last executing test programs:

1.192543306s ago: executing program 2 (id=5336):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
readv(r0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/226, 0xe2}, {&(0x7f0000000600)=""/117, 0x9f}], 0x2)
sendmsg$netlink(r0, &(0x7f00000001c0), 0x4000040)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001a00010000000000fdffffff0a00", @ANYRES8=r0, @ANYBLOB="0000000000b47d619900000000000014000100fc000000000000000000000000000001000000000000000000"], 0x44}}, 0x4010)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x20048006)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x1010, r1, 0x6e566000)
sendto$inet6(r1, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r5 = socket(0x8, 0x3, 0x3)
ioctl$PPPIOCSMRU(r4, 0x40047452, &(0x7f0000000000)=0x3ff)
ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000080))
ioctl$sock_netrom_SIOCADDRT(r5, 0x6180, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES8=r4], 0x88}, 0x1, 0x0, 0x0, 0x40808c0}, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r7}, 0x18)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)

1.133248695s ago: executing program 0 (id=5337):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8050}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x400002}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x58}}, 0x1021)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth1_to_bond\x00', &(0x7f0000000040)=@ethtool_cmd={0x19, 0xa, 0x1c, 0x6, 0x4, 0x8, 0x49, 0x8, 0x2, 0x7, 0x6278f674, 0x1, 0x40, 0xc3, 0x10, 0x5, [0x10001, 0x4]}})
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000900)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d61637365630000140002800500060001000000050007000100000008000500", @ANYRES32=r3], 0x54}}, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000000)={@private, @multicast2, <r6=>0x0}, &(0x7f0000000100)=0xc)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000200)={'gre0\x00', r6, 0x8000, 0x7800, 0x9, 0x1000, {{0xf, 0x4, 0x1, 0x2e, 0x3c, 0x66, 0x0, 0x6, 0x4, 0x0, @private=0xa010101, @empty, {[@timestamp={0x44, 0x24, 0x94, 0x0, 0x4, [0x100, 0x7fffffff, 0x45, 0x9cf, 0xe9b, 0x7, 0x7f, 0x7]}, @ra={0x94, 0x4, 0x1}]}}}}})
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8)
sendmsg$inet_sctp(r5, &(0x7f0000000300)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="b3", 0x1}], 0x1, &(0x7f0000000080)=[@init={0xfffffffffffffd18, 0x84, 0x0, {0x6, 0xfe, 0x2a, 0x6}}], 0x18, 0x200008c0}, 0x6004045)

1.132644108s ago: executing program 0 (id=5338):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000240)=0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000252d010034001280090001007866726d0000000024000280080001000000000008000200030000e408000100010000000800010001000000080003"], 0x5c}, 0x1, 0x0, 0x0, 0x85}, 0x4000000)
r2 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="320000001900010000000000fedbdf251c140002ebaa520100000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000005}, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c)
sendto$inet6(r3, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, 0x0, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000000800)="af77ad7157a3553673a8328de3fa351fb46c7cd6e742de85042f340b2a63a56bca6f2607a383e198c94f9b3c10a1bf58a3ac739541c932c95555ddf1c7ba76cb4827babd1be2953f764ba703290c2f5b80daca95f1ee8d04525131b7ff448ec83cc07e6c709836440dba465bd7aa8545959eaf1161718e7c7606e5cc4047a43637595c019865502f76175da27f565af1323a172171005d2a5a4ff649e566105805582eeed674aa73ad02ccba1aaf508e3af73ebf4f1f"}, {&(0x7f00000008c0)="5ac2fb2f7b83e2cba7ad482cf080b29a41a75d102450f37572d44bb11e5a0d15d98f884deb7ed68701db22363be2d82593a732b26a19ebb3ff98abb3e910504ac8363dd04d842952a0e3b52f54b1e5cf0fb505c3e8b44f6424d40ad0f7bc9115f8be71db542cec4c0ab830a9"}, {&(0x7f0000000940)="984aa9d86208192f500e6d4f610bea32c42dce1e984f5bfd49708a6f28e629c629fb85475246a708a5cc431ead97962a2ff343fba0aac0f3082dd3d7dffeaca6d92cd2ac8f5dd2e0f5cb5f2abc3b4f3f81ef918bd7f37216e22866b9fd8d629cfb41c3175abe212d08c30a6c50fbed9f7dce88b37a81926b45524411e0c78a297b295cf1840fbd8591875bd25528ac1fa8fa"}, {&(0x7f0000000a00)="5141915f9046b1aa7827d2df6a38af0fb901a7de0e7bc0fb39ce1c71bfe0a979b06973cfcc725e0a7e45cb07dfa4d5bf6af6fff7a6f2688373447274ad3ca6545ef52281d164a64546168c95bcae08d1312d98b8eb2ad6bfac16dfc9d08949040a81d658bba22bae92cbbdadc0ad027751349de190801a3bfa1afa02c9352f81b73303cb87ae102f39e4df7a354bcc0cf0f2c14e4ed848b7ecbd"}, {&(0x7f0000000bc0)="bc0489a3fc5680523e9ac103cd09d2618026f6d5ca755f8404bb19be83b1d60d37fc1035c89d501cd302ae9ed3198e1d2ba12d974b15c256bea7822f56b8f2d8338bd1d1896955c280254ee63b63eb24d2b1c0aadd13460fe736006ecc"}, {&(0x7f0000000c40)="e15c3613d8f94610f4cc6a8c6dbad9ee568abb1f96d72f0ea1a82238f59ed8c43779f6b4f039003a1014254b684433cf6260ffd3a19bade7ede35f68a9a01bfd29893bd0c3fc582594c8dc2ee6f27540675755a5ed2f19bf90b4c66bda83e757b8dd835514f93f663357c73f5fb021702e996d55fef7482d075449089fe1973d49faeef527bb9ebdb2b6561dd33f8daafce7999aa2e603643362f93f8a2fa7b1721b19901944623204089d69d2"}, {&(0x7f0000000d00)="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"}, {&(0x7f0000001d00)="1095a73f36a444fb4795b87768c39119a18a534af1063f19e4be129d59ca0a730a2f814479f0b76cf5190aab13eaeb012bc8ca255ece108783bd0139a73758a0d3305c0ed44bc846c53f021f95427bb5f11d235d52c13e979af218e84feff2044550251dedae659bde3ddd48b44f"}, {&(0x7f0000001d80)="dfd0b73434426a5c7f2e2a72d920eb63f64f36e6e94e8334b027ed78e675d96c37e39223a2e1a329f2f22ccf9a3b3e5567124bba0fae1653db4441c7d1d058b26a05e7097b44d23efa6e63a103dddf2f957180b3548b55b1fc976197abf5d26d20f143c9de63771a9042e57749758443ef03fa734b3ebbcfbb507f129292931875c56371eb70d65dfcae52ba228ff987576ed0de6a1d19e8211841f3ff07e8fc7380f3783e4ea6f60cf3adabe5a5a15b2a08cb75c4393d27d304e4b8b457a97bafa814681f0c7184834f81036b1bae7169d820f445e7b9771c3a5fc616a93c535e9c5f277a93e84ce9fd11f6ca897c882166872730988d40cb6ca7b9fec92e5cbe9ea417195cedbb09c894aa3ab7650edfe563ab2b7fe2f06be3c0d8a7106792a1561d71b57ab6152fd2e99e52c69a5e2d877198f9d20be2979e3424fed1c9180e067b9d6ab300e48575b4d942af0e23b6a3a3ae62a51c5fc158fc77e3353fcb503c6cf4f509025605f23f1922e9d34f04a3222f35c297d400ad1595c2dcdf9e44dce50b9f9f850dcebca3d7e43e4f1e79958bc781a2a09c41fcb7bbeb0922b669b63ce788ec7b21533464bb1ee537dca5258d915fbed0fdc76771b02d01773f934ba03686c3f7a96afb454e0f198ddb382b62e667941fa12e443c34dced3cd221759003bb2974929876c313aa85bad2fa9dd3036b75db7e056066d488e42a07db6b578d67497c4b5269c571c471d35edd021795ce865207c5b4dc7e953be22dd9054331bcb203a0f2a48bf73048e398efaf2a6939fb3ff5184f672b1a07b8b7818bda33d7906dfdfb7fed23170217193e2cf4290306923ec2cd290315febfedf36dd7d7f0cc029b8deccad697ce98351b86235543783eb27ef26b258ffc550b3397c7c510d9eb89c72c7cb0d0003246b09097f5bab5f260510f8374a83df0b923609e060c54e19b0aa49eba99cb38b727ea6a9172de9d77b9b4cc10b1f15357cee8ee6cf5d7d9613faddebb25b14467428dbeec744193b2fae90dd8e1a33103a09c9c4d573ef21c5081fe5ec4d5749341f153fa20d41296abda6ac21a93812d52ee161252116ce771b20c4b7a2940540fa7e11bc7a4714f4f372179c96ded8206f16b36a1400bd55647b8479a44ad4c06f9f98919752a20db516aa2a16d9b41344fd6a5fc224828f3294632b4978fd91e09b20acb64d1386aa338eced455ed5b7e3430e86f0c19b07567764bb7a0d9fd257190257d3bc6d7f4ec471e6ff61398b39f8d8d0f98e6e846790bdec295b8393a430c1971cbc8228fb517a819919404d2c2d01a8bb9a77d606e9c524b660a65dc70f00ac28b3a3f3061b81efd99789f494de609a7535a26af9ceeef9844058fbf118242e8dabda0e5542a198054f894328995d8bf94e616e9dc1f21730c1aa982c641ef0f7da3319073dea68e68bde4a7dd8dce79bf666ca109688a852702653e08075d1230f344ee363394df268d39fb0dd67dfbe4ddb4b95863193564825ae68d8d2cac0e1391a927c9435d617cec296fdb4b38d07c3979e6514275c4096de0853411bd8a04d895afdce16de9e6b4575971a5447af24a12f14fd5ec0a33cd8cf781294d8f78750e3d50da09ea8e6a41689d5b55b73ae110a45f5b9c99751e9b6a231d40fefa6bdec93aac5a4e1dd0e6ed80752041ab802161f687d99b3576d425530073bf95c45000afec4e3a35414349fffccaec4418fbedcb350880eb20f17ea22d9d827b395d51e5deb4f9074efc2b629fe191773068b0513a2ca4b001ada1d54127e5aa071f212692f07eae50b37337172d292e4d7b7c2d7b5a09eb3c8b50f4aba8413b01b97204779fba93e0f424c764cab854ee12d9e89ea9159ab615e9c52a8727148c5596e67d4c459e8c24ab62f10bddd32bb19f0406aa96a58c015911e89c524b29d016080a7a98a9284f41aa55387c0110095a677f75633ad1326915ebec597ff5cc3a9dd6a4b43aa2e440519529fae4dcf082b6f524deaaee09da0a34bdf7b4e007bade763550acca0bf5b9e531c38e3d0031e4742557effe6c178a36b243d845b3b020daedb6f6b3ab150db21c9d600b3bd64c579d18376ac2d37f6d2891c448f5430c3b2b2c299eb07f0ba1c6747ac1a26930b8746d2231920844e46bb9c3f6f580687adbb0b992c47dbc60fadf630a65ab7361f90ae47ad1a37df9a267586ebf339b2b04c2a9247a715a9c0ef277ea9e98619ccba53a53028677a03f88593a424cf378e3a1b9dd4fabc284cf7d4e0e5874c8598966ff2152669a726eaf0f639f8035927f587b5d698f278ba7f2ceec2348a08d217d0dd72056aebc862bc0ef463cef36a5f2ad35df18d701d0ca1e394e2f43c34b271f2120616d0da34d9c9e04b9d6046691cac45dd52533053a312ed6590d443a3ebe9d4f4017677f46ac13dcdd13526e0c0c3757ddbcdeb1b48dfb4703860cd5218483bb2c3e4b4185027e488ca046322b8278d3503ed5146382d4ed549ea8c4a03ac508d39c5c90b0e0499add159b06823e191f127d65360739f558fc18320611379db8178e30209093b31b1597c1ac3e5c37c4c1a048e5e670544c8a6893bbeff39aa31c9ef82e7a3bd54c84671695c2e4368e75165941b6b8b1fa9387102da3a3577f14fcfa6a69746d2f8f07b8d827c7b294897db79b9cfc8adfccfb8fac5a94f6ae5e3adfdce2f4785e37c03047c56e01fbe7bb6974eb19d3c93edb985c30b8b31fa4336e38e54673c0349c9018e9b333cc836278db76694e2d18c0709b1c1dcc2d6fcdb19540540144de6387ecd3570deef9954fe37056a56e445c98c5a8ed4e906dc9a92831aa4a25e4da2ac11fc468c40cc168463661f300ff81c524ed198c52dd84ecdcd9538a9fbbcad3f9716a46bac2c8de201efde08b7f513ae2e6809a30a9593fa90e5cfdb589c6f5f8fcc4d2a2b5d99acd80abcf89576d34e9d3a91f1b443ed8eaba2f75a748b593bfd58ea419bebe557c994bde3e7d3cdb73c804863ec359721315bdbe42630e52d0e74677d53b85e7c9dd73ea08a2e100c3cca299661283202ef3fbbbbe6ae7f052458f0f6808fa39d244cd8300bfd48be5722860887397fae1ce155c20bcb7cf4a060df86ee228f2db76f3aee8888e15f7180b05aa66f5c127eada08de52ab4fd91669875b54fb65a4543c8759e56b84f4eaba87548db62b7ba46f9ce25d7af29b62decc57777f9a73466af86979a82551d030e4da211a64b5e2c466bcd6f3e866efb1676188109a170df829d3ad0ff502a80eb986d22a3814cc32cacdaec1cf36ff1dd877fd781af436f9a3f13b96ac178d70700ee1012b2fc00ef45c39adaf506c5c7c7f4a19533c6d9f1cca45e17a33fa9a8787a60b5f165ce2d6bb4418336da1d11398bc388f894d0b16aa5a9504640874fe8f637ba6885d808effa0749d3f1ff4776b066b79169f584836270e93d045e0221c06f118b40e2a0a0767c66a5ed9b8a6d5aeccd9b1aa801fffa7dcd562fd6d8d1d5bdc936c5fd4232df041664dbecaaf9f182e916e1465b9c5c9e247aa6e0d17d59624c848a8cc9acf2a25a35a62ecb67f1fe72b06958828dbbdf5c7334425fe609ae5a88fb9ba3b3d0609c10f05140d683c99e5db1f20f17f7d479ef484bbded72f39b5ea7b1f3d083724ecd869b5fda32c121db86b61910f2a378768143dbe4631a6a04c9e812f88cb6657bbdbe6448cc049575181c30fe3de0ec28c69f8bf5a0436f62c9fe82ed88519eafbae31554a50842b7e044d7e561c7efb29ee4c11ccf1ebd19de63ab09061409e0138eb17b4690e3937342d09e66cd55e70e83f0fbb99df46233604ff80fbbace796ef9f9d0da5c6db20fec588744434a22535fe77a3f20dfef6f58c272fe0abdbcb96532c8a3439660e049ecc61ef11532f04830c212484d8569c01414bdca348d296d7510cfd0071d062bdd5a93b60b2572d3752a071ad8e92bf1b8e5837d3fdd414c84d0999db12f7368a2c3cb1bf0e91a1abe646e0db1c0b517ff541abd10a56e0c1733c284ee0a2702792263cc29d782e11a7b69479db2180843fe8a2cd2fa46d09535b5cc19e6a796fa9920f0b837fcb0c0659724ff3a25e87fe6e7c665b23dc16a476aae4df424b9cbdbe88a1c830a67b827749898f7a0cf1b1d27dbb5ea47c6b41f350cd018878a2bfc370d681b81b8ea08c5942e0936288943840c35cadd54ae59d4ed1ba3b252cf457275feb913f671afec2962ca94e6979c9f87a0fc0366f8a3a2beaa2cea75f31d18027ec631a7f4963449dbf3f16f499d4aac30352767b3372d9b5edcdda2063b2341aa8a6d4b897c11e894053700333520fe04e4de29b923f6d0cc83693be150c268e02d3ace69e0ad2cfa1103969693052169bfb3c9a9c692ff7bd6366eedc93662578eb275e1bd688add96d6c1c1934807268cc439602a62845e234a30d401e4515027104541201b5e5bd3a0d2c3f0a2f1ffcd4c0a28fd0f8d001e6b2767fd2e76caea7e1c9889812098c91361b202f0d5528648f81ae4499240f45941de3554bf43ca28060cf5b5d5497e99b702f7528ec93401c645ba422ce5bfdc461c674246989fc39cbeb280cb19bb9be13b545f5d61acea7930c22417976718034ca41b8aa18f382523ea9f845c8067ab16546db613a7a1596c5d946d810020fb45a672992d186437234d1673be94e1dd32f1f5e1cb0974672c63d88f9aa3f18f8777786b205834c593e844d6b03bdc3bbedf6b702599926d870d24439dda5ae06ca5942a545a07e48bcc1ed084d5a64a839b837aef70fc3786b18d6f97d3b2b41c6549532c9960496367453b6d8a14f326678f242e9163a515dabddc7dcf3c53968f1c93db09e7fa7e970ac15db5366a7b72aa4f2c28e685505b1e6f2abfdb8c8425df2abcd5775363742be754590cad30685227a99aaabd4bb2c1cfcbf115844033e81ac6b5f4c23bdcdf41571ba84c2cf42da7f8d6612dd42950decf3e6557bd13de7be06c04a2a0b56acd0f48363320648fc174f955fc3468f77f9cd40a93974d61d5c195609b5231e1c276c738aa4ed9b2a863fa7d1291083a322770e7b112a567f49aeefff617188d3b5a3f8a892c270f295723cf3d6946a6ef03aaa1df58c6d1da3657418703cb56f0378f49948db751c45f8bc1bb2bb9576dbd5287bc85a6ed2df55ccc85a3989a2174cee3f5e94d534e380ab3196d5a4801ced6c5f653e8c06f41596fcd85c307b7fd7165d2f6abb076539ec381c1018676a784141423b1d501ddee9ed832b8e5ebf601819d1fcc3cf5b7711ed78dd5f88a1a9e99e0af14b9b25ec9dfebed67111da37cd3e974e325e7d802c02dcf4b69ef5fc24300395b7ae88266e309a75549e997d290275abdf920f229542f86fa47abb1688a14687513d39b9cff52e1fa4e40ee268b0d9af9dc2b19d36ba645a45ed772431d450181104b4827872bc511d343edb35223157202d991855830b84b3024a26242c73d37a1b0b89f48f327f8caf37f6b45c833c67cf571e7a0bde4a828d7f0588a9f4af0407eecc3c2e4f8323d15f2af3fbabe8b88b83769c3f8e97c2834c5664e7b7d61b873a67cc05701a220f83d9b0274d5bf68e608e3c6f6daba0695924861d2788ad614c05b735f5ddfd20b4c4dde97bfb72cc482ca162589c0287dcfb8b59e02592f698f17ca723ec30166043f91b0482e38d843b27ef5c69b339edcefd07a68818700e1bffd3eb4ca0cb794862cce72e3aa971178fc3364c5c474a9736f145d39e8a606798cc793b2d19bf4ce05ba7ccaaccd7e465a3b1"}], 0x1000000000000321}, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f00000000c0)="44060001000000ff0000005b1957034b596f21d381fe91ee54bec6fe1864aae7bfbea6", 0x23)
recvmsg(r3, &(0x7f0000000280)={&(0x7f0000000300)=@caif, 0x80, &(0x7f0000000200)=[{&(0x7f0000000380)=""/68, 0x44}, {&(0x7f0000000400)=""/209, 0xd1}, {&(0x7f0000000640)=""/224, 0xe0}], 0x3, &(0x7f0000000740)=""/137, 0x89}, 0x0)
r6 = socket(0x28, 0x80002, 0x0)
sendmmsg$alg(r6, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10)
ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x5}, 0x0, &(0x7f00000002c0)={0x104f, 0x0, 0x7, 0x9, 0x3, 0x66, 0x7fffffff, 0xf98}, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
close(0x4)

921.012393ms ago: executing program 1 (id=5340):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
close(0x3) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000950042d97f0a66a0"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="250300000000140001800d"], 0x28}}, 0x0) (async)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) (async)
r5 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r5, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) (async)
r6 = socket(0x2, 0x80805, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={<r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f00000002c0)={'macsec0\x00', @random="0100061f8145"}) (async)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={<r9=>0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004000f02d12800e00010069703665727370616e0000002c00028014003993710f514e80e501e979b505000000000000000000000000000000002a2b1b41f60140f99b34785d3d93266e8c28a9a965f12a30aebfdefe7cf6c964d31a532674f138f7496c91704c48"], 0x60}}, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r9, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}}, &(0x7f0000000040)=0x84) (async)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r11, &(0x7f0000000640)={0xa, 0x4e20, 0x81, @mcast1, 0x64}, 0x1c) (async)
sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r12=>0x0}, &(0x7f0000000280)=0x8)
r13 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r13, &(0x7f0000000140), 0x4924b68, 0x0) (async)
accept4$llc(r6, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x10, 0x0) (async)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r12, 0x5, 0x30}, 0xc)

843.381238ms ago: executing program 1 (id=5341):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d000000000000000002000000000000060000000006001500010000001800168014000100800000000000000000001000000011"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[], 0x85}}, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x5, 0xfffff010}, {0x6, 0x0, 0x2}]}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000600)={@val={0x0, 0x88b5}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x11, 0x1c, 0x66, 0x0, 0xc9, 0x2, 0x0, @remote, @broadcast}, {0x16, 0x0, 0x0, @rand_addr=0x64010101}}}}}}, 0x2e)
socket$kcm(0xa, 0x5, 0x0)
r5 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, {0xa, 0x0, 0x0, @remote}, 0x0, {[0x2]}}, 0x5c)

772.950663ms ago: executing program 1 (id=5342):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000001932000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x184}}, 0x0)

772.496132ms ago: executing program 1 (id=5343):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xe, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xe}}}, 0x24}}, 0x0)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={<r2=>0x0, 0x2c, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x0, @remote, 0x7}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000080)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c)

723.279814ms ago: executing program 1 (id=5344):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) (async)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000001680)='\t', 0x1}, {0x0}], 0x2}}], 0x1, 0x4000000) (async, rerun: 32)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff}) (rerun: 32)
ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0xbc8) (async)
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/68, 0x44}], 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) (async)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x6, 0x8001}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000280), 0x4)

632.939547ms ago: executing program 1 (id=5345):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x1, @mcast2, 0x3}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000001680)='\t', 0x1}, {0x0}], 0x2}}], 0x1, 0x4000000) (async)
sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000001680)='\t', 0x1}, {0x0}], 0x2}}], 0x1, 0x4000000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001000010025bd7000fadbdf250000000012b3ea2c8fb8f2b72e2985bf7e21d9615c1621d62cf3dd0f9fa1300cedf4f28dd33020bef670d2778e5d068276c726049d680216dbc8f1912d418e4889b6dfa9084e49e44eef146b5922813c2efd4b2bc63244301e2a1a826e2641c2c19fc9c184834e046da3e3f46a42ef27e32c9de455f0657e3d0024f39ba3e3ff465b3a924973cc1094226393", @ANYRES32=0x0, @ANYBLOB="100804000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) (async)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001000010025bd7000fadbdf250000000012b3ea2c8fb8f2b72e2985bf7e21d9615c1621d62cf3dd0f9fa1300cedf4f28dd33020bef670d2778e5d068276c726049d680216dbc8f1912d418e4889b6dfa9084e49e44eef146b5922813c2efd4b2bc63244301e2a1a826e2641c2c19fc9c184834e046da3e3f46a42ef27e32c9de455f0657e3d0024f39ba3e3ff465b3a924973cc1094226393", @ANYRES32=0x0, @ANYBLOB="100804000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='memory.events\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r2}, 0x18)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3800004, 0x12, r3, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000100000000000000000000000000000000000000000000000034"], 0xaf)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x6, 0x8001}, 0x8)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000280), 0x4) (async)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000280), 0x4)

332.905114ms ago: executing program 2 (id=5346):
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x2)
r1 = socket(0x11, 0x0, 0xe8)
sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x480c1}, 0x20000000)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000e80)=@gcm_256={{0x303, 0x36}, "437e509e2d2800", "8b3de2aabceef2a0640000d5a66fd32f419e59d2000000000400", "5d939e3c"}, 0x38)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000180))
r2 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000040)={0x6, 'wlan0\x00', {0x2}, 0x3})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'batadv0\x00', {0x3}, 0x1})
r4 = socket$l2tp6(0xa, 0x2, 0x73)
r5 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r5, 0x8)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001080), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = accept4(r5, 0x0, 0x0, 0x0)
close(r6)
sendmmsg$inet6(r4, &(0x7f00000126c0), 0x0, 0x8000)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESDEC], 0x28}}, 0x0)

213.347775ms ago: executing program 0 (id=5347):
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffeab, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32, @ANYBLOB="d461e83e4791e2e3fef94d95649775afac284d5a2d5c21e783b4b2ad673cb1aed7deb3ff26a1a3ec0252b1151688df81d2c3b7dcb20013c35248476a302873166c98c1ca51abb85bea9bdabb1c6e48bd6b5b902a62b7822158bae2f7827cbedadca11af3d3"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5)
ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000))
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x14, 0x1, 0x0, 0x0, "", [@nested={0x3}]}, 0x14}], 0x1}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="480100001000010000000000000000000000000000000000000000000000000000000000f8ff0000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000001eb900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00120073657169762863636d28626c6f77666973682d61736d29290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000c0008"], 0x148}, 0x1, 0x0, 0x0, 0x3ca07969f0248e73}, 0x0)

212.705644ms ago: executing program 0 (id=5348):
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000180)={0x0, 0xf042, 0x30, 0x264, 0x3}, &(0x7f0000000280)=0x18)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0xbc, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x300}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x10}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x91}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x90}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x582}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xc02}]}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x2, 0x3, 0x6, 0x1]}]}, 0xbc}}, 0x0)
setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000000), 0x4)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{0x4, 0xffff}, 0x40}, 0x10)
r5 = socket(0x2, 0x80805, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x0, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x542)
sendmmsg$inet_sctp(r5, &(0x7f0000000dc0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="e2", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="3000000000000000840000000100000004000100090000008e0c0000ff070000330000e2cc00009199f044e9757c510572133200"], 0x30, 0x8000}], 0x1, 0x0)
socket$kcm(0xa, 0x5, 0x0)
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0xfffffffe]}}, 0x5c)

123.07838ms ago: executing program 2 (id=5349):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000204000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000ff000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x50)
r1 = socket(0x1f, 0x5, 0x3)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500001c00000000000190780a010102ac1414aa11009078000000013f1b92596a642e5c01ed10a3d9421e56cbdf46e136571f976afd375986efd25aefd5b7ee4058c8d3d3a2f51bd7d9046fb4e623b8b7d235e422352fe6675b3eb88c8a51daf59be46642b17dbe636efeb3bb7a342235df5508823a64fbc4c41b1e6e8fc10190a30584558a8bc1b4f2c2"], 0x0)
sendmmsg$inet(r1, &(0x7f0000000a00)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000040)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000240)="136c56cb4cd1dbfdf7ffed248e6807b5a474e29c77989ea1ee80e24f171d80bdb93f036ab2a5a37ad38e05df921bce011cdc56e12c27673fbbfc82b44fb49ab28fc632e262b04d06778fbad58dd5b56208abfb8a96b9532d86d66fae4f", &(0x7f0000000000)=""/10, 0x2}, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r2, &(0x7f0000000300), 0x0}, 0x20)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="102000ffdfdf25"], 0x10}], 0x1}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f00000001c0), 0x0}, 0x20)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000000c0)={0x80000043, 0x0, 0x0, 0x3}, 0x10)
recvmmsg(0xffffffffffffffff, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/72, 0x48}], 0x1}, 0x100}], 0x1, 0x40010000, &(0x7f0000002b80)={0x0, 0x3938700})
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r3, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="180000c7ff0f0800c400"], 0x18, 0x48060}], 0x1, 0x200000d0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x6}, &(0x7f00000000c0)=0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x4, 0x1, 0x0, @remote, @local}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0x18}}}}}, 0x0)
getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000140)=""/34, &(0x7f0000000200)=0x22)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r7=>0x0})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r8)
ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
write$tun(r8, &(0x7f0000000400)={@void, @val={0x1, 0x3, 0xa, 0x5, 0xf6f, 0xd17}, @x25={0x1, 0x60, 0xf, "f491e62f5771ea4858ce62a05bab7211ffa409fb55b3290169b98b96be3ab17a14fb57d4b8bb687e9a8f79d586ac8091406dcf467d3de81ef8c727d86d59d414c5c933346deb1684897891e39016ab583ece63e2d69d26b3d4c748704a94d0851290361f5c50f5a5641f0118d4dee7a550b458152ad5bb66aaa56a27c3043c945d13e1f302defb6e892bfc099e3c0f6d67470cd1eeadbf129e5df987a5ec69570f97b4911627f7fcd580133577f1"}}, 0xbb)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dbdbff, {0x7, 0x0, 0x0, r7, 0x40, 0x4c, 0x7}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840)
sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000ed0000000004"], 0x40}, 0x1, 0x40030000000000}, 0x0)

122.751307ms ago: executing program 0 (id=5350):
socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x0, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x8001, 0x5, 0xde, 0xffff}, 0x8)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@allocspi={0x120, 0x16, 0x1, 0x0, 0x25dfdbff, {{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x32}, @in6=@empty, {0x0, 0x0, 0x10000000, 0x0, 0x8}, {0x2000000000000000}, {}, 0x0, 0x3505, 0x0, 0x0, 0x0, 0x1}}, [@address_filter={0x28, 0x1a, {@in=@dev={0xac, 0x14, 0x14, 0x29}, @in=@remote, 0x2, 0x4}}]}, 0x120}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800c0001006d616376746170000400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRESHEX], 0x44}}, 0x20008040)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x11000000}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590)

122.455187ms ago: executing program 2 (id=5351):
r0 = socket$inet(0xa, 0x801, 0x84)
listen(r0, 0x8)
r1 = socket$inet(0xa, 0x801, 0x800)
listen(r1, 0xfffffffd)
r2 = socket$inet(0xa, 0x801, 0x84)
listen(r2, 0x8)
r3 = socket$inet(0xa, 0x801, 0x84)
listen(r3, 0x8)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
listen(r4, 0x7)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r5, 0x100)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="e7640444967113d0a7da5ae7725bdf4d101cca1ced2e30a68bbb1a60f4e962b724bffb01ae56c4a0af7f7163d85016c568984fabde8a916ea4ae02d1a5c98aa2e3d1ae7ace5be989471c2541466c83085eb846627c8d0df8194badee26d7c3b7ea8315317a5e1d3a7e7de71fadb507a2910531d2b41e747beaefbe1001d48ea044b387ca03d40e708d5da3c7037ef5e1bc33d136c37007ab7e17bfead14b90ba1d40e16d96cd8429f4f1292c1c78fd75adb310e9c98fd2df"}], 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r6)

62.397873ms ago: executing program 2 (id=5352):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd2a}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r1)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1)
sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="29082dbd7040fedbdf251e0000000a0004007770616e33000000080001000020"], 0x28}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40240c4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000440)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e20, @rand_addr=0x64010100}, @in6={0xa, 0x4e22, 0x0, @local, 0x5}]}, &(0x7f00000003c0)=0x30)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000000)={0xebe2, 0xf, 0x2})

61.340574ms ago: executing program 2 (id=5353):
socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(r3, 0x104, 0x2, &(0x7f0000001bc0)=0x3ff, 0x4)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r2, 0x5}, &(0x7f0000000240)=0x8)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r5, 0x7fff)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
r7 = accept(r4, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x801}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000008c999e8628d0009500000000000000000000f3f93ff746cd932651c04261989d6d000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff56}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
syz_init_net_socket$netrom(0x6, 0x5, 0x0)

0s ago: executing program 0 (id=5354):
r0 = socket$inet6(0xa, 0x5, 0x0)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c)
r1 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3b8, 0x20, 0x1e8, 0x1e8, 0x2d0, 0x2d0, 0x2d0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x20}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x44, 0x2, {0xffffffffffffe8d8}}}}, {{@arp={@remote, @multicast1, 0xff000000, 0xffffff00, 0x3, 0x3, {@mac=@broadcast, {[0x1fe, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x6, 0x2, 0xd9e7, 0x1, 0x2, 0x1000, 'vxcan1\x00', 'macvlan0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x408)
r3 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c)
connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c)
r4 = socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1)

kernel console output (not intermixed with test programs):

ing attributes in process `syz.2.2995'.
[  310.899637][T16157] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2995'.
[  311.915830][T16197] validate_nla: 4 callbacks suppressed
[  311.915843][T16197] netlink: 'syz.1.3007': attribute type 10 has an invalid length.
[  311.951693][T16199] netlink: 'syz.2.3008': attribute type 1 has an invalid length.
[  311.954862][T16199] netlink: 'syz.2.3008': attribute type 21 has an invalid length.
[  311.955554][T16201] netlink: 'syz.1.3009': attribute type 6 has an invalid length.
[  311.958075][T16199] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3008'.
[  311.965117][T16199] netlink: 'syz.2.3008': attribute type 21 has an invalid length.
[  311.967687][T16199] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3008'.
[  312.002838][T16203] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3010'.
[  312.007201][T16205] netlink: 356 bytes leftover after parsing attributes in process `syz.2.3011'.
[  312.007366][T16203] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3010'.
[  312.012827][T16203] netlink: 'syz.1.3010': attribute type 6 has an invalid length.
[  312.015142][T16203] netlink: 'syz.1.3010': attribute type 5 has an invalid length.
[  312.019153][T16203] netlink: 'syz.1.3010': attribute type 4 has an invalid length.
[  312.023581][T16203] netlink: 'syz.1.3010': attribute type 4 has an invalid length.
[  312.029790][ T5824] lo speed is unknown, defaulting to 1000
[  312.031496][ T5824] syz1: Port: 1 Link ACTIVE
[  312.084154][T16211] netlink: 'syz.1.3014': attribute type 1 has an invalid length.
[  312.119151][T16211] bond12: entered promiscuous mode
[  312.120917][T16211] 8021q: adding VLAN 0 to HW filter on device bond12
[  312.469684][T16249] xt_hashlimit: invalid rate
[  312.472510][T16250] veth0_to_bond: entered promiscuous mode
[  312.490794][T16250] veth0_to_bond: left promiscuous mode
[  312.858211][T16283] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  312.862345][T16282] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  312.971551][T16292] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  312.978077][T16291] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  313.085557][T16294] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20003
[  313.114492][T16286] lo speed is unknown, defaulting to 1000
[  314.397391][T16334] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  314.550293][T16341] 8021q: adding VLAN 0 to HW filter on device bond6
[  314.559139][T16343] gretap3: entered allmulticast mode
[  315.195229][T16364] xt_bpf: check failed: parse error
[  315.271334][T16363] lo speed is unknown, defaulting to 1000
[  315.474036][T16375] __nla_validate_parse: 19 callbacks suppressed
[  315.474052][T16375] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3068'.
[  315.608640][T16385] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3071'.
[  315.614063][T16385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3071'.
[  315.709511][T16397] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3072'.
[  315.768564][T16407] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3078'.
[  315.772142][T16408] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3078'.
[  315.838028][T16390] lo speed is unknown, defaulting to 1000
[  316.036581][T16417] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3080'.
[  316.039973][T16417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3080'.
[  316.151225][T16429] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3085'.
[  316.157465][T16429] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3085'.
[  316.821408][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  316.824225][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  317.258858][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  317.359941][T16481] lo speed is unknown, defaulting to 1000
[  317.730693][T16496] validate_nla: 6 callbacks suppressed
[  317.730704][T16496] netlink: 'syz.0.3107': attribute type 1 has an invalid length.
[  317.753602][T16496] bond21: (slave vxcan11): The slave device specified does not support setting the MAC address
[  317.757229][T16496] bond21: (slave vxcan11): Error -95 calling set_mac_address
[  318.460245][T16528] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  318.551938][T16530] netlink: 'syz.0.3117': attribute type 4 has an invalid length.
[  318.554916][T16530] netlink: 'syz.0.3117': attribute type 4 has an invalid length.
[  318.600356][T16535] bond12: left promiscuous mode
[  318.607063][    T9] lo speed is unknown, defaulting to 1000
[  318.611461][    T9] syz1: Port: 1 Link DOWN
[  318.677136][T16546] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  318.681636][T16546] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  318.690585][T16547] netlink: 'syz.1.3122': attribute type 10 has an invalid length.
[  318.693871][T16546] netlink: 'syz.1.3122': attribute type 10 has an invalid length.
[  318.695819][T16547] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  318.724373][T16546] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  318.727562][T16546] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  318.987741][T16549] lo speed is unknown, defaulting to 1000
[  319.086040][T16564] 8021q: VLANs not supported on sit0
[  319.377802][T16566] lo speed is unknown, defaulting to 1000
[  319.630240][T16579] netlink: 'syz.0.3132': attribute type 1 has an invalid length.
[  320.001805][T16610] netlink: 'syz.1.3142': attribute type 1 has an invalid length.
[  320.032645][T16610] bond13: (slave vxcan7): The slave device specified does not support setting the MAC address
[  320.036348][T16610] bond13: (slave vxcan7): Error -95 calling set_mac_address
[  320.274329][T16622] netlink: 'syz.2.3146': attribute type 13 has an invalid length.
[  320.277370][T16622] netlink: 'syz.2.3146': attribute type 17 has an invalid length.
[  320.336475][T16622] 8021q: adding VLAN 0 to HW filter on device bond0
[  320.339773][T16622] 8021q: adding VLAN 0 to HW filter on device team0
[  320.344400][T16622] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  320.391302][T16621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  320.481466][T16623] lo speed is unknown, defaulting to 1000
[  321.050463][T16660] __nla_validate_parse: 14 callbacks suppressed
[  321.050476][T16660] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3158'.
[  321.880623][T16679] netlink: 'syz.1.3161': attribute type 1 has an invalid length.
[  321.978328][T16690] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode
[  321.981162][T16690] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode
[  321.995787][T16690] tipc: Resetting bearer <eth:syzkaller0>
[  322.005156][T16688] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  322.088645][T16684] lo speed is unknown, defaulting to 1000
[  322.230312][T16709] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  322.233282][T16708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3168'.
[  322.236028][T16708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3168'.
[  322.244206][T16709] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  322.251769][T16709] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[  322.255483][T16709] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  322.258298][T16709] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  323.070274][T16721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3174'.
[  323.228691][T16735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3178'.
[  323.352096][T16746] validate_nla: 3 callbacks suppressed
[  323.352112][T16746] netlink: 'syz.1.3182': attribute type 4 has an invalid length.
[  323.384440][   T10] lo speed is unknown, defaulting to 1000
[  323.386527][   T10] syz1: Port: 1 Link ACTIVE
[  323.420187][T16757] pim6reg1: entered promiscuous mode
[  323.421871][T16758] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3184'.
[  323.422274][T16757] pim6reg1: entered allmulticast mode
[  323.593786][T16768] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3187'.
[  323.596928][T16768] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3187'.
[  323.599696][T16768] netlink: 'syz.1.3187': attribute type 6 has an invalid length.
[  323.602229][T16768] netlink: 'syz.1.3187': attribute type 5 has an invalid length.
[  323.606483][T16768] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3187'.
[  323.611096][T16768] netlink: 'syz.1.3187': attribute type 4 has an invalid length.
[  323.617024][    T9] lo speed is unknown, defaulting to 1000
[  323.618424][T16768] netlink: 'syz.1.3187': attribute type 4 has an invalid length.
[  323.618781][    T9] syz1: Port: 1 Link DOWN
[  323.623734][   T24] lo speed is unknown, defaulting to 1000
[  323.626545][   T24] syz1: Port: 1 Link ACTIVE
[  325.341386][T16806] netlink: 'syz.0.3198': attribute type 1 has an invalid length.
[  325.373838][T16806] bond22: (slave vxcan11): The slave device specified does not support setting the MAC address
[  325.386447][T16806] bond22: (slave vxcan11): Error -95 calling set_mac_address
[  325.969177][T16834] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3206'.
[  325.972568][T16834] netlink: 'syz.1.3206': attribute type 6 has an invalid length.
[  325.978486][T16834] netlink: 'syz.1.3206': attribute type 4 has an invalid length.
[  325.984178][    T9] lo speed is unknown, defaulting to 1000
[  325.986372][T16834] netlink: 'syz.1.3206': attribute type 4 has an invalid length.
[  325.989120][   T24] lo speed is unknown, defaulting to 1000
[  326.179318][   T24] lo speed is unknown, defaulting to 1000
[  326.183065][   T24] syz1: Port: 1 Link DOWN
[  326.412418][T16866] netlink: 'syz.2.3217': attribute type 6 has an invalid length.
[  326.453726][T16868] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  326.455324][ T5815] Bluetooth: hci2: command 0x0405 tx timeout
[  326.456581][T16868] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  326.460978][T16868] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  326.463638][T16868] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  326.466685][T16868] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  326.469197][T16868] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  326.471866][T16868] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  326.474369][T16868] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  326.476990][T16868] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  326.479670][T16868] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  326.557273][T16874] __nla_validate_parse: 2 callbacks suppressed
[  326.557284][T16874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3220'.
[  326.670613][T16874] lo speed is unknown, defaulting to 1000
[  327.003270][T16895] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  327.006265][T16895] syzkaller0: entered promiscuous mode
[  327.007973][T16895] syzkaller0: entered allmulticast mode
[  327.023359][T16895] tipc: Resetting bearer <eth:syzkaller0>
[  327.030253][T16893] tipc: Resetting bearer <eth:syzkaller0>
[  327.042094][T16893] tipc: Disabling bearer <eth:syzkaller0>
[  327.166837][T16898] lo speed is unknown, defaulting to 1000
[  356.621390][T16923] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3235'.
[  357.463384][T16953] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3243'.
[  357.722375][T16959] tipc: Resetting bearer <eth:syzkaller0>
[  357.732570][T16959] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode
[  357.735429][T16959] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode
[  357.781535][T16964] sctp: [Deprecated]: syz.2.3246 (pid 16964) Use of int in maxseg socket option.
[  357.781535][T16964] Use struct sctp_assoc_value instead
[  357.833479][T16969] sctp: [Deprecated]: syz.2.3248 (pid 16969) Use of struct sctp_assoc_value in delayed_ack socket option.
[  357.833479][T16969] Use struct sctp_sack_info instead
[  358.939255][T16996] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  358.949683][T16982] lo speed is unknown, defaulting to 1000
[  359.036150][T16988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3253'.
[  359.036811][T17002] xt_CT: No such helper "snmp_trap"
[  359.185899][T17010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3258'.
[  359.190226][T17010] netlink: 'syz.0.3258': attribute type 1 has an invalid length.
[  359.253780][T17010] bond23: entered promiscuous mode
[  359.256361][T17010] 8021q: adding VLAN 0 to HW filter on device bond23
[  359.297545][T17010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3258'.
[  359.301312][T17013] 8021q: adding VLAN 0 to HW filter on device bond23
[  359.310793][T17013] bond23: (slave gre2): The slave device specified does not support setting the MAC address
[  359.317401][T17013] bond23: (slave gre2): Setting fail_over_mac to active for active-backup mode
[  359.323670][T17013] bond23: (slave gre2): Opening slave failed
[  359.333492][T17010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3258'.
[  359.479827][T17014] lo speed is unknown, defaulting to 1000
[  359.757193][T17023] syzkaller1: entered promiscuous mode
[  359.759382][T17023] syzkaller1: entered allmulticast mode
[  360.216075][T17041] xt_TPROXY: Can be used only with -p tcp or -p udp
[  360.708680][T17078] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3275'.
[  360.713922][T17077] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3275'.
[  360.830840][T17090] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3279'.
[  360.906731][T17104] netlink: 'syz.1.3283': attribute type 7 has an invalid length.
[  360.909392][T17104] netlink: 'syz.1.3283': attribute type 8 has an invalid length.
[  361.393313][T17112] sctp: [Deprecated]: syz.0.3285 (pid 17112) Use of struct sctp_assoc_value in delayed_ack socket option.
[  361.393313][T17112] Use struct sctp_sack_info instead
[  361.444869][T17114] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3286'.
[  361.848889][T17122] net_ratelimit: 23 callbacks suppressed
[  361.848901][T17122] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  361.921945][T17137] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  361.928384][T17138] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  362.656101][T17166] syzkaller0: entered promiscuous mode
[  362.955846][T17183] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3301'.
[  362.960620][T17180] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3301'.
[  363.034526][T17191] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3304'.
[  363.574814][ T5818] Bluetooth: hci2: command 0x0405 tx timeout
[  364.902692][T17257] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3320'.
[  364.906637][T17257] netlink: 'syz.0.3320': attribute type 1 has an invalid length.
[  364.941764][T17257] bond24: (slave vxcan11): The slave device specified does not support setting the MAC address
[  364.946707][T17257] bond24: (slave vxcan11): Error -95 calling set_mac_address
[  364.975604][T17260] netlink: 'syz.1.3321': attribute type 4 has an invalid length.
[  365.080894][T17268] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3324'.
[  365.162038][T17273] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3326'.
[  365.219038][T17274] x_tables: duplicate underflow at hook 1
[  365.221927][T17274] netlink: 'syz.2.3326': attribute type 10 has an invalid length.
[  365.227113][T17274] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  365.230377][T17274] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  366.034241][T17287] netlink: 'syz.2.3331': attribute type 4 has an invalid length.
[  366.037542][T17287] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3331'.
[  366.061870][T17291] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3332'.
[  366.066168][T17290] netlink: 'syz.1.3332': attribute type 6 has an invalid length.
[  366.257806][T17300] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3334'.
[  366.263063][T17299] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3334'.
[  366.446448][T17299] lo speed is unknown, defaulting to 1000
[  366.762191][T17314] netlink: 'syz.0.3338': attribute type 1 has an invalid length.
[  366.777722][T17314] bond25: entered promiscuous mode
[  366.779650][T17314] 8021q: adding VLAN 0 to HW filter on device bond25
[  366.827529][T17320] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  367.009786][T17324] netlink: 'syz.0.3341': attribute type 6 has an invalid length.
[  367.012250][T17322] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode
[  367.013343][T17324] netlink: 'syz.0.3341': attribute type 5 has an invalid length.
[  367.016933][T17322] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode
[  367.020520][T17322] tipc: Resetting bearer <eth:syzkaller0>
[  367.281012][T17345] bond25: left promiscuous mode
[  367.287968][T17345] netlink: 'syz.0.3347': attribute type 32 has an invalid length.
[  367.639839][T17363] Cannot find del_set index 4 as target
[  368.332721][T17372] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  368.339486][T17372] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  368.353293][T17372] netlink: 'syz.1.3358': attribute type 10 has an invalid length.
[  368.355738][T17372] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  368.359118][T17372] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  368.362686][T17372] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  368.645200][T17404] __nla_validate_parse: 10 callbacks suppressed
[  368.645219][T17404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3368'.
[  368.730544][T17409] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3369'.
[  368.733273][T17409] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3369'.
[  368.895256][T17417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3371'.
[  368.898419][T17417] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3371'.
[  369.580856][T17435] tipc: Resetting bearer <eth:syzkaller0>
[  369.591859][T17435] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode
[  369.594187][T17435] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode
[  369.776415][T17452] SET target dimension over the limit!
[  370.362500][T17484] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3388'.
[  370.377288][T17484] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3388'.
[  370.381449][T17484] validate_nla: 1 callbacks suppressed
[  370.381464][T17484] netlink: 'syz.1.3388': attribute type 6 has an invalid length.
[  370.386587][T17484] netlink: 'syz.1.3388': attribute type 5 has an invalid length.
[  370.388941][T17484] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3388'.
[  370.396470][T17484] netlink: 'syz.1.3388': attribute type 4 has an invalid length.
[  370.405230][T17484] netlink: 'syz.1.3388': attribute type 4 has an invalid length.
[  370.411272][ T5843] lo speed is unknown, defaulting to 1000
[  370.413606][ T5843] syz1: Port: 1 Link ACTIVE
[  370.642341][T17497] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  370.669367][T17504] netlink: 'syz.0.3394': attribute type 6 has an invalid length.
[  370.732982][T17509] xt_hashlimit: size too large, truncated to 1048576
[  371.076940][T17530] x_tables: ip_tables: ah match: only valid for protocol 51
[  371.099691][T17530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3402'.
[  371.249895][T17537] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3405'.
[  371.378170][T17536] lo speed is unknown, defaulting to 1000
[  371.770054][T17561] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  371.893198][T17549] lo speed is unknown, defaulting to 1000
[  371.982815][T17579] netlink: 'syz.2.3414': attribute type 1 has an invalid length.
[  372.095262][T17548] lo speed is unknown, defaulting to 1000
[  372.571018][T17590] lo speed is unknown, defaulting to 1000
[  373.028986][T17637] netlink: 'syz.0.3431': attribute type 4 has an invalid length.
[  373.091159][T17643] xt_recent: Unsupported userspace flags (000000b1)
[  373.133361][T17650] netlink: 'syz.0.3435': attribute type 5 has an invalid length.
[  373.135861][T17650] netlink: 'syz.0.3435': attribute type 6 has an invalid length.
[  373.305693][T17654] lo speed is unknown, defaulting to 1000
[  373.542898][T17666] lo speed is unknown, defaulting to 1000
[  373.602304][T17679] netlink: 'syz.0.3443': attribute type 6 has an invalid length.
[  373.750339][T17689] pimreg: entered allmulticast mode
[  373.753178][T17689] pimreg: left allmulticast mode
[  373.797537][T17689] __nla_validate_parse: 18 callbacks suppressed
[  373.797548][T17689] netlink: 276 bytes leftover after parsing attributes in process `syz.2.3446'.
[  373.928222][T17698] batman_adv: batadv0: Adding interface: dummy0
[  373.932605][T17698] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  373.944824][T17698] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  374.138081][T17714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3454'.
[  374.148345][T17714] syz_tun: entered allmulticast mode
[  374.159383][T17714] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  374.180101][T17713] syz_tun: left allmulticast mode
[  374.328900][T17720] syzkaller1: entered promiscuous mode
[  374.330520][T17720] syzkaller1: entered allmulticast mode
[  374.508239][T17725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3457'.
[  374.533057][T17725] 8021q: adding VLAN 0 to HW filter on device bond14
[  374.872727][T17743] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3464'.
[  374.877538][T17744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3464'.
[  374.887325][T17744] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3464'.
[  374.996249][   T24] lo speed is unknown, defaulting to 1000
[  374.998174][   T24] syz1: Port: 1 Link DOWN
[  375.010447][T17757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3468'.
[  375.124392][T17764] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  375.435929][T17774] lo speed is unknown, defaulting to 1000
[  376.282338][T17782] lo speed is unknown, defaulting to 1000
[  376.566630][T17789] lo speed is unknown, defaulting to 1000
[  376.657181][T17801] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3480'.
[  376.762334][T17810] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3484'.
[  376.820631][T17814] validate_nla: 4 callbacks suppressed
[  376.820883][T17814] netlink: 'syz.1.3481': attribute type 1 has an invalid length.
[  376.866877][T17814] bond15: (slave vxcan7): The slave device specified does not support setting the MAC address
[  376.873210][T17814] bond15: (slave vxcan7): Error -95 calling set_mac_address
[  376.890180][T17823] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  376.906575][T17820] netlink: 'syz.0.3486': attribute type 1 has an invalid length.
[  377.199034][T17845] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3493'.
[  377.340348][T17845] lo speed is unknown, defaulting to 1000
[  377.459176][T17853] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  378.088956][T17869] 8021q: adding VLAN 0 to HW filter on device bond27
[  378.331825][T17883] lo speed is unknown, defaulting to 1000
[  379.273147][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x6
[  380.103728][T17964] __nla_validate_parse: 4 callbacks suppressed
[  380.103739][T17964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3526'.
[  380.388422][T17978] netlink: 'syz.2.3531': attribute type 6 has an invalid length.
[  380.491540][T17982] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3533'.
[  380.564478][T17992] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3535'.
[  380.569809][T17989] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3535'.
[  380.779245][T17989] lo speed is unknown, defaulting to 1000
[  380.881521][T18002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3539'.
[  380.895134][T18002] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3539'.
[  380.899615][T18002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3539'.
[  380.904551][T18002] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3539'.
[  381.020937][T18005] netlink: 'syz.0.3540': attribute type 1 has an invalid length.
[  381.024936][T18005] netlink: 'syz.0.3540': attribute type 3 has an invalid length.
[  381.028192][T18005] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3540'.
[  381.697995][T18011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3542'.
[  381.701984][T18011] netlink: 'syz.1.3542': attribute type 1 has an invalid length.
[  381.717983][T18011] bond16: entered promiscuous mode
[  381.719892][T18011] 8021q: adding VLAN 0 to HW filter on device bond16
[  382.094867][T18022] lo speed is unknown, defaulting to 1000
[  382.106528][T18036] netlink: 'syz.0.3549': attribute type 1 has an invalid length.
[  382.135222][T18036] 8021q: adding VLAN 0 to HW filter on device bond28
[  382.369758][T18047] IPVS: Scheduler module ip_vs_sip not found
[  382.427122][T18051] x_tables: duplicate underflow at hook 2
[  382.500579][T18059] SET target dimension over the limit!
[  382.869394][T18065] lo speed is unknown, defaulting to 1000
[  382.989494][T18074] xt_HMARK: spi-set and port-set can't be combined
[  382.992096][T18073] xt_HMARK: spi-set and port-set can't be combined
[  383.364038][T18105] netlink: 'syz.1.3568': attribute type 21 has an invalid length.
[  383.369307][T18105] netlink: 'syz.1.3568': attribute type 22 has an invalid length.
[  383.372320][T18105] netlink: 'syz.1.3568': attribute type 23 has an invalid length.
[  383.375476][T18105] netlink: 'syz.1.3568': attribute type 25 has an invalid length.
[  383.378464][T18105] netlink: 'syz.1.3568': attribute type 26 has an invalid length.
[  383.427268][T18107] netlink: 'syz.1.3569': attribute type 1 has an invalid length.
[  383.440058][T18107] bond17: entered promiscuous mode
[  383.441824][T18107] 8021q: adding VLAN 0 to HW filter on device bond17
[  383.558831][T18114] syzkaller1: entered promiscuous mode
[  383.560542][T18114] syzkaller1: entered allmulticast mode
[  383.565756][T18114] batman_adv: batadv0: Removing interface: dummy0
[  383.568164][T18114] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  383.577743][T18114] netlink: 'syz.1.3571': attribute type 10 has an invalid length.
[  383.641024][T18116] vxcan1 speed is unknown, defaulting to 1000
[  383.645457][T18116] vxcan1 speed is unknown, defaulting to 1000
[  383.648398][T18116] vxcan1 speed is unknown, defaulting to 1000
[  383.787765][T18116] infiniband syz2: set down
[  383.790351][ T5843] vxcan1 speed is unknown, defaulting to 1000
[  383.792247][T18116] infiniband syz2: added vxcan1
[  383.802639][T18116] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  383.807039][T18116] infiniband syz2: Couldn't open port 1
[  383.832589][T18116] RDS/IB: syz2: added
[  383.833929][T18116] smc: adding ib device syz2 with port count 1
[  383.837785][T18116] smc:    ib device syz2 port 1 has no pnetid
[  383.840839][ T5843] vxcan1 speed is unknown, defaulting to 1000
[  383.843462][T18116] vxcan1 speed is unknown, defaulting to 1000
[  383.959449][T18116] vxcan1 speed is unknown, defaulting to 1000
[  384.105926][T18116] vxcan1 speed is unknown, defaulting to 1000
[  384.214871][T18116] vxcan1 speed is unknown, defaulting to 1000
[  384.340515][T18140] gre0: MTU too low for tipc bearer
[  384.342365][T18140] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[  384.497114][T18151] netlink: 'syz.1.3580': attribute type 1 has an invalid length.
[  384.974306][T18161] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  385.466273][T18169] lo speed is unknown, defaulting to 1000
[  385.469559][T18169] vxcan1 speed is unknown, defaulting to 1000
[  386.029044][T18183] __nla_validate_parse: 10 callbacks suppressed
[  386.029061][T18183] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3589'.
[  386.036242][T18182] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3589'.
[  386.173045][T18182] lo speed is unknown, defaulting to 1000
[  386.176713][T18182] vxcan1 speed is unknown, defaulting to 1000
[  386.258823][T18187] bond16: left promiscuous mode
[  386.267839][T18187] bond17: left promiscuous mode
[  386.886680][T18207] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[  387.375988][T18237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3605'.
[  387.379967][T18237] netlink: 'syz.1.3605': attribute type 7 has an invalid length.
[  387.382299][T18237] netlink: 'syz.1.3605': attribute type 8 has an invalid length.
[  387.751403][T18247] netlink: 'syz.2.3607': attribute type 1 has an invalid length.
[  387.765361][T18247] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  388.200325][T18278] netlink: 'syz.1.3615': attribute type 1 has an invalid length.
[  388.514558][T18297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3619'.
[  389.051276][T18302] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  389.057578][T18302] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  389.423804][T18317] netlink: 'syz.2.3627': attribute type 1 has an invalid length.
[  389.519045][T18322] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3628'.
[  389.522018][T18322] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3628'.
[  389.526732][T18322] netlink: 'syz.1.3628': attribute type 6 has an invalid length.
[  389.529333][T18322] netlink: 'syz.1.3628': attribute type 5 has an invalid length.
[  389.531718][T18322] netlink: 35 bytes leftover after parsing attributes in process `syz.1.3628'.
[  389.538719][T18322] netlink: 'syz.1.3628': attribute type 4 has an invalid length.
[  389.542713][T18322] netlink: 'syz.1.3628': attribute type 4 has an invalid length.
[  389.547107][  T974] lo speed is unknown, defaulting to 1000
[  389.549887][  T974] syz1: Port: 1 Link ACTIVE
[  389.643574][ T5640] nci: nci_rsp_packet: unsupported rsp opcode 0xf25
[  390.203832][T18336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3631'.
[  390.572763][T18348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3635'.
[  390.895788][T18368] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3640'.
[  390.980620][T18375] x_tables: duplicate underflow at hook 1
[  391.060625][T18384] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  391.065459][T18384] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  391.073941][T18384] netlink: 'syz.2.3644': attribute type 10 has an invalid length.
[  391.077003][T18384] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[  391.081132][T18384] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  391.084084][T18384] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  391.659941][T18388] lo speed is unknown, defaulting to 1000
[  391.663433][T18388] vxcan1 speed is unknown, defaulting to 1000
[  391.828043][T18401] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3650'.
[  391.833567][T18401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3650'.
[  391.847270][T18401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3650'.
[  392.236430][T18429] lo speed is unknown, defaulting to 1000
[  392.240215][T18429] vxcan1 speed is unknown, defaulting to 1000
[  392.921952][T18449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3664'.
[  392.930982][T18449] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3664'.
[  392.943727][T18449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3664'.
[  392.947862][T18449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3664'.
[  393.027301][T18447] lo speed is unknown, defaulting to 1000
[  393.030742][T18447] vxcan1 speed is unknown, defaulting to 1000
[  393.563652][T18486] netlink: 'syz.1.3675': attribute type 1 has an invalid length.
[  393.594320][T18486] syzkaller1: entered promiscuous mode
[  393.596406][T18486] syzkaller1: entered allmulticast mode
[  393.701956][T18489] lo speed is unknown, defaulting to 1000
[  393.705383][T18489] vxcan1 speed is unknown, defaulting to 1000
[  393.868322][T18494] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  394.280725][T18505] netlink: 'syz.2.3680': attribute type 10 has an invalid length.
[  394.283665][T18505] openvswitch: netlink: Flow key attr not present in new flow.
[  394.533408][T18522] xt_bpf: check failed: parse error
[  394.635469][T18531] netlink: 'syz.1.3688': attribute type 1 has an invalid length.
[  394.639574][T18531] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3688'.
[  394.700840][T18535] xt_hashlimit: max too large, truncated to 1048576
[  394.703980][T18535] xt_bpf: check failed: parse error
[  394.801484][T18540] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3690'.
[  394.913641][T18551] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3693'.
[  395.019955][T18539] lo speed is unknown, defaulting to 1000
[  395.023489][T18539] vxcan1 speed is unknown, defaulting to 1000
[  395.062616][T18565] netlink: 'syz.2.3695': attribute type 1 has an invalid length.
[  395.371202][T18575] netlink: 'syz.0.3700': attribute type 4 has an invalid length.
[  395.955823][T18589] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  396.232177][  T974] lo speed is unknown, defaulting to 1000
[  396.234077][  T974] syz1: Port: 1 Link DOWN
[  396.484277][T18625] netlink: 'syz.0.3715': attribute type 1 has an invalid length.
[  396.508616][T18625] bond29: (slave vxcan11): The slave device specified does not support setting the MAC address
[  396.512262][T18625] bond29: (slave vxcan11): Error -95 calling set_mac_address
[  396.959553][T18639] __nla_validate_parse: 33 callbacks suppressed
[  396.959569][T18639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3719'.
[  397.188121][T18643] lo speed is unknown, defaulting to 1000
[  397.191294][T18643] vxcan1 speed is unknown, defaulting to 1000
[  397.361379][T18647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3721'.
[  397.421078][T18654] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3723'.
[  397.554003][T18665] syz_tun: entered allmulticast mode
[  397.565321][T18664] syz_tun: left allmulticast mode
[  397.570499][T18666] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  397.672514][T18669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3727'.
[  398.037476][T18675] lo speed is unknown, defaulting to 1000
[  398.042467][T18675] vxcan1 speed is unknown, defaulting to 1000
[  398.333285][T18687] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3732'.
[  398.338637][T18684] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3732'.
[  398.629635][T18684] lo speed is unknown, defaulting to 1000
[  398.647405][T18684] vxcan1 speed is unknown, defaulting to 1000
[  398.947812][T18721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3744'.
[  399.373015][T18750] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  399.512875][T18758] syzkaller1: tun_chr_ioctl cmd 1074025677
[  399.514952][T18758] syzkaller1: linktype set to 778
[  399.865238][T18763] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3756'.
[  400.135864][T18772] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20002
[  400.141985][T18772] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3758'.
[  400.145689][T18772] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3758'.
[  400.153184][T18772] veth1_to_bond: entered allmulticast mode
[  400.155810][T18772] veth1_to_bond: entered promiscuous mode
[  400.159270][T18772] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  400.210541][T18771] veth1_to_bond: left promiscuous mode
[  400.212623][T18771] veth1_to_bond: left allmulticast mode
[  400.619473][T18796] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  400.672239][T18796] netlink: 'syz.2.3765': attribute type 10 has an invalid length.
[  400.709742][T18788] lo speed is unknown, defaulting to 1000
[  400.713163][T18788] vxcan1 speed is unknown, defaulting to 1000
[  400.802477][T18802] netlink: 'syz.2.3767': attribute type 6 has an invalid length.
[  400.809335][T18802] netlink: 'syz.2.3767': attribute type 5 has an invalid length.
[  400.819853][T18802] netlink: 'syz.2.3767': attribute type 4 has an invalid length.
[  400.825551][T18804] No such timeout policy "syz1"
[  400.827389][T18802] netlink: 'syz.2.3767': attribute type 4 has an invalid length.
[  400.877080][T18806] nbd: must specify an index to disconnect
[  400.988055][ T5818] Bluetooth: hci2: link tx timeout
[  400.990235][ T5818] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  400.994805][ T5815] Bluetooth: hci2: link tx timeout
[  400.996747][ T5815] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  401.001481][ T5815] Bluetooth: hci2: link tx timeout
[  401.003322][ T5815] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  401.006120][ T5815] Bluetooth: hci2: link tx timeout
[  401.008416][ T5815] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  401.166129][T18829] bond6: (slave vlan2): Releasing active interface
[  401.533078][T18824] lo speed is unknown, defaulting to 1000
[  401.536722][T18824] vxcan1 speed is unknown, defaulting to 1000
[  401.703845][T18844] lo speed is unknown, defaulting to 1000
[  401.707461][T18844] vxcan1 speed is unknown, defaulting to 1000
[  402.016343][T18876] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20000
[  402.036207][T18876] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  402.049192][T18876] syzkaller0: entered promiscuous mode
[  402.051051][T18876] syzkaller0: entered allmulticast mode
[  402.069612][T18876] tipc: Resetting bearer <eth:syzkaller0>
[  402.075556][T18874] __nla_validate_parse: 6 callbacks suppressed
[  402.075592][T18874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3788'.
[  402.133488][T18879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3789'.
[  402.624929][T18913] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  402.706961][T18921] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3803'.
[  402.824274][T18875] tipc: Resetting bearer <eth:syzkaller0>
[  402.832837][T18875] tipc: Disabling bearer <eth:syzkaller0>
[  402.916805][T18933] sctp: [Deprecated]: syz.1.3807 (pid 18933) Use of int in max_burst socket option.
[  402.916805][T18933] Use struct sctp_assoc_value instead
[  403.014965][ T5815] Bluetooth: hci2: command 0x0405 tx timeout
[  403.870163][T18947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3811'.
[  404.031905][T18957] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3816'.
[  404.037767][T18957] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  404.044524][T18957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3816'.
[  404.119291][T18959] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3817'.
[  404.123976][T18960] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3817'.
[  404.133911][T18959] syzkaller1: entered promiscuous mode
[  404.136751][T18959] syzkaller1: entered allmulticast mode
[  404.546762][T18982] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3824'.
[  404.549625][T18982] netlink: 35 bytes leftover after parsing attributes in process `syz.2.3824'.
[  404.552514][T18982] netlink: 'syz.2.3824': attribute type 6 has an invalid length.
[  404.555924][T18982] netlink: 'syz.2.3824': attribute type 5 has an invalid length.
[  404.559280][T18983] netlink: 'syz.2.3824': attribute type 6 has an invalid length.
[  404.562128][T18983] netlink: 'syz.2.3824': attribute type 5 has an invalid length.
[  404.566514][T18982] netlink: 'syz.2.3824': attribute type 4 has an invalid length.
[  404.810397][T18985] lo speed is unknown, defaulting to 1000
[  404.814175][T18985] vxcan1 speed is unknown, defaulting to 1000
[  405.070463][T18992] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  405.135603][T18995] x_tables: duplicate underflow at hook 1
[  405.192222][T18996] xt_bpf: check failed: parse error
[  405.378308][T18994] lo speed is unknown, defaulting to 1000
[  405.383157][T18994] vxcan1 speed is unknown, defaulting to 1000
[  406.137593][T19025] validate_nla: 2 callbacks suppressed
[  406.137609][T19025] netlink: 'syz.0.3838': attribute type 6 has an invalid length.
[  406.173577][T19029] netlink: 'syz.1.3837': attribute type 1 has an invalid length.
[  406.914221][T19034] lo speed is unknown, defaulting to 1000
[  406.917885][T19034] vxcan1 speed is unknown, defaulting to 1000
[  406.994463][T19038] ip6gre4: entered promiscuous mode
[  406.996847][T19038] ip6gre4: entered allmulticast mode
[  407.161168][T19052] __nla_validate_parse: 8 callbacks suppressed
[  407.161187][T19052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3845'.
[  407.167742][T19052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3845'.
[  407.233960][T19056] ipvlan2: entered promiscuous mode
[  407.736039][ T5910] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  407.738864][ T5910] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  407.764865][T16960] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  408.077623][T19080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3853'.
[  408.105787][T19080] 8021q: adding VLAN 0 to HW filter on device bond21
[  408.141722][T19083] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3854'.
[  408.144823][T19083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3854'.
[  408.148499][T19084] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3854'.
[  408.680625][T19098] xt_bpf: check failed: parse error
[  408.694935][T16960] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  408.737810][T19097] lo speed is unknown, defaulting to 1000
[  408.741498][T19097] vxcan1 speed is unknown, defaulting to 1000
[  408.775010][T16960] ip6_tunnel: ip6gre4 xmit: Local address not yet configured!
[  409.106254][T19111] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  409.825278][T19130] x_tables: unsorted entry at hook 1
[  409.833333][T19130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3868'.
[  409.979514][T19138] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3871'.
[  409.983544][T19136] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3871'.
[  410.422246][T19161] netlink: 'syz.0.3878': attribute type 1 has an invalid length.
[  410.447112][T19161] bond30: (slave vxcan11): The slave device specified does not support setting the MAC address
[  410.450447][T19161] bond30: (slave vxcan11): Error -95 calling set_mac_address
[  410.459273][T19163] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  410.462401][T19163] ip6gre4: left promiscuous mode
[  410.463827][T19163] ip6gre4: left allmulticast mode
[  410.945188][T19168] tipc: Resetting bearer <eth:syzkaller0>
[  410.976048][T19170] atomic_op ffff8881710ad198 conn xmit_atomic 0000000000000000
[  411.068241][T19175] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  411.071867][T19175] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  411.077565][T19176] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  411.085827][T19175] netlink: 'syz.2.3884': attribute type 10 has an invalid length.
[  411.088295][T19175] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[  411.091612][T19175] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  411.094463][T19175] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  411.348394][T19193] netlink: 'syz.1.3890': attribute type 1 has an invalid length.
[  412.168669][T19214] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3897'.
[  412.411364][T19225] sctp: [Deprecated]: syz.1.3901 (pid 19225) Use of struct sctp_assoc_value in delayed_ack socket option.
[  412.411364][T19225] Use struct sctp_sack_info instead
[  412.687660][T19238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3906'.
[  412.693170][T19238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3906'.
[  412.696678][T19238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3906'.
[  413.053011][T19262] netlink: 'syz.2.3912': attribute type 4 has an invalid length.
[  413.063235][T19262] netlink: 'syz.2.3912': attribute type 4 has an invalid length.
[  413.355033][T19278] netlink: 'syz.1.3918': attribute type 4 has an invalid length.
[  413.357438][T19278] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3918'.
[  413.360847][T19278] wlan1: mtu less than device minimum
[  413.733770][T19291] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  413.748461][T19291] netlink: 'syz.0.3923': attribute type 10 has an invalid length.
[  413.764885][T19291] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  414.111226][T19304] 8021q: VLANs not supported on ip6_vti0
[  414.169825][T19307] tipc: Resetting bearer <eth:syzkaller0>
[  414.311036][T19320] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3931'.
[  414.316877][T19318] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3931'.
[  414.465615][T19320] lo speed is unknown, defaulting to 1000
[  414.469351][T19320] vxcan1 speed is unknown, defaulting to 1000
[  415.289828][T19360] lo speed is unknown, defaulting to 1000
[  415.293187][T19360] vxcan1 speed is unknown, defaulting to 1000
[  415.652210][T19376] bond23: option arp_validate: invalid value (18446744073709551614)
[  415.660516][T19376] bond23 (unregistering): Released all slaves
[  416.317542][T19391] lo speed is unknown, defaulting to 1000
[  416.326990][T19391] vxcan1 speed is unknown, defaulting to 1000
[  416.589481][T19403] netlink: 'syz.0.3957': attribute type 2 has an invalid length.
[  416.712191][T19409] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3958'.
[  416.948978][T19405] lo speed is unknown, defaulting to 1000
[  416.954258][T19405] vxcan1 speed is unknown, defaulting to 1000
[  417.066161][T19415] lo speed is unknown, defaulting to 1000
[  417.080899][T19415] vxcan1 speed is unknown, defaulting to 1000
[  417.147223][T19421] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20002
[  417.368207][T19423] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  417.506145][T19442] netlink: 'syz.1.3969': attribute type 1 has an invalid length.
[  417.540924][T19442] bond23: (slave vxcan9): The slave device specified does not support setting the MAC address
[  417.545020][T19442] bond23: (slave vxcan9): Error -95 calling set_mac_address
[  417.626949][T19449] netlink: 332 bytes leftover after parsing attributes in process `syz.0.3970'.
[  417.630241][T19449] netlink: 'syz.0.3970': attribute type 9 has an invalid length.
[  417.632892][T19449] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3970'.
[  417.635973][T19449] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3970'.
[  417.679868][T19454] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3971'.
[  417.732164][T19459] netlink: 'syz.0.3972': attribute type 6 has an invalid length.
[  417.770666][T19462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3973'.
[  417.990265][T19477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3977'.
[  418.120789][T19485] netlink: 'syz.0.3978': attribute type 6 has an invalid length.
[  418.187079][T19488] xfrm1: entered allmulticast mode
[  418.242466][T19490] ipvlan2: left promiscuous mode
[  418.249068][T19490] xfrm1: left allmulticast mode
[  418.481281][T19501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3984'.
[  418.496703][T19501] 8021q: adding VLAN 0 to HW filter on device bond8
[  419.582942][T19521] lo speed is unknown, defaulting to 1000
[  419.587842][T19521] vxcan1 speed is unknown, defaulting to 1000
[  419.738971][T19531] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3993'.
[  419.741938][T19531] 8021q: VLANs not supported on ipvlan1
[  419.750580][T19531] pim6reg1: entered promiscuous mode
[  419.752348][T19531] pim6reg1: entered allmulticast mode
[  420.251566][T19555] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4001'.
[  420.258836][T19552] lo speed is unknown, defaulting to 1000
[  420.263432][T19552] vxcan1 speed is unknown, defaulting to 1000
[  420.381374][T19569] netlink: 'syz.1.4004': attribute type 6 has an invalid length.
[  420.579086][T19579] netlink: 'syz.0.4008': attribute type 7 has an invalid length.
[  420.582695][T19579] netlink: 'syz.0.4008': attribute type 8 has an invalid length.
[  420.594789][T19579] netlink: 'syz.0.4008': attribute type 7 has an invalid length.
[  420.600719][T19579] netlink: 'syz.0.4008': attribute type 8 has an invalid length.
[  420.784292][T19592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4011'.
[  421.562975][T19601] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  421.589227][T19606] xt_TCPMSS: Only works on TCP SYN packets
[  421.599641][T19606] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode
[  421.602006][T19606] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode
[  421.614940][T19606] tipc: Resetting bearer <eth:syzkaller0>
[  421.621765][T19606] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  422.195862][T19635] validate_nla: 126 callbacks suppressed
[  422.195881][T19635] netlink: 'syz.2.4025': attribute type 1 has an invalid length.
[  422.637785][T19641] netlink: 'syz.1.4027': attribute type 8 has an invalid length.
[  422.752013][T19640] lo speed is unknown, defaulting to 1000
[  422.757421][T19640] vxcan1 speed is unknown, defaulting to 1000
[  422.959792][T19641] lo speed is unknown, defaulting to 1000
[  422.971138][T19641] vxcan1 speed is unknown, defaulting to 1000
[  424.168908][T19692] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  424.179130][T19692] netlink: 'syz.1.4042': attribute type 10 has an invalid length.
[  424.189135][T19692] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  424.193273][T19692] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  424.981560][T19704] tipc: Resetting bearer <eth:syzkaller0>
[  424.989328][T19704] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode
[  424.991848][T19704] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode
[  425.090051][T19715] __nla_validate_parse: 2 callbacks suppressed
[  425.090063][T19715] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4050'.
[  425.185503][T19726] netlink: 'syz.1.4053': attribute type 21 has an invalid length.
[  425.195542][T19726] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4053'.
[  425.197459][T19729] netlink: 'syz.0.4054': attribute type 2 has an invalid length.
[  425.202819][T19729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4054'.
[  425.275746][T19737] nbd: socks must be embedded in a SOCK_ITEM attr
[  425.304857][T19740] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4058'.
[  426.665000][T19788] --map-set only usable from mangle table
[  426.824141][T19796] x_tables: duplicate underflow at hook 2
[  427.011524][T19807] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4080'.
[  427.148739][T19811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4081'.
[  427.460835][T19832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4088'.
[  427.637469][T19838] netlink: 'syz.0.4089': attribute type 1 has an invalid length.
[  427.675042][T19838] bond31: (slave vxcan11): The slave device specified does not support setting the MAC address
[  427.678698][T19838] bond31: (slave vxcan11): Error -95 calling set_mac_address
[  429.288721][T19902] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4109'.
[  429.389827][T19907] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  429.713761][T19935] netlink: 'syz.1.4116': attribute type 4 has an invalid length.
[  429.726441][T19935] netlink: 'syz.1.4116': attribute type 4 has an invalid length.
[  429.731199][T16960] lo speed is unknown, defaulting to 1000
[  429.733415][T16960] syz1: Port: 1 Link ACTIVE
[  429.926964][T19938] bond0: entered allmulticast mode
[  429.928900][T19938] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  429.932692][T19938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4119'.
[  429.940436][T19938] netlink: 'syz.0.4119': attribute type 10 has an invalid length.
[  430.151838][T19949] lo speed is unknown, defaulting to 1000
[  430.156979][T19949] vxcan1 speed is unknown, defaulting to 1000
[  430.289768][T19967] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4128'.
[  430.488678][T19984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4133'.
[  430.491552][T19984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4133'.
[  430.494869][T19976] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4129'.
[  430.796162][T19996] lo speed is unknown, defaulting to 1000
[  430.799619][T19996] vxcan1 speed is unknown, defaulting to 1000
[  431.474703][T20017] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  431.483197][T20017] netlink: 'syz.0.4143': attribute type 10 has an invalid length.
[  431.487713][T20017] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  431.490588][T20017] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  432.351196][T20033] lo speed is unknown, defaulting to 1000
[  432.356877][T20033] vxcan1 speed is unknown, defaulting to 1000
[  432.466505][T20047] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  432.475026][T20047] syzkaller0: entered promiscuous mode
[  432.477076][T20047] syzkaller0: entered allmulticast mode
[  432.503072][T20047] tipc: Resetting bearer <eth:syzkaller0>
[  432.525817][T20046] tipc: Resetting bearer <eth:syzkaller0>
[  432.534249][T20046] tipc: Disabling bearer <eth:syzkaller0>
[  432.728393][T20056] netlink: 'syz.0.4154': attribute type 6 has an invalid length.
[  432.848031][T20061] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4156'.
[  433.368447][T20072] lo speed is unknown, defaulting to 1000
[  433.372089][T20072] vxcan1 speed is unknown, defaulting to 1000
[  433.757120][T20084] netlink: 320 bytes leftover after parsing attributes in process `syz.0.4164'.
[  433.813977][T20088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4165'.
[  434.002386][T20093] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4166'.
[  434.573953][T20114] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4173'.
[  434.680084][T20111] lo speed is unknown, defaulting to 1000
[  434.683497][T20111] vxcan1 speed is unknown, defaulting to 1000
[  434.791002][T20133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4178'.
[  435.281427][T20138] lo speed is unknown, defaulting to 1000
[  435.285006][T20138] vxcan1 speed is unknown, defaulting to 1000
[  435.542013][T20153] __nla_validate_parse: 3 callbacks suppressed
[  435.542027][T20153] netlink: 4456 bytes leftover after parsing attributes in process `syz.1.4184'.
[  436.047633][T20177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4190'.
[  436.060581][T20161] lo speed is unknown, defaulting to 1000
[  436.067060][T20161] vxcan1 speed is unknown, defaulting to 1000
[  436.482097][T20192] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4196'.
[  436.919359][T20200] IPVS: set_ctl: invalid protocol: 8 100.1.1.1:20004
[  436.922896][T20200] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  436.930649][T20200] netlink: 'syz.0.4199': attribute type 10 has an invalid length.
[  436.934143][T20200] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4199'.
[  436.938829][T20200] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  436.942419][T20200] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  437.457716][T20214] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4203'.
[  437.501157][T20217] netlink: 'syz.2.4204': attribute type 6 has an invalid length.
[  437.501157][T20216] netlink: 'syz.2.4204': attribute type 6 has an invalid length.
[  437.936385][T20244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4211'.
[  438.031363][T20245] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4211'.
[  438.139511][T20248] syzkaller1: entered promiscuous mode
[  438.141483][T20248] syzkaller1: entered allmulticast mode
[  438.483104][T20257] lo speed is unknown, defaulting to 1000
[  438.486986][T20257] vxcan1 speed is unknown, defaulting to 1000
[  438.746027][T20269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4219'.
[  438.749631][T20269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4219'.
[  438.753442][T20269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4219'.
[  438.800673][T20267] netlink: 'syz.0.4219': attribute type 1 has an invalid length.
[  438.896083][T20267] bond32: entered promiscuous mode
[  438.904064][T20267] 8021q: adding VLAN 0 to HW filter on device bond32
[  439.549365][T20324] tap0: tun_chr_ioctl cmd 1074025681
[  440.307416][T20342] netlink: 'syz.0.4241': attribute type 1 has an invalid length.
[  440.945095][T20346] __nla_validate_parse: 15 callbacks suppressed
[  440.945114][T20346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4242'.
[  442.649250][T20439] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  442.654167][T20439] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  442.670312][T20439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4266'.
[  442.688874][   T27] smc: removing ib device syz2
[  442.722630][T20442] netlink: 'syz.1.4266': attribute type 10 has an invalid length.
[  442.726063][T20442] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  443.303006][T20447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4268'.
[  443.306296][T20447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4268'.
[  443.341569][T20455] netlink: 'syz.1.4271': attribute type 6 has an invalid length.
[  443.416858][T20457] bond24 (unregistering): Released all slaves
[  443.463718][T20458] sctp: [Deprecated]: syz.1.4272 (pid 20458) Use of struct sctp_assoc_value in delayed_ack socket option.
[  443.463718][T20458] Use struct sctp_sack_info instead
[  443.548421][T20474] bond0: left allmulticast mode
[  443.549888][T20474] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  443.556690][T20474] bond32: left promiscuous mode
[  443.658372][T20480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4277'.
[  443.697049][T20482] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4278'.
[  443.715598][T20482] IPVS: Scheduler module ip_vs_ not found
[  443.717791][T20482] IPVS: length: 24 != 239579050488
[  443.943121][T20493] netlink: 'syz.2.4281': attribute type 1 has an invalid length.
[  443.971115][T20493] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address
[  443.974474][T20493] bond9: (slave vxcan3): Error -95 calling set_mac_address
[  443.992547][T20498] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4283'.
[  444.520379][T20526] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4291'.
[  444.525092][T20523] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4291'.
[  444.676224][T20523] lo speed is unknown, defaulting to 1000
[  444.764296][T20531] ipvlan2: entered allmulticast mode
[  444.768277][T20531] veth0_vlan: entered allmulticast mode
[  444.930870][T20537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4294'.
[  444.987421][T20539] af_packet: tpacket_rcv: packet too big, clamped from 65624 to 3952. macoff=96
[  445.370235][T20544] netlink: 'syz.0.4297': attribute type 9 has an invalid length.
[  445.774397][   T24] lo speed is unknown, defaulting to 1000
[  445.776871][   T24] syz1: Port: 1 Link DOWN
[  445.950879][T20569] netlink: 'syz.2.4304': attribute type 6 has an invalid length.
[  445.953715][T20569] netlink: 'syz.2.4304': attribute type 5 has an invalid length.
[  445.956787][T20569] __nla_validate_parse: 4 callbacks suppressed
[  445.956796][T20569] netlink: 35 bytes leftover after parsing attributes in process `syz.2.4304'.
[  445.963921][T20569] netlink: 'syz.2.4304': attribute type 4 has an invalid length.
[  445.968793][T20570] netlink: 'syz.2.4304': attribute type 4 has an invalid length.
[  445.970382][T20569] netlink: 'syz.2.4304': attribute type 4 has an invalid length.
[  446.181369][T20588] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  447.064521][T20598] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4312'.
[  447.068129][T20598] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4312'.
[  447.071465][T20598] netlink: 'syz.2.4312': attribute type 6 has an invalid length.
[  447.074548][T20598] netlink: 'syz.2.4312': attribute type 5 has an invalid length.
[  447.081131][T20598] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4312'.
[  447.088950][T20598] netlink: 'syz.2.4312': attribute type 4 has an invalid length.
[  447.194156][T20601] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4313'.
[  447.197755][T20601] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4313'.
[  447.475046][T20611] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4316'.
[  448.199837][T20624] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003
[  448.202715][T20624] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003
[  448.205526][T20624] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003
[  448.208183][T20624] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003
[  448.210840][T20624] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003
[  448.213514][T20624] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003
[  448.216539][T20624] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003
[  448.219258][T20624] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003
[  448.221931][T20624] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003
[  448.224594][T20624] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003
[  448.231027][T20624] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003
[  448.237461][T20624] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003
[  448.242400][T20624] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003
[  448.246713][T20624] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003
[  448.251664][T20624] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003
[  448.256276][T20624] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003
[  448.259026][T20624] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003
[  448.261445][T20626] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address
[  448.261713][T20624] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003
[  448.266918][T20626] bond10: (slave vxcan3): Error -95 calling set_mac_address
[  448.267530][T20624] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003
[  448.272974][T20624] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003
[  448.282449][T20624] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003
[  448.285356][T20624] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003
[  448.287995][T20624] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003
[  448.290492][T20624] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003
[  448.292967][T20624] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003
[  448.295253][T20624] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003
[  448.297964][T20624] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003
[  448.300268][T20624] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003
[  448.457633][T20633] lo speed is unknown, defaulting to 1000
[  448.711003][T20663] 8021q: adding VLAN 0 to HW filter on device bond34
[  448.721848][T20663] 8021q: adding VLAN 0 to HW filter on device batadv1
[  448.725263][T20663] bond34: (slave batadv1): making interface the new active one
[  448.728245][T20663] bond34: (slave batadv1): Enslaving as an active interface with an up link
[  448.731863][T20663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4329'.
[  448.819228][T20663] bond34 (unregistering): (slave batadv1): Releasing active interface
[  448.824083][T20663] bond34 (unregistering): Released all slaves
[  449.017307][T20679] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  449.250527][T20691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4336'.
[  449.479594][T20699] lo speed is unknown, defaulting to 1000
[  449.592510][T20706] validate_nla: 8 callbacks suppressed
[  449.592521][T20706] netlink: 'syz.1.4341': attribute type 5 has an invalid length.
[  449.655068][T20696] lo speed is unknown, defaulting to 1000
[  449.730392][T20712] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  449.733766][T20712] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode
[  449.736816][T20712] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode
[  449.739874][T20712] tipc: Resetting bearer <eth:syzkaller0>
[  449.960494][T20725] xt_CT: You must specify a L4 protocol and not use inversions on it
[  450.066958][T20732] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4351'.
[  451.230938][T20788] lo speed is unknown, defaulting to 1000
[  451.338429][T20789] lo speed is unknown, defaulting to 1000
[  451.719000][T20798] lo speed is unknown, defaulting to 1000
[  452.132571][T20820] __nla_validate_parse: 1 callbacks suppressed
[  452.132583][T20820] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4373'.
[  452.381583][T20822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4374'.
[  453.141320][T20845] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4380'.
[  453.435099][T20865] netlink: 'syz.1.4384': attribute type 6 has an invalid length.
[  453.461637][T20859] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  453.652810][T20880] lo speed is unknown, defaulting to 1000
[  453.751626][T20886] batadv_slave_1: entered allmulticast mode
[  454.005962][T20892] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  454.134118][T20914] xt_limit: Overflow, try lower: 271964/0
[  454.138567][T20914] netlink: 25 bytes leftover after parsing attributes in process `syz.2.4396'.
[  454.147382][T20914] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4396'.
[  454.236602][T20919] tipc: Resetting bearer <eth:syzkaller0>
[  454.248950][T20919] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode
[  454.251943][T20919] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode
[  454.800958][T20967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4412'.
[  454.901812][T20976] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4416'.
[  454.940896][T20977] netlink: 1272 bytes leftover after parsing attributes in process `syz.1.4415'.
[  455.212381][T20992] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4418'.
[  456.019902][T21004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4425'.
[  456.024066][T21004] netlink: 'syz.0.4425': attribute type 1 has an invalid length.
[  456.038334][T21004] bond34: entered promiscuous mode
[  456.040071][T21004] 8021q: adding VLAN 0 to HW filter on device bond34
[  456.055068][T21004] 8021q: adding VLAN 0 to HW filter on device bond34
[  456.057183][T21004] bond34: (slave gre2): The slave device specified does not support setting the MAC address
[  456.060256][T21004] bond34: (slave gre2): Setting fail_over_mac to active for active-backup mode
[  456.063863][T21004] bond34: (slave gre2): Opening slave failed
[  456.170615][T21017] netlink: 'syz.2.4427': attribute type 1 has an invalid length.
[  456.187563][T21017] 8021q: adding VLAN 0 to HW filter on device bond11
[  456.196791][T21017] ipvlan2: entered allmulticast mode
[  456.198475][T21017] bond11: entered allmulticast mode
[  456.209838][T21017] bond11: (slave gretap2): making interface the new active one
[  456.212207][T21017] gretap2: entered allmulticast mode
[  456.214575][T21017] bond11: (slave gretap2): Enslaving as an active interface with an up link
[  457.048183][T21053] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  457.168225][T21064] __nla_validate_parse: 5 callbacks suppressed
[  457.168238][T21064] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4441'.
[  457.372072][T21078] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4446'.
[  457.375798][T21078] nbd: illegal input index 65508
[  457.379692][T21080] 8021q: VLANs not supported on bond0
[  457.497048][T21086] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4450'.
[  458.231223][T21098] syzkaller0: entered promiscuous mode
[  458.232994][T21098] syzkaller0: entered allmulticast mode
[  458.434434][T21108] netlink: 27 bytes leftover after parsing attributes in process `syz.2.4458'.
[  458.489737][T21102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4456'.
[  458.537676][T21102] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  458.544071][T21115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4460'.
[  458.793216][T21135] netlink: 'syz.2.4465': attribute type 1 has an invalid length.
[  458.879794][T21125] lo speed is unknown, defaulting to 1000
[  459.048109][T21134] lo speed is unknown, defaulting to 1000
[  459.819457][T21153] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  459.835575][T21153] tipc: Resetting bearer <eth:syzkaller0>
[  460.789177][T21171] lo speed is unknown, defaulting to 1000
[  460.869684][T21177] netlink: 'syz.0.4478': attribute type 4 has an invalid length.
[  461.047506][T21192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4483'.
[  461.057370][T21193] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4482'.
[  461.064793][T21190] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4482'.
[  461.223482][T21202] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  461.226106][T21202] syzkaller0: entered promiscuous mode
[  461.227812][T21202] syzkaller0: entered allmulticast mode
[  461.242086][T21202] tipc: Resetting bearer <eth:syzkaller0>
[  461.245269][T21202] netlink: 'syz.1.4485': attribute type 1 has an invalid length.
[  461.269287][T21190] lo speed is unknown, defaulting to 1000
[  461.450574][T21208] netlink: 'syz.0.4487': attribute type 1 has an invalid length.
[  461.524192][T21211] bond35: (slave vxcan11): The slave device specified does not support setting the MAC address
[  461.529642][T21211] bond35: (slave vxcan11): Error -95 calling set_mac_address
[  461.571931][T21208] vlan4: entered allmulticast mode
[  461.573542][T21208] bridge0: entered allmulticast mode
[  461.575992][T21208] bridge0: entered promiscuous mode
[  461.577901][T21208] bridge0: left promiscuous mode
[  461.581871][T21208] bond35: (slave vlan4): making interface the new active one
[  461.584158][T21208] bridge0: entered promiscuous mode
[  461.586207][T21208] bond35: (slave vlan4): Enslaving as an active interface with an up link
[  461.997057][T21200] tipc: Resetting bearer <eth:syzkaller0>
[  462.008870][T21200] tipc: Disabling bearer <eth:syzkaller0>
[  462.116948][T21218] IPVS: stopping backup sync thread 8916 ...
[  462.211648][T21222] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  462.524537][T21253] batadv_slave_1: left allmulticast mode
[  462.542162][T21253] vlan4: left allmulticast mode
[  462.544874][T21253] bridge0: left allmulticast mode
[  462.798090][T21257] lo speed is unknown, defaulting to 1000
[  463.137477][T21269] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4503'.
[  463.156069][T21269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4503'.
[  463.193121][T21266] lo speed is unknown, defaulting to 1000
[  463.286529][T21274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4505'.
[  463.500878][T21292] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4511'.
[  463.558624][T21294] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4512'.
[  463.677741][T21302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4516'.
[  463.730593][T21304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4517'.
[  463.803454][T21316] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4519'.
[  463.807801][T21309] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4519'.
[  463.830032][T21319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4521'.
[  463.961597][T21309] lo speed is unknown, defaulting to 1000
[  464.585545][T21330] cgroup: fork rejected by pids controller in /syz0
[  464.689487][ T5810] syz_tun (unregistering): left allmulticast mode
[  465.028516][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  465.033248][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  465.037011][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  465.039707][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  465.042304][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  465.097887][T21454] debugfs: 'netdev:nicvf0' already exists in 'phy11'
[  465.233940][T21447] lo speed is unknown, defaulting to 1000
[  465.336594][T21447] chnl_net:caif_netlink_parms(): no params data found
[  465.411265][T21472] tipc: Resetting bearer <eth:syzkaller0>
[  465.433448][T21472] ipvlan2: left allmulticast mode
[  465.438579][T21472] bond11: left allmulticast mode
[  465.440420][T21472] gretap2: left allmulticast mode
[  465.462769][T21447] bridge0: port 1(bridge_slave_0) entered blocking state
[  465.466186][T21447] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.468890][T21447] bridge_slave_0: entered allmulticast mode
[  465.472542][T21447] bridge_slave_0: entered promiscuous mode
[  465.479337][T21447] bridge0: port 2(bridge_slave_1) entered blocking state
[  465.484128][T21447] bridge0: port 2(bridge_slave_1) entered disabled state
[  465.486427][T21447] bridge_slave_1: entered allmulticast mode
[  465.489734][T21447] bridge_slave_1: entered promiscuous mode
[  465.528292][T21447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  465.533898][T21447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  465.565778][T21447] team0: Port device team_slave_0 added
[  465.569941][T21447] team0: Port device team_slave_1 added
[  465.597544][T21447] batman_adv: batadv0: Adding interface: batadv_slave_0
[  465.600174][T21447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  465.609404][T21447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  465.617009][T21447] batman_adv: batadv0: Adding interface: batadv_slave_1
[  465.619014][T21447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  465.627997][T21447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  465.664274][T21447] hsr_slave_0: entered promiscuous mode
[  465.666926][T21447] hsr_slave_1: entered promiscuous mode
[  465.669236][T21447] debugfs: 'hsr0' already exists in 'hsr'
[  465.670857][T21447] Cannot create hsr debugfs directory
[  466.004079][T21447] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  466.008520][T21447] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  466.012580][T21447] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  466.017646][T21447] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  466.039706][T21447] bridge0: port 2(bridge_slave_1) entered blocking state
[  466.042099][T21447] bridge0: port 2(bridge_slave_1) entered forwarding state
[  466.045996][T21447] bridge0: port 1(bridge_slave_0) entered blocking state
[  466.048690][T21447] bridge0: port 1(bridge_slave_0) entered forwarding state
[  466.106146][T21447] 8021q: adding VLAN 0 to HW filter on device bond0
[  466.118834][ T7585] bridge0: port 1(bridge_slave_0) entered disabled state
[  466.124565][ T7585] bridge0: port 2(bridge_slave_1) entered disabled state
[  466.147241][T21447] 8021q: adding VLAN 0 to HW filter on device team0
[  466.157435][ T7585] bridge0: port 1(bridge_slave_0) entered blocking state
[  466.159593][ T7585] bridge0: port 1(bridge_slave_0) entered forwarding state
[  466.171594][ T7585] bridge0: port 2(bridge_slave_1) entered blocking state
[  466.174192][ T7585] bridge0: port 2(bridge_slave_1) entered forwarding state
[  466.349665][T21447] 8021q: adding VLAN 0 to HW filter on device batadv0
[  466.397777][T21447] veth0_vlan: entered promiscuous mode
[  466.413738][T21447] veth1_vlan: entered promiscuous mode
[  466.431497][T21447] veth0_macvtap: entered promiscuous mode
[  466.436008][T21447] veth1_macvtap: entered promiscuous mode
[  466.448452][T21447] batman_adv: batadv0: Interface activated: batadv_slave_0
[  466.455225][T21447] batman_adv: batadv0: Interface activated: batadv_slave_1
[  466.461748][ T5640] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  466.465525][ T5640] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  466.468844][ T5640] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  466.473106][ T5640] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  466.541501][ T7585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  466.543927][ T7585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  466.567432][ T7581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  466.569762][ T7581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  466.571845][T21520] lo speed is unknown, defaulting to 1000
[  466.770602][T21542] syz.0.4552 (21542) used greatest stack depth: 17752 bytes left
[  467.044274][T21558] lo speed is unknown, defaulting to 1000
[  467.105149][ T5818] Bluetooth: hci0: command tx timeout
[  467.370550][T21586] netlink: 'syz.0.4563': attribute type 6 has an invalid length.
[  467.418823][T21591] netlink: 'syz.1.4561': attribute type 4 has an invalid length.
[  467.423442][T21591] netlink: 'syz.1.4561': attribute type 4 has an invalid length.
[  467.442906][  T974] lo speed is unknown, defaulting to 1000
[  467.446037][  T974] syz1: Port: 1 Link ACTIVE
[  467.489974][T21595] netlink: 'syz.0.4567': attribute type 9 has an invalid length.
[  468.343094][T21606] __nla_validate_parse: 24 callbacks suppressed
[  468.343110][T21606] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4570'.
[  468.349386][T21607] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4570'.
[  468.353359][T21607] netlink: 'syz.2.4570': attribute type 29 has an invalid length.
[  468.481668][T21613] tc_dump_action: action bad kind
[  468.532601][T21615] netlink: 'syz.2.4573': attribute type 5 has an invalid length.
[  468.739402][T21618] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4574'.
[  468.744226][T21617] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4574'.
[  468.789253][T21621] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4575'.
[  468.881914][T21617] lo speed is unknown, defaulting to 1000
[  468.946345][T21626] bridge0: port 2(bridge_slave_1) entered disabled state
[  468.949029][T21626] bridge0: port 1(bridge_slave_0) entered disabled state
[  469.011577][T21626] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  469.019317][T21626] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  469.109344][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  469.112009][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  469.114491][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  469.120292][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  469.155679][T21633] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4579'.
[  469.180675][ T5818] Bluetooth: hci0: command tx timeout
[  469.276226][T21645] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  469.422512][T21648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4584'.
[  469.452356][T21654] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4586'.
[  469.456555][T21654] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4586'.
[  469.459181][T21654] netlink: 'syz.2.4586': attribute type 6 has an invalid length.
[  469.461382][T21654] netlink: 'syz.2.4586': attribute type 5 has an invalid length.
[  469.463730][T21654] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4586'.
[  469.468479][T21654] netlink: 'syz.2.4586': attribute type 4 has an invalid length.
[  470.579155][T21686] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  470.588929][T21686] netlink: 'syz.1.4597': attribute type 10 has an invalid length.
[  470.591278][T21686] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  470.595376][T21686] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  470.598171][T21686] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  471.254986][ T5818] Bluetooth: hci0: command tx timeout
[  472.398585][T21728] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  472.470718][T21734] xt_socket: unknown flags 0x50
[  472.474248][T21734] validate_nla: 2 callbacks suppressed
[  472.474265][T21734] netlink: 'syz.2.4611': attribute type 4 has an invalid length.
[  472.479936][T21730] netlink: 'syz.2.4611': attribute type 4 has an invalid length.
[  473.184210][T21747] sctp: [Deprecated]: syz.0.4616 (pid 21747) Use of int in max_burst socket option.
[  473.184210][T21747] Use struct sctp_assoc_value instead
[  473.199125][T21747] sctp: [Deprecated]: syz.0.4616 (pid 21747) Use of struct sctp_assoc_value in delayed_ack socket option.
[  473.199125][T21747] Use struct sctp_sack_info instead
[  473.286820][T21751] nbd: illegal input index -1
[  473.336617][ T5818] Bluetooth: hci0: command tx timeout
[  473.442330][T21768] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  473.464447][T21771] __nla_validate_parse: 1 callbacks suppressed
[  473.464463][T21771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4621'.
[  473.692096][T21804] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4629'.
[  473.696968][T21796] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4629'.
[  473.709105][T21807] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4632'.
[  473.712344][T21807] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4632'.
[  473.780942][T21811] netlink: 'syz.0.4633': attribute type 1 has an invalid length.
[  473.815115][T21811] bond1: entered promiscuous mode
[  473.817302][T21811] 8021q: adding VLAN 0 to HW filter on device bond1
[  473.832266][T21811] 8021q: adding VLAN 0 to HW filter on device bond1
[  473.835313][T21811] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[  473.838691][T21811] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  473.846849][T21811] bond1: (slave wireguard0): making interface the new active one
[  473.849217][T21811] wireguard0: entered promiscuous mode
[  473.852207][T21811] bond1: (slave wireguard0): Enslaving as an active interface with an up link
[  473.855784][T21796] lo speed is unknown, defaulting to 1000
[  473.857488][T21811] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  473.859782][T21811] IPv6: NLM_F_CREATE should be set when creating new route
[  473.861847][T21811] IPv6: NLM_F_CREATE should be set when creating new route
[  473.864335][T21811] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  473.877615][T21811] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address
[  473.884722][T21811] bond1: (slave wireguard1): Enslaving as a backup interface with an up link
[  474.029750][T21825] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  474.032268][T21824] syzkaller0: entered promiscuous mode
[  474.034098][T21824] syzkaller0: entered allmulticast mode
[  474.094082][T21825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4636'.
[  474.105605][T21824] tipc: Resetting bearer <eth:syzkaller0>
[  474.125945][T21825] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  474.155956][T21825] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  474.169313][T21823] tipc: Resetting bearer <eth:syzkaller0>
[  474.184159][T21823] tipc: Disabling bearer <eth:syzkaller0>
[  474.329499][T21845] netlink: 'syz.1.4641': attribute type 3 has an invalid length.
[  474.353561][T21846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4640'.
[  474.356805][T21846] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4640'.
[  474.371340][T21848] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  474.466381][T21850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4643'.
[  474.559720][T21855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4645'.
[  474.566583][T21855] netlink: 'syz.2.4645': attribute type 1 has an invalid length.
[  474.592144][T21855] bond12: entered promiscuous mode
[  474.595727][T21855] 8021q: adding VLAN 0 to HW filter on device bond12
[  474.813807][T21863] tipc: Resetting bearer <eth:syzkaller0>
[  474.863789][T21865] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  475.280431][T21872] vlan2: entered promiscuous mode
[  475.282151][T21872] bond0: entered promiscuous mode
[  475.283906][T21872] bond_slave_0: entered promiscuous mode
[  475.285879][T21872] bond_slave_1: entered promiscuous mode
[  475.287868][T21872] vlan2: entered allmulticast mode
[  475.289506][T21872] bond0: entered allmulticast mode
[  475.294931][T21872] bond_slave_0: entered allmulticast mode
[  475.296962][T21872] bond_slave_1: entered allmulticast mode
[  475.427152][T21885] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode
[  475.431864][T21885] bridge_slave_0: left allmulticast mode
[  475.433703][T21885] bridge_slave_0: left promiscuous mode
[  475.437069][T21885] bridge0: port 1(bridge_slave_0) entered disabled state
[  475.440796][T21885] bridge_slave_1: left allmulticast mode
[  475.442542][T21885] bridge_slave_1: left promiscuous mode
[  475.444410][T21885] bridge0: port 2(bridge_slave_1) entered disabled state
[  475.448880][T21885] bond0: (slave bond_slave_0): Releasing backup interface
[  475.451332][T21885] bond_slave_0: left promiscuous mode
[  475.453238][T21885] bond_slave_0: left allmulticast mode
[  475.458627][T21885] bond0: (slave bond_slave_1): Releasing backup interface
[  475.462838][T21885] bond_slave_1: left promiscuous mode
[  475.464606][T21885] bond_slave_1: left allmulticast mode
[  475.469197][T21885] team0: Port device team_slave_0 removed
[  475.471863][T21885] team0: Port device team_slave_1 removed
[  475.473861][T21885] batman_adv: batadv0: Removing interface: batadv_slave_0
[  475.476763][T21885] batman_adv: batadv0: Removing interface: batadv_slave_1
[  475.479241][T21885] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  475.497758][T21885] netlink: 'syz.0.4655': attribute type 10 has an invalid length.
[  475.500136][T21885] mac80211_hwsim hwsim17 wlan1: left allmulticast mode
[  475.502405][T21885] bond0: (slave wlan1): refused to change device type
[  475.506129][T21885] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  475.508892][T21885] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  475.538454][ T5910] tipc: Subscription rejected, illegal request
[  475.874492][T21909] netlink: 'syz.2.4663': attribute type 6 has an invalid length.
[  476.149298][T21926] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  476.163314][T21926] netlink: 'syz.1.4671': attribute type 10 has an invalid length.
[  476.166434][T21926] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  476.351067][T21937] xt_bpf: check failed: parse error
[  476.468040][T21936] lo speed is unknown, defaulting to 1000
[  476.504032][   T10] lo speed is unknown, defaulting to 1000
[  476.509424][   T10] syz1: Port: 1 Link DOWN
[  476.883039][T21957] x_tables: duplicate underflow at hook 1
[  477.266736][T21966] block nbd2: Unsupported socket: should be TCP or UNIX.
[  477.356345][T21969] xt_bpf: check failed: parse error
[  477.404980][T21968] lo speed is unknown, defaulting to 1000
[  477.912540][T21992] lo speed is unknown, defaulting to 1000
[  478.214831][T22015] lo speed is unknown, defaulting to 1000
[  478.963111][T22042] bond1: left promiscuous mode
[  478.973510][T22042] wireguard0: left promiscuous mode
[  479.010585][T22042] vlan2: left promiscuous mode
[  479.012680][T22042] bond0: left promiscuous mode
[  479.015949][T22042] vlan2: left allmulticast mode
[  479.017976][T22042] bond0: left allmulticast mode
[  479.088117][T22047] netlink: 'syz.0.4709': attribute type 1 has an invalid length.
[  479.270417][T22056] netlink: 'syz.2.4712': attribute type 6 has an invalid length.
[  479.282668][T22057] xt_bpf: check failed: parse error
[  479.379202][T22054] lo speed is unknown, defaulting to 1000
[  479.527482][T22077] bridge: RTM_NEWNEIGH with invalid ether address
[  479.538424][T22078] __nla_validate_parse: 59 callbacks suppressed
[  479.538438][T22078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4716'.
[  479.758546][T22077] lo speed is unknown, defaulting to 1000
[  481.297222][   T12] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  481.300758][   T12] bond0 (unregistering): Released all slaves
[  481.308231][   T12] bond1 (unregistering): Released all slaves
[  481.315847][   T12] bond2 (unregistering): Released all slaves
[  481.405569][   T12] bond3 (unregistering): Released all slaves
[  481.448924][T22125] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4731'.
[  481.481900][   T12] bond4 (unregistering): Released all slaves
[  481.493073][   T12] bond5 (unregistering): Released all slaves
[  481.504192][   T12] bond6 (unregistering): Released all slaves
[  481.579650][   T12] bond7 (unregistering): Released all slaves
[  481.643244][   T12] bond8 (unregistering): Released all slaves
[  481.669357][T22125] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4731'.
[  481.675240][T22125] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4731'.
[  481.733876][   T12] : left promiscuous mode
[  481.813405][   T12] tipc: Left network mode
[  481.932684][T22147] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  481.997109][T22149] netlink: 'syz.0.4737': attribute type 10 has an invalid length.
[  481.999615][T22149] bond0: (slave wlan1): refused to change device type
[  482.016377][   T12] hsr_slave_0: left promiscuous mode
[  482.018699][   T12] hsr_slave_1: left promiscuous mode
[  482.045908][   T12] pimreg (unregistering): left allmulticast mode
[  482.379490][ T7579] smc: removing ib device !yz!
[  482.892013][T22154] x_tables: duplicate underflow at hook 1
[  482.900463][T22156] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  482.911805][T22156] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  482.979878][T22156] batadv_slave_1: entered allmulticast mode
[  482.985967][T22156] netlink: 'syz.1.4740': attribute type 10 has an invalid length.
[  482.988820][T22156] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  483.007020][T22156] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  483.010781][T22156] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  483.094072][T22169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4743'.
[  483.149726][   T12] IPVS: stop unused estimator thread 0...
[  483.803655][T22179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4746'.
[  483.809496][T22179] netlink: 'syz.1.4746': attribute type 1 has an invalid length.
[  483.834339][T22179] bond24: entered promiscuous mode
[  483.836927][T22179] 8021q: adding VLAN 0 to HW filter on device bond24
[  483.842231][T22179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4746'.
[  483.849406][T22180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4746'.
[  483.852949][T22179] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4746'.
[  483.856878][T22180] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4746'.
[  483.884088][T22183] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode
[  483.911156][T22183] netlink: 'syz.0.4747': attribute type 10 has an invalid length.
[  483.913682][T22183] mac80211_hwsim hwsim17 wlan1: left allmulticast mode
[  483.918057][T22183] bond0: (slave wlan1): refused to change device type
[  483.923650][T22186] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  483.928270][T22186] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  485.070322][T22227] lo speed is unknown, defaulting to 1000
[  485.254489][T22249] xt_l2tp: v2 doesn't support IP mode
[  485.257114][T22243] batadv_slave_1: left allmulticast mode
[  485.259958][T22243] bond24: left promiscuous mode
[  485.602647][T22264] __nla_validate_parse: 3 callbacks suppressed
[  485.602693][T22264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4771'.
[  487.107933][T22292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4781'.
[  487.677087][T22308] netlink: 'syz.0.4784': attribute type 1 has an invalid length.
[  488.290168][T22367] netlink: 'syz.2.4797': attribute type 1 has an invalid length.
[  488.303433][T22367] bond13: entered promiscuous mode
[  488.305514][T22367] 8021q: adding VLAN 0 to HW filter on device bond13
[  488.331231][T22366] 8021q: adding VLAN 0 to HW filter on device bond13
[  488.333676][T22366] bond13: (slave gre2): The slave device specified does not support setting the MAC address
[  488.339492][T22366] bond13: (slave gre2): Setting fail_over_mac to active for active-backup mode
[  488.342702][T22366] bond13: (slave gre2): Opening slave failed
[  488.690296][T22400] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4802'.
[  488.810403][T22406] netlink: 'syz.1.4804': attribute type 1 has an invalid length.
[  488.813308][T22406] netlink: 'syz.1.4804': attribute type 2 has an invalid length.
[  488.821700][T22409] lo speed is unknown, defaulting to 1000
[  488.833030][T22406] netlink: 'syz.1.4804': attribute type 1 has an invalid length.
[  488.835543][T22406] netlink: 'syz.1.4804': attribute type 2 has an invalid length.
[  488.869327][T22411] xt_bpf: check failed: parse error
[  488.930609][T22418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4806'.
[  488.945498][T22418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4806'.
[  488.948516][T22418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4806'.
[  489.703614][T22425] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode
[  489.706068][T22425] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode
[  489.917271][T22438] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4813'.
[  490.693114][T22450] lo speed is unknown, defaulting to 1000
[  490.765985][T22454] bond3 (unregistering): Released all slaves
[  490.770665][T22459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4821'.
[  490.791110][T22459] netlink: 'syz.1.4821': attribute type 1 has an invalid length.
[  490.806654][T22459] bond25: entered promiscuous mode
[  490.808539][T22459] 8021q: adding VLAN 0 to HW filter on device bond25
[  490.812489][T22459] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4821'.
[  490.816679][T22459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4821'.
[  490.819634][T22459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4821'.
[  490.963058][T22470] netlink: 34 bytes leftover after parsing attributes in process `syz.1.4823'.
[  491.554004][T22493] netlink: 'syz.2.4828': attribute type 21 has an invalid length.
[  491.591028][T22493] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4828'.
[  491.594542][T22493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4828'.
[  491.734004][T22499] netlink: 'syz.0.4829': attribute type 4 has an invalid length.
[  491.740307][T22499] netlink: 'syz.0.4829': attribute type 4 has an invalid length.
[  492.211176][T22507] lo speed is unknown, defaulting to 1000
[  492.476284][T22513] lo speed is unknown, defaulting to 1000
[  492.512492][T22515] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  492.525467][T22513] xt_bpf: check failed: parse error
[  492.536532][T22515] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  492.540247][T22515] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  493.622619][T22532] lo speed is unknown, defaulting to 1000
[  493.919583][T22549] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4846'.
[  494.250968][T22561] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4851'.
[  494.257115][T22561] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  494.261919][T22561] validate_nla: 1 callbacks suppressed
[  494.261932][T22561] netlink: 'syz.0.4851': attribute type 32 has an invalid length.
[  494.361800][T22565] netlink: 732 bytes leftover after parsing attributes in process `syz.0.4853'.
[  495.094814][ T5815] Bluetooth: hci0: command 0x0405 tx timeout
[  495.370361][T22582] lo speed is unknown, defaulting to 1000
[  495.595926][T22597] netlink: 'syz.2.4863': attribute type 4 has an invalid length.
[  495.601175][T22597] netlink: 'syz.2.4863': attribute type 4 has an invalid length.
[  495.825640][T22606] netlink: 'syz.1.4866': attribute type 1 has an invalid length.
[  495.900572][T22612] __nla_validate_parse: 3 callbacks suppressed
[  495.900584][T22612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4868'.
[  496.339894][T22619] tipc: Resetting bearer <eth:syzkaller0>
[  496.356357][T22619] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode
[  496.360522][T22619] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode
[  496.370207][T22619] bond12: left promiscuous mode
[  496.431881][T22627] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4875'.
[  496.507083][T22635] netlink: 'syz.0.4877': attribute type 8 has an invalid length.
[  496.508761][T22631] lo speed is unknown, defaulting to 1000
[  496.509835][T22635] netlink: 'syz.0.4877': attribute type 9 has an invalid length.
[  496.514001][T22635] netlink: 'syz.0.4877': attribute type 10 has an invalid length.
[  496.519182][T22635] netlink: 'syz.0.4877': attribute type 11 has an invalid length.
[  496.521503][T22635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4877'.
[  496.609062][T22639] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4878'.
[  496.612662][T22639] netlink: 300 bytes leftover after parsing attributes in process `syz.0.4878'.
[  496.618935][T22639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4878'.
[  497.661746][T22670] lo speed is unknown, defaulting to 1000
[  497.790360][T22678] lo speed is unknown, defaulting to 1000
[  497.958149][T22685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4890'.
[  498.072835][T22696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4894'.
[  498.440600][T22730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4901'.
[  499.043962][T22744] lo speed is unknown, defaulting to 1000
[  499.296502][T22752] Bluetooth: MGMT ver 1.23
[  499.298570][T22752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4907'.
[  499.312084][T22752] lo speed is unknown, defaulting to 1000
[  499.929827][T22779] Unsupported xt match
[  499.929845][T22779] unable to load match
[  500.270409][T22786] lo speed is unknown, defaulting to 1000
[  500.841099][T22824] netlink: 'syz.1.4928': attribute type 21 has an invalid length.
[  501.019745][T22833] lo speed is unknown, defaulting to 1000
[  501.131609][T22840] __nla_validate_parse: 9 callbacks suppressed
[  501.131622][T22840] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4931'.
[  501.138501][T22840] netlink: 'syz.1.4931': attribute type 5 has an invalid length.
[  501.426278][T22855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4934'.
[  501.556318][T22866] netlink: 'syz.0.4937': attribute type 1 has an invalid length.
[  501.580470][T22866] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address
[  501.585214][T22866] bond3: (slave vxcan3): Error -95 calling set_mac_address
[  503.071541][T22883] lo speed is unknown, defaulting to 1000
[  504.286738][T22919] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4951'.
[  504.290652][T22922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4952'.
[  504.298324][T22921] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4951'.
[  504.301758][T22918] sctp: [Deprecated]: syz.2.4951 (pid 22918) Use of int in maxseg socket option.
[  504.301758][T22918] Use struct sctp_assoc_value instead
[  504.537999][T22940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4955'.
[  504.540777][T22939] lo speed is unknown, defaulting to 1000
[  504.556639][T22935] syzkaller1: entered promiscuous mode
[  504.558661][T22935] syzkaller1: entered allmulticast mode
[  505.253938][T22946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4958'.
[  505.275895][T22946] netlink: 'syz.2.4958': attribute type 8 has an invalid length.
[  505.278249][T22946] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4958'.
[  505.529203][T22960] netlink: 'syz.2.4963': attribute type 6 has an invalid length.
[  505.542184][T22960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4963'.
[  505.553051][T22960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4963'.
[  505.603241][T22970] x_tables: duplicate underflow at hook 1
[  505.609638][T22970] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  505.644273][T22969] lo speed is unknown, defaulting to 1000
[  505.665926][T22973] netlink: 'syz.0.4969': attribute type 21 has an invalid length.
[  505.669069][T22973] netlink: 'syz.0.4969': attribute type 4 has an invalid length.
[  506.599654][T23025] sctp: [Deprecated]: syz.0.4986 (pid 23025) Use of struct sctp_assoc_value in delayed_ack socket option.
[  506.599654][T23025] Use struct sctp_sack_info instead
[  506.713444][T23028] __nla_validate_parse: 4 callbacks suppressed
[  506.713459][T23028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4987'.
[  506.722874][T23028] netlink: 71 bytes leftover after parsing attributes in process `syz.0.4987'.
[  506.982563][T23043] macsec0: entered promiscuous mode
[  506.985487][T23043] ip6gretap0: entered promiscuous mode
[  506.987829][T23043] macsec0: entered allmulticast mode
[  506.989626][T23043] ip6gretap0: entered allmulticast mode
[  507.043317][T23046] lo speed is unknown, defaulting to 1000
[  507.359974][T23052] dvmrp1: tun_chr_ioctl cmd 1074025677
[  507.362304][T23052] dvmrp1: linktype set to 769
[  507.480805][T23057] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4997'.
[  507.499539][T23057] netlink: 'syz.2.4997': attribute type 1 has an invalid length.
[  507.911025][T23090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5007'.
[  507.914341][T23090] IPv6: NLM_F_REPLACE set, but no existing node found!
[  508.026771][T23099] netlink: 'syz.1.5010': attribute type 1 has an invalid length.
[  508.149419][T23105] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5011'.
[  508.761437][T23109] netlink: 134788 bytes leftover after parsing attributes in process `syz.2.5012'.
[  508.857640][T23115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5015'.
[  508.890533][T23119] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  509.404335][T23158] netlink: 'syz.2.5026': attribute type 2 has an invalid length.
[  509.796632][T23174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5033'.
[  509.827123][T23176] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5034'.
[  509.879781][T23181] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5035'.
[  510.195641][T23194] lo speed is unknown, defaulting to 1000
[  511.012009][T23216] lo speed is unknown, defaulting to 1000
[  511.049328][T23218] Bluetooth: MGMT ver 1.23
[  511.923564][T23241] netlink: 'syz.2.5052': attribute type 1 has an invalid length.
[  512.065951][T23244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5054'.
[  512.225296][T23252] netlink: 'syz.0.5056': attribute type 4 has an invalid length.
[  512.230268][T23252] netlink: 'syz.0.5056': attribute type 4 has an invalid length.
[  512.982410][T23259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5058'.
[  513.011347][T23261] lo speed is unknown, defaulting to 1000
[  513.035024][T23263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5060'.
[  513.043944][T23263] : entered promiscuous mode
[  513.049313][T23263] netlink: 'syz.0.5060': attribute type 1 has an invalid length.
[  513.064444][T23263] bond4: entered promiscuous mode
[  513.067116][T23263] 8021q: adding VLAN 0 to HW filter on device bond4
[  513.082489][T23263] 8021q: adding VLAN 0 to HW filter on device bond4
[  513.086212][T23263] bond4: (slave gre1): The slave device specified does not support setting the MAC address
[  513.090260][T23263] bond4: (slave gre1): Setting fail_over_mac to active for active-backup mode
[  513.094552][T23263] bond4: (slave gre1): Opening slave failed
[  513.126142][T23268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5060'.
[  513.133857][T23268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5060'.
[  513.317808][T23277] lo speed is unknown, defaulting to 1000
[  513.468922][T23287] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2
[  513.517957][T23287] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5065'.
[  513.664592][T23299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5068'.
[  513.669262][T23299] netlink: 'syz.1.5068': attribute type 1 has an invalid length.
[  513.685833][T23299] bond26: entered promiscuous mode
[  513.687634][T23299] 8021q: adding VLAN 0 to HW filter on device bond26
[  513.708073][T23299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5068'.
[  513.712210][T23299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5068'.
[  513.848902][T23307] bond25: left promiscuous mode
[  513.854148][T23307] ip6gretap0: left allmulticast mode
[  513.856441][T23307] ip6gretap0: left promiscuous mode
[  513.858427][T23307] macsec0: left promiscuous mode
[  513.860195][T23307] macsec0: left allmulticast mode
[  513.866340][T23307] bond26: left promiscuous mode
[  513.883281][T23307] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5069'.
[  514.360780][T23309] lo speed is unknown, defaulting to 1000
[  514.744458][T23321] netlink: 'syz.2.5074': attribute type 298 has an invalid length.
[  514.791126][T23327] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode
[  514.793292][T23327] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode
[  514.796453][T23327] tipc: Resetting bearer <eth:syzkaller0>
[  515.303969][T23331] lo speed is unknown, defaulting to 1000
[  515.452229][T23336] x_tables: duplicate entry at hook 1
[  515.498469][T23338] lo speed is unknown, defaulting to 1000
[  515.713269][T23350] lo speed is unknown, defaulting to 1000
[  515.956975][T23356] lo speed is unknown, defaulting to 1000
[  516.191226][T23364] tipc: Resetting bearer <eth:syzkaller0>
[  516.201528][T23364] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode
[  516.203811][T23364] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode
[  516.456049][T23373] netlink: 'syz.0.5086': attribute type 29 has an invalid length.
[  516.460707][T23373] netlink: 'syz.0.5086': attribute type 29 has an invalid length.
[  517.213181][T23439] __nla_validate_parse: 1 callbacks suppressed
[  517.213194][T23439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5098'.
[  517.220310][T23439] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.5098'.
[  517.367598][T23447] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma?
[  517.371088][T23449] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5102'.
[  517.385268][T23449] netlink: 'syz.0.5102': attribute type 2 has an invalid length.
[  517.388405][T23449] netlink: 'syz.0.5102': attribute type 2 has an invalid length.
[  517.478588][T23451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5103'.
[  517.492024][T23451] team1: entered promiscuous mode
[  517.493889][T23451] team1: entered allmulticast mode
[  517.496730][T23451] 8021q: adding VLAN 0 to HW filter on device team1
[  517.583511][T23462] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5105'.
[  517.593072][T23462] netlink: 35 bytes leftover after parsing attributes in process `syz.0.5105'.
[  517.603188][T23462] netlink: 'syz.0.5105': attribute type 6 has an invalid length.
[  517.615010][T23462] netlink: 'syz.0.5105': attribute type 5 has an invalid length.
[  517.617272][T23462] netlink: 35 bytes leftover after parsing attributes in process `syz.0.5105'.
[  517.620040][T23462] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5105'.
[  517.622651][T23462] netlink: 35 bytes leftover after parsing attributes in process `syz.0.5105'.
[  517.633585][T23462] netlink: 'syz.0.5105': attribute type 6 has an invalid length.
[  517.640169][T23462] netlink: 35 bytes leftover after parsing attributes in process `syz.0.5105'.
[  517.940997][T23495] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  518.157638][T23508] lo speed is unknown, defaulting to 1000
[  518.705879][T23514] validate_nla: 3 callbacks suppressed
[  518.705892][T23514] netlink: 'syz.0.5120': attribute type 2 has an invalid length.
[  518.738990][T23517] Unknown options in mask b7f2
[  518.857683][T23522] netlink: 'syz.2.5122': attribute type 1 has an invalid length.
[  519.108379][T23535] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  520.259544][T23569] xt_l2tp: v2 tid > 0xffff: 37482740
[  520.582872][T23584] lo speed is unknown, defaulting to 1000
[  520.672906][T23592] lo speed is unknown, defaulting to 1000
[  520.712293][T23592] 8021q: VLANs not supported on wg2
[  520.745672][T23595] netlink: 'syz.0.5145': attribute type 1 has an invalid length.
[  520.769102][T23595] bond5: entered promiscuous mode
[  520.770837][T23595] 8021q: adding VLAN 0 to HW filter on device bond5
[  520.809549][T23595] 8021q: adding VLAN 0 to HW filter on device bond5
[  520.811859][T23595] bond5: (slave gre1): The slave device specified does not support setting the MAC address
[  520.814932][T23595] bond5: (slave gre1): Setting fail_over_mac to active for active-backup mode
[  520.818075][T23595] bond5: (slave gre1): Opening slave failed
[  521.036921][T23606] netlink: 'syz.0.5146': attribute type 29 has an invalid length.
[  521.042103][T23606] netlink: 'syz.0.5146': attribute type 29 has an invalid length.
[  521.045051][T23606] netlink: 'syz.0.5146': attribute type 29 has an invalid length.
[  521.049224][T23606] netlink: 'syz.0.5146': attribute type 29 has an invalid length.
[  521.051673][T23606] netlink: 'syz.0.5146': attribute type 29 has an invalid length.
[  522.246137][T23649] __nla_validate_parse: 11 callbacks suppressed
[  522.246150][T23649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5162'.
[  522.261669][T23649] 8021q: adding VLAN 0 to HW filter on device bond6
[  522.324579][T23654] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5164'.
[  522.327959][T23654] netlink: 35 bytes leftover after parsing attributes in process `syz.0.5164'.
[  522.331760][T23654] netlink: 'syz.0.5164': attribute type 6 has an invalid length.
[  522.334105][T23654] netlink: 'syz.0.5164': attribute type 5 has an invalid length.
[  522.338921][T23654] netlink: 35 bytes leftover after parsing attributes in process `syz.0.5164'.
[  522.483472][T23663] lo speed is unknown, defaulting to 1000
[  522.673497][T23675] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode
[  522.677982][T23675] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  522.685457][T23675] mac80211_hwsim hwsim17 wlan1: left allmulticast mode
[  522.687818][T23675] bond0: (slave wlan1): refused to change device type
[  522.690868][T23675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5173'.
[  522.695455][T23675] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  522.699738][T23675] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  523.431432][T23686] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5176'.
[  523.512513][T23690] lo speed is unknown, defaulting to 1000
[  523.652155][T23698] 8021q: adding VLAN 0 to HW filter on device bond27
[  523.811059][T23710] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5184'.
[  523.894099][T23720] validate_nla: 4 callbacks suppressed
[  523.894111][T23720] netlink: 'syz.1.5188': attribute type 6 has an invalid length.
[  524.078387][T23732] lo speed is unknown, defaulting to 1000
[  524.090168][T23742] netlink: 'syz.1.5193': attribute type 2 has an invalid length.
[  524.451195][T23755] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5198'.
[  524.456145][T23755] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5198'.
[  524.459575][T23755] netlink: 27 bytes leftover after parsing attributes in process `syz.0.5198'.
[  524.462707][T23755] netlink: 'syz.0.5198': attribute type 6 has an invalid length.
[  524.465853][T23755] netlink: 'syz.0.5198': attribute type 5 has an invalid length.
[  524.470324][T23755] netlink: 'syz.0.5198': attribute type 4 has an invalid length.
[  524.477115][T23755] netlink: 'syz.0.5198': attribute type 4 has an invalid length.
[  524.516467][T23757] netlink: 'syz.0.5199': attribute type 6 has an invalid length.
[  524.647659][T23763] lo speed is unknown, defaulting to 1000
[  526.091067][T23804] netlink: 'syz.1.5214': attribute type 14 has an invalid length.
[  526.093926][T23804] netlink: 'syz.1.5214': attribute type 11 has an invalid length.
[  526.108788][T23806] netlink: 'syz.2.5215': attribute type 6 has an invalid length.
[  526.269491][T23820] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  526.274282][T23820] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  526.306453][T23820] mac80211_hwsim hwsim11 wlan1: left allmulticast mode
[  526.312553][T23820] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  526.319011][T23820] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  526.402279][T23834] xt_l2tp: invalid flags combination: 8
[  526.447099][T23843] x_tables: unsorted entry at hook 1
[  527.378849][T23869] __nla_validate_parse: 6 callbacks suppressed
[  527.380895][T23869] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5232'.
[  527.551063][T23878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5233'.
[  528.179228][T23891] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5237'.
[  528.706537][T23919] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  528.816738][T23926] syzkaller1: entered promiscuous mode
[  528.818745][T23926] syzkaller1: entered allmulticast mode
[  528.982848][T23929] netlink: 'syz.1.5250': attribute type 11 has an invalid length.
[  529.069429][T23931] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5251'.
[  529.072215][T23931] netlink: 35 bytes leftover after parsing attributes in process `syz.1.5251'.
[  529.075136][T23931] validate_nla: 2 callbacks suppressed
[  529.075150][T23931] netlink: 'syz.1.5251': attribute type 6 has an invalid length.
[  529.079999][T23931] netlink: 'syz.1.5251': attribute type 5 has an invalid length.
[  529.082822][T23931] netlink: 35 bytes leftover after parsing attributes in process `syz.1.5251'.
[  529.094275][T23931] netlink: 'syz.1.5251': attribute type 4 has an invalid length.
[  529.102542][T23931] netlink: 'syz.1.5251': attribute type 4 has an invalid length.
[  529.109144][ T5843] lo speed is unknown, defaulting to 1000
[  529.113910][ T5843] syz1: Port: 1 Link ACTIVE
[  529.235602][T23943] netlink: 566 bytes leftover after parsing attributes in process `syz.2.5255'.
[  529.389149][T23950] netlink: 'syz.2.5257': attribute type 1 has an invalid length.
[  529.410352][T23950] bond15: (slave vxcan5): The slave device specified does not support setting the MAC address
[  529.413789][T23950] bond15: (slave vxcan5): Error -95 calling set_mac_address
[  529.904581][T23969] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  530.008671][T23972] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5264'.
[  530.011919][T23972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5264'.
[  530.014994][T23972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5264'.
[  530.027997][T23972] vlan4: entered allmulticast mode
[  530.030071][T23972] bridge0: entered allmulticast mode
[  530.084344][T21525] lo speed is unknown, defaulting to 1000
[  530.087437][T21525] syz1: Port: 1 Link DOWN
[  530.290236][T23985] block nbd2: Unsupported socket: should be TCP or UNIX.
[  531.596073][T24064] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40
[  531.616348][T24064] bond16: entered promiscuous mode
[  531.618200][T24064] 8021q: adding VLAN 0 to HW filter on device bond16
[  532.574308][T24091] __nla_validate_parse: 2 callbacks suppressed
[  532.574325][T24091] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5302'.
[  532.807683][ T7581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  532.814463][ T7581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  532.927595][T24123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5313'.
[  533.087478][T24129] team1: left promiscuous mode
[  533.089049][T24129] team1: left allmulticast mode
[  533.150502][T24131] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode
[  533.157772][T24131] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  533.184489][T24131] netlink: 'syz.0.5318': attribute type 10 has an invalid length.
[  533.186999][T24131] mac80211_hwsim hwsim17 wlan1: left promiscuous mode
[  533.189226][T24131] bond0: (slave wlan1): refused to change device type
[  533.192807][T24131] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  533.195671][T24131] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  533.762857][T24145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5320'.
[  533.942099][T24158] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5325'.
[  534.008635][T24162] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5326'.
[  534.012464][T24162] netlink: 516 bytes leftover after parsing attributes in process `syz.0.5326'.
[  534.279176][T24188] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5332'.
[  534.281999][T24188] netlink: 35 bytes leftover after parsing attributes in process `syz.2.5332'.
[  534.285035][T24188] netlink: 'syz.2.5332': attribute type 6 has an invalid length.
[  534.287664][T24188] netlink: 'syz.2.5332': attribute type 5 has an invalid length.
[  534.290202][T24188] netlink: 35 bytes leftover after parsing attributes in process `syz.2.5332'.
[  534.342153][T24188] netlink: 'syz.2.5332': attribute type 4 has an invalid length.
[  534.347161][T24188] netlink: 'syz.2.5332': attribute type 4 has an invalid length.
[  534.499288][T24198] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5336'.
[  534.531512][T24198] lo speed is unknown, defaulting to 1000
[  535.348531][T24234] lo speed is unknown, defaulting to 1000
[  535.481410][T24241] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  535.538648][T24244] lo speed is unknown, defaulting to 1000
[  535.577189][T24250] netlink: 'syz.2.5352': attribute type 4 has an invalid length.
Connection to localhost closed by remote host.
[  535.774327][T15221] ==================================================================
[  535.777323][T15221] BUG: KASAN: slab-use-after-free in __mutex_lock+0x801/0x1350
[  535.780032][T15221] Read of size 8 at addr ffff8881bb6580a0 by task khidpd_16c05505/15221
[  535.783953][T15221] 
[  535.784863][T15221] CPU: 0 UID: 0 PID: 15221 Comm: khidpd_16c05505 Not tainted syzkaller #0 PREEMPT(full) 
[  535.784881][T15221] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  535.784891][T15221] Call Trace:
[  535.784898][T15221]  <TASK>
[  535.784906][T15221]  dump_stack_lvl+0x189/0x250
[  535.784927][T15221]  ? __kasan_check_byte+0x12/0x40
[  535.784950][T15221]  ? __pfx_dump_stack_lvl+0x10/0x10
[  535.784967][T15221]  ? lock_release+0x4b/0x3e0
[  535.784984][T15221]  ? __virt_addr_valid+0x4a5/0x5c0
[  535.785006][T15221]  print_report+0xca/0x240
[  535.785023][T15221]  ? __mutex_lock+0x801/0x1350
[  535.785041][T15221]  kasan_report+0x118/0x150
[  535.785055][T15221]  ? __mutex_lock+0x801/0x1350
[  535.785073][T15221]  __mutex_lock+0x801/0x1350
[  535.785092][T15221]  ? __mutex_lock+0x5bb/0x1350
[  535.785109][T15221]  ? l2cap_unregister_user+0x6a/0x1b0
[  535.785154][T15221]  ? __pfx___mutex_lock+0x10/0x10
[  535.785171][T15221]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  535.785194][T15221]  l2cap_unregister_user+0x6a/0x1b0
[  535.785209][T15221]  hidp_session_thread+0x3c9/0x410
[  535.785229][T15221]  ? __pfx_hidp_session_thread+0x10/0x10
[  535.785244][T15221]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  535.785260][T15221]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  535.785278][T15221]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  535.785294][T15221]  ? __kthread_parkme+0x7b/0x200
[  535.785309][T15221]  ? __kthread_parkme+0x1a1/0x200
[  535.785325][T15221]  kthread+0x711/0x8a0
[  535.785343][T15221]  ? __pfx_hidp_session_thread+0x10/0x10
[  535.785359][T15221]  ? __pfx_kthread+0x10/0x10
[  535.785377][T15221]  ? _raw_spin_unlock_irq+0x23/0x50
[  535.785391][T15221]  ? lockdep_hardirqs_on+0x9c/0x150
[  535.785408][T15221]  ? __pfx_kthread+0x10/0x10
[  535.785425][T15221]  ret_from_fork+0x4bc/0x870
[  535.785441][T15221]  ? __pfx_ret_from_fork+0x10/0x10
[  535.785457][T15221]  ? __switch_to_asm+0x39/0x70
[  535.785468][T15221]  ? __switch_to_asm+0x33/0x70
[  535.785478][T15221]  ? __pfx_kthread+0x10/0x10
[  535.785495][T15221]  ret_from_fork_asm+0x1a/0x30
[  535.785513][T15221]  </TASK>
[  535.785519][T15221] 
[  535.860072][T15221] Allocated by task 10791:
[  535.861688][T15221]  kasan_save_track+0x3e/0x80
[  535.863471][T15221]  __kasan_kmalloc+0x93/0xb0
[  535.865257][T15221]  __kmalloc_noprof+0x411/0x7f0
[  535.867087][T15221]  hci_alloc_dev_priv+0x28/0x2060
[  535.868975][T15221]  vhci_create_device+0x120/0x650
[  535.870874][T15221]  vhci_write+0x3ce/0x4a0
[  535.872500][T15221]  vfs_write+0x5c9/0xb30
[  535.874094][T15221]  ksys_write+0x145/0x250
[  535.875723][T15221]  do_syscall_64+0xfa/0xfa0
[  535.877416][T15221]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.879565][T15221] 
[  535.880487][T15221] Freed by task 10791:
[  535.882017][T15221]  kasan_save_track+0x3e/0x80
[  535.883759][T15221]  __kasan_save_free_info+0x46/0x50
[  535.885691][T15221]  __kasan_slab_free+0x5c/0x80
[  535.887497][T15221]  kfree+0x19a/0x6d0
[  535.888997][T15221]  bt_host_release+0x82/0x90
[  535.890762][T15221]  device_release+0x9c/0x1c0
[  535.892548][T15221]  kobject_put+0x22b/0x480
[  535.894257][T15221]  vhci_release+0x15a/0x1a0
[  535.895988][T15221]  __fput+0x44c/0xa70
[  535.897517][T15221]  task_work_run+0x1d4/0x260
[  535.899304][T15221]  do_exit+0x6b5/0x2300
[  535.900901][T15221]  do_group_exit+0x21c/0x2d0
[  535.902688][T15221]  __x64_sys_exit_group+0x3f/0x40
[  535.904615][T15221]  x64_sys_call+0x21f7/0x2200
[  535.906398][T15221]  do_syscall_64+0xfa/0xfa0
[  535.908138][T15221]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.910304][T15221] 
[  535.911207][T15221] Last potentially related work creation:
[  535.913319][T15221]  kasan_save_stack+0x3e/0x60
[  535.915087][T15221]  kasan_record_aux_stack+0xbd/0xd0
[  535.917043][T15221]  insert_work+0x3d/0x330
[  535.918650][T15221]  __queue_work+0xcd2/0xfb0
[  535.920404][T15221]  queue_work_on+0x181/0x270
[  535.922136][T15221]  l2cap_start_connection+0x20e/0x310
[  535.924082][T15221]  l2cap_chan_connect+0xa7f/0xe30
[  535.926004][T15221]  l2cap_sock_connect+0x5c8/0x7a0
[  535.927886][T15221]  __sys_connect+0x316/0x440
[  535.929655][T15221]  __x64_sys_connect+0x7a/0x90
[  535.931465][T15221]  do_syscall_64+0xfa/0xfa0
[  535.933158][T15221]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.935364][T15221] 
[  535.936289][T15221] Second to last potentially related work creation:
[  535.938666][T15221]  kasan_save_stack+0x3e/0x60
[  535.940461][T15221]  kasan_record_aux_stack+0xbd/0xd0
[  535.942439][T15221]  insert_work+0x3d/0x330
[  535.944065][T15221]  __queue_work+0xbaf/0xfb0
[  535.945802][T15221]  queue_work_on+0x181/0x270
[  535.947521][T15221]  process_scheduled_works+0xae1/0x17b0
[  535.949616][T15221]  worker_thread+0x8a0/0xda0
[  535.951385][T15221]  kthread+0x711/0x8a0
[  535.952919][T15221]  ret_from_fork+0x4bc/0x870
[  535.954699][T15221]  ret_from_fork_asm+0x1a/0x30
[  535.956498][T15221] 
[  535.957413][T15221] The buggy address belongs to the object at ffff8881bb658000
[  535.957413][T15221]  which belongs to the cache kmalloc-8k of size 8192
[  535.962415][T15221] The buggy address is located 160 bytes inside of
[  535.962415][T15221]  freed 8192-byte region [ffff8881bb658000, ffff8881bb65a000)
[  535.967392][T15221] 
[  535.968087][T15221] The buggy address belongs to the physical page:
[  535.969895][T15221] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1bb658
[  535.972375][T15221] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  535.974784][T15221] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  535.976940][T15221] page_type: f5(slab)
[  535.978116][T15221] raw: 057ff00000000040 ffff888100042280 ffffea0006e8e400 dead000000000004
[  535.980483][T15221] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  535.982940][T15221] head: 057ff00000000040 ffff888100042280 ffffea0006e8e400 dead000000000004
[  535.985630][T15221] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  535.988218][T15221] head: 057ff00000000003 ffffea0006ed9601 00000000ffffffff 00000000ffffffff
[  535.990761][T15221] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  535.993429][T15221] page dumped because: kasan: bad access detected
[  535.995408][T15221] page_owner tracks the page as allocated
[  535.997152][T15221] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5556, tgid 5556 (dhcpcd), ts 37621560592, free_ts 34080908216
[  536.003218][T15221]  post_alloc_hook+0x240/0x2a0
[  536.004682][T15221]  get_page_from_freelist+0x2365/0x2440
[  536.006363][T15221]  __alloc_frozen_pages_noprof+0x181/0x370
[  536.008077][T15221]  alloc_pages_mpol+0x232/0x4a0
[  536.009515][T15221]  allocate_slab+0x96/0x3a0
[  536.010877][T15221]  ___slab_alloc+0xe94/0x18a0
[  536.012310][T15221]  __slab_alloc+0x65/0x100
[  536.013639][T15221]  __kmalloc_node_track_caller_noprof+0x5c7/0x800
[  536.015589][T15221]  kmalloc_reserve+0x136/0x290
[  536.017022][T15221]  __alloc_skb+0x142/0x2d0
[  536.018377][T15221]  netlink_dump+0x167/0xe90
[  536.019720][T15221]  netlink_recvmsg+0x676/0xa30
[  536.021129][T15221]  sock_recvmsg+0x22c/0x270
[  536.022568][T15221]  ____sys_recvmsg+0x1c9/0x460
[  536.024009][T15221]  ___sys_recvmsg+0x1b5/0x510
[  536.025400][T15221]  __x64_sys_recvmsg+0x198/0x260
[  536.026830][T15221] page last free pid 5265 tgid 5265 stack trace:
[  536.028728][T15221]  __free_frozen_pages+0xbc4/0xd30
[  536.030237][T15221]  __slab_free+0x2e7/0x390
[  536.031540][T15221]  qlist_free_all+0x97/0x140
[  536.033125][T15221]  kasan_quarantine_reduce+0x148/0x160
[  536.034746][T15221]  __kasan_slab_alloc+0x22/0x80
[  536.036300][T15221]  __kmalloc_noprof+0x3c3/0x7f0
[  536.037783][T15221]  tomoyo_encode+0x28b/0x550
[  536.039168][T15221]  tomoyo_realpath_from_path+0x58d/0x5d0
[  536.040742][T15221]  tomoyo_path_perm+0x213/0x4b0
[  536.042267][T15221]  security_inode_getattr+0x12f/0x330
[  536.043848][T15221]  vfs_statx+0x18e/0x550
[  536.045142][T15221]  vfs_fstatat+0x118/0x170
[  536.046465][T15221]  __x64_sys_newfstatat+0x116/0x190
[  536.048000][T15221]  do_syscall_64+0xfa/0xfa0
[  536.049387][T15221]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  536.051122][T15221] 
[  536.051842][T15221] Memory state around the buggy address:
[  536.053562][T15221]  ffff8881bb657f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  536.055943][T15221]  ffff8881bb658000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  536.058417][T15221] >ffff8881bb658080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  536.060770][T15221]                                ^
[  536.062407][T15221]  ffff8881bb658100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  536.064802][T15221]  ffff8881bb658180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  536.067242][T15221] ==================================================================
[  536.069980][T15221] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  536.072607][T15221] CPU: 0 UID: 0 PID: 15221 Comm: khidpd_16c05505 Not tainted syzkaller #0 PREEMPT(full) 
[  536.076155][T15221] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  536.079088][T15221] Call Trace:
[  536.080088][T15221]  <TASK>
[  536.080976][T15221]  dump_stack_lvl+0x99/0x250
[  536.082460][T15221]  ? __asan_memcpy+0x40/0x70
[  536.084048][T15221]  ? __pfx_dump_stack_lvl+0x10/0x10
[  536.085577][T15221]  ? __pfx__printk+0x10/0x10
[  536.086925][T15221]  vpanic+0x237/0x6d0
[  536.088156][T15221]  ? __pfx_vpanic+0x10/0x10
[  536.089684][T15221]  panic+0xb9/0xc0
[  536.090889][T15221]  ? __pfx_panic+0x10/0x10
[  536.092215][T15221]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  536.094178][T15221]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  536.095967][T15221]  ? __mutex_lock+0x801/0x1350
[  536.097484][T15221]  check_panic_on_warn+0x89/0xb0
[  536.099229][T15221]  ? __mutex_lock+0x801/0x1350
[  536.100650][T15221]  end_report+0x78/0x160
[  536.102017][T15221]  kasan_report+0x129/0x150
[  536.103303][T15221]  ? __mutex_lock+0x801/0x1350
[  536.104678][T15221]  __mutex_lock+0x801/0x1350
[  536.105994][T15221]  ? __mutex_lock+0x5bb/0x1350
[  536.107377][T15221]  ? l2cap_unregister_user+0x6a/0x1b0
[  536.108895][T15221]  ? __pfx___mutex_lock+0x10/0x10
[  536.110414][T15221]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  536.112300][T15221]  l2cap_unregister_user+0x6a/0x1b0
[  536.113914][T15221]  hidp_session_thread+0x3c9/0x410
[  536.115783][T15221]  ? __pfx_hidp_session_thread+0x10/0x10
[  536.117709][T15221]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  536.119446][T15221]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  536.121284][T15221]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  536.123077][T15221]  ? __kthread_parkme+0x7b/0x200
[  536.124582][T15221]  ? __kthread_parkme+0x1a1/0x200
[  536.126277][T15221]  kthread+0x711/0x8a0
[  536.127758][T15221]  ? __pfx_hidp_session_thread+0x10/0x10
[  536.129625][T15221]  ? __pfx_kthread+0x10/0x10
[  536.131023][T15221]  ? _raw_spin_unlock_irq+0x23/0x50
[  536.132536][T15221]  ? lockdep_hardirqs_on+0x9c/0x150
[  536.134200][T15221]  ? __pfx_kthread+0x10/0x10
[  536.135657][T15221]  ret_from_fork+0x4bc/0x870
[  536.137322][T15221]  ? __pfx_ret_from_fork+0x10/0x10
[  536.139185][T15221]  ? __switch_to_asm+0x39/0x70
[  536.140910][T15221]  ? __switch_to_asm+0x33/0x70
[  536.142651][T15221]  ? __pfx_kthread+0x10/0x10
[  536.144329][T15221]  ret_from_fork_asm+0x1a/0x30
[  536.145794][T15221]  </TASK>
[  536.147311][T15221] Kernel Offset: disabled
[  536.148778][T15221] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:13:18  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000073 RBX=0000000000000073 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90008607350
R8 =ffff88816a168237 R9 =1ffff1102d42d046 R10=dffffc0000000000 R11=ffffffff8514baa0
R12=dffffc0000000000 R13=ffffffff997d4925 R14=ffffffff99ae7f00 R15=0000000000000000
RIP=ffffffff8514bb1c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818eb40000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f897199dfc8 CR3=000000000dd38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f8970db7498 00007f8970db7470 XMM03=00007f8970db74a8 00007f8970db74a0
XMM04=00007f897191d100 00007f8970db7460 XMM05=00007f8970db7478 00007f8970db74c0
XMM06=00007f8970db74b8 00007f8970db74b0 XMM07=00007f8970db74a8 00007f8970db74a0
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f8970c1315a
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b494ab RBX=1ffff11024248449 RCX=ffff88810bc18000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90008957600 RSP=ffffc90008957480
R8 =ffffffff8f7ccb77 R9 =1ffffffff1ef996e R10=dffffc0000000000 R11=fffffbfff1ef996f
R12=ffff888121242248 R13=dffffc0000000000 R14=ffff88823c63b200 R15=0000000000000000
RIP=ffffffff81b49493 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f89719bf6c0 ffffffff 00c00000
GS =0000 ffff8882a9f40000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f89719befc8 CR3=000000000dd38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f2b92c1315a
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
