793][T21830]  print_report+0xca/0x240
[  343.176801][T21830]  ? __xfrm_state_delete+0x666/0xca0
[  343.176808][T21830]  kasan_report+0x118/0x150
[  343.176822][T21830]  ? __xfrm_state_delete+0x666/0xca0
[  343.176832][T21830]  __xfrm_state_delete+0x666/0xca0
[  343.176843][T21830]  __xfrm_state_delete+0x87b/0xca0
[  343.176853][T21830]  xfrm_state_flush+0x45f/0x770
[  343.176864][T21830]  pfkey_flush+0x13f/0x340
[  343.176874][T21830]  ? __pfx_pfkey_flush+0x10/0x10
[  343.176880][T21830]  ? kmem_cache_free+0x18f/0x400
[  343.176893][T21830]  pfkey_sendmsg+0xbfe/0x1090
[  343.176900][T21830]  ? trace_sched_exit_tp+0x36/0x110
[  343.176913][T21830]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  343.176924][T21830]  ? rcu_is_watching+0x15/0xb0
[  343.176931][T21830]  ? futex_unqueue+0x22/0x240
[  343.176939][T21830]  ? aa_sock_msg_perm+0xf1/0x1d0
[  343.176948][T21830]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  343.176957][T21830]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  343.176964][T21830]  __sock_sendmsg+0x21c/0x270
[  343.176978][T21830]  ____sys_sendmsg+0x505/0x830
[  343.176989][T21830]  ? __pfx_____sys_sendmsg+0x10/0x10
[  343.176999][T21830]  ? import_iovec+0x74/0xa0
[  343.177009][T21830]  ___sys_sendmsg+0x21f/0x2a0
[  343.177017][T21830]  ? __pfx____sys_sendmsg+0x10/0x10
[  343.177026][T21830]  ? futex_wait+0x285/0x360
[  343.177042][T21830]  ? __fget_files+0x2a/0x420
[  343.177049][T21830]  ? __fget_files+0x3a0/0x420
[  343.177057][T21830]  __x64_sys_sendmsg+0x19b/0x260
[  343.177066][T21830]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  343.177076][T21830]  ? rcu_is_watching+0x15/0xb0
[  343.177084][T21830]  ? rcu_is_watching+0x15/0xb0
[  343.177091][T21830]  do_syscall_64+0xfa/0x3b0
[  343.177101][T21830]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  343.177109][T21830]  ? exc_page_fault+0x9f/0xf0
[  343.177121][T21830]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  343.177130][T21830] RIP: 0033:0x7fe8a2f8ebe9
[  343.177140][T21830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  343.177148][T21830] RSP: 002b:00007fe8a11f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  343.177158][T21830] RAX: ffffffffffffffda RBX: 00007fe8a31b5fa0 RCX: 00007fe8a2f8ebe9
[  343.177165][T21830] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[  343.177171][T21830] RBP: 00007fe8a3011e19 R08: 0000000000000000 R09: 0000000000000000
[  343.177177][T21830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  343.177184][T21830] R13: 00007fe8a31b6038 R14: 00007fe8a31b5fa0 R15: 00007ffc44aef028
[  343.177195][T21830]  </TASK>
[  343.177198][T21830] 
[  343.188139][T21828] netlink: 360 bytes leftover after parsing attributes in process `syz.0.4504'.
[  343.188431][T21830] Allocated by task 7077:
[  343.200789][T21828] wg1 speed is unknown, defaulting to 1000
[  343.201273][T21830]  kasan_save_track+0x3e/0x80
[  343.201293][T21830]  __kasan_slab_alloc+0x6c/0x80
[  343.201303][T21830]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  343.203247][T21828] lo speed is unknown, defaulting to 1000
[  343.204590][T21830]  xfrm_state_alloc+0x24/0x2f0
[  343.204615][T21830]  __find_acq_core+0x8a7/0x1c00
[  343.204624][T21830]  xfrm_find_acq+0x78/0xa0
[  343.204632][T21830]  xfrm_alloc_userspi+0x6b3/0xc90
[  343.204644][T21830]  xfrm_user_rcv_msg+0x7a3/0xab0
[  343.204655][T21830]  netlink_rcv_skb+0x208/0x470
[  343.204666][T21830]  xfrm_netlink_rcv+0x79/0x90
[  343.204674][T21830]  netlink_unicast+0x82f/0x9e0
[  343.204683][T21830]  netlink_sendmsg+0x805/0xb30
[  343.204689][T21830]  __sock_sendmsg+0x21c/0x270
[  343.204698][T21830]  ____sys_sendmsg+0x505/0x830
[  343.204705][T21830]  ___sys_sendmsg+0x21f/0x2a0
[  343.204712][T21830]  __x64_sys_sendmsg+0x19b/0x260
[  343.207550][T21828] lo speed is unknown, defaulting to 1000
[  343.208435][T21830]  do_syscall_64+0xfa/0x3b0
[  343.208450][T21830]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  343.208459][T21830] 
[  343.208461][T21830] Freed by task 5908:
[  343.208469][T21830]  kasan_save_track+0x3e/0x80
[  343.331010][T21830]  kasan_save_free_info+0x46/0x50
[  343.333041][T21830]  __kasan_slab_free+0x5b/0x80
[  343.334960][T21830]  kmem_cache_free+0x18f/0x400
[  343.336920][T21830]  xfrm_state_gc_task+0x52d/0x6b0
[  343.338780][T21830]  process_scheduled_works+0xae1/0x17b0
[  343.340700][T21830]  worker_thread+0x8a0/0xda0
[  343.342447][T21830]  kthread+0x711/0x8a0
[  343.344122][T21830]  ret_from_fork+0x3fc/0x770
[  343.346043][T21830]  ret_from_fork_asm+0x1a/0x30
[  343.348025][T21830] 
[  343.349017][T21830] The buggy address belongs to the object at ffff888110589200
[  343.349017][T21830]  which belongs to the cache xfrm_state of size 928
[  343.354539][T21830] The buggy address is located 40 bytes inside of
[  343.354539][T21830]  freed 928-byte region [ffff888110589200, ffff8881105895a0)
[  343.359243][T21830] 
[  343.360040][T21830] The buggy address belongs to the physical page:
[  343.362452][T21830] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888110588d80 pfn:0x110588
[  343.366376][T21830] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  343.369534][T21830] flags: 0x57ff00000000240(workingset|head|node=1|zone=2|lastcpupid=0x7ff)
[  343.373010][T21830] page_type: f5(slab)
[  343.374630][T21830] raw: 057ff00000000240 ffff88801afda640 ffffea0004650010 ffff8881053e7288
[  343.377982][T21830] raw: ffff888110588d80 00000000000e0002 00000000f5000000 0000000000000000
[  343.381362][T21830] head: 057ff00000000240 ffff88801afda640 ffffea0004650010 ffff8881053e7288
[  343.384652][T21830] head: ffff888110588d80 00000000000e0002 00000000f5000000 0000000000000000
[  343.388006][T21830] head: 057ff00000000002 ffffea0004416201 00000000ffffffff 00000000ffffffff
[  343.391475][T21830] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  343.395115][T21830] page dumped because: kasan: bad access detected
[  343.397609][T21830] page_owner tracks the page as allocated
[  343.399844][T21830] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5910, tgid 5909 (syz.1.6), ts 47786610555, free_ts 47723067938
[  343.406515][T21830]  post_alloc_hook+0x240/0x2a0
[  343.408240][T21830]  get_page_from_freelist+0x21e4/0x22c0
[  343.410207][T21830]  __alloc_frozen_pages_noprof+0x181/0x370
[  343.412219][T21830]  alloc_pages_mpol+0x232/0x4a0
[  343.414015][T21830]  allocate_slab+0x8a/0x370
[  343.415605][T21830]  ___slab_alloc+0xbeb/0x1410
[  343.417102][T21830]  kmem_cache_alloc_noprof+0x283/0x3c0
[  343.418812][T21830]  xfrm_state_alloc+0x24/0x2f0
[  343.420533][T21830]  xfrm_add_sa+0x17d1/0x4070
[  343.422342][T21830]  xfrm_user_rcv_msg+0x7a3/0xab0
[  343.424180][T21830]  netlink_rcv_skb+0x208/0x470
[  343.425872][T21830]  xfrm_netlink_rcv+0x79/0x90
[  343.427362][T21830]  netlink_unicast+0x82f/0x9e0
[  343.428851][T21830]  netlink_sendmsg+0x805/0xb30
[  343.430348][T21830]  __sock_sendmsg+0x21c/0x270
[  343.432021][T21830]  ____sys_sendmsg+0x505/0x830
[  343.433764][T21830] page last free pid 5849 tgid 5849 stack trace:
[  343.435893][T21830]  __free_frozen_pages+0xbc4/0xd30
[  343.437606][T21830]  __slab_free+0x303/0x3c0
[  343.439267][T21830]  qlist_free_all+0x97/0x140
[  343.440896][T21830]  kasan_quarantine_reduce+0x148/0x160
[  343.442785][T21830]  __kasan_slab_alloc+0x22/0x80
[  343.444449][T21830]  kmem_cache_alloc_lru_noprof+0x1c6/0x3d0
[  343.446280][T21830]  __d_alloc+0x36/0x7a0
[  343.447607][T21830]  d_alloc_parallel+0xe5/0x15e0
[  343.449151][T21830]  __lookup_slow+0x116/0x3d0
[  343.450661][T21830]  simple_start_creating+0xfd/0x1e0
[  343.452302][T21830]  start_creating+0x10f/0x180
[  343.453891][T21830]  __debugfs_create_file+0x79/0x4f0
[  343.455550][T21830]  debugfs_create_file_short+0x3f/0x60
[  343.457278][T21830]  ieee80211_debugfs_recreate_netdev+0x474/0x1460
[  343.459288][T21830]  ieee80211_if_change_type+0x156/0x990
[  343.461044][T21830]  ieee80211_change_iface+0xd5/0x510
[  343.462714][T21830] 
[  343.463501][T21830] Memory state around the buggy address:
[  343.465527][T21830]  ffff888110589100: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  343.468206][T21830]  ffff888110589180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  343.470763][T21830] >ffff888110589200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  343.473247][T21830]                                   ^
[  343.474966][T21830]  ffff888110589280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  343.477662][T21830]  ffff888110589300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  343.480190][T21830] ==================================================================
[  343.483242][T21830] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  343.486090][T21830] CPU: 0 UID: 0 PID: 21830 Comm: syz.1.4505 Not tainted syzkaller #0 PREEMPT(full) 
[  343.489608][T21830] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  343.493397][T21830] Call Trace:
[  343.494694][T21830]  <TASK>
[  343.495717][T21830]  dump_stack_lvl+0x99/0x250
[  343.497281][T21830]  ? __asan_memcpy+0x40/0x70
[  343.499201][T21830]  ? __pfx_dump_stack_lvl+0x10/0x10
[  343.501361][T21830]  ? __pfx__printk+0x10/0x10
[  343.503168][T21830]  vpanic+0x281/0x750
[  343.504625][T21830]  ? __pfx_print_hex_dump+0x10/0x10
[  343.506274][T21830]  ? __pfx_vpanic+0x10/0x10
[  343.507729][T21830]  ? rcu_is_watching+0x15/0xb0
[  343.509453][T21830]  panic+0xb9/0xc0
[  343.510803][T21830]  ? __pfx_panic+0x10/0x10
[  343.512381][T21830]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  343.514269][T21830]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  343.516465][T21830]  ? __xfrm_state_delete+0x666/0xca0
[  343.518593][T21830]  check_panic_on_warn+0x89/0xb0
[  343.520603][T21830]  ? __xfrm_state_delete+0x666/0xca0
[  343.522425][T21830]  end_report+0x78/0x160
[  343.523843][T21830]  kasan_report+0x129/0x150
[  343.525440][T21830]  ? __xfrm_state_delete+0x666/0xca0
[  343.527162][T21830]  __xfrm_state_delete+0x666/0xca0
[  343.529041][T21830]  __xfrm_state_delete+0x87b/0xca0
[  343.531056][T21830]  xfrm_state_flush+0x45f/0x770
[  343.532862][T21830]  pfkey_flush+0x13f/0x340
[  343.534636][T21830]  ? __pfx_pfkey_flush+0x10/0x10
[  343.536526][T21830]  ? kmem_cache_free+0x18f/0x400
[  343.538564][T21830]  pfkey_sendmsg+0xbfe/0x1090
[  343.540074][T21830]  ? trace_sched_exit_tp+0x36/0x110
[  343.541747][T21830]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  343.543545][T21830]  ? rcu_is_watching+0x15/0xb0
[  343.545091][T21830]  ? futex_unqueue+0x22/0x240
[  343.546606][T21830]  ? aa_sock_msg_perm+0xf1/0x1d0
[  343.548219][T21830]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  343.550211][T21830]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  343.551835][T21830]  __sock_sendmsg+0x21c/0x270
[  343.553460][T21830]  ____sys_sendmsg+0x505/0x830
[  343.555218][T21830]  ? __pfx_____sys_sendmsg+0x10/0x10
[  343.557163][T21830]  ? import_iovec+0x74/0xa0
[  343.558798][T21830]  ___sys_sendmsg+0x21f/0x2a0
[  343.560277][T21830]  ? __pfx____sys_sendmsg+0x10/0x10
[  343.561915][T21830]  ? futex_wait+0x285/0x360
[  343.563562][T21830]  ? __fget_files+0x2a/0x420
[  343.565081][T21830]  ? __fget_files+0x3a0/0x420
[  343.566574][T21830]  __x64_sys_sendmsg+0x19b/0x260
[  343.568198][T21830]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  343.569891][T21830]  ? rcu_is_watching+0x15/0xb0
[  343.571450][T21830]  ? rcu_is_watching+0x15/0xb0
[  343.573205][T21830]  do_syscall_64+0xfa/0x3b0
[  343.575029][T21830]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  343.577548][T21830]  ? exc_page_fault+0x9f/0xf0
[  343.579010][T21830]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  343.580887][T21830] RIP: 0033:0x7fe8a2f8ebe9
[  343.582444][T21830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  343.588398][T21830] RSP: 002b:00007fe8a11f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  343.591164][T21830] RAX: ffffffffffffffda RBX: 00007fe8a31b5fa0 RCX: 00007fe8a2f8ebe9
[  343.593782][T21830] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[  343.596542][T21830] RBP: 00007fe8a3011e19 R08: 0000000000000000 R09: 0000000000000000
[  343.599053][T21830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  343.601596][T21830] R13: 00007fe8a31b6038 R14: 00007fe8a31b5fa0 R15: 00007ffc44aef028
[  343.604387][T21830]  </TASK>
[  343.606102][T21830] Kernel Offset: disabled
[  343.607731][T21830] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:49:32  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33be060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000f8d RDI=0000000000000f8e RBP=ffffffff99df0670 RSP=ffffc900066d6db0
R8 =ffff888106dc8237 R9 =1ffff11020db9046 R10=dffffc0000000000 R11=ffffffff854f21f0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99df03e0 R15=0000000000000000
RIP=ffffffff854f2267 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fe8a11f66c0 ffffffff 00c00000
GS =0000 ffff8880b861a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2d9d63 CR3=000000003d90e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fe8a3187498 00007fe8a3187470 XMM03=00007fe8a31874a8 00007fe8a31874a0
XMM04=00007fe8a3ced100 00007fe8a3187460 XMM05=00007fe8a3187478 00007fe8a31874c0
XMM06=00007fe8a31874b8 00007fe8a31874b0 XMM07=00007fe8a31874a8 00007fe8a31874a0
XMM08=5f7265705f736574 6174735f78616d20 XMM09=0000000000000000 00007fe8a3012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000005 RBX=ffffffff8c9546a0 RCX=0000000000080000 RDX=dffffc0000000000
RSI=000000000003f283 RDI=000000000003f284 RBP=000000000000000b RSP=ffffc90006e17550
R8 =ffff88801b6f0127 R9 =1ffff110036de024 R10=dffffc0000000000 R11=ffffed10036de025
R12=000000666da583f5 R13=00000000fffffff6 R14=00003069d33ba94f R15=ffffffff8c9546aa
RIP=ffffffff825d698c RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f52d99696c0 ffffffff 00c00000
GS =0000 ffff8881a3c1a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2606e5 CR3=000000010d3e6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0402800302800403 a003180800039003
XMM02=0002010600000001 1428080180030180 XMM03=1000029003040000 0500000000000000
XMM04=03d00300100003c0 0302100003b00328 XMM05=0120808210000380 0401000000080606
XMM06=015ba60280800800 03e00300100003d0 XMM07=0300100003c00302 100003b003281000
XMM08=0290030400000500 0000000000000002 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
