last executing test programs:

2.04036935s ago: executing program 0 (id=2476):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000500)="a0", 0x1}], 0x1}, 0x801)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write(r5, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c)
write$cgroup_pid(r3, &(0x7f00000000c0), 0x12)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, &(0x7f0000000280)={0x7, 'vlan0\x00', {0x72e7}, 0x1763})
writev(r6, &(0x7f0000000080)=[{&(0x7f0000000040)="20a0", 0x2}], 0x1)
splice(r4, 0x0, r3, 0x0, 0x1100000000f336, 0x8)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0)

1.253430871s ago: executing program 2 (id=2485):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
sendto$inet6(r0, &(0x7f0000000300)="4fb75e94fac8e0af67a1b11a8b2fc03796b88e416adf43af94157ae52e96f608a6af0ebacb49faa209d1a32527886ab9f6456f5ab44ed800591b6e8931a92649942eeb96740b7be5de4351e4ac34c941d2463e0d62e0820a2355d787093b28972a9185cac8f535a333a42aee2841cc2dbb1d78243dede27f18", 0x79, 0x200080d0, &(0x7f00000000c0)={0xa, 0x4e23, 0x8, @remote, 0x3ff}, 0x1c)
connect$rose(r2, &(0x7f0000000080)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @null}, 0x1c)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000004000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000bbffffffb702000008000000b70300000000000085000000cf00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0)

1.203319018s ago: executing program 2 (id=2487):
r0 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff020000000000000000003b000000013a"], 0xfdef)

1.199474907s ago: executing program 0 (id=2488):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c)
listen(r1, 0x204)
r2 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)

1.099075464s ago: executing program 0 (id=2490):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETTXFILTER(r1, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e42000c371303ed6a33f2ff8689b3f60e"]) (async)
ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000002300)=ANY=[@ANYBLOB="dccdd8706b7c29240dd5638785173e0f67930a3df41d07f764bad85e753a874e69b8b2c4dcd047fb1102873979b8752541de1b7c5fe069cdad5261"])
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="14850000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xe, 0x4, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r4}, 0x20)
ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DEL_MFC_PROXY(r6, 0x0, 0xd3, &(0x7f0000000040)={@empty, @rand_addr=0x64010100, 0x0, "55107f5292bb68748a116b3477dd73bf05ed525a7bfa1f948b49b825bdd7c5ff", 0x6, 0x0, 0x9, 0xfffff000}, 0x3c) (async)
write$tun(r0, &(0x7f00000002c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x6000, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x8100}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0xfdef)

1.097388052s ago: executing program 1 (id=2491):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESDEC], 0xf8}, 0x1, 0x0, 0x0, 0x40084}, 0x20040001)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000ffffffffffffff880100000000100000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188000047eb2278a273997ec1b80029442911892704"], 0xfdef)

1.043117305s ago: executing program 2 (id=2492):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r1 = socket(0x3, 0x4, 0x6)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x400c844)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x8045)
r2 = socket$igmp(0x2, 0x3, 0x2)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @link_local}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0xd, 0x0, @vifc_lcl_ifindex=r3, @private}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000680), 0x0)
getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, &(0x7f0000002180))
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0)
socket$inet6(0xa, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r5 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
setsockopt$inet6_int(r5, 0x29, 0x17, &(0x7f00000000c0)=0x3, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000000)={'veth1_to_bridge\x00', 0xe00})
socket$kcm(0x10, 0x2, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0)
connect$rose(0xffffffffffffffff, &(0x7f0000000340)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x40)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10)

992.000535ms ago: executing program 2 (id=2493):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1)
sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x14, r2, 0x341, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x14)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="40020000", @ANYRES16=r2, @ANYBLOB="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"/641], 0x240}, 0x1, 0x0, 0x0, 0x20000080}, 0x800)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x2b, @multicast2, 0x4e21, 0x4, 'ovf\x00', 0xc, 0x4, 0x43}, 0x2c)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, r5, 0x1, 0x70bd2b, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x0, 0xfffffffc, @mcast2}], 0x1c)
shutdown(r3, 0x2)

986.88491ms ago: executing program 0 (id=2494):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf) (async)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8)
openat$cgroup_ro(r1, &(0x7f00000001c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080), 0x5c)
recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102) (async)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000140)={0x802, 0x0, 0x0, 0x7}, 0x10) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a", @ANYRES32=r2], 0x20}}, 0x0) (async, rerun: 32)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) (async, rerun: 32)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)

931.565726ms ago: executing program 2 (id=2495):
socket$nl_crypto(0x10, 0x3, 0x15) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) (async, rerun: 64)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) (rerun: 64)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'pim6reg1\x00', @multicast})
close(0x4) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x3}}]}, {0xfffffffffffffeb7}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000000)=0x3) (async)
write$ppp(r3, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfff2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24004080}, 0x0) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)={'team0\x00', <r6=>0x0}) (async, rerun: 32)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x2, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r8) (async)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async)
r9 = socket$kcm(0x10, 0x2, 0x4)
r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async)
sendmsg$inet(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
close(r7) (async)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000100)={'sit0\x00', r6, 0x700, 0x8, 0x4, 0x60, {{0x22, 0x4, 0x3, 0x3, 0x88, 0x67, 0x0, 0x9, 0x29, 0x0, @loopback, @local, {[@end, @rr={0x7, 0xf, 0xf5, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @rr={0x7, 0x23, 0xa0, [@loopback, @remote, @local, @multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x13}, @loopback, @rand_addr=0x64010100]}, @lsrr={0x83, 0xf, 0xbe, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}, @end, @generic={0x82, 0xe, "f7ee1dab7bc2000000000000"}, @rr={0x7, 0xf, 0x9e, [@loopback, @loopback, @broadcast]}, @noop, @lsrr={0x83, 0x13, 0xee, [@loopback, @remote, @local, @local]}]}}}}})

922.990733ms ago: executing program 1 (id=2496):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0, 0x0, 0x7f}, 0x18) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0, 0x0, 0x7f}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000007c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWFLOWTABLE={0x24, 0x16, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x17c, 0x9, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_DESC={0x13c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_CONCAT={0x2c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc6}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}]}]}, @NFTA_SET_DESC_CONCAT={0x88, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x92}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe592}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe8}]}, {0x4}]}, @NFTA_SET_DESC_CONCAT={0x5c, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x60}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x1c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x1d0, 0x5, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_USERDATA={0xc6, 0xc, "4ea8e7359f396d11f419a51142690679c373f35154b7e8d38aba8ed5e2f17d029269505577924db745108c6e88e9a72e93c7d1700fe43ad9a9999b5a9f69ec1423ec7c0fff31354d4ae8a14b90e8c12851742336eeb65cd7182c0504e63f5fa94b91ea8a386dd2b29881cee0b1d71b3d5b3d9fc0841e30214d70de1710bcc286488c3566b8d0612fa9edad81bb8b679c51b3d7ce8f9a794dcae21e7a7007fe5c995eb4d04ebfc2cf8908c45fabc51434ebc7c20bd7b4aff942db898c524d71616b0b"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_USERDATA={0xc5, 0xc, "6eb0fffececd7fb602ceaa3e983dac484b19c707a67b8be8bac280cf57cf03301efee3a6ded111b5769cf339c1274fcbabfe294af7075d35bebd496b424d04c0fb03bd8a1d95bb41ca54a0316d782fb2eae63ddbfead0d4a0711491d244f04f6709f6884bfc72db2f2797e7c1d1829c027175ffb206eb3bbeffe5f981f58344dba861b389f189d83f1be3bb1b04b4a653032024c5e81a384ef7c903ef6bc02c94e25c11b173b3790e461d5aa2bdd8720bec99e314d30346662f4884815028799c2"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3d4}, 0x1, 0x0, 0x0, 0x814}, 0x4000840)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x3, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4840}, 0x20000010) (async)
sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x3, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4840}, 0x20000010)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x11}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x18}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x3c)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r4)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)

921.551045ms ago: executing program 0 (id=2497):
syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200000186082b9827c188a84c008100100086dd60cb3e0200403a00fc020000000000000000000000000000ff02000000000000000000000000000104009077fffffffe6097436700001100fe880000000000000000000000000001fe8000000000000000000000000000aa00010000000000000106000000000000"], 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$sock(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000480)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x38}, 0x60}, 0x80, 0x0, 0xfffffffffffffe5a}}], 0x47, 0x48094)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$team(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000780)={'team0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fddbdf250200000008000100", @ANYRES32=r6, @ANYBLOB="04000280"], 0x20}, 0x1, 0x0, 0x0, 0x40841}, 0x800)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@ipv6_newaddr={0x34, 0x14, 0x4, 0x70bd29, 0x25dfdbf8, {0xa, 0x20, 0x2, 0xff, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_FLAGS={0x8, 0x8, 0x600}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xc3, &(0x7f0000000380)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0xec)
r9 = socket$kcm(0x29, 0x2, 0x0)
r10 = socket$inet6(0xa, 0x803, 0x6)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r11, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r11, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r11, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x13, r11, 0x98aa2000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff77, 0x0, 0x0}, &(0x7f0000000000)=0x40)
connect$inet6(r10, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000180)={r10, r8})
sendmmsg$inet(r10, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r12, &(0x7f0000000000), 0xffffff6a)
sendfile(r1, r12, 0x0, 0xffffffff000)
setsockopt$inet6_int(r12, 0x29, 0x2, &(0x7f00000000c0), 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtclass={0x34, 0x28, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xfffb}, {0xe, 0xe}, {0xfff3, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x8, 0xa}}, @TCA_RATE={0x6, 0x5, {0x5, 0x6}}]}, 0x34}, 0x1, 0x0, 0x0, 0x604ff3648f564820}, 0x40)

810.391954ms ago: executing program 1 (id=2498):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000180)=0x1, 0x4) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$alg(0x26, 0x5, 0x0) (async)
unshare(0x10000080)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)="ebe3a0e9796cf51647e299f4e376fdbaf9ffffffffffffff5e81f4a7f71c1926aae1efd7e07f0000003d5cfe6cb55b5bb9849e6098bb06000000", 0x3a}, {&(0x7f00000002c0)="016e530b0e63ae", 0x7}], 0x2, 0x0, 0x0, 0x40005}], 0x1, 0x40800) (async)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec970006d03c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe)

713.289742ms ago: executing program 2 (id=2499):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESDEC], 0xf8}, 0x1, 0x0, 0x0, 0x40084}, 0x20040001)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000fc0)=@newlink={0x10c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, 0x0, 0x21eae}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x8}, @IFLA_LINKMODE={0x5, 0x11, 0x4}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @IFLA_GROUP={0x8, 0x1b, 0x6}, @IFLA_MAP={0x24, 0xe, {0x8, 0x9, 0x1, 0x8, 0xa, 0x8}}, @IFLA_XDP={0x24, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xc}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FD={0x8}]}, @IFLA_PHYS_PORT_ID={0x23, 0x22, "31b92c1de8358e361811fa80fc8f5e43b20ef8458915aeee8b86fd197636e8"}, @IFLA_MTU={0x8, 0x4, 0x1}, @IFLA_XDP={0x4c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xa}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xc}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}]}]}, 0x10c}}, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x0, 0xfff}, 0x8)
sendto$inet6(r2, &(0x7f0000000140)='\x00', 0x1, 0x8000, &(0x7f0000000480)={0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x8000a}, 0x1c)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, &(0x7f0000000200))
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0)
close(r4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000011000010000003a194618d96d0100000052d89b5fdaaeccc5cadeffdd63556c56e43080f9dd7d941ea13fe7523252384e326785e714cea78fc15f511cbbc13d71a79b18d466a981d5182d8abfa475504f26343147df975620", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES8=r3, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r6=>0xffffffffffffffff})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r8=>0x0})
recvfrom$ax25(r4, &(0x7f0000000140)=""/29, 0x1d, 0x10000, &(0x7f00000001c0)={{0x3, @bcast, 0x1}, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x44, r7, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xfa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050)
sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r10 = socket$unix(0x1, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884)
connect$inet6(r4, &(0x7f0000000340)={0xa, 0x4e21, 0xf14, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}, 0x1c)

620.992864ms ago: executing program 1 (id=2500):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000040)="3a6f5eb1524a5da97bcc34c128c6ac729d74c9f0d8a4c284de70326fd9249b11c661cf0cb7a67dc3318a8b6369e180b556fd7a0d5d5c193e5ba3bd860703aa2dafe29ff896666df2af8ba59093fc6e15fb207024581138957a0a40249df2769c3c885c63df43c90be4a09b08033c5d21401b9a9d22f8eb76e028c1b1d963ec6dfb32a7bc6ca50871309753d6790515257013ea00c03ff938a0c2f58a7fe223619e0a679c59f06dd899a2618aef", 0xad}], 0x2}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x3, @private1, 0x2}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000140)="fc70cf85a6b185d1bfc112314661b461a73119656d94251d92769ab7edbd51cd630b11026214dd483f65b8ce93ba0f38e90edf325c65336b4988e570d222a2c25d778065ba35c3e0006821564428", 0x4e}, {&(0x7f00000001c0)="dd6729e7fa50180409c2864b70e406a22fd68b8e191dd9fe0fc91c006ed3f15cf7c38e5955510e1f6a0588cb1c56001d6e495c31ec9253313811eadf", 0x3c}, {&(0x7f0000000240)="1cad8c", 0x3}], 0x3, &(0x7f00000002c0)=[@rthdrdstopts={{0x48, 0x29, 0x37, {0x3c, 0x5, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x4, 0x9, "7c41a1a2ef34fb3ef3"}, @jumbo={0xc2, 0x4, 0x9}, @enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @local}]}}}], 0x48}}, {{&(0x7f0000000340)={0xa, 0x4e21, 0x10000, @mcast1, 0xec7}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000380)="483c1979a0f810680ca85bd0ec4892652fbc7958766803b5656a55163f277cd3829c4edffd4227e79ccd0d6d2eeabd8371124daa58581660aa47468a1e4cbb493b600054ac942687fb60daf6e1afc88a1f5c2e2554e4d6c129bee768d316c9dcd19c6289132c8cf693936747859cc199d97bebdf25a5c91f1d7eae23c3f2294e765e91a48890a3f47fe94838a9d1b8feb42f9a734fba4e3dcc5099235f8e203688fb9164b8f8277b9a688265555700b40fcc6524e092aae3bd2f81f22a3eca9c0a6570b84dbe987edd8c74ed91071b", 0xcf}, {&(0x7f0000000480)="311927aa26545b8feac683d7c19beb0b54f9281fe39ad9872ed95f3bf98716680d1d754d31f3d1975f3be652bb5413544d62000828cff672cc26deb828", 0x3d}, {&(0x7f0000000600)="cc8ada2cc7b5c6fa80341ace11c26048b9459b0a5d23c18bf0fb54b288e9083b9639b16653e4541210464a4f39ec8731bd295e30499a5852bfcc49d0244cb49ff988fca46054c4bcc781ee94fb93313d3f5ccb339fe69feff068c07c26c7392b23b02000da2dc446c04c6693845c7728785bafab4b7aa4ee3d7036f5388a02d706c3bdedfe381a9d7bbed261be76508292a585521c621a1590ffdb2e21db46c0e59f43ea558daf05b10b4bc5292356d12adda5464ce0a69d2fea138182f29b2ba14e2076a592cef5917eb017528c3418e060f0b3394071358dfa90a0d8306fdc", 0xe0}, {&(0x7f0000000700)="b67838ece8a799dfe70615de16857b67d17e1e8625c9974cd132bc521671fbeed08ab1d190dc8355c9797bb04444e4fe9363d132089b22234ec94fb53da80dbee072bac4461114a5b294fcf8569e1898aa1b556f1a2238a360301a027d8a2ce0add75eca7ffd23a71ea06c88ce1999810d0c6cfc208db3ca81fa2a50aa96b5c5cfe80451f505308f3d50a863870a20f248e777fad2b4ee362416f66fc4d3d0b3c60bf5c2ea795cbdf13e73ea032cb258e475f999f4945d6e9becddd27e", 0xbd}], 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x148}}], 0x4, 0x8008801)

511.829794ms ago: executing program 1 (id=2501):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1d, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x89}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x401}, @call={0x85, 0x0, 0x0, 0xa}, @tail_call, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff7}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_fd={0x18, 0x3, 0x1, 0x0, 0x1}]}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x3a, &(0x7f0000000140)=""/58, 0x40f00, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x0, 0x3, 0xf, 0x200008}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000300)=[{0x0, 0x5, 0xc}, {0x5, 0x4, 0xb, 0x6}, {0x0, 0x5, 0x10, 0xb}], 0x10, 0x7af}, 0x94)
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000400)={0xd25, 0xdc4f, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000013fc0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r2 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10)
r3 = socket$netlink(0x10, 0x3, 0x4)
write(r3, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYRES64=r4, @ANYRESHEX=r1], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10)
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r3, &(0x7f0000004ec0), 0x0, 0x2000, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r9, @ANYBLOB="0500000000000000000002000000", @ANYRES32=r10, @ANYBLOB="2d000e0080000000ffffffffffff080211000000080211000000000000000000000000006400000025030000000000000800"], 0x80}}, 0x0)
sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$inet(r6, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000340)="5c00000012006bab9a3fe3d86edabf0a046b876c1d0048007ea60864160af36504001d0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509debbfbffa8499c69ac76dd752d00", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = socket$inet6_icmp(0xa, 0x2, 0x3a)
socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$sock_linger(r12, 0x1, 0xd, &(0x7f0000000080)={0x401, 0x6}, 0x8)
close(r12)
ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000000)={'wpan4\x00'})
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="1000"/14, 0x0, 0x1ff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50)
syz_init_net_socket$ax25(0x3, 0x3, 0xcf)

350.541811ms ago: executing program 1 (id=2502):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
socket$inet6(0xa, 0x2, 0x0) (async)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) (async)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats})
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)=0x202)
ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0xff7ffeff}, {0x6, 0xa, 0xfe, 0x8001}]})
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x4, 0x84) (async)
socket$inet6_sctp(0xa, 0x4, 0x84)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r5}, 0x18)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) (async)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8)
write$cgroup_int(r7, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="090000000003da3746b702f351e130c59e7394de5f7c982e9d010390687d7a30fc7f5578c7197cba", @ANYRES16=0x0, @ANYBLOB="000429bd7000fcdbdf250300000005000700030000000600010000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
socket$rds(0x15, 0x5, 0x0) (async)
r8 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000008c0)=[{&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f0000000600)=""/123, 0x7b}, {&(0x7f0000000700)=""/113, 0x71}, {&(0x7f0000000800)=""/133, 0x85}], 0x5, 0x0, 0x4}}], 0x48}, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000004c0)={0x3, 0x20a, 0x0, 0x6898, <r9=>0x0}, &(0x7f0000000880)=0x10)
bpf$ITER_CREATE(0x21, 0xffffffffffffffff, 0x0) (async)
bpf$ITER_CREATE(0x21, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x4000010, 0xffffffffffffffff, 0x54099000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000a40)=ANY=[@ANYBLOB="500000009078080050e439cc1c50f9e8f0e11a069a10956846f9b94ac998f72d61715c8c4129345ff7afa956de43ce83b4c1b2fd7eafbe4262b2a5cceb924593f577cf04736141ea2ae5370d3f14c75cba771a9ee982efac6d632b944c8a90dcdae6810ec259f0bfba1973a8b12f4d11dabc1360ae87f6b6c78d6b2a01b5e1bda3afbb5fd61a2267026b611444954d06525cf062794471ed32d643e410ddbbfe8148fd2aa4a46e3e10213183112f97bb1b30a99b250389e8521f3e7c634923eb202b35834e1ee935c200d7140066bac96fad1591ed9a628a164ae2760f51b981fc1829feb7d3ead8bdd9ce3b5d5deee864e3b6b82d", @ANYRES8=r9, @ANYBLOB="dfe9aaaaaaaaaaaaaa8000000000000000000000000000aaff000108000000000000000000000000005eba0000000000000000", @ANYRES32=0x41424344], 0x0) (async)
syz_emit_ethernet(0x52, &(0x7f0000000a40)=ANY=[@ANYBLOB="500000009078080050e439cc1c50f9e8f0e11a069a10956846f9b94ac998f72d61715c8c4129345ff7afa956de43ce83b4c1b2fd7eafbe4262b2a5cceb924593f577cf04736141ea2ae5370d3f14c75cba771a9ee982efac6d632b944c8a90dcdae6810ec259f0bfba1973a8b12f4d11dabc1360ae87f6b6c78d6b2a01b5e1bda3afbb5fd61a2267026b611444954d06525cf062794471ed32d643e410ddbbfe8148fd2aa4a46e3e10213183112f97bb1b30a99b250389e8521f3e7c634923eb202b35834e1ee935c200d7140066bac96fad1591ed9a628a164ae2760f51b981fc1829feb7d3ead8bdd9ce3b5d5deee864e3b6b82d", @ANYRES8=r9, @ANYBLOB="dfe9aaaaaaaaaaaaaa8000000000000000000000000000aaff000108000000000000000000000000005eba0000000000000000", @ANYRES32=0x41424344], 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)

0s ago: executing program 0 (id=2503):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESDEC], 0xf8}, 0x1, 0x0, 0x0, 0x40084}, 0x20040001)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000ffffffffffffff890100000000100000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188000047eb2278a273997ec1b80029442911892704"], 0xfdef)

kernel console output (not intermixed with test programs):

wsim hwsim5 syzkaller0: entered promiscuous mode
[   91.711919][ T7432] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[   91.847023][ T7439] __nla_validate_parse: 29 callbacks suppressed
[   91.847039][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.465'.
[   91.881532][ T7442] ip6gretap0 (unregistering): left allmulticast mode
[   91.884286][ T7442] ip6gretap0 (unregistering): left promiscuous mode
[   92.169897][ T7456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.470'.
[   92.175363][ T7456] netlink: 'syz.1.470': attribute type 1 has an invalid length.
[   92.201852][ T7456] 8021q: adding VLAN 0 to HW filter on device bond4
[   92.301713][ T7466] netlink: 161716 bytes leftover after parsing attributes in process `syz.1.473'.
[   92.304671][ T7466] netlink: zone id is out of range
[   92.306562][ T7466] netlink: zone id is out of range
[   92.400697][ T7470] lo speed is unknown, defaulting to 1000
[   92.555525][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.478'.
[   92.645577][ T7489] netlink: 'syz.1.480': attribute type 32 has an invalid length.
[   92.715121][ T7495] bond0: (slave gretap0): Opening slave failed
[   92.732265][   T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.735515][   T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.759338][ T7494] lo speed is unknown, defaulting to 1000
[   92.921798][ T7510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.485'.
[   92.928781][ T7507] netlink: 36 bytes leftover after parsing attributes in process `syz.2.484'.
[   93.061266][ T7522] netlink: 92 bytes leftover after parsing attributes in process `syz.2.487'.
[   93.067397][ T7522] netlink: 64 bytes leftover after parsing attributes in process `syz.2.487'.
[   93.513478][ T7548] netlink: 16 bytes leftover after parsing attributes in process `syz.2.495'.
[   93.573548][ T7554] netlink: 28 bytes leftover after parsing attributes in process `syz.2.496'.
[   94.062258][ T7586] netlink: 'syz.1.502': attribute type 1 has an invalid length.
[   94.081891][ T7586] netlink: 'syz.1.502': attribute type 1 has an invalid length.
[   94.470776][ T7611] netlink: 'syz.2.513': attribute type 7 has an invalid length.
[   94.588008][ T7617] geneve1: entered allmulticast mode
[   95.071509][ T7630] netlink: 'syz.2.516': attribute type 4 has an invalid length.
[   95.119575][ T7632] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[   95.178571][ T7632] bridge_slave_1: left allmulticast mode
[   95.180792][ T7632] bridge_slave_1: left promiscuous mode
[   95.185895][ T7632] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.203345][ T7632] bridge_slave_0: left allmulticast mode
[   95.209893][ T7632] bridge_slave_0: left promiscuous mode
[   95.216092][ T7632] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.401174][ T7642] IPv6: sit1: Disabled Multicast RS
[   95.404113][ T7642] sit1: entered allmulticast mode
[   95.409357][ T7644] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[   95.411574][ T7644] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[   96.653192][ T7687] netlink: 'syz.0.533': attribute type 1 has an invalid length.
[   96.660947][ T7687] netlink: 'syz.0.533': attribute type 1 has an invalid length.
[   96.813436][ T7702] syzkaller0: entered promiscuous mode
[   96.815609][ T7702] syzkaller0: entered allmulticast mode
[   96.829356][ T7702] openvswitch: netlink: Flow key attr not present in new flow.
[   96.949294][ T7713] netlink: 'syz.0.543': attribute type 11 has an invalid length.
[   96.954917][ T7712] netlink: 'syz.0.543': attribute type 11 has an invalid length.
[   96.957721][ T7710] netlink: 'syz.2.542': attribute type 9 has an invalid length.
[   97.181488][ T7728] 8021q: adding VLAN 0 to HW filter on device bond5
[   97.184259][ T7728] __nla_validate_parse: 13 callbacks suppressed
[   97.184268][ T7728] netlink: 24 bytes leftover after parsing attributes in process `syz.1.548'.
[   97.557987][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.549'.
[   97.719518][ T7737] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[   97.722527][ T7737] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   97.808612][ T7741] netlink: 36 bytes leftover after parsing attributes in process `syz.0.552'.
[   97.911112][ T7743] lo speed is unknown, defaulting to 1000
[   97.920592][ T7744] lo speed is unknown, defaulting to 1000
[   98.007821][ T7747] validate_nla: 1 callbacks suppressed
[   98.007836][ T7747] netlink: 'syz.1.554': attribute type 2 has an invalid length.
[   98.045446][ T7747] : entered promiscuous mode
[   98.165125][ T7762] netlink: 28 bytes leftover after parsing attributes in process `syz.2.555'.
[   98.362475][ T7774] netlink: 16 bytes leftover after parsing attributes in process `syz.1.561'.
[   98.474971][ T7784] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[   98.479062][ T7784] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   98.520084][ T7786] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   98.546419][ T7786] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[   98.549295][ T7786] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[   98.628126][ T7786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.566'.
[   98.652431][ T7794] netlink: 'syz.0.562': attribute type 1 has an invalid length.
[   98.655614][ T7794] netlink: 'syz.0.562': attribute type 1 has an invalid length.
[   98.663511][ T7794] netlink: 224 bytes leftover after parsing attributes in process `syz.0.562'.
[   98.716794][ T7797] netlink: 'syz.2.569': attribute type 11 has an invalid length.
[   98.801525][ T7806] lo speed is unknown, defaulting to 1000
[   98.922344][ T7808] lo speed is unknown, defaulting to 1000
[   99.299508][ T7836] netlink: 16 bytes leftover after parsing attributes in process `syz.0.580'.
[   99.308962][ T7836] netlink: 28 bytes leftover after parsing attributes in process `syz.0.580'.
[   99.347026][ T7840] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[   99.419653][ T7848] netlink: 24 bytes leftover after parsing attributes in process `syz.2.584'.
[   99.828724][ T7880] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[   99.832215][ T7880] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   99.970375][ T7895] netlink: 'syz.0.601': attribute type 32 has an invalid length.
[  100.039804][ T7902] lo speed is unknown, defaulting to 1000
[  100.150382][ T7902] hsr_slave_1 (unregistering): left promiscuous mode
[  100.160475][ T7911] netlink: 'syz.1.606': attribute type 29 has an invalid length.
[  100.164563][ T7911] netlink: 'syz.1.606': attribute type 29 has an invalid length.
[  100.505547][ T7922] netlink: 'syz.0.610': attribute type 11 has an invalid length.
[  100.509697][ T7922] bridge_slave_1: left allmulticast mode
[  100.511962][ T7922] bridge_slave_1: left promiscuous mode
[  100.514350][ T7922] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.520837][ T7922] bridge_slave_0: left allmulticast mode
[  100.522890][ T7922] bridge_slave_0: left promiscuous mode
[  100.524992][ T7922] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.561154][ T7923] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[  100.564226][ T7923] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.640676][ T7925] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  100.735168][ T7932] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  100.741204][ T7932] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  100.777996][ T7932] lo speed is unknown, defaulting to 1000
[  101.324516][ T7965] geneve2: entered promiscuous mode
[  101.327062][ T7965] geneve2: entered allmulticast mode
[  101.332614][   T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 59564 - 0
[  101.337988][   T12] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 44022 - 0
[  101.341561][   T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 59564 - 0
[  101.345453][   T12] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 44022 - 0
[  101.351657][   T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 59564 - 0
[  101.355108][   T12] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 44022 - 0
[  101.362981][   T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 59564 - 0
[  101.368560][   T12] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 44022 - 0
[  101.991587][ T8007] syz_tun: entered allmulticast mode
[  102.010183][ T8004] lo speed is unknown, defaulting to 1000
[  102.021330][ T8007] dvmrp8: entered allmulticast mode
[  102.029984][ T8007] syz_tun: left allmulticast mode
[  102.032191][ T8007] dvmrp8: left allmulticast mode
[  102.221906][ T8014] __nla_validate_parse: 10 callbacks suppressed
[  102.221920][ T8014] netlink: 16 bytes leftover after parsing attributes in process `syz.2.640'.
[  102.306873][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.638'.
[  102.310828][ T8004] netlink: 20 bytes leftover after parsing attributes in process `syz.1.638'.
[  102.365501][ T8004] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  102.370814][ T8004] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  102.439541][ T8030] netlink: 36 bytes leftover after parsing attributes in process `syz.2.644'.
[  102.534343][ T8035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.645'.
[  102.730566][ T8045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.649'.
[  102.760411][ T8047] netlink: 44 bytes leftover after parsing attributes in process `syz.2.650'.
[  102.882952][ T8053] netlink: 116 bytes leftover after parsing attributes in process `syz.0.652'.
[  102.914876][ T8055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.653'.
[  102.975676][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.652'.
[  102.998762][ T8053] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  103.002058][ T8053] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  103.032200][ T8061] bond0: (slave bond_slave_0): Releasing backup interface
[  103.037461][ T8061] bond0: (slave bond_slave_1): Releasing backup interface
[  103.043166][ T8061] team0: Port device team_slave_0 removed
[  103.053218][ T8061] team0: Port device team_slave_1 removed
[  103.056160][ T8061] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.060521][ T8061] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.064894][ T8061] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  103.070719][ T8061] batman_adv: batadv0: Removing interface: ip6gretap1
[  103.135211][ T8066] lo speed is unknown, defaulting to 1000
[  103.392137][ T8094] netlink: 'syz.1.662': attribute type 1 has an invalid length.
[  103.487439][ T8098] netlink: 'syz.1.662': attribute type 1 has an invalid length.
[  103.652382][ T8117] netlink: 'syz.2.669': attribute type 2 has an invalid length.
[  103.662394][ T8117] ave_0: entered promiscuous mode
[  103.818483][ T8125] lo speed is unknown, defaulting to 1000
[  103.821138][ T8134] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 3, id = 0
[  104.278297][ T8158] netlink: 'syz.0.680': attribute type 1 has an invalid length.
[  104.305510][ T8158] 8021q: adding VLAN 0 to HW filter on device bond9
[  104.330519][ T8158] bond9: (slave veth9): Enslaving as an active interface with a down link
[  104.348062][ T8158] macvlan0: entered promiscuous mode
[  104.350242][ T8158] macvlan0: entered allmulticast mode
[  104.353160][ T8158] bond9: entered promiscuous mode
[  104.357939][ T8158] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  104.361356][ T8158] bond9: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  104.368976][ T8158] bond9: left promiscuous mode
[  104.468191][ T8162] netlink: 'syz.0.681': attribute type 20 has an invalid length.
[  104.528316][ T8162] netlink: 'syz.0.681': attribute type 20 has an invalid length.
[  105.362998][ T8189] IPv6: Can't replace route, no match found
[  105.904920][ T8225] netlink: 'syz.2.698': attribute type 32 has an invalid length.
[  106.182824][ T8238] netlink: 'syz.1.703': attribute type 11 has an invalid length.
[  106.268658][ T8250] netlink: 'syz.2.705': attribute type 10 has an invalid length.
[  106.284338][ T8250] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  106.293715][ T8250] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  106.296764][ T8250] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  106.324821][ T8252] 8021q: adding VLAN 0 to HW filter on device bond6
[  106.678208][ T8276] netlink: 'syz.1.714': attribute type 1 has an invalid length.
[  107.077072][ T8299] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  107.081042][ T8299] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  107.159769][ T8301] gre0: entered promiscuous mode
[  107.162615][ T8301] gre0: entered allmulticast mode
[  107.171509][ T8305] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (10)
[  107.233535][ T8310] __nla_validate_parse: 26 callbacks suppressed
[  107.233550][ T8310] netlink: 104 bytes leftover after parsing attributes in process `syz.2.729'.
[  107.245068][ T8310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.729'.
[  107.422055][ T8321] sctp: [Deprecated]: syz.0.734 (pid 8321) Use of int in max_burst socket option.
[  107.422055][ T8321] Use struct sctp_assoc_value instead
[  107.513964][ T8327] syzkaller1: entered promiscuous mode
[  107.518102][ T8327] syzkaller1: entered allmulticast mode
[  107.555234][ T8325] veth0_to_bond: left allmulticast mode
[  107.559629][ T8325] vlan0: left promiscuous mode
[  107.563022][ T8325] team1: left promiscuous mode
[  107.564861][ T8325] team1: left allmulticast mode
[  107.568230][ T8325] bond2: left promiscuous mode
[  107.570718][ T8325] bridge1: left promiscuous mode
[  107.572925][ T8325] bond2: left allmulticast mode
[  107.574953][ T8325] bridge1: left allmulticast mode
[  107.578066][ T8325] sit1: left promiscuous mode
[  107.597688][ T8325] bridge3: left allmulticast mode
[  107.605509][ T8325] syzkaller0: left promiscuous mode
[  107.608353][ T8325] syzkaller0: left allmulticast mode
[  107.619982][ T8325] bond3: left allmulticast mode
[  107.629954][ T5694] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  107.633356][ T5694] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  107.638658][ T5694] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  107.648532][ T5694] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  107.768092][ T8334] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:bb
[  108.001042][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.743'.
[  108.075288][ T8351] bridge0: port 1(syz_tun) entered blocking state
[  108.078358][ T8351] bridge0: port 1(syz_tun) entered disabled state
[  108.081752][ T8351] syz_tun: entered allmulticast mode
[  108.085541][ T8351] syz_tun: entered promiscuous mode
[  108.137783][ T8354] netlink: 16 bytes leftover after parsing attributes in process `syz.0.745'.
[  108.153535][ T8356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.746'.
[  108.159802][ T8356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.746'.
[  108.192130][ T8358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.747'.
[  108.414189][ T8372] netlink: 4208 bytes leftover after parsing attributes in process `syz.0.751'.
[  109.137945][ T8387] batman_adv: batadv0: Local translation table size (136) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a
[  109.157022][ T8387] vlan0: entered allmulticast mode
[  109.159008][ T8387] batadv0: entered allmulticast mode
[  109.323244][ T8399] netlink: 36 bytes leftover after parsing attributes in process `syz.2.759'.
[  109.399413][ T8398] netlink: 60 bytes leftover after parsing attributes in process `syz.0.758'.
[  109.443769][ T8408] syzkaller1: entered allmulticast mode
[  109.464978][ T8410] validate_nla: 4 callbacks suppressed
[  109.464987][ T8410] netlink: 'syz.2.761': attribute type 32 has an invalid length.
[  109.470877][ T8410] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  109.557284][ T8415] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:bb
[  109.664926][ T8421] netlink: 'syz.0.766': attribute type 1 has an invalid length.
[  109.669490][ T8421] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  109.714750][ T8428] netlink: 'syz.0.767': attribute type 1 has an invalid length.
[  109.723496][ T8428] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  109.759911][ T8433] 8021q: VLANs not supported on ip_vti0
[  109.868164][ T8440] netlink: 'syz.2.770': attribute type 20 has an invalid length.
[  109.874617][ T8440] netlink: 'syz.2.770': attribute type 20 has an invalid length.
[  109.877495][ T5878] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  109.883081][ T5878] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  109.886371][ T5878] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  109.889044][ T5878] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  110.144467][ T8451] lo speed is unknown, defaulting to 1000
[  110.447785][ T8476] netlink: 'syz.0.781': attribute type 11 has an invalid length.
[  110.480689][ T8478] netlink: 'syz.2.782': attribute type 32 has an invalid length.
[  110.516565][ T8480] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component
[  110.544962][ T5853] Bluetooth: hci2: link tx timeout
[  110.551868][ T5853] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  110.557513][ T5857] Bluetooth: hci2: link tx timeout
[  110.559633][ T5857] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  110.573133][ T8483] netlink: 'syz.2.784': attribute type 1 has an invalid length.
[  110.599660][ T8483] 8021q: adding VLAN 0 to HW filter on device bond5
[  111.297288][ T8518] netlink: 'syz.0.795': attribute type 1 has an invalid length.
[  111.331823][ T8518] 8021q: adding VLAN 0 to HW filter on device bond10
[  111.393536][ T8524] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.404689][ T8524] syzkaller0: entered promiscuous mode
[  111.407615][ T8524] syzkaller0: entered allmulticast mode
[  111.414194][ T8524] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  111.436234][ T8524] tipc: Resetting bearer <eth:syzkaller0>
[  111.590854][ T8539] lo: entered allmulticast mode
[  111.663419][ T8537] lo: left allmulticast mode
[  111.922817][ T8560] netlink: 'syz.2.808': attribute type 1 has an invalid length.
[  111.957172][ T8560] bond6: (slave geneve2): making interface the new active one
[  111.960975][ T8560] bond6: (slave geneve2): Enslaving as an active interface with an up link
[  111.964776][ T5878] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  111.970293][ T5879] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  111.973578][ T5879] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  111.977177][ T5879] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  112.036587][ T8562] 8021q: adding VLAN 0 to HW filter on device bond6
[  112.626108][ T5857] Bluetooth: hci2: command 0x0405 tx timeout
[  112.702037][ T8571] team0: entered promiscuous mode
[  112.703700][ T8571] team_slave_0: entered promiscuous mode
[  112.705677][ T8571] team_slave_1: entered promiscuous mode
[  112.708182][ T8571] vlan0: entered promiscuous mode
[  112.710107][ T8571] team0: entered allmulticast mode
[  112.711656][ T8571] team_slave_0: entered allmulticast mode
[  112.713489][ T8571] team_slave_1: entered allmulticast mode
[  112.715680][ T8571] vlan0: entered allmulticast mode
[  112.718512][ T8571] veth0_vlan: entered allmulticast mode
[  112.721572][ T8571] 8021q: adding VLAN 0 to HW filter on device team0
[  112.753731][ T8560] syz.2.808 (8560) used greatest stack depth: 18776 bytes left
[  112.775890][ T8577] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.778748][ T8577] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  112.781147][ T8577] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  112.825342][ T8577] tipc: Resetting bearer <eth:syzkaller0>
[  112.872257][ T8583] __nla_validate_parse: 26 callbacks suppressed
[  112.872273][ T8583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.816'.
[  112.883165][ T8583] syz_tun: left allmulticast mode
[  112.885195][ T8583] syz_tun: left promiscuous mode
[  112.889042][ T8583] bridge0: port 1(syz_tun) entered disabled state
[  112.959854][ T8587] netlink: 48 bytes leftover after parsing attributes in process `syz.2.817'.
[  113.020470][ T8592] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  113.024363][ T8592] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  113.030455][ T8592] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  113.079966][ T8596] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  113.084815][ T8596] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  113.380231][ T8601] bond0: (slave netdevsim0): Releasing backup interface
[  113.712889][ T8622] netlink: 224 bytes leftover after parsing attributes in process `syz.1.828'.
[  113.903538][ T8626] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  113.909262][ T8626] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  114.110266][ T8635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.832'.
[  114.131758][ T8637] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  114.255384][ T8649] netlink: 40 bytes leftover after parsing attributes in process `syz.2.837'.
[  114.279317][ T8648] lo speed is unknown, defaulting to 1000
[  114.332698][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.838'.
[  114.525231][ T8658] 8021q: adding VLAN 0 to HW filter on device bond7
[  114.529085][ T8658] bond0: (slave bond7): Enslaving as an active interface with an up link
[  115.079028][ T8698] validate_nla: 4 callbacks suppressed
[  115.079044][ T8698] netlink: 'syz.2.847': attribute type 62 has an invalid length.
[  115.164170][ T8703] netlink: 36 bytes leftover after parsing attributes in process `syz.1.849'.
[  115.270335][ T8712] macvtap1: entered promiscuous mode
[  115.277156][ T8712] macvtap1: entered allmulticast mode
[  115.279967][ T8712] syz_tun: entered promiscuous mode
[  115.282233][ T8712] syz_tun: entered allmulticast mode
[  115.297120][ T8712] team0: Device macvtap1 failed to register rx_handler
[  115.309617][ T8712] syz_tun: left allmulticast mode
[  115.311961][ T8712] syz_tun: left promiscuous mode
[  115.362087][ T8721] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  115.594167][ T8731] : entered promiscuous mode
[  116.413692][ T8747] netlink: 16 bytes leftover after parsing attributes in process `syz.0.862'.
[  116.413836][ T8748] netlink: 16 bytes leftover after parsing attributes in process `syz.2.863'.
[  116.419909][ T8747] batman_adv: batadv0: Interface deactivated: dummy0
[  116.422045][ T8747] batman_adv: batadv0: Removing interface: dummy0
[  116.430385][ T8748] netlink: 'syz.2.863': attribute type 2 has an invalid length.
[  116.514306][ T8759] netlink: 40 bytes leftover after parsing attributes in process `syz.0.864'.
[  116.523593][ T8758] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  116.542130][ T8758] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  116.588819][ T8764] lo speed is unknown, defaulting to 1000
[  116.623645][ T8766] lo speed is unknown, defaulting to 1000
[  117.708062][ T8788] netlink: 'syz.0.874': attribute type 32 has an invalid length.
[  117.800934][ T8791] netlink: 'syz.0.875': attribute type 10 has an invalid length.
[  117.823717][ T8791] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  118.771554][ T8803] lo speed is unknown, defaulting to 1000
[  118.841517][ T8809] __nla_validate_parse: 9 callbacks suppressed
[  118.841532][ T8809] netlink: 36 bytes leftover after parsing attributes in process `syz.2.880'.
[  118.913872][ T8813] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  119.021049][ T8818] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  119.024671][ T8818] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  119.123199][ T8827] tipc: Enabled bearer <eth:hsr0>, priority 10
[  119.152595][ T8829] netlink: 'syz.1.889': attribute type 32 has an invalid length.
[  119.206797][ T8833] lo speed is unknown, defaulting to 1000
[  119.239306][ T8835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.891'.
[  119.385440][ T8851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.895'.
[  119.417474][ T8851] netlink: 16 bytes leftover after parsing attributes in process `syz.1.895'.
[  119.500783][ T8851] bond0: (slave wlan1): Releasing backup interface
[  119.530374][ T8861] netlink: 16 bytes leftover after parsing attributes in process `syz.0.899'.
[  119.731286][ T8875] netlink: 'syz.0.902': attribute type 1 has an invalid length.
[  119.753844][ T8875] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  119.777018][ T8880] netlink: 28 bytes leftover after parsing attributes in process `syz.2.904'.
[  120.005149][ T8900] lo speed is unknown, defaulting to 1000
[  120.024038][ T8897] lo speed is unknown, defaulting to 1000
[  120.126098][ T8908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.912'.
[  120.252550][ T8905] netlink: 40 bytes leftover after parsing attributes in process `syz.0.912'.
[  120.257163][ T8905] netlink: 'syz.0.912': attribute type 1 has an invalid length.
[  120.311914][ T8913] netlink: 'syz.0.914': attribute type 4 has an invalid length.
[  120.349315][ T8917] netlink: 20 bytes leftover after parsing attributes in process `syz.2.915'.
[  120.409259][ T8919] netlink: 'syz.0.916': attribute type 3 has an invalid length.
[  120.566795][ T8929] netlink: 'syz.2.919': attribute type 21 has an invalid length.
[  120.569981][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.919'.
[  120.573601][ T8929] netlink: 'syz.2.919': attribute type 21 has an invalid length.
[  120.628493][ T8935] pim6reg1: entered promiscuous mode
[  120.630175][ T8935] pim6reg1: entered allmulticast mode
[  121.100818][ T8958] sctp: [Deprecated]: syz.0.929 (pid 8958) Use of struct sctp_assoc_value in delayed_ack socket option.
[  121.100818][ T8958] Use struct sctp_sack_info instead
[  121.158812][ T8966] lo speed is unknown, defaulting to 1000
[  121.865465][ T9018] delete_channel: no stack
[  122.179094][ T9037] gre0: left promiscuous mode
[  122.181194][ T9037] gre0: left allmulticast mode
[  122.250348][ T9040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  122.305187][ T9044] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  122.366228][ T9046] netem: change failed
[  123.061999][ T9065] netlink: 'syz.2.958': attribute type 1 has an invalid length.
[  123.102498][ T9065] veth5: entered promiscuous mode
[  123.116924][ T9065] bond8: (slave veth5): Enslaving as a backup interface with a down link
[  123.262703][ T9065] 8021q: adding VLAN 0 to HW filter on device bond8
[  123.364827][ T9076] erspan0: entered allmulticast mode
[  123.513350][ T9080] netlink: 'syz.2.963': attribute type 2 has an invalid length.
[  124.033120][ T9089] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  124.100606][ T9092] __nla_validate_parse: 12 callbacks suppressed
[  124.100620][ T9092] netlink: 36 bytes leftover after parsing attributes in process `syz.0.966'.
[  124.105789][ T9089] lo speed is unknown, defaulting to 1000
[  124.386327][ T5853] Bluetooth: hci1: command tx timeout
[  124.475092][ T9109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.970'.
[  124.490103][ T9109] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  125.445585][ T9129] netlink: 36 bytes leftover after parsing attributes in process `syz.2.977'.
[  125.547755][ T9133] lo speed is unknown, defaulting to 1000
[  125.628195][ T9137] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.632824][ T9137] 8021q: adding VLAN 0 to HW filter on device team0
[  125.649351][ T9137] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  125.661078][ T5925] lo speed is unknown, defaulting to 1000
[  125.662960][ T5925] syz2: Port: 1 Link ACTIVE
[  126.140697][ T9146] netlink: zone id is out of range
[  126.142724][ T9146] netlink: zone id is out of range
[  126.144627][ T9146] netlink: zone id is out of range
[  126.149402][ T9146] netlink: zone id is out of range
[  126.151432][ T9146] netlink: zone id is out of range
[  126.153436][ T9146] netlink: zone id is out of range
[  126.155496][ T9146] netlink: zone id is out of range
[  126.161764][ T9146] netlink: zone id is out of range
[  126.310755][ T9150] netlink: 52 bytes leftover after parsing attributes in process `syz.2.984'.
[  126.358092][ T9152] netlink: 24 bytes leftover after parsing attributes in process `syz.2.985'.
[  126.513011][ T9154] netlink: 'syz.2.985': attribute type 11 has an invalid length.
[  127.234993][ T9161] netlink: 'syz.2.988': attribute type 6 has an invalid length.
[  127.633206][ T9176] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  127.653888][ T9176] bond0: entered promiscuous mode
[  127.656219][ T9176] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  127.660133][ T9176] bond7: entered promiscuous mode
[  127.662918][ T9176] bond0: left promiscuous mode
[  127.664775][ T9176] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  127.674506][ T9176] bond7: left promiscuous mode
[  127.904860][ T9187] tun0: tun_chr_ioctl cmd 2147767520
[  128.028380][ T9127] net_ratelimit: 1 callbacks suppressed
[  128.028397][ T9127] Set syz1 is full, maxelem 65536 reached
[  128.099276][ T9193] can: request_module (can-proto-0) failed.
[  128.107487][ T9197] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  128.114794][ T9197] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  128.121159][ T9197] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  128.241687][ T9209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1001'.
[  128.342939][ T9214] netlink: 'syz.0.1006': attribute type 32 has an invalid length.
[  128.360931][ T9211] lo speed is unknown, defaulting to 1000
[  128.395572][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1007'.
[  128.408871][ T9222] netlink: 'syz.2.1005': attribute type 10 has an invalid length.
[  128.412699][ T9222] 8021q: adding VLAN 0 to HW filter on device batadv0
[  128.419196][ T9222] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  128.422997][ T9222] netlink: 'syz.2.1005': attribute type 10 has an invalid length.
[  128.427295][ T9222] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1005'.
[  128.438585][ T9222] batadv0: entered promiscuous mode
[  128.440307][ T9222] batadv0: entered allmulticast mode
[  128.443267][ T9222] bond0: (slave batadv0): Releasing backup interface
[  128.461657][ T9222] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  128.515170][ T9229] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun!
[  128.979095][ T9253] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1018'.
[  129.034427][ T9253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1018'.
[  129.126163][ T9260] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  129.232890][ T9279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1025'.
[  129.237558][ T9281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1025'.
[  129.250826][ T9282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1026'.
[  129.254132][ T9281] macvtap1: entered promiscuous mode
[  129.257539][ T9281] erspan0: entered promiscuous mode
[  129.260108][ T9281] macvtap1: entered allmulticast mode
[  129.263075][ T9281] erspan0: entered allmulticast mode
[  129.275494][ T9279] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1025'.
[  129.393443][ T9290] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1029'.
[  129.541330][ T9307] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  129.545083][ T9307] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  129.680930][ T9320] sctp: [Deprecated]: syz.0.1040 (pid 9320) Use of int in max_burst socket option deprecated.
[  129.680930][ T9320] Use struct sctp_assoc_value instead
[  129.717675][ T9318] vlan2: entered promiscuous mode
[  129.720111][ T9318] bond0: entered promiscuous mode
[  129.722260][ T9318] bond_slave_0: entered promiscuous mode
[  129.725988][ T9318] bond_slave_1: entered promiscuous mode
[  130.046602][ T9337] pimreg: entered allmulticast mode
[  130.133139][ T9342] dvmrp8: entered allmulticast mode
[  130.140607][ T9342] pimreg: left allmulticast mode
[  130.142873][ T9342] dvmrp8: left allmulticast mode
[  130.779491][ T9355] lo speed is unknown, defaulting to 1000
[  130.989858][ T9365] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1055'.
[  131.000205][ T9361] netlink: 'syz.1.1053': attribute type 2 has an invalid length.
[  131.003292][ T9361] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1053'.
[  131.006853][ T9361] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  131.012720][ T9361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1053'.
[  131.015608][ T9361] netlink: 'syz.1.1053': attribute type 5 has an invalid length.
[  131.021833][ T9361] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1053'.
[  131.035635][ T9361] geneve2: entered promiscuous mode
[  131.038331][ T9361] geneve2: entered allmulticast mode
[  131.042276][ T6001] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  131.046531][ T6001] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  131.049869][ T6001] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  131.052594][ T6001] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  131.215550][ T9382] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1062'.
[  131.260157][ T9388] ip6gre1: entered allmulticast mode
[  131.585138][ T9406] team0 (unregistering): Port device team_slave_0 removed
[  131.597893][ T9406] team0 (unregistering): Port device team_slave_1 removed
[  131.603362][ T9406] team0 (unregistering): Port device bond3 removed
[  131.914081][ T9423] lo speed is unknown, defaulting to 1000
[  131.973094][ T9424] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  131.975412][ T9424] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  132.472543][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.519491][ T9448] nbd: socks must be embedded in a SOCK_ITEM attr
[  132.781867][ T9467] netlink: 'syz.0.1082': attribute type 11 has an invalid length.
[  132.788011][ T9462] netlink: 'syz.1.1080': attribute type 5 has an invalid length.
[  133.120776][ T9482] netlink: 'syz.1.1086': attribute type 32 has an invalid length.
[  133.553304][ T9505] bond9: entered promiscuous mode
[  133.555656][ T9505] bond9: entered allmulticast mode
[  133.562123][ T9505] 8021q: adding VLAN 0 to HW filter on device bond9
[  134.030670][ T9537] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  134.034692][ T9537] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  134.039218][ T9537] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  134.343119][ T9543] __nla_validate_parse: 13 callbacks suppressed
[  134.343132][ T9543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1102'.
[  134.352612][ T9543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1102'.
[  134.474728][ T9576] syzkaller1: entered promiscuous mode
[  134.477604][ T9576] syzkaller1: entered allmulticast mode
[  134.595090][ T9583] bridge3: entered allmulticast mode
[  134.626316][ T9585] lo speed is unknown, defaulting to 1000
[  134.815268][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1117'.
[  134.871512][ T9601] IPVS: set_ctl: invalid protocol: 98 172.20.20.63:20004
[  134.889204][ T9597] lo speed is unknown, defaulting to 1000
[  135.015215][ T9601] lo speed is unknown, defaulting to 1000
[  135.064363][ T9614] netlink: 'syz.2.1122': attribute type 10 has an invalid length.
[  135.088525][ T9614] team0: Port device 0! added
[  135.093121][ T9614] netlink: 'syz.2.1122': attribute type 10 has an invalid length.
[  135.118038][ T9614] team0: Port device 0! removed
[  135.123818][ T9614] bond0: (slave 0!): Enslaving as an active interface with an up link
[  135.444833][ T9643] netlink: 'syz.1.1128': attribute type 6 has an invalid length.
[  135.457667][ T9643] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1128'.
[  135.530203][ T9647] netlink: 47 bytes leftover after parsing attributes in process `syz.0.1130'.
[  135.634917][ T9656] netlink: 'syz.1.1133': attribute type 32 has an invalid length.
[  135.678903][ T9657] ieee802154 phy1 wpan1: encryption failed: -22
[  136.169133][ T9676] netlink: 'syz.1.1138': attribute type 1 has an invalid length.
[  136.172680][ T9676] netlink: 'syz.1.1138': attribute type 1 has an invalid length.
[  136.176629][ T9676] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1138'.
[  136.376676][ T9678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1139'.
[  136.424326][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1139'.
[  136.488676][ T9681] lo speed is unknown, defaulting to 1000
[  136.735635][ T9700] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1146'.
[  136.740515][ T9700] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1146'.
[  136.744186][ T9700] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  136.879165][ T9708] netlink: 'syz.0.1149': attribute type 9 has an invalid length.
[  137.084021][ T9713] "syz.1.1151" (9713) uses obsolete ecb(arc4) skcipher
[  137.314777][ T9740] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  137.352592][ T9742] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  137.468967][ T9735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  137.473268][ T9735] bond_slave_0: left promiscuous mode
[  137.478805][ T9735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  137.483610][ T9735] bond_slave_1: left promiscuous mode
[  137.487556][ T9735] bond0 (unregistering): Released all slaves
[  137.722964][ T9764] can: request_module (can-proto-3) failed.
[  137.756863][ T9767] lo speed is unknown, defaulting to 1000
[  138.115208][ T9776] netem: change failed
[  139.149540][ T9807] validate_nla: 3 callbacks suppressed
[  139.149551][ T9807] netlink: 'syz.0.1171': attribute type 3 has an invalid length.
[  139.217700][ T9814] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 4, id = 0
[  139.258857][ T9821] batman_adv: batadv0: Removing interface: dummy0
[  139.261886][ T9821] bridge_slave_0: left allmulticast mode
[  139.263814][ T9821] bridge_slave_0: left promiscuous mode
[  139.268161][ T9821] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.273744][ T9821] bridge_slave_1: left allmulticast mode
[  139.278842][ T9821] bridge_slave_1: left promiscuous mode
[  139.280960][ T9821] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.288568][ T9821] team_slave_0: left promiscuous mode
[  139.290406][ T9821] team_slave_0: left allmulticast mode
[  139.299231][ T9821] team0: Port device team_slave_0 removed
[  139.301493][ T9821] team_slave_1: left promiscuous mode
[  139.303867][ T9821] team_slave_1: left allmulticast mode
[  139.312868][ T9821] team0: Port device team_slave_1 removed
[  139.318174][ T9821] batman_adv: batadv0: Removing interface: batadv_slave_0
[  139.325140][ T9821] batman_adv: batadv0: Removing interface: batadv_slave_1
[  139.330823][ T9821] vlan0: left promiscuous mode
[  139.332633][ T9821] vlan0: left allmulticast mode
[  139.334498][ T9821] veth0_vlan: left allmulticast mode
[  139.343039][ T9821] team0: Port device vlan0 removed
[  139.345439][ T9821] batman_adv: batadv0: Removing interface: ip6gretap1
[  139.353672][ T9821] bond1: left allmulticast mode
[  139.355517][ T9821] bond1: left promiscuous mode
[  139.360465][ T9821] bridge0: port 3(bond1) entered disabled state
[  139.368988][ T9829] ieee802154 phy1 wpan1: encryption failed: -22
[  139.371580][ T9821] bond2: (slave bridge1): Removing an active aggregator
[  139.378488][ T9821] bond2: (slave bridge1): Releasing backup interface
[  139.421042][ T9834] 8021q: VLANs not supported on syzkaller1
[  139.450145][ T9836] __nla_validate_parse: 15 callbacks suppressed
[  139.450161][ T9836] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1178'.
[  139.502912][ T9839] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1179'.
[  139.529878][ T9839] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  139.532345][ T9839] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  139.533736][ T9842] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  139.540886][ T9842] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  139.543508][ T9842] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  139.623628][ T9847] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1182'.
[  139.681567][ T9850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1184'.
[  140.396086][ T9857] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1185'.
[  140.616660][ T9872] 8021q: VLANs not supported on nlmon0
[  140.630744][ T9875] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1192'.
[  140.669019][ T9875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1192'.
[  140.725405][ T9881] netlink: 'syz.1.1194': attribute type 32 has an invalid length.
[  140.784227][ T9885] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1196'.
[  140.793635][ T9885] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  140.958096][ T9901] netlink: 'syz.2.1202': attribute type 32 has an invalid length.
[  141.085210][ T9905] lo speed is unknown, defaulting to 1000
[  141.418825][ T9911] tipc: Enabled bearer <ib:veth1_macvtap>, priority 10
[  141.770769][ T9924] lo speed is unknown, defaulting to 1000
[  141.790860][ T9930] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1211'.
[  141.811375][ T9930] netlink: 'syz.1.1211': attribute type 11 has an invalid length.
[  142.024064][ T9943] netlink: 'syz.0.1214': attribute type 9 has an invalid length.
[  142.174542][ T9952] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1218'.
[  142.177930][ T9954] IPv6: sit2: Disabled Multicast RS
[  142.180185][ T9954] sit2: entered allmulticast mode
[  142.301863][ T9961] team0: left promiscuous mode
[  142.303473][ T9961] team0: left allmulticast mode
[  142.308580][ T9961] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  142.480531][ T9986] netlink: 'syz.2.1228': attribute type 4 has an invalid length.
[  142.483439][ T9986] wlan1: mtu less than device minimum
[  142.704886][ T9995] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  142.739720][ T9995] netem: change failed
[  142.813547][T10004] netlink: 'syz.1.1236': attribute type 32 has an invalid length.
[  142.905089][T10014] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  143.061354][T10027] netlink: 'syz.1.1245': attribute type 32 has an invalid length.
[  143.191832][T10034] syzkaller1: entered allmulticast mode
[  143.405173][T10041] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.412341][T10041] sctp: [Deprecated]: syz.1.1250 (pid 10041) Use of struct sctp_assoc_value in delayed_ack socket option.
[  143.412341][T10041] Use struct sctp_sack_info instead
[  143.418409][T10041] sctp: [Deprecated]: syz.1.1250 (pid 10041) Use of struct sctp_assoc_value in delayed_ack socket option.
[  143.418409][T10041] Use struct sctp_sack_info instead
[  143.543158][T10066] netlink: 'syz.2.1258': attribute type 11 has an invalid length.
[  143.833021][T10075] netlink: 'syz.0.1260': attribute type 83 has an invalid length.
[  144.670637][T10103] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  144.673855][T10103] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  144.755601][T10112] validate_nla: 1 callbacks suppressed
[  144.755617][T10112] netlink: 'syz.1.1270': attribute type 2 has an invalid length.
[  144.769645][T10112] k*]: entered promiscuous mode
[  144.822819][T10114] __nla_validate_parse: 15 callbacks suppressed
[  144.822834][T10114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1271'.
[  144.978220][T10118] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1273'.
[  144.982647][T10119] netlink: 'syz.0.1273': attribute type 11 has an invalid length.
[  145.015993][T10123] netlink: 'syz.0.1274': attribute type 2 has an invalid length.
[  145.079094][T10125] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1275'.
[  145.085546][T10125] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1275'.
[  145.274503][T10135] netlink: 'syz.2.1279': attribute type 1 has an invalid length.
[  145.297395][T10135] 8021q: adding VLAN 0 to HW filter on device bond10
[  145.307601][T10135] ipvlan2: entered allmulticast mode
[  145.309340][T10135] bond10: entered allmulticast mode
[  145.317905][T10135] bond10: (slave gretap2): making interface the new active one
[  145.320579][T10135] gretap2: entered allmulticast mode
[  145.324167][T10135] bond10: (slave gretap2): Enslaving as an active interface with an up link
[  145.327866][T10138] netlink: 'syz.0.1280': attribute type 3 has an invalid length.
[  145.340467][T10138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1280'.
[  145.457238][T10146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1283'.
[  145.482266][T10147] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1284'.
[  145.572417][T10147] netlink: 'syz.0.1284': attribute type 10 has an invalid length.
[  145.659780][T10152] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1286'.
[  145.668598][T10152] netlink: 'syz.2.1286': attribute type 11 has an invalid length.
[  145.683765][T10147] Set syz1 is full, maxelem 65536 reached
[  146.045167][T10165] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1291'.
[  146.053771][T10165] netlink: 'syz.1.1291': attribute type 11 has an invalid length.
[  146.535608][T10168] syzkaller1: entered promiscuous mode
[  146.537889][T10168] syzkaller1: entered allmulticast mode
[  146.542572][T10168] syzkaller1: left promiscuous mode
[  146.544591][T10168] syzkaller1: left allmulticast mode
[  146.786459][T10175] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1295'.
[  147.256255][T10198] netlink: 'syz.1.1301': attribute type 8 has an invalid length.
[  148.060124][T10231] syzkaller1: entered promiscuous mode
[  148.065786][T10231] syzkaller1: entered allmulticast mode
[  148.119458][T10239] netlink: 'syz.1.1316': attribute type 1 has an invalid length.
[  148.162097][T10239] gretap2: entered allmulticast mode
[  149.232701][T10298] lo speed is unknown, defaulting to 1000
[  150.088990][T10371] __nla_validate_parse: 12 callbacks suppressed
[  150.089007][T10371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1337'.
[  150.139513][T10377] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1338'.
[  150.203579][T10387] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1341'.
[  150.253284][T10394] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1342'.
[  150.288886][T10386] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  150.381724][T10404] lo speed is unknown, defaulting to 1000
[  150.409786][T10406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1345'.
[  150.413233][T10406] validate_nla: 6 callbacks suppressed
[  150.413242][T10406] netlink: 'syz.1.1345': attribute type 20 has an invalid length.
[  150.428661][ T6001] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  150.431562][ T6001] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  150.434110][ T6001] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  150.437685][T10406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1345'.
[  150.441924][T10406] netlink: 'syz.1.1345': attribute type 20 has an invalid length.
[  150.444703][ T6001] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  150.515240][T10420] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1348'.
[  150.520898][T10420] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1348'.
[  150.578629][T10427] dvmrp0: entered allmulticast mode
[  150.684507][T10436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1351'.
[  150.748818][T10445] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1352'.
[  152.004807][T10511] netlink: 'syz.0.1364': attribute type 7 has an invalid length.
[  152.004922][T10510] netlink: 'syz.0.1364': attribute type 7 has an invalid length.
[  152.061591][T10513] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.066915][T10513] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  152.215574][T10525] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  152.299341][T10525] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  152.302474][T10525] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  152.779779][T10560] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  152.933327][T10573] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  152.940273][T10573] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  152.942701][T10573] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  152.996505][T10573] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  153.300023][T10600] ..0: renamed from hsr0
[  153.303363][T10600] ..0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  153.308440][T10600] ..0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  153.312440][T10600] ..0: entered allmulticast mode
[  153.314386][T10600] hsr_slave_0: entered allmulticast mode
[  153.316534][T10600] hsr_slave_1: entered allmulticast mode
[  153.319955][T10600] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  153.626526][T10626] netlink: 'syz.1.1395': attribute type 11 has an invalid length.
[  153.630524][T10627] trusted_key: syz.2.1394 sent an empty control message without MSG_MORE.
[  153.692956][T10629] RDS: rds_bind could not find a transport for fe88::3, load rds_tcp or rds_rdma?
[  153.708372][T10629] unsupported nlmsg_type 40
[  153.731137][T10629] netlink: 'syz.2.1396': attribute type 1 has an invalid length.
[  154.057421][T10650] lo speed is unknown, defaulting to 1000
[  154.199791][T10652] netlink: 'syz.2.1404': attribute type 7 has an invalid length.
[  154.241413][T10652] bridge0: port 1(bond11) entered blocking state
[  154.244371][T10652] bridge0: port 1(bond11) entered disabled state
[  154.248360][T10652] bond11: entered allmulticast mode
[  154.388243][T10669] lo speed is unknown, defaulting to 1000
[  154.751516][T10676] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  155.152741][T10694] __nla_validate_parse: 22 callbacks suppressed
[  155.152756][T10694] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1414'.
[  155.167766][T10694] vlan0: entered allmulticast mode
[  155.169980][T10694] gretap0: entered allmulticast mode
[  155.282859][T10699] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1416'.
[  155.403618][T10704] netlink: 'syz.1.1417': attribute type 1 has an invalid length.
[  155.411878][T10704] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  155.458187][T10712] netlink: 'syz.1.1420': attribute type 12 has an invalid length.
[  155.461530][T10712] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.1420'.
[  155.471136][T10703] lo speed is unknown, defaulting to 1000
[  155.598986][T10719] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1422'.
[  155.604070][T10719] netlink: 'syz.1.1422': attribute type 11 has an invalid length.
[  155.609009][T10720] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1419'.
[  156.429017][T10751] lo speed is unknown, defaulting to 1000
[  156.624306][T10771] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1437'.
[  156.720450][T10780] netlink: 468 bytes leftover after parsing attributes in process `syz.2.1440'.
[  157.180145][T10806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1448'.
[  157.306892][T10810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1449'.
[  157.316026][T10810] bond11: left allmulticast mode
[  157.318241][T10810] bridge0: port 1(bond11) entered disabled state
[  157.344967][T10813] netlink: 'syz.0.1450': attribute type 32 has an invalid length.
[  157.601740][T10832] veth0: entered promiscuous mode
[  157.617986][T10832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1456'.
[  157.681940][T10833] lo speed is unknown, defaulting to 1000
[  157.721818][T10835] geneve0: entered promiscuous mode
[  157.723496][T10835] geneve0: entered allmulticast mode
[  157.733742][   T13] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  157.737667][   T13] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  157.740908][   T13] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  157.743577][   T13] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  157.886170][T10848] lo speed is unknown, defaulting to 1000
[  158.001191][T10848] netlink: 'syz.1.1460': attribute type 2 has an invalid length.
[  158.327928][T10866] can: request_module (can-proto-0) failed.
[  158.824473][T10894] netlink: 'syz.2.1476': attribute type 11 has an invalid length.
[  158.837868][T10895] netlink: 'syz.2.1476': attribute type 11 has an invalid length.
[  158.863617][T10897] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  158.943048][T10905] netlink: 'syz.2.1480': attribute type 32 has an invalid length.
[  159.236677][T10922] netlink: 'syz.2.1485': attribute type 29 has an invalid length.
[  159.268421][T10922] netlink: 'syz.2.1485': attribute type 2 has an invalid length.
[  159.598511][T10947] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  159.695141][T10953] lo speed is unknown, defaulting to 1000
[  159.788090][T10962] netlink: 'syz.2.1497': attribute type 32 has an invalid length.
[  159.922606][T10970] batadv0: entered promiscuous mode
[  159.924451][T10970] batadv0: entered allmulticast mode
[  160.100112][T10991] bridge6: entered promiscuous mode
[  160.102272][T10991] bridge6: entered allmulticast mode
[  160.106324][T10991] team0: Port device bridge6 added
[  160.363991][T11021] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  160.379148][T11023] __nla_validate_parse: 11 callbacks suppressed
[  160.379160][T11023] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1516'.
[  160.555271][T11038] lo speed is unknown, defaulting to 1000
[  160.593292][T11039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1521'.
[  160.645368][T11049] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1524'.
[  160.657229][T11049] vlan0: entered promiscuous mode
[  160.659276][T11049] gretap0: entered promiscuous mode
[  160.661946][T11049] vlan0: left allmulticast mode
[  160.664056][T11049] gretap0: left allmulticast mode
[  160.793824][T11057] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  160.802443][T11057] tipc: Enabled bearer <udp:syz0>, priority 10
[  160.914863][T11066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1528'.
[  161.089421][T11069] validate_nla: 2 callbacks suppressed
[  161.089437][T11069] netlink: 'syz.2.1529': attribute type 1 has an invalid length.
[  161.128208][T11071] netlink: 'syz.0.1526': attribute type 1 has an invalid length.
[  161.136824][T11071] netlink: 'syz.0.1526': attribute type 1 has an invalid length.
[  161.140136][T11071] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1526'.
[  161.200246][T11069] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1529'.
[  161.554857][T11080] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1531'.
[  161.850298][T11086] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.904551][T11083] lo speed is unknown, defaulting to 1000
[  162.024937][T11093] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1535'.
[  162.457672][T11129] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  162.461601][T11129] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  162.565286][T11133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1548'.
[  162.569203][T11133] netlink: 'syz.2.1548': attribute type 1 has an invalid length.
[  162.616517][T11133] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1548'.
[  162.620452][T11133] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  162.815022][T11154] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  162.818953][T11154] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  162.859379][T11155] lo speed is unknown, defaulting to 1000
[  163.206990][T11171] netlink: 'syz.0.1559': attribute type 1 has an invalid length.
[  163.238447][T11171] 8021q: adding VLAN 0 to HW filter on device bond12
[  163.248993][T11171] vlan1: entered promiscuous mode
[  163.250677][T11171] bond12: entered promiscuous mode
[  163.252478][T11171] vlan1: entered allmulticast mode
[  163.254674][T11171] bond12: entered allmulticast mode
[  163.278954][T11171] bond12: (slave gretap3): making interface the new active one
[  163.281708][T11171] gretap3: entered promiscuous mode
[  163.283908][T11171] gretap3: entered allmulticast mode
[  163.288046][T11171] bond12: (slave gretap3): Enslaving as an active interface with an up link
[  163.380616][T11179] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  163.835244][T11204] netlink: 'syz.1.1567': attribute type 1 has an invalid length.
[  163.839631][T11204] netlink: 'syz.1.1567': attribute type 1 has an invalid length.
[  164.944075][T11260] netlink: 'syz.1.1588': attribute type 11 has an invalid length.
[  164.990763][T11263] lo speed is unknown, defaulting to 1000
[  165.469534][T11292] __nla_validate_parse: 11 callbacks suppressed
[  165.469550][T11292] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1600'.
[  165.540908][T11296] netlink: 'syz.2.1602': attribute type 32 has an invalid length.
[  165.606973][T11303] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1605'.
[  165.612486][T11303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1605'.
[  165.672368][T11311] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1606'.
[  165.676415][T11311] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1606'.
[  165.763120][T11309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1604'.
[  165.866909][T11320] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1608'.
[  166.001688][T11329] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1611'.
[  166.079022][T11336] netlink: 'syz.0.1613': attribute type 32 has an invalid length.
[  166.189463][T11350] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1618'.
[  166.237420][T11354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1614'.
[  166.240901][T11353] syzkaller1: entered promiscuous mode
[  166.243225][T11353] syzkaller1: entered allmulticast mode
[  166.746947][T11383] netlink: 'syz.2.1627': attribute type 1 has an invalid length.
[  166.974605][T11389] netlink: 'syz.2.1629': attribute type 1 has an invalid length.
[  168.002073][   T34] audit: type=1800 audit(1757106723.748:4): pid=11430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1642" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2844 res=0 errno=0
[  168.172812][T11430] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  168.183232][T11454] ieee802154 phy1 wpan1: encryption failed: -22
[  168.277236][T11451] team0: Failed to send options change via netlink (err -105)
[  168.280450][T11451] team0: Mode changed to "loadbalance"
[  168.807995][T11490] tipc: Invalid UDP bearer configuration
[  168.808026][T11490] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  168.829581][T11490] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  169.008547][T11490] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  169.016190][T11490] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  169.024137][T11490] bond0 (unregistering): (slave netdevsim0): Releasing backup interface
[  169.034078][T11490] bond0 (unregistering): Released all slaves
[  169.164689][T11505] bond0: (slave 0!): Releasing backup interface
[  169.174788][T11505] bond0: (slave wlan1): Releasing backup interface
[  169.178348][T11505] bond0: (slave wlan1): the permanent HWaddr of slave - 08:02:11:00:00:01 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  169.212929][T11505] bond6: (slave geneve2): Releasing active interface
[  169.221464][T11505] bond0: (slave bond7): Releasing backup interface
[  169.227764][T11505] bond8: (slave veth5): Releasing backup interface
[  169.234173][T11505] bond10: (slave gretap2): Releasing active interface
[  169.237724][T11505] gretap2: left allmulticast mode
[  169.251384][T11505] team0: Port device bridge6 removed
[  169.313513][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  169.323124][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  169.335430][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  169.351912][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  169.442337][T11531] netlink: 'syz.2.1664': attribute type 1 has an invalid length.
[  169.447458][T11531] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  169.878315][ T5857] Bluetooth: hci2: link tx timeout
[  169.880524][ T5857] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  169.885296][ T5857] Bluetooth: hci2: link tx timeout
[  169.887924][ T5857] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  170.777820][T11575] __nla_validate_parse: 22 callbacks suppressed
[  170.777832][T11575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1672'.
[  170.782585][T11575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1672'.
[  171.594068][T11581] lo speed is unknown, defaulting to 1000
[  171.746317][ T5857] Bluetooth: hci2: command 0x0405 tx timeout
[  171.952960][T11595] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1675'.
[  171.963756][T11595] netlink: 'syz.1.1675': attribute type 11 has an invalid length.
[  172.596469][T11630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1678'.
[  172.599710][T11630] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1678'.
[  172.603128][T11630] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1678'.
[  172.607835][T11630] netlink: 540 bytes leftover after parsing attributes in process `syz.0.1678'.
[  172.611266][T11631] netlink: 'syz.0.1678': attribute type 10 has an invalid length.
[  172.614520][T11630] netlink: 'syz.0.1678': attribute type 10 has an invalid length.
[  172.673723][T11636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1679'.
[  172.726319][T11640] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1680'.
[  172.951707][T11656] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1684'.
[  172.961730][T11656] gretap0: entered promiscuous mode
[  172.965221][T11656] gretap0: left promiscuous mode
[  173.130177][T11668] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  173.134321][T11668] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  173.200342][T11672] netlink: 'syz.0.1691': attribute type 2 has an invalid length.
[  173.313395][T11679] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0
[  173.318131][T11679] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.825828][ T5857] Bluetooth: hci2: command 0x0405 tx timeout
[  174.409647][T11715] syzkaller1: entered promiscuous mode
[  174.411908][T11715] syzkaller1: entered allmulticast mode
[  174.433057][T11718] lo speed is unknown, defaulting to 1000
[  174.737817][T11732] netlink: 'syz.2.1707': attribute type 7 has an invalid length.
[  174.753088][T11732] netlink: 'syz.2.1707': attribute type 7 has an invalid length.
[  174.953568][T11751] netlink: 'syz.1.1713': attribute type 11 has an invalid length.
[  175.258127][T11779] netlink: 'syz.1.1721': attribute type 11 has an invalid length.
[  175.916020][ T5857] Bluetooth: hci2: command 0x0405 tx timeout
[  175.951186][T11811] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  175.955133][T11811] tipc: Enabled bearer <udp:syz0>, priority 10
[  176.174612][T11822] __nla_validate_parse: 13 callbacks suppressed
[  176.174626][T11822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1726'.
[  176.731868][T11831] lo speed is unknown, defaulting to 1000
[  177.096667][T11844] netlink: 'syz.2.1731': attribute type 4 has an invalid length.
[  177.108324][ T5925] lo speed is unknown, defaulting to 1000
[  177.112059][T11844] netlink: 'syz.2.1731': attribute type 4 has an invalid length.
[  177.127973][    T9] lo speed is unknown, defaulting to 1000
[  177.455973][T11873] netlink: 'syz.1.1739': attribute type 1 has an invalid length.
[  177.459019][T11873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1739'.
[  177.470314][T11874] netlink: 'syz.0.1740': attribute type 1 has an invalid length.
[  177.517032][T11874] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.543599][T11874] vlan2: entered allmulticast mode
[  177.551720][T11874] bond0: (slave vlan2): making interface the new active one
[  177.560200][T11874] bond0: (slave vlan2): Enslaving as an active interface with an up link
[  177.597308][T11874] syz.0.1740 (11874) used greatest stack depth: 18712 bytes left
[  177.950376][T11888] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  177.954767][T11888] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.965180][T11888] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 59564 - 0
[  177.973724][T11888] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 44022 - 0
[  178.090494][T11888] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  178.094712][T11888] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.102962][T11888] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 59564 - 0
[  178.107721][T11888] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 44022 - 0
[  178.179702][T11888] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  178.184105][T11888] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.188859][T11888] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 59564 - 0
[  178.192840][T11888] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 44022 - 0
[  178.266590][T11888] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  178.271451][T11888] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.276157][T11888] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 59564 - 0
[  178.280620][T11888] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 44022 - 0
[  178.312177][T11900] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  178.317443][T11900] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  178.383535][T11900] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  178.396070][T11900] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  178.396388][T11904] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1747'.
[  178.402788][T11904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1747'.
[  178.483563][ T5879] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  178.487299][ T5879] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 44022 - 0
[  178.490021][ T5879] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 59564 - 0
[  178.492842][ T5879] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  178.500056][T11900] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  178.504140][T11900] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  178.523947][   T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  178.528421][   T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 44022 - 0
[  178.531650][   T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 59564 - 0
[  178.534785][   T13] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  178.550702][ T5879] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  178.557538][ T5879] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 44022 - 0
[  178.560789][ T5879] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 59564 - 0
[  178.564212][ T5879] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  178.579268][   T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  178.582531][   T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 44022 - 0
[  178.586423][   T13] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 59564 - 0
[  178.589999][   T13] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  178.601561][T11900] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  178.606130][T11900] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  178.692560][ T5879] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  178.696220][ T5879] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  178.711981][ T5879] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  178.714603][ T5879] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  178.733591][ T6001] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  178.738875][ T6001] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  178.746608][ T6001] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  178.750374][ T6001] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  178.754520][T11901] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  178.758172][T11901] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.795168][T11901] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  178.801803][T11901] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.824871][T11920] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1751'.
[  178.861608][T11901] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  178.865494][T11901] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.920975][T11901] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  178.924880][T11901] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.089397][T11928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1755'.
[  179.599999][T11947] macvtap2: entered allmulticast mode
[  179.602285][T11947] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  179.609778][T11947] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  179.744329][T11949] lo speed is unknown, defaulting to 1000
[  180.632297][T11954] syzkaller1: entered promiscuous mode
[  180.634051][T11954] syzkaller1: entered allmulticast mode
[  180.694224][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  180.698895][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  180.727922][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  180.731249][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  180.734534][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  180.738817][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  180.746883][ T5879] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  180.749701][ T5879] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  180.857873][T11967] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1768'.
[  181.830745][T11992] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  181.938480][T11994] lo speed is unknown, defaulting to 1000
[  181.974801][T12001] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  182.070720][T12003] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1777'.
[  182.284526][T12025] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1783'.
[  182.333922][T12028] netlink: 'syz.1.1785': attribute type 32 has an invalid length.
[  182.551252][T12031] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1786'.
[  182.823862][T12043] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1789'.
[  183.128817][ T5878] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  183.190418][T12067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1793'.
[  183.943761][T12074] bond0: Unable to set down delay as MII monitoring is disabled
[  184.202486][T12082] lo speed is unknown, defaulting to 1000
[  184.392745][T12102] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1805'.
[  184.398255][T12103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1804'.
[  184.408723][T12102] netlink: 'syz.0.1805': attribute type 11 has an invalid length.
[  184.475119][T12107] netlink: 'syz.0.1805': attribute type 7 has an invalid length.
[  184.479120][T12107] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1805'.
[  184.614471][T12123] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1808'.
[  185.007072][T12146] nftables ruleset with unbound set
[  185.062431][T12148] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1817'.
[  185.746152][ T5857] Bluetooth: hci1: command 0x0406 tx timeout
[  188.238651][T12164] lo speed is unknown, defaulting to 1000
[  188.357709][T12164] netlink: 'syz.2.1821': attribute type 2 has an invalid length.
[  188.370948][T12164] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1821'.
[  188.390411][T12164] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1821'.
[  188.823161][T12206] netlink: 'syz.2.1832': attribute type 10 has an invalid length.
[  188.944223][T12215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1834'.
[  189.095010][T12230] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1838'.
[  189.207514][T12241] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1839'.
[  189.498755][T12274] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1846'.
[  189.590778][T12284] netlink: 'syz.1.1850': attribute type 1 has an invalid length.
[  189.594196][T12284] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  189.598657][T12284] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1850'.
[  189.601683][T12284] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1850'.
[  189.861722][T12315] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1856'.
[  189.920000][   T34] audit: type=1107 audit(1757106745.668:5): pid=12321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Y󨏾sy9)։F9$B]cC[Y8UU="1=sP{5bj8tpNS|?#qʐ:<PUD=W{cŹ[߮NaoF3ͫ3sb');B
[  189.920000][   T34] Do&Yu|%!A'"?'S_ғAs/R*(#߉ݬf/)'
[  190.043537][T12334] netlink: 'syz.0.1861': attribute type 11 has an invalid length.
[  190.047797][T12333] netlink: 'syz.2.1857': attribute type 1 has an invalid length.
[  190.050174][T12333] netlink: 'syz.2.1857': attribute type 1 has an invalid length.
[  190.053470][T12333] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1857'.
[  190.095337][T12337] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  190.099763][T12337] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  190.154153][T12337] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  190.158636][T12337] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  190.232228][T12337] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  190.236480][T12337] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  190.273216][T12337] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  190.277399][T12337] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  190.335614][   T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  190.340226][   T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  190.352545][   T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  190.355397][   T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  190.372203][   T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  190.376139][   T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  190.390290][   T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  190.394791][   T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  191.006642][T12352] netlink: 'syz.0.1865': attribute type 1 has an invalid length.
[  191.010025][T12352] syzkaller1: entered allmulticast mode
[  191.848009][T12355] netlink: 'syz.0.1867': attribute type 32 has an invalid length.
[  192.101581][T12363] netlink: 'syz.0.1868': attribute type 11 has an invalid length.
[  192.682970][T12383] lo speed is unknown, defaulting to 1000
[  193.910570][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  205.849571][T12399] __nla_validate_parse: 1 callbacks suppressed
[  205.849586][T12399] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1876'.
[  205.861882][T12397] openvswitch: netlink: IP tunnel dst address not specified
[  205.891334][T12399] can: request_module (can-proto-0) failed.
[  205.899772][T12403] can: request_module (can-proto-0) failed.
[  205.902549][T12397] openvswitch: netlink: IP tunnel dst address not specified
[  206.053701][T12415] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002
[  206.056850][T12415] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20004
[  206.060677][T12415] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  206.241785][T12430] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  206.245039][T12430] CPU: 1 UID: 0 PID: 12430 Comm: syz.0.1887 Not tainted syzkaller #0 PREEMPT(full) 
[  206.245056][T12430] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  206.245065][T12430] Call Trace:
[  206.245072][T12430]  <TASK>
[  206.245079][T12430]  dump_stack_lvl+0x189/0x250
[  206.245102][T12430]  ? __pfx_dump_stack_lvl+0x10/0x10
[  206.245117][T12430]  ? __pfx__printk+0x10/0x10
[  206.245146][T12430]  ? kernfs_path_from_node+0x2f/0x290
[  206.245161][T12430]  ? kernfs_path_from_node+0x250/0x290
[  206.245174][T12430]  ? kernfs_path_from_node+0x2f/0x290
[  206.245190][T12430]  sysfs_warn_dup+0x8e/0xa0
[  206.245202][T12430]  sysfs_do_create_link_sd+0xc0/0x110
[  206.245217][T12430]  device_add_class_symlinks+0x1cf/0x240
[  206.245234][T12430]  device_add+0x475/0xb50
[  206.245252][T12430]  wiphy_register+0x1ba6/0x28d0
[  206.245281][T12430]  ? __pfx_wiphy_register+0x10/0x10
[  206.245294][T12430]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  206.245318][T12430]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  206.245339][T12430]  ieee80211_register_hw+0x3484/0x4100
[  206.245368][T12430]  ? ieee80211_register_hw+0x1471/0x4100
[  206.245423][T12430]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  206.245446][T12430]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  206.245475][T12430]  ? __hrtimer_setup+0x187/0x210
[  206.245487][T12430]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  206.245510][T12430]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  206.245555][T12430]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  206.245571][T12430]  ? trace_kmalloc+0x1f/0xd0
[  206.245585][T12430]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  206.245603][T12430]  ? kstrndup+0xbf/0x160
[  206.245626][T12430]  hwsim_new_radio_nl+0xea4/0x1b10
[  206.245646][T12430]  ? __pfx___nla_validate_parse+0x10/0x10
[  206.245679][T12430]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  206.245727][T12430]  ? __nla_parse+0x40/0x60
[  206.245744][T12430]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  206.245770][T12430]  genl_family_rcv_msg_doit+0x215/0x300
[  206.245794][T12430]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  206.245823][T12430]  ? bpf_lsm_capable+0x9/0x20
[  206.245840][T12430]  ? security_capable+0x7e/0x2e0
[  206.245866][T12430]  genl_rcv_msg+0x60e/0x790
[  206.245888][T12430]  ? __pfx_genl_rcv_msg+0x10/0x10
[  206.245903][T12430]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  206.245932][T12430]  netlink_rcv_skb+0x208/0x470
[  206.245943][T12430]  ? __lock_acquire+0xab9/0xd20
[  206.245962][T12430]  ? __pfx_genl_rcv_msg+0x10/0x10
[  206.245980][T12430]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  206.246009][T12430]  ? down_read+0x1ad/0x2e0
[  206.246026][T12430]  genl_rcv+0x28/0x40
[  206.246041][T12430]  netlink_unicast+0x82f/0x9e0
[  206.246067][T12430]  ? __pfx_netlink_unicast+0x10/0x10
[  206.246089][T12430]  ? netlink_sendmsg+0x642/0xb30
[  206.246101][T12430]  ? skb_put+0x11b/0x210
[  206.246120][T12430]  netlink_sendmsg+0x805/0xb30
[  206.246150][T12430]  ? __pfx_netlink_sendmsg+0x10/0x10
[  206.246167][T12430]  ? aa_sock_msg_perm+0xf1/0x1d0
[  206.246183][T12430]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  206.246197][T12430]  ? __pfx_netlink_sendmsg+0x10/0x10
[  206.246212][T12430]  __sock_sendmsg+0x21c/0x270
[  206.246234][T12430]  ____sys_sendmsg+0x505/0x830
[  206.246256][T12430]  ? __pfx_____sys_sendmsg+0x10/0x10
[  206.246280][T12430]  ? import_iovec+0x74/0xa0
[  206.246299][T12430]  ___sys_sendmsg+0x21f/0x2a0
[  206.246317][T12430]  ? __pfx____sys_sendmsg+0x10/0x10
[  206.246365][T12430]  ? __fget_files+0x2a/0x420
[  206.246378][T12430]  ? __fget_files+0x3a0/0x420
[  206.246424][T12430]  __x64_sys_sendmsg+0x19b/0x260
[  206.246444][T12430]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  206.246469][T12430]  ? rcu_is_watching+0x15/0xb0
[  206.246487][T12430]  ? do_syscall_64+0xbe/0x3b0
[  206.246507][T12430]  do_syscall_64+0xfa/0x3b0
[  206.246520][T12430]  ? lockdep_hardirqs_on+0x9c/0x150
[  206.246534][T12430]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.246547][T12430]  ? exc_page_fault+0x9f/0xf0
[  206.246562][T12430]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.246575][T12430] RIP: 0033:0x7f3f0298ebe9
[  206.246590][T12430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  206.246601][T12430] RSP: 002b:00007f3f0372e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  206.246615][T12430] RAX: ffffffffffffffda RBX: 00007f3f02bc6090 RCX: 00007f3f0298ebe9
[  206.246625][T12430] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000c
[  206.246634][T12430] RBP: 00007f3f02a11e19 R08: 0000000000000000 R09: 0000000000000000
[  206.246642][T12430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  206.246649][T12430] R13: 00007f3f02bc6128 R14: 00007f3f02bc6090 R15: 00007ffe6dbb8848
[  206.246673][T12430]  </TASK>
[  206.515270][T12442] lo speed is unknown, defaulting to 1000
[  206.645493][T12452] netlink: 'syz.0.1895': attribute type 15 has an invalid length.
[  206.932071][T12474] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1900'.
[  206.960494][T12474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1900'.
[  207.050493][T12482] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1902'.
[  207.059842][T12482] netlink: 'syz.0.1902': attribute type 11 has an invalid length.
[  207.092343][T12484] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  207.098991][T12484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1903'.
[  207.102795][T12484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1903'.
[  207.137476][T12487] syzkaller1: entered promiscuous mode
[  207.139847][T12487] syzkaller1: entered allmulticast mode
[  207.603622][T12503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1908'.
[  207.609926][T12503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1908'.
[  207.655017][T12507] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1909'.
[  207.664927][T12507] netlink: 'syz.1.1909': attribute type 2 has an invalid length.
[  207.708328][T12510] netlink: 'syz.2.1910': attribute type 3 has an invalid length.
[  207.714166][T12510] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  207.717528][T12510] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  207.722147][T12510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1910'.
[  207.946993][   T13] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80
[  209.059224][T12573] netlink: 'syz.2.1923': attribute type 32 has an invalid length.
[  209.381643][T12579] netlink: 'syz.2.1925': attribute type 11 has an invalid length.
[  209.441498][T12580] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  210.191943][T12595] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  210.232648][T12597] netlink: 'syz.0.1929': attribute type 1 has an invalid length.
[  210.247394][T12597] 8021q: adding VLAN 0 to HW filter on device bond13
[  210.266111][T12597] bond13: (slave ip6gretap2): making interface the new active one
[  210.270641][T12597] bond13: (slave ip6gretap2): Enslaving as an active interface with an up link
[  210.323304][T12597] erspan0: entered allmulticast mode
[  210.335471][T12597] bond13: (slave erspan0): Enslaving as an active interface with an up link
[  210.515624][T12610] netlink: 'syz.0.1934': attribute type 1 has an invalid length.
[  210.638840][T12623] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  210.641493][T12623] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  210.644424][T12623] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  210.647698][T12623] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  210.650550][T12623] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  210.653190][T12623] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  210.655797][T12623] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  210.943261][T12637] __nla_validate_parse: 7 callbacks suppressed
[  210.943278][T12637] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1942'.
[  211.335246][T12672] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1951'.
[  211.513772][T12682] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1954'.
[  211.568589][T12684] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  211.571679][T12684] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  211.574405][T12684] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  211.863087][T12700] tipc: Bearer <udp:s>: already 2 bearers with priority 10
[  211.869415][T12700] tipc: Bearer <udp:s>: trying with adjusted priority
[  211.872945][T12700] tipc: Enabling of bearer <udp:s> rejected, max 3 bearers permitted
[  211.881497][T12700] tipc: Enabling of bearer <et:g> rejected, media not registered
[  212.057593][T12704] netlink: 'syz.2.1961': attribute type 12 has an invalid length.
[  212.060202][T12704] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1961'.
[  212.158869][T12710] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1964'.
[  212.174002][T12711] pimreg: entered allmulticast mode
[  212.184696][T12712] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1964'.
[  212.189379][T12710] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1964'.
[  212.223425][T12711] dvmrp8: entered allmulticast mode
[  212.259824][T12709] pimreg: left allmulticast mode
[  212.262067][T12709] dvmrp8: left allmulticast mode
[  212.264230][T12717] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1965'.
[  212.332956][T12715] lo speed is unknown, defaulting to 1000
[  212.482167][T12720] syzkaller1: entered promiscuous mode
[  212.484717][T12720] syzkaller1: entered allmulticast mode
[  212.502813][T12720] syzkaller1: left promiscuous mode
[  212.504625][T12720] syzkaller1: left allmulticast mode
[  212.680868][T12732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1970'.
[  212.876082][T12745] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1974'.
[  212.884579][T12745] netlink: 'syz.0.1974': attribute type 11 has an invalid length.
[  213.370985][T12761] 8021q: VLANs not supported on ip6_vti0
[  213.739882][T12773] lo: entered allmulticast mode
[  213.742068][T12773] lo: left allmulticast mode
[  214.054446][T12785] netlink: 'syz.1.1989': attribute type 32 has an invalid length.
[  214.076316][T12778] lo speed is unknown, defaulting to 1000
[  214.143126][T12794] netlink: 'syz.1.1991': attribute type 11 has an invalid length.
[  214.569507][T12818] netlink: 'syz.2.1997': attribute type 32 has an invalid length.
[  215.214113][T12832] netlink: 'syz.0.2002': attribute type 12 has an invalid length.
[  216.179167][T12864] netlink: 'syz.1.2010': attribute type 5 has an invalid length.
[  216.182246][T12864] __nla_validate_parse: 7 callbacks suppressed
[  216.182259][T12864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2010'.
[  216.291075][T12870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2012'.
[  216.407412][T12881] wg1: entered promiscuous mode
[  216.409095][T12881] wg1: entered allmulticast mode
[  216.447889][T12887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2018'.
[  216.452822][T12887] net_ratelimit: 47 callbacks suppressed
[  216.452949][T12887] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  216.458998][T12887] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  216.463671][T12887] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:20003
[  216.472217][T12887] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2018'.
[  216.518365][T12889] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2019'.
[  216.572233][T12904] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2022'.
[  216.604007][T12910] batadv_slave_1: entered promiscuous mode
[  216.713923][T12920] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2026'.
[  216.844054][T12928] netlink: 'syz.2.2027': attribute type 10 has an invalid length.
[  216.849908][T12928] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  216.907502][T12928] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  217.308518][T12888] batadv_slave_1: left promiscuous mode
[  217.377571][T12932] IPv6: sit3: Disabled Multicast RS
[  217.773442][T12965] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2037'.
[  217.877610][T12969] wireguard0: entered promiscuous mode
[  217.879597][T12969] wireguard0: entered allmulticast mode
[  217.990953][T12982] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2041'.
[  218.015248][T12983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2041'.
[  218.019302][T12982] netlink: 'syz.1.2041': attribute type 10 has an invalid length.
[  218.203570][T12995] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  218.208375][T12995] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  219.336938][T13033] netlink: 'syz.0.2056': attribute type 32 has an invalid length.
[  219.741409][T13053] netlink: 'syz.0.2063': attribute type 21 has an invalid length.
[  219.744173][T13053] netlink: 'syz.0.2063': attribute type 21 has an invalid length.
[  219.820982][T13060] netlink: 'syz.2.2066': attribute type 1 has an invalid length.
[  219.824134][T13060] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.188818][T13078] vlan3: entered allmulticast mode
[  220.512092][T10358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.514793][T10358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.789407][T13105] netlink: 'syz.2.2077': attribute type 11 has an invalid length.
[  220.826073][T13102] lo speed is unknown, defaulting to 1000
[  221.125427][T13123] IPVS: set_ctl: invalid protocol: 4 100.1.1.0:20001
[  221.172098][T13125] bond0: entered promiscuous mode
[  221.173847][T13125] vlan2: entered promiscuous mode
[  221.175391][T13125] batadv0: entered promiscuous mode
[  221.179684][T13125] bond0: left promiscuous mode
[  221.181225][T13125] vlan2: left promiscuous mode
[  221.183106][T13125] batadv0: left promiscuous mode
[  221.261509][T13129] __nla_validate_parse: 12 callbacks suppressed
[  221.261526][T13129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2088'.
[  221.333084][T13133] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2089'.
[  221.680034][T13143] geneve4: entered promiscuous mode
[  221.809735][T13145] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2092'.
[  222.022154][T13152] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  222.608087][T13189] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  222.838616][T13199] batadv_slave_1: entered promiscuous mode
[  222.841884][T13199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2112'.
[  222.877659][T13199] batadv_slave_1 (unregistering): left promiscuous mode
[  222.980617][T13208] bridge8: entered promiscuous mode
[  222.982791][T13208] bridge8: entered allmulticast mode
[  222.988608][T13208] team0: Port device bridge8 added
[  223.024138][T13211] syzkaller1: entered promiscuous mode
[  223.026146][T13211] syzkaller1: entered allmulticast mode
[  223.043114][T13214] _Z`Ԁ@S: entered promiscuous mode
[  223.828712][T13218] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2118'.
[  223.835548][T13218] netlink: 'syz.0.2118': attribute type 11 has an invalid length.
[  223.938354][T13225] netlink: 'syz.1.2120': attribute type 1 has an invalid length.
[  223.960864][T13225] 8021q: adding VLAN 0 to HW filter on device bond9
[  223.988758][T13225] bond9: (slave veth5): Enslaving as an active interface with a down link
[  224.011829][T13225] 8021q: adding VLAN 0 to HW filter on device batadv0
[  224.014233][T13225] bond9: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  224.301613][T13249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2127'.
[  224.305439][T13249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2127'.
[  224.373682][T13251] netlink: 'syz.1.2128': attribute type 1 has an invalid length.
[  224.387225][T13251] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  224.598595][T13257] netlink: 'syz.1.2129': attribute type 1 has an invalid length.
[  224.603861][T13257] netlink: 'syz.1.2129': attribute type 1 has an invalid length.
[  224.607192][T13257] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2129'.
[  224.849984][T13266] netlink: 'syz.1.2132': attribute type 1 has an invalid length.
[  224.852554][T13266] netlink: 'syz.1.2132': attribute type 1 has an invalid length.
[  224.855248][T13266] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2132'.
[  224.922123][T13268] netlink: 'syz.2.2134': attribute type 1 has an invalid length.
[  224.965152][T13268] bond12: (slave ip6gretap4): Enslaving as a backup interface with an up link
[  224.973172][ T5878] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  224.980434][T13268] 8021q: adding VLAN 0 to HW filter on device bond12
[  225.084623][T13268] bond12 (unregistering): (slave ip6gretap4): Removing an active aggregator
[  225.088960][T13268] bond12 (unregistering): (slave ip6gretap4): Releasing backup interface
[  225.094274][T13268] bond12 (unregistering): Released all slaves
[  225.222297][T13278] netlink: 'syz.0.2137': attribute type 9 has an invalid length.
[  225.311317][T13282] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2139'.
[  225.421523][T13289] netlink: 'syz.2.2142': attribute type 3 has an invalid length.
[  225.448333][T13289] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  225.450844][T13289] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  225.490971][T13291] vlan3: entered promiscuous mode
[  225.493054][T13291] bridge0: entered promiscuous mode
[  225.844783][T13334] lo speed is unknown, defaulting to 1000
[  226.277820][T13354] __nla_validate_parse: 6 callbacks suppressed
[  226.277831][T13354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2157'.
[  226.571129][T13358] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2159'.
[  226.621884][T13360] netlink: 146780 bytes leftover after parsing attributes in process `syz.0.2160'.
[  226.639497][T13360] geneve3: entered promiscuous mode
[  226.693282][T13364] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR
[  226.734107][T13371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2163'.
[  226.847327][T13380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2166'.
[  226.860436][T13380] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  226.874829][T13382] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode
[  226.878631][T13382] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode
[  226.882737][T13382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2167'.
[  226.900002][T13386] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2168'.
[  226.986413][T13395] 8021q: adding VLAN 0 to HW filter on device bond12
[  226.999532][T13395] bond12: (slave wlan0): Enslaving as an active interface with a down link
[  227.008953][T13395] vlan4: entered allmulticast mode
[  227.010640][T13395] veth1: entered allmulticast mode
[  227.012981][T13395] bond12: (slave vlan4): Opening slave failed
[  227.168185][T13412] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2175'.
[  227.171232][T13411] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2175'.
[  227.183983][T13412] veth11: entered promiscuous mode
[  227.188108][T13407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2174'.
[  227.192098][T13407] block nbd0: shutting down sockets
[  227.227210][T13411] veth13: entered promiscuous mode
[  227.394681][T13424] batadv1: entered promiscuous mode
[  227.650079][T13439] syzkaller0: left promiscuous mode
[  227.652019][T13439] syzkaller0: left allmulticast mode
[  227.800032][T13447] lo speed is unknown, defaulting to 1000
[  227.877198][T13452] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  227.883363][T13455] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  227.886798][T13455] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  228.049297][T13465] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  228.052467][T13465] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.100676][T13465] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  228.104086][T13465] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.160347][T13465] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  228.164058][T13465] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.223908][T13465] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  228.228906][T13465] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.297257][ T6001] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  228.300569][ T6001] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  228.313948][T12925] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  228.316971][T12925] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  228.332200][ T6001] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  228.334742][ T6001] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  228.342403][ T6001] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  228.345112][ T6001] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  229.135922][T13490] validate_nla: 49 callbacks suppressed
[  229.135938][T13490] netlink: 'syz.1.2199': attribute type 21 has an invalid length.
[  229.141881][T13490] netlink: 'syz.1.2199': attribute type 1 has an invalid length.
[  229.165487][T13490] lo speed is unknown, defaulting to 1000
[  230.723984][T13532] tipc: Resetting bearer <eth:syzkaller0>
[  230.784888][ T5913] lo speed is unknown, defaulting to 1000
[  230.788234][ T5913] syz2: Port: 1 Link DOWN
[  230.790912][T13533] geneve5: entered promiscuous mode
[  230.794957][T13533] geneve5: entered allmulticast mode
[  230.798572][T12925] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  230.801513][T12925] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  230.804255][T12925] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 19999 - 0
[  230.807070][T12925] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  230.809782][T12925] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  230.812484][T12925] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 19999 - 0
[  230.816352][T12925] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  230.819708][T12925] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  230.822924][T12925] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 19999 - 0
[  230.830605][T12925] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  230.840716][T12925] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  230.843795][T12925] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 19999 - 0
[  230.858554][T13536] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  230.912370][T13540] bridge9: port 1(veth0_to_bond) entered blocking state
[  230.914912][T13540] bridge9: port 1(veth0_to_bond) entered disabled state
[  230.919760][T13540] veth0_to_bond: entered allmulticast mode
[  230.922883][T13540] veth0_to_bond: entered promiscuous mode
[  231.213617][T13560] netlink: 'syz.2.2217': attribute type 32 has an invalid length.
[  231.699314][T13586] __nla_validate_parse: 17 callbacks suppressed
[  231.699325][T13586] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2226'.
[  231.712478][T13586] netlink: 'syz.2.2226': attribute type 2 has an invalid length.
[  232.008649][T13605] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20004
[  232.201052][T13617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2232'.
[  232.208365][T13617] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2232'.
[  232.313936][T13622] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2233'.
[  232.319735][T13622] netlink: 'syz.0.2233': attribute type 1 has an invalid length.
[  232.350076][T13622] 8021q: adding VLAN 0 to HW filter on device bond15
[  232.902372][T13633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2236'.
[  233.050987][T13639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2239'.
[  233.104591][T13643] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2240'.
[  233.444722][T13670] netlink: 'syz.1.2247': attribute type 1 has an invalid length.
[  233.450816][T13670] netlink: 'syz.1.2247': attribute type 1 has an invalid length.
[  233.453820][T13670] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2247'.
[  233.458288][T13663] netlink: 'syz.1.2247': attribute type 1 has an invalid length.
[  233.461214][T13663] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  233.551840][T13679] netlink: 'syz.0.2249': attribute type 30 has an invalid length.
[  233.701999][T13694] netlink: 276 bytes leftover after parsing attributes in process `syz.2.2254'.
[  233.711118][T13694] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2254'.
[  233.714698][T13694] netlink: 'syz.2.2254': attribute type 1 has an invalid length.
[  233.721515][T13694] bond0: entered promiscuous mode
[  233.723157][T13694] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  233.727002][T13694] bond0: left promiscuous mode
[  233.728903][T13694] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  234.708847][T13803] validate_nla: 4 callbacks suppressed
[  234.708858][T13803] netlink: 'syz.1.2274': attribute type 3 has an invalid length.
[  234.708863][T13804] netlink: 'syz.1.2274': attribute type 3 has an invalid length.
[  234.730765][T13809] netlink: 'syz.0.2273': attribute type 3 has an invalid length.
[  234.801555][T13813] sctp: [Deprecated]: syz.1.2275 (pid 13813) Use of int in maxseg socket option.
[  234.801555][T13813] Use struct sctp_assoc_value instead
[  234.932069][T13818] netlink: 'syz.1.2276': attribute type 1 has an invalid length.
[  235.008001][T13832] netlink: 'syz.2.2279': attribute type 11 has an invalid length.
[  235.010561][T13832] netlink: 'syz.2.2279': attribute type 4 has an invalid length.
[  235.071762][T13836] veth0: entered promiscuous mode
[  235.094088][T13837] veth0 (unregistering): left promiscuous mode
[  235.139125][T13839] lo speed is unknown, defaulting to 1000
[  235.631228][T13867] netlink: 'syz.0.2290': attribute type 1 has an invalid length.
[  235.793166][T13874] netlink: 'syz.0.2292': attribute type 1 has an invalid length.
[  236.012417][T13880] netlink: 'syz.0.2293': attribute type 1 has an invalid length.
[  236.016522][T13880] netlink: 'syz.0.2293': attribute type 1 has an invalid length.
[  236.213569][T13889] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  236.217388][T13889] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  236.253289][T13891] netlink: 'syz.1.2298': attribute type 3 has an invalid length.
[  236.721178][T13903] __nla_validate_parse: 25 callbacks suppressed
[  236.721189][T13903] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2301'.
[  237.114990][T13917] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2306'.
[  237.126353][T13917] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode
[  237.129936][T13917] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode
[  237.184581][T13920] vlan3: entered promiscuous mode
[  237.187506][T13920] hsr_slave_1: entered promiscuous mode
[  237.190351][T13920] vlan3: entered allmulticast mode
[  237.192790][T13920] hsr_slave_1: entered allmulticast mode
[  237.259739][T13924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2308'.
[  237.287028][T13922] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2307'.
[  237.290956][T13921] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2307'.
[  237.355414][T13926] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  237.359593][T13926] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  237.711755][T13944] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  237.714985][T13944] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  237.768579][T13948] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  237.771688][T13948] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 44022 - 0
[  237.774929][T13948] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 59564 - 0
[  237.780035][T13948] netdevsim netdevsim0 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  237.844296][T13948] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  237.849341][T13948] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 44022 - 0
[  237.853519][T13948] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 59564 - 0
[  237.858360][T13948] netdevsim netdevsim0 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  237.917520][T13948] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  237.920974][T13948] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 44022 - 0
[  237.924080][T13948] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 59564 - 0
[  237.927498][T13948] netdevsim netdevsim0 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  238.020994][T13948] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  238.024910][T13948] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 44022 - 0
[  238.029912][T13948] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 59564 - 0
[  238.032965][T13948] netdevsim netdevsim0 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0
[  238.100255][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  238.107103][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 44022 - 0
[  238.115133][   T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 59564 - 0
[  238.120329][   T12] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  238.140603][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  238.143735][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 44022 - 0
[  238.148271][   T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 59564 - 0
[  238.151213][   T12] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  238.154047][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  238.156799][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 44022 - 0
[  238.159392][   T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 59564 - 0
[  238.161836][   T12] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  238.176228][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  238.178809][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 44022 - 0
[  238.181450][   T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 59564 - 0
[  238.183939][   T12] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  238.355552][T13968] lo speed is unknown, defaulting to 1000
[  238.498438][T13985] 8021q: adding VLAN 0 to HW filter on device bond13
[  238.515952][T13986] vlan3: entered promiscuous mode
[  238.517863][T13986] bond13: entered promiscuous mode
[  238.519772][T13986] vlan3: entered allmulticast mode
[  238.521549][T13986] bond13: entered allmulticast mode
[  238.543864][T13990] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2330'.
[  238.658614][T13999] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2332'.
[  238.661828][T13996] netlink: 8168 bytes leftover after parsing attributes in process `syz.1.2332'.
[  238.664976][T13999] netlink: 8168 bytes leftover after parsing attributes in process `syz.1.2332'.
[  238.700638][T14002] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  238.703746][T14002] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  238.850205][T14016] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2340'.
[  238.998913][T14020] 8021q: adding VLAN 0 to HW filter on device bond10
[  239.002215][T14025] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  239.005394][T14025] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  239.015273][T14020] bond10: (slave wlan0): Enslaving as an active interface with a down link
[  239.794326][T14063] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  239.803140][T14063] tipc: Failed to remove unknown binding: 66,1,1/1739836491:3755271214/3755271216
[  239.813644][T14063] tipc: Failed to remove unknown binding: 66,1,1/1739836491:3755271214/3755271216
[  239.818116][T14063] tipc: Failed to remove unknown binding: 66,1,1/1739836491:3755271214/3755271216
[  239.909973][ T9944] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[  239.973133][T14077] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  239.977599][T14077] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  240.411133][T14108] ip6tnl3: entered promiscuous mode
[  240.413299][T14108] ip6tnl3: entered allmulticast mode
[  240.416973][T14108] team0: Device ip6tnl3 is up. Set it down before adding it as a team port
[  240.523703][T14110] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  240.554405][T14115] validate_nla: 11 callbacks suppressed
[  240.554417][T14115] netlink: 'syz.2.2372': attribute type 1 has an invalid length.
[  240.559579][T14115] netlink: 'syz.2.2372': attribute type 1 has an invalid length.
[  240.825200][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.828262][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.840367][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.843336][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  241.080751][T14145] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  241.084604][T14145] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  241.468911][T14166] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  241.472343][T14166] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  241.530912][T14169] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  241.541506][T14173] netlink: 'syz.1.2391': attribute type 83 has an invalid length.
[  241.561582][T14169] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  241.650972][T14169] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  241.732136][T14186] __nla_validate_parse: 23 callbacks suppressed
[  241.732148][T14186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2395'.
[  241.753143][T14169] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  241.859088][T12925] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  241.873695][T12925] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  241.897242][ T5879] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  241.899888][ T5879] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  241.943082][T14200] lo speed is unknown, defaulting to 1000
[  242.069653][T14211] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2403'.
[  242.076019][T14211] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2403'.
[  242.080078][T14211] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  242.392016][T14235] netlink: 'syz.2.2407': attribute type 4 has an invalid length.
[  242.395127][T14235] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2407'.
[  242.400114][T14235] wlan1: mtu less than device minimum
[  242.598309][T14240] netlink: 360 bytes leftover after parsing attributes in process `syz.0.2411'.
[  242.603687][T14242] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  242.608306][T14242] syzkaller0: entered promiscuous mode
[  242.610692][T14242] syzkaller0: entered allmulticast mode
[  242.635353][T14242] tipc: Resetting bearer <eth:syzkaller0>
[  242.678087][T14244] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave
[  242.682003][T14244] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  242.762373][T14246] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2414'.
[  243.507109][T14267] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2419'.
[  243.579760][T14278] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2421'.
[  243.709465][T14282] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2422'.
[  243.732628][T14284] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2423'.
[  243.844480][T14293] netlink: 'syz.1.2426': attribute type 1 has an invalid length.
[  243.863714][T14293] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  243.879288][T14293] gretap2: entered promiscuous mode
[  243.928280][T14297] netlink: 'syz.1.2428': attribute type 32 has an invalid length.
[  244.010678][T14304] openvswitch: netlink: Message has 1 unknown bytes.
[  244.013240][T14304] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  244.482018][T14349] netlink: 'syz.1.2444': attribute type 1 has an invalid length.
[  244.872350][T14362] syzkaller1: entered allmulticast mode
[  245.740685][T14393] netlink: 'syz.0.2454': attribute type 10 has an invalid length.
[  245.991615][T14407] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  246.225222][T14414] syzkaller1: entered promiscuous mode
[  246.238817][T14414] syzkaller1: entered allmulticast mode
[  246.684180][T14443] netlink: 'syz.0.2466': attribute type 1 has an invalid length.
[  246.797597][T14449] __nla_validate_parse: 14 callbacks suppressed
[  246.797617][T14449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2466'.
[  246.803929][T14449] openvswitch: netlink: Flow actions attr not present in new flow.
[  246.860803][T14456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2466'.
[  246.868145][T14455] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2468'.
[  247.017846][T14460] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2470'.
[  247.110994][T14464] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  247.290369][T14468] netlink: zone id is out of range
[  247.292519][T14468] netlink: zone id is out of range
[  247.294515][T14468] netlink: zone id is out of range
[  247.300477][T14468] netlink: zone id is out of range
[  247.302785][T14468] netlink: zone id is out of range
[  247.304777][T14468] netlink: zone id is out of range
[  247.307304][T14468] netlink: zone id is out of range
[  247.309287][T14468] netlink: zone id is out of range
[  247.639305][T14479] netlink: 'syz.1.2474': attribute type 3 has an invalid length.
[  247.642004][T14479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2474'.
[  247.673879][T14480] lo speed is unknown, defaulting to 1000
[  247.712381][T14480] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2478'.
[  247.715445][T14480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2478'.
[  247.719017][T14480] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2478'.
[  247.722401][T14480] netlink: 'syz.2.2478': attribute type 3 has an invalid length.
[  247.725065][T14480] netlink: 'syz.2.2478': attribute type 2 has an invalid length.
[  247.727905][T14480] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2478'.
[  247.730546][T14480] netlink: 'syz.2.2478': attribute type 2 has an invalid length.
[  247.927087][T14486] netlink: 'syz.2.2480': attribute type 1 has an invalid length.
[  247.948153][T14486] 8021q: adding VLAN 0 to HW filter on device bond14
[  247.959725][T14486] netlink: 'syz.2.2480': attribute type 7 has an invalid length.
[  247.962525][T14486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2480'.
[  248.673876][T14527] pim6reg1: entered promiscuous mode
[  248.675676][T14527] pim6reg1: entered allmulticast mode
[  249.062116][T14550] netlink: 'syz.1.2501': attribute type 29 has an invalid length.
[  249.074075][T14551] netlink: 'syz.2.2499': attribute type 10 has an invalid length.
[  249.078803][T14551] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  249.218152][T14557] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  249.224687][T14557] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  249.280889][T14557] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  249.284275][T14557] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  249.339801][T14557] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  249.343019][T14557] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  249.401770][T14557] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  249.408714][T14557] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  249.494696][ T5878] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  249.498573][ T5878] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  249.525398][ T5878] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  249.529272][ T5878] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  249.543257][ T5878] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  249.548529][ T5878] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  249.563325][ T5878] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  249.569521][ T5878] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  249.576498][T14558] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  249.580247][T14558] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  249.589651][ T5878] ==================================================================
[  249.593076][ T5878] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350
[  249.596079][ T5878] Read of size 8 at addr ffff88802772d2b0 by task kworker/u8:3/5878
[  249.599993][ T5878] 
[  249.601328][ T5878] CPU: 1 UID: 0 PID: 5878 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  249.601348][ T5878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  249.601358][ T5878] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  249.601380][ T5878] Call Trace:
[  249.601387][ T5878]  <TASK>
[  249.601394][ T5878]  dump_stack_lvl+0x189/0x250
[  249.601410][ T5878]  ? __kasan_check_byte+0x12/0x40
[  249.601429][ T5878]  ? __pfx_dump_stack_lvl+0x10/0x10
[  249.601444][ T5878]  ? lock_release+0x4b/0x3e0
[  249.601464][ T5878]  ? __virt_addr_valid+0x4a5/0x5c0
[  249.601481][ T5878]  print_report+0xca/0x240
[  249.601494][ T5878]  ? __mutex_lock+0x147/0x1350
[  249.601507][ T5878]  kasan_report+0x118/0x150
[  249.601523][ T5878]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  249.601543][ T5878]  ? __mutex_lock+0x147/0x1350
[  249.601559][ T5878]  __mutex_lock+0x147/0x1350
[  249.601574][ T5878]  ? __mutex_lock+0x5bb/0x1350
[  249.601588][ T5878]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  249.601603][ T5878]  ? __pfx___mutex_lock+0x10/0x10
[  249.601618][ T5878]  ? __lock_acquire+0xab9/0xd20
[  249.601639][ T5878]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  249.601654][ T5878]  ? process_scheduled_works+0x9ef/0x17b0
[  249.601667][ T5878]  ? process_scheduled_works+0x9ef/0x17b0
[  249.601679][ T5878]  process_scheduled_works+0xae1/0x17b0
[  249.601701][ T5878]  ? __pfx_process_scheduled_works+0x10/0x10
[  249.601718][ T5878]  worker_thread+0x8a0/0xda0
[  249.601739][ T5878]  kthread+0x711/0x8a0
[  249.601756][ T5878]  ? __pfx_worker_thread+0x10/0x10
[  249.601768][ T5878]  ? __pfx_kthread+0x10/0x10
[  249.601783][ T5878]  ? _raw_spin_unlock_irq+0x23/0x50
[  249.601801][ T5878]  ? lockdep_hardirqs_on+0x9c/0x150
[  249.601813][ T5878]  ? __pfx_kthread+0x10/0x10
[  249.601828][ T5878]  ret_from_fork+0x3fc/0x770
[  249.601843][ T5878]  ? __pfx_ret_from_fork+0x10/0x10
[  249.601857][ T5878]  ? __switch_to_asm+0x39/0x70
[  249.601872][ T5878]  ? __switch_to_asm+0x33/0x70
[  249.601887][ T5878]  ? __pfx_kthread+0x10/0x10
[  249.601902][ T5878]  ret_from_fork_asm+0x1a/0x30
[  249.601923][ T5878]  </TASK>
[  249.601954][ T5878] 
[  249.684106][ T5878] Allocated by task 14557:
[  249.685785][ T5878]  kasan_save_track+0x3e/0x80
[  249.687748][ T5878]  __kasan_kmalloc+0x93/0xb0
[  249.689551][ T5878]  __kmalloc_noprof+0x27a/0x4f0
[  249.691480][ T5878]  udp_tunnel_nic_netdevice_event+0x854/0x19f0
[  249.693954][ T5878]  notifier_call_chain+0x1b6/0x3e0
[  249.696153][ T5878]  register_netdevice+0x1608/0x1ae0
[  249.698345][ T5878]  nsim_create+0xae8/0xf10
[  249.700225][ T5878]  __nsim_dev_port_add+0x6b6/0xb10
[  249.702373][ T5878]  nsim_dev_port_add_all+0x37/0xf0
[  249.704362][ T5878]  nsim_dev_reload_up+0x451/0x780
[  249.706386][ T5878]  devlink_reload+0x4ec/0x8d0
[  249.708220][ T5878]  devlink_nl_reload_doit+0xb35/0xd50
[  249.710441][ T5878]  genl_family_rcv_msg_doit+0x215/0x300
[  249.712660][ T5878]  genl_rcv_msg+0x60e/0x790
[  249.714594][ T5878]  netlink_rcv_skb+0x208/0x470
[  249.716806][ T5878]  genl_rcv+0x28/0x40
[  249.718646][ T5878]  netlink_unicast+0x82f/0x9e0
[  249.720640][ T5878]  netlink_sendmsg+0x805/0xb30
[  249.722988][ T5878]  __sock_sendmsg+0x21c/0x270
[  249.725152][ T5878]  ____sys_sendmsg+0x505/0x830
[  249.727259][ T5878]  ___sys_sendmsg+0x21f/0x2a0
[  249.729297][ T5878]  __x64_sys_sendmsg+0x19b/0x260
[  249.731508][ T5878]  do_syscall_64+0xfa/0x3b0
[  249.733575][ T5878]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.736116][ T5878] 
[  249.737161][ T5878] Freed by task 14558:
[  249.738992][ T5878]  kasan_save_track+0x3e/0x80
[  249.741217][ T5878]  kasan_save_free_info+0x46/0x50
[  249.743496][ T5878]  __kasan_slab_free+0x5b/0x80
[  249.745587][ T5878]  kfree+0x18e/0x440
[  249.747483][ T5878]  udp_tunnel_nic_netdevice_event+0x1332/0x19f0
[  249.750151][ T5878]  notifier_call_chain+0x1b6/0x3e0
[  249.752314][ T5878]  unregister_netdevice_many_notify+0x14d7/0x1ff0
[  249.755247][ T5878]  unregister_netdevice_queue+0x33c/0x380
[  249.757585][ T5878]  nsim_destroy+0x1dd/0x670
[  249.759462][ T5878]  __nsim_dev_port_del+0x14d/0x1b0
[  249.761727][ T5878]  nsim_dev_reload_destroy+0x288/0x490
[  249.763971][ T5878]  nsim_dev_reload_down+0x8a/0xc0
[  249.765987][ T5878]  devlink_reload+0x1b6/0x8d0
[  249.767870][ T5878]  devlink_nl_reload_doit+0xb35/0xd50
[  249.770046][ T5878]  genl_family_rcv_msg_doit+0x215/0x300
[  249.772265][ T5878]  genl_rcv_msg+0x60e/0x790
[  249.774181][ T5878]  netlink_rcv_skb+0x208/0x470
[  249.776180][ T5878]  genl_rcv+0x28/0x40
[  249.777899][ T5878]  netlink_unicast+0x82f/0x9e0
[  249.779845][ T5878]  netlink_sendmsg+0x805/0xb30
[  249.781763][ T5878]  __sock_sendmsg+0x21c/0x270
[  249.783578][ T5878]  ____sys_sendmsg+0x505/0x830
[  249.785404][ T5878]  ___sys_sendmsg+0x21f/0x2a0
[  249.787195][ T5878]  __x64_sys_sendmsg+0x19b/0x260
[  249.789113][ T5878]  do_syscall_64+0xfa/0x3b0
[  249.790849][ T5878]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.793281][ T5878] 
[  249.794217][ T5878] Last potentially related work creation:
[  249.796409][ T5878]  kasan_save_stack+0x3e/0x60
[  249.798271][ T5878]  kasan_record_aux_stack+0xbd/0xd0
[  249.800356][ T5878]  insert_work+0x3d/0x330
[  249.802107][ T5878]  __queue_work+0xbaf/0xfb0
[  249.803860][ T5878]  queue_work_on+0x181/0x270
[  249.805666][ T5878]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  249.807970][ T5878]  udp_tunnel_push_rx_port+0x180/0x200
[  249.810075][ T5878]  geneve_offload_rx_ports+0xd7/0x160
[  249.812163][ T5878]  geneve_netdevice_event+0x6a/0x80
[  249.814167][ T5878]  notifier_call_chain+0x1b6/0x3e0
[  249.816153][ T5878]  call_netdevice_notifiers+0x88/0xc0
[  249.818240][ T5878]  udp_tunnel_nic_netdevice_event+0x134d/0x19f0
[  249.820640][ T5878]  notifier_call_chain+0x1b6/0x3e0
[  249.822765][ T5878]  register_netdevice+0x1608/0x1ae0
[  249.824809][ T5878]  nsim_create+0xae8/0xf10
[  249.826554][ T5878]  __nsim_dev_port_add+0x6b6/0xb10
[  249.828566][ T5878]  nsim_dev_port_add_all+0x37/0xf0
[  249.830583][ T5878]  nsim_dev_reload_up+0x451/0x780
[  249.832567][ T5878]  devlink_reload+0x4ec/0x8d0
[  249.834421][ T5878]  devlink_nl_reload_doit+0xb35/0xd50
[  249.836498][ T5878]  genl_family_rcv_msg_doit+0x215/0x300
[  249.838781][ T5878]  genl_rcv_msg+0x60e/0x790
[  249.840560][ T5878]  netlink_rcv_skb+0x208/0x470
[  249.842440][ T5878]  genl_rcv+0x28/0x40
[  249.844036][ T5878]  netlink_unicast+0x82f/0x9e0
[  249.845868][ T5878]  netlink_sendmsg+0x805/0xb30
[  249.847720][ T5878]  __sock_sendmsg+0x21c/0x270
[  249.849594][ T5878]  ____sys_sendmsg+0x505/0x830
[  249.851521][ T5878]  ___sys_sendmsg+0x21f/0x2a0
[  249.853388][ T5878]  __x64_sys_sendmsg+0x19b/0x260
[  249.855479][ T5878]  do_syscall_64+0xfa/0x3b0
[  249.857302][ T5878]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.859660][ T5878] 
[  249.860618][ T5878] Second to last potentially related work creation:
[  249.863171][ T5878]  kasan_save_stack+0x3e/0x60
[  249.864952][ T5878]  kasan_record_aux_stack+0xbd/0xd0
[  249.866958][ T5878]  insert_work+0x3d/0x330
[  249.868623][ T5878]  __queue_work+0xcd2/0xfb0
[  249.870539][ T5878]  queue_work_on+0x181/0x270
[  249.872369][ T5878]  __udp_tunnel_nic_add_port+0xb71/0xd60
[  249.874622][ T5878]  udp_tunnel_push_rx_port+0x180/0x200
[  249.876862][ T5878]  vxlan_offload_rx_ports+0x139/0x200
[  249.879047][ T5878]  vxlan_netdevice_event+0x111/0x470
[  249.881150][ T5878]  notifier_call_chain+0x1b6/0x3e0
[  249.883240][ T5878]  call_netdevice_notifiers+0x88/0xc0
[  249.885585][ T5878]  udp_tunnel_nic_netdevice_event+0x134d/0x19f0
[  249.887981][ T5878]  notifier_call_chain+0x1b6/0x3e0
[  249.890048][ T5878]  register_netdevice+0x1608/0x1ae0
[  249.892150][ T5878]  nsim_create+0xae8/0xf10
[  249.894079][ T5878]  __nsim_dev_port_add+0x6b6/0xb10
[  249.896093][ T5878]  nsim_dev_port_add_all+0x37/0xf0
[  249.897994][ T5878]  nsim_dev_reload_up+0x451/0x780
[  249.899835][ T5878]  devlink_reload+0x4ec/0x8d0
[  249.901552][ T5878]  devlink_nl_reload_doit+0xb35/0xd50
[  249.903304][ T5878]  genl_family_rcv_msg_doit+0x215/0x300
[  249.905087][ T5878]  genl_rcv_msg+0x60e/0x790
[  249.906518][ T5878]  netlink_rcv_skb+0x208/0x470
[  249.908239][ T5878]  genl_rcv+0x28/0x40
[  249.909792][ T5878]  netlink_unicast+0x82f/0x9e0
[  249.911575][ T5878]  netlink_sendmsg+0x805/0xb30
[  249.913304][ T5878]  __sock_sendmsg+0x21c/0x270
[  249.914882][ T5878]  ____sys_sendmsg+0x505/0x830
[  249.916701][ T5878]  ___sys_sendmsg+0x21f/0x2a0
[  249.918386][ T5878]  __x64_sys_sendmsg+0x19b/0x260
[  249.920388][ T5878]  do_syscall_64+0xfa/0x3b0
[  249.922119][ T5878]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  249.924432][ T5878] 
[  249.925436][ T5878] The buggy address belongs to the object at ffff88802772d200
[  249.925436][ T5878]  which belongs to the cache kmalloc-256 of size 256
[  249.930470][ T5878] The buggy address is located 176 bytes inside of
[  249.930470][ T5878]  freed 256-byte region [ffff88802772d200, ffff88802772d300)
[  249.935638][ T5878] 
[  249.936598][ T5878] The buggy address belongs to the physical page:
[  249.938993][ T5878] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2772c
[  249.942187][ T5878] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  249.945250][ T5878] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  249.947598][ T5878] page_type: f5(slab)
[  249.948803][ T5878] raw: 00fff00000000040 ffff88801a441b40 0000000000000000 dead000000000001
[  249.951330][ T5878] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  249.954257][ T5878] head: 00fff00000000040 ffff88801a441b40 0000000000000000 dead000000000001
[  249.957391][ T5878] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
[  249.960373][ T5878] head: 00fff00000000001 ffffea00009dcb01 00000000ffffffff 00000000ffffffff
[  249.963831][ T5878] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[  249.966913][ T5878] page dumped because: kasan: bad access detected
[  249.968818][ T5878] page_owner tracks the page as allocated
[  249.970615][ T5878] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5848, tgid 5848 (syz-executor), ts 63236632607, free_ts 60605824207
[  249.977482][ T5878]  post_alloc_hook+0x240/0x2a0
[  249.979927][ T5878]  get_page_from_freelist+0x21e4/0x22c0
[  249.982094][ T5878]  __alloc_frozen_pages_noprof+0x181/0x370
[  249.984292][ T5878]  alloc_pages_mpol+0x232/0x4a0
[  249.986110][ T5878]  allocate_slab+0x8a/0x370
[  249.987664][ T5878]  ___slab_alloc+0xbeb/0x1420
[  249.989773][ T5878]  __kmalloc_noprof+0x305/0x4f0
[  249.991633][ T5878]  __register_sysctl_table+0xba1/0x1340
[  249.993708][ T5878]  mpls_dev_sysctl_register+0x188/0x270
[  249.995794][ T5878]  mpls_dev_notify+0x357/0x7a0
[  249.997465][ T5878]  notifier_call_chain+0x1b6/0x3e0
[  249.999210][ T5878]  register_netdevice+0x1608/0x1ae0
[  250.000977][ T5878]  veth_newlink+0x5cc/0xa50
[  250.002367][ T5878]  rtnl_newlink_create+0x310/0xb00
[  250.003967][ T5878]  rtnl_newlink+0x16d6/0x1c70
[  250.005766][ T5878]  rtnetlink_rcv_msg+0x7cf/0xb70
[  250.007913][ T5878] page last free pid 5829 tgid 5829 stack trace:
[  250.010437][ T5878]  __free_frozen_pages+0xbc4/0xd30
[  250.012604][ T5878]  rcu_core+0xcab/0x1770
[  250.014368][ T5878]  handle_softirqs+0x286/0x870
[  250.016382][ T5878]  __irq_exit_rcu+0xca/0x1f0
[  250.018338][ T5878]  irq_exit_rcu+0x9/0x30
[  250.020109][ T5878]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  250.022452][ T5878]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  250.024981][ T5878] 
[  250.025998][ T5878] Memory state around the buggy address:
[  250.028312][ T5878]  ffff88802772d180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  250.031520][ T5878]  ffff88802772d200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  250.034910][ T5878] >ffff88802772d280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  250.038225][ T5878]                                      ^
[  250.040589][ T5878]  ffff88802772d300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  250.043912][ T5878]  ffff88802772d380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  250.047140][ T5878] ==================================================================
[  250.063811][ T5878] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  250.066761][ T5878] CPU: 1 UID: 0 PID: 5878 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  250.070392][ T5878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  250.074267][ T5878] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work
[  250.077592][ T5878] Call Trace:
[  250.078962][ T5878]  <TASK>
[  250.080150][ T5878]  dump_stack_lvl+0x99/0x250
[  250.081964][ T5878]  ? __asan_memcpy+0x40/0x70
[  250.083770][ T5878]  ? __pfx_dump_stack_lvl+0x10/0x10
[  250.085990][ T5878]  ? __pfx__printk+0x10/0x10
[  250.087944][ T5878]  vpanic+0x281/0x750
[  250.089642][ T5878]  ? preempt_schedule+0xae/0xc0
[  250.091613][ T5878]  ? __pfx_vpanic+0x10/0x10
[  250.093559][ T5878]  ? preempt_schedule_common+0x83/0xd0
[  250.095764][ T5878]  ? preempt_schedule+0xae/0xc0
[  250.097625][ T5878]  ? __pfx_preempt_schedule+0x10/0x10
[  250.099594][ T5878]  panic+0xb9/0xc0
[  250.100928][ T5878]  ? __pfx_panic+0x10/0x10
[  250.102507][ T5878]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  250.104535][ T5878]  ? __mutex_lock+0x147/0x1350
[  250.106381][ T5878]  check_panic_on_warn+0x89/0xb0
[  250.108436][ T5878]  ? __mutex_lock+0x147/0x1350
[  250.110375][ T5878]  end_report+0x78/0x160
[  250.112092][ T5878]  kasan_report+0x129/0x150
[  250.113923][ T5878]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  250.116324][ T5878]  ? __mutex_lock+0x147/0x1350
[  250.118338][ T5878]  __mutex_lock+0x147/0x1350
[  250.120296][ T5878]  ? __mutex_lock+0x5bb/0x1350
[  250.122253][ T5878]  ? udp_tunnel_nic_device_sync_work+0x39/0xa50
[  250.124693][ T5878]  ? __pfx___mutex_lock+0x10/0x10
[  250.126723][ T5878]  ? __lock_acquire+0xab9/0xd20
[  250.128647][ T5878]  udp_tunnel_nic_device_sync_work+0x39/0xa50
[  250.131187][ T5878]  ? process_scheduled_works+0x9ef/0x17b0
[  250.133421][ T5878]  ? process_scheduled_works+0x9ef/0x17b0
[  250.136077][ T5878]  process_scheduled_works+0xae1/0x17b0
[  250.138446][ T5878]  ? __pfx_process_scheduled_works+0x10/0x10
[  250.140773][ T5878]  worker_thread+0x8a0/0xda0
[  250.142703][ T5878]  kthread+0x711/0x8a0
[  250.144376][ T5878]  ? __pfx_worker_thread+0x10/0x10
[  250.146414][ T5878]  ? __pfx_kthread+0x10/0x10
[  250.148348][ T5878]  ? _raw_spin_unlock_irq+0x23/0x50
[  250.150455][ T5878]  ? lockdep_hardirqs_on+0x9c/0x150
[  250.153111][ T5878]  ? __pfx_kthread+0x10/0x10
[  250.155189][ T5878]  ret_from_fork+0x3fc/0x770
[  250.157157][ T5878]  ? __pfx_ret_from_fork+0x10/0x10
[  250.159238][ T5878]  ? __switch_to_asm+0x39/0x70
[  250.161226][ T5878]  ? __switch_to_asm+0x33/0x70
[  250.163246][ T5878]  ? __pfx_kthread+0x10/0x10
[  250.165189][ T5878]  ret_from_fork_asm+0x1a/0x30
[  250.167174][ T5878]  </TASK>
[  250.169187][ T5878] Kernel Offset: disabled
[  250.171041][ T5878] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:13:25  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff820bbf01 RBX=0000000000000000 RCX=ffffffff820bbf10 RDX=0000000000000000
RSI=0000000000000008 RDI=ffffea0004564680 RBP=ffffc90002f9f630 RSP=ffffc90002f9f368
R8 =ffffea0004564687 R9 =ffff800000000000 R10=dffffc0000000000 R11=fffff940008ac8d0
R12=00007f3f01fea000 R13=ffff888026bbb510 R14=dffffc0000000000 R15=1ffffd40008ac8d0
RIP=ffffffff82230a08 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555639bb500 ffffffff 00c00000
GS =0000 ffff8880b8614000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3f036f56c0 CR3=00000001066fe000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 000000316e616c77
XMM02=9412000080020000 000f000a000e0000 XMM03=00000206145e0000 004848f8a11b9fcc
XMM04=00007f30cdcfd100 00007f30cd197460 XMM05=00007f30cd197478 00007f30cd1974c0
XMM06=00007f30cd1974b8 00007f30cd1974b0 XMM07=00007f30cd1974a8 00007f30cd1974a0
XMM08=0000000000000000 00007f30cd012ee7 XMM09=0000000000000000 00007f30cd012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000039 RBX=0000000000000039 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90004107130
R8 =ffff88801f9e0237 R9 =1ffff11003f3c046 R10=dffffc0000000000 R11=ffffffff854f4b80
R12=dffffc0000000000 R13=ffffffff99b018c9 R14=ffffffff99df6420 R15=0000000000000000
RIP=ffffffff854f4bfc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c14000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000ffb000 CR3=00000001066fe000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 000000316e616c77
XMM02=9412000080020000 000f000a000e0000 XMM03=00000206145e0000 004848f8a11b9fcc
XMM04=00007f30cdcfd100 00007f30cd197460 XMM05=00007f30cd197478 00007f30cd1974c0
XMM06=00007f30cd1974b8 00007f30cd1974b0 XMM07=00007f30cd1974a8 00007f30cd1974a0
XMM08=0000000000000000 00007f30cd012ee7 XMM09=0000000000000000 00007f30cd012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
